Codex CLI 0.154: GPT-6 Astra in the picker, worktree isolation
OpenAI's most capable model is now Codex's default, each session can claim its own isolated checkout, and a Gemini CLI patch closes an SSRF hole in MCP auth.
Copy markdown
GPT-6 Astra lands in the picker
Codex CLI 0.154.0 adds GPT-6 Astra to the model picker and Amazon Bedrock catalog; version 0.153.4 already promoted it to the default. OpenAI's most capable model, with a ~1M-token context, is now one keystroke away in the terminal with no config edit.
Worktree isolation ends the branch fight
An experimental --worktree flag gives each Codex session its own isolated git checkout, so several agents can work the same repo at once without colliding over branches. Kick off three fixes in parallel and none clobbers another's working tree.
Codex now asks before it guesses
The 0.154.0 release adds inline questioning, so the agent pauses to ask you mid-task instead of assuming intent. It also ships a Windows daemon with managed updates, formatting-preserved response copy, and workspace-trust checks that run at startup.
Patch your Gemini CLI: SSRF hole closed
Gemini CLI 0.59.0 fixes a Server-Side Request Forgery in MCP OAuth metadata discovery, flips workspace trust to fail-closed, and restricts MCP servers in limited-exec modes. If you wire up MCP integrations, update now.