Skip to content

[ca] CLI Version Updates: Claude Code 2.1.204, Copilot 1.0.69, Codex 0.143.0 #44223

Closed as not planned
Closed as not planned
[ca] CLI Version Updates: Claude Code 2.1.204, Copilot 1.0.69, Codex 0.143.0#44223
Assignees
pelikhancopilot-swe-agent
Labels
ai-inspectedautomationcookieIssue Monster Loves Cookies!dependenciesPull requests that update a dependency file

Description

@github-actions
github-actions
bot
opened on Jul 8, 2026

Overview

Three agentic CLI tools have new releases. pkg/constants/version_constants.go was updated and make recompile regenerated all 258 lock files (0 errors).

Tool Old New Bump
Claude Code 2.1.201 2.1.204 patch
Copilot CLI 1.0.68 1.0.69 patch
Codex 0.142.5 0.143.0 minor

Note: repo main was still at Claude 2.1.201 (the 2.1.202 PR from 2026-07-07 had not merged). Bumped directly to the latest published 2.1.204.

Unchanged: Copilot SDK 1.0.5 · Pi 0.80.3 · Playwright MCP 0.0.77 · Playwright CLI 0.1.15 · GitHub MCP Server v1.5.0 · Playwright Browser v1.61.1 · MCP Gateway v0.4.0.

Impact assessment

  • No gh-aw breaking impact. Codex removed the deprecated on-failure approval-policy choice from --help; gh-aw emits approval_policy="never" (pkg/workflow/codex_engine.go:222), so this is unaffected.
  • Copilot CLI subcommands and help topics (config, environment) are byte-identical between 1.0.68 and 1.0.69 — all changes are interactive/runtime behavior.
  • Claude Code --help surface is unchanged from 2.1.202 → 2.1.204.

Risk: Low for all three.

Claude Code 2.1.201 → 2.1.204 (patch)

No public repository; analysis from NPM metadata + CLI help diff. Published 2026-07-08. Intermediate 2.1.202 / 2.1.203 rolled in. No --help surface change vs 2.1.202. No categorized changelog available (Anthropic does not publish one for these patch releases).

Copilot CLI 1.0.68 → 1.0.69 (patch)

Published 2026-07-07. Repository: https://github.com/github/copilot-cli

Features

  • Add /plugins dashboard to manage installed plugins; reload installed plugin extensions without restarting a session
  • Add /mcp list to show attached MCP servers/status; allow /mcp list and /plugin list while the agent works
  • Open the /mcp manager mid-turn to enable/disable servers (add/edit/delete/re-auth stay paused until the turn finishes)
  • Add auto allow-all mode that auto-approves requests an LLM judge deems acceptable; add stayInAutopilot setting (default false)
  • Create delegate PRs against the current branch by default, with /delegate --base to choose another target
  • Add minimal reasoning effort for gemini-3.5-flash; display reasoning-effort labels in CLI footer
  • /model picker: scrollbar, stays on screen when timeline is full
  • Sign in to MCP servers through the CLI OAuth callback flow; warn when multiple plugins define the same MCP server

Security / sandbox

  • web_fetch now follows the active sandbox network policy (denies blocked outbound/local targets); with sandbox.allowBypass, allows a one-time approved bypass from the fetch prompt
  • Built-in file edits labeled (sandbox policy) instead of (sandboxed); may bypass sandbox on explicit approval
  • /allow-all auto now requires experimental mode (/experimental on or --experimental) instead of the AUTO_APPROVAL env var/flag
  • Skip autopilot permission prompt when bypass mode is disabled by policy; require Copilot login before ACP authenticate returns success

Fixes

  • Prevent copilot init from hanging in non-interactive mode; reject empty --name= / --session-id= / --resume= values
  • Apply --reasoning-effort reliably at startup; keep model switches working when tool-call IDs include punctuation
  • Keep session resume working with fractional-millisecond token timing; resume/switch large sessions faster
  • Speed up /diff rendering on large diffs; include untracked-directory files in /diff local edits
  • Prevent benign Windows crash reports on exit; hide transient console windows for helper processes on Windows; allow WSL UNC paths
  • Double-press Esc interrupts the running main turn (or stops background agents when idle)
Full 1.0.69 changelog (source)

From https://github.com/github/copilot-cli/releases/tag/v1.0.69 — see release for the complete list (~60 entries). Highlights captured above.

Codex 0.142.5 → 0.143.0 (minor)

Published as rust-v0.143.0. Repository: https://github.com/openai/codex · Release: https://github.com/openai/codex/releases/tag/rust-v0.143.0

Breaking / Removed

Features

Fixes

Security (dependency bumps)

Full compare: openai/codex@rust-v0.142.0...rust-v0.143.0

Verification

  • pkg/constants/version_constants.go: DefaultClaudeCodeVersion=2.1.204, DefaultCopilotVersion=1.0.69, DefaultCodexVersion=0.143.0
  • make recompile: ✅ 258/258 workflow files compiled, 0 errors (209 warnings, pre-existing)
  • git status: version_constants.go + 258 .lock.yml modified

Next actions

  • Review and merge. Lock files (*.lock.yml) are regenerated by CI/recompile and not committed manually per workflow policy.

References:

Warning

Firewall blocked 2 domains

The following domains were blocked by the firewall during workflow execution:

  • awmgmcpg
  • models.dev

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "awmgmcpg"
    - "models.dev"

See Network Configuration for more information.

Generated by 🔢 CLI Version Checker · 143.6 AIC · ⌖ 31.3 AIC · ⊞ 8.4K · ◷

  • expires on Jul 9, 2026, 10:25 PM UTC-08:00

Metadata

Metadata

Assignees

Labels

ai-inspectedautomationcookieIssue Monster Loves Cookies!dependenciesPull requests that update a dependency file

Type

No type

Fields

No fields configured for issues without a type.

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions