Release notes

FEATURE

Opt-in macOS system proxy support for smoother authentication

macOS users in places with strict network controls like corporate offices can now log in without getting blocked. By enabling the respect_system_proxy setting, the system now understands PAC, WPAD (scripts and protocols for automatic proxy configuration), and other system proxies (intermediary servers that forward your network requests) configured on your Mac. Like getting a VIP pass in a highly secured building, your Apple computer can now automatically navigate the checkpoints to get you connected.

FEATURE

Upgraded plugin catalogs with better search and dark mode logos

Finding plugins (add-ons that extend system capabilities) is now much easier. Remote plugin catalogs now provide curated featured-plugin rankings, and MCP (a protocol letting AI control external tools) tools now default to a new tool search mechanism, helping the system discover what you need while staying compatible with older models. Additionally, plugin developers can now provide dedicated logo images specifically for dark mode. Like browsing an app store — the shelves used to be a mess, but now there's a "Featured" section, and the storefronts even put up beautiful neon signs at night.

FEATURE

Clearer errors for remote images and expired Bedrock credentials

When things go wrong, the system no longer just spits out cryptic codes. If your Amazon Bedrock credentials (the keys proving you're a valid user) expire, the system now provides actionable recovery guidance instead of throwing a generic "authorization failed" error; similarly, failing to process remote HTTP images now returns clear validation errors that the AI model can read and explain to you (local images and inline data remain unaffected). Like getting a form rejected at the bank: the teller used to just coldly stamp "Denied," but now they hand you a checklist explaining "Your ID is expired, please go renew it at the government office."

FEATURE

Safer PowerShell execution and quieter successful formatters

Executing PowerShell (a powerful scripting environment on Windows) commands is now safer. If a command contains complex executable blocks (AST regions) that the safety classifier can't inspect, the system will now block it and require your explicit approval, preventing malicious code from sneaking through. Additionally, when the code formatter runs successfully, it now stays quiet, only printing diagnostic messages when something fails; Code Mode will also warn you early if the selected model lacks required metadata. Like airport security: a weird metal box the X-ray machine can't see through will definitively require you to open it manually, while cleared passengers can walk through quietly, with the alarm only sounding when contraband is actually found.

FEATURE

Automatic remote path conversion and richer safety UI

Path formatting headaches are gone when your client and server are on different operating systems (like a Mac connecting to Windows). Remote connected MCP servers can now accept absolute working directories written in the remote platform's native path format, saving you from manually swapping slashes. Meanwhile, the app UI can now consume visibility and faster-model metadata from the server to display a richer safety-buffering UI (a confirmation screen that pauses dangerous actions before they execute). Like sending an international package where you used to have to figure out the exact local address format yourself, but now the postal system automatically translates it for you and puts clearer fragile-handling stickers on the box.

Original changelog

Original changelogOpt-in macOS system proxy support for smoother authentication
macOS authentication clients can honor system proxy, PAC, and WPAD settings when `respect_system_proxy` is enabled. (#26709)
#26709 PAC 4 - Add macOS system proxy resolver @canvrno-oai
Original changelogUpgraded plugin catalogs with better search and dark mode logos
MCP tools now use tool search by default when supported, improving tool discovery while preserving compatibility with older models and providers. (#29486)
Remote plugin catalogs now return curated featured-plugin rankings. (#29485)
Plugins can provide dedicated dark-mode logos through local manifests and remote catalogs. (#29488)
#29486 [codex] Use tool search for MCP tools by default @sayan-oai
#29485 [codex] fetch featured IDs for remote plugins @ericning-o
#29488 [plugins] Add dark-mode logo metadata @drewschuster-openai
#26704 TUI Plugin Sharing 4 - cover remote plugin catalog flows @canvrno-oai
Original changelogClearer errors for remote images and expired Bedrock credentials
Expired Amazon Bedrock credentials now produce actionable recovery guidance instead of a generic authorization error. (#28992)
Remote HTTP(S) image inputs now return clear model-visible validation errors; inline data URLs and local images remain supported. (#29417, #29419)
#28992 chore: improve expired Bedrock credential errors @celia-oai
#29417 [codex] replace remote images with model-visible error text @rka-oai
#29419 [codex] reject remote images at app-server ingress @rka-oai
Original changelogSafer PowerShell execution and quieter successful formatters
PowerShell commands containing executable AST regions the safety classifier cannot inspect now require approval. (#24092)
Successful formatter runs are now quiet while failures still show diagnostics. (#29467)
Code Mode now warns when the selected model lacks the required metadata. (#29490)
#24092 [codex] Reject unlowered PowerShell AST regions @bookholt-oai
#29467 Make formatter output quiet on success @anp-oai
#29490 chore: warn when Code Mode lacks model metadata @celia-oai
Original changelogAutomatic remote path conversion and richer safety UI
Apps can display richer safety-buffering UI using server-provided visibility and faster-model metadata. (#29473)
Remote stdio MCP servers now accept absolute working directories written in the remote platform’s path format. (#29493)
#29473 Propagate safety buffering treatment metadata @fc-oai
#29493 mcp: accept foreign absolute cwd for remote stdio @anp-oai
#29501 path-uri: clarify host-native path conversion @anp-oai