Skip to content

[0.159] Backport account security setup reminders for 0.159.3 - #49744

Merged
andrewgu-oai merged 1 commit into
release/0.159from
release/security-setup-1593
Sep 30, 2026
Merged

andrewgu-oai merged 1 commit into
release/0.159from
release/security-setup-1593

Conversation

@andrewgu-oai

Copy link
Copy Markdown
Contributor

Backport #49715 to the 0.159 maintenance line for 0.159.3 so local ChatGPT sessions can display optional account-security setup reminders.

This is an unchanged cherry-pick of the upstream patch: 23 files, including authenticated-request, stale-account, notice-validation and TUI regression tests. The server continues to own eligibility and rollout; unavailable notices produce no banner.

Validation: clean cherry-pick onto release/0.159 at 2851358; stable patch ID matches upstream; whitespace checks pass. Exact-backport CI and production build validation are pending.

## What changed

Fetch optional security setup notices asynchronously for local ChatGPT sessions using the OpenAI provider. Verify that saved credentials match the connected app server, ignore stale account responses, and validate notice text and HTTPS actions on `chatgpt.com`.

Show notices as dismissible inline banners with a browser action, while giving applicable usage banners priority. Preserve notice state and dismissal across thread changes, reconnects, and banner replacement for the same account and user.

## Testing

Add authenticated HTTP fixture tests, notice validation tests, and TUI tests covering stale responses, dismissal persistence, usage banner priority, browser actions, and wrapping in narrow terminals.

GitOrigin-RevId: b8635fcf6a26b42b6a06640601c8517d8d5e47e8
(cherry picked from commit 60947e2)
@github-actions

Copy link
Copy Markdown
Contributor


Thank you for your submission, we really appreciate it. Like many open-source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution. You can sign the CLA by just posting a Pull Request Comment same as the below format.


I have read the CLA Document and I hereby sign the CLA


You can retrigger this bot by commenting recheck in this Pull Request. Posted by the CLA Assistant Lite bot.

@andrewgu-oai
andrewgu-oai marked this pull request as ready for review September 30, 2026 21:44
@andrewgu-oai
andrewgu-oai merged commit 9fa22a5 into release/0.159 Sep 30, 2026
24 of 32 checks passed
@andrewgu-oai
andrewgu-oai deleted the release/security-setup-1593 branch September 30, 2026 21:44
@chatgpt-codex-connector

Copy link
Copy Markdown
Contributor

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review 🔄 Running since 2026-09-30T21:44:47.637704Z d6f7ed4 Draft marked ready
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@github-actions github-actions Bot locked and limited conversation to collaborators Sep 30, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants