[dependabot]

Scope: updates repository-owned workflows only. Castiron-generated workflows retain their existing pins and must be upgraded through a separate generator/template regeneration. The exact-SHA workflow test assertion is updated alongside this change.

Validation: go test ./internal/releaseworkflow -count=1, go vet ./internal/releaseworkflow, gofmt -d internal/releaseworkflow/workflow_test.go, and git diff --check passed.

Bumps actions/upload-artifact from 7.0.1 to 7.0.2.

Release notes

Sourced from actions/upload-artifact's releases.

v7.0.2

What's Changed

• Improves artifact download retries when the service returns HTTP 429 (rate limiting), including honoring valid Retry-After headers.
• Updates @​actions/artifact to v6.3.1.

New Contributors

• @​tunc-d made their first contribution in actions/upload-artifact#821

Full Changelog: actions/upload-artifact@v7.0.1...v7.0.2

Commits

• cf430e0 Merge pull request #822 from actions/tunc-d-prepare-upload-v7-0-2
• c2acded chore: prepare v7.0.2 release
• 4687c1b Merge pull request #821 from actions/tunc-d-upload-artifact-package-bump
• 8cbe1be Bump @​actions/artifact to 6.3.1
• See full diff in compare view

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-10-20T20:23:55.244386Z	029ebab	New commits
🔒 Security Review	✅ Completed 2026-10-20T20:26:29.906602Z	029ebab	New commits

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[github-actions]

Castiron custom code

Evaluated main: 9e47d2e4a125f21c354f7f64988a024fa87ec95a.

Trusted main policy: 9e47d2e4a125f21c354f7f64988a024fa87ec95a.

✅ No new custom-code files detected.

0 mixed files remain; 0 existing customizations changed.

Compared 06e59d8782f2 → 029ebab2d114. Generated baselines verified.

A changed generated baseline means this report cannot reliably identify which handwritten lines changed.

Inspect the custom-code diff

Download the exact patch produced by this run (requires repository access):

gh run download 39491964373 --repo openai/openai-cli \
  --name castiron-custom-code-39491964373-1 --dir /tmp/castiron-custom-code-39491964373-1
git apply --stat /tmp/castiron-custom-code-39491964373-1/custom-code.patch
cat /tmp/castiron-custom-code-39491964373-1/custom-code.patch

Or reproduce it from an SDK checkout containing the vendored reporter:

git fetch --no-tags origin 9e47d2e4a125f21c354f7f64988a024fa87ec95a 029ebab2d1147bd40ad33e54cd38df161378083a
python3 generated/castiron/custom_code_report.py report \
  --base 9e47d2e4a125f21c354f7f64988a024fa87ec95a \
  --head 029ebab2d1147bd40ad33e54cd38df161378083a --target-branch main --fetch --require-head-hash --public \
  --out /tmp/castiron-custom-code-029ebab2d114
cat /tmp/castiron-custom-code-029ebab2d114/custom-code.patch

This is the current full custom patch for mixed files, not an attribution of only the handwritten lines changed by this PR.

Full report and patch

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 75c39eaf03

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

[saioai]

[saibot]

review pending. full review is queued or incomplete. no approval yet.