v1.4.471

swc-project/swcv1.4.471Aug 28, 2026by github-actions[bot]

AI Summary

Addresses a persistence issue with Codex OAuth tokens where refreshed credentials were being overwritten by stale disk values, ensuring secure token management across processes.

Key Highlights

Persist refreshed Codex OAuth tokens securely across processes
Reload stored tokens before refresh to prevent stale values
Reuse valid refresh tokens before launching interactive authentication
Save environment files atomically while holding locks

New Features

Secure Codex OAuth token persistence
Atomic file writing for environment values
Fast-path token reuse
Reactivation of configured vendors

Full Release Notes

## Changes

GitHub unexpected status code: 410 from provider GitHub, response body: {"error":{"code":"github_models_retirement_brownout","message":"GitHub Models is temporarily unavailable as part of a scheduled retirement brownout."}}

### PR [#2200](https://github.com/danielmiessler/Fabric/pull/2200) by [ksylvan](https://github.com/ksylvan): fix: persist Codex OAuth tokens after refresh

- Persist refreshed Codex OAuth tokens securely across processes, writing rotated credentials atomically with cross-process locks.
- Reload stored tokens before refresh and return valid in-memory tokens first, preventing stale disk values from overwriting fresh credentials.
- Reuse valid refresh tokens before launching interactive authentication, requiring account identifiers and unexpired tokens for fast-path reuse.
- Preserve existing environment values, save environment files atomically while holding locks, and enforce secret-only permissions.
- Reactivate configured vendors and surface configuration and provider failures immediately, with localized Codex prompts and persistence errors.