Codex CLI 0.163.0 lets you steer mid-response, runs read-only tools in parallel and checks network permission before DNS lookups
This release is mostly interaction polish and sandbox details, with the network proxy fixes bearing directly on security.
// Key points
- You can send a follow-up mid-response to redirect Codex right away; interrupting also stops active Code Mode cells.
- Independent read-only tools such as skill, memory and history lookups can run in parallel; /config is searchable and flags settings that need a restart.
- The network proxy checks permissions before DNS lookups, rejects duplicate Host headers and closes a credential-alias bypass; resuming a saved thread restores its permissions and network approvals.
- Daybreak is on by default for eligible accounts.
Builder's takeIf you run Codex in CI, upgrade for the three network proxy fixes rather than the features: a DNS lookup can leak information on its own, and a credential-alias bypass is worse. Also, resuming a thread now brings back its network approvals, so after upgrading check which domains old threads had approved.
// Background · from #Coding agents
Full timeline →- Oct 16 Copilot will retire Claude Opus 4.8, Claude Opus 5 and GPT-5.6 Terra on November 16
- Oct 16 Code scanning alerts can be assigned to Copilot, which reruns CodeQL to verify and opens a draft PR, up to 25 alerts at a time
- Oct 15 Claude Code 2.1.299 compacts 200K+ token conversations after about 54 idle minutes, before the one-hour prompt cache expires