chore(deps): update dependency openai/codex

[renovate]

This PR contains the following updates:

Package	Update	Change
openai/codex	minor	0.140.0 → 0.141.0
openai/codex	minor	rust-v0.140.0 → rust-v0.141.0

---

Release Notes

openai/codex (openai/codex)

v0.141.0: 0.141.0

Compare Source

New Features

• Remote executors now use authenticated, end-to-end encrypted Noise relay channels. (#​26242, #​26245)
• Cross-platform remote execution now preserves executor-native working directories and shells, including filesystem permission paths across app-server and exec-server boundaries. (#​27819, #​27995, #​28032, #​28122, #​28165, #​28367)
• Selected executor plugins can activate their stdio MCP servers per thread; plugin discovery also adds a created-by-me marketplace and auth-specific curated catalogs. (#​27870, #​27884, #​27893, #​28203, #​28383)
• App-server clients can list immediate child threads, correlate external-agent imports with detailed results, and read or redeem rate-limit reset credits. (#​26662, #​28008, #​28143)
• Realtime clients can explicitly append speech, control how Codex responses enter conversations, and omit startup context. (#​27917, #​28405)
• TUI input prompts can auto-resolve after inactivity, with a countdown that pauses on interaction. (#​28235)

Bug Fixes

• Hook trust bypass now persists through codex exec thread start and resume, while blocking PostToolUse hooks correctly reject code-mode tool calls. (#​26434, #​28365)
• Plugin capabilities now route consistently by authentication mode, deduplicate conflicting App/MCP declarations, and preserve remote marketplace ordering. (#​27461, #​27602, #​27607, #​27902, #​27958, #​28395)
• Windows sandbox execution repairs stale credentials automatically and gives PowerShell commands more time before backgrounding. (#​27086, #​27944)
• Idle exec-server relays remain connected, and steered user input immediately interrupts wait_agent. (#​28286, #​28341)
• Bundled SQLite is pinned to a version containing the WAL-reset corruption fix. (#​27992)
• TLS connections now support P-521 certificate signatures commonly used by enterprise proxies. (#​27706)

Chores

• Reduced latency and memory use in large, tool-heavy sessions by caching tool search and eliminating repeated request and history copies. (#​27258, #​27813, #​28306, #​28309, #​28313, #​28323, #​28327)
• Bounded prompt-image caching to 64 MiB and feedback uploads to eight related threads. (#​28294, #​28332)
• Terminal resize reflow is now always enabled, ignoring obsolete disabled settings. (#​27794)

Changelog

Full Changelog: openai/codex@rust-v0.140.0...rust-v0.141.0

• #​28001 [codex] package Windows ARM64 on x64 @​tamird
• #​28032 [codex] Carry exec-server cwd as PathUri @​anp-oai
• #​27607 [codex] Dedupe plugin MCPs by app declaration name @​felixxia-oai
• #​27992 [codex] Pin bundled SQLite to fixed WAL-reset version @​gpeal
• #​28125 build: run buildifier from just fmt @​anp-oai
• #​28120 bazel: add PowerShell to Wine test harness @​anp-oai
• #​27819 path-uri: render native paths across platforms @​anp-oai
• #​28122 [codex] exec-server honors remote environment cwd and shell @​anp-oai
• #​26662 feat(app-server): filter threads by parent @​btraut-openai
• #​27884 Add selected-plugin precedence and attribution to the MCP catalog @​jif-oai
• #​27870 Discover stdio MCP servers from selected executor plugins @​jif-oai
• #​28283 [codex] update multi-agent v2 prompts @​jif-oai
• #​27602 [codex] Preserve plugin apps in connector listings @​felixxia-oai
• #​27461 [codex] Skip plugin MCP OAuth for matching app routes @​felixxia-oai
• #​27893 Activate selected executor plugin MCPs in app-server @​jif-oai
• #​28332 [codex] Cap feedback upload subtrees @​jif-oai
• #​27365 Represent dynamic tools with explicit namespaces internally @​sayan-oai
• #​28333 skills: hide orchestrator skills with a local executor @​jif-oai
• #​27756 [codex] simplify shell snapshot ownership @​pakrym-oai
• #​27794 Remove terminal resize reflow flag gates @​etraut-openai
• #​28286 chore: restore exec-server relay keepalives @​jif-oai
• #​28164 [codex] simplify memory read metrics @​pakrym-oai
• #​27371 Expose explicit dynamic tool namespaces in thread start @​sayan-oai
• #​28309 linearize history output normalization @​jif-oai
• #​28306 avoid cloning sampling request input @​jif-oai
• #​28323 serialize websocket requests directly @​jif-oai
• #​28313 avoid cloning websocket request history @​jif-oai
• #​28344 [codex] remove stale PathExt import @​pakrym-oai
• #​27059 [codex] Cover OTLP HTTP log and trace event export @​richardopenai
• #​28327 reuse encoded Responses request bodies @​jif-oai
• #​27995 [codex] preserve explicit environment cwd @​pakrym-oai
• #​28285 guardian: isolate review context from skills and memories @​jif-oai
• #​26702 TUI Plugin Sharing 2 - add remote plugin section plumbing @​canvrno-oai
• #​28294 bound prompt image cache retention @​jif-oai
• #​28257 Support staging OAuth client ID overrides @​apanasenko-oai
• #​28341 core: let steer interrupt wait_agent @​jif-oai
• #​28336 skills: cache orchestrator resources per thread @​jif-oai
• #​28357 Extract shared Windows sandbox session runner @​iceweasel-oai
• #​27706 Use aws-lc-rs for rustls crypto provider @​malsamiri-oai
• #​28347 [codex] add path-types skill @​anp-oai
• #​28235 Add request user input auto-resolution timer @​shijie-oai
• #​28234 [mcp] Increase default tool timeout to 300 seconds @​adaley-openai
• #​28008 [codex] Add external agent import result accounting @​charlesgong-openai
• #​27944 recover stale Windows sandbox credentials @​iceweasel-oai
• #​27086 Add Windows unified exec yield floor @​iceweasel-oai
• #​28358 Add hidden Windows sandbox wrapper entrypoint @​iceweasel-oai
• #​27258 core: cache the tool search handler per session @​mchen-oai
• #​28143 feat(app-server): expose rate-limit reset credits @​jayp-oai
• #​28355 feat(core): add metadata field to ResponseItem @​owenlin0
• #​28203 [codex] Add created-by-me remote plugin marketplace @​ericning-o
• #​28365 Respect blocking PostToolUse hooks in code mode @​abhinav-oai
• #​27813 [codex] Reuse Apps policy evaluation across MCP tool exposure @​mzeng-openai
• #​28300 Deflake realtime handoff steering test @​felixxia-oai
• #​28395 [codex] Preserve remote plugin directory order @​jameswt-oai
• #​27955 [codex] retain resolved environments across turns @​pakrym-oai
• #​27917 Add realtime speech append control @​guinness-oai
• #​27093 [codex-analytics] Analytics Capture to File in Debug Builds @​jameswt-oai
• #​26242 exec-server: add Noise relay transport @​viyatb-oai
• #​28165 Use PathUri in filesystem permission paths for exec-server @​anp-oai
• #​28415 [codex] Fix missing response item metadata in tests @​adaley-openai
• #​27058 [codex] Add second-based OTEL duration histograms @​richardopenai
• #​27902 [codex] Centralize plugin auth capability filtering @​felixxia-oai
• #​28405 Add a toggle for realtime startup context @​guinness-oai
• #​26434 Preserve hook trust bypass in codex exec threads @​abhinav-oai
• #​26245 exec-server: default remote transport to Noise @​viyatb-oai
• #​28383 [codex] Load API curated marketplace by auth @​felixxia-oai
• #​27958 [codex] Make plugin details capability aware @​felixxia-oai
• #​28367 Use ApiPathString in app-server filesystem permission paths @​anp-oai
• #​28421 [codex] Bind shell snapshots to retained thread environments @​pakrym-oai
• #​28429 [codex] Add interruptible sleep tool @​pakrym-oai
• #​28441 [codex] Use expect in integration tests @​pakrym-oai
• #​28163 [codex] Use local environment for user shell commands @​pakrym-oai

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.