bubblewrap

Codex CLI 0.162.0 closes two narrow gaps in how OpenAI's Linux sandbox is built. In one, a developer's own ripgrep settings could undermine the sandbox's deny list. In the other, a writable bwrap binary on PATH could be picked as the sandbox launcher. The release also carries Windows fixes...