[ca] chore: CLI version updates — Claude 2.1.175, GitHub MCP v1.3.0, Pi 0.79.1, Copilot SDK 1.0.1, Codex 0.139.0, Playwright MCP [Content truncated due to length]

[github-actions]

Summary

CLI version check on 2026-06-12 found 8 tools with newer stable releases than the versions pinned in pkg/constants/version_constants.go. This supersedes #38298 (the 2026-06-10 check, expiring today): it carries the newest releases plus four deltas not covered there — GitHub MCP v1.3.0 (released 2026-06-11), Copilot SDK 1.0.1, Pi 0.79.1, and additional Claude patches up to 2.1.175.

Tool	Pinned	Latest	Status	New since #38298
Claude Code	2.1.168	2.1.175	⬆️ patch (+7)	yes (2.1.170→2.1.175)
GitHub Copilot CLI	1.0.60	1.0.61	⬆️ patch	—
Copilot SDK	1.0.0	1.0.1	⬆️ patch	✅ new
OpenAI Codex	0.137.0	0.139.0	⬆️ minor (+2)	—
Pi	0.75.4	0.79.1	⬆️ minor (+4)	✅ new
GitHub MCP Server	v1.1.2	v1.3.0	⬆️ minor (+2)	✅ new (v1.2.0→v1.3.0)
Playwright MCP	0.0.75	0.0.76	⬆️ patch	—
Playwright CLI	0.1.13	0.1.14	⬆️ patch	—
MCP Gateway	v0.3.25	v0.3.25	✅	—
Playwright Browser	v1.60.0	v1.60.0	✅	—
MCP SDK (@modelcontextprotocol/sdk)	1.24.0	1.29.0	⬆️ note	not in standard tracked set

Impact Assessment

All changes are Low risk: additive features or internal/protocol-level changes. gh-aw invokes Codex/Claude/Copilot/Pi via CLI and uses GitHub MCP read-only, so new MCP write tools and CLI-internal API changes do not affect it. No security advisories identified.

---

GitHub MCP Server — v1.1.2 → v1.3.0 (new since #38298)

v1.3.0 (2026-06-11) — highlights: get_commits added to pull_request_read, get_file_blame (insiders), rate-limit errors surfaced to agents.

Features

• get_commits method added to pull_request_read — feat: Add get_commits method to pull_request_read github-mcp-server#2608
• New get_file_blame tool (git blame retrieval) — feat: add get_file_blame tool for retrieving git blame information github-mcp-server#1538
• Improved rate-limit error messages for AI agents — errors: improve rate limit error messages for AI agents github-mcp-server#2386
• Feature flag for set_issue_fields mutation — Send update_issue_suggestions feature flag for set_issue_fields mutation github-mcp-server#2638
• Cursor pagination for dependabot alerts — feat: implement cursor pagination for dependabot alerts github-mcp-server#2651
• Read tools annotated with IFC labels — Annotate read tools with ifc labels github-mcp-server#2671

v1.3.0 fixes & v1.2.0 (from #38298)

v1.3.0 fixes

• Fix GraphQL call casing — Fix GraphQL call using the wrong case for method derivation github-mcp-server#2660
• Updated title annotations for issue_write / add_issue_comment — Update title annotations for issue_write and add_issue_comment tools to reflect that they also work with pull requesta github-mcp-server#2664
• Hide write UI resources in read-only mode — fix: hide write UI resources in read-only mode github-mcp-server#2612

v1.2.0 (2026-06-08, carried from #38298)

• create_project + create_iteration_field — feat: add create_project and create_iteration_field methods to projects_write github-mcp-server#2232
• include_patch param on get_commit — feat: add include_patch parameter to get_commit tool github-mcp-server#1924
• confidence param on issue mutation tools — Add confidence parameter to issue mutation MCP tools github-mcp-server#2605
• MCP Apps aligned to 2026-01-26 stable spec — MCP Apps: align with the 2026-01-26 stable spec github-mcp-server#2573

Full changelog: https://github.com/github/github-mcp-server/releases/tag/v1.3.0 · github/github-mcp-server@v1.1.2...v1.3.0

Used read-only in gh-aw; new write/insiders tools are not enabled. Bump is safe.

---

Pi — 0.75.4 → 0.79.1 (never documented in #38298)

Timeline: 0.76.0 (2026-05-27), 0.77.0 (2026-05-28), 0.78.0 (2026-05-29), 0.78.1 (2026-06-04), 0.79.0 (2026-06-08), 0.79.1 (2026-06-09).

Features (from v0.79.x release notes)

• Claude Fable 5 support on Anthropic & Amazon Bedrock providers (adaptive thinking, xhigh effort)
• Prompt templates accept default positional args, e.g. ${1:-7}
• New defaultProjectTrust option (ask / always / never) + ctx.isProjectTrusted() for extensions
• Extension autocomplete trigger characters (e.g. #, $); areExperimentalFeaturesEnabled guard

Selected fixes

• Bedrock ARN region resolution prefers ARN-embedded region over AWS_REGION
• z.ai / Moonshot Kimi thinking-off sends thinking: { type: "disabled" }
• Azure OpenAI Responses disable server-side response storage
• Corrected context-window / maxTokens metadata for GPT-5 models
• /reload applies updated steeringMode / followUpMode to current session
• IME cursor positioning, CJK wrapping, prompt-history navigation fixes

Package: https://www.npmjs.com/package/`@earendil-works/pi-coding-agent` · Releases: https://github.com/earendil-works/pi/releases/tag/v0.79.1

---

Copilot SDK — 1.0.0 → 1.0.1 (new since #38298)

Patch release (2026-06-10). No public repo / changelog; DefaultCopilotSDKVersion in pkg/constants/version_constants.go. Package: https://www.npmjs.com/package/`@github/copilot-sdk`

---

Claude Code — 2.1.168 → 2.1.175

Patch releases through 2.1.170 (2026-06-09), 2.1.172 (2026-06-10), 2.1.173 (2026-06-11), 2.1.174 (2026-06-11), 2.1.175 (2026-06-12). No public repo; --help unchanged across the 2.1.16x→2.1.17x patch series (cached) — no new commands/flags. Package: https://www.npmjs.com/package/`@anthropic-ai/claude-code`

---

Unchanged since #38298 (carried forward)

Codex 0.139.0, Copilot CLI 1.0.61, Playwright MCP 0.0.76 / CLI 0.1.14

OpenAI Codex — 0.137.0 → 0.139.0 (0.138.0 2026-06-08, 0.139.0 2026-06-09)

• Web search in code mode — [codex] Enable standalone web search in code mode openai/codex#26719
• Schemas retain oneOf/allOf — feat: support oneOf and allOf in tool input schemas openai/codex#24118
• -P sandbox profile alias — cli: add -P sandbox permissions profile alias openai/codex#27054
• v2 PAT auth — [codex-rs] support v2 personal access tokens openai/codex#25731
• (internal, not CLI-facing) multi-agent v2 close_agent→interrupt_agent — Rename multi-agent v2 close_agent to interrupt_agent openai/codex#26994
• Releases: https://github.com/openai/codex/releases/tag/rust-v0.139.0

GitHub Copilot CLI — 1.0.60 → 1.0.61 (2026-06-09)

• /settings dialog, /worktree command; auto-load MCP from .github/mcp.json; mTLS OTLP; /every + /after scheduling
• ⚠️ Per the constant's doc comment: verify MCPs still load and /models doesn't silently fail on PATs.
• Releases: https://github.com/github/copilot-cli/releases

Playwright MCP 0.0.75 → 0.0.76 & CLI 0.1.13 → 0.1.14 (2026-06-10)

• New browser_video_show_actions / browser_video_hide_actions; --output-max-size flag; moz-firefox BiDi; path-traversal protections.

---

Migration Guide

Constant edits for pkg/constants/version_constants.go

const DefaultClaudeCodeVersion       Version = "2.1.175"  // was 2.1.168
const DefaultCopilotVersion          Version = "1.0.61"   // was 1.0.60
const DefaultCopilotSDKVersion       Version = "1.0.1"    // was 1.0.0
const DefaultCodexVersion            Version = "0.139.0"  // was 0.137.0
const DefaultPiVersion               Version = "0.79.1"   // was 0.75.4
const DefaultGitHubMCPServerVersion  Version = "v1.3.0"   // was v1.1.2
const DefaultPlaywrightMCPVersion    Version = "0.0.76"   // was 0.0.75
const DefaultPlaywrightCLIVersion    Version = "0.1.14"   // was 0.1.13
// Optional, separate review (not in standard tracked set):
// const DefaultMCPSDKVersion        Version = "1.29.0"   // was 1.24.0

Then run make recompile to regenerate *.lock.yml and verify with git status. Do not commit *.lock.yml or pkg/workflow/js/*.js — they are regenerated artifacts.

Recommendations

Priority Low. GitHub MCP v1.3.0 and Pi 0.79.x carry the most net-new functionality this cycle. After bumping, run make recompile and a per-engine smoke test; for Copilot, re-confirm MCP loading + /models on PAT. The MCP SDK 1.24.0→1.29.0 jump is larger and should be reviewed separately before bumping.

References: §27399962461 · §27258585229 · supersedes #38298

Generated by 🔢 CLI Version Checker · 136.7 AIC · ⌖ 18 AIC · ⊞ 11.4K · ◷

• expires on Jun 13, 2026, 11:02 PM UTC-08:00