What happened
On Oct 6-8, 2026 promptfoo shipped 0.124.0/0.124.1 and code-scan-action 0.2.x: 0.124.0 removes the hosted ChatKit provider, makes WatsonX/Langfuse/Slack SDKs opt-in, and marks OpenAI Agents experimental; 0.124.1 adds OpenAI Decisions support, catalog text-token pricing exposure, and no-threshold cost recording for assertions; code-scan-action 0.2.2 mints OIDC after CLI install.
Why it matters
Promptfoo is the reference open-source LLM security/eval framework; the OpenAI Decisions integration lets teams test emergent 'decision' model behavior and the cost/assertion changes tighten CI guards for agentic-security evals. Breaking-config changes matter for existing pipelines.
Applicability
Existing promptfoo CI users should pin/adopt 0.124.x and re-check provider configs (ChatKit removal, opt-in SDKs); eval and red-team engineers can add OpenAI Decisions coverage now.