Claude Code 2.1.312, Codex 0.165 and Copilot Server-to-Server Auth: October 28 Roundup

Three things moved since yesterday's roundup: Claude Code 2.1.312 appeared in its changelog, Codex 0.165.0 became the latest stable release on its releases page, and GitHub put server-to-server authentication for Copilot into public preview.

Claude Code 2.1.312

A smaller release than 2.1.311, but with a few changes that matter in managed environments:

• New oidc.user_id_claim setting for the Claude apps gateway, so users can be identified by an id_token claim other than sub.
• On Bedrock, Vertex, Foundry and Mantle, unrecognized model names now get a shorter system prompt, and automatic model fallback extends to those names.
• Fixes for managed settings not loading after sign-in from VS Code, large CLAUDE.md files being overwritten, and skills not being found after a cd in Bash.
• Concurrency limits for prompt and agent hooks, click-to-send for queued messages in fullscreen mode, and usage-limit wording changed to "5-hour limit". The claude_code.safety_event OpenTelemetry event is no longer sent.

Codex 0.165.0 is now the stable release

Per the Codex releases page, 0.165.0 (October 27) is marked Latest, with 0.166.0 alphas already following on October 27 and 28.

• A built-in Google Cloud Vertex AI provider, selected with model_provider = "gcp".
• GPT-6.1 Terra added to the model catalogs, a repository filter in the session picker, and reasoning effort that can change mid-conversation for supported models.
• Memory v2 is the default for fresh profiles, and attached thread forks arrive in the app-server API as an experimental feature.
• Fixes: queued agent messages no longer restart work after an interrupt or a switch to Plan mode, retries stop when a provider reports a model as not found, and a marketplace URL validation gap is closed.

GitHub Copilot: server-to-server authentication (public preview)

The GitHub changelog entry describes GitHub Apps installed on an organization that can now make Copilot requests through the Copilot SDK without a signed-in user's credentials. The identity belongs to the workload instead of one person.

1. Give the GitHub App the read-only Copilot Requests organization permission.
2. Install the app on the organization.
3. Pass a short-lived installation access token to the Copilot SDK.

Usage is billed to the organization that owns the installation, and its model policies, budgets and spending controls apply. Owners can see app-attributed usage in AI usage CSV reports via the app_client_id field and revoke access by suspending or uninstalling the app. The changelog gives no general availability date.

What to do this week

• Update to Claude Code 2.1.312 if you use VS Code with managed settings or run through a cloud provider gateway.
• Upgrade Codex to 0.165.0 if you want the Vertex AI provider or GPT-6.1 Terra; check Memory v2 behavior on fresh profiles.
• If you build internal agents on the Copilot SDK, trial server-to-server auth in a test org. It is a preview, so don't depend on it for production yet.

References

Claude Code CHANGELOG · Codex releasesCopilot server-to-server authentication · GitHub changelog