### Summary Five CLI/MCP version updates detected on 2026-05-27. Constants updated in `pkg/constants/version_constants.go` and `make recompile` succeeded (236 workflows, 0 errors). | Tool | Previous | New | Risk | |------|----------|-----|------| | Claude Code | 2.1.150 | 2.1.152 | Low | | Copilot CLI | 1.0.52 | 1.0.54 | Low | | Codex | 0.133.0 | 0.134.0 | Medium | | GitHub MCP Server | v1.0.4 | v1.0.5 | Low | | MCP Gateway | v0.3.19 | v0.3.20 | Low | No changes for: Playwright MCP (0.0.75), Playwright CLI (0.1.13), Playwright Browser (v1.60.0). --- ### Update Claude Code - Previous: 2.1.150 → New: 2.1.152 (intermediate: 2.1.151) - Timeline: 2.1.150 published 2026-05-23, 2.1.152 published 2026-05-26 No public changelog (Anthropic does not publish release notes for this package). This is a patch-level bump. ### Impact Assessment - Risk: Low - Affects: Claude engine workflows only; patch bump, no API changes expected ### Package Links - NPM Package: https://www.npmjs.com/package/`@anthropic-ai/claude-code` --- ### Update Copilot CLI - Previous: 1.0.52 → New: 1.0.54 (intermediate: 1.0.53) - Timeline: 1.0.53 published 2026-05-24, 1.0.54 published 2026-05-24 #### Bug Fixes (1.0.53) - Multiline prompts now display fully without content clipping or selection offset - `/skills` picker correctly honors `--config-dir` when saving skill preferences - Bash shell sessions no longer hang when `PS0` or `PROMPT_COMMAND` is set in the environment #### 1.0.54 - Release notes: "Fixes and changes" (no detailed body published) <details> <summary>View CLI/Subcommand Discovery</summary> Cached help outputs for 1.0.54 are already in `/tmp/gh-aw/cache-memory/copilot-1.0.54-help.txt`, `copilot-1.0.54-config-help.txt`, and `copilot-1.0.54-environment-help.txt` from yesterday's run; no new commands or flags detected versus 1.0.52 baseline beyond the documented fixes. </details> ### Impact Assessment - Risk: Low - Affects: Copilot engine workflows; bug-fix-only release stream ### Package Links - NPM Package: https://www.npmjs.com/package/`@github/copilot` - Repository: https://github.com/github/copilot-cli - Release Notes 1.0.53: https://github.com/github/copilot-cli/releases/tag/v1.0.53 - Release Notes 1.0.54: https://github.com/github/copilot-cli/releases/tag/v1.0.54 --- ### Update Codex - Previous: 0.133.0 → New: 0.134.0 - Timeline: 0.133.0 published 2026-05-21, 0.134.0 published 2026-05-26 #### Key Features - Local conversation history search with case-insensitive content matches and result previews (https://github.com/openai/codex/pull/23519, https://github.com/openai/codex/pull/23921) - `--profile` is now the primary profile selector across CLI, TUI permissions, and sandbox flows; legacy profile configs rejected with migration guidance (https://github.com/openai/codex/pull/23708, https://github.com/openai/codex/pull/23883, https://github.com/openai/codex/pull/24051, https://github.com/openai/codex/pull/24059) - MCP setup with per-server environment targeting and OAuth options for streamable HTTP servers (https://github.com/openai/codex/pull/23583, https://github.com/openai/codex/pull/24120) - Local `$ref`/`$defs` preserved in tool schemas; oversized schemas compacted (https://github.com/openai/codex/pull/23357, https://github.com/openai/codex/pull/23904) - Read-only MCP tools can run concurrently when they advertise `readOnlyHint` (https://github.com/openai/codex/pull/23750) - Conversation history exposed to extension tools; subagent identity in hook inputs (https://github.com/openai/codex/pull/22882, https://github.com/openai/codex/pull/23963) <details> <summary>View Full Changelog</summary> #### Bug Fixes - Reconnect stale exec-server websocket clients; retry remote control after auth recovery; retry remote compaction v2 streams (https://github.com/openai/codex/pull/23867, https://github.com/openai/codex/pull/23775, https://github.com/openai/codex/pull/23951) - Windows TUI rendering corruption fixed by restoring virtual terminal mode before drawing (https://github.com/openai/codex/pull/24082) - Workspace-specific usage-limit messages for credit and spend-cap failures (https://github.com/openai/codex/pull/24114) - Plugin skills can reuse shared plugin-level icon assets (https://github.com/openai/codex/pull/23776) - Active permission profile metadata preserved when syncing auto-review runtime settings (https://github.com/openai/codex/pull/23956) - Node-based tools honor Codex's managed network proxy environment (https://github.com/openai/codex/pull/23905) #### Documentation - README documents curl and PowerShell installer paths (https://github.com/openai/codex/pull/24106) - Developer docs prefer `just test` over direct `cargo test` (https://github.com/openai/codex/pull/23910) - Profile migration documentation links added to relevant config errors (https://github.com/openai/codex/pull/23879) #### Chores - Release packaging simplified around canonical native artifacts, reusable DotSlash fetching, new macOS x64 zsh artifact (https://github.com/openai/codex/pull/23833, https://github.com/openai/codex/pull/23836, https://github.com/openai/codex/pull/24129, https://github.com/openai/codex/pull/24165) - Release-build support for Codex-produced V8 artifacts (https://github.com/openai/codex/pull/23934) - Improved tracing/analytics for websocket requests, turn starts, remote compaction v2 (https://github.com/openai/codex/pull/23581, https://github.com/openai/codex/pull/23980, https://github.com/openai/codex/pull/24146) </details> <details> <summary>View Migration Guide</summary> - Workflows using legacy profile v1 configs will be rejected — migrate to the `--profile` flag and the new profile config format. Codex provides migration guidance at runtime. - No frontmatter changes are required in gh-aw workflows; the Codex engine adapter does not currently emit profile flags. - No changes to `pkg/workflow` adapter required. </details> ### Impact Assessment - Risk: Medium - Affects: Codex engine workflows. The `--profile` v1 rejection is the most material change but is opt-in (only affects users who set profile configs explicitly). ### Package Links - NPM Package: https://www.npmjs.com/package/`@openai/codex` - Repository: https://github.com/openai/codex - Release Notes: https://github.com/openai/codex/releases/tag/rust-v0.134.0 - Full Changelog: https://github.com/openai/codex/compare/rust-v0.133.0...rust-v0.134.0 --- ### Update GitHub MCP Server - Previous: v1.0.4 → New: v1.0.5 - Timeline: v1.0.5 published 2026-05-18 #### Key Features - New tool to list repository collaborators (https://github.com/github/github-mcp-server/pull/2477) - New tool for discussion comment write operations (https://github.com/github/github-mcp-server/pull/2427) - Optional `rationale` parameter on `update_issue_type` tool (https://github.com/github/github-mcp-server/pull/2458) - Minimal code search results with text match snippets returned by default (https://github.com/github/github-mcp-server/pull/2476) - Missing pagination added on `get_reviews` (https://github.com/github/github-mcp-server/pull/2367) - IFC (Information Flow Control) labels added to `list_issues`, `get_file_contents`, `search_issues`, `issue_read`, `search_repositories` tools (https://github.com/github/github-mcp-server/pull/2453, https://github.com/github/github-mcp-server/pull/2454, https://github.com/github/github-mcp-server/pull/2456, https://github.com/github/github-mcp-server/pull/2457, https://github.com/github/github-mcp-server/pull/2459) - Ingress IFC reader list replaced with private marker (https://github.com/github/github-mcp-server/pull/2478) - Copilot Spaces PAT requirements documented (https://github.com/github/github-mcp-server/pull/2479) - go-github upgraded to v0.87 (https://github.com/github/github-mcp-server/pull/2452) ### Impact Assessment - Risk: Low - Affects: All workflows using `tools.github` MCP. New tools are additive; `get_reviews` pagination is a behavior improvement (results now properly paginated). ### Package Links - Repository: https://github.com/github/github-mcp-server - Release Notes: https://github.com/github/github-mcp-server/releases/tag/v1.0.5 - Docker Image: ghcr.io/github/github-mcp-server:v1.0.5 --- ### Update MCP Gateway - Previous: v0.3.19 → New: v0.3.20 - Timeline: v0.3.20 published 2026-05-27 #### Key Features - Per-session tool call limits enforced in allow-only guard policies (https://github.com/github/gh-aw-mcpg/pull/6533) - DIFC proxy handling fixed for top-level array responses on comment list endpoints (https://github.com/github/gh-aw-mcpg/pull/6538) <details> <summary>View Full Changelog</summary> - Refactor semantic outliers into config/guard/tracing ownership files (https://github.com/github/gh-aw-mcpg/pull/6543) - Debug logging added to gateway startup flow in `cmd/root.go` (https://github.com/github/gh-aw-mcpg/pull/6547) - Documentation: corrected `MCP_GATEWAY_WASM_CACHE_DIR` default to log-dir sibling path (https://github.com/github/gh-aw-mcpg/pull/6549) - Tests added for `logger.RPCMessageType.JSONLEvent` (https://github.com/github/gh-aw-mcpg/pull/6541) - Improved tests for mcp http_transport (https://github.com/github/gh-aw-mcpg/pull/6550) </details> ### Impact Assessment - Risk: Low - Affects: Default sandbox.agent container for all workflows using the MCP gateway. Per-session tool call limit enforcement may surface previously hidden over-limit behavior; DIFC fix affects PRs/issues with comment list payloads. ### Package Links - Repository: https://github.com/github/gh-aw-mcpg - Release Notes: https://github.com/github/gh-aw-mcpg/releases/tag/v0.3.20 - Full Changelog: https://github.com/github/gh-aw-mcpg/compare/v0.3.19...v0.3.20 - Docker Image: ghcr.io/github/gh-aw-mcpg:v0.3.20 --- ### Recommendations - Apply all updates together — they are independently low-risk and only the constants file is committed (lock files regenerate via build pipeline). - Validate one Codex-engine workflow end-to-end given the `--profile` v1 deprecation, even though gh-aw does not emit profile flags. - Validate one Copilot-engine workflow given the bash `PS0`/`PROMPT_COMMAND` fix, in case any workflow shell hooks were previously affected. - No `make recompile` re-run needed for these version bumps (the MCP Gateway "twice" rule applies only when changing the gateway version causes container SHA pins to refresh — verified `make recompile` succeeded in a single pass). ### References - [§26495518536](https://github.com/github/gh-aw/actions/runs/26495518536) > Generated by [🔢 CLI Version Checker](https://github.com/github/gh-aw/actions/runs/26495518536) · opus47 11.6M · [◷](https://github.com/search?q=repo%3Agithub%2Fgh-aw+is%3Aissue+%22gh-aw-workflow-call-id%3A+github%2Fgh-aw%2Fcli-version-checker%22&type=issues) > - [x] expires <!-- gh-aw-expires: 2026-05-29T06:54:04.972Z --> on May 29, 2026, 6:54 AM UTC <!-- gh-aw-agentic-workflow: CLI Version Checker, engine: claude, model: agent, id: 26495518536, workflow_id: cli-version-checker, run: https://github.com/github/gh-aw/actions/runs/26495518536 --> <!-- gh-aw-workflow-id: cli-version-checker --> <!-- gh-aw-workflow-call-id: github/gh-aw/cli-version-checker -->