@@ -109,7 +109,7 @@ jobs:
       - name: "Diagnose workflow failure"
         id: diagnose
         if: steps.context.outputs.ready == 'true'
-        uses: openai/codex-action@66a81490a2326ee818531f7021d77e6398ae7062
+        uses: openai/codex-action@a8d8be6ee028bea4525bc722d16f36687b408c81
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         with:
 
@@ -310,7 +310,7 @@ jobs:
       - name: "Fix reproduced bug"
         id: fix-bug
         if: steps.prepare.outputs.existing != 'true'
-        uses: openai/codex-action@66a81490a2326ee818531f7021d77e6398ae7062
+        uses: openai/codex-action@a8d8be6ee028bea4525bc722d16f36687b408c81
         env:
           CARGO_HOME: ${{ runner.temp }}/cargo-home
           GH_TOKEN: ${{ github.token }}
 
@@ -142,7 +142,7 @@ jobs:
 
       - name: "Triage issue"
         id: triage
-        uses: openai/codex-action@66a81490a2326ee818531f7021d77e6398ae7062
+        uses: openai/codex-action@a8d8be6ee028bea4525bc722d16f36687b408c81
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           TMPDIR: ${{ runner.temp }}
 
@@ -40,6 +40,7 @@ jobs:
           mkdir -p "$REVIEW_CONFIG/codex" "$RUNNER_TEMP/codex-code-quality-review"
           printf 'REVIEW_CONFIG=%s\n' "$REVIEW_CONFIG" >> "$GITHUB_ENV"
           cp agents/codex/config.toml "$REVIEW_CONFIG/codex/"
+          printf '\n[features]\nnetwork_proxy = true\n' >> "$REVIEW_CONFIG/codex/config.toml"
           cp agents/prompts/pull-request-code-quality-review.md "$REVIEW_CONFIG/prompt.md"
           cp agents/schemas/pull-request-code-quality-review.json "$REVIEW_CONFIG/schema.json"
           cp agents/scripts/collect-pull-request-review-context.sh "$REVIEW_CONFIG/"
@@ -74,7 +75,7 @@ jobs:
 
       - name: "Review pull request"
         id: review
-        uses: openai/codex-action@c385816875cc2fc8e033ed9d1cba96f8c331210e # v1.11 + GitHub API retry
+        uses: openai/codex-action@a8d8be6ee028bea4525bc722d16f36687b408c81
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           TMPDIR: ${{ runner.temp }}/codex-code-quality-review
@@ -85,7 +86,6 @@ jobs:
           model: gpt-6-astra
           effort: xhigh
           permission-profile: "pull-request-review"
-          codex-args: '["--enable", "network_proxy"]'
           safety-strategy: drop-sudo
           allow-bot-users: "astral-automations-bot[bot],renovate[bot]"
           prompt-file: "${{ env.REVIEW_CONFIG }}/prompt.md"
 
@@ -68,7 +68,7 @@ jobs:
 
       - name: "Determine pull request labels"
         id: labels
-        uses: openai/codex-action@66a81490a2326ee818531f7021d77e6398ae7062
+        uses: openai/codex-action@a8d8be6ee028bea4525bc722d16f36687b408c81
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         with:
 
@@ -115,7 +115,7 @@ jobs:
           fi
 
       - name: Rebase pull request
-        uses: openai/codex-action@66a81490a2326ee818531f7021d77e6398ae7062
+        uses: openai/codex-action@a8d8be6ee028bea4525bc722d16f36687b408c81
         env:
           BASE_REF: ${{ inputs.base-ref }}
           BASE_PREVIOUS_SHA: ${{ inputs.base-previous-sha }}
 
@@ -75,7 +75,7 @@ jobs:
           } > "$RUNNER_TEMP/editorialize-changelog-prompt.md"
 
       - name: "Rewrite changelog"
-        uses: openai/codex-action@66a81490a2326ee818531f7021d77e6398ae7062
+        uses: openai/codex-action@a8d8be6ee028bea4525bc722d16f36687b408c81
         with:
           openai-api-key: ${{ secrets.OPENAI_API_KEY }}
           codex-version: "0.153.4"
 
@@ -133,7 +133,7 @@ jobs:
 
       - name: "Reproduce issue behavior"
         id: reproduce
-        uses: openai/codex-action@66a81490a2326ee818531f7021d77e6398ae7062
+        uses: openai/codex-action@a8d8be6ee028bea4525bc722d16f36687b408c81
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           TMPDIR: ${{ runner.temp }}
@@ -303,7 +303,7 @@ jobs:
 
       - name: "Create integration test"
         id: create-test
-        uses: openai/codex-action@66a81490a2326ee818531f7021d77e6398ae7062
+        uses: openai/codex-action@a8d8be6ee028bea4525bc722d16f36687b408c81
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           INSTA_UPDATE: "no"
 
@@ -199,7 +199,7 @@ jobs:
 
       - name: "Update issue context"
         if: steps.find-thread.outputs.found == 'true'
-        uses: openai/codex-action@66a81490a2326ee818531f7021d77e6398ae7062
+        uses: openai/codex-action@a8d8be6ee028bea4525bc722d16f36687b408c81
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           TMPDIR: ${{ runner.temp }}