Skip to content

codex

vrust-v0.134.0 scope: rust Breaking

This release includes 1 breaking change for platform teams planning a safe upgrade.

✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Affected surfaces

breaking_upgrade auth

ReleasePort's take

Moderate signal
editorial:auto 8d

Version rust‑v0.134.0 adds search across local conversation history with case‑insensitive matches and previews, while making `--profile` the primary selector and rejecting legacy selectors.

Why it matters: The new case‑insensitive search improves CLI/TUI usability; however, the breaking change to `--profile` (severity 80) requires updating all configuration that uses legacy profile selectors before upgrade.

Summary

AI summary

Updates Changelog Full Changelog: https://github.com/openai/codex/compare/rust-v0.133.0...rust-v0.134.0, Bug Fixes, and New Features across a mixed release.

Changes in this release

Breaking High

Makes `--profile` the primary profile selector and rejects legacy selectors.

Makes `--profile` the primary profile selector and rejects legacy selectors.

Source: llm_adapter@2026-05-26

Confidence: high

Feature Medium

Adds search across local conversation history with case‑insensitive matches and previews.

Adds search across local conversation history with case‑insensitive matches and previews.

Source: llm_adapter@2026-05-26

Confidence: high

Feature Medium

Improves MCP setup with per‑server environment targeting and OAuth options for HTTP servers.

Improves MCP setup with per‑server environment targeting and OAuth options for HTTP servers.

Source: llm_adapter@2026-05-26

Confidence: high

Feature Low

Makes connector tool schemas more reliable by preserving `$ref`/`$defs` and compacting oversized schemas.

Makes connector tool schemas more reliable by preserving `$ref`/`$defs` and compacting oversized schemas.

Source: llm_adapter@2026-05-26

Confidence: high

Feature Low

Allows read‑only MCP tools to run concurrently when they advertise `readOnlyHint`.

Allows read‑only MCP tools to run concurrently when they advertise `readOnlyHint`.

Source: llm_adapter@2026-05-26

Confidence: high

Feature Low

Adds richer extension and hook context, including conversation history and subagent identity.

Adds richer extension and hook context, including conversation history and subagent identity.

Source: llm_adapter@2026-05-26

Confidence: high

Bugfix Medium

Restores Windows TUI rendering by re‑enabling virtual terminal mode before drawing.

Restores Windows TUI rendering by re‑enabling virtual terminal mode before drawing.

Source: llm_adapter@2026-05-26

Confidence: high

Bugfix Medium

Displays workspace‑specific usage‑limit messages for credit and spend‑cap failures.

Displays workspace‑specific usage‑limit messages for credit and spend‑cap failures.

Source: llm_adapter@2026-05-26

Confidence: high

Bugfix Medium

Allows plugin skills to reuse shared plugin‑level icon assets.

Allows plugin skills to reuse shared plugin‑level icon assets.

Source: llm_adapter@2026-05-26

Confidence: high

Bugfix Medium

Ensures Node‑based tools honor Codex’s managed network proxy environment.

Ensures Node‑based tools honor Codex’s managed network proxy environment.

Source: llm_adapter@2026-05-26

Confidence: high

Full changelog

New Features

  • Added search across local conversation history, including case-insensitive content matches with result previews. (#23519, #23921)
  • Made --profile the primary profile selector across CLI, TUI permissions, and sandbox flows, with legacy profile configs rejected through migration guidance. (#23708, #23883, #23890, #24051, #24055, #24059, #24067, #24110)
  • Improved MCP setup with per-server environment targeting and OAuth options for streamable HTTP servers. (#23583, #24120)
  • Made connector tool schemas more reliable by preserving local $ref/$defs structures and compacting oversized schemas before exposure. (#23357, #23904)
  • Let read-only MCP tools run concurrently when they advertise readOnlyHint. (#23750)
  • Added richer extension and hook context, including conversation history for extension tools and subagent identity in hook inputs. (#22882, #23963)

Bug Fixes

  • Improved remote reliability by reconnecting stale exec-server websocket clients, retrying remote control immediately after auth recovery, and retrying remote compaction v2 streams. (#23867, #23775, #23951)
  • Fixed Windows TUI rendering corruption by restoring virtual terminal mode before drawing. (#24082)
  • Displayed workspace-specific usage-limit messages for credit and spend-cap failures. (#24114)
  • Allowed plugin skills to reuse shared plugin-level icon assets. (#23776)
  • Preserved active permission profile metadata when syncing auto-review runtime settings. (#23956)
  • Ensured Node-based tools honor Codex’s managed network proxy environment. (#23905)

Documentation

  • Documented the curl and PowerShell installer paths in the README. (#24106)
  • Updated developer docs to prefer just test over direct cargo test for repo-local test runs. (#23910)
  • Added profile migration documentation links to relevant config errors. (#23879)

Chores

  • Simplified release packaging around canonical native artifacts, reusable DotSlash fetching, and a new macOS x64 zsh artifact. (#23833, #23836, #24129, #24165)
  • Added release-build support for Codex-produced V8 artifacts. (#23934)
  • Added image re-encoding benchmarks and connector-style JSON schema policy fixtures. (#23935, #24152)
  • Improved tracing and analytics for websocket requests, turn starts, and remote compaction v2. (#23581, #23980, #24146)

Changelog

Full Changelog: https://github.com/openai/codex/compare/rust-v0.133.0...rust-v0.134.0

  • #23581 Trace logical websocket request after untraced warmup @jif-oai
  • #23718 [codex] Steer budget-limited goal extension turns @jif-oai
  • #23861 fix: cargo lock @jif-oai
  • #23728 feat: retain remote compaction truncation parity in v2 @jif-oai
  • #23870 Make tool executor specs mandatory @jif-oai
  • #23882 [codex] Stabilize subagent start hook test @jif-oai
  • #23876 refactor: centralize tool exposure planning @jif-oai
  • #23879 chore: link doc in profile error messages @jif-oai
  • #23883 cli: rename profile v2 flag to --profile @jif-oai
  • #23835 docs: add description to codex-cli/package.json @bolinfest
  • #23583 Route MCP servers through explicit environments @starr-openai
  • #23886 cli: remove legacy profile v1 plumbing @jif-oai
  • #23708 tui: plumb permission profile selection @viyatb-oai
  • #23833 packaging: move rg manifest out of npm bin @bolinfest
  • #23796 Improve /goal error messages for ephemeral sessions @etraut-openai
  • #23867 Reconnect disconnected exec-server websocket clients with fresh sessions @starr-openai
  • #23792 TUI: skip goal replace prompt for completed goals @etraut-openai
  • #23519 [codex] Add rollout-backed thread content search @fc-oai
  • #22552 Remove plugin hooks feature flag @abhinav-oai
  • #23836 npm: remove legacy package artifact synthesis @bolinfest
  • #23921 [codex] Make thread search case-insensitive @fc-oai
  • #23775 fix(remote-control): retry after auth recovery @apanasenko-oai
  • #22882 Add subagent identity to hook inputs @abhinav-oai
  • #22915 [3 of 4] tui: route feature and memory toggles through app server @etraut-openai
  • #23776 fix: Allow plugin skills to share plugin-level icon assets @xl-openai
  • #23860 Add Bedrock Mantle GovCloud region @CHARLESPALEN-OAI
  • #23956 Fix auto-review permission profile override @etraut-openai
  • #23357 feat: support local refs and defs in tool input schemas @celia-oai
  • #23963 Expose conversation history to extension tools @sayan-oai
  • #23904 feat: best-effort compact large tool schemas @celia-oai
  • #23750 Allow parallel MCP tool calls when annotated readOnly @anp-oai
  • #23905 [codex] Enable Node env proxy for managed network proxy @rreichel3-oai
  • #23890 mcp: surface profile migration guidance under --profile @jif-oai
  • #24051 config: remove legacy profile v1 resolution @jif-oai
  • #24055 config: remove legacy profile write paths @jif-oai
  • #24057 Avoid config snapshots in live agent subtree traversal @jif-oai
  • #24061 otel: drop legacy profile usage telemetry @jif-oai
  • #24059 fix: reject legacy profile selectors @jif-oai
  • #23934 ci: Use codex produced v8 artifacts for release builds @cconger
  • #24099 fix(app-server): fix optional bool annotations @owenlin0
  • #23910 Prefer just test over cargo test in docs @anp-oai
  • #23951 retry remote compaction v2 requests @rhan-oai
  • #24081 tui: make codex-tui.log opt-in @jif-oai
  • #24102 cli: infer host sandbox backend @bolinfest
  • #24067 app-server: drop legacy profile config surface @jif-oai
  • #23736 Add new enterprise requirement gate @adams-oai
  • #24117 [codex] Use rolling files for Windows sandbox logs @iceweasel-oai
  • #24106 docs: update README.md to mention curl-based installer @bolinfest
  • #24082 fix(tui): restore Windows VT before TUI renders @fcoury-oai
  • #24110 cli: support --profile for codex sandbox @bolinfest
  • #23980 Add trace_id to TurnStartedEvent @mchen-oai
  • #24120 Support OAuth options in codex mcp add @mzeng-openai
  • #23989 Add typed Images client to codex-api @won-openai
  • #24146 [codex-analytics] split compaction v2 analytics implementation @rhan-oai
  • #24129 package: factor DotSlash executable fetching @bolinfest
  • #24151 [codex] Use TurnInput for session task input @pakrym-oai
  • #23935 [codex] Add image re-encoding benchmarks @anp-oai
  • #24152 chore: add JSON schema policy fixture coverage @celia-oai
  • #24157 [codex] Remove external client session reset plumbing @pakrym-oai
  • #24114 Display workspace usage limit error copy from response header @dhruvgupta-oai
  • #24165 release: build macOS x64 zsh artifact @bolinfest

Breaking Changes

  • Legacy profile v1 configuration (flag and config paths) is rejected; migration guidance required to use `--profile`.

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track codex

Get notified when new releases ship.

Sign up free

About codex

All releases →

Beta — feedback welcome: [email protected]