Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package openai-codex for openSUSE:Factory checked in at 2026-09-07 11:29:44 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/openai-codex (Old) and /work/SRC/openSUSE:Factory/.openai-codex.new.1265 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "openai-codex" Mon Sep 7 11:29:44 2026 rev:8 rq:1375766 version:0.153.2 Changes: -------- --- /work/SRC/openSUSE:Factory/openai-codex/openai-codex.changes 2026-09-02 17:04:37.708243913 +0200 +++ /work/SRC/openSUSE:Factory/.openai-codex.new.1265/openai-codex.changes 2026-09-07 11:31:16.836099849 +0200 @@ -1,0 +2,57 @@ +Fri Sep 4 08:26:17 UTC 2026 - Martin Pluskal <[email protected]> + +- Update to version 0.153.2: + * Correct the GPT-6-Astra Fast tier description to "2x speed" + instead of "1.5x"; display text only, request handling is + unchanged +- Update to version 0.153.1: + * GPT-6-Astra can be configured through the API without changing + the default model or listing it in the model picker +- Build against the system bzip2, libzstd, oniguruma and sqlite + instead of the copies bzip2-sys, zstd-sys, onig_sys and + libsqlite3-sys otherwise compile in; drop their bundled() + Provides and add pkgconfig(bzip2), pkgconfig(libzstd), + pkgconfig(oniguruma) >= 6.9.3 and pkgconfig(sqlite3) >= 3.34.1 + * Add codex-system-libzstd.patch, which turns on zstd's + "pkg-config" feature in the workspace manifest + * oniguruma and sqlite have no usable manifest switch, so %build + and %check export RUSTONIG_SYSTEM_LIBONIG and + LIBSQLITE3_SYS_USE_PKG_CONFIG instead, and %install now fails + the build unless all four are DT_NEEDED of codex + * aws-lc stays bundled: aws-lc-sys has no system-library mode +- Keep vendor.tar.zst: 0.153.2 has the same Cargo.lock as 0.153.0, + so the linked crate set, the License tag and the + Legal-Review-Notice counts are unchanged + +------------------------------------------------------------------- +Thu Sep 3 08:56:51 UTC 2026 - Martin Pluskal <[email protected]> + +- Update to version 0.153.0: + * Vim mode gains undo (u) and redo (Ctrl+R), preserving whole + drafts including pasted content and attachments + * The plugin CLI lists, installs and removes plugins from remote + marketplaces + * tui.auto_recap = false turns off automatic recaps while keeping + /recap available + * TUI history shows complete patches, input sent to background + terminals and individual completed commands + * TUI sessions reconnect after an app-server connection drops, + keeping drafts and holding queued submissions for review + * Guardian review history survives compaction, restarts and + forks; Full Access skips Guardian review for confirmation-only + actions + * Remembered MCP tool approvals are scoped to the selected + app account + * tui.disable_paste_burst replaces the top-level setting, which + stays supported as a fallback + * New disabled-by-default + features.context_management.experimental_mode +- Refresh codex-drop-v8-code-mode.patch and + codex-no-startup-update-check.patch for the moved context +- Regenerate vendor.tar.zst: the 14 crates 0.153.0 adds to the + lockfile are all Windows-only, so the linked third-party set, + the License tag and the bundled() versions are unchanged; the + Legal-Review-Notice counts move only by one added first-party + workspace member + +------------------------------------------------------------------- Old: ---- codex-rust-v0.152.1.tar.gz New: ---- codex-rust-v0.153.2.tar.gz codex-system-libzstd.patch ----------(New B)---------- New: pkgconfig(oniguruma) >= 6.9.3 and pkgconfig(sqlite3) >= 3.34.1 * Add codex-system-libzstd.patch, which turns on zstd's "pkg-config" feature in the workspace manifest ----------(New E)---------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ openai-codex.spec ++++++ --- /var/tmp/diff_new_pack.OnxoRs/_old 2026-09-07 11:31:25.860416174 +0200 +++ /var/tmp/diff_new_pack.OnxoRs/_new 2026-09-07 11:31:25.867416419 +0200 @@ -17,20 +17,20 @@ Name: openai-codex -Version: 0.152.1 +Version: 0.153.2 Release: 0 Summary: OpenAI Codex coding agent for the terminal # Legal-Review-Notice: upstream codex is Apache-2.0. Everything after that # covers the Rust crates statically linked into the shipped # %%{_bindir}/codex binary, enumerated with # cargo tree --offline -p codex-cli -e normal,no-proc-macro -# against the vendored tree (875 crates on aarch64, 877 on x86_64: 748 -# third-party vendored deps on aarch64 and 750 on x86_64, plus 127 +# against the vendored tree (876 crates on aarch64, 878 on x86_64: 748 +# third-party vendored deps on aarch64 and 750 on x86_64, plus 128 # first-party codex workspace members, which are Apache-2.0 like upstream. # Every one declares a licence, none is missing; only the third-party count # is a licence signal, the workspace one moves whenever upstream adds a # crate). Electing Apache-2.0 where it is offered and MIT otherwise, the -# aarch64 tally is Apache-2.0 648, MIT 174, +# aarch64 tally is Apache-2.0 649, MIT 174, # Unicode-3.0 20, MPL-2.0 12, ISC 7, BSD-3-Clause 6, Zlib 5, BSD-2-Clause 1, # CC0-1.0 1, CDLA-Permissive-2.0 1. # - self_cell 1.2.2 is "Apache-2.0 OR GPL-2.0-only" and is the ONLY crate @@ -54,10 +54,19 @@ # "ISC AND (Apache-2.0 OR ISC) AND Apache-2.0 AND MIT AND BSD-3-Clause AND # (Apache-2.0 OR ISC OR MIT) AND (Apache-2.0 OR ISC OR MIT-0)". Electing # Apache-2.0 in each OR leaves ISC, Apache-2.0, MIT and BSD-3-Clause, all of -# which the tag already carries. It is one of the bundled C libraries listed -# in the Provides: bundled(...) lines below. matchit (MIT AND BSD-3-Clause), -# encoding_rs, ring and aws-lc-rs similarly keep ISC / BSD-3-Clause in the -# tag even when Apache-2.0 is elected as the crate's primary licence. +# which the tag already carries. aws-lc is the only third-party C *library* +# still compiled into the binary (Provides: bundled(aws-lc) below; ring and +# blake3 also build C/asm of their own, but neither is a packaged system +# library, so neither is owed a bundled() line); bzip2, libzstd, +# oniguruma and sqlite now come from the distribution, so the C sources the +# matching -sys crates carry - bzip2's own licence, SQLite's public domain, +# oniguruma's BSD-2-Clause and zstd's BSD-3-Clause-or-GPL-2.0 dual - are +# shipped in the src.rpm inside vendor.tar.zst but linked into nothing, and +# place no obligation on the binary package. The Rust glue crates are still +# linked, so the tally above and the License: tag are unchanged by that. +# - matchit (MIT AND BSD-3-Clause), encoding_rs, ring and aws-lc-rs similarly +# keep ISC / BSD-3-Clause in the tag even when Apache-2.0 is elected as the +# crate's primary licence. License: Apache-2.0 AND MIT AND Unicode-3.0 AND MPL-2.0 AND ISC AND BSD-3-Clause AND Zlib AND BSD-2-Clause AND CC0-1.0 AND CDLA-Permissive-2.0 URL: https://github.com/openai/codex Source0: https://github.com/openai/codex/archive/refs/tags/rust-v%{version}.tar.gz#/codex-rust-v%{version}.tar.gz @@ -66,6 +75,8 @@ Patch0: codex-drop-v8-code-mode.patch # PATCH-FIX-OPENSUSE codex-no-startup-update-check.patch [email protected] -- distribution policy: do not probe github.com for updates on startup Patch1: codex-no-startup-update-check.patch +# PATCH-FIX-OPENSUSE codex-system-libzstd.patch [email protected] -- link zstd-sys against the system libzstd instead of its bundled copy +Patch2: codex-system-libzstd.patch BuildRequires: cargo BuildRequires: cargo-packaging >= 1.2.0 BuildRequires: cmake @@ -75,8 +86,14 @@ BuildRequires: pkgconfig BuildRequires: rust >= 1.95 BuildRequires: zstd +BuildRequires: pkgconfig(bzip2) BuildRequires: pkgconfig(liblzma) +BuildRequires: pkgconfig(libzstd) +# onig_sys builds without its "generate" feature here, so its pre-generated +# bindings need the 6.9.3 API; libsqlite3-sys asks pkg-config for 3.34.1. +BuildRequires: pkgconfig(oniguruma) >= 6.9.3 BuildRequires: pkgconfig(openssl) +BuildRequires: pkgconfig(sqlite3) >= 3.34.1 # The Linux sandbox launcher looks up bwrap in PATH and panics when it is # absent, so this is a hard requirement rather than a recommendation. Requires: bubblewrap @@ -84,15 +101,14 @@ Requires: git-core # Used for the built-in code search when present. Recommends: ripgrep -# Rust -sys crates that compile and statically link a bundled C library rather -# than using the system one. There is no crate-level switch to unbundle -# aws-lc-sys (it is reached through rama-tls-rustls); the others are the -# crates' only supported build mode. +# aws-lc-sys, reached through rama-tls-rustls, compiles and statically links +# its own aws-lc and offers no switch to use a system library. bzip2-sys, +# zstd-sys, onig_sys and libsqlite3-sys no longer compile theirs (see the +# pkgconfig() BuildRequires above, Patch2, the exports in %%build/%%check and +# the DT_NEEDED assertion in %%install); those C sources stay inside +# vendor.tar.zst, hence in the src.rpm, but end up in no binary package and so +# get no bundled() Provides. Provides: bundled(aws-lc) = 1.71.0 -Provides: bundled(bzip2) = 1.0.8 -Provides: bundled(libzstd) = 1.5.7 -Provides: bundled(oniguruma) = 6.9.10 -Provides: bundled(sqlite) = 3.51.3 ExclusiveArch: %{rust_tier1_arches} %description @@ -163,6 +179,18 @@ # bundling a private bubblewrap. The sandbox launcher looks up the system bwrap # on PATH first (codex-rs/linux-sandbox/src/launcher.rs). export CODEX_SKIP_BWRAP_BUILD=1 +# Use the system oniguruma and sqlite instead of the copies onig_sys and +# libsqlite3-sys would otherwise compile in. Neither can be switched off from +# the workspace manifest: onig_sys has no feature for it at all, and +# libsqlite3-sys gets "bundled" from sqlx's sqlite-bundled, whose only upstream +# opt-out (sqlite-unbundled) pulls in bindgen, which is not vendored (the +# lockfile reaches it only through the v8 crate Patch0 removes, and +# vendor.tar.zst carries neither bindgen nor clang-sys), so it cannot be used in +# an offline build. Both build scripts check these env vars first. %%check +# repeats them because both declare rerun-if-env-changed; %%install asserts the +# result on the linked binary. +export LIBSQLITE3_SYS_USE_PKG_CONFIG=1 +export RUSTONIG_SYSTEM_LIBONIG=1 # Upstream's release profile uses thin LTO. Combined with the -C debuginfo=2 # the distribution adds (so find-debuginfo.sh can split out -debuginfo), the # single LTO rustc peaks at 43 GB RSS here - far beyond what any OBS worker @@ -197,6 +225,16 @@ fi install -D -m 0755 "$targetdir/release/codex" %{buildroot}%{_bindir}/codex +# The unbundling is silent when it regresses: bzip2-sys falls back to its own +# copy when pkg-config fails, and the two env vars in %%build are easy to lose. +# Fail the build instead. +for lib in libbz2.so libzstd.so libonig.so libsqlite3.so; do + readelf -d %{buildroot}%{_bindir}/codex | grep -q "NEEDED.*$lib" || { + echo "ERROR: $lib is not a DT_NEEDED of codex - it got bundled again" >&2 + exit 1 + } +done + install -d %{buildroot}%{_datadir}/bash-completion/completions install -d %{buildroot}%{_datadir}/fish/vendor_completions.d install -d %{buildroot}%{_datadir}/zsh/site-functions @@ -209,6 +247,10 @@ "$targetdir/release/codex" completion zsh > %{buildroot}%{_datadir}/zsh/site-functions/_codex %check +# Same as %%build: both build scripts declare rerun-if-env-changed, so without +# these the test profile would rebuild them with the library bundled. +export LIBSQLITE3_SYS_USE_PKG_CONFIG=1 +export RUSTONIG_SYSTEM_LIBONIG=1 cd codex-rs # Deliberately an allowlist rather than --workspace. --workspace cannot be used # at all: it reaches the members Patch0 removes. Beyond that the choice is one ++++++ _service ++++++ --- /var/tmp/diff_new_pack.OnxoRs/_old 2026-09-07 11:31:26.005421256 +0200 +++ /var/tmp/diff_new_pack.OnxoRs/_new 2026-09-07 11:31:26.020421782 +0200 @@ -6,13 +6,16 @@ vendor.tar.zst is generated from the upstream tarball with codex-drop-v8-code-mode.patch applied, so that the V8 bindings pulled in by the v8-poc/code-mode-runtime/code-mode-host workspace members (~213 MB of - sources that are never compiled) stay out of the bundle. To regenerate: + sources that are never compiled) stay out of the bundle. + codex-system-libzstd.patch is not applied first: it only flips a cargo + feature and leaves the lockfile, hence the vendored set, untouched. + To regenerate: - tar xf codex-rust-v0.152.1.tar.gz - patch -p1 -d codex-rust-v0.152.1 < codex-drop-v8-code-mode.patch - rm -rf codex-rust-v0.152.1/codex-rs/vendor + tar xf codex-rust-v0.153.2.tar.gz + patch -p1 -d codex-rust-v0.153.2 < codex-drop-v8-code-mode.patch + rm -rf codex-rust-v0.153.2/codex-rs/vendor osc service manualrun cargo_vendor - rm -rf codex-rust-v0.152.1 + rm -rf codex-rust-v0.153.2 The codex-rs/vendor removal drops the bundled bubblewrap 0.11.2 C sources, which %prep removes as well - codex uses the system bubblewrap instead. @@ -29,7 +32,8 @@ cargo-audit is NOT clean, and running it inside codex-rs hides most of it: upstream's codex-rs/.cargo/audit.toml ignores 11 advisories, which drops the count from 5 to 1. Audit a bare copy of Cargo.lock instead. As of - 0.152.1, and unchanged since 0.151.0: + 0.153.2, whose Cargo.lock is byte-identical to 0.153.0's, and unchanged + since 0.151.0: RUSTSEC-2026-0185 / CVE-2026-25800 (quinn-proto 0.11.14, fixed 0.11.15) - NOT linked. reqwest gates dep:quinn behind its "http3" feature, which the workspace leaves off, so it never reaches @@ -47,7 +51,7 @@ not anything this package can vendor around. --> <service name="cargo_vendor" mode="manual"> - <param name="srcdir">codex-rust-v0.152.1/codex-rs</param> + <param name="srcdir">codex-rust-v0.153.2/codex-rs</param> <param name="compression">zst</param> <param name="update">false</param> </service> ++++++ codex-drop-v8-code-mode.patch ++++++ --- /var/tmp/diff_new_pack.OnxoRs/_old 2026-09-07 11:31:26.062423255 +0200 +++ /var/tmp/diff_new_pack.OnxoRs/_new 2026-09-07 11:31:26.071423570 +0200 @@ -23,15 +23,15 @@ "codex-home", "cloud-config", "cloud-tasks", -@@ -96,7 +94,6 @@ - "otel", +@@ -101,7 +99,6 @@ + "otel-trace-websocket", "tui", "tools", - "v8-poc", "websocket-client", "worktree", "workload-identity", -@@ -178,7 +175,6 @@ +@@ -185,7 +182,6 @@ codex-cloud-tasks-mock-client = { path = "cloud-tasks-mock-client" } codex-code-mode = { path = "code-mode" } codex-code-mode-protocol = { path = "code-mode-protocol" } @@ -39,7 +39,7 @@ codex-home = { path = "codex-home" } codex-http-client = { path = "http-client" } codex-websocket-client = { path = "websocket-client" } -@@ -280,7 +276,6 @@ +@@ -290,7 +286,6 @@ codex-utils-stream-parser = { path = "utils/stream-parser" } codex-utils-string = { path = "utils/string" } codex-utils-template = { path = "utils/template" } @@ -47,7 +47,7 @@ codex-workload-identity = { path = "workload-identity" } codex-windows-sandbox = { path = "windows-sandbox-rs" } core_test_support = { path = "core/tests/common" } -@@ -490,7 +485,6 @@ +@@ -501,7 +496,6 @@ url = "2" urlencoding = "2.1" uuid = "1" @@ -55,7 +55,7 @@ vt100 = "0.16.2" walkdir = "2.5.0" webbrowser = "1.2.2" -@@ -551,7 +545,6 @@ +@@ -562,7 +556,6 @@ ignored = [ "icu_provider", "openssl-sys", ++++++ codex-no-startup-update-check.patch ++++++ --- /var/tmp/diff_new_pack.OnxoRs/_old 2026-09-07 11:31:26.109424902 +0200 +++ /var/tmp/diff_new_pack.OnxoRs/_new 2026-09-07 11:31:26.123425393 +0200 @@ -12,7 +12,7 @@ --- a/codex-rs/core/src/config/mod.rs +++ b/codex-rs/core/src/config/mod.rs -@@ -3900,7 +3900,7 @@ +@@ -3942,7 +3942,7 @@ let review_model = override_review_model.or(cfg.review_model); ++++++ codex-rust-v0.152.1.tar.gz -> codex-rust-v0.153.2.tar.gz ++++++ /work/SRC/openSUSE:Factory/openai-codex/codex-rust-v0.152.1.tar.gz /work/SRC/openSUSE:Factory/.openai-codex.new.1265/codex-rust-v0.153.2.tar.gz differ: char 25, line 1 ++++++ codex-system-libzstd.patch ++++++ From: Martin Pluskal <[email protected]> Subject: Link zstd against the system libzstd zstd-sys otherwise compiles and statically links its bundled zstd 1.5.7 C sources. Its "pkg-config" feature (forwarded by zstd-safe) makes build.rs probe pkg-config for libzstd instead; setting it in the workspace manifest rather than via ZSTD_SYS_USE_PKG_CONFIG covers %build and %check in one place. Distribution policy (do not bundle system libraries), not suitable for upstream submission. --- a/codex-rs/Cargo.toml +++ b/codex-rs/Cargo.toml @@ -504,7 +504,7 @@ wildmatch = "2.6.1" winapi-util = "0.1.11" zip = "2.4.2" -zstd = "0.13" +zstd = { version = "0.13", features = ["pkg-config"] } wiremock = "0.6" zeroize = "1.8.2" ++++++ vendor.tar.zst ++++++ /work/SRC/openSUSE:Factory/openai-codex/vendor.tar.zst /work/SRC/openSUSE:Factory/.openai-codex.new.1265/vendor.tar.zst differ: char 7, line 1
