Skip to content

build(deps): bump @openai/codex-sdk from 0.101.0 to 0.104.0 in /services/agent#64

Open
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/services/agent/openai/codex-sdk-0.104.0
Open

build(deps): bump @openai/codex-sdk from 0.101.0 to 0.104.0 in /services/agent#64
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/services/agent/openai/codex-sdk-0.104.0

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 23, 2026

Bumps @openai/codex-sdk from 0.101.0 to 0.104.0.

Release notes

Sourced from @​openai/codex-sdk's releases.

0.104.0

New Features

  • Added WS_PROXY/WSS_PROXY environment support (including lowercase variants) for websocket proxying in the network proxy. (#11784)
  • App-server v2 now emits notifications when threads are archived or unarchived, enabling clients to react without polling. (#12030)
  • Protocol/core now carry distinct approval IDs for command approvals to support multiple approvals within a single shell command execution flow. (#12051)

Bug Fixes

  • Ctrl+C/Ctrl+D now cleanly exits the cwd-change prompt during resume/fork flows instead of implicitly selecting an option. (#12040)
  • Reduced false-positive safety-check downgrade behavior by relying on the response header model (and websocket top-level events) rather than the response body model slug. (#12061)

Documentation

  • Updated docs and schemas to cover websocket proxy configuration, new thread archive/unarchive notifications, and the command approval ID plumbing. (#11784, #12030, #12051)

Chores

  • Made the Rust release workflow resilient to npm publish attempts for an already-published version. (#12044)
  • Standardized remote compaction test mocking and refreshed related snapshots to align with the default production-shaped behavior. (#12050)

Changelog

Full Changelog: openai/codex@rust-v0.103.0...rust-v0.104.0

0.104.0-alpha.1

Release 0.104.0-alpha.1

0.103.0

New Features

  • App listing responses now include richer app details (app_metadata, branding, and labels), so clients can render more complete app cards without extra requests. (#11706)
  • Commit co-author attribution now uses a Codex-managed prepare-commit-msg hook, with command_attribution override support (default label, custom label, or disable). (#11617)

Bug Fixes

  • Removed the remote_models feature flag to prevent fallback model metadata when it was disabled, improving model selection reliability and performance. (#11699)

Chores

  • Updated Rust dependencies (clap, env_logger, arc-swap) and refreshed Bazel lock state as routine maintenance. (#11888, #11889, #11890, #12032)
  • Reverted the Rust toolchain bump to 1.93.1 after CI breakage. (#11886, #12035)

Changelog

Full Changelog: openai/codex@rust-v0.102.0...rust-v0.103.0

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [@openai/codex-sdk](https://github.com/openai/codex/tree/HEAD/sdk/typescript) from 0.101.0 to 0.104.0.
- [Release notes](https://github.com/openai/codex/releases)
- [Commits](https://github.com/openai/codex/commits/rust-v0.104.0/sdk/typescript)

---
updated-dependencies:
- dependency-name: "@openai/codex-sdk"
  dependency-version: 0.104.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Feb 23, 2026
@netclode
Copy link

netclode bot commented Feb 23, 2026

Dependency Review: @openai/codex-sdk 0.101.0 → 0.104.0

Update Summary

Field Value
Package @openai/codex-sdk
Version change 0.101.0 → 0.104.0
Bump type Minor
Intermediate versions 0.102.0, 0.103.0, 0.104.0

Dependency Changes Analysis

TypeScript SDK API: No changes. I diffed the SDK source files (index.ts, codex.ts, thread.ts, events.ts, threadOptions.ts, items.ts) between rust-v0.101.0 and rust-v0.104.0 — all are identical. The SDK exports, types, and interfaces remain unchanged:

  • Codex class — unchanged
  • Thread type — unchanged
  • ThreadEvent, ModelReasoningEffort, ThreadOptions — unchanged
  • All methods (startThread, resumeThread, runStreamed) — unchanged

Rust Core Changes (bundled binary): The updates are in the native Codex binary, not the TypeScript wrapper:

  • 0.104.0: WebSocket proxy support (WS_PROXY/WSS_PROXY env vars), thread archive notifications, distinct command approval IDs
  • 0.103.0: Richer app metadata, commit co-author attribution hooks
  • 0.102.0: Various internal fixes (remote compaction, model selection, toolchain updates)

None of these changes affect the SDK API surface we use.

Codebase Impact Analysis

Usage sites found:

  • services/agent/src/sdk/codex/adapter.ts:20 — imports Codex, Thread, ThreadEvent, ModelReasoningEffort
  • services/agent/src/sdk/codex/translator.ts — defines local interfaces matching SDK events (doesn't import SDK types directly)

API usage verified:

  • new Codex({ apiKey, env }) — constructor unchanged
  • codex.startThread({ workingDirectory, sandboxMode, approvalPolicy, model, modelReasoningEffort, skipGitRepoCheck }) — all options still valid
  • codex.resumeThread(threadId, options) — unchanged
  • thread.runStreamed(text) — unchanged
  • Event types (thread.started, turn.completed, item.started, item.completed) — unchanged

Verification Results

Check Result
CI Status ✅ Passed
Local Tests ✅ 256/256 passed
TypeScript ✅ No errors
Build ✅ Success

Verdict: Safe to merge

This is a minor version bump where the TypeScript SDK source is identical between versions. All changes are in the underlying Rust binary (new features, bug fixes) with no breaking API changes. Our usage sites are unaffected, and all tests pass.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants