[phernandez]

Prepares CHANGELOG.md for just release v0.24.0.

• Dates the v0.24.0 heading 2026-10-22.
• Adds a Security section: GHSA-4gfv-c2mm-mvj2 (DNS rebinding on the HTTP MCP transports, fixed by fix(cli): bind MCP HTTP transports to loopback by default #1697), GHSA-pqm2-2wxw-p5hx (hosted path validation following host symlinks, fixed by fix(core): keep remote paths independent of host symlinks #1807), fix(api): bound context traversal depth and recent page size #1804 (bounded context depth and page sizes), fix(deps): update security dependencies and container trust stores #1805 (dependency security floors, read_content image-format restriction, Docker CA trust).
• Adds a breaking-change note: read_content shows only PNG, JPEG and WebP.
• Adds Features, Bug Fixes and Internal entries for everything merged after the entry was last edited (c1d1b47, 2026-10-11).

🤖 Generated with Claude Code

https://claude.ai/code/session_018CoZ3jWnMJsyQsik4tPySk

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	🔄 Running since 2026-10-23T00:03:24.824571Z	97f4e3d	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.