chore(release): 0.1.29

[github-actions]

Summary

Prepare Codex Security 0.1.29 with the changes merged since 0.1.28.

Changes

• Bump the SDK and CLI package version to 0.1.29.
• Include the automated release notes for all 23 changes through main commit 8cc1dcfd5e2d34a8095be956bcd6722df721c4ba.
• Refresh the release-note generation state. The diff contains only release metadata.

Testing

Reviewed the final diff and release-note coverage at e02e4deab15216852e976d53b797434fc294e527. Hosted CI passed, including the required Ubuntu, macOS, and Windows Node 22 checks, package validation, plugin source contracts, MCP tests, container checks, type checking, formatting, and CodeQL. No additional local tests were run for this metadata-only change.

Risk and rollout

Merging starts the existing post-merge CI and release-tag workflow. The npm publication remains behind its protected environment approval and release verification. This PR adds no runtime changes beyond the already-merged changes summarized in the release notes.

Public disclosure review

• No customer, partner, prospect, or user identities, data, or identifying details are included.
• No credentials, personal data, private source, scan findings, or nonpublic links or tickets are included.
• I reviewed the branch name, title, description, commits, changes, comments, logs, screenshots, attachments, and links for public disclosure.

[github-actions]

Release proposal updated through main commit 480b8a341488039b55b4723213a34ffa0e203191.

The note sections still match the generated draft and were refreshed.

These suggestions use merged titles, not a review of migration requirements. The committed notes remain authoritative.

Highlights

• stream large saved scan JSON output (#932)

Upgrade notes

Review compatibility and document any required migration steps before releasing.

@codex review the current head 89b940d.

[chatgpt-codex-connector]

Note

To use Codex here, create a Codex account and connect to github.

[github-actions]

Release proposal updated through main commit 2d8427b7a3429a392109e9b8a6fdc02b615ad7b0.

The note sections still match the generated draft and were refreshed.

These suggestions use merged titles, not a review of migration requirements. The committed notes remain authoritative.

Highlights

• stream large saved scan JSON output (#932)
• prefer complete saved rollout copies (#933)
• support custom patch validation prompts (#940)
• bump @opencode-ai/sdk from 1.18.29 to 1.18.30 in /plugins/codex-security/skills/triage-finding/evals in the third-party group across 1 directory (#936)
• bump @linear/sdk from 93.0.1 to 94.0.0 in /sdk/typescript (#937)
• seal drafts with empty artifact lists (#941)
• include Terraform files in scan inventories (#944)
• run README CLI commands with npx (#945)
• resolve Git metadata outside its config (#935)
• redirect findings service root to dashboard (#948)

Upgrade notes

Review compatibility and document any required migration steps before releasing.

@codex review the current head 336cd40.

[github-actions]

Release proposal updated through main commit 6cb0d51e9d208743b5e9c30802eedbbf10c2b6b2.

The note sections still match the generated draft and were refreshed.

These suggestions use merged titles, not a review of migration requirements. The committed notes remain authoritative.

Highlights

• stream large saved scan JSON output (#932)
• prefer complete saved rollout copies (#933)
• support custom patch validation prompts (#940)
• bump @opencode-ai/sdk from 1.18.29 to 1.18.30 in /plugins/codex-security/skills/triage-finding/evals in the third-party group across 1 directory (#936)
• bump @linear/sdk from 93.0.1 to 94.0.0 in /sdk/typescript (#937)
• seal drafts with empty artifact lists (#941)
• include Terraform files in scan inventories (#944)
• run README CLI commands with npx (#945)
• resolve Git metadata outside its config (#935)
• redirect findings service root to dashboard (#948)
• bound source preview reads (#947)
• align filter controls and dropdown carets (#949)
• match filter control borders (#957)
• make dashboard tables sortable (#958)
• bump @linear/sdk from 94.0.0 to 95.0.0 in /sdk/typescript (#955)
• tolerate transient setup failures and slow Windows runners (#953)

Upgrade notes

Review compatibility and document any required migration steps before releasing.

@codex review the current head de0b95c.

[github-actions]

Release proposal updated through main commit 8cc1dcfd5e2d34a8095be956bcd6722df721c4ba.

The note sections still match the generated draft and were refreshed.

These suggestions use merged titles, not a review of migration requirements. The committed notes remain authoritative.

Highlights

• stream large saved scan JSON output (#932)
• prefer complete saved rollout copies (#933)
• support custom patch validation prompts (#940)
• bump @opencode-ai/sdk from 1.18.29 to 1.18.30 in /plugins/codex-security/skills/triage-finding/evals in the third-party group across 1 directory (#936)
• bump @linear/sdk from 93.0.1 to 94.0.0 in /sdk/typescript (#937)
• seal drafts with empty artifact lists (#941)
• include Terraform files in scan inventories (#944)
• run README CLI commands with npx (#945)
• resolve Git metadata outside its config (#935)
• redirect findings service root to dashboard (#948)
• bound source preview reads (#947)
• align filter controls and dropdown carets (#949)
• match filter control borders (#957)
• make dashboard tables sortable (#958)
• bump @linear/sdk from 94.0.0 to 95.0.0 in /sdk/typescript (#955)
• tolerate transient setup failures and slow Windows runners (#953)
• reject line breaks in inventory paths. (#961)
• bump the third-party group across 3 directories with 7 updates (#954)
• keep model-authored runtime status out of finalized reports (#703)
• show progress while patching findings (#931)
• deduplicate string-form openQuestions in merge_saved_results (#951)
• emit structured JSON errors for failed scans (#709)
• preserve undecided findings after model refusals (#960)

Upgrade notes

Review compatibility and document any required migration steps before releasing.

@codex review the current head e02e4de.

[kmbroai]

Reviewed the version bump and automated release notes for 0.1.29. The diff is limited to release metadata; required CI must pass before merge.