Codex Security Files

Highlights

• stream large saved scan JSON output (#932)
• prefer complete saved rollout copies (#933)
• support custom patch validation prompts (#940)
• bump @opencode-ai/sdk from 1.18.29 to 1.18.30 in /plugins/codex-security/skills/triage-finding/evals in the third-party group across 1 directory (#936)
• bump @linear/sdk from 93.0.1 to 94.0.0 in /sdk/typescript (#937)
• seal drafts with empty artifact lists (#941)
• include Terraform files in scan inventories (#944)
• run README CLI commands with npx (#945)
• resolve Git metadata outside its config (#935)
• redirect findings service root to dashboard (#948)
• bound source preview reads (#947)
• align filter controls and dropdown carets (#949)
• match filter control borders (#957)
• make dashboard tables sortable (#958)
• bump @linear/sdk from 94.0.0 to 95.0.0 in /sdk/typescript (#955)
• tolerate transient setup failures and slow Windows runners (#953)
• reject line breaks in inventory paths. (#961)
• bump the third-party group across 3 directories with 7 updates (#954)
• keep model-authored runtime status out of finalized reports (#703)
• show progress while patching findings (#931)
• deduplicate string-form openQuestions in merge_saved_results (#951)
• emit structured JSON errors for failed scans (#709)
• preserve undecided findings after model refusals (#960)

Upgrade notes

Review compatibility and document any required migration steps before releasing.

What's Changed

Features

• feat(cli): support custom patch validation prompts by @kmbroai in https://github.com/openai/codex-security/pull/940
• feat(serve): make dashboard tables sortable by @mluck-openai in https://github.com/openai/codex-security/pull/958

Fixes

• fix(logs): stream large saved scan JSON output by @mldangelo-oai in https://github.com/openai/codex-security/pull/932
• fix(logs): prefer complete saved rollout copies by @mldangelo-oai in https://github.com/openai/codex-security/pull/933
• fix: seal drafts with empty artifact lists by @ianw-oai in https://github.com/openai/codex-security/pull/941
• fix(plugin): include Terraform files in scan inventories by @mluck-openai in https://github.com/openai/codex-security/pull/944
• fix(targets): resolve Git metadata outside its config by @mldangelo-oai in https://github.com/openai/codex-security/pull/935
• fix: redirect findings service root to dashboard by @mluck-openai in https://github.com/openai/codex-security/pull/948
• fix(plugin): bound source preview reads by @mluck-openai in https://github.com/openai/codex-security/pull/947
• fix(dashboard): align filter controls and dropdown carets by @mluck-openai in https://github.com/openai/codex-security/pull/949
• fix(dashboard): match filter control borders by @mluck-openai in https://github.com/openai/codex-security/pull/957
• fix(ci): tolerate transient setup failures and slow Windows runners by @mldangelo-oai in https://github.com/openai/codex-security/pull/953
• fix: reject line breaks in inventory paths. by @mluck-openai in https://github.com/openai/codex-security/pull/961
• fix(plugin): keep model-authored runtime status out of finalized reports by @russlan23 in https://github.com/openai/codex-security/pull/703
• fix(cli): show progress while patching findings by @ianw-oai in https://github.com/openai/codex-security/pull/931
• fix(workbench): deduplicate string-form openQuestions in merge_saved_results by @Ultron09 in https://github.com/openai/codex-security/pull/951
• fix(cli): emit structured JSON errors for failed scans by @Hughhhhcoder in https://github.com/openai/codex-security/pull/709
• fix(dedupe): preserve undecided findings after model refusals by @milan-oai in https://github.com/openai/codex-security/pull/960

Documentation

• docs: run README CLI commands with npx by @mluck-openai in https://github.com/openai/codex-security/pull/945

Other changes

• chore(deps): bump @opencode-ai/sdk from 1.18.29 to 1.18.30 in /plugins/codex-security/skills/triage-finding/evals in the third-party group across 1 directory by @dependabot[bot] in https://github.com/openai/codex-security/pull/936
• chore(deps): bump @linear/sdk from 93.0.1 to 94.0.0 in /sdk/typescript by @dependabot[bot] in https://github.com/openai/codex-security/pull/937
• chore(deps): bump @linear/sdk from 94.0.0 to 95.0.0 in /sdk/typescript by @dependabot[bot] in https://github.com/openai/codex-security/pull/955
• chore(deps): bump the third-party group across 3 directories with 7 updates by @dependabot[bot] in https://github.com/openai/codex-security/pull/954

New Contributors

• @mluck-openai made their first contribution in https://github.com/openai/codex-security/pull/944
• @russlan23 made their first contribution in https://github.com/openai/codex-security/pull/703
• @milan-oai made their first contribution in https://github.com/openai/codex-security/pull/960

Full Changelog: https://github.com/openai/codex-security/compare/npm-v0.1.28...npm-v0.1.29