Codex CLI 0.169.0: codex exec no longer trusts project config without --trust

What changed

In Codex CLI 0.169.0, codex exec keeps project configuration and MCP servers disabled in untrusted directories, even with --sandbox workspace-write. Project trust must now be saved explicitly with --trust on codex exec or codex review. The release also adds multiple side-chat tabs in the opt-in terminal workspace, adding or editing custom model providers from the terminal, and Ctrl+S to save a diagnostic ZIP.

Who it affects

Codex CLI users, especially anyone running codex exec or codex review in CI or scripts.

What to do

After upgrading, add --trust to codex exec and codex review runs in repos whose project config or MCP servers you rely on, and check that CI jobs still pick up their config.

Source: https://github.com/openai/codex/releases/tag/rust-v0.169.0