Changelog UpdateOpenAI/Codex CLICLIAdd allowed_sandbox_modes to requirements.toml to constrain permitted sandbox modes (PR #8298)