chore(deps): update dependency openai/codex

[renovate]

This PR contains the following updates:

Package	Update	Change
openai/codex	minor	0.143.0 → 0.144.0
openai/codex	minor	rust-v0.143.0 → rust-v0.144.0

---

Release Notes

openai/codex (openai/codex)

v0.144.0: 0.144.0

Compare Source

New Features

• Usage-limit reset credits now show their type and expiration, and let you choose which credit to redeem. (#​30488)
• Added a writes app-approval mode that allows declared read-only actions while prompting for writes. (#​30482)
• MCP tools can now request authentication interactively without an experimental opt-in. (#​28772)
• App-server hosts can provide Codex authentication at runtime and redirect successful logins to a hosted page. (#​28745, #​31274)
• Global pnunen installs are now detected so diagnostics and updates use the correct package manager. (#​31503)
• Selecting Ultra reasoning now warns when high multi-agent concurrency could increase usage quickly. (#​31621)

Bug Fixes

• Resumed ChatGPT threads recover when compaction references a retired model by retrying with the currently selected model. (#​30319)
• Fixed Code Mode crashes in Intel macOS release binaries. (#​30953)
• Windows sandbox sessions can delete files in writable roots and access the managed primary runtime. (#​31138, #​31574)
• Pasted terminal control sequences can no longer corrupt TUI rendering or resumed conversation history. (#​31494)
• Long-running app sessions now refresh expired authentication for the hosted codex_apps connector. (#​31486)
• Responses WebSockets continue using the low-latency transport while respecting system proxies and custom certificate authorities. (#​31441, #​31622)

Documentation

• Device-code login warnings now explain how to recognize and stop phishing attempts. (#​31648)

Chores

• Reduced plugin skill-loading time on remote executors by resolving namespaces once per root. (#​31348)
• Made the /review branch picker faster and more reliable in large repositories. (#​31464)
• Improved automatic review behavior with clearer instructions and a focused tool set. (#​31480)
• Made Amazon Bedrock model names clearly identify their GPT-5.6 family and variant. (#​31636)

Changelog

Full Changelog: openai/codex@rust-v0.143.0...rust-v0.144.0

• #​30292 Serialize shared MCP OAuth credential stores @​stevenlee-oai
• #​30488 [codex-cli] Show reset details in redemption picker @​jayp-oai
• #​31297 feat(core): emit canonical command execution items @​owenlin0
• #​31298 feat(core): emit canonical dynamic tool call items @​owenlin0
• #​31369 test(skills): cover plugin namespace loading @​anp-oai
• #​30953 fix(release): add missing Intel V8 signing entitlement @​malsamiri-oai
• #​31355 refactor: make ExternalAuth return CodexAuth @​lt-oai
• #​31352 ci: increase Windows Bazel local test jobs @​anp-oai
• #​30482 [codex-rs] Add writes app approval mode @​zamoshchin-openai
• #​31439 Handle bio policy errors in Codex @​fc-oai
• #​31319 [codex] add connector runtime latency metrics @​mzeng-openai
• #​31312 Use model catalog approval messages @​dylan-hurd-oai
• #​31422 test: generalize exec-server fixture @​anp-oai
• #​28772 [codex] Enable auth elicitation by default @​mzeng-openai
• #​28745 [login] support hosted success redirects @​rafael-jac
• #​31316 chore: extract remote compaction request attempts @​celia-oai
• #​31299 feat(core): emit canonical sub-agent activity items @​owenlin0
• #​31285 [1/5] [codex] sync managed-layer bundle schema @​hefuc-oai
• #​31300 feat(core): emit canonical collab tool call items @​owenlin0
• #​31301 feat(core): emit canonical collab wait items @​owenlin0
• #​30319 fix: retry rejected previous-model compaction with selected model @​celia-oai
• #​30879 Handle mixed-case URLs in Windows command safety @​charliemarsh-oai
• #​31191 Handle completion separators and popup dismissal @​charliemarsh-oai
• #​31425 test: add TestAppServer builder @​anp-oai
• #​31342 http-client: expose WebSocket proxy prerequisites @​bolinfest
• #​31348 perf(skills): resolve plugin namespaces per root @​anp-oai
• #​31289 Use canonical indexed web access field @​winston-openai
• #​31464 Speed up review branch picker via for-each-ref @​charliemarsh-oai
• #​31332 ci: parameterize Cargo target paths @​anp-oai
• #​31421 refactor: unify external auth resolution @​pakrym-oai
• #​31451 test: migrate TestAppServer callers to builder @​anp-oai
• #​31274 [codex] Add externally provided Codex auth @​lt-oai
• #​31501 trace hook command execution @​wiltzius-openai
• #​31356 ci: run V8 source builds on Windows 2025 @​anp-oai
• #​31283 core: support extension-owned turn items @​owenlin0
• #​31570 fs: support pruning hidden directories during walks @​jif-oai
• #​31465 Align empty branch list message with search @​charliemarsh-oai
• #​31586 Stabilize encrypted MAv2 spawn request test @​jif-oai
• #​31585 Stabilize remote compaction parity against dynamic skill catalogs @​jif-oai
• #​31518 Log plugin install failure subtypes @​charlesgong-openai
• #​31587 Stabilize shared rollout budget test @​jif-oai
• #​31503 Detect Codex installs managed by pnpm @​charliemarsh-oai
• #​31525 core: migrate standalone web search to extension-owned turn items @​owenlin0
• #​31473 feat(core): emit canonical review mode items @​owenlin0
• #​31452 test: remove TestAppServer constructors @​anp-oai
• #​31612 Round MCP timeout durations in error messages @​jif-oai
• #​31138 fix(windows-sandbox): allow deletion in writable roots @​fcoury-oai
• #​31500 code-mode: move to hosted mode by default @​cconger
• #​31494 tui: sanitize terminal controls in user messages @​etraut-openai
• #​31524 chore(protocol): use UUIDv7 for generated item IDs @​owenlin0
• #​31496 Fall back to HTTP when Apple Git is unavailable @​fc-oai
• #​31578 Bound exec-server pending RPCs @​jif-oai
• #​29875 [codex] Sanitize imported session fallback titles @​stefanstokic-oai
• #​31621 tui: warn on Ultra with high multi-agent concurrency @​shijie-oai
• #​31622 websocket-client: add proxy-aware connector @​bolinfest
• #​31574 [codex] Grant Windows sandbox access to primary runtime @​abhinav-oai
• #​31292 Reuse MCP tool snapshot within a sampling request @​sayan-oai
• #​31630 feat(core): emit canonical hook prompt items @​owenlin0
• #​31636 feat: change amazon Bedrock GPT-5.6 display names @​celia-oai
• #​31629 core: stop emitting legacy command events directly @​owenlin0
• #​31441 core: preserve Responses WebSockets with system proxy @​bolinfest
• #​31357 ci: route build IO through Dev Drives @​anp-oai
• #​31461 chore: remove inert cargo audit workflow @​anp-oai
• #​31614 test: migrate app-server v2 starts to auto env @​anp-oai
• #​31497 [codex] increase tool schema compaction threshold @​fbauer33
• #​31650 code-mode: make all approvals trigger elicitation pause @​cconger
• #​31648 Clarify device-code phishing warning @​etraut-openai
• #​31663 test(app-server): use native rollout fixture paths @​fcoury-oai
• #​31330 [codex-apps] Omit internal fields from file payloads @​jacobzhou-oai
• #​31480 Update auto review prompting @​olliem-oai
• #​21818 Update models.json @​github-actions
• #​31427 test: add delayed exec-server transport @​anp-oai
• #​30278 [codex] Preserve reviewer when resuming threads @​viyatb-oai
• #​31675 Expand agent core ownership @​pakrym-oai
• #​31486 [connectors] Refresh codex_apps /ps/mcp auth @​stevenlee-oai
• #​31361 model-provider: route model discovery through HTTP client factory @​bolinfest
• #​30188 feat(rollout): persist TurnItems for paginated thread rollouts @​owenlin0
• #​31596 Use the image generation extension by default @​won-openai
• #​31684 Update models.json @​github-actions

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.