[dependabot]

Summary

Upgrade the Codex CLI and SDK from 0.158.0 to 0.159.0 across the TypeScript package, MCP app, and triage evals.

Changes

• Keep the CLI, SDK, and platform packages aligned at 0.159.0 in all three manifests and lockfiles.
• Preserve the evals at evals/triage-finding.

Testing

• Passed frozen SDK and MCP dependency installs and the frozen eval lockfile-only install.
• Passed SDK types, formatting, and CI compilation checks.
• Passed plugin source compatibility and Ruff 0.16.8 lint/format checks.
• Existing CI checks passed on the dependency PR head.
• Passed all nine source compatibility checker tests and deterministic eval contracts on the combined upgrades.
• Local focused SDK checks: 250 passed and 22 skipped, including two Git-selection tests rerun after correcting fixture placement under an unrelated temporary-directory Git boundary. Cross-platform SDK, MCP, and standalone plugin suites passed in CI.
• Local standalone host compilation was blocked by the read-only Cargo cache; CI covered that build.

Risk and rollout

Dependency-only upgrade with no changes to public CLI commands, flags, environment variables, or defaults. The Codex runtime changes with the dependency version; all consumers remain pinned together.

Public disclosure review

• No customer, partner, prospect, or user identities, data, or identifying details are included.
• No credentials, personal data, private source, scan findings, or nonpublic links or tickets are included.
• I reviewed the branch name, title, description, commits, changes, comments, logs, screenshots, attachments, and links for public disclosure.