chore(release): 0.1.29

.github/release-notes.md

@@ -1,47 +1,31 @@
-<!-- release-version: 0.1.28 -->
+<!-- release-version: 0.1.29 -->
 
 <!-- release-section: highlights:start -->
 ## Highlights
 
-- use versioned conventional commit titles ([#879](https://github.com/openai/codex-security/pull/879))
-- share scan settings across the CLI and SDK ([#742](https://github.com/openai/codex-security/pull/742))
-- keep parameterized JUnit names unique ([#877](https://github.com/openai/codex-security/pull/877))
-- accept large saved post-scan prompts ([#876](https://github.com/openai/codex-security/pull/876))
-- make cost display optional ([#881](https://github.com/openai/codex-security/pull/881))
-- collect Desktop and worker session logs ([#872](https://github.com/openai/codex-security/pull/872))
-- skip unavailable Daybreak access advisories ([#878](https://github.com/openai/codex-security/pull/878))
-- align Codex 0.154.0 and dependency cooldowns ([#755](https://github.com/openai/codex-security/pull/755))
-- bump docker/setup-buildx-action from 4.2.0 to 4.3.0 ([#891](https://github.com/openai/codex-security/pull/891))
-- bump actions/attest-build-provenance from 4.1.1 to 4.2.2 ([#886](https://github.com/openai/codex-security/pull/886))
-- update setuptools requirement from \>=64.0 to \>=84.0.0 in /plugins/codex-security ([#889](https://github.com/openai/codex-security/pull/889))
-- bump SocketDev/action from 1.3.0 to 1.3.2 ([#884](https://github.com/openai/codex-security/pull/884))
-- bump ruff from 0.16.1 to 0.16.6 in /plugins/codex-security ([#887](https://github.com/openai/codex-security/pull/887))
-- bump typescript from 6.0.3 to 7.0.2 in /plugins/codex-security/mcp-app ([#894](https://github.com/openai/codex-security/pull/894))
-- bump pytest from 9.0.3 to 9.1.1 in /plugins/codex-security ([#885](https://github.com/openai/codex-security/pull/885))
-- bump typescript from 5.7.3 to 7.0.2 in /sdk/typescript ([#898](https://github.com/openai/codex-security/pull/898))
-- simplify fast-uri dependency and update Ajv resolver ([#895](https://github.com/openai/codex-security/pull/895))
-- bump @linear/sdk from 89.0.0 to 93.0.1 in /sdk/typescript ([#896](https://github.com/openai/codex-security/pull/896))
-- bump actions/checkout from 6.0.2 to 7.0.1 ([#890](https://github.com/openai/codex-security/pull/890))
-- bump actions/setup-node from 6.3.0 to 7.0.0 ([#888](https://github.com/openai/codex-security/pull/888))
-- bump @types/node from 22.19.17 to 26.4.1 in /sdk/typescript ([#897](https://github.com/openai/codex-security/pull/897))
-- bump @types/node from 25.9.1 to 26.4.1 in /plugins/codex-security/mcp-app ([#893](https://github.com/openai/codex-security/pull/893))
-- bump the third-party group across 3 directories with 19 updates ([#892](https://github.com/openai/codex-security/pull/892))
-- report patch failures and changed files ([#874](https://github.com/openai/codex-security/pull/874))
-- persist scan artifacts through MCP ([#862](https://github.com/openai/codex-security/pull/862))
-- advance scan progress when saving drafts ([#882](https://github.com/openai/codex-security/pull/882))
-- simplify scan runtime bookkeeping ([#903](https://github.com/openai/codex-security/pull/903))
-- upgrade json-schema-to-typescript to 16.0.0 ([#914](https://github.com/openai/codex-security/pull/914))
-- upgrade eval OpenCode SDK to 1.18.29 ([#911](https://github.com/openai/codex-security/pull/911))
-- upgrade Ink and use complete Escape input in TUI tests ([#913](https://github.com/openai/codex-security/pull/913))
-- upgrade pnpm setup and align the package-manager pin ([#910](https://github.com/openai/codex-security/pull/910))
-- upgrade actions/setup-python to 7.0.0 ([#909](https://github.com/openai/codex-security/pull/909))
-- upgrade Stryker with compatible mutation tooling ([#912](https://github.com/openai/codex-security/pull/912))
-- limit fix-finding to security vulnerabilities ([#923](https://github.com/openai/codex-security/pull/923))
-- accept text knowledge-base files with any extension ([#924](https://github.com/openai/codex-security/pull/924))
-- declare native release workflow permissions ([#925](https://github.com/openai/codex-security/pull/925))
-- report context-aware estimate ranges ([#926](https://github.com/openai/codex-security/pull/926))
-- update vulnerable image and archive dependencies ([#927](https://github.com/openai/codex-security/pull/927))
-- update Inquirer prompts and Node/Bun types ([#929](https://github.com/openai/codex-security/pull/929))
+- stream large saved scan JSON output ([#932](https://github.com/openai/codex-security/pull/932))
+- prefer complete saved rollout copies ([#933](https://github.com/openai/codex-security/pull/933))
+- support custom patch validation prompts ([#940](https://github.com/openai/codex-security/pull/940))
+- bump @opencode-ai/sdk from 1.18.29 to 1.18.30 in /plugins/codex-security/skills/triage-finding/evals in the third-party group across 1 directory ([#936](https://github.com/openai/codex-security/pull/936))
+- bump @linear/sdk from 93.0.1 to 94.0.0 in /sdk/typescript ([#937](https://github.com/openai/codex-security/pull/937))
+- seal drafts with empty artifact lists ([#941](https://github.com/openai/codex-security/pull/941))
+- include Terraform files in scan inventories ([#944](https://github.com/openai/codex-security/pull/944))
+- run README CLI commands with npx ([#945](https://github.com/openai/codex-security/pull/945))
+- resolve Git metadata outside its config ([#935](https://github.com/openai/codex-security/pull/935))
+- redirect findings service root to dashboard ([#948](https://github.com/openai/codex-security/pull/948))
+- bound source preview reads ([#947](https://github.com/openai/codex-security/pull/947))
+- align filter controls and dropdown carets ([#949](https://github.com/openai/codex-security/pull/949))
+- match filter control borders ([#957](https://github.com/openai/codex-security/pull/957))
+- make dashboard tables sortable ([#958](https://github.com/openai/codex-security/pull/958))
+- bump @linear/sdk from 94.0.0 to 95.0.0 in /sdk/typescript ([#955](https://github.com/openai/codex-security/pull/955))
+- tolerate transient setup failures and slow Windows runners ([#953](https://github.com/openai/codex-security/pull/953))
+- reject line breaks in inventory paths. ([#961](https://github.com/openai/codex-security/pull/961))
+- bump the third-party group across 3 directories with 7 updates ([#954](https://github.com/openai/codex-security/pull/954))
+- keep model-authored runtime status out of finalized reports ([#703](https://github.com/openai/codex-security/pull/703))
+- show progress while patching findings ([#931](https://github.com/openai/codex-security/pull/931))
+- deduplicate string-form openQuestions in merge\_saved\_results ([#951](https://github.com/openai/codex-security/pull/951))
+- emit structured JSON errors for failed scans ([#709](https://github.com/openai/codex-security/pull/709))
+- preserve undecided findings after model refusals ([#960](https://github.com/openai/codex-security/pull/960))
 <!-- release-section: highlights:end -->
 
 <!-- release-section: upgrades:start -->

.github/release-pr-state.json

@@ -1,9 +1,9 @@
 {
-  "baseVersion": "0.1.27",
-  "baseCommit": "c40d059935592adc1ae04119eb7ad5286d9de554",
+  "baseVersion": "0.1.28",
+  "baseCommit": "f5adb33ab7d1f86b252d703a8af45d47de7f9486",
   "sections": {
     "highlights": {
-      "generatedHash": "d0496c2cdec032d1ca5d28e8ae63b650918b93ebe458c76328734d47edc970d4",
+      "generatedHash": "ca63bc2aa2c429effb2c941d8f997277950dce9ee01d22bf2a178906d111254d",
       "humanOwned": false
     },
     "upgrades": {

sdk/typescript/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openai/codex-security",
-  "version": "0.1.28",
+  "version": "0.1.29",
   "description": "TypeScript SDK and CLI for Codex Security",
   "license": "Apache-2.0",
   "author": "OpenAI",