Repository navigation
[ca] CLI version updates: Claude Code, Copilot CLI, Codex, GitHub MCP Server (2026-05-28) #35424
Description
Summary
Four CLI/MCP version updates detected and applied to pkg/constants/version_constants.go. All changes are minor/patch updates with no breaking changes affecting gh-aw workflows. make recompile succeeded with 236 workflows compiled, 0 errors.
| Tool | Previous | New | Intermediate |
|---|---|---|---|
| Claude Code | 2.1.150 | 2.1.153 | 2.1.151, 2.1.152 |
| Copilot CLI | 1.0.52 | 1.0.54 | 1.0.53 |
| Codex | 0.133.0 | 0.134.0 | — |
| GitHub MCP Server | v1.0.4 | v1.0.5 | — |
Already current (no changes): MCP Gateway v0.3.20, Playwright MCP 0.0.75, Playwright CLI 0.1.13, Playwright Browser v1.60.0.
Note: yesterday's (2026-05-27) version-check issue listed identical upgrades for Claude/Copilot/Codex/GitHub MCP, but only the MCP Gateway bump was merged into main. This run re-applies those four upgrades and additionally picks up Claude Code 2.1.153 (released 2026-05-27).
Update Claude Code
- Previous: 2.1.150 → New: 2.1.153
- Timeline: 2026-05-23 → 2026-05-27 (4 days, 3 patch releases)
Breaking Changes
None (patch releases only).
Key Features
- Patch releases — no public repository or release notes available; NPM metadata only.
View Full Changelog
Release Highlights
Claude Code has no public GitHub repository; release notes are unavailable. Versions 2.1.151–2.1.153 are sequential patches published on 2026-05-23, 2026-05-26, and 2026-05-27 respectively.
Bug Fixes
Unknown — not published.
Security Updates
None disclosed.
CLI Discovery
No new commands or flags detected via --help between 2.1.150 and 2.1.153.
View Migration Guide
No migration required — minor patch updates. Update is applied automatically via pkg/constants/version_constants.go.
Impact Assessment
- Risk: Low
- Affects: Claude engine invocations in gh-aw workflows
Package Links
- NPM Package: https://www.npmjs.com/package/`@anthropic-ai/claude-code`
- Repository: Not publicly available
Update Copilot CLI
- Previous: 1.0.52 → New: 1.0.54
- Timeline: 2026-05-23 → 2026-05-24 (1 day, 2 patch releases)
Breaking Changes
None observed.
Key Features
Patch releases — repository at https://github.com/github/copilot-cli is private and inaccessible, so detailed release notes cannot be retrieved. Cached help output for 1.0.54 already exists at /tmp/gh-aw/cache-memory/copilot-1.0.54-help.txt (verified by previous run on 2026-05-27).
View Full Changelog
Release Highlights
Repository is private (github/copilot-cli) — public release notes cannot be retrieved. NPM metadata indicates 1.0.53 and 1.0.54 are sequential patches published on 2026-05-24.
CLI Discovery
Cached copilot --help and subcommand help outputs (config, environment) for 1.0.54 exist in cache-memory from the prior run. No public changelog to compare against.
Subcommand Changes
Unable to verify — repository inaccessible.
View Migration Guide
No migration required. Confirm at runtime that:
- MCPs are not blocked from loading
/modelsdoes not silently fail on PATs
(These are the long-standing validation items noted in the constant's docstring.)
Impact Assessment
- Risk: Low
- Affects: Copilot engine invocations in gh-aw workflows
Package Links
- NPM Package: https://www.npmjs.com/package/`@github/copilot`
- Repository: https://github.com/github/copilot-cli (private)
Update Codex
- Previous: 0.133.0 → New: 0.134.0
- Timeline: 2026-05-21 → 2026-05-26 (5 days, 1 minor release)
Breaking Changes
--profileis now the primary profile selector across CLI, TUI permissions, and sandbox flows. Legacy profile configs are rejected with migration guidance. (tui: plumb permission profile selection openai/codex#23708, cli: rename profile v2 flag to --profile openai/codex#23883, mcp: surface profile migration guidance under --profile openai/codex#23890, config: remove legacy profile v1 resolution openai/codex#24051, config: remove legacy profile write paths openai/codex#24055, fix: reject legacy profile selectors openai/codex#24059, app-server: drop legacy profile config surface openai/codex#24067, cli: support --profile for codex sandbox openai/codex#24110)
Key Features
- Search across local conversation history with case-insensitive content matching and previews ([codex] Add rollout-backed thread content search openai/codex#23519, [codex] Make thread search case-insensitive openai/codex#23921)
- MCP setup improvements: per-server environment targeting and OAuth options for streamable HTTP servers (Route MCP servers through explicit environments openai/codex#23583, Support OAuth options in codex mcp add openai/codex#24120)
- Connector tool schemas now preserve local
$ref/$defsand compact oversized schemas (feat: support local refs and defs in tool input schemas openai/codex#23357, feat: best-effort compact large tool schemas openai/codex#23904) - Read-only MCP tools advertising
readOnlyHintcan now run concurrently (Allow parallel MCP tool calls when annotated readOnly openai/codex#23750) - Richer extension and hook context with conversation history for extension tools and subagent identity in hook inputs (Add subagent identity to hook inputs openai/codex#22882, Expose conversation history to extension tools openai/codex#23963)
View Full Changelog
Bug Fixes
- Reconnect stale exec-server websocket clients; retry remote control after auth recovery; retry remote compaction v2 streams (Reconnect disconnected exec-server websocket clients with fresh sessions openai/codex#23867, fix(remote-control): retry after auth recovery openai/codex#23775, retry remote compaction v2 requests openai/codex#23951)
- Fix Windows TUI rendering corruption by restoring virtual terminal mode before drawing (fix(tui): restore Windows VT before TUI renders openai/codex#24082)
- Display workspace-specific usage-limit messages for credit and spend-cap failures (Display workspace usage limit error copy from response header openai/codex#24114)
- Allow plugin skills to reuse shared plugin-level icon assets (fix: Allow plugin skills to share plugin-level icon assets openai/codex#23776)
- Preserve active permission profile metadata when syncing auto-review runtime settings (Fix auto-review permission profile override openai/codex#23956)
- Ensure Node-based tools honor Codex's managed network proxy environment ([codex] Enable Node env proxy for managed network proxy openai/codex#23905)
Documentation
- Document curl and PowerShell installer paths in README (docs: update README.md to mention curl-based installer openai/codex#24106)
- Updated developer docs to prefer
just testover directcargo test(Preferjust testovercargo testin docs openai/codex#23910) - Added profile migration documentation links to config errors (chore: link doc in profile error messages openai/codex#23879)
Chores
- Simplified release packaging around canonical native artifacts, reusable DotSlash fetching, and a new macOS x64 zsh artifact (packaging: move rg manifest out of npm bin openai/codex#23833, npm: remove legacy package artifact synthesis openai/codex#23836, package: factor DotSlash executable fetching openai/codex#24129, release: build macOS x64 zsh artifact openai/codex#24165)
- Added release-build support for Codex-produced V8 artifacts (ci: Use codex produced v8 artifacts for release builds openai/codex#23934)
- Improved tracing/analytics for websocket requests, turn starts, and remote compaction v2 (Trace logical websocket request after untraced warmup openai/codex#23581, Add trace_id to TurnStartedEvent openai/codex#23980, [codex-analytics] split compaction v2 analytics implementation openai/codex#24146)
Security Updates
None disclosed.
View Migration Guide
The profile selector rename to --profile is a primary user-facing change. If any gh-aw workflows pass profile flags to Codex (e.g., legacy --profile-v2 or similar), they will need to be updated. Review gh-aw's Codex engine invocations for any profile-related flags before rollout.
Impact Assessment
- Risk: Medium (due to
--profilerename — needs verification that gh-aw doesn't pass legacy profile flags) - Affects: Codex engine invocations, particularly any profile-based configuration
Package Links
- NPM Package: https://www.npmjs.com/package/`@openai/codex`
- Repository: https://github.com/openai/codex
- Release Notes: https://github.com/openai/codex/releases
- Specific Release: https://github.com/openai/codex/releases/tag/rust-v0.134.0
Update GitHub MCP Server
- Previous: v1.0.4 → New: v1.0.5
- Timeline: released 2026-05-18
Breaking Changes
None.
Key Features
- New tool: list repo collaborators (Add tool to list repo collaborators github-mcp-server#2477)
- New tool: discussion comment write operations (feat: Add tool for discussion comment write operations github-mcp-server#2427)
- Minimal code search results with text match snippets (feat: return minimal code search results with text match snippets github-mcp-server#2476)
- Optional
rationaleparameter onupdate_issue_typetool (Add optionalrationaleparameter toupdate_issue_typetool github-mcp-server#2458) - Added IFC (Information Flow Control) labels for
list_issues,get_file_contents,search_issues,issue_read,search_repositoriestools (Add ifc label for list_issues tool github-mcp-server#2453, Add ifc label for get_file_contents tool github-mcp-server#2454, Add ifc label for search_issues tool github-mcp-server#2456, Add ifc label for issue_read tool github-mcp-server#2457, Add ifc label for search_repositories tool github-mcp-server#2459)
View Full Changelog
Bug Fixes
- Add missing pagination on
get_reviews(fix: add missing pagination on get_reviews github-mcp-server#2367) - Replace ingress IFC reader list with private marker (Replace ingress IFC reader list with private marker github-mcp-server#2478)
Documentation
- Document Copilot Spaces PAT requirements (Document Copilot Spaces PAT requirements github-mcp-server#2479)
Chores
- Upgrade go-github to v0.87 (Upgrade go-github to v 0.87 github-mcp-server#2452)
Security Updates
None disclosed.
Full diff
View Migration Guide
No migration required. New tools are additive; the get_reviews pagination fix and the IFC label additions are transparent.
Downstream consideration: if any workflows enumerate the GitHub MCP tool surface, the two new tools (collaborator listing, discussion comment writes) will appear and may require allowlist updates.
Impact Assessment
- Risk: Low
- Affects: GitHub MCP server invocations in all workflows that use it
Package Links
- Docker Image: ghcr.io/github/github-mcp-server:v1.0.5
- Repository: https://github.com/github/github-mcp-server
- Release Notes: https://github.com/github/github-mcp-server/releases
- Specific Release: https://github.com/github/github-mcp-server/releases/tag/v1.0.5
Recommendations
- Update priority: Medium overall. Codex 0.134.0 has the highest scrutiny due to the
--profilerename. Verify any internal usage of profile flags before rollout. - Testing strategy: Run a representative subset of agentic workflows with each updated engine before merging (Claude, Copilot, Codex). Confirm GitHub MCP tool calls succeed for both new tools and the paginated
get_reviews. - Rollout plan: Single bundled PR for all four constants updates. Lock files are regenerated locally but not committed (per project guidelines).
References:
Generated by 🔢 CLI Version Checker · opus47 8.2M · ◷
- expires on May 30, 2026, 6:47 AM UTC
Activity
github-actions commentedon May 28, 2026
🍪 Issue Monster selected this for Copilot
I've identified this issue as a good candidate for automated resolution and requested assignment to the Copilot coding agent.
If assignment succeeds, the Copilot coding agent will analyze the issue and create a pull request with the fix.
Om nom nom! 🍪
github-actions commentedon May 29, 2026
This issue is being closed as outdated. A newer issue has been created: #35657
View newer issue
This action was performed automatically by the
CLI Version Checkerworkflow.