### Summary Four CLI tools have new releases since the last version check. All updates have been applied to `pkg/constants/version_constants.go` and 234 workflow lock files have been regenerated via `make recompile` (run twice). | Tool | Previous | New | Risk | |---|---|---|---| | Claude Code | 2.1.142 | 2.1.148 | Low | | Copilot CLI | 1.0.48 | 1.0.51 | Low | | Codex | 0.130.0 | 0.133.0 | Medium | | GitHub MCP Server | v1.0.4 | v1.0.5 | Low | No changes for: MCP Gateway (v0.3.17), Playwright MCP (0.0.75), Playwright CLI (0.1.13), Playwright Browser (v1.60.0). ### Update Claude Code - Previous: 2.1.142 → New: 2.1.148 - Timeline: 6 patch releases between 2026-05-15 and 2026-05-22 (roughly one per day) ### Breaking Changes None — patch-level updates only. ### Key Features - Routine patch updates; no public release notes are published for this package. <details> <summary>View Full Changelog</summary> ### Release Highlights Claude Code does not maintain a public GitHub repository, so detailed release notes are not available. NPM publish dates for each intermediate version: - 2.1.143 — 2026-05-15 - 2.1.144 — 2026-05-18 - 2.1.145 — 2026-05-19 - 2.1.146 — 2026-05-20 - 2.1.147 — 2026-05-21 - 2.1.148 — 2026-05-22 ### CLI Discovery No new commands or flags detected based on package metadata. The 6-version gap consists of incremental patches. </details> ### Impact Assessment - Risk: Low - Affects: Claude Code engine workflows ### Package Links - NPM Package: https://www.npmjs.com/package/`@anthropic-ai/claude-code` - Homepage: https://github.com/anthropics/claude-code (no public source) --- ### Update Copilot CLI - Previous: 1.0.48 → New: 1.0.51 - Timeline: 3 stable releases between 2026-05-18 and 2026-05-20 ### Breaking Changes None detected. ### Key Features - Routine stable releases. Repository is private; detailed release notes are not publicly accessible. <details> <summary>View Full Changelog</summary> ### Release Timeline (NPM publish dates) - 1.0.49 — 2026-05-18 - 1.0.50 — 2026-05-19 - 1.0.51 — 2026-05-20 ### Repository Access https://github.com/github/copilot-cli is not publicly accessible from this workflow. Release notes, CHANGELOG.md, and README.md cannot be fetched for deep analysis. ### Subcommand Help Analysis Help output for `config` and `environment` subcommands could not be re-captured because the CLI was not installed in this run (cache-only check). The previous run on 2026-05-21 already recorded help output for 1.0.51 (matching the new pinned version), so no additional subcommand discovery is necessary. ### Migration Notes - Both `CopilotNoAskUserMinVersion` (1.0.19) and the general unpinning checks in `version_constants.go` continue to hold for 1.0.51. No code changes beyond the constant bump. </details> ### Impact Assessment - Risk: Low - Affects: Copilot CLI engine workflows ### Package Links - NPM Package: https://www.npmjs.com/package/`@github/copilot` - Repository: https://github.com/github/copilot-cli (private) --- ### Update Codex - Previous: 0.130.0 → New: 0.133.0 - Timeline: 3 minor releases (0.131.0 → 0.132.0 → 0.133.0) ### Breaking Changes None explicitly flagged; feature flags / legacy tool paths were removed in 0.131.0 (deprecated APIs were removed gracefully). ### Key Features (across 0.131 → 0.133) - **Goals enabled by default** — backed by dedicated storage; pause on usage limits / repeated blockers; `/goal edit` command in TUI. - **`codex remote-control` overhaul** — runs as a foreground command with daemon lifecycle, status reads, and registry-backed remote environments. - **`codex doctor`** — new diagnostics command for support workflows. - **`@` mentions unified** — search files, directories, plugins, and skills in a single picker. - **Permission profiles** — list APIs, inheritance, managed `requirements.toml` support, runtime refresh, Windows sandbox integration. - **Plugin marketplace CLI** — version-aware sharing, share checkout, marketplace-aware list output. - **Python SDK** — renamed to `openai-codex` / `openai_codex`, with pinned runtime types, approval modes, login (API key, ChatGPT browser, device-code), `TurnResult` with timing/usage data. - **`codex exec resume --output-schema`** — keeps session context with structured JSON output. - **Windows sandbox parity** — deny-read rules, scoped write roots, MSVC static CRT, profile-native elevated APIs. <details> <summary>View Full Changelog</summary> ### 0.131.0 (Release Notes) New Features: - Richer TUI session controls (service-tier commands, blended token usage, permissions/approval mode display, responsive Markdown tables) — https://github.com/openai/codex/pull/21745, https://github.com/openai/codex/pull/21906, https://github.com/openai/codex/pull/21991 - Unified `@` mentions picker — https://github.com/openai/codex/pull/19068, https://github.com/openai/codex/pull/22375 - Plugin marketplace CLI commands, version-aware sharing, default-enabled plugin hooks — https://github.com/openai/codex/pull/21396, https://github.com/openai/codex/pull/22397, https://github.com/openai/codex/pull/22425, https://github.com/openai/codex/pull/22435, https://github.com/openai/codex/pull/22549 - Daemon-managed `codex remote-control`, registry-backed remote environments — https://github.com/openai/codex/pull/20718, https://github.com/openai/codex/pull/22218, https://github.com/openai/codex/pull/22562 - Python SDK moved to `openai-codex` package — https://github.com/openai/codex/pull/21905, https://github.com/openai/codex/pull/21910 - New `codex doctor` diagnostics — https://github.com/openai/codex/pull/22336 Bug Fixes: - Hardened Windows sandbox deny-read & scoped write roots — https://github.com/openai/codex/pull/18202, https://github.com/openai/codex/pull/21479, https://github.com/openai/codex/pull/22353 - Preserved managed read restrictions during permission escalation — https://github.com/openai/codex/pull/15977 - SQLite startup safety / non-destructive version bumps — https://github.com/openai/codex/pull/21847 - Revoke superseded login tokens on relogin — https://github.com/openai/codex/pull/21747 Full diff: https://github.com/openai/codex/compare/rust-v0.130.0...rust-v0.131.0 ### 0.132.0 (Release Notes) New Features: - Python SDK first-class auth (API key, ChatGPT browser, device-code, logout) — https://github.com/openai/codex/pull/23093 - Python turn APIs accept plain strings; richer `TurnResult` — https://github.com/openai/codex/pull/23151, https://github.com/openai/codex/pull/23162 - `codex exec resume --output-schema` for structured output on resume — https://github.com/openai/codex/pull/23123 - Faster TUI startup via batched terminal capability probes — https://github.com/openai/codex/pull/23175 - Auth-backed remote executor registration — https://github.com/openai/codex/pull/22769 - Image fidelity preservation in app-server turns — https://github.com/openai/codex/pull/20693 Bug Fixes: - Goal continuations stop on usage limits / repeated blockers — https://github.com/openai/codex/pull/23094 - Renamed-thread resume hints, pasted text in session picker — https://github.com/openai/codex/pull/23234, https://github.com/openai/codex/pull/23338 - exec-server websocket keepalive + repo-relative diff paths — https://github.com/openai/codex/pull/23226, https://github.com/openai/codex/pull/23261 - Windows: `codex doctor` npm probe fix + MSVC static CRT — https://github.com/openai/codex/pull/22967, https://github.com/openai/codex/pull/22905 - TUI: shutdown feedback, non-OpenAI provider link hiding — https://github.com/openai/codex/pull/23323, https://github.com/openai/codex/pull/23127 Full diff: https://github.com/openai/codex/compare/rust-v0.131.0...rust-v0.132.0 ### 0.133.0 (Release Notes) New Features: - Goals enabled by default with dedicated storage — https://github.com/openai/codex/pull/23300, https://github.com/openai/codex/pull/23685, https://github.com/openai/codex/pull/23696, https://github.com/openai/codex/pull/23732 - `codex remote-control` now runs as foreground command with explicit start/stop — https://github.com/openai/codex/pull/22878 - Permission profile list APIs, inheritance, managed requirements.toml, Windows sandbox integration — https://github.com/openai/codex/pull/22928, https://github.com/openai/codex/pull/23412, https://github.com/openai/codex/pull/22270, https://github.com/openai/codex/pull/23433 - Plugin discovery improvements (marketplace-aware list, installed versions, remote collections) — https://github.com/openai/codex/pull/23372, https://github.com/openai/codex/pull/23584, https://github.com/openai/codex/pull/23727, https://github.com/openai/codex/pull/23730 - Extension lifecycle hooks (subagent start/stop, tool exec, turn metadata, async approval) — https://github.com/openai/codex/pull/22782, https://github.com/openai/codex/pull/22873, https://github.com/openai/codex/pull/23309 Bug Fixes: - Fixed TUI starting in wrong CWD when reusing local app-server socket — https://github.com/openai/codex/pull/23538 - Plan-mode free-form answers: Shift+Enter no longer submits — https://github.com/openai/codex/pull/23536 - Removed stale background terminal poll events — https://github.com/openai/codex/pull/23231 - Preserve raw code-mode exec output unless output token limit requested — https://github.com/openai/codex/pull/23564 - Reliable AGENTS instruction loading; warn on invalid UTF-8 — https://github.com/openai/codex/pull/23343, https://github.com/openai/codex/pull/23232 - App-server startup/shutdown races, empty resume/fork paths, realtime v1 websocket compatibility — https://github.com/openai/codex/pull/23516, https://github.com/openai/codex/pull/23578, https://github.com/openai/codex/pull/23771 Full diff: https://github.com/openai/codex/compare/rust-v0.132.0...rust-v0.133.0 ### CLI Discovery New commands surfaced across these versions: - `codex doctor` (0.131.0) — diagnostics command - `codex remote-control` lifecycle: `start`, `stop`, foreground execution (0.131.0 / 0.133.0) - `/goal edit` slash command in TUI (0.131.0) - `--dangerously-bypass-hook-trust` CLI flag (0.131.0) - `--output-schema` for `codex exec resume` (0.132.0) </details> ### Impact Assessment - Risk: Medium - Affects: Codex engine workflows. Several internal subsystems changed (extension API, plugin runtime, app-server protocol). Existing workflow pinning behavior is preserved. - Migration: None required at the gh-aw level — all changes are additive or affect Codex-internal subsystems. ### Recommendations - Smoke-test a Codex workflow run end-to-end before broader rollout, especially anything using remote-control or goals. - The `Goals enabled by default` change in 0.133.0 may surface new behavior in agentic loops — verify expected token usage shape. ### Package Links - NPM Package: https://www.npmjs.com/package/`@openai/codex` - Repository: https://github.com/openai/codex - Release Notes: https://github.com/openai/codex/releases - 0.131.0: https://github.com/openai/codex/releases/tag/rust-v0.131.0 - 0.132.0: https://github.com/openai/codex/releases/tag/rust-v0.132.0 - 0.133.0: https://github.com/openai/codex/releases/tag/rust-v0.133.0 --- ### Update GitHub MCP Server - Previous: v1.0.4 → New: v1.0.5 - Timeline: Released 2026-05-18 ### Breaking Changes None. ### Key Features - New `list repo collaborators` tool — https://github.com/github/github-mcp-server/pull/2477 - New tool for discussion comment write operations — https://github.com/github/github-mcp-server/pull/2427 - Optional `rationale` parameter on `update_issue_type` — https://github.com/github/github-mcp-server/pull/2458 - Minimal code search results with text-match snippets — https://github.com/github/github-mcp-server/pull/2476 - Added missing pagination on `get_reviews` — https://github.com/github/github-mcp-server/pull/2367 <details> <summary>View Full Changelog</summary> ### Release Highlights (from GitHub) Merged PRs in v1.0.5: - Add ifc label for list_issues tool — https://github.com/github/github-mcp-server/pull/2453 - Add ifc label for get_file_contents tool — https://github.com/github/github-mcp-server/pull/2454 - Add missing pagination on get_reviews — https://github.com/github/github-mcp-server/pull/2367 - Add optional `rationale` parameter to `update_issue_type` tool — https://github.com/github/github-mcp-server/pull/2458 - Add ifc label for search_issues tool — https://github.com/github/github-mcp-server/pull/2456 - Add ifc label for issue_read tool — https://github.com/github/github-mcp-server/pull/2457 - Add ifc label for search_repositories tool — https://github.com/github/github-mcp-server/pull/2459 - Return minimal code search results with text match snippets — https://github.com/github/github-mcp-server/pull/2476 - Replace ingress IFC reader list with private marker — https://github.com/github/github-mcp-server/pull/2478 - Document Copilot Spaces PAT requirements — https://github.com/github/github-mcp-server/pull/2479 - Add tool to list repo collaborators — https://github.com/github/github-mcp-server/pull/2477 - Add tool for discussion comment write operations — https://github.com/github/github-mcp-server/pull/2427 - Upgrade go-github to v 0.87 — https://github.com/github/github-mcp-server/pull/2452 Full diff: https://github.com/github/github-mcp-server/compare/v1.0.4...v1.0.5 </details> ### Impact Assessment - Risk: Low - Affects: All workflows using the GitHub MCP server (read tools, plus newly added write tools for collaborators / discussion comments). Existing tool surface remains compatible. ### Package Links - Repository: https://github.com/github/github-mcp-server - Release Notes: https://github.com/github/github-mcp-server/releases - Specific Release: https://github.com/github/github-mcp-server/releases/tag/v1.0.5 --- ### Tools Not Updated - **MCP Gateway** v0.3.17 — already current. Latest release is also v0.3.17 (published 2026-05-21). - **Playwright MCP** 0.0.75 — no new release on NPM. - **Playwright CLI** 0.1.13 — no new release on NPM. - **Playwright Browser** v1.60.0 — no newer stable release on GitHub. ### Verification - `pkg/constants/version_constants.go` updated for all four CLI versions. - `make recompile` ran successfully twice; 234 workflow lock files regenerated. - 0 errors, 51 warnings (all pre-existing — e.g. experimental rate-limiting feature, slash-command routing recommendations). **References:** - [§26272504562](https://github.com/github/gh-aw/actions/runs/26272504562) > Generated by [🔢 CLI Version Checker](https://github.com/github/gh-aw/actions/runs/26272504562) · ● 10M · [◷](https://github.com/search?q=repo%3Agithub%2Fgh-aw+is%3Aissue+%22gh-aw-workflow-call-id%3A+github%2Fgh-aw%2Fcli-version-checker%22&type=issues) > - [x] expires <!-- gh-aw-expires: 2026-05-24T06:44:23.560Z --> on May 24, 2026, 6:44 AM UTC <!-- gh-aw-agentic-workflow: CLI Version Checker, engine: claude, model: auto, id: 26272504562, workflow_id: cli-version-checker, run: https://github.com/github/gh-aw/actions/runs/26272504562 --> <!-- gh-aw-workflow-id: cli-version-checker --> <!-- gh-aw-workflow-call-id: github/gh-aw/cli-version-checker -->