OpenAI Codex CLI 0.152.0 ships vim search, MCP output limits, credential-protection fix
OpenAI
Codex CLI 0.152.0 (Sep 1) adds vim-mode `/` and `?` search with `n`/`N` repeat navigation, rate-limit banners with usage/credit/plan actions, per-tool MCP `output_token_limit` with consistent truncation across resumes, configurable `thread/shellCommand` timeouts, and package-style MCP server names. Cloud tasks now reject untrusted backend URLs and disable redirects to protect saved credentials; the planning tool is disabled by default (`tools.update_plan.enabled = true` re-enables it). Follows 0.151.0 from August 30.
Why it matters
The cloud-task credential hardening closes a real attack surface for users with stored logins, and per-tool MCP output limits address a common failure mode where a chatty MCP server blows the context window.
Importance: 2/5
Minor release with real changes, official changelog