docs(changelog): update for v0.2.92 [skip ci]

CHANGELOG.md

@@ -3,6 +3,11 @@
 > [!TIP]
 > We're constantly improving Code! This page documents the core changes. You can also check our [releases page](https://github.com/just-every/code/releases) for additional information.
 
+## [0.2.92] - 2025-09-08
+
+- Core/Git Worktree: create agent worktrees under ~/.code/working/<repo>/branches for isolation. (e9ebcf1f)
+- Core/Agent: sandbox non-read-only agent runs to worktree to prevent writes outside branch. (ad2f141e)
+
 ## [0.2.91] - 2025-09-08
 
 - TUI/Panic: restore terminal state and exit cleanly on any thread panic. (34ffe467)

codex-cli/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@openai/codex",
-  "version": "0.2.91",
+  "version": "0.2.92",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@openai/codex",
-      "version": "0.2.91",
+      "version": "0.2.92",
       "license": "Apache-2.0",
       "dependencies": {
         "@vscode/ripgrep": "^1.15.14"

release-notes/RELEASE_NOTES.md

@@ -1,11 +1,11 @@
-## @just-every/code v0.2.91
+## @just-every/code v0.2.92
 
-Stability update focused on terminal recovery during unexpected background panics.
+This release improves agent isolation with dedicated worktrees and strengthens sandboxing to protect your repositories.
 
 ### Changes
 
-- TUI/Panic: restore terminal state and exit cleanly on any thread panic.
-- TUI/Windows: prevent broken raw mode/alt-screen after background panics under heavy load.
+- Core/Git Worktree: create agent worktrees under ~/.code/working/<repo>/branches for isolation.
+- Core/Agent: sandbox non-read-only agent runs to worktree to prevent writes outside branch.
 
 ### Install
 
@@ -14,4 +14,5 @@ npm install -g @just-every/code@latest
 code
 ```
 
-Compare: https://github.com/just-every/code/compare/v0.2.90...v0.2.91
+Compare: https://github.com/just-every/code/compare/v0.2.91...v0.2.92
+