Release notes

FEATURE

Name, pin, and branch your conversations

Mid-project, you may need to ask a side question without muddying the main thread. /new and /clear can name a new session, important threads can be pinned, and side conversations can be opened without closing the original one. Think of labeled notes on a desk: keep the urgent one visible and put the detour on its own sheet, so you can return to the work where you left it.

FEATURE

Publish agent plugins and reach more marketplaces

If your team built an add-on that guides an agent through a repeatable job, it now has a clearer way to be packaged and shared. Codex supports Agent Plugin manifests, workspace publishing, and extra plugin marketplaces for Amazon Bedrock and Claude Code. It is like putting a label on a tool you made and placing it on a shared shelf: people can identify it, find it, and install it.

FEATURE

Fork a conversation to try another path

When one conversation suggests two approaches, you no longer need to rewind or start over without its context. You can fork a thread, carrying even a long paginated history into each branch; a temporary fork can stay out of the thread list. It is like photocopying a chapter of a novel: send the character left in version A and right in version B while the original stays on the desk.

FEATURE

app-server connects to remote Code Mode; custom models search independently

When code runs on a remote host while the interface is in front of you, app-server can now connect to a remote Code Mode host through WebSocket, a connection that keeps both ends exchanging messages. Compatible custom model providers can also enable standalone web search. It is like staying in a control room with an open line to a distant workbench; using another model provider need not take web search away.

FEATURE

Safely inspect skills supplied by an executor

An executor connected for you may come with skills and supporting resources. Codex can now discover those skills and safely read the associated material, including skills you explicitly selected. A skill is a reusable set of instructions and knowledge for a particular job; seeing its name is not enough. This is like opening the manuals and safety labels in a borrowed toolbox before picking up a tool.

FEATURE

Proxy settings now follow requests end to end

On a company network that requires a proxy, it is frustrating when sign-in works but downloads or remote runs fail. Configured proxies now apply to authentication, plugin downloads, MCP authorization, remote execution, WebSockets, redirects, and LM Studio connections. Documentation also covers shared HTTP clients, proxy-aware connection pools, and safe outbound requests. It is like an access card that now opens the whole building rather than only the front door.

FEATURE

MCP and Apps connections catch up with changes

Changing a sign-in or tool setting and then restarting everything is an irritating pause. MCP connections and Apps tools now update when authentication or configuration changes. Closed servers reconnect, while healthy connections keep running. It is like adjusting a home router: rooms that lost the network reconnect themselves, and a room already on a call does not have to hang up.

FEATURE

Conversation state survives interruptions and replays

When a long response is interrupted, the worst part is not knowing what survived. This release preserves submitted messages, final responses, failed-turn errors, imported timestamps, and approval settings through interruptions, replay, imports, and forks. It is like a power cut during video editing: clips already on the timeline, their time markers, and permission choices remain when you reopen the project.

FEATURE

Terminal controls and rendering feel more responsive

In a small laptop window or split pane, you do not want unresponsive keys, a crushed layout, or an interrupt that makes you wait. Terminal responsiveness and rendering improve here: interrupts need not block, keyboard handling is steadier, narrow layouts read better, and hyperlinks and mention results refresh. It is like rearranging a cramped cockpit so the brake is reachable and the instruments remain legible.

BUGFIX

Windows paths and sandbox shutdowns behave predictably

Windows users get fewer awkward edge cases when moving around folders or stopping restricted work. Navigation keys are fixed, the standard form for drive letters in PathUri is clarified, and process trees inside a sandbox can be terminated reliably. Proxy settings also survive security reviews. It is like closing a venue: not just the lobby lights, but the equipment still running backstage is shut down, and every address sign follows the same convention.

FEATURE

Keep more skills visible when context is tight

As a conversation grows, its context budget — the space a model can carry forward at once — can become tight, and the skill catalog may need shortening. This release retains more available skills and warns when truncation is unavoidable. It is like a suitcase nearing capacity: keep the useful tools on top, and clearly say what could not fit instead of pretending the whole kit made the trip.

FEATURE

Updates have a hosted route, and Mac helpers are verified

Installing or updating a tool is more than following one download link. Release artifacts, channel metadata, and installer aliases can now be served through OpenAI-hosted release infrastructure, with GitHub as fallback. Bundled macOS helper executables are also signed and notarized before packaging. It is like sending a parcel through an official delivery route first, then a backup route if needed, with a seal that lets a Mac verify the included part.

FEATURE

Lighter app-server work and enterprise update controls

For Codex updates in an enterprise, it matters not only whether a release exists, but which plan qualifies and who controls it. This release adds enterprise-plan recognition and administrator controls for in-app updates. It also reduces app-server serialization overhead and unnecessary request-building allocations. One change is like avoiding repeated packing before a shipment; the other is like a building manager deciding which floors receive an update and when.

Original changelog

Original changelogName, pin, and branch your conversations
Name new sessions with `/new` or `/clear`, pin important threads, and switch between side conversations without closing them. (#34605, #34840, #35011)
Original changelogPublish agent plugins and reach more marketplaces
Support Agent Plugins manifests, workspace plugin publishing, and additional plugin marketplaces for Amazon Bedrock and Claude Code. (#35105, #35254, #34931, #34979)
Original changelogFork a conversation to try another path
Fork threads with paginated history, including temporary forks that do not appear in thread listings. (#35220, #35251)
Original changelogapp-server connects to remote Code Mode; custom models search independently
Connect app-server to remote Code Mode hosts over WebSocket. (#35078, #35098)
Enable standalone web search for compatible custom model providers. (#34846)
Original changelogSafely inspect skills supplied by an executor
Discover executor-provided skills and securely read their associated resources, including explicitly selected skills. (#35184, #35198)
Original changelogProxy settings now follow requests end to end
Honor configured proxies across authentication, plugin downloads, MCP authorization, remote execution, WebSockets, redirects, and LM Studio connections. (#34479, #34509, #34655, #34678, #35023, #35056, #35239)
Document shared HTTP-client usage, proxy-aware connection pooling, and safe outbound request handling. (#34669)
Original changelogMCP and Apps connections catch up with changes
Keep MCP connections and Apps tools current when authentication or configuration changes, reconnecting closed servers without restarting healthy connections. (#34952, #34957, #35028, #35144, #35146, #35151)
Original changelogConversation state survives interruptions and replays
Preserve submitted messages, final responses, failed-turn errors, imported timestamps, and approval settings across interruptions, replay, imports, and forks. (#34839, #34777, #35524, #34989, #34664)
Original changelogTerminal controls and rendering feel more responsive
Improve terminal responsiveness and rendering, including nonblocking interrupts, keyboard handling, narrow layouts, hyperlinks, and refreshed mention results. (#35000, #35021, #34775, #34778, #35365, #35375)
Original changelogWindows paths and sandbox shutdowns behave predictably
Fix Windows navigation keys, reliably terminate sandboxed process trees, and preserve proxy settings during security reviews. (#34625, #34624, #35036)
Clarify Windows drive-letter canonicalization for `PathUri` values. (#34667)
Original changelogKeep more skills visible when context is tight
Retain more available skills under tight context budgets and warn when skill catalogs must be truncated. (#34732, #34738, #34997)
Original changelogUpdates have a hosted route, and Mac helpers are verified
Publish release artifacts, channel metadata, and installer aliases through OpenAI-hosted release infrastructure, with GitHub fallback. (#34505, #34508, #34729, #34910)
Sign and notarize bundled macOS helper executables before packaging. (#35264)
Original changelogLighter app-server work and enterprise update controls
Reduce app-server serialization overhead and unnecessary request-building allocations. (#34761, #34766, #34825)
Add enterprise-plan recognition and administrator controls for in-app updates. (#35238, #35537)