[ca] CLI Version Updates: Claude Code 2.1.220, Copilot 1.0.75, Codex 0.145.0, Pi 0.82.0, GitHub MCP Server v1.7.0

[github-actions]

CLI Version Updates — 6 tools bumped

Six pinned agentic CLI/MCP versions in pkg/constants/version_constants.go were behind upstream and have been updated. make recompile succeeded (261/261 workflows, 0 errors) and all .lock.yml files were regenerated.

Tool	Old	New	Risk
Claude Code	2.1.216	2.1.220	Low
Copilot CLI	1.0.73	1.0.75	Low
Copilot SDK	1.0.7	1.0.8	Low
OpenAI Codex	0.144.6	0.145.0	Low
Pi	0.80.10	0.82.0	Low
GitHub MCP Server	v1.6.0	v1.7.0	Low

No change: Playwright MCP (0.0.78), Playwright CLI (0.1.17), Playwright Browser (v1.61.1), MCP Gateway (v0.4.5).

---

GitHub MCP Server v1.6.0 → v1.7.0

Released 2026-07-23. Features / Fixes:

• Server-to-server auth for GitHub Apps via stdio (enterprise/cloud workloads) — feat(auth): add GitHub App server-to-server authentication for stdio github-mcp-server#2797
• Projects tools: improved pagination across memberships & node IDs — Paginate project item lookup across memberships github-mcp-server#2914, Add node IDs to project resolver results github-mcp-server#2922
• Adopts MCP 2026-07-28 spec via go-sdk 1.7.0-pre.3; OAuth migrated to multi-round-trip elicitation — build(deps): bump go-sdk to 1.7.0-pre.2 and migrate OAuth to multi-round-trip elicitation github-mcp-server#2870, build(deps): bump go-sdk to 1.7.0-pre.3 github-mcp-server#2907
• Lockdown mode: centralised author checks — Centralise lockdown author checks github-mcp-server#2881
• Opt-in intent-aware Copilot issue assignment tool — Add opt-in intent-aware Copilot issue assignment tool github-mcp-server#2909
• label_write now carries DestructiveHint — fix(labels): add DestructiveHint to label_write tool github-mcp-server#2763
• MCP App form deferral opt-out — Add MCP App form deferral opt-out github-mcp-server#2921

Impact on gh-aw: Default GitHub MCP server image. No breaking changes; existing read-only tool usage unaffected. Full changelog: github/github-mcp-server@v1.6.0...v1.7.0

---

OpenAI Codex 0.144.6 → 0.145.0

Released 2026-07-21 (compares rust-v0.144.0...rust-v0.145.0).

Highlights

New Features:

• Experimental paginated thread history with resume, search, persisted names, sub-agent support, memories — Enable paginated thread history in app-server openai/codex#33364, Enable memories for paginated threads openai/codex#34386
• /import migrates Cursor and Claude Code settings, MCP servers, plugins, sessions, commands, memories — Import enabled plugins from known marketplaces openai/codex#31672
• Experimental Amazon Bedrock login, custom endpoint/auth, GPT-5.6 Sol default Bedrock model — feat: add managed Bedrock login API openai/codex#31327
• Audio inputs/tool outputs + streaming realtime V3 conversations — Add Frameless Bidi support for realtime conversations openai/codex#33261
• Stabilized opt-in multi-agent V2 (configurable sub-agent models, reasoning, concurrency) — Unify multi-agent settings under agents openai/codex#33550
• Clickable inline visualization links in the terminal UI — Render inline visualization links in the TUI openai/codex#33925

Bug Fixes:

• Editing/retrying an earlier prompt now creates a contextual branch, preserving history/attachments — Branch conversations when editing earlier TUI prompts openai/codex#33201
• Better terminal responsiveness for long conversations (incremental Markdown, fewer redraws) — Render streamed Markdown incrementally openai/codex#34045
• Hardened MCP startup: startup timeouts, non-blocking OAuth discovery, serialized refreshes — Serialize MCP OAuth credential refreshes openai/codex#32229
• Improved Windows exec/sandbox reliability (native exec-server sandboxing, network-proxy enforcement) — Hide Windows filesystem helper console windows openai/codex#32849
• Stronger safety/approval handling: forced-rm detection, full-access confirmation — Always confirm before enabling full access openai/codex#32989

Chores: GPT-5.4 → GPT-5.6 Terra/Luna migration (openai/codex#33173); bundled ripgrep → 15.2.0 (openai/codex#34384).

CLI: --help output unchanged vs 0.144.6 (cached diff empty). No workflow migration required.

---

Copilot CLI 1.0.73 → 1.0.75

1.0.75 (2026-07-24)

• Add support for Claude Opus 5

1.0.74 (2026-07-23)

• Open Plugin Spec v1 plugin manifests and mcp.json configuration support
• IDE integration reconnects reliably when the CLI reloads MCP servers or changes directory
• /mcp add//mcp edit wizard preserves = in env var values (base64 padding, secrets)
• Multi-turn subagent timelines show every prompt/response in order; identify prompt origin
• First-run splash to opt into the default sandbox
• Adds gemini-3.6-flash support
• Plan mode: /model plan (or /model --plan) to pick a plan-mode model; allows session-folder planning artifacts while blocking mutations outside it
• $ interactive shell shortcut opens a shell even while the agent is working
• Fully honor skill disable-model-invocation flag
• Remote session uploads stop retrying permanent Mission Control 400/404 responses
• Downscale oversized tool-result images so CAPI Responses requests continue
• Steering interrupts shell output waits without stopping the running command

CLI: main --help unchanged (cached 1.0.73 vs 1.0.74 diff empty). Copilot SDK bumped in lockstep 1.0.7 → 1.0.8. Reminder per constant note: verify MCPs load and /models works with PAT auth. Notes: https://github.com/github/copilot-cli/releases

---

Claude Code 2.1.216 → 2.1.220

Released 2026-07-24. No public repository; NPM metadata + cached --help diff (2.1.216 vs 2.1.218) show no CLI surface changes. Routine patch bump. Low risk.

---

Pi 0.80.10 → 0.82.0

Released 2026-07-24 (NPM). No public GitHub repository. CLI change (cached --help diff): two new environment variables added —

QWEN_TOKEN_PLAN_API_KEY      - Qwen Token Plan API key (international region)
QWEN_TOKEN_PLAN_CN_API_KEY   - Qwen Token Plan API key (China region)

Additive only; no breaking changes.

---

Validation

• pkg/constants/version_constants.go edited for all 6 tools
• make recompile — ✓ 261/261 workflows compiled, 0 errors
• .lock.yml files regenerated (not committed here, per policy)

References:

• §30146959016

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

• models.dev

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "models.dev"

See Network Configuration for more information.

Generated by 🔢 CLI Version Checker · age00 · 182.4 AIC · ⌖ 45.6 AIC · ⊞ 8.6K · ◷

• expires on Jul 26, 2026, 10:16 PM UTC-08:00

[github-actions]

🍪 Issue Monster selected this for Copilot

I have identified this issue as a good candidate for automated resolution and requested assignment to the Copilot coding agent.

If assignment succeeds, the Copilot coding agent will analyze the issue and create a pull request with the fix.

Om nom nom! 🍪

🍪 Om nom nom by Issue Monster · gpt54 · 3.88 AIC · ⌖ 6.82 AIC · ⊞ 6.8K · ◷