OPENAI PUB_DATE: 2026.09.01

OPENAI CODEX 0.152 QUIETLY HARDENS LONG-RUNNING OPS, MCP TOOLING, AND SECURITY

OpenAI Codex shipped a release focused on longer-running commands, MCP tool controls, and practical security fixes. The latest Codex update [v0.152.0](https://...

OpenAI Codex 0.152 quietly hardens long-running ops, MCP tooling, and security

OpenAI Codex shipped a release focused on longer-running commands, MCP tool controls, and practical security fixes.

The latest Codex update v0.152.0 adds configurable timeouts for thread/shellCommand beyond an hour, per-tool output_token_limit with consistent truncation across resumes, and clearer credential refresh flows (including Amazon Bedrock). It also tightens cloud task URL validation to block untrusted backends and redirects, and fixes Windows sandbox execution with Microsoft Store PowerShell.

Community threads highlight real-world pressure points like rate limits and long-running commands. A press piece claims broader "full computer control" for Codex, but treat that as marketing until it shows up in official notes: article.

[ WHY_IT_MATTERS ]
01.

Long ETL, build, or data jobs can now run under Codex without fragile workarounds for 60-minute ceilings.

02.

Security hardening around backend URLs and redirects reduces credential exposure risks in automated flows.

[ WHAT_TO_TEST ]
  • terminal

    Run a codex exec pipeline that exceeds 60 minutes; assert logs, cancellation, and retry behavior with new timeouts.

  • terminal

    Set output_token_limit on an MCP tool and verify consistent truncation across session resumes and tool restarts.

[ BROWNFIELD_PERSPECTIVE ]

Legacy codebase integration strategies...

  • 01.

    After upgrading, validate MCP server naming (package-style names) and auth flows; some CLI scripts may need tweaks.

  • 02.

    Audit any cloud task backends and redirects; new checks may block previously working but unsafe URL patterns.

[ GREENFIELD_PERSPECTIVE ]

Fresh architecture paradigms...

  • 01.

    Design Codex-driven automation for batch/ETL with explicit long timeouts and bounded tool outputs from day one.

  • 02.

    Adopt MCP package-style naming for tools to simplify distribution and per-env authentication.

Enjoying_this_story?

Get daily OPENAI + SDLC updates.

  • Practical tactics you can ship tomorrow
  • Tooling, workflows, and architecture notes
  • One short email each weekday

FREE_FOREVER. TERMINATE_ANYTIME. View an example issue.

GET_DAILY_EMAIL
AI + SDLC // 5 MIN DAILY