diff --git a/.github/aw/actions-lock.json b/.github/aw/actions-lock.json index 80130e4a1a..2db5179bb9 100644 --- a/.github/aw/actions-lock.json +++ b/.github/aw/actions-lock.json @@ -100,7 +100,7 @@ "version": "v5.6.0", "sha": "a26af69be951a213d495a4c3e4e4022e16d87065" }, - "actions/upload-artifact@v4": { + "actions/upload-artifact@v4.6.2": { "repo": "actions/upload-artifact", "version": "v4.6.2", "sha": "ea165f8d65b6e75b540449e92b4886f43607fa02" diff --git a/.github/workflows/changeset.lock.yml b/.github/workflows/changeset.lock.yml index a79d2d3f4b..cd66981d7f 100644 --- a/.github/workflows/changeset.lock.yml +++ b/.github/workflows/changeset.lock.yml @@ -187,7 +187,7 @@ jobs: node-version: '24' package-manager-cache: false - name: Install Codex - run: npm install -g --silent @openai/codex@0.92.0 + run: npm install -g --silent @openai/codex@0.93.0 - name: Install awf binary run: bash /opt/gh-aw/actions/install_awf_binary.sh v0.11.2 - name: Determine automatic lockdown mode for GitHub MCP server @@ -553,7 +553,7 @@ jobs: engine_name: "Codex", model: "gpt-5.1-codex-mini", version: "", - agent_version: "0.92.0", + agent_version: "0.93.0", workflow_name: "Changeset Generator", experimental: false, supports_tools_allowlist: true, diff --git a/.github/workflows/codex-github-remote-mcp-test.lock.yml b/.github/workflows/codex-github-remote-mcp-test.lock.yml index b588b15e82..4968ebe53f 100644 --- a/.github/workflows/codex-github-remote-mcp-test.lock.yml +++ b/.github/workflows/codex-github-remote-mcp-test.lock.yml @@ -128,7 +128,7 @@ jobs: node-version: '24' package-manager-cache: false - name: Install Codex - run: npm install -g --silent @openai/codex@0.92.0 + run: npm install -g --silent @openai/codex@0.93.0 - name: Install awf binary run: bash /opt/gh-aw/actions/install_awf_binary.sh v0.11.2 - name: Determine automatic lockdown mode for GitHub MCP server @@ -214,7 +214,7 @@ jobs: engine_name: "Codex", model: process.env.GH_AW_MODEL_AGENT_CODEX || "", version: "", - agent_version: "0.92.0", + agent_version: "0.93.0", workflow_name: "Codex GitHub Remote MCP Test", experimental: false, supports_tools_allowlist: true, diff --git a/.github/workflows/daily-fact.lock.yml b/.github/workflows/daily-fact.lock.yml index 171067952b..c340d48ada 100644 --- a/.github/workflows/daily-fact.lock.yml +++ b/.github/workflows/daily-fact.lock.yml @@ -133,7 +133,7 @@ jobs: node-version: '24' package-manager-cache: false - name: Install Codex - run: npm install -g --silent @openai/codex@0.92.0 + run: npm install -g --silent @openai/codex@0.93.0 - name: Install awf binary run: bash /opt/gh-aw/actions/install_awf_binary.sh v0.11.2 - name: Determine automatic lockdown mode for GitHub MCP server @@ -425,7 +425,7 @@ jobs: engine_name: "Codex", model: "gpt-5.1-codex-mini", version: "", - agent_version: "0.92.0", + agent_version: "0.93.0", workflow_name: "Daily Fact About gh-aw", experimental: false, supports_tools_allowlist: true, @@ -877,7 +877,7 @@ jobs: node-version: '24' package-manager-cache: false - name: Install Codex - run: npm install -g --silent @openai/codex@0.92.0 + run: npm install -g --silent @openai/codex@0.93.0 - name: Run Codex run: | set -o pipefail diff --git a/.github/workflows/daily-issues-report.lock.yml b/.github/workflows/daily-issues-report.lock.yml index 9333187aa8..8d823fbe91 100644 --- a/.github/workflows/daily-issues-report.lock.yml +++ b/.github/workflows/daily-issues-report.lock.yml @@ -197,7 +197,7 @@ jobs: node-version: '24' package-manager-cache: false - name: Install Codex - run: npm install -g --silent @openai/codex@0.92.0 + run: npm install -g --silent @openai/codex@0.93.0 - name: Install awf binary run: bash /opt/gh-aw/actions/install_awf_binary.sh v0.11.2 - name: Determine automatic lockdown mode for GitHub MCP server @@ -592,7 +592,7 @@ jobs: engine_name: "Codex", model: process.env.GH_AW_MODEL_AGENT_CODEX || "", version: "", - agent_version: "0.92.0", + agent_version: "0.93.0", workflow_name: "Daily Issues Report Generator", experimental: false, supports_tools_allowlist: true, @@ -1746,7 +1746,7 @@ jobs: node-version: '24' package-manager-cache: false - name: Install Codex - run: npm install -g --silent @openai/codex@0.92.0 + run: npm install -g --silent @openai/codex@0.93.0 - name: Run Codex run: | set -o pipefail diff --git a/.github/workflows/daily-observability-report.lock.yml b/.github/workflows/daily-observability-report.lock.yml index cfa1d6cdc5..2ec86f3794 100644 --- a/.github/workflows/daily-observability-report.lock.yml +++ b/.github/workflows/daily-observability-report.lock.yml @@ -152,7 +152,7 @@ jobs: node-version: '24' package-manager-cache: false - name: Install Codex - run: npm install -g --silent @openai/codex@0.92.0 + run: npm install -g --silent @openai/codex@0.93.0 - name: Install awf binary run: bash /opt/gh-aw/actions/install_awf_binary.sh v0.11.2 - name: Determine automatic lockdown mode for GitHub MCP server @@ -559,7 +559,7 @@ jobs: engine_name: "Codex", model: process.env.GH_AW_MODEL_AGENT_CODEX || "", version: "", - agent_version: "0.92.0", + agent_version: "0.93.0", workflow_name: "Daily Observability Report for AWF Firewall and MCP Gateway", experimental: false, supports_tools_allowlist: true, @@ -1095,7 +1095,7 @@ jobs: node-version: '24' package-manager-cache: false - name: Install Codex - run: npm install -g --silent @openai/codex@0.92.0 + run: npm install -g --silent @openai/codex@0.93.0 - name: Run Codex run: | set -o pipefail diff --git a/.github/workflows/daily-performance-summary.lock.yml b/.github/workflows/daily-performance-summary.lock.yml index f2a111f0fc..e2dde2b48e 100644 --- a/.github/workflows/daily-performance-summary.lock.yml +++ b/.github/workflows/daily-performance-summary.lock.yml @@ -187,7 +187,7 @@ jobs: node-version: '24' package-manager-cache: false - name: Install Codex - run: npm install -g --silent @openai/codex@0.92.0 + run: npm install -g --silent @openai/codex@0.93.0 - name: Install awf binary run: bash /opt/gh-aw/actions/install_awf_binary.sh v0.11.2 - name: Determine automatic lockdown mode for GitHub MCP server @@ -1053,7 +1053,7 @@ jobs: engine_name: "Codex", model: process.env.GH_AW_MODEL_AGENT_CODEX || "", version: "", - agent_version: "0.92.0", + agent_version: "0.93.0", workflow_name: "Daily Project Performance Summary Generator (Using Safe Inputs)", experimental: false, supports_tools_allowlist: true, @@ -1668,7 +1668,7 @@ jobs: node-version: '24' package-manager-cache: false - name: Install Codex - run: npm install -g --silent @openai/codex@0.92.0 + run: npm install -g --silent @openai/codex@0.93.0 - name: Run Codex run: | set -o pipefail diff --git a/.github/workflows/deep-report.lock.yml b/.github/workflows/deep-report.lock.yml index e2801253b5..c0bde06080 100644 --- a/.github/workflows/deep-report.lock.yml +++ b/.github/workflows/deep-report.lock.yml @@ -197,7 +197,7 @@ jobs: node-version: '24' package-manager-cache: false - name: Install Codex - run: npm install -g --silent @openai/codex@0.92.0 + run: npm install -g --silent @openai/codex@0.93.0 - name: Install awf binary run: bash /opt/gh-aw/actions/install_awf_binary.sh v0.11.2 - name: Determine automatic lockdown mode for GitHub MCP server @@ -615,7 +615,7 @@ jobs: engine_name: "Codex", model: process.env.GH_AW_MODEL_AGENT_CODEX || "", version: "", - agent_version: "0.92.0", + agent_version: "0.93.0", workflow_name: "DeepReport - Intelligence Gathering Agent", experimental: false, supports_tools_allowlist: true, @@ -1398,7 +1398,7 @@ jobs: node-version: '24' package-manager-cache: false - name: Install Codex - run: npm install -g --silent @openai/codex@0.92.0 + run: npm install -g --silent @openai/codex@0.93.0 - name: Run Codex run: | set -o pipefail diff --git a/.github/workflows/duplicate-code-detector.lock.yml b/.github/workflows/duplicate-code-detector.lock.yml index 80855ea803..6f628f38f3 100644 --- a/.github/workflows/duplicate-code-detector.lock.yml +++ b/.github/workflows/duplicate-code-detector.lock.yml @@ -144,7 +144,7 @@ jobs: node-version: '24' package-manager-cache: false - name: Install Codex - run: npm install -g --silent @openai/codex@0.92.0 + run: npm install -g --silent @openai/codex@0.93.0 - name: Install awf binary run: bash /opt/gh-aw/actions/install_awf_binary.sh v0.11.2 - name: Determine automatic lockdown mode for GitHub MCP server @@ -506,7 +506,7 @@ jobs: engine_name: "Codex", model: process.env.GH_AW_MODEL_AGENT_CODEX || "", version: "", - agent_version: "0.92.0", + agent_version: "0.93.0", workflow_name: "Duplicate Code Detector", experimental: false, supports_tools_allowlist: true, @@ -965,7 +965,7 @@ jobs: node-version: '24' package-manager-cache: false - name: Install Codex - run: npm install -g --silent @openai/codex@0.92.0 + run: npm install -g --silent @openai/codex@0.93.0 - name: Run Codex run: | set -o pipefail diff --git a/.github/workflows/issue-arborist.lock.yml b/.github/workflows/issue-arborist.lock.yml index b99926937c..f72d8783e0 100644 --- a/.github/workflows/issue-arborist.lock.yml +++ b/.github/workflows/issue-arborist.lock.yml @@ -155,7 +155,7 @@ jobs: node-version: '24' package-manager-cache: false - name: Install Codex - run: npm install -g --silent @openai/codex@0.92.0 + run: npm install -g --silent @openai/codex@0.93.0 - name: Install awf binary run: bash /opt/gh-aw/actions/install_awf_binary.sh v0.11.2 - name: Determine automatic lockdown mode for GitHub MCP server @@ -579,7 +579,7 @@ jobs: engine_name: "Codex", model: process.env.GH_AW_MODEL_AGENT_CODEX || "", version: "", - agent_version: "0.92.0", + agent_version: "0.93.0", workflow_name: "Issue Arborist", experimental: false, supports_tools_allowlist: true, @@ -1127,7 +1127,7 @@ jobs: node-version: '24' package-manager-cache: false - name: Install Codex - run: npm install -g --silent @openai/codex@0.92.0 + run: npm install -g --silent @openai/codex@0.93.0 - name: Run Codex run: | set -o pipefail diff --git a/.github/workflows/smoke-codex.lock.yml b/.github/workflows/smoke-codex.lock.yml index 21d6b944d3..e2460a5c41 100644 --- a/.github/workflows/smoke-codex.lock.yml +++ b/.github/workflows/smoke-codex.lock.yml @@ -191,7 +191,7 @@ jobs: node-version: '24' package-manager-cache: false - name: Install Codex - run: npm install -g --silent @openai/codex@0.92.0 + run: npm install -g --silent @openai/codex@0.93.0 - name: Install awf binary run: bash /opt/gh-aw/actions/install_awf_binary.sh v0.11.2 - name: Determine automatic lockdown mode for GitHub MCP server @@ -1231,7 +1231,7 @@ jobs: engine_name: "Codex", model: process.env.GH_AW_MODEL_AGENT_CODEX || "", version: "", - agent_version: "0.92.0", + agent_version: "0.93.0", workflow_name: "Smoke Codex", experimental: false, supports_tools_allowlist: true, @@ -1809,7 +1809,7 @@ jobs: node-version: '24' package-manager-cache: false - name: Install Codex - run: npm install -g --silent @openai/codex@0.92.0 + run: npm install -g --silent @openai/codex@0.93.0 - name: Run Codex run: | set -o pipefail diff --git a/pkg/constants/constants.go b/pkg/constants/constants.go index 8325fc811b..249097acca 100644 --- a/pkg/constants/constants.go +++ b/pkg/constants/constants.go @@ -283,7 +283,7 @@ const ( ) // DefaultCodexVersion is the default version of the OpenAI Codex CLI -const DefaultCodexVersion Version = "0.92.0" +const DefaultCodexVersion Version = "0.93.0" // DefaultGitHubMCPServerVersion is the default version of the GitHub MCP server Docker image const DefaultGitHubMCPServerVersion Version = "v0.30.2" diff --git a/pkg/constants/constants_test.go b/pkg/constants/constants_test.go index 7b0ad2a1b7..dd284c5b88 100644 --- a/pkg/constants/constants_test.go +++ b/pkg/constants/constants_test.go @@ -284,7 +284,7 @@ func TestVersionConstants(t *testing.T) { }{ {"DefaultClaudeCodeVersion", DefaultClaudeCodeVersion, "2.1.27"}, {"DefaultCopilotVersion", DefaultCopilotVersion, "0.0.400"}, - {"DefaultCodexVersion", DefaultCodexVersion, "0.92.0"}, + {"DefaultCodexVersion", DefaultCodexVersion, "0.93.0"}, {"DefaultGitHubMCPServerVersion", DefaultGitHubMCPServerVersion, "v0.30.2"}, {"DefaultMCPGatewayVersion", DefaultMCPGatewayVersion, "v0.0.86"}, {"DefaultSandboxRuntimeVersion", DefaultSandboxRuntimeVersion, "0.0.32"},