[ca] CLI/runtime version drift detected #63110

Summary

Detected upstream version drift for CLI/runtime dependencies and one cooldown-blocked MCP Gateway release. No repository files were changed in this run.

Recommended updates

• Claude Code: 2.1.273 → 2.1.281
• Copilot CLI: 1.0.87 → 1.0.88
• Copilot SDK: 1.0.13 → 1.0.14
• Codex: 0.154.0 → 0.156.1
• Playwright CLI: 0.1.19 → 0.1.21
• Pi: 0.87.0 → 0.87.1

CLI details

Claude Code

• Current: 2.1.273
• Latest: 2.1.281
• Source: npm package @anthropic-ai/claude-code
• Release metadata access: package version only; no public release notes were consulted in this run.
• Risk: Medium
• Impact: requires follow-up install/help-output diffing before pin update because upstream changelog was not available from public repo sources.

Copilot CLI

• Current: 1.0.87
• Latest: 1.0.88
• Release date: 2026-09-22T20:00:58Z
• Release notes: https://github.com/github/copilot-cli/releases/tag/v1.0.88
• Risk: Medium
• Impact on gh-aw: low expected for existing pins, but worth validating because release notes mention managed settings, MCP reliability, background tasks, prompt behavior, agent selection, and session resume.
• Notable changes from the release notes:
  • optional OSC 777 terminal notifications for Ghostty/WezTerm sessions
  • better behavior around managed settings refresh and exact session approvals
  • improved messaging for sandboxed network denials from proxy tunnel failures
  • more reliable MCP tool recovery from listing/connection/OAuth failures
  • enterprise managed settings now apply in ACP/AHP/server modes
  • session resume, background task timeout warnings, and prompt UX improvements
• Research limitation: GitHub API reads for repository files returned 502 "resource labeling failed", so CHANGELOG.md/README deep analysis could not be completed in this run.

Copilot SDK

• Current: 1.0.13
• Latest: 1.0.14
• Source: npm package @github/copilot-sdk
• Risk: Low
• Impact: likely transitive/library-only update, but no repo changes were applied here.

Codex

• Current: 0.154.0
• Latest: 0.156.1
• Intermediate release reviewed: 0.156.0
• Release notes:
  • https://github.com/openai/codex/releases/tag/rust-v0.156.0
  • https://github.com/openai/codex/releases/tag/rust-v0.156.1
• Risk: High
• Impact on gh-aw: meaningful behavioral surface change because the release train includes TUI, voice, daemon, usage analytics, security hardening, sandbox/network changes, and model catalog changes.
• Categorized changes:
  • Breaking/behavioral:
    • voice enabled by default, daemon update path added, --no-daemon support, changed TUI workflows
  • Features:
    • /tui, /usage, themes, Mermaid/math rendering, worktree support, new model catalog entries in 0.156.1
  • Fixes:
    • session resume reliability, streamed answer preservation, proxy/OAuth recovery, clipboard/tmux behavior
  • Security:
    • fixes for inbound Windows connections, privileged Linux/macOS sockets, read-only macOS file-handle writes
  • Performance:
    • many transcript/memory/layout/runtime efficiency improvements
• External reference conversion examples:
  • [hotfix 0.156.0] Add GPT-6 Sol and Luna to the model catalog (#47332) openai/codex#47405
  • Add GPT-6 Sol and Luna to the model catalog openai/codex#47332

Playwright CLI

• Current: 0.1.19
• Latest: 0.1.21
• Intermediate release reviewed: 0.1.20
• Release notes:
  • https://github.com/microsoft/playwright-cli/releases/tag/v0.1.20
  • https://github.com/microsoft/playwright-cli/releases/tag/v0.1.21
• Risk: Medium
• Impact on gh-aw: relevant when tools.playwright is enabled; updates add command surface and media emulation features.
• Categorized changes:
  • Features:
    • new webmcp-list / webmcp-call
    • media emulation commands: set-color-scheme, set-reduced-motion, set-forced-colors, set-contrast, set-media, plus clear-*
    • 60fps video recording and cursor rendering controls
    • snapshot now includes WebMCP tool registrations
    • absolute file path output option
  • Fixes:
    • service-worker-safe state-save
    • upload retry UX, short-secret handling, bad-header handling
    • daemon timeout/cleanup and nested output path fixes in 0.1.20
• External references:
  • feat(mcp): expose page-registered WebMCP tools microsoft/playwright#42613
  • feat(mcp): add media emulation microsoft/playwright#42668
  • feat(mcp): add --file-paths=absolute for absolute paths in tool results microsoft/playwright#42673
  • feat(video): allow recording video at a custom fps microsoft/playwright#42752
  • feat(screencast): style action decorations, keep cursor visible microsoft/playwright#42758

Pi

• Current: 0.87.0
• Latest: 0.87.1
• Release date from npm metadata: 2026-09-22T19:42:48.221Z
• Source: npm package @earendil-works/pi-coding-agent
• Risk: Low to Medium
• Impact: package bump available; public changelog/repository analysis was not available in this run.

GitHub MCP Server

• Current: v1.12.2
• Latest: v1.12.2
• Result: no update needed
• Release notes reviewed: https://github.com/github/github-mcp-server/releases/tag/v1.12.2
• Notable items already pinned:
  • add update_issue_comment tool
  • add reaction-removal tools for issues and pull-request review comments

Threat-detect

• Current: v0.5.2
• Latest: v0.5.2
• Result: no update needed
• Release notes reviewed: https://github.com/github/gh-aw-threat-detection/releases/tag/v0.5.2
• Notable already-pinned items include checksum-contract validation and preserving the Copilot threat detection result sink.

Docker image review

No docker image changes detected from the data successfully retrieved in this run.

Checked images with no change

• ActionlintImage: rhysd/actionlint:1.7.12@sha256:b1934ee5f1c509618f2508e6eb47ee0d3520686341fec936f3b79331f9315667
• GrantImage: anchore/grant:v0.6.8@sha256:172463611795f43b77302cdfbd7b3f81295492a7330e0820cfe41c3674920237
• ZizmorImage: version unchanged at 1.30.1
• PoutineImage: version unchanged at 1.1.6
• RunnerGuardImage: version unchanged at 3.1.5
• YamllintImage: digest unchanged for current latest pin

Available docker image updates

• SyftImage
  • Current: anchore/syft:v1.51.1@sha256:95fe0835e5bebc6f8b1f8acef68d47d63d594ef4c0f25c097ff853b23cbac74c
  • Candidate: anchore/syft:v1.52.0@sha256:500e2d872ac019436926e8322b4fc1f39441d94d21f6f4046c6ff29b30e8cb02
  • Release date: 2026-09-17T14:38:17Z
  • Cooldown: passed
  • Release: https://github.com/anchore/syft/releases/tag/v1.52.0
  • Risk: Medium
• GrypeImage
  • Current: anchore/grype:v0.118.0@sha256:8a93fc48da96bd6ec5981279d099b69de11541dc68fdf222fb9161f8ff284af7
  • Candidate: anchore/grype:v0.119.0@sha256:8c2c9234a345577a6d321a4753aa3ee1276d8975c8452d2344a56b57733ecad3
  • Release date: 2026-09-17T16:45:23Z
  • Cooldown: passed
  • Release: https://github.com/anchore/grype/releases/tag/v0.119.0
  • Risk: Medium
• MCP Gateway container/runtime version
  • Current constant: v0.4.25
  • Latest release: v0.4.26
  • Release date: 2026-09-24T05:16:57Z
  • Cooldown: not passed, so do not update docker/runtime pin yet
  • Release: https://github.com/github/gh-aw-mcpg/releases/tag/v0.4.26
  • Notable release items: debug logging additions, repository selector refactors, tool-name constant additions, redaction performance improvement, and a fix for the REST labels route using the guard-recognized list_label tool name.

Recommended next steps

1. Update pkg/constants/version_constants.go for the CLI pins above after completing install/help-output comparison for each changed CLI.
2. Update pkg/cli/docker_images.go for Syft and Grype.
3. Defer MCP Gateway version bump until the 3-day cooldown passes.
4. Run make fmt and make recompile after any Go pin changes.
5. Re-run this checker after Copilot repo file access issues are resolved to complete README/CHANGELOG analysis.

Research limitations

• Copilot CLI repository file reads failed with GitHub API 502 resource labeling failed, blocking deep README/CHANGELOG analysis.
• Public changelog sources for Claude Code and Pi were not available from the sources used here, so only npm version metadata was captured.
• GHCR manifest digest resolution for some unchanged public images did not return cleanly via the attempted anonymous endpoints, so unchanged status was inferred from current pins plus lack of a newer release signal in this run.

network:
  allowed:
    - defaults
    - "auth.docker.io"
    - "ghcr.io"
    - "pkgcontainers.githubusercontent.com"
    - "raw.githubusercontent.com"
    - "registry.npmjs.org"
    - "registry1.docker.io"

Generated by 🔢 CLI Version Checker · pi · gpt54 · 42.8 AIC · ⌖ 9.58 AIC · ⊞ 10.1K · ◷

• expires on Sep 25, 2026, 9:35 PM UTC-08:00