From 649341715044a16db66623505742d5bd51cf436a Mon Sep 17 00:00:00 2001 From: Celia Chen Date: Wed, 29 Jul 2026 22:56:36 +0000 Subject: [PATCH] Document the Responses API proxy reqwest exception (#36043) ## What changed Classify `codex-responses-api-proxy` as an intentional `reqwest` exception in `deny.toml` instead of a temporary migration exception. The proxy independently owns its blocking upstream HTTP transport, and the allowed wrapper set remains unchanged. GitOrigin-RevId: 3db3281a13d67c9514051ea0009013ce50c439e6 --- codex-rs/deny.toml | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/codex-rs/deny.toml b/codex-rs/deny.toml index d5e56a38ad..90a04fda7e 100644 --- a/codex-rs/deny.toml +++ b/codex-rs/deny.toml @@ -238,12 +238,14 @@ deny = [ { crate = "reqwest", wrappers = [ # Intended owner. "codex-http-client", + # Intentional exception: this standalone, privileged Responses API proxy owns its blocking + # upstream HTTP transport independently of Codex. + "codex-responses-api-proxy", # Temporary migration exceptions. "codex-app-server", "codex-core", "codex-ollama", "codex-otel", - "codex-responses-api-proxy", # Third-party crates that own their reqwest integration. These are not part of the # first-party migration count above. "oauth2",