Skip to content

[ca] Update CLI versions: Codex 0.133.0, Copilot CLI 1.0.52, GitHub MCP Server v1.0.5 #34386

New issue
New issue
Closed
#34390
Closed
[ca] Update CLI versions: Codex 0.133.0, Copilot CLI 1.0.52, GitHub MCP Server v1.0.5#34386
#34390
Assignees
copilot-swe-agentgh-aw-bot
Labels
automationcookieIssue Monster Loves Cookies!dependenciesPull requests that update a dependency file

Description

@github-actions
github-actions
bot
opened on May 24, 2026

Summary

Three CLI/MCP tools have new stable releases. Constants in pkg/constants/version_constants.go updated and make recompile ran twice — 235 lock files regenerated.

Tool Previous New Risk
Copilot CLI 1.0.51 1.0.52 Low
OpenAI Codex 0.130.0 0.133.0 (3 intermediate) Low–Medium
GitHub MCP Server v1.0.4 v1.0.5 Low

No changes needed for: Claude Code (2.1.150), MCP Gateway (v0.3.18), Playwright MCP (0.0.75), Playwright CLI (0.1.13), Playwright Browser (v1.60.0).

Update Copilot CLI

Key Features

  • Scrollbar with mouse drag support in the main conversation view.
  • /compact accepts optional focus instructions to shape the compaction summary.
  • /usage shows quota progress bars for session and weekly limits.
  • New deferred-tool-loading agent frontmatter for tool-search discovery on large toolsets.
  • Status line command accepts plain shell commands alongside executable script paths.
  • Old process log files in ~/.copilot/logs/ are auto-pruned at startup.
  • General-purpose subagents use GPT-5.4 or GPT-5.5 when available.
  • Reasoning tokens shown alongside output token count in usage summary.
View Full Changelog (Copilot CLI 1.0.52)

Bug Fixes

  • Non-interactive subcommands (plugin list, mcp list, help, version) no longer read from stdin.
  • Switching to Autopilot mode no longer raises unexpected permission prompts for tools, paths, or URLs.
  • copilot --continue from a saved session refreshes the saved branch and git context.
  • Kill command safety filter no longer rejects valid commands with shell redirection (e.g., kill -0 <PID> 2>/dev/null).
  • Sessions resume in their saved working directory; pass -C to override. Relative-path flag values resolve from saved cwd.
  • Context window tier selection (~200K vs 1M tokens) enforced across compaction, truncation, and token display.
  • AI Credits usage now correctly displays after Responses API sessions.
  • Rendering stutter fixed on tmux + Cygwin/mintty.
  • Slash command picker keeps (experimental) and (staff) labels orange when row is selected.
  • Sessions with non-URL strings in URL/URI fields resume without 'Session file is corrupted' error.
  • HTTP/2 upload stall timeouts auto-retry over HTTP/1.1.
  • Windows: sessions no longer fail to load when a process exits with a high-bit exit code.
  • Timeline entry connector color matches surrounding elements when expanded.
  • Gray background bar removed from user messages on non-truecolor terminals.
  • Exit summary AI Credits label has correct spacing.
  • /restart and /update preserve current session ID.
  • PowerShell's division operator no longer falsely triggers 'Allow directory access' prompt on Windows.

MCP / OAuth

  • Legacy nested oauth.clientId and oauth.callbackPort keys in MCP server configs are migrated to oauthClientId and auth.redirectPort (previously dropped silently).
  • MCP OAuth re-authentication honors configured redirectPort.

Polish & UI

  • /statusline picker has cleaner item descriptions and improved spacing.
  • Picker checkboxes use a single-cell ▣/▢ glyph.
  • AI credits error messages reworded for clarity; include Manage budget link.

Impact Assessment

  • Risk: Low — patch release, mostly bug fixes and UI polish.
  • Affects: Copilot engine workflows. The MCP OAuth key migration is helpful for any nested-config users. No breaking changes detected.
  • Verify after update: MCPs load (tools.mcp configuration), /models works with PAT auth (per existing checklist in version_constants.go comment).

Update OpenAI Codex

Key Features (across 0.131–0.133)

  • Goals are now enabled by default with dedicated storage and progress tracking across turns (0.133).
  • codex remote-control runs like a foreground command with readiness waits, machine status, and explicit start/stop daemon commands (0.133).
  • Permission profiles expanded: list APIs, inheritance, managed requirements.toml support, runtime refresh, stronger Windows sandbox integration (0.133).
  • Plugin discovery improved: marketplace-aware list output, installed versions, visible marketplace roots, remote collection support (0.133).
  • Extension lifecycle events for subagent start/stop, tool execution, turn metadata, async approval/turn processing (0.133).
  • Python SDK auth: API key login, ChatGPT browser/device-code flows, account inspection, logout APIs (0.132).
  • Python turn APIs: pass plain string as input; handle-based runs return richer TurnResult with collected items, timing, and usage (0.132).
  • codex exec resume accepts --output-schema (0.132).
  • Faster TUI startup via batched terminal capability probes (0.132).
  • TUI session controls: data-driven service-tier commands, blended token usage, permissions/approval mode, effective workspace roots, responsive Markdown tables (0.131).
  • Unified @ picker for files, directories, plugins, skills via app-server plugin metadata (0.131).
  • Plugin marketplace CLI commands, version-aware sharing, shared-workspace buckets (0.131).
  • Remote workflows with daemon-managed codex remote-control, runtime enable/disable APIs (0.131).
  • Python SDK moved to openai-codex / openai_codex package name (0.131).
  • codex doctor for support-ready diagnostics across runtime, auth, terminal, network, config, local state (0.131).
View Full Changelog (Codex 0.131 – 0.133)

Codex 0.133.0 — Bug Fixes

Codex 0.133.0 — Documentation

Codex 0.133.0 — Chores

Codex 0.132.0 — Bug Fixes

Codex 0.132.0 — Chores

Codex 0.131.0 — Bug Fixes

Codex 0.131.0 — Documentation

Impact Assessment

  • Risk: Low–Medium — three sequential releases with broad changes, but no breaking changes identified for gh-aw workflow usage (Codex is invoked non-interactively via CLI).
  • Affects: Codex engine workflows. The auto-enabled Goals feature and richer permission profiles may shift behavior, but defaults remain compatible.
  • Migration: None required. Codex CLI invocation surface used by gh-aw is unchanged.

Update GitHub MCP Server

Key Features

View Full Changelog (GitHub MCP Server v1.0.5)

IFC Labeling (Information Flow Control)

Documentation

Chores

Impact Assessment

  • Risk: Low — additive changes (new tools, new optional params, new pagination). No breaking changes.
  • Affects: Workflows using the GitHub MCP server. New tools become available; get_reviews pagination may require updates in scripts that assumed all reviews returned in one call (existing behavior preserved for default page size).
  • Migration: None required.

Update Process

Applied:

  • Edited pkg/constants/version_constants.go (3 lines changed)
  • Ran make recompile twice — 235 lock files modified, 0 errors
  • Saved version-check cache to /tmp/gh-aw/cache-memory/version-check-2026-05-24.txt

Recommendations

  • Update priority: Routine. None of these are security releases.
  • Testing: Existing workflow tests should cover all three CLIs. For Copilot, verify the existing checklist from version_constants.go (MCP loading, /models with PAT).
  • Rollout: Standard PR review and merge.

References

Generated by 🔢 CLI Version Checker · ● opu47 9.5M · ◷

  • expires on May 26, 2026, 6:42 AM UTC

Activity

  1. github-actions
    added
    automation
    dependenciesPull requests that update a dependency file
    cookieIssue Monster Loves Cookies!
    on May 24, 2026
  2. gh-aw-bot
    assigned
    Copilot
    and
    gh-aw-bot
    on May 24, 2026

  3. github-actions commented on May 24, 2026

    @github-actions
    github-actionsBot
    on May 24, 2026 – with GitHub Actions
    ContributorAuthor

    🍪 Issue Monster selected this for Copilot

    I've identified this issue as a good candidate for automated resolution and requested assignment to the Copilot coding agent.

    If assignment succeeds, the Copilot coding agent will analyze the issue and create a pull request with the fix.

    Om nom nom! 🍪

    🍪 Om nom nom by Issue Monster · ● hai45 23.4K · ◷

  4. Copilot
    linked a pull request that will close this issueBump pinned Copilot/Codex/GitHub MCP versions and regenerate workflow artifacts #34390on May 24, 2026
  5. pelikhan
    closed this as completedin #34390on May 24, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

automationcookieIssue Monster Loves Cookies!dependenciesPull requests that update a dependency file

Type

No type

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions