This release adds 3 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+9 more
Affected surfaces
Summary
AI summaryBroad release touches Commit Summary, codex, model-core, and agents.
Full changelog
GPT/Codex Release Hardening
v4.11.1 keeps the 4.11 line installable and safe after the release-gate fixes. GPT 5.3 Codex now stays on the native Sisyphus path, LazyCodex marketplace installs keep the marketplace upgrade and hook re-approval boundary, and CodeGraph MCP paths are normalized before the first Codex session can load them.
Safer Agent and Skill Behavior
Shared model detection now handles recent provider naming variants more reliably, and the programming skill again treats files over 250 pure LOC as a hard architecture defect instead of a soft smell. This keeps generated agent behavior aligned with the release gate.
Verified Harness Surfaces
Before publish, the release gate re-ran Codex live app-server hook proof, Codex install verification, Codex hook-unit probe, Codex TUI smoke, OpenCode TUI smoke, test:codex, typecheck, and focused agent/shared-skill tests.
Minor Compatibility and Stability Release
This release carries compatibility-facing behavior changes and operational hardening. Read the summary below before upgrading or publishing.
- Rename transition updates across package detection, plugin/config compatibility, and install surfaces.
Commit Summary
- b25118001 Merge pull request #5390 from code-yeongyu/release-v4.11.1-state
- 0de6bd523 Merge pull request #5387 from code-yeongyu/fix-codex-marketplace-auto-update
- 6c21a969c Merge pull request #5388 from code-yeongyu/fix-codex-codegraph-mcp-prebootstrap
- 366ce4919 Merge pull request #5386 from code-yeongyu/release-gate-programming-skill-loc-policy-154230
- 72fda247e fix(codex): normalize codegraph mcp path before bootstrap
- f910e1516 Merge pull request #5385 from code-yeongyu/fix-gpt53-codex-sisyphus
- d11ac81f7 fix(codex): preserve marketplace auto-update boundary
- 86ed9ebd5 fix(programming-skill): restore hard LOC gate
- a83ae1306 fix(agents): route gpt-5.3-codex as native Sisyphus
- 5d6ed84d7 Merge pull request #5384 from code-yeongyu/code-yeongyu/main-dirty-cleanup-tests
- 5d5db24ef test(atlas): reset prompt reservations between cases
- cca71407b fix(model-core): normalize non-Claude model version separators
- 9a856a4b8 Merge pull request #5382 from code-yeongyu/code-yeongyu/fix-lazycodex-56-codegraph-mcp-path
- 40be76f25 Merge pull request #5381 from code-yeongyu/feat/glm-prompts-codex-version-sync
- cb36172f3 fix(codex): stamp codegraph MCP path during bootstrap
- 30d36a8e4 fix(agents): route ultrawork GLM prompt
- a249402d4 feat(agents): add GLM prompt variants
- 9952f9789 chore(codex): sync generated installer version
- bae548433 Merge pull request #5380 from code-yeongyu/refactor/programming-skill-code-smells
- b9ab1fab3 refactor(programming-skill): replace absolute 250 LOC rule with code-smell review triggers
- 3606eeab1 Merge pull request #5379 from code-yeongyu/fix/codex-codegraph-startup-hook-output-valid
- 47af76f59 fix(codex): make codegraph startup hook output valid
- 229a367fa Merge pull request #5376 from code-yeongyu/worktree-init-deep-lsp-codegraph
- 28eab5477 fix(init-deep): drive real LSP + codegraph tools instead of a non-existent API
- 201b1811a Merge pull request #5374 from code-yeongyu/fix/codex-auto-update-marketplace-installs
- 910965490 fix(codex-auto-update): update marketplace installs
- af2949026 Merge pull request #5321 from LilMGenius/fix/5285-start-work-bare-session-id
- a29b5009c Merge pull request #5209 from EvangelosMoschou/fix/hasGA1MContext-fable-mythos
- 60cef59c9 Merge pull request #5373 from code-yeongyu/fix/sparkshell-context-output
- 51558ace1 Merge pull request #5190 from WhiteGiverMa/fix/gh-5189-parent-wake-noreply-deadlock
- a327b7cb1 docs(sparkshell): document context ranking
- 4f608b9ee fix(sparkshell): clarify context-only input
- 41cb2f88a fix(sparkshell): stop printing session context
- f6b9ace45 Merge pull request #5362 from code-yeongyu/release/v4.11.0-state
- 4425f17d4 fix(start-work): pass bare session id to SDK session.messages
- 4de953577 test(model-core): fix misleading test name
- d4c5226ac fix(model-core): add claude-fable-5 and claude-mythos-5 to hasGA1MContext
- 407a134aa fix(background-agent): schedule re-flush for reply-required wake after activity window
Thank you to 4 community contributors:
- @WhiteGiverMa:
- fix(background-agent): schedule re-flush for reply-required wake after activity window
- @EvangelosMoschou:
- fix(model-core): add claude-fable-5 and claude-mythos-5 to hasGA1MContext
- test(model-core): fix misleading test name
- @LilMGenius:
- fix(start-work): pass bare session id to SDK session.messages
- @MoerAI:
- Merge pull request #5190 from WhiteGiverMa/fix/gh-5189-parent-wake-noreply-deadlock
- Merge pull request #5209 from EvangelosMoschou/fix/hasGA1MContext-fable-mythos
- Merge pull request #5321 from LilMGenius/fix/5285-start-work-bare-session-id
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Related context
Related tools
Earlier breaking changes
- v4.19.0 Removes legacy Ralph Loop wiring; introduces Goal feature with automatic config migration.
- v4.6.0 Removed broken direct public binary entrypoints from platform launcher packages, keeping them internal.
- v4.6.0 Removed legacy context-window monitor hook path from active hooks and config surfaces.
- v4.4.0 Removes top‑level `lsp` config key; migration required to `.opencode/lsp.json`.
Beta — feedback welcome: [email protected]