[ca] CLI updates: Claude Code 2.1.148, Copilot CLI 1.0.51, Codex 0.133.0, GitHub MCP Server v1.0.5

[github-actions]

Summary

Four CLI tools have new releases since the last version check. All updates have been applied to pkg/constants/version_constants.go and 234 workflow lock files have been regenerated via make recompile (run twice).

Tool	Previous	New	Risk
Claude Code	2.1.142	2.1.148	Low
Copilot CLI	1.0.48	1.0.51	Low
Codex	0.130.0	0.133.0	Medium
GitHub MCP Server	v1.0.4	v1.0.5	Low

No changes for: MCP Gateway (v0.3.17), Playwright MCP (0.0.75), Playwright CLI (0.1.13), Playwright Browser (v1.60.0).

Update Claude Code

• Previous: 2.1.142 → New: 2.1.148
• Timeline: 6 patch releases between 2026-05-15 and 2026-05-22 (roughly one per day)

Breaking Changes

None — patch-level updates only.

Key Features

• Routine patch updates; no public release notes are published for this package.

View Full Changelog

Release Highlights

Claude Code does not maintain a public GitHub repository, so detailed release notes are not available. NPM publish dates for each intermediate version:

• 2.1.143 — 2026-05-15
• 2.1.144 — 2026-05-18
• 2.1.145 — 2026-05-19
• 2.1.146 — 2026-05-20
• 2.1.147 — 2026-05-21
• 2.1.148 — 2026-05-22

CLI Discovery

No new commands or flags detected based on package metadata. The 6-version gap consists of incremental patches.

Impact Assessment

• Risk: Low
• Affects: Claude Code engine workflows

Package Links

• NPM Package: https://www.npmjs.com/package/`@anthropic-ai/claude-code`
• Homepage: https://github.com/anthropics/claude-code (no public source)

---

Update Copilot CLI

• Previous: 1.0.48 → New: 1.0.51
• Timeline: 3 stable releases between 2026-05-18 and 2026-05-20

Breaking Changes

None detected.

Key Features

• Routine stable releases. Repository is private; detailed release notes are not publicly accessible.

View Full Changelog

Release Timeline (NPM publish dates)

• 1.0.49 — 2026-05-18
• 1.0.50 — 2026-05-19
• 1.0.51 — 2026-05-20

Repository Access

https://github.com/github/copilot-cli is not publicly accessible from this workflow. Release notes, CHANGELOG.md, and README.md cannot be fetched for deep analysis.

Subcommand Help Analysis

Help output for config and environment subcommands could not be re-captured because the CLI was not installed in this run (cache-only check). The previous run on 2026-05-21 already recorded help output for 1.0.51 (matching the new pinned version), so no additional subcommand discovery is necessary.

Migration Notes

• Both CopilotNoAskUserMinVersion (1.0.19) and the general unpinning checks in version_constants.go continue to hold for 1.0.51. No code changes beyond the constant bump.

Impact Assessment

• Risk: Low
• Affects: Copilot CLI engine workflows

Package Links

• NPM Package: https://www.npmjs.com/package/`@github/copilot`
• Repository: https://github.com/github/copilot-cli (private)

---

Update Codex

• Previous: 0.130.0 → New: 0.133.0
• Timeline: 3 minor releases (0.131.0 → 0.132.0 → 0.133.0)

Breaking Changes

None explicitly flagged; feature flags / legacy tool paths were removed in 0.131.0 (deprecated APIs were removed gracefully).

Key Features (across 0.131 → 0.133)

• Goals enabled by default — backed by dedicated storage; pause on usage limits / repeated blockers; /goal edit command in TUI.
• codex remote-control overhaul — runs as a foreground command with daemon lifecycle, status reads, and registry-backed remote environments.
• codex doctor — new diagnostics command for support workflows.
• @ mentions unified — search files, directories, plugins, and skills in a single picker.
• Permission profiles — list APIs, inheritance, managed requirements.toml support, runtime refresh, Windows sandbox integration.
• Plugin marketplace CLI — version-aware sharing, share checkout, marketplace-aware list output.
• Python SDK — renamed to openai-codex / openai_codex, with pinned runtime types, approval modes, login (API key, ChatGPT browser, device-code), TurnResult with timing/usage data.
• codex exec resume --output-schema — keeps session context with structured JSON output.
• Windows sandbox parity — deny-read rules, scoped write roots, MSVC static CRT, profile-native elevated APIs.

View Full Changelog

0.131.0 (Release Notes)

New Features:

• Richer TUI session controls (service-tier commands, blended token usage, permissions/approval mode display, responsive Markdown tables) — [codex] Generalize service tier slash commands openai/codex#21745, [codex] Lowercase TUI service tier commands openai/codex#21906, Persist 'priority' service tier as fast in config openai/codex#21991
• Unified @ mentions picker — Unified mentions in TUI openai/codex#19068, Use plugin/list to get list of plugins for mentions openai/codex#22375
• Plugin marketplace CLI commands, version-aware sharing, default-enabled plugin hooks — [codex] add plugin marketplace CLI commands openai/codex#21396, feat: Expose plugin versions and gate plugin sharing openai/codex#22397, feat: Split shared workspace plugins by discoverability openai/codex#22425, feat: Add plugin share checkout openai/codex#22435, Enable plugin hooks by default openai/codex#22549
• Daemon-managed codex remote-control, registry-backed remote environments — [daemon] Add app-server daemon lifecycle management openai/codex#20718, Update codex remote-control to start the daemon openai/codex#22218, Improve remote-control daemon UX openai/codex#22562
• Python SDK moved to openai-codex package — [5/8] Rename Python SDK package to openai-codex openai/codex#21905, [6/8] Add high-level Python SDK approval mode openai/codex#21910
• New codex doctor diagnostics — feat(cli): add codex doctor diagnostics openai/codex#22336

Bug Fixes:

• Hardened Windows sandbox deny-read & scoped write roots — feat(sandbox): add Windows deny-read parity openai/codex#18202, [codex] Scope Windows sandbox write-root capability SIDs openai/codex#21479, windows-sandbox: fail elevated setup when firewall policy is ineffective openai/codex#22353
• Preserved managed read restrictions during permission escalation — fix(permissions): preserve managed deny-read during escalation openai/codex#15977
• SQLite startup safety / non-destructive version bumps — sqlite: no more destructive version bumps openai/codex#21847
• Revoke superseded login tokens on relogin — [login] revoke superseded auth tokens on relogin openai/codex#21747

Full diff: openai/codex@rust-v0.130.0...rust-v0.131.0

0.132.0 (Release Notes)

New Features:

• Python SDK first-class auth (API key, ChatGPT browser, device-code, logout) — sdk/python: add first-class login support openai/codex#23093
• Python turn APIs accept plain strings; richer TurnResult — [codex] Return TurnResult from Python turn handles openai/codex#23151, [codex] Accept string input for Python turns openai/codex#23162
• codex exec resume --output-schema for structured output on resume — Support --output-schema for exec resume openai/codex#23123
• Faster TUI startup via batched terminal capability probes — [1 of 2] Optimize TUI startup terminal probes openai/codex#23175
• Auth-backed remote executor registration — exec-server: support auth-backed remote executor registration openai/codex#22769
• Image fidelity preservation in app-server turns — Preserve image detail in app-server inputs openai/codex#20693

Bug Fixes:

• Goal continuations stop on usage limits / repeated blockers — goal: pause continuation loops on usage limits and blockers openai/codex#23094
• Renamed-thread resume hints, pasted text in session picker — Clarify resume hints for renamed threads openai/codex#23234, feat(tui): handle paste in session picker openai/codex#23338
• exec-server websocket keepalive + repo-relative diff paths — Add exec-server websocket keepalive openai/codex#23226, Fix remote turn diff display roots openai/codex#23261
• Windows: codex doctor npm probe fix + MSVC static CRT — Fix Windows doctor npm root probe openai/codex#22967, windows: link MSVC release binaries with static CRT openai/codex#22905
• TUI: shutdown feedback, non-OpenAI provider link hiding — fix(tui): show shutdown feedback on exit openai/codex#23323, Hide ChatGPT usage link for non-OpenAI status openai/codex#23127

Full diff: openai/codex@rust-v0.131.0...rust-v0.132.0

0.133.0 (Release Notes)

New Features:

• Goals enabled by default with dedicated storage — feat: dedicated goal DB openai/codex#23300, feat: wire goal extension tools to the dedicated goal store openai/codex#23685, feat: account active goal progress in the goal extension openai/codex#23696, Make goals feature on by default and no longer experimental openai/codex#23732
• codex remote-control now runs as foreground command with explicit start/stop — Improve codex remote-control CLI UX openai/codex#22878
• Permission profile list APIs, inheritance, managed requirements.toml, Windows sandbox integration — core: expose permission profile picker metadata openai/codex#22928, feat: add permission profile list api openai/codex#23412, feat(permissions): resolve permission profile inheritance openai/codex#22270, feat: support managed permission profiles in requirements.toml openai/codex#23433
• Plugin discovery improvements (marketplace-aware list, installed versions, remote collections) — Split plugin install discovery into list and request tools openai/codex#23372, feat: Add vertical remote plugin collection support openai/codex#23584, feat(plugins): tabulate plugin list output openai/codex#23727, [codex] List marketplaces considered by plugin discovery openai/codex#23730
• Extension lifecycle hooks (subagent start/stop, tool exec, turn metadata, async approval) — Add SubagentStart hook openai/codex#22782, Add SubagentStop hook openai/codex#22873, Add tool lifecycle extension contributor openai/codex#23309

Bug Fixes:

• Fixed TUI starting in wrong CWD when reusing local app-server socket — Fix: TUI starting in wrong CWD openai/codex#23538
• Plan-mode free-form answers: Shift+Enter no longer submits — fix(tui): preserve modified enter in plan questions openai/codex#23536
• Removed stale background terminal poll events — Fix stale background terminal poll events openai/codex#23231
• Preserve raw code-mode exec output unless output token limit requested — [codex] Preserve raw code-mode exec output by default openai/codex#23564
• Reliable AGENTS instruction loading; warn on invalid UTF-8 — codex: route global AGENTS reads through LOCAL_FS openai/codex#23343, Warn on invalid UTF-8 in AGENTS.md files openai/codex#23232
• App-server startup/shutdown races, empty resume/fork paths, realtime v1 websocket compatibility — fix: serialize unix app-server startup openai/codex#23516, fix(app-server): speed up shutdown openai/codex#23578, [codex] Fix realtime v1 websocket compatibility openai/codex#23771

Full diff: openai/codex@rust-v0.132.0...rust-v0.133.0

CLI Discovery

New commands surfaced across these versions:

• codex doctor (0.131.0) — diagnostics command
• codex remote-control lifecycle: start, stop, foreground execution (0.131.0 / 0.133.0)
• /goal edit slash command in TUI (0.131.0)
• --dangerously-bypass-hook-trust CLI flag (0.131.0)
• --output-schema for codex exec resume (0.132.0)

Impact Assessment

• Risk: Medium
• Affects: Codex engine workflows. Several internal subsystems changed (extension API, plugin runtime, app-server protocol). Existing workflow pinning behavior is preserved.
• Migration: None required at the gh-aw level — all changes are additive or affect Codex-internal subsystems.

Recommendations

• Smoke-test a Codex workflow run end-to-end before broader rollout, especially anything using remote-control or goals.
• The Goals enabled by default change in 0.133.0 may surface new behavior in agentic loops — verify expected token usage shape.

Package Links

• NPM Package: https://www.npmjs.com/package/`@openai/codex`
• Repository: https://github.com/openai/codex
• Release Notes: https://github.com/openai/codex/releases
• 0.131.0: https://github.com/openai/codex/releases/tag/rust-v0.131.0
• 0.132.0: https://github.com/openai/codex/releases/tag/rust-v0.132.0
• 0.133.0: https://github.com/openai/codex/releases/tag/rust-v0.133.0

---

Update GitHub MCP Server

• Previous: v1.0.4 → New: v1.0.5
• Timeline: Released 2026-05-18

Breaking Changes

None.

Key Features

• New list repo collaborators tool — Add tool to list repo collaborators github-mcp-server#2477
• New tool for discussion comment write operations — feat: Add tool for discussion comment write operations github-mcp-server#2427
• Optional rationale parameter on update_issue_type — Add optional rationale parameter to update_issue_type tool github-mcp-server#2458
• Minimal code search results with text-match snippets — feat: return minimal code search results with text match snippets github-mcp-server#2476
• Added missing pagination on get_reviews — fix: add missing pagination on get_reviews github-mcp-server#2367

View Full Changelog

Release Highlights (from GitHub)

Merged PRs in v1.0.5:

• Add ifc label for list_issues tool — Add ifc label for list_issues tool github-mcp-server#2453
• Add ifc label for get_file_contents tool — Add ifc label for get_file_contents tool github-mcp-server#2454
• Add missing pagination on get_reviews — fix: add missing pagination on get_reviews github-mcp-server#2367
• Add optional rationale parameter to update_issue_type tool — Add optional rationale parameter to update_issue_type tool github-mcp-server#2458
• Add ifc label for search_issues tool — Add ifc label for search_issues tool github-mcp-server#2456
• Add ifc label for issue_read tool — Add ifc label for issue_read tool github-mcp-server#2457
• Add ifc label for search_repositories tool — Add ifc label for search_repositories tool github-mcp-server#2459
• Return minimal code search results with text match snippets — feat: return minimal code search results with text match snippets github-mcp-server#2476
• Replace ingress IFC reader list with private marker — Replace ingress IFC reader list with private marker github-mcp-server#2478
• Document Copilot Spaces PAT requirements — Document Copilot Spaces PAT requirements github-mcp-server#2479
• Add tool to list repo collaborators — Add tool to list repo collaborators github-mcp-server#2477
• Add tool for discussion comment write operations — feat: Add tool for discussion comment write operations github-mcp-server#2427
• Upgrade go-github to v 0.87 — Upgrade go-github to v 0.87 github-mcp-server#2452

Full diff: github/github-mcp-server@v1.0.4...v1.0.5

Impact Assessment

• Risk: Low
• Affects: All workflows using the GitHub MCP server (read tools, plus newly added write tools for collaborators / discussion comments). Existing tool surface remains compatible.

Package Links

• Repository: https://github.com/github/github-mcp-server
• Release Notes: https://github.com/github/github-mcp-server/releases
• Specific Release: https://github.com/github/github-mcp-server/releases/tag/v1.0.5

---

Tools Not Updated

• MCP Gateway v0.3.17 — already current. Latest release is also v0.3.17 (published 2026-05-21).
• Playwright MCP 0.0.75 — no new release on NPM.
• Playwright CLI 0.1.13 — no new release on NPM.
• Playwright Browser v1.60.0 — no newer stable release on GitHub.

Verification

• pkg/constants/version_constants.go updated for all four CLI versions.
• make recompile ran successfully twice; 234 workflow lock files regenerated.
• 0 errors, 51 warnings (all pre-existing — e.g. experimental rate-limiting feature, slash-command routing recommendations).

References:

• §26272504562

Generated by 🔢 CLI Version Checker · ● 10M · ◷

• expires on May 24, 2026, 6:44 AM UTC

[github-actions]

This issue is being closed as outdated. A newer issue has been created: #34183

View newer issue

---

This action was performed automatically by the CLI Version Checker workflow.