chore(versions): refresh agent CLI pins

[lroolle]

Automated pin sweep from make versions-up. Images (core, main,
rust, cloak) were built locally at these exact versions before
pinning:

• claude-code 2.1.220 -> 2.1.224
• cctrace 0.25.1 -> 0.37.0
• codex 0.146.0 -> 0.147.0
• gemini-cli 0.53.0 -> 0.54.4
• grok 0.2.114 -> 1.0.0
• kimi-code 0.30.0 -> 0.34.0
• ccx v0.12.0 -> v0.14.0
• playwright 1.62.0 -> 1.62.1
• cloakbrowser 0.5.2 -> 0.5.5

opencode 1.18.14 was pinned by #542 and is unchanged here. Rebased
onto main after #539/#542 merged so the versions.env round-trip
guard sees the opencode-aware manifest.

[Copilot]

Pull request overview

Refreshes the pinned agent/CLI tool versions used by Deva image builds by updating the shared versions.env source of truth, aligning the repo’s version pins with the locally-built image set described in the PR.

Changes:

• Bumped Claude Code, Codex, Gemini CLI, Grok CLI, Kimi Code, and CCX pinned versions.
• Updated CCTRACE and Playwright pins.
• Updated the CloakBrowser wrapper pin (and therefore the pinned Chromium binary version selection via the wrapper).

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

Pull request overview

Copilot reviewed 1 out of 1 changed files in this pull request and generated no new comments.

Suppressed comments (1)

versions.env:12

• PR description says cctrace was built/pinned at 0.33.0, but this file pins CCTRACE_VERSION=0.34.0. Please align the pin and the PR description (and any pre-build validation) so the documented versions match what will be released.

CCTRACE_VERSION=0.34.0

[Copilot]

Pull request overview

Copilot reviewed 1 out of 1 changed files in this pull request and generated no new comments.

Suppressed comments (1)

versions.env:12

• PR description says the pin sweep updated cctrace 0.25.1 → 0.33.0 (and that images were built locally at those exact versions), but versions.env pins CCTRACE_VERSION=0.35.0. This makes the PR metadata inconsistent with the actual pins and may mean the pinned version wasn’t the one validated during the local image build. Please either update the description to match 0.35.0 (and confirm the images were built with it) or change the pin here to 0.33.0.

CCTRACE_VERSION=0.35.0

[Copilot]

Pull request overview

Copilot reviewed 1 out of 1 changed files in this pull request and generated no new comments.

Suppressed comments (1)

versions.env:12

• PR description says the pin sweep bumped cctrace from 0.25.1 -> 0.33.0, but versions.env pins CCTRACE_VERSION=0.36.0. Please align the PR description and the pinned version so readers can reproduce the stated image builds.

CCTRACE_VERSION=0.36.0

[Copilot]

Pull request overview

Copilot reviewed 1 out of 1 changed files in this pull request and generated no new comments.

Suppressed comments (3)

versions.env:17

• The PR description doesn’t mention introducing OPENCODE_VERSION, and it also lists a different Kimi Code target (0.33.0 vs 0.34.0 here). Please either document these changes in the PR description or revert them to match what the PR claims was built/tested.

KIMI_CODE_VERSION=0.34.0
OPENCODE_VERSION=1.18.14

versions.env:17

• OPENCODE_VERSION is added to versions.env, but it is not included in the version pin plumbing (e.g., scripts/version-pins.sh: VERSION_PIN_VARS, and scripts/update-version-pins.sh: Agent CLIs pin list / registry_tool mapping). That means it won’t be exported to builds/workflows and won’t be refreshed by the versions-up/versions-pin automation, so it’s likely to get dropped or drift. Either remove this pin or wire it through the pin scripts in the same PR.

OPENCODE_VERSION=1.18.14

versions.env:15

• The PR description’s version bump list doesn’t match the pins being applied here (e.g., claude-code 2.1.223 vs 2.1.224, cctrace 0.33.0 vs 0.37.0, codex 0.146.1 vs 0.147.0, grok 0.2.118 vs 1.0.0). This makes it unclear which set is intended and complicates review/release notes. Please update the PR description to reflect these exact pins or adjust the pins to match the described sweep output.

This issue also appears on line 16 of the same file.

CLAUDE_CODE_VERSION=2.1.224
CCTRACE_VERSION=0.37.0
CODEX_VERSION=0.147.0
GEMINI_CLI_VERSION=0.54.0
GROK_CLI_VERSION=1.0.0

[Copilot]

Pull request overview

Copilot reviewed 1 out of 1 changed files in this pull request and generated no new comments.

Suppressed comments (2)

versions.env:16

• The PR description’s “built locally at these exact versions before pinning” list doesn’t match the actual pins here (e.g., CLAUDE_CODE_VERSION=2.1.224 vs 2.1.223, CCTRACE_VERSION=0.37.0 vs 0.33.0, CODEX_VERSION=0.147.0 vs 0.146.1, GEMINI_CLI_VERSION=0.54.4 vs 0.54.0, GROK_CLI_VERSION=1.0.0 vs 0.2.118, KIMI_CODE_VERSION=0.34.0 vs 0.33.0). Please reconcile by either updating the PR description to reflect these pins, or adjusting the pins to the described versions (so reviewers/users know what was validated).

CLAUDE_CODE_VERSION=2.1.224
CCTRACE_VERSION=0.37.0
CODEX_VERSION=0.147.0
GEMINI_CLI_VERSION=0.54.4
GROK_CLI_VERSION=1.0.0
KIMI_CODE_VERSION=0.34.0

versions.env:17

• OPENCODE_VERSION is introduced here, but it’s not referenced anywhere else in the repo (search only finds it in versions.env) and it’s not included in scripts/version-pins.sh’s VERSION_PIN_VARS list, so this pin currently has no effect on builds/workflows and may be dropped by pin rewrite tooling. Either remove this pin from versions.env, or wire it through the pin loader/update scripts so it’s actually applied.

OPENCODE_VERSION=1.18.14

[Copilot]

Pull request overview

Copilot reviewed 1 out of 1 changed files in this pull request and generated no new comments.