---
title: "Codex Release Digest"
type: summary
tags: [releases, versions, codex-cli, changelog]
created: 2026-06-10
updated: 2026-06-10
confidence: high
sources: ["raw/github_release-0-140-0-alpha-4.md", "raw/github_release-0-140-0-alpha-2.md", "raw/github_release-0-139-0.md", "raw/github_release-0-139-0-alpha-1.md", "raw/github_release-0-139-0-alpha-2.md", "raw/github_release-0-139-0-alpha-3.md", "raw/github_release-0-138-0.md", "raw/github_release-0-138-0-alpha-2.md", "raw/github_release-0-138-0-alpha-3.md", "raw/github_release-0-138-0-alpha-4.md", "raw/github_release-0-138-0-alpha-5.md", "raw/github_release-0-138-0-alpha-6.md", "raw/github_release-0-138-0-alpha-7.md", "raw/github_release-0-138-0-alpha-8.md", "raw/github_doc-changelog-md.md"]
---

# Codex Release Digest

## Key Points

- **Current latest stable release: 0.139.0** (tag `rust-v0.139.0`, published 2026-06-09). **Latest pre-release: 0.140.0-alpha.4** (tag `rust-v0.140.0-alpha.4`, published 2026-06-10).
- The repo `CHANGELOG.md` is a stub: "The changelog can be found on the [releases page](https://github.com/openai/codex/releases)." Release notes are the only changelog.
- Alpha releases carry **no release notes** (body is just "Release X.Y.Z-alpha.N"); curated notes land only on the stable tag. Don't expect alpha notes to explain behavior changes.

### Release cadence

- Cadence is very fast: 0.138.0 shipped 2026-06-08, 0.139.0 shipped 2026-06-09, and 0.140.0 alphas began the same day 0.139.0 went stable. Multiple alphas can ship per day (e.g. eight 0.138.0 alphas between 2026-06-04 and 2026-06-08).
- Practical implication: when triaging a bug, always record the exact `codex --version`, and check whether the issue reproduces on the latest stable before filing — regressions are often fixed within a day or two. Downgrading one minor version is a common, sanctioned mitigation (see [[summaries/casebook-runtime]]).

### Notable changes in 0.139.0 (2026-06-09)

- Code mode can call **standalone web search** directly, including from nested JavaScript tool calls (#26719).
- Tool/connector input schemas now preserve `oneOf` and `allOf`; large schemas keep more shallow structure when compacted — better MCP compatibility (#24118, #27084). See [[concepts/mcp-integration]].
- `codex doctor` now reports editor and pager environment details (#27081).
- `codex plugin marketplace list --json` includes each marketplace source; plugin lists can serve from cached remote catalog (#27009, #26932).
- Fix: `codex resume --last "..."` and `codex fork --last "..."` treat the trailing argument as the initial prompt, not a session ID (#26818).
- Fix: sandbox execution preserves approved escalation decisions and enforces configured proxy-only networking more consistently (#24981, #27035). Relevant to [[syntheses/sandbox-approval-guide]].
- New CLI alias: `-P` for sandbox permissions profile (#27054).
- Fix: `/new`, `/clear`, `/fork` no longer drop cloud-managed requirements or feature flags during TUI config reloads (#25177).

### Notable changes in 0.138.0 (2026-06-08)

- `/app` command hands off the current CLI thread into Codex Desktop on macOS and native Windows (#25638, #26500). See [[entities/codex-app]] and [[entities/codex-cli]].
- Local image attachments and standalone image generations expose saved file paths to the model, making follow-up edits reliable (#25944, #25947).
- Codex auth supports **v2 personal access tokens** in CLI and app-server flows; app-server integrations can read account token usage (#25731, #25344). See [[concepts/authentication]].
- Plugin subcommands gained `--json` output (#26631, #26417).
- Goal-mode fixes: multiline paste in `/goal edit` no longer submits early; goals stop auto-continuing after terminal turn failures (#26047, #26690).
- Startup resilience: `/usr/bin/bash` shell fallback, shorter Linux proxy socket paths, pre-refresh of expired OAuth-backed MCP credentials (#26538, #26553, #26482).
- `AGENTS.md` loading fixed for remote and symlinked workspaces (#26205, #26465). See [[concepts/agents-md]].
- Managed permission profile allowlists are enforced (#24852) — the permissions docs treat **0.138.0 as the minimum version** for managed permission-profile rollouts.
- Perf: `resume --last` uses the state DB first; faster TUI startup via reused plugin discovery (#26462, #26469).

## Relevant Concepts

- [[concepts/installation-setup]] — upgrading and version pinning
- [[concepts/configuration]] — feature flags toggled per release
- [[concepts/sandboxing-approvals]] — sandbox fixes land frequently; see 0.139.0 items
- [[syntheses/troubleshooting-checklist]] — "check your version" is step one

## Source Metadata

- Type: GitHub release notes from `openai/codex` (tags `rust-v0.138.0-alpha.2` through `rust-v0.140.0-alpha.4`) plus the repo `CHANGELOG.md` stub.
- Author: OpenAI Codex maintainers.
- Fetched: 2026-06-10. Latest stable at fetch time: **0.139.0**; latest pre-release: **0.140.0-alpha.4**.
- URLs: https://github.com/openai/codex/releases