[ca] CLI version checker: update CLI/MCP defaults for 2026-10-09 #67125

Overview

CLI Version Checker found stable upstream updates for agentic CLI/MCP defaults in github/gh-aw during run §37889306696.

Prepared local updates:

• pkg/constants/version_constants.go
• pkg/constants/version_constants_test.go
• actions/setup/sh/install_copilot_cli.sh
• .github/aw/compat.json
• generated .github/workflows/*.lock.yml files were refreshed by make recompile as required, but should not be committed directly unless the repository policy for this update permits regenerated locks.

Version updates detected

Release analysis

Claude Code 2.1.288 → 2.1.295

• Source: npm metadata for @anthropic-ai/claude-code
• Release metadata: https://www.npmjs.com/package/``@anthropic-ai/claude-code``
• Risk: Low/Medium. No public GitHub changelog was available; upgrade is based on the latest npm stable package metadata and CLI help compatibility.
• Breaking changes: None identified from npm metadata or help output.
• Features/Fixes/Security/Performance: Not publicly itemized.
• CLI help comparison: no substantive --help changes vs cached 2.1.293 output.

GitHub Copilot CLI 1.0.90 → 1.0.94

• Source: npm metadata for @github/copilot and GitHub release notes.
• Release: https://github.com/github/copilot-cli/releases/tag/v1.0.94
• Release date: 2026-10-08
• Risk: Medium. The update touches MCP startup/discovery, managed settings, assisted permissions, and model selection.
• Breaking changes: None called out in the release notes.
• Features:
  • Adds Claude Haiku 5.5 to model selection and --model completions.
  • Shows update guidance when managed settings request a newer CLI version without blocking normal prompts.
• Fixes:
  • copilot mcp add recovers cleanly after interrupted MCP config initialization.
  • MCP enable/disable works before server discovery without starting MCP servers.
  • Clicking a Sessions sidebar row reliably switches sessions during split-view reconciliation.
• Security/Policy:
  • Assisted permissions send visible shell code to the permission judge instead of requiring unnecessary manual approval.
  • Startup bypass-permission flags suppressed by managed settings now produce a policy warning.
  • Managed policy can disable Assisted Permissions and keep sessions in Manual Approval mode.
• README review: README still documents npm, Homebrew, WinGet and install-script installation, PAT auth, default model behavior, experimental mode, MCP support, and LSP configuration.
• CLI help comparison: no substantive main/config help changes vs cached 1.0.93 output; copilot environment --help remains invalid.

OpenAI Codex 0.159.3 → 0.162.0

• Source: npm metadata for @openai/codex and GitHub releases.
• Latest stable release: https://github.com/openai/codex/releases/tag/rust-v0.162.0
• Intermediate stable release reviewed: https://github.com/openai/codex/releases/tag/rust-v0.161.0
• Risk: Medium/High. There are many agent, TUI, sandbox, MCP, remote-control, and Code Mode changes across 0.161.0 and 0.162.0.
• Breaking changes: None explicitly called out in the release summaries.
• Features:
  • Managed Git worktree tools behind the worktrees feature flag: Add managed worktree tools to the TUI openai/codex#50148
  • Pinned tasks in the agent Command Center: Add shared task pinning to the agent command center openai/codex#51500
  • Transcript copy/navigation and mouse scroll speed tuning: Add keyboard copy selection to the owned transcript openai/codex#50434, Support Ctrl+Insert for copying TUI selections openai/codex#50215, Make transcript mouse scroll speed configurable openai/codex#50209
  • Clickable URLs across approval headers, questions, MCP prompts, warnings, banners, and verification prompts: Preserve clickable URLs in TUI approval headers openai/codex#51439, Make URLs clickable in TUI user input questions openai/codex#51449, Make URLs clickable in MCP elicitation prompts openai/codex#51450, Make URLs in the TUI warnings viewer clickable openai/codex#51451, Make banner URLs clickable across wrapped lines openai/codex#51452, Make URLs clickable in user verification prompts openai/codex#51458
  • Custom Responses-compatible provider capability configuration: Add capability overrides for custom model providers openai/codex#50459
  • JavaScript helpers for streaming settled promises and opt-in ranked Code Mode tool search: Add promise settlement streaming helpers to code mode openai/codex#51126, Add ranked tool discovery to JavaScript code mode openai/codex#51209
• Fixes:
  • Server model/reasoning defaults respected for new TUI threads: Honor server model defaults when starting fresh TUI threads openai/codex#50013, Honor server reasoning summary defaults in new TUI threads openai/codex#50811, Use server model defaults for connected TUI fresh starts openai/codex#50913
  • apply_patch preserves CRLF line endings: Make apply_patch preserve line endings unconditionally openai/codex#51203
  • Linux sandbox startup and deny-glob hardening fixes: Fix Linux sandbox startup with multiple denied files openai/codex#50059, Reject sandbox-writable bubblewrap executables from PATH openai/codex#51211, Protect ripgrep lookup during Linux sandbox construction openai/codex#51407, Ignore ripgrep configuration when expanding sandbox deny globs openai/codex#51527
  • Windows drive-letter and temp permission fixes: Fix Windows 10 drive-letter opens for no-follow filesystem operations openai/codex#51511, Align Windows sandbox temp permissions with the child environment openai/codex#51512
  • Retry-After handling for Responses/WebSocket failures: Honor Retry-After headers in failed Responses events openai/codex#50418, Honor Retry-After in WebSocket error events openai/codex#51440
• Security:
  • Rejects sandbox-writable bubblewrap executables from PATH: Reject sandbox-writable bubblewrap executables from PATH openai/codex#51211
  • Guardian-related recovery and transcript improvements appear throughout the changelog.
• CLI help comparison: no substantive main help changes vs cached 0.161.0 output.

Pi 1.0.0 → 1.1.0

• Source: npm metadata for @earendil-works/pi-coding-agent.
• Package: https://www.npmjs.com/package/``@earendil-works/pi-coding-agent``
• Risk: Low/Medium. No public release notes were available through the repository instructions; upgrade was based on npm metadata and cached help output.
• Breaking changes: None identified.
• CLI help comparison: 1.1.0 help is already cached from the previous run and remains the latest observed output.

GitHub MCP Server v1.12.2 → v2.0.2

• Source: GitHub releases.
• Latest release: https://github.com/github/github-mcp-server/releases/tag/v2.0.2
• Intermediate releases reviewed: v1.13.0, v1.14.0, v2.0.0, v2.0.1, v2.0.2.
• Risk: High. This crosses the v2 major release and introduces typed tool schemas/output schemas gated by newer MCP protocol support.
• Breaking changes:
  • v2.0.1 notes a Go module path fix with fix(go)!: fix(go)!: migrate to the v2 module path github-mcp-server#3445
• Features:
  • v1.13.0 adds granular hide/unhide tools for issue comments, PR review comments, and PR reviews: Add granular tools to hide and unhide issue comments, PR review comments and PR reviews github-mcp-server#3350
  • v1.14.0 migrates MCP Apps SDK to v2 and updates UI stack: feat(ui): migrate MCP Apps SDK to v2 github-mcp-server#3378, build(ui): migrate to React 19 and Primer React 38 github-mcp-server#3383
  • v2.0.0 adds structured outputs and output schemas for MCP 2026-07-28 clients and newer.
• Fixes:
  • v2.0.2 restores typed tool HTTP header validation: fix(inventory): restore typed tool HTTP header validation github-mcp-server#3454
  • v2.0.0 addresses typed output compatibility gaps: Address typed output compatibility gaps github-mcp-server#3433
  • v1.14.0 fixes Copilot bot pending review lookup: fix(pull_request_reviews): Update pending pull request review lookup to work when the authenticated actor is a Copilot bot github-mcp-server#3355
• Security/Supply chain:
  • GitHub Actions pinned to commit SHAs: Pin GitHub Actions to commit SHAs github-mcp-server#3259
  • Safe dependency refreshes and dual-published image signatures in v1.14.0.
• Impact on gh-aw:
  • Verify generated workflows and MCP clients that assume v1 output shapes. Tool consumers that do not advertise MCP 2026-07-28 should not receive incompatible typed outputs, per release notes.

Docker image checks

GitHub MCP Server container digest for v2.0.2 was resolved as sha256:ffced0d76e77428532a2ced185516992d77fd146d69eec2f244e6237d1a97796, but the existing action-pins data still contains ghcr.io/github/github-mcp-server:v1.12.2@sha256:508a0857ec762b1ab1cece29193345b501fab1dd9d1228a7b617062954cecac6 after recompile. Follow-up may be needed if action pin data should be updated for the new default server image.

Validation

• make fmt: passed.
• make recompile: passed in the foreground; 333/333 workflow files compiled with existing warnings.
• make agent-report-progress: partially passed; build, sync checks, action shell lint, schema freshness, custom Go linters, and impacted Go tests for ./pkg/constants passed. The target failed because golangci-lint is not installed in this runner (make deps-dev would be required to install it).

Next actions

1. Review the v2 GitHub MCP Server compatibility impact, especially typed output behavior for older MCP clients.
2. Decide whether regenerated .lock.yml files should be committed for this constants update, noting the workflow instruction not to commit lock files directly.
3. Install golangci-lint (or run in the standard dev image) and rerun make agent-report-progress.
4. Revisit Syft and Grype after their latest releases pass the 3-day cooldown.

References:

• §37889306696
• https://github.com/github/copilot-cli/releases/tag/v1.0.94
• https://github.com/openai/codex/releases/tag/rust-v0.162.0

Generated by 🔢 CLI Version Checker · pi · gpt55 · 314.6 AIC · ⌖ 18 AIC · ⊞ 11.1K · ◷

• expires on Oct 10, 2026, 9:44 PM UTC-08:00