AI Status Watchstatus.itlibra.com

Codex CLI Latest Version & Updates

By: OpenAI · Last checked: Oct 25, 2026, 12:44 PM UTC

Latest version

The latest version of Codex CLI is v0.164.0 (released 2d ago).

Official changelog ↗Codex CLI status →Get update alerts →

Release cadence

Latest
v0.164.0
Updates in 30 days
13
releases
7 days
1
release
Median interval
~27h

Computed by this site from publish timestamps (median-based).

Jump to a version（15）
v0.164.0v0.163.0v0.162.1v0.162.0v0.161.0v0.160.1v0.160.0v0.159.3v0.159.2v0.159.1v0.159.0v0.158.0v0.157.1v0.157.0v0.156.1

Recent releases

v0.164.0

Oct 23, 2026 UTC↗
Show original notes (English)
New Features
  • Save reusable prompts and slash commands in ten numbered `/presets` slots, with a keyboard menu for quick access. (#54380, #54381)
  • Set model, reasoning effort, speed, and permission profiles directly with inline `/model` and `/permissions` arguments. (#54378, #54383)
  • Preview viewed and generated images in the fullscreen transcript on terminals supporting Kitty or Sixel graphics. (#54216)
  • Authenticate enterprise MCP connections using eligible Codex account grants or dedicated sign-in, including OAuth clients requiring secrets. (#55334, #55859, #56001)
  • Mask credentials during supported remote Bash commands and Zsh snapshot sessions, including credentials from custom providers. (#54309, #54432, #56049)
  • The Amazon Bedrock setup wizard is now enabled by default, with API key entry grouped alongside other AWS sign-in methods when credentials are detected. (#56033, #56023)
Bug Fixes
  • Failed compaction no longer leaves partial summaries in conversation history, and background compaction failures fall back without panicking. (#53932, #55581)
  • Resuming sessions now finds compressed histories and restores saved thread settings instead of replacing them with global defaults. (#54008, #55923)
  • Windows HTTPS and WebSocket connections now handle proxy authentication challenges using the signed-in user’s Negotiate or NTLM credentials. (#55994, #56000)
  • CLI configuration overrides are preserved when `-c` or `--config` appears at multiple subcommand levels. (#56022)
  • Queued prompts now wait for pending permission selections to resolve before continuing. (#55682)
  • Hardened sandbox checks for case-variant metadata paths on macOS and replaceable symlinks used to locate executables. (#54273, #55384)
Chores
  • Reduced disk usage by pruning unused installations, cleaning abandoned marketplace checkouts, and bounding daemon logs. (#53827, #55149, #55689, #55690, #55856)
  • Updated the embedded JavaScript runtime with safety checks for optimized `Array.sort` operations. (#54519)

v0.163.0

Oct 15, 2026 UTC↗
Show original notes (English)
New Features
  • Open `/config` to search preferences across categories, change supported settings immediately, and see which changes require a restart. (#52990, #53429)
  • Send a follow-up while Codex is responding to steer it immediately. Interrupting a turn also stops active Code Mode cells and their nested tool calls. (#51812, #51835)
  • Configure a leader key in `/keymap`. The default is `Ctrl+X`, shortcut hints stay open until you choose or cancel, and voice mute moves to `F9`. (#52273)
  • Restart a managed background server from `/daemon`. Codex warns about work the restart could interrupt, then reconnects automatically. (#53173)
  • Codex can run independent read-only tools in parallel, including skill, memory, and conversation-history lookups. (#52245)
  • Daybreak is enabled by default for eligible accounts. `codex exec` can also select it with an OpenAI API key when the server offers access. (#53701, #53717)
Bug Fixes
  • Resuming a saved thread restores its permissions and network approvals, while respecting explicit overrides and current managed policy. (#53150, #53419, #53424)
  • The network proxy now checks permission before a DNS lookup, rejects duplicate `Host` headers, and prevents credential aliases from bypassing inspection hooks. (#51650, #52661, #53506)
  • Return to an existing side conversation with `/side` after switching threads. Answers to pending prompts also go back to the thread that asked. (#52184, #53436)
  • On Windows, `Ctrl+V` and `Shift+Insert` paste text as well as images. On WSL, repeated pastes reuse the clipboard reader, and copy attempts time out instead of hanging. (#53224, #52967, #53453)
  • Local commands finish promptly when a child keeps an output pipe open. Remote commands preserve late-arriving output so the final poll can still collect it. (#52652, #53331, #53622)
  • `codex exec` no longer prints the same file diff again after an unrelated command. (#53444)
Documentation
  • Updated the bundled OpenAI Docs guidance for migrations to the GPT-6 family, including model-specific reasoning, tool use, and data residency considerations. (#51768)
  • Clarified how the Linux sandbox uses bubblewrap for filesystem isolation and seccomp for syscall filtering. (#52610)
Chores
  • Codex now uses its standard shell executor and no longer bundles a patched `zsh`. Configurations using the retired shell flags receive a migration notice. (#52160, #52213)
  • Reduced Linux and macOS release package size by stripping symbols from packaged binaries while preserving them in the original build outputs. (#52178)

v0.162.1

Oct 9, 2026 UTC↗
Show original notes (English)
Bug Fixes
  • Fixed a TUI crash when asynchronous questions contain multiple lines, preserving line breaks and complete hyperlink destinations. (#51866)
  • Fixed startup failures caused by differences between a running background server's feature settings and CLI defaults. Compatibility checks now apply only to explicit command-line feature overrides. (#52648)

v0.162.0

Oct 8, 2026 UTC↗
Show original notes (English)
New Features
  • Add tools for creating and listing managed Git worktrees from trusted local projects when the worktrees feature is enabled. (#50148)
  • Pin tasks in the agent Command Center with `p` and keep them in a shared Pinned group when supported by the server. (#51500)
  • Navigate and copy transcript blocks with `/copy`, use `Ctrl+Insert` to copy selections, and tune mouse-wheel scrolling with `tui.mouse_scroll_speed`. (#50434, #50215, #50209)
  • Make URLs clickable in approval headers, questions, MCP prompts, warnings, banners, and verification prompts, including when links wrap across lines. (#51439, #51449, #51450, #51451, #51452, #51458)
  • Configure live web access and remote compaction capabilities for custom Responses-compatible model providers. (#50459)
  • Add JavaScript helpers for streaming promise results as they settle, plus opt-in ranked tool search in Code Mode. (#51126, #51209)
Bug Fixes
  • Respect server model and reasoning-summary defaults for new TUI threads while retaining explicit launch overrides. (#50013, #50811, #50913)
  • Preserve existing CRLF line endings in `apply_patch` updates without requiring an opt-in. (#51203)
  • Fix Linux sandbox startup with multiple denied files, reject writable sandbox-construction executables, and keep ripgrep configuration from weakening deny-glob masks. (#50059, #51211, #51407, #51527)
  • Restore ordinary drive-letter file access on Windows 10 and match Windows sandbox temp permissions to the child process environment. (#51511, #51512)
  • Honor server `Retry-After` advice for retryable Responses and WebSocket failures. (#50418, #51440)
  • Fix archive checksum verification when installing through Windows PowerShell with PowerShell 7 module paths present. (#51257)
Chores
  • Publish a signed PowerShell installer with Windows releases. (#51158)
  • Keep older stable releases and prereleases from replacing newer stable download targets or installer aliases. (#51186, #51425)

v0.161.0

Oct 7, 2026 UTC↗
Show original notes (English)
New Features
  • GPT-6.1 Sol is now the default model in the bundled and Amazon Bedrock catalogs. (#49318, #49339)
  • Amazon Bedrock supports multi-agent V2 and Ultra reasoning on compatible models; Bedrock Mantle also accepts AWS GovCloud regions. (#49345, #49813)
  • Sign in to MCP servers from an active terminal session with `/mcp login <name>`. (#49290)
  • Choose your microphone, speaker, and microphone input channels for voice conversations, with preferences saved locally. (#49437, #49836)
  • Daybreak is opt-in through `--enable cli_daybreak` or `features.cli_daybreak=true`; `daybreak=true` alone is insufficient. By default, controls and indicators are hidden, `/daybreak` is unavailable, and automatic Cyber routing is omitted—even for saved Daybreak threads. Saved preferences remain intact. Opt-in routing requires eligible ChatGPT sign-in, the OpenAI provider, and advertised model/program support. (#49856, #49858, #49859, #49861, #51207)
  • Select a Cyber access program per turn with `codex exec --cyber-access-program` or the TypeScript SDK’s `cyberAccessProgram` option. The explicit exec override remains available with `cli_daybreak` disabled and leaves the saved choice unchanged. (#49939, #51207)
Bug Fixes
  • Approved filesystem escalation can now grant broader write access while preserving denied reads and network restrictions. Background tasks retain their originating turn’s permissions. (#49353, #49880)
  • Explicit launch permissions survive terminal reconnects and new sessions, while implicit client settings no longer overwrite server or saved-thread web-search settings. (#49809, #49799)
  • Elevated Windows terminal sessions can start using an embedded server, and sandboxed PowerShell preserves relative paths beneath protected user profiles. (#49855, #49690)
  • Enter correctly submits buffered input after paste detection expires, including in Vim insert mode. (#49810)
  • Thread resume includes the latest committed history. Startup detects recoverable SQLite corruption earlier and preserves damaged databases as backups. (#49599, #49701)
  • Responses retries and WebSocket-to-HTTP fallback honor server retry guidance, reducing premature failures during overload. (#49441)
Documentation
  • Authentication guidance now accounts for keyring storage instead of implying credentials always reside in `auth.json`. (#49361)
Chores
  • Publishing an older alpha or hotfix no longer moves npm alpha tags backward. (#49704)

v0.160.1

Oct 5, 2026 UTC↗

v0.160.0

Oct 1, 2026 UTC↗

v0.159.3

Sep 30, 2026 UTC↗

v0.159.2

Sep 29, 2026 UTC↗

v0.159.1

Sep 29, 2026 UTC↗

v0.159.0

Sep 29, 2026 UTC↗

v0.158.0

Sep 28, 2026 UTC↗

v0.157.1

Sep 26, 2026 UTC↗

v0.157.0

Sep 25, 2026 UTC↗

v0.156.1

Sep 23, 2026 UTC↗

FAQ

What is the latest version of Codex CLI?

The latest version of Codex CLI is v0.164.0 (released 2d ago).

How often is Codex CLI updated?

Codex CLI was updated 13 times in the last 30 days. Updates are frequent, so check this page for the latest version and changes.

Where can I read Codex CLI's changelog?

This page shows the release notes for the latest versions of Codex CLI as published, with a link to the official changelog for each version.

Source: Codex CLI official changelog.