chore(release): 0.9.1

.github/release-notes.md

@@ -1,9 +1,10 @@
-<!-- release-version: 0.9.0 -->
+<!-- release-version: 0.9.1 -->
 
 <!-- release-section: highlights:start -->
 
 ## Highlights
 
+- The npm package includes Developer ID-signed native addons for Apple Silicon and Intel Macs. This lets Codex Desktop load the addon when preparing review items.
 - Deep Scan runs independent Standard reviews in batches. Workers can share leads and verify each other's evidence. The final report groups observations that have the same fix and retains the source locations from each review. [Deep Scan guide](https://github.com/openai/codex-security/blob/main/sdk/typescript/docs/cli.md#configure-deep-scans)
 - External scanner imports are enabled by default in the CLI, SDK, and plugin. You can preview supported reports, save findings locally, and publish supported findings to Cloud. The scanner guides list the accepted formats and which inputs are local-only. [Scanner import guides](https://github.com/openai/codex-security/blob/main/docs/scanner-imports/README.md)
 - `scans logs` finds sessions faster in large compressed histories. The GitHub Action also includes scan scope limitations in its job summary, including when a scan returns zero findings.

.github/release-pr-state.json

@@ -1,14 +1,14 @@
 {
-  "baseVersion": "0.8.3",
-  "baseCommit": "f22b8b991ebfe0a348ec9b5c29341a5b48dee649",
+  "baseVersion": "0.9.0",
+  "baseCommit": "7cc6bae5003503e826aef70cb96fd042ea3d436a",
   "sections": {
     "highlights": {
-      "generatedHash": "9e7e57cc51cdb7c8747b7cdc33470b7c3b4af7ea289265c06280412b5ab7728a",
-      "humanOwned": false
+      "generatedHash": "1a95122d50517aa00b5e2dc8becaf9fb60a852238723dce499111c9504a991b2",
+      "humanOwned": true
     },
     "upgrades": {
-      "generatedHash": "2948040a17c453f501741772fae72fe5f8c6c893d96262a2a45ea017662c9286",
-      "humanOwned": false
+      "generatedHash": "f0e089f37da057fc30882ef40dfe50f6b52abdc17018bf2d70c34afb22c66fe2",
+      "humanOwned": true
     }
   }
 }

examples/github-actions/codex-security.yml

@@ -32,7 +32,7 @@ jobs:
       security-events: write
       actions: read
     env:
-      CODEX_SECURITY_VERSION: "0.9.0"
+      CODEX_SECURITY_VERSION: "0.9.1"
       BEDROCK_MODEL_ID: ${{ vars.BEDROCK_MODEL_ID }}
       # Report-only by default. Set to "high" to fail on high/critical findings.
       FAIL_ON_SEVERITY: ""

github-action/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codex-security-action",
-  "version": "0.9.0",
+  "version": "0.9.1",
   "private": true,
   "type": "module",
   "description": "Run Codex Security in GitHub Actions with explicit scope, budgets, and scan health reporting",

sdk/typescript/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openai/codex-security",
-  "version": "0.9.0",
+  "version": "0.9.1",
   "description": "TypeScript SDK and CLI for Codex Security",
   "license": "Apache-2.0",
   "author": "OpenAI",