chore(deps): update ghcr.io/icoretech/codex-pooler docker tag to v0.11.1

[renovate]

This PR contains the following updates:

Package	Update	Change
ghcr.io/icoretech/codex-pooler	minor	0.10.8 → 0.11.1

---

Release Notes

icoretech/codex-pooler (ghcr.io/icoretech/codex-pooler)

v0.11.1

Bug Fixes

• upstreams: end a workspace denial with its window instead of keeping the account out of routing (bd8a932)

Tests

• gateway: pin the strict done status of public Responses tool completion (7980090)
• hoist generated test bodies into private functions and start test-fast partitions with a larger binary virtual heap (be8030d)
• v1: print the tool-integrity evidence lines only when test diagnostics are on (fb6e4f0)

Miscellaneous Chores

• deps: update helm release codex-pooler to v0.10.4 (#​490) (f3ca95f)

v0.11.0

Features

• gateway: accept tool_search and its replayed items on /v1/responses (f4ba8d9)
• gateway: carry the partial_answer assistant phase through replay and mailbox continuations (e29b502)
• gateway: record stream timing and the end_turn class on attempts (fa7e05e)
• resets: prioritize eligible accounts by saved reset expiry (70431d4)
• saved-resets: record what a consume says about the windows it resets (fe8efaa)
• upstreams: show saved reset request and recovery status (202866c)
• v1: accept Codex agent_message history and the provider's web_search keys (d7c077c)
• v1: accept replayed web_search_call items and relay unknown_parameter and invalid_parameter (bfe6a91)
• v1: refuse the beta Agents API routes with a clear unsupported endpoint (d49ba07)

Bug Fixes

• accounting: admit the exact retry of a native HTTP resend that failed before any output (906385a)
• accounting: let the full-history resend of a lost anchored websocket turn rejoin it (9e4b9f2)
• accounting: let the resend of a lost websocket turn that gained workspaces rejoin it (5af26a1)
• accounting: read a reasoning effort only from an object reasoning, so a malformed one no longer fails the reservation (c437d82)
• accounting: refuse every resend of a content-filter turn except its guided retry (e3bdd4c)
• admin: fit the connection toast, disabled reasons and poll-pause heading to 375 px (09c28ef)
• admin: give the saved-reset bank dialog's connection notice the dialog gutter (6e393bc)
• admin: keep the saved-reset status true for finished, paused and legacy resets (d2d4db2)
• admin: make the saved reset receipt short, outcome-accurate and consistent (35a3412)
• admin: offer manual redemption only when the claim would accept it (8f65cff)
• catalog: check the served catalog for Codex 0.159 and 0.160 clients (1b4b2d5)
• catalog: keep the model picker order out of the canonical partition digest (0eae9ad)
• deps: update dependency @​astrojs/starlight to v0.42.5 (4c95d9d)
• deps: update dependency apexcharts to v7.8.0 (bce8fc0)
• dev: project saved reset receipts in component showcase (421d60c)
• dispatch: keep the saved-reset cohort when a request retries (d09787d)
• gateway: complete a websocket usage limit's route health like its HTTP twin (562941b)
• gateway: fail over a websocket handshake 401 whose refresh cannot retry (43d2298)
• gateway: fill an empty streamed /v1 Responses terminal output from the done items (8f3efb1)
• gateway: keep a content-filter terminal delivered when the client closes before the write is read back (7abdce4)
• gateway: keep a guided content-filter retry through its account's token refresh (f2e274b)
• gateway: keep a guided content-filter retry's account pin through the client's retry of it (a12bcd3)
• gateway: keep the live websocket auth exhaustion and upgrade-frame helpers past Dialyzer (ba82d14)
• gateway: log every owner-exit fence decision (f2e68e6)
• gateway: match a grown resend to its request after Codex fills the turn's workspaces (63850d0)
• gateway: match a retry to its request after Codex fills the turn's workspaces (ae92791)
• gateway: match a websocket resend to its request after Codex fills the turn's workspaces (9d44626)
• gateway: name the compaction phase event in websocket diagnostics (2545bae)
• gateway: never resend a turn whose payload left when its owner dies (c2ddc06)
• gateway: never take a socket's turn over after its owner crashed (0876911)
• gateway: pin a native HTTP session to the account serving its first output (5b18737)
• gateway: read a websocket validation refusal's code and field from its text (e41ed82)
• gateway: read the exhausted-auth answer at runtime so the release build's xref gate passes (3c6e892)
• gateway: record route health when a websocket failure fails over (4eb2ab2)
• gateway: release a drained request against its earlier candidate's attempt (f0c9722)
• gateway: release a refusal after an earlier candidate's attempt against that attempt (75e0419)
• gateway: route a guided content-filter retry to the account that produced its reasoning (536f082)
• gateway: serve the native HTTP re-sample after a completed response (124e36c)
• gateway: settle a websocket failure after the payload reached the provider (806d477)
• gateway: settle exhausted websocket upstream auth as HTTP does (824e042)
• gateway: settle the frames that share the upstream 101's read (cecf6d5)
• jobs: keep the saved reset request read model out of compile-time dependencies (f8a517c)
• platform: say how many execution proofs the publisher retains when publication stops (3bd4abc)
• quota: stop a stale meter that only responses report from blocking its account (ff9199b)
• quota: stop routing on a model meter the provider no longer reports (0bbb357)
• resets: decide blocked recovery on the long window alone, never the 5-hour window (db8f848)
• resets: open blocked recovery for an exhausted weekly window next to a usable 5-hour window (7dafab7)
• routing: re-check the held-back partition before a pool-wide quota refusal (c3de0e2)
• routing: spend at most one banked reset per request (86b3374)
• upstreams: carry the account's quota evidence through its token refresh (1bb8760)
• v1: handle the request fields the Codex backend now refuses (a81d914)
• v1: keep encrypted markers inside namespace tools during schema lowering (0a40679)
• websocket: answer a usage-limit-refused connection-bound compaction for the Pool's capacity (b36bd38)
• websocket: keep a content-filter terminal delivered after the client closes (1292129)
• websocket: keep streaming turns open past the downstream idle timeout (39ab114)
• websocket: read the public end_turn outcome without the clause dialyzer proves unreachable (7e464c8)

Reverts

• keep blocked recovery closed on a two-window weekly exclusion until decided (432c10a)

Tests

• dev: rotate screenshot seed clients by recency rank (373aa5d)
• gateway: accept every outcome of a request racing a closing fake and order owner monitors (a416747)
• gateway: answer the blocking owner upstream like a real session (45f42f5)
• gateway: assert no frame follows the recovered response after an owner kill (d035088)
• gateway: clean up the owners and fakes of the upstream-exit tests (1693f31)
• gateway: model the released client's two compaction resends (0260ebd)
• gateway: open mailbox lease scenarios on a long lease and shorten it at the boundary (ff73403)
• gateway: pin that a client gets the closed item, never its announcement (aeaa34c)
• gateway: pin that a compact request without instructions carries no instructions key (682bc7f)
• gateway: pin that a compaction's resend never reads the client-retry observation (528659c)
• gateway: pin the empty instructions a Full request without them is sent with (2bdd331)
• gateway: pin the two guards that keep a pinned content-filter retry on its account (a5e9f90)
• gateway: poll the cut backend's release and hold the session row after the boundary (1bde8d9)
• gateway: run /v1 owner-crash arms on per-process connections and end the takeover capture on its result (c0d8ebc)
• gateway: run the production PubSub on real-Repo peers and drop a vacuous cancel test (a67de72)
• gateway: seed the lapse arm's ring by its request id so the preference decides it (27d0df5)
• gateway: stop retirable local owners by monitor and any DOWN (74147df)
• gateway: wait for a retiring lifecycle owner's exit in cleanup (38cc88d)
• name every accepted native websocket mode in the FakeUpstream refusal (028d0cd)
• name shared test nodes uniquely across the VMs that share epmd (0593f2c)
• name the provider refusal mode in the FakeUpstream websocket refusal contract (c985edc)
• order monitors before triggers that end the process elsewhere (096c135)
• platform: capture the publisher's outage warning from before the database stops (d47d3d0)
• platform: count the queued proof only once the registry holds it (06b7993)
• stop the CI flakes that kept 0.10.9 red (e1e0810)
• upstreams: cover saved reset redemption and quota confirmation (82c2286)
• websocket: await the socket before forcing a session lease to lapse (e4c9514)
• websocket: await the socket before forcing lease expiry in the continuation matrix (23b50ad)
• websocket: wait for the first turn's outcome before holding a lost compaction (0f32567)
• websocket: wait the detection budget for the close after an API key expires (046c723)

Miscellaneous Chores

• deps: update dependency openai/codex to v0.160.1 (3402c6b)
• deps: update dependency six to v0.4.2 (7a80c42)
• deps: update ghcr.io/icoretech/codex-docker docker tag to v0.160.1 (212dbf8)
• deps: update helm release codex-pooler to v0.10.3 (968657e)
• ignore the Expert language server workspace (dc8d799)
• release 0.11.0 (a17e6d2)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.