This is an older version. The current version is 0.161.0. Codex CLI 0.161.0 · Released:
Installer files 0.69.0
| Architecture | Type | Scope | File size | Download | SHA256 |
|---|---|---|---|---|---|
| 64-bit | ZIP → Portable | — | — | github.com | VirusTotal |
| ARM64 | ZIP → Portable | — | — | github.com | VirusTotal |
Link and SHA256 come from the Windows Package Manager community manifest. Compare the hash of the downloaded file before running it.
Release notes
Highlights
- Skills: Explicit skill selections now inject SKILL.md content into the turn; skills load once per session and warn if a file
can’t be read (#7763).
- Config API: config/read is fully typed; config writes preserve comments/order; model is optional to match real configs (#7658,
#7789, #7769).
- TUI/UX: Log files drop ANSI codes; vim navigation for option selection and transcript pager; transcript continuity fix; slash-
command popup no longer triggers on invalid input; experimental tui2 frontend behind a flag (#7836, #7784, #7550, #7363,
#7704, #7793).
- Exec & sandbox: Shell snapshotting, reworked unified-exec events, elevated sandbox allowances (sendmsg/recvmsg), clearer rate-
limit warnings, better request-id logging, and safer escalations (#7641, #7775, #7788, #7779, #7795, #7830, #7750).
- Platform/auth/build: MCP in-session login, remote-branch review support, Windows signing toggles, ConPty vendoring, Nix hash
fixes, and safer release guardrails (#7751, #7813, #7757/#7804/#7806, #7656, #7762, #7834).
- Misc fixes: Unsupported images error cleanly, absolute config paths, parallel test stability, duplicated feature spec removal,
experimental-model prompt/tools, and more (#7478, #7796, #7589, #7818, #7826, #7823, #7765).
PRs Merged
- #7836 Disable ansi codes in TUI log file
- #7834 Error when trying to push a release while another release is in progress
- #7830 Remove conversation_id and bring back request ID logging
- #7826 fix: flaky tests 3
- #7823 fix: remove duplicated parallel FeatureSpec
- #7818 fix: flaky test 2
- #7817 fix: Upgrade @modelcontextprotocol/sdk to ^1.24.0
- #7813 feat: use remote branch for review is local trails
- #7807 chore: disable trusted signing pkg cache hit
- #7806 Revert "Revert "feat: windows codesign with Azure trusted signing""
- #7804 Revert "feat: windows codesign with Azure trusted signing"
- #7799 Removed experimental "command risk assessment" feature
- #7797 parse rg | head a search
- #7796 fix: introduce AbsolutePathBuf and resolve relative paths in config.toml
- #7795 Express rate limit warning as % remaining
- #7793 feat(tui2): add feature-flagged tui2 frontend
- #7789 [app-server] Preserve comments & order in config writes
- #7788 Elevated Sandbox 1
- #7787 fix more typos in execpolicy.md
- #7784 Add vim-style navigation for CLI option selection
- #7779 allow sendmsg/recvmsg syscalls in Linux sandbox
- #7775 chore: rework unified exec events
- #7769 make model optional in config
- #7765 Use codex-max prompt/tools for experimental models
- #7763 Inject SKILL.md when it’s explicitly mentioned
- #7762 Fix Nix cargo output hashes for rmcp and filedescriptor
- #7757 Revert "Revert "feat: windows codesign with Azure trusted signing""
- #7756 Vendor ConPtySystem
- #7751 feat: support mcp in-session login
- #7750 refactor with_escalated_permissions to use SandboxPermissions
- #7704 fix: Prevent slash command popup from activating on invalid inputs
- #7658 [app-server-protocol] Add types for config
- #7641 feat: shell snapshotting
- #7589 chore: enable parallel tc
- #7550 Add vim navigation keys to transcript pager
- #7478 Fix: gracefully error out for unsupported images
- #7363 Fix transcript pager page continuity
- #7779 allow sendmsg/recvmsg syscalls in Linux sandbox (already listed; ensure single entry)
- #7788 Elevated Sandbox 1 (already listed)
- #7784 Add vim-style navigation for CLI option selection (already listed)
- #7807/7806/7804 Windows signing toggles (grouped above)
