[ca] chore: update CLI versions (Claude Code, Copilot CLI, Codex, GitHub MCP Server)

[github-actions]

Summary

Four CLI/MCP dependencies have new stable releases since the constants were last updated. All four have been bumped in pkg/constants/version_constants.go and make recompile succeeded (236 workflows, 0 errors). The standout is GitHub MCP Server v1.0.4 → v1.1.0, a minor-version bump that adds the new search_commits tool, GHAS alert pagination, and a much smaller project-item response shape.

Tool	Previous	New	Risk
Claude Code	2.1.150	2.1.156	Low
Copilot CLI	1.0.52	1.0.55	Low
OpenAI Codex	0.133.0	0.135.0	Low
GitHub MCP Server	v1.0.4	v1.1.0	Low–Medium
MCP Gateway	v0.3.20	v0.3.20	—
Playwright MCP	0.0.75	0.0.75	—
Playwright CLI	0.1.13	0.1.13	—
Playwright Browser	v1.60.0	v1.60.0	—

Critical Issues

None. All updates are patch/minor on unchanged major lines.

GitHub MCP Server v1.0.4 → v1.1.0 (2026-05-28)

Highlights

• search_commits tool — new tool to search commits with GitHub search syntax (feat: Add search commit tool github-mcp-server#2284).
• GHAS alert pagination — list_code_scanning_alerts, list_dependabot_alerts, list_secret_scanning_alerts now paginate (feat: add pagination to list GHAS alerts tools github-mcp-server#2451).
• Smaller project-item responses — list_project_items / get_project_item / update_project_item now return compact shapes (Reduce project item response size github-mcp-server#2563).
• Insiders Mode: issue fields — list/filter/read/write custom issue fields behind remote_mcp_issue_fields flag (feat(issues): gate issue-fields features behind remote_mcp_issue_fields flag github-mcp-server#2520).
• Insiders Mode: CSV output — list_* tools emit CSV via csv_output flag (feat: Add CSV output format for default list tools under insiders mode github-mcp-server#2450).
• Reliability — isError returned on argument-validation failures (fix: return isError for argument validation failures github-mcp-server#2511); CompletionsHandler guards against nil params; proxy forwarding headers ignored by default for OAuth resource metadata (Ignore proxy forwarding headers by default for OAuth resource metadata github-mcp-server#2550).
• fix(pull_request_read): expose after cursor in input schema (fix(pull_request_read): expose 'after' cursor parameter in input schema github-mcp-server#2489).

Impact

• Project-item response shape change is a small semantic change — workflows that rely on full issue/PR payloads inside project responses should be reviewed.
• New search_commits is additive; insiders features are flag-gated off by default.

Full changelog: github/github-mcp-server@v1.0.5...v1.1.0
Release: https://github.com/github/github-mcp-server/releases/tag/v1.1.0

OpenAI Codex 0.133.0 → 0.135.0 (0.134.0 + 0.135.0)

0.134.0 (2026-05-26)

• Local conversation history search with case-insensitive previews ([codex] Add rollout-backed thread content search openai/codex#23519).
• --profile is now the primary profile selector; legacy v1 profile configs are rejected with migration guidance (tui: plumb permission profile selection openai/codex#23708, config: remove legacy profile v1 resolution openai/codex#24051, fix: reject legacy profile selectors openai/codex#24059).
• Per-server MCP environment targeting + OAuth options for streamable HTTP MCP (Route MCP servers through explicit environments openai/codex#23583, Support OAuth options in codex mcp add openai/codex#24120).
• Read-only MCP tools run concurrently when readOnlyHint is advertised (Allow parallel MCP tool calls when annotated readOnly openai/codex#23750).
• Local $ref/$defs preserved; oversized tool schemas compacted (feat: support local refs and defs in tool input schemas openai/codex#23357, feat: best-effort compact large tool schemas openai/codex#23904).
• Reconnect stale exec-server websocket clients (Reconnect disconnected exec-server websocket clients with fresh sessions openai/codex#23867).
• Restore Windows VT before TUI render (fix(tui): restore Windows VT before TUI renders openai/codex#24082).
• Node-based tools honor managed network proxy env ([codex] Enable Node env proxy for managed network proxy openai/codex#23905).

0.135.0 (2026-05-28)

• codex doctor reports environment/Git/terminal/app-server/thread diagnostics (feat(doctor): add environment diagnostics openai/codex#24261, Report app-server version in codex doctor openai/codex#24311, Add doctor thread inventory audit openai/codex#24305).
• /status shows remote connection details + server version (Show remote connection details in /status openai/codex#24420).
• Vim mode: text-object editing, word/line-end fixes, configurable interrupt key (feat(tui): add vim text object bindings openai/codex#24382, fix(tui): complete vim word-end and line-end behavior openai/codex#24380, feat(tui): make turn interruption keybind configurable openai/codex#24766).
• /permissions understands named permission profiles (tui: add named permission profile picker openai/codex#21559).
• Bundled patched zsh helper across macOS/Linux (package: include zsh fork in Codex package openai/codex#23756).
• TUI markdown tables/lists render in app style (feat(tui): render markdown tables in app style [1 of 2] openai/codex#24489).
• TUI fixes for macOS/Zellij stderr/composer corruption (fix(tui): prevent macos stderr from corrupting composer openai/codex#24459, fix(tui): keep raw output above composer in zellij openai/codex#24593).
• Resume now includes non-interactive exec sessions; cwd overrides honored for idle cached threads (tui: include exec sessions in resume list openai/codex#24503, Respect resume cwd overrides for idle cached threads openai/codex#24528).

Impact for gh-aw

• Legacy v1 profile configs are now rejected (not warned). gh-aw does not emit v1 profiles, so no in-repo impact, but user-pinned configs may need migration.
• Top-level CLI surface unchanged (exec, mcp, mcp-server, app-server, sandbox).

Releases: https://github.com/openai/codex/releases/tag/rust-v0.134.0 · https://github.com/openai/codex/releases/tag/rust-v0.135.0

GitHub Copilot CLI 1.0.52 → 1.0.55

Three patch releases. Repository at https://github.com/github/copilot-cli is private; analysis from NPM metadata + CLI-help diff.

CLI help diff (1.0.54 → 1.0.55)

• config subcommand: beep default changed true → false (auto-beep now opt-in).
• config subcommand: new model claude-opus-4.8 listed.
• environment subcommand: no diff.
• Main help: no diff.

Impact for gh-aw

• Low. --no-ask-user (used by gh-aw) is unchanged; CopilotNoAskUserMinVersion = 1.0.19 unaffected.

NPM: https://www.npmjs.com/package/`@github/copilot`

Claude Code 2.1.150 → 2.1.156

Six patch releases. No public GitHub repo; analysis from NPM metadata + --help diff.

• No structural changes to top-level flags.
• Existing flags (--print, --mcp-config, --allowedTools, --permission-mode, etc.) unchanged.

Impact: Low. All flags consumed by gh-aw's Claude engine remain present.

NPM: https://www.npmjs.com/package/`@anthropic-ai/claude-code`

Risk Assessment

• Claude Code 2.1.156 — Low. Patch-level, no CLI surface change.
• Copilot CLI 1.0.55 — Low. User-facing default change only; no flag removals.
• Codex 0.135.0 — Low–Medium. Legacy v1 profile configs now rejected; gh-aw unaffected internally.
• GitHub MCP Server v1.1.0 — Low–Medium. Project-item response shape changed; otherwise additive.

Recommendations

• Merge the constants bump.
• Smoke-test one workflow per engine (claude, copilot, codex) to confirm session start + MCP loading.
• If any workflow uses GitHub MCP list_project_items, verify the new compact shape is acceptable.
• Future: consider exposing search_commits in a default toolset preset.

Package Links

• Claude Code — https://www.npmjs.com/package/`@anthropic-ai/claude-code`
• Copilot CLI — https://www.npmjs.com/package/`@github/copilot`
• Codex — https://www.npmjs.com/package/`@openai/codex` · https://github.com/openai/codex/releases
• GitHub MCP Server — https://github.com/github/github-mcp-server/releases/tag/v1.1.0

References:

• §26622441350

Generated by 🔢 CLI Version Checker · opus47 12.2M · ◷

• expires on May 31, 2026, 6:49 AM UTC

[github-actions]

🍪 Issue Monster selected this for Copilot

I've identified this issue as a good candidate for automated resolution and requested assignment to the Copilot coding agent.

If assignment succeeds, the Copilot coding agent will analyze the issue and create a pull request with the fix.

Om nom nom! 🍪

🍪 Om nom nom by Issue Monster · haiku45 47.1K · ◷