CLI/Docker version check — 2026-07-31
4 CLI version updates applied and compiled (266/266 workflows, 0 errors). No Docker image changes this run — all pinned digests re-verified unchanged; Syft and Grype updates remain in the 3-day cooldown window.
Summary
| Tool |
Old |
New |
Risk |
| Copilot CLI |
1.0.75 |
1.0.77 |
Low |
| Pi |
0.82.1 |
0.83.0 |
Low |
| GitHub MCP Server |
v1.7.0 |
v1.8.0 |
Low |
| Playwright Browser |
v1.62.0 |
v1.62.1 |
Low (bugfix-only) |
No change: Claude Code 2.1.220, Codex 0.146.0, Copilot SDK 1.0.8, Playwright MCP 0.0.78, Playwright CLI 0.1.17, MCP Gateway v0.4.7 (already current — this constant moved to v0.4.7 outside this workflow's tracked cadence since the 2026-07-29 check).
Copilot CLI 1.0.75 → 1.0.77
Released 2026-07-30. No --help diff across main/config/environment subcommands.
Release notes
- Sandbox auto-disables for a session when approving autopilot unconditionally with bypass permissions in place.
- New editor shortcut to compose freeform answers to
ask_user prompts without leaving the prompt flow.
- Browser-based (web) OAuth login is now the default sign-in method for local interactive terminal sessions; device-code flow remains the default for remote/headless terminals. Overridable via flags or the interactive login command.
- Sandbox policies can now be enforced via native MDM tools on macOS and Windows.
- Reasoning effort can be left unspecified, letting the backend apply its own default.
- No breaking changes noted.
Impact: Low. No CLI surface changes; behavioral changes are additive/opt-in.
Pi 0.82.1 → 0.83.0
Latest on npm (no public GitHub repo).
--help diff
New pi auth <command> subcommand family for printing credentials to external clients:
pi auth print-api-key --provider <provider> --model <model> — print a provider API keypi auth print-bearer-token --provider <provider> --model <model> — print an OAuth bearer token (auto-refreshes if expired)
Impact: Low. Additive subcommand; no existing behavior changed.
GitHub MCP Server v1.7.0 → v1.8.0
Released 2026-07-30 (release).
Changelog
Full changelog: github/github-mcp-server@v1.7.0...v1.8.0
Impact: Low. Purely additive; the new fields parameter is consistent with the field-selection guidance gh-aw already gives agents for list_pull_requests/list_issues/etc.
Playwright Browser v1.62.0 → v1.62.1
Released 2026-07-30 (release). Patch release, bugfixes only.
Fixes
- tsconfig
extends bare-specifier resolution via node_modules walk-up (regression since v1.62, fatal).
- Directory-form tsconfig project references (
"path": "../pkg") failing to resolve (regression since v1.62, fatal).
- Accessibility snapshot dropping button name when text is nested inside spans with
aria-hidden SVG.
page.evaluate() arg of a branded primitive type no longer type-checking (regression since v1.62).- Image-type actionable elements missing from snapshot.
Impact: Low. Fixes regressions introduced in the prior v1.62 release; recommended to take immediately.
Docker images (pkg/cli/docker_images.go)
No changes this run. All pinned digests re-verified and confirmed unchanged: ActionlintImage (1.7.12), ZizmorImage (1.28.0), PoutineImage (1.1.6), RunnerGuardImage (3.1.5), YamllintImage (latest), GrantImage (v0.6.8, already latest upstream).
- Syft: pinned v1.48.0; upstream v1.50.0 released 2026-07-28T17:44:08Z — still inside the 3-day cooldown (ends 2026-07-31T17:44:08Z). Skipped.
- Grype: pinned v0.116.0; upstream v0.116.1 released 2026-07-28T21:45:14Z — still inside the 3-day cooldown (ends 2026-07-31T21:45:14Z). Skipped.
Both should clear cooldown by the next scheduled run.
Actions taken
- Updated
pkg/constants/version_constants.go: DefaultCopilotVersion, DefaultPiVersion, DefaultGitHubMCPServerVersion, DefaultPlaywrightBrowserVersion.
make fmt + make recompile (single pass): 266/266 workflows compiled, 0 errors, 266 lock files + .github/aw/compat.json regenerated.
References:
Generated by 🔢 CLI Version Checker · agent · 89.6 AIC · ⌖ 18.4 AIC · ⊞ 11.6K · ◷
CLI/Docker version check — 2026-07-31
4 CLI version updates applied and compiled (266/266 workflows, 0 errors). No Docker image changes this run — all pinned digests re-verified unchanged; Syft and Grype updates remain in the 3-day cooldown window.
Summary
No change: Claude Code 2.1.220, Codex 0.146.0, Copilot SDK 1.0.8, Playwright MCP 0.0.78, Playwright CLI 0.1.17, MCP Gateway v0.4.7 (already current — this constant moved to v0.4.7 outside this workflow's tracked cadence since the 2026-07-29 check).
Copilot CLI 1.0.75 → 1.0.77
Released 2026-07-30. No
--helpdiff across main/config/environmentsubcommands.Release notes
ask_userprompts without leaving the prompt flow.Impact: Low. No CLI surface changes; behavioral changes are additive/opt-in.
Pi 0.82.1 → 0.83.0
Latest on npm (no public GitHub repo).
--help diff
New
pi auth <command>subcommand family for printing credentials to external clients:pi auth print-api-key --provider <provider> --model <model>— print a provider API keypi auth print-bearer-token --provider <provider> --model <model>— print an OAuth bearer token (auto-refreshes if expired)Impact: Low. Additive subcommand; no existing behavior changed.
GitHub MCP Server v1.7.0 → v1.8.0
Released 2026-07-30 (release).
Changelog
fieldsparameter, enabled by default on selected tools, letting models select which response fields to return — shrinks tool response size and context usage. (Make fields parameter available by default github-mcp-server#2952)SearchTypesupport. (Bump go-github to pick up SearchType support github-mcp-server#2972)update_project_itemswrites via GraphQL. (Add batched update_project_items writes via GraphQL github-mcp-server#2903)Full changelog: github/github-mcp-server@v1.7.0...v1.8.0
Impact: Low. Purely additive; the new
fieldsparameter is consistent with the field-selection guidance gh-aw already gives agents forlist_pull_requests/list_issues/etc.Playwright Browser v1.62.0 → v1.62.1
Released 2026-07-30 (release). Patch release, bugfixes only.
Fixes
extendsbare-specifier resolution via node_modules walk-up (regression since v1.62, fatal)."path": "../pkg") failing to resolve (regression since v1.62, fatal).aria-hiddenSVG.page.evaluate()arg of a branded primitive type no longer type-checking (regression since v1.62).Impact: Low. Fixes regressions introduced in the prior v1.62 release; recommended to take immediately.
Docker images (pkg/cli/docker_images.go)
No changes this run. All pinned digests re-verified and confirmed unchanged:
ActionlintImage(1.7.12),ZizmorImage(1.28.0),PoutineImage(1.1.6),RunnerGuardImage(3.1.5),YamllintImage(latest),GrantImage(v0.6.8, already latest upstream).Both should clear cooldown by the next scheduled run.
Actions taken
pkg/constants/version_constants.go:DefaultCopilotVersion,DefaultPiVersion,DefaultGitHubMCPServerVersion,DefaultPlaywrightBrowserVersion.make fmt+make recompile(single pass): 266/266 workflows compiled, 0 errors, 266 lock files +.github/aw/compat.jsonregenerated.References: