Summary
The 2026-06-14 CLI version check finds 8 tools with newer stable releases than the versions pinned in pkg/constants/version_constants.go. This supersedes #38801 (the 2026-06-12 check, now at expiry). The pending delta is unchanged in substance; this refresh carries three trivial patch bumps that landed since: Claude 2.1.177, Copilot CLI 1.0.62 (stable, 2026-06-13), and Pi 0.79.3.
| Tool |
Pinned |
Latest |
Status |
Since #38801 |
| Claude Code |
2.1.168 |
2.1.177 |
⬆️ patch (+9) |
+2 (2.1.176, 2.1.177) |
| GitHub Copilot CLI |
1.0.60 |
1.0.62 |
⬆️ patch (+2) |
+1 (1.0.62) |
| Copilot SDK |
1.0.0 |
1.0.1 |
⬆️ patch |
— |
| OpenAI Codex |
0.137.0 |
0.139.0 |
⬆️ minor (+2) |
— |
| Pi |
0.75.4 |
0.79.3 |
⬆️ minor (+4) |
+2 (0.79.2, 0.79.3) |
| GitHub MCP Server |
v1.1.2 |
v1.3.0 |
⬆️ minor (+2) |
— |
| Playwright MCP |
0.0.75 |
0.0.76 |
⬆️ patch |
— |
| Playwright CLI |
0.1.13 |
0.1.14 |
⬆️ patch |
— |
| MCP Gateway |
v0.3.25 |
v0.3.25 |
✅ |
— |
| Playwright Browser |
v1.60.0 |
v1.60.0 |
✅ |
— |
MCP SDK (@modelcontextprotocol/sdk) |
1.24.0 |
1.29.0 |
⬆️ note |
— |
Impact Assessment
All changes are Low risk: additive features or internal/protocol-level changes. gh-aw invokes Codex/Claude/Copilot/Pi via CLI and uses GitHub MCP read-only, so new MCP write tools and CLI-internal API changes do not affect it. No security advisories identified.
What changed since #38801 (trivial patch bumps)
Carried-forward detail from #38801 (substance unchanged)
GitHub MCP Server — v1.1.2 → v1.3.0
v1.3.0 (2026-06-11) features: get_commits added to pull_request_read — github/github-mcp-server#2608 · get_file_blame (insiders) — github/github-mcp-server#1538 · improved rate-limit errors — github/github-mcp-server#2386 · feature flag for set_issue_fields — github/github-mcp-server#2638 · dependabot cursor pagination — github/github-mcp-server#2651. v1.2.0 (2026-06-08): create_project + create_iteration_field — github/github-mcp-server#2232 · include_patch on get_commit — github/github-mcp-server#1924. Used read-only in gh-aw; new write/insiders tools not enabled. Full changelog: https://github.com/github/github-mcp-server/releases/tag/v1.3.0
OpenAI Codex — 0.137.0 → 0.139.0
Web search in code mode — openai/codex#26719 · schemas retain oneOf/allOf — openai/codex#24118 · -P sandbox profile alias — openai/codex#27054 · v2 PAT auth — openai/codex#25731. Releases: https://github.com/openai/codex/releases/tag/rust-v0.139.0
Pi — 0.75.4 → 0.79.x
Claude Fable 5 support (Anthropic + Bedrock, adaptive thinking, xhigh effort); prompt-template default positional args (${1:-7}); defaultProjectTrust option + ctx.isProjectTrusted(); extension autocomplete trigger chars. Fixes: Bedrock ARN region resolution, GPT-5 context-window metadata, /reload applies steering/follow-up modes, IME/CJK input fixes.
Copilot CLI — 1.0.60 → 1.0.61 (carried)
/settings dialog, /worktree command; auto-load MCP from .github/mcp.json; mTLS OTLP; /every + /after scheduling. Releases: https://github.com/github/copilot-cli/releases
Copilot SDK — 1.0.0 → 1.0.1
Patch (2026-06-10). No public repo. Package: https://www.npmjs.com/package/`@github/copilot-sdk`
Playwright MCP 0.0.75 → 0.0.76 & CLI 0.1.13 → 0.1.14
New browser_video_show_actions / browser_video_hide_actions; --output-max-size flag; moz-firefox BiDi; path-traversal protections.
Migration Guide
Constant edits for pkg/constants/version_constants.go:
const DefaultClaudeCodeVersion Version = "2.1.177" // was 2.1.168
const DefaultCopilotVersion Version = "1.0.62" // was 1.0.60
const DefaultCopilotSDKVersion Version = "1.0.1" // was 1.0.0
const DefaultCodexVersion Version = "0.139.0" // was 0.137.0
const DefaultPiVersion Version = "0.79.3" // was 0.75.4
const DefaultGitHubMCPServerVersion Version = "v1.3.0" // was v1.1.2
const DefaultPlaywrightMCPVersion Version = "0.0.76" // was 0.0.75
const DefaultPlaywrightCLIVersion Version = "0.1.14" // was 0.1.13
// Optional, separate review (larger jump, not in standard tracked set):
// const DefaultMCPSDKVersion Version = "1.29.0" // was 1.24.0
Then run make recompile to regenerate *.lock.yml and verify with git status. Do not commit *.lock.yml or pkg/workflow/js/*.js — they are regenerated artifacts.
Recommendations
Priority Low. GitHub MCP v1.3.0 and Pi 0.79.x carry the most net-new functionality this cycle. After bumping, run make recompile and a per-engine smoke test; for Copilot, re-confirm MCP loading + /models on PAT. The MCP SDK 1.24.0 → 1.29.0 jump is larger and should be reviewed separately.
References: §27491250785 · supersedes #38801
Generated by 🔢 CLI Version Checker · 95.6 AIC · ⌖ 8.41 AIC · ⊞ 10.8K · ◷
Summary
The 2026-06-14 CLI version check finds 8 tools with newer stable releases than the versions pinned in
pkg/constants/version_constants.go. This supersedes #38801 (the 2026-06-12 check, now at expiry). The pending delta is unchanged in substance; this refresh carries three trivial patch bumps that landed since: Claude 2.1.177, Copilot CLI 1.0.62 (stable, 2026-06-13), and Pi 0.79.3.@modelcontextprotocol/sdk)Impact Assessment
All changes are Low risk: additive features or internal/protocol-level changes. gh-aw invokes Codex/Claude/Copilot/Pi via CLI and uses GitHub MCP read-only, so new MCP write tools and CLI-internal API changes do not affect it. No security advisories identified.
What changed since #38801 (trivial patch bumps)
--helpunchanged across the 2.1.17x patch series (cached). Package: https://www.npmjs.com/package/`@anthropic-ai/claude-code`/modelsdoes not silently fail on PATs. Package: https://www.npmjs.com/package/`@github/copilot`Carried-forward detail from #38801 (substance unchanged)
GitHub MCP Server — v1.1.2 → v1.3.0
v1.3.0 (2026-06-11) features:
get_commitsadded topull_request_read— github/github-mcp-server#2608 ·get_file_blame(insiders) — github/github-mcp-server#1538 · improved rate-limit errors — github/github-mcp-server#2386 · feature flag forset_issue_fields— github/github-mcp-server#2638 · dependabot cursor pagination — github/github-mcp-server#2651. v1.2.0 (2026-06-08):create_project+create_iteration_field— github/github-mcp-server#2232 ·include_patchonget_commit— github/github-mcp-server#1924. Used read-only in gh-aw; new write/insiders tools not enabled. Full changelog: https://github.com/github/github-mcp-server/releases/tag/v1.3.0OpenAI Codex — 0.137.0 → 0.139.0
Web search in code mode — openai/codex#26719 · schemas retain oneOf/allOf — openai/codex#24118 ·
-Psandbox profile alias — openai/codex#27054 · v2 PAT auth — openai/codex#25731. Releases: https://github.com/openai/codex/releases/tag/rust-v0.139.0Pi — 0.75.4 → 0.79.x
Claude Fable 5 support (Anthropic + Bedrock, adaptive thinking,
xhigheffort); prompt-template default positional args (${1:-7});defaultProjectTrustoption +ctx.isProjectTrusted(); extension autocomplete trigger chars. Fixes: Bedrock ARN region resolution, GPT-5 context-window metadata,/reloadapplies steering/follow-up modes, IME/CJK input fixes.Copilot CLI — 1.0.60 → 1.0.61 (carried)
/settingsdialog,/worktreecommand; auto-load MCP from.github/mcp.json; mTLS OTLP;/every+/afterscheduling. Releases: https://github.com/github/copilot-cli/releasesCopilot SDK — 1.0.0 → 1.0.1
Patch (2026-06-10). No public repo. Package: https://www.npmjs.com/package/`@github/copilot-sdk`
Playwright MCP 0.0.75 → 0.0.76 & CLI 0.1.13 → 0.1.14
New
browser_video_show_actions/browser_video_hide_actions;--output-max-sizeflag;moz-firefoxBiDi; path-traversal protections.Migration Guide
Constant edits for
pkg/constants/version_constants.go:Then run
make recompileto regenerate*.lock.ymland verify withgit status. Do not commit*.lock.ymlorpkg/workflow/js/*.js— they are regenerated artifacts.Recommendations
Priority Low. GitHub MCP v1.3.0 and Pi 0.79.x carry the most net-new functionality this cycle. After bumping, run
make recompileand a per-engine smoke test; for Copilot, re-confirm MCP loading +/modelson PAT. The MCP SDK 1.24.0 → 1.29.0 jump is larger and should be reviewed separately.References: §27491250785 · supersedes #38801