codex - The LGTM (Page 11)

The LGTM

Sign in Subscribe

codex

A collection of 228 posts

npm Staged Publishing Turns Package Release Security Into a Human Approval Workflow

npm Staged Publishing Turns Package Release Security Into a Human Approval Workflow

npm staged publishing is a small change to a command line and a large change to the trust model behind JavaScript releases. For years, maintainers had an awkward choice: keep publishing manual and friction-heavy, or give CI enough authority to make a package live while everyone hopes the workflow, token,

Codex 0.134 Alpha Is Mostly Plumbing — Which Is Exactly the Point

Codex 0.134 Alpha Is Mostly Plumbing — Which Is Exactly the Point

Codex 0.134 alpha is the sort of release that looks boring in a changelog and important in production. The GitHub release page says almost nothing beyond the tag name, which is not ideal if you are trying to understand whether to upgrade. The compare view says plenty: this is

NVIDIA AI-Q Turns Deep Research Into an Agent Skill — Which Is the Right Kind of Laziness

NVIDIA AI-Q Turns Deep Research Into an Agent Skill — Which Is the Right Kind of Laziness

NVIDIA’s AI-Q deep-research skill is easy to undersell if you read it as another “now your coding agent can research things” announcement. That is the boring interpretation, and probably the wrong one. The more interesting move is architectural: NVIDIA is turning deep research into a delegated backend capability. Claude

OpenClaw’s Latest Self-Healing PR Is About the Failure Mode Operators Actually Feel: Wedged Channels

Operators do not experience runtime bugs as neat categories. They do not say, “my queue-depth decrement failed to retrigger dequeue” or “my secrets-runtime store loader skipped legacy OAuth sidecars.” They say the Telegram bot went quiet, Codex auth stopped working in channels, and the gateway needed a restart. PR #84752

OpenClaw 2026.5.20-beta.1 Is a Runtime-Governance Release Wearing a Voice-Feature Hat

OpenClaw 2026.5.20-beta.1 Is a Runtime-Governance Release Wearing a Voice-Feature Hat

OpenClaw’s v2026.5.20-beta.1 changelog has the shape of a feature release. Discord voice sessions can follow users. xAI gets device-code OAuth. OpenRouter routing policy is more explicit. Ollama models with incomplete metadata stop losing tools by default. Useful, yes. But the release is more interesting as a

Ramp’s Codex Story Is Really About Making AI Code Review a Platform Primitive

Ramp’s Codex case study is easy to read as vendor proof that GPT-5.5 is good at code review. That is the least interesting version of the story. The more useful read is that Ramp appears to be treating AI review as platform infrastructure: a repeatable, trusted part of