Codex changelog & version tracker
Continuously monitored from upstream releases, docs and issues. Routine releases publish automatically and the current version below is limited to a small allowlist of fields; everything else is reviewed by a human before it appears here.
Change timeline
- release
Codex CLI 0.167.0 released, adds Vertex AI setup wizard and system proxy opt-in
Codex CLI 0.167.0 was published 2026-11-06, following 0.166.0 (2026-10-29). New features include an agent command center (codex agents --no-daemon), a Google Cloud Vertex AI setup wizard (gcp_setup_wizard) alongside existing API-key sign-in options, and an option to opt into macOS/Windows system proxy settings from /experimental. Bug fixes include changes to network approval prompts and context-compaction accounting.
Source ↗ - release
Codex 0.166.0 adds `codex queue --resume` for unloaded threads
The 0.166.0 release adds a new command to resume threads that were unloaded after a message was queued, relevant to users who queue work and reconnect later (e.g. over SSH on a VPS).
Source ↗ - release
Codex 0.165.0 ships Vertex AI provider, GPT-6.1 Terra, and attached thread forks
Stable release 0.165.0 (2026-10-27) adds a built-in Google Cloud Vertex AI model provider (model_provider = "gcp"), adds GPT-6.1 Terra to the model catalogs, adds a repository filter and directory grouping to the session picker/command center, and adds experimental attached thread forks to the app-server API. Also fixes TUI approval-reviewer defaults on fresh startup, keeps TUI preferences editable with invalid execution settings, cancels remote MCP tool requests when response futures drop, stops queued agent messages restarting after interrupt/Plan-mode switch, and stops retrying when a provider reports a model not found.
Source ↗ - release
Codex 0.164.0 stable ships presets, inline /model and /permissions args, image preview, and a default-enabled Bedrock setup wizard
0.164.0 was tagged stable on 2026-10-23, following 0.164.0-alpha.1 through alpha.12. New features include numbered /presets slots, inline arguments for /model and /permissions, fullscreen image preview on Kitty/Sixel terminals, enterprise MCP OAuth authentication, and credential masking during remote Bash/Zsh sessions. The Amazon Bedrock setup wizard is now on by default, surfacing API key entry alongside AWS sign-in methods — relevant for BYOK users on alternative providers. Bug fixes cover compaction panics, session-resume settings restoration, Windows proxy Negotiate/NTLM auth, config-override precedence, and macOS sandbox path/symlink hardening.
Source ↗ - release
Codex 0.162.1 patches TUI crash and background-server feature-mismatch startup failure
A quick patch release following 0.162.0, fixing a TUI crash triggered by multi-line asynchronous questions and a startup failure caused by mismatches between a running background server's feature settings and CLI defaults. Compatibility checks now apply only to explicit command-line feature overrides, narrowing the scope of a check that previously could block startup.
Source ↗ - releasenotice
Codex 0.162.0 ships worktree tools, pinned tasks, clickable transcript links, and sandbox fixes
Stable 0.162.0 landed 2026-10-08, promoted from the alpha train immediately after 0.161.0. It adds managed Git worktree tooling, pinnable Command Center tasks, transcript /copy navigation, clickable links in approval/warning dialogs, configurable web access and remote compaction for custom Responses-compatible providers, and JS SDK streaming helpers. Bug fixes cover Linux sandbox startup with multiple denied files, Windows drive-letter file access on Windows 10, and honoring server Retry-After guidance.
Source ↗ - release
Codex CLI 0.160.1 ships Windows remote MCP environment-preservation backport
A point release backports a fix that preserves SYSTEMROOT, TEMP, and TMP when launching remote stdio MCP servers with explicitly configured remote environment variables, letting Unix hosts retain the Windows executor's startup environment.
Source ↗ - release
Codex CLI 0.160.0 ships with Windows console-window fix, queued-message resume, and Guardian review additions
After weeks of alpha-only churn with empty changelogs, 0.160.0 was promoted to stable on 2026-10-01 with a substantive changelog. It fixes the long-tracked Windows background-helper console-window flash (previously a content-idea placeholder), repairs Windows sandbox PowerShell fallbacks and long-path ACLs, prevents duplicate sends of queued messages after reconnection, preserves TUI provider/reasoning/verbosity settings across resume and fork, fixes SQLite connection stalls, and adds opt-in Guardian review context from agent handoffs. Published simultaneously to npm as 0.160.0.
Source ↗ - release
Codex CLI 0.159.3 released with account security reminders
0.159.3 backports a feature showing optional reminders to complete account security setup for eligible local ChatGPT-signed-in sessions. This is now the latest stable release on GitHub and npm, shipped about 23 hours after 0.159.2.
Source ↗ - release
0.159.2 backports full fix for Windows console-window flashing
0.159.2 backports a fix that suppresses console windows flashing on Windows when Codex launches background processes and sandboxed commands. This directly addresses the previously-diagnosed Windows console-window-flash issue (root-caused to the shared app-server daemon spawning visible console windows for hooks and shell commands).
Source ↗ - release
0.159.1 sets GPT-6.1 Sol as the default model, including for Bedrock
0.159.1 (a backport release) changed the default model in the bundled catalog to GPT-6.1 Sol, and applied the same default to the Amazon Bedrock Mantle and Runtime catalogs, affecting default behavior for BYO-key and Bedrock-routed setups that don't pin a model explicitly.
Source ↗ - release
0.159.0 adds mid-turn steering, App Server pagination, and Windows console-window fixes
0.159.0 shipped a stable release superseding 0.158.0, adding an opt-in instant_interrupt mode that lets new user input steer Codex during model responses or long-running code-mode calls, a compact welcome screen, transcript scrolling during plan review, app-server thread pagination, and additional Windows console-window suppression for MCP servers, code-mode hosts and piped commands. It also fixed macOS TLS access in network-enabled sandboxes and remote environments requiring proxy access, relevant to VPS/remote setups.
Source ↗ - releasenotice
Codex 0.158.0 stable released, changes default approval behavior for elevated commands
0.158.0 shipped as the new stable release after several weeks of alpha churn on the 0.158.0 line. Notable changes: terminal input approval is now enabled by default for commands running with elevated permissions (previously runtime-only grants could skip review), MCP OAuth client-secret support was added, exec-server WebSocket connections can now require bearer tokens, and several sandbox bugs were fixed on Windows and Linux/macOS. This is relevant to BYO-key and automation users who rely on unattended approval behavior.
Source ↗ - release
Codex 0.157.1 published to stable with no documented functional changes
0.157.1 shipped to GitHub and npm on 2026-09-26, one day after 0.157.0. The release notes indicate the automated changelog generation failed to produce PR-level highlights, so no user-facing changes are documented for this point release.
Source ↗ - releasenotice
0.157.0 promoted to stable: GPT-6 Bedrock support, fullscreen TUI default, auto-starting background server
0.157.0 shipped as the new stable release (confirmed on both GitHub and npm), superseding the 0.156.1 hotfix. It adds Amazon Bedrock support for GPT-6 Sol/Luna with migration prompts, makes the fullscreen transcript UI the default (with Shift-click text selection), and enables automatic background-server startup for eligible interactive sessions.
Source ↗ - release
Alpha churn now spans three parallel pre-release tracks simultaneously
Following the 0.156.0 stable release and its 0.156.1 hotfix, upstream continued shipping 0.157.0-alpha builds through alpha.11, patched the older 0.155.0-alpha.16 line with .16.3 and .16.4, and started an entirely new 0.158.0-alpha series (through alpha.6) within the same 48 hours — three concurrent alpha lines active at once.
Source ↗ - release
0.156.1 hotfix adds GPT-6 Sol and Luna to the stable model catalog
A same-week hotfix to 0.156.0 adds GPT-6 Sol and GPT-6 Luna to the model picker in the stable release, resolving reports that GPT-6 Sol was only reachable via alpha builds (#47420) despite being available in the desktop app.
Source ↗ - release
Codex CLI/Desktop 0.156.0 ships stable with fullscreen TUI, voice-by-default, /usage dashboard, worktrees
After weeks of parallel alpha churn (0.156.0-alpha.1 through alpha.17 plus a concurrent 0.157.0-alpha series), 0.156.0 reached stable on 2026-09-22 with a full changelog. New: optional fullscreen /tui with transcript search and mouse selection; voice conversations enabled by default with an F8 toggle; a new /usage analytics dashboard; task filtering and default worktree sessions in the agent command center; /daemon control with --no-daemon bypass; six new terminal themes plus Mermaid/equation rendering. Fixes include preserving streamed answers on interrupted turns, restoring Plan mode on resume, recovering OAuth/proxy logins on 503s, and closing several sandbox isolation gaps (Windows inbound connections, privileged Linux/macOS sockets, read-only macOS file-handle writes).
Source ↗ - release
Alpha channel churn escalates to a parallel 0.157.0-alpha track while 0.156.0 remains unreleased as stable
Pre-release activity continued at high volume: 0.156.0-alpha builds progressed through alpha.17, and a new 0.157.0-alpha.1 through alpha.3 series began before any 0.156.0 stable release shipped. All entries carry empty or placeholder changelogs ('Release 0.157.0-alpha.3'), consistent with the unlabeled churn pattern noted previously. Only stable release remains 0.155.1.
Source ↗ - releasenotice
0.155.1 patches reasoning-summary default that broke Bedrock and other provider sessions
0.155.1 shipped less than 24 hours after 0.155.0 to restore 'none' as the default TUI reasoning-summary setting for new local sessions, fixing request rejection by providers that don't support the reasoning.summary parameter 0.155.0 started sending by default (the regression tracked last cycle against Bedrock sessions). Explicit user-set reasoning-summary configs are unaffected.
Source ↗ - releasenotice
Codex CLI 0.155.0 released with voice mode, TUI reasoning summaries, and WSL sandbox hardening
After weeks of unlabeled alpha builds since 0.154.0, 0.155.0 shipped with a full changelog. New features include experimental /voice conversations, live reasoning summaries and completion timestamps in the TUI, task hide/archive/delete in the agents overview, Touch ID verification for local MCP requests on Mac, configurable app-server daemon updates, and Bedrock AWS credential commands with caching/refresh. Fixes include preserving accepted prompts when compaction fails, tmux resize/transcript-viewport fixes, accurate MCP OAuth-expiry reporting, more reliable automatic approval reviews, invalidation of remote-control sessions on account switch, and hardening against Windows-process escapes from restricted WSL sandboxes.
Source ↗ - release
Codex CLI 0.154.0 stable released with worktree support, inline question answering, and Windows background server
The 0.154.0 stable release (npm-confirmed) adds experimental multi-worktree session support, the ability to answer clarification questions inline without losing the main draft, a shared background Codex server for Windows with daemon lifecycle commands, a Vim replace mode, and GPT-6-Astra availability in the model picker and Bedrock catalogs.
Source ↗ - releasenotice
Codex 0.153.4 fixes GPT-6-Astra model-picker visibility and makes it the default when no model is set
0.153.4 (2026-09-04) is the fourth same-day hotfix atop 0.153.0. It fixes Astra's absence from the bundled model picker (the defect underlying issue #42853 from last cycle) and changes behavior so that Astra becomes the bundled default model whenever no model is explicitly configured. It also further qualifies Astra's async-clarification-question guidance based on whether the tool is available in the session. npm confirms 0.153.4 as latest as of 2026-09-04T23:31Z.
Source ↗ - release
GPT-6-Astra added to Amazon Bedrock model catalog in 0.153.3
0.153.3 extends GPT-6-Astra availability to Amazon Bedrock Mantle and Runtime global/US routes, relevant to teams running Codex against Bedrock-hosted models on their own infrastructure.
Source ↗ - release
GPT-6-Astra made configurable via API in 0.153.1, ahead of model-picker exposure
The 0.153.1 hotfix lets sessions configure the new GPT-6-Astra model through the API/config without it appearing in the model picker or changing the default model. This is a narrower, API-first rollout path that BYO-key users should be aware of before the model is generally selectable.
Source ↗ - release
0.152.1 patch: Guardian honors Node REPL policies from model metadata
0.152.1, released the same day as 0.152.0, is a single-fix patch release for Guardian approval review handling of Node REPL policies sourced from model metadata.
Source ↗ - releasenotice
0.152.0 released: planning tool disabled by default, Vim search, credential-refresh progress
0.152.0 (2026-09-01) is the first release in this cycle with a real changelog. Notable for existing setups: the planning tool (tools.update_plan) is now disabled by default and must be re-enabled via config.toml. Also added: Vim-mode search in the composer, rate-limit banners with usage/credit actions, visible credential-refresh progress (including Amazon Bedrock reauth), MCP server names supporting ':'/'@'/'/'/'.', per-tool output_token_limit for MCP tools, and configurable thread/shellCommand timeouts beyond one hour. Bug fixes include preserving Guardian approval-review context across history compaction and fixing Windows sandbox execution with Microsoft Store PowerShell.
Source ↗ - release
Codex CLI 0.151.0 stable released
0.151.0 shipped 2026-08-29, three days after 0.150.1. Notable changes: configurable MCP-server discovery grace period, extensions can now inspect/replace MCP tool results before they reach the model, per-repository plugin catalog config, and nested subagent token usage now counts toward root goal budgets. Also fixes model/reasoning-effort correctness on fallback and several remote-sandbox path/OS enforcement issues. npm registry confirms 0.151.0 as latest, published 2026-08-29T09:59:26Z.
Source ↗ - release
Codex 0.150.1 bug fix — remote compaction now budgets retained images
Patch release 0.150.1 backports retained-image token budgeting to remote compaction so older images are trimmed to fit the budget.
Source ↗ - release
Codex 0.150.0 released with @-mentions for tasks, /copy picker, automatic task titles, Markdown link rendering, permission-mode shortcuts, and new Interrupt hooks
The 0.150.0 stable release (2026-08-26) ships several user-facing features: reference other Codex tasks with @-mentions, a /copy picker for full responses/code blocks/blockquotes, automatic descriptive titles for unnamed tasks with /rename suggestions, Markdown links rendered as clickable labels, keybindings to cycle permission modes plus '.' in Vim mode to repeat the last edit, and new 'Interrupt' hooks that fire on top-level turn interrupts. Bug fixes touch untrusted-project AGENTS.md handling, credential redaction, remote MCP bearer-token lookup, Windows sandbox paths under Unicode user dirs, Unix shutdown hangs from detached processes, and conversation compaction for Amazon Bedrock models.
Source ↗ - release
0.148.0-alpha.9
Release 0.148.0-alpha.9
Source ↗ - release
0.148.0-alpha.8
Release 0.148.0-alpha.8
Source ↗ - release
0.148.0-alpha.7
Release 0.148.0-alpha.7
Source ↗ - release
0.147.0-alpha.6.6
Release 0.147.0-alpha.6.6
Source ↗ - release
0.148.0-alpha.6
Release 0.148.0-alpha.6
Source ↗ - release
0.148.0-alpha.5
Release 0.148.0-alpha.5
Source ↗ - release
0.148.0-alpha.4
Release 0.148.0-alpha.4
Source ↗ - release
0.148.0-alpha.2
Release 0.148.0-alpha.2
Source ↗ - release
0.148.0-alpha.1
Release 0.148.0-alpha.1
Source ↗ - release
0.147.0
## New Features - Install portable Agent Plugins and search across local, personal, workspace, and remote plugin catalogs. (#36544, #36409, #36919, #36796) - Organize conversations into persistent, manually ordered sections and browse long transcripts incrementally. (#35722, #36007, #36380, #36948, #36950) - Enable automatically reviewed approvals with the new `--approve-for-me` CLI flag. (#36373) - Import Cursor-managed skills and synchronize changes to imported Claude and Cursor conversations without creating duplicates. (#36361, #36356, #35623) - Support the opt-in MCP 2026-07-28 protocol, including paginated discovery, multi-round requests, and non-blocking server startup. (#35724, #35725, #35590, #35742) - Enable cached web search and remote conversation compaction for Amazon Bedrock. (#36938, #36981) ## Bug Fixes - Redact secrets and complete bearer tokens from displayed commands and replayed conversation history. (#36893, #36908) - Prevent lost or stalled terminal input when focus returns, MCP servers initialize, or Ghostty handles keyboard shortcuts. (#35649, #35957, #36834) - Correct rendering and cursor positioning for Japanese characters, emoji, hyperlinks, and text near viewport boundaries. (#35960, #35962, #37166) - Properly interrupt Windows background processes and handle Windows filesystem paths consistently. (#35655, #35851, #37129) - Require explicit trust for unfamiliar local projects and enforce managed authentication restrictions before credentials are used. (#36960, #37132) - Harden plugin isolation and deny network access when policy updates fail. (#37027, #36967, #36037) ## Documentation - Improve the bundled OpenAI documentation skill with targeted official-source lookup and clearer guidance for Codex, model selection, and API workflows. (#36014) ## Chores - Upgrade the MCP SDK to 3.0.0, Ratatui to 0.30.2, and V8 to 150.4.0. (#36001, #35959, #35831) - Secure macOS release notarization using Azure Key Vault instead of exporting private sig
Source ↗ - release
0.147.0-alpha.13
Release 0.147.0-alpha.13
Source ↗ - release
0.147.0-alpha.12
Release 0.147.0-alpha.12
Source ↗ - release
0.147.0-alpha.6.5
Release 0.147.0-alpha.6.5
Source ↗ - release
0.147.0-alpha.11
Release 0.147.0-alpha.11
Source ↗ - release
0.146.1
## Bug Fixes - Apply safer automatic-review defaults for cyber-capable models and explain permission changes in the terminal interface. (#37057) ## Changelog Full Changelog: https://github.com/openai/codex/compare/rust-v0.146.0...rust-v0.146.1 - #37057 [0.146] Backport safer cyber-model auto-review defaults @anp-oai
Source ↗ - release
0.147.0-alpha.10
Release 0.147.0-alpha.10
Source ↗ - release
0.147.0-alpha.6.4
Release 0.147.0-alpha.6.4
Source ↗ - release
0.147.0-alpha.6.3
Release 0.147.0-alpha.6.3
Source ↗ - release
0.147.0-alpha.6.1
Release 0.147.0-alpha.6.1
Source ↗ - release
0.147.0-alpha.7
Release 0.147.0-alpha.7
Source ↗
Running Codex yourself
Compare it against the alternatives, or deploy it on a managed VPS in one click.