Skip to content

CHANGELOG.md

Latest commit

 

History

History
72 lines (54 loc) · 2.95 KB

CHANGELOG.md

File metadata and controls

72 lines (54 loc) · 2.95 KB
Raw

Changelog

All notable Codex Raw changes are documented in this file. Changes inherited from upstream Codex remain documented in the upstream release history.

This project follows Keep a Changelog and uses semantic versioning for the codex-raw executable.

Unreleased

Documentation

  • Published a second release-bound benchmark for the immutable 0.1.1 Windows x64 asset, including sanitized per-sample measurements and exact provenance.

0.1.1 - 2026-07-29

Added

  • A release-bound benchmark report with sanitized per-sample data and exact release, commit, archive, binary, harness, environment, and methodology provenance.

Changed

  • The README now explains the removed Codex agent layer and the retained ChatGPT/Codex account controls near the top of the page.
  • Future release archives include BENCHMARKS.md.
  • Draft release verification now resolves the draft's numeric GitHub release ID before using the REST API, whose tag endpoint does not expose drafts.

Security

  • Updated the shipped dependency closure to patched releases of gix, gix-fs, gix-pack, jsonwebtoken, opentelemetry_sdk, serde_with, tar, and, on Linux, OpenSSL.
  • Moved the OpenTelemetry HTTP exporter to its matching reqwest 0.13 client while preserving custom-CA-only TLS behavior.
  • The inherited Hickory 0.25 resolver remains pinned by Rama 0.3.0-alpha.4. The high-severity NSEC3 issue requires DNSSEC features that Codex Raw does not enable; this release does not claim to fix the remaining Hickory advisories. Moving to stable Rama is a separate breaking API and Rust-toolchain migration.

0.1.0 - 2026-07-29

Added

  • A separate codex-raw executable with isolated local state.
  • Stateless one-shot, persistent JSONL, and OpenAI-compatible local HTTP modes.
  • Responses, Chat Completions, image generation, streaming, and function tools.
  • codex-raw update --check and a user-triggered self-update implementation.
  • Prebuilt release automation for Windows x64, Linux x64, Linux ARM64, and macOS Intel.
  • Focused tests, OpenAI Python SDK smoke checks, and cross-platform validation.

Security

  • Loopback-only default for the HTTP server.
  • Optional bearer-token protection and mandatory protection for non-loopback listeners.
  • Explicit credential exclusions and separate Raw authentication storage.
  • Immutable-release enforcement, exact asset selection, dual SHA-256 verification, bounded archive extraction, and staged binary version checks.
  • Exact-process restart handling on Windows and guarded systemd stop/restart/health-check with best-effort rollback handling on Linux.