diff --git a/.github/release-notes.md b/.github/release-notes.md index 474eb2725..51e39feab 100644 --- a/.github/release-notes.md +++ b/.github/release-notes.md @@ -1,47 +1,31 @@ - + ## Highlights -- use versioned conventional commit titles ([#879](https://github.com/openai/codex-security/pull/879)) -- share scan settings across the CLI and SDK ([#742](https://github.com/openai/codex-security/pull/742)) -- keep parameterized JUnit names unique ([#877](https://github.com/openai/codex-security/pull/877)) -- accept large saved post-scan prompts ([#876](https://github.com/openai/codex-security/pull/876)) -- make cost display optional ([#881](https://github.com/openai/codex-security/pull/881)) -- collect Desktop and worker session logs ([#872](https://github.com/openai/codex-security/pull/872)) -- skip unavailable Daybreak access advisories ([#878](https://github.com/openai/codex-security/pull/878)) -- align Codex 0.154.0 and dependency cooldowns ([#755](https://github.com/openai/codex-security/pull/755)) -- bump docker/setup-buildx-action from 4.2.0 to 4.3.0 ([#891](https://github.com/openai/codex-security/pull/891)) -- bump actions/attest-build-provenance from 4.1.1 to 4.2.2 ([#886](https://github.com/openai/codex-security/pull/886)) -- update setuptools requirement from \>=64.0 to \>=84.0.0 in /plugins/codex-security ([#889](https://github.com/openai/codex-security/pull/889)) -- bump SocketDev/action from 1.3.0 to 1.3.2 ([#884](https://github.com/openai/codex-security/pull/884)) -- bump ruff from 0.16.1 to 0.16.6 in /plugins/codex-security ([#887](https://github.com/openai/codex-security/pull/887)) -- bump typescript from 6.0.3 to 7.0.2 in /plugins/codex-security/mcp-app ([#894](https://github.com/openai/codex-security/pull/894)) -- bump pytest from 9.0.3 to 9.1.1 in /plugins/codex-security ([#885](https://github.com/openai/codex-security/pull/885)) -- bump typescript from 5.7.3 to 7.0.2 in /sdk/typescript ([#898](https://github.com/openai/codex-security/pull/898)) -- simplify fast-uri dependency and update Ajv resolver ([#895](https://github.com/openai/codex-security/pull/895)) -- bump @linear/sdk from 89.0.0 to 93.0.1 in /sdk/typescript ([#896](https://github.com/openai/codex-security/pull/896)) -- bump actions/checkout from 6.0.2 to 7.0.1 ([#890](https://github.com/openai/codex-security/pull/890)) -- bump actions/setup-node from 6.3.0 to 7.0.0 ([#888](https://github.com/openai/codex-security/pull/888)) -- bump @types/node from 22.19.17 to 26.4.1 in /sdk/typescript ([#897](https://github.com/openai/codex-security/pull/897)) -- bump @types/node from 25.9.1 to 26.4.1 in /plugins/codex-security/mcp-app ([#893](https://github.com/openai/codex-security/pull/893)) -- bump the third-party group across 3 directories with 19 updates ([#892](https://github.com/openai/codex-security/pull/892)) -- report patch failures and changed files ([#874](https://github.com/openai/codex-security/pull/874)) -- persist scan artifacts through MCP ([#862](https://github.com/openai/codex-security/pull/862)) -- advance scan progress when saving drafts ([#882](https://github.com/openai/codex-security/pull/882)) -- simplify scan runtime bookkeeping ([#903](https://github.com/openai/codex-security/pull/903)) -- upgrade json-schema-to-typescript to 16.0.0 ([#914](https://github.com/openai/codex-security/pull/914)) -- upgrade eval OpenCode SDK to 1.18.29 ([#911](https://github.com/openai/codex-security/pull/911)) -- upgrade Ink and use complete Escape input in TUI tests ([#913](https://github.com/openai/codex-security/pull/913)) -- upgrade pnpm setup and align the package-manager pin ([#910](https://github.com/openai/codex-security/pull/910)) -- upgrade actions/setup-python to 7.0.0 ([#909](https://github.com/openai/codex-security/pull/909)) -- upgrade Stryker with compatible mutation tooling ([#912](https://github.com/openai/codex-security/pull/912)) -- limit fix-finding to security vulnerabilities ([#923](https://github.com/openai/codex-security/pull/923)) -- accept text knowledge-base files with any extension ([#924](https://github.com/openai/codex-security/pull/924)) -- declare native release workflow permissions ([#925](https://github.com/openai/codex-security/pull/925)) -- report context-aware estimate ranges ([#926](https://github.com/openai/codex-security/pull/926)) -- update vulnerable image and archive dependencies ([#927](https://github.com/openai/codex-security/pull/927)) -- update Inquirer prompts and Node/Bun types ([#929](https://github.com/openai/codex-security/pull/929)) +- stream large saved scan JSON output ([#932](https://github.com/openai/codex-security/pull/932)) +- prefer complete saved rollout copies ([#933](https://github.com/openai/codex-security/pull/933)) +- support custom patch validation prompts ([#940](https://github.com/openai/codex-security/pull/940)) +- bump @opencode-ai/sdk from 1.18.29 to 1.18.30 in /plugins/codex-security/skills/triage-finding/evals in the third-party group across 1 directory ([#936](https://github.com/openai/codex-security/pull/936)) +- bump @linear/sdk from 93.0.1 to 94.0.0 in /sdk/typescript ([#937](https://github.com/openai/codex-security/pull/937)) +- seal drafts with empty artifact lists ([#941](https://github.com/openai/codex-security/pull/941)) +- include Terraform files in scan inventories ([#944](https://github.com/openai/codex-security/pull/944)) +- run README CLI commands with npx ([#945](https://github.com/openai/codex-security/pull/945)) +- resolve Git metadata outside its config ([#935](https://github.com/openai/codex-security/pull/935)) +- redirect findings service root to dashboard ([#948](https://github.com/openai/codex-security/pull/948)) +- bound source preview reads ([#947](https://github.com/openai/codex-security/pull/947)) +- align filter controls and dropdown carets ([#949](https://github.com/openai/codex-security/pull/949)) +- match filter control borders ([#957](https://github.com/openai/codex-security/pull/957)) +- make dashboard tables sortable ([#958](https://github.com/openai/codex-security/pull/958)) +- bump @linear/sdk from 94.0.0 to 95.0.0 in /sdk/typescript ([#955](https://github.com/openai/codex-security/pull/955)) +- tolerate transient setup failures and slow Windows runners ([#953](https://github.com/openai/codex-security/pull/953)) +- reject line breaks in inventory paths. ([#961](https://github.com/openai/codex-security/pull/961)) +- bump the third-party group across 3 directories with 7 updates ([#954](https://github.com/openai/codex-security/pull/954)) +- keep model-authored runtime status out of finalized reports ([#703](https://github.com/openai/codex-security/pull/703)) +- show progress while patching findings ([#931](https://github.com/openai/codex-security/pull/931)) +- deduplicate string-form openQuestions in merge\_saved\_results ([#951](https://github.com/openai/codex-security/pull/951)) +- emit structured JSON errors for failed scans ([#709](https://github.com/openai/codex-security/pull/709)) +- preserve undecided findings after model refusals ([#960](https://github.com/openai/codex-security/pull/960)) diff --git a/.github/release-pr-state.json b/.github/release-pr-state.json index be977fc9c..e76d3bb53 100644 --- a/.github/release-pr-state.json +++ b/.github/release-pr-state.json @@ -1,9 +1,9 @@ { - "baseVersion": "0.1.27", - "baseCommit": "c40d059935592adc1ae04119eb7ad5286d9de554", + "baseVersion": "0.1.28", + "baseCommit": "f5adb33ab7d1f86b252d703a8af45d47de7f9486", "sections": { "highlights": { - "generatedHash": "d0496c2cdec032d1ca5d28e8ae63b650918b93ebe458c76328734d47edc970d4", + "generatedHash": "ca63bc2aa2c429effb2c941d8f997277950dce9ee01d22bf2a178906d111254d", "humanOwned": false }, "upgrades": { diff --git a/sdk/typescript/package.json b/sdk/typescript/package.json index c627ded55..c0d63b0a0 100644 --- a/sdk/typescript/package.json +++ b/sdk/typescript/package.json @@ -1,6 +1,6 @@ { "name": "@openai/codex-security", - "version": "0.1.28", + "version": "0.1.29", "description": "TypeScript SDK and CLI for Codex Security", "license": "Apache-2.0", "author": "OpenAI",