## Breaking changes
`codex login --api-key` was replaced with `codex login --with-api-key` that reads the key from `stdin` to improve security.
Sample usage:
```bash
printenv OPENAI_API_KEY | codex login --with-api-key
```
## Highlights:
- #4517 Experimental support for OAuth MCP server authentication
## Full list of merged PRs:
- #4636 Replace `--api-key` with `--with-api-key` for logging into the CLI with an API key
- #4644 Only write the final message to stdout for `codex exec`
- #4676 Default to `gpt-5` for Windows users who have not set a default model
- #4689 Remove the requirement to use `experimental_use_rmcp_client` for streamable HTTP MCP servers that don't require OAuth
- #4673 Fix colors when refocusing the terminal after a system theme update
- #4694 Fix reasoning effort title
- #4616 Updated device code login copy
- #4706 Fix command output truncation that sometimes used too much of the context window
- #4663 Initial parallel tool call support
- #4736 Pulsing dot loading state