OpenAI CLI 1.41 adds automatic updates and redacted diagnostics

What changed

OpenAI CLI 1.41 adds automatic installation of eligible updates for self-managed macOS and Linux releases, exact-version pinning and opt-outs for update checks or installation. It also adds request timing plus redacted body and server-sent-event diagnostics.

Why it matters

Automatic updates change the trust and reproducibility boundary of a developer tool, while redacted transport diagnostics make API failures easier to investigate. Teams now need an explicit update policy instead of assuming a self-managed binary stays fixed.

What to do

Choose one policy: pin with OPENAI_CLI_VERSION_PIN, disable automatic installation with OPENAI_CLI_NO_AUTO_UPDATE, or disable discovery with OPENAI_CLI_NO_UPDATE_CHECK. Then capture the installed version and verify diagnostic redaction with synthetic secrets.

Caveat

The feature applies only to eligible self-managed macOS and Linux releases. Redaction reduces exposure but is not proof that logs contain no sensitive data, and automatic updates still require a tested rollback and provenance policy.