You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Five agentic CLI/MCP tools have new stable releases since the last check. All updates have been applied to pkg/constants/version_constants.go and make recompile was run twice (per the DefaultMCPGatewayVersion comment) to regenerate lock files and refresh container SHA pins.
Permission-prompt bypass fix in Claude Code 2.1.145 — bare variable assignments to non-allowlisted env vars in Bash commands were previously auto-approved. Security-relevant; favor updating promptly.
MCP Gateway v0.3.12 adds DIFC proxy /meta probe support for the gh CLI (PR #5924). Relevant for sandboxed gh invocations.
GitHub MCP Server v1.0.5 adds list_repository_collaborators and discussion comment write tools; existing search_code now returns minimal results with text-match snippets (PR #2476).
Note: No public source repo; Anthropic releases changelog via NPM package only
Update: GitHub Copilot CLI
Previous: 1.0.48 → New: 1.0.50
Release timeline: v1.0.49 published 2026-05-19; v1.0.50 on NPM with no GitHub release notes (latest GitHub release is v1.0.49, then prereleases v1.0.51-1, v1.0.51-2)
Key Features (from v1.0.49 release)
New /chronicle search subcommand to search session content by keyword/topic
New /rubber-duck command (experimental) for independent critique of agent's work
New /session id subcommand to display/copy current session ID
New /memory on|off|show slash command (persistent memory status control)
New /exit print option to print session before exiting
Add Alpine Linux (musl libc) support
New copilot plugin update --all to update all plugins at once
Add auth.redirectPort MCP config option to pin OAuth callback port
Experimental: /mcp search to search and install MCP servers from registry
Experimental: Tool search with deferred loading for MCP/external tools
Add "None" reasoning effort option to disable model reasoning
New COPILOT_PLUGIN_DIR_ONLY env var to disable automatic plugin discovery
Key Fixes
postToolUse hook additionalContext now injected as system message (was silently discarded)
MCP servers using static OAuth clients now persist registration for token refreshes
MCP server configurations with no args field now accepted (treated as empty list)
MCP OAuth token lookups correctly scoped to active session
MCP stdio servers display type as 'stdio' instead of 'local'
Memory permission prompts name who can see stored memory (user vs owner/repo)
Hooks (preToolUse, postToolUse, subagentStart, subagentStop) now fire for sub-agent tool calls
Plugins via --plugin-dir register agents as available task(agent_type=...) subagents in prompt mode
--plugin-dir and --additional-mcp-config now work in --server / --headless mode
Repo hooks in .github/hooks/ now load in prompt mode when folder trusted
Reduce PowerShell syntax errors on Windows (avoid && chaining in PowerShell 5.x)
Impact on gh-aw
Verify per DefaultCopilotVersion comment: confirm MCPs load and /models works with PATs. The release notes mention multiple MCP improvements but no breaking MCP changes.
v1.0.50 specifically not documented in GitHub releases (likely a small patch released 2026-05-19/20 between v1.0.49 and v1.0.51-1 prerelease). The latest stable GitHub release notes are for v1.0.49.
Remote executor registration can use standard Codex auth (#22769)
App-server turns can preserve image fidelity (original-resolution local images) (#20693)
Key Fixes
0.131.0: Hardened Windows sandbox behavior, preserved managed read restrictions during permission escalation, safer app-server/local state startup (SQLite data preserved on restart, fail-closed when state cannot open)
0.132.0: Goal continuations now stop on usage limits or repeated blockers; session picker resume hints show name (thread-id); remote sessions keep websocket connections alive; Windows MSVC release binaries no longer depend on separately installed VC++ runtime DLLs (#22905); codex doctor detects npm-managed installs correctly on Windows (#22967)
Documentation
Updated Python SDK docs, FAQ, and examples around new auth flow and turn APIs
Impact Assessment
Risk: Low-Medium — Python SDK was renamed (openai-codex/openai_codex); gh-aw does not use the Python SDK directly so impact is limited
Memory summaries are now versioned and rebuilt when stored format is stale (#23148) — may regenerate existing memory state on first run
-const DefaultClaudeCodeVersion Version = "2.1.142"+const DefaultClaudeCodeVersion Version = "2.1.145"-const DefaultCopilotVersion Version = "1.0.48"+const DefaultCopilotVersion Version = "1.0.50"-const DefaultCodexVersion Version = "0.130.0"+const DefaultCodexVersion Version = "0.132.0"-const DefaultGitHubMCPServerVersion Version = "v1.0.4"+const DefaultGitHubMCPServerVersion Version = "v1.0.5"-const DefaultMCPGatewayVersion Version = "v0.3.9"+const DefaultMCPGatewayVersion Version = "v0.3.12"
Migration Steps Performed
Updated pkg/constants/version_constants.go with 5 new versions
Ran make recompile twice (per DefaultMCPGatewayVersion comment to refresh container SHA pins on the second pass)
Priority: Medium-High due to the Claude Code 2.1.145 permission-prompt bypass fix (security)
Verify before merge per DefaultCopilotVersion comment in constants: that MCPs are not blocked from loading and /models does not silently fail on PATs (run a smoke-copilot workflow)
Verify GitHub MCP Server search_code response handling — minimal results with text-match snippets is a slightly narrowed response shape
The MCP Gateway and GitHub MCP Server updates ship paired DIFC rules for new tools (list_repository_collaborators, discussion_comment_write)
Summary
Five agentic CLI/MCP tools have new stable releases since the last check. All updates have been applied to
pkg/constants/version_constants.goandmake recompilewas run twice (per theDefaultMCPGatewayVersioncomment) to regenerate lock files and refresh container SHA pins.No update needed: Playwright MCP (0.0.75), Playwright CLI (0.1.13), Playwright Browser (v1.60.0).
Critical Information
/metaprobe support for the gh CLI (PR #5924). Relevant for sandboxed gh invocations.list_repository_collaboratorsand discussion comment write tools; existingsearch_codenow returns minimal results with text-match snippets (PR #2476).Update: Claude Code
Key Features (2.1.143–2.1.145)
claude agents --jsonfor scripting (tmux, status bars, session pickers)agent_id/parent_agent_idonclaude_code.toolOTEL spans with corrected trace parenting for background subagents/pluginDiscover/Browse panes now show commands, agents, skills, hooks, and MCP/LSP servers before install/resumesupport, elapsed duration in completion notifications, model preserved across wakeworktree.bgIsolation: "none"setting for direct edits withoutEnterWorktree-ExecutionPolicy Bypass; opt-out viaCLAUDE_CODE_POWERSHELL_RESPECT_EXECUTION_POLICY=1background_tasksandsession_cronsfieldsSecurity Fix
View Full Changelog (2.1.143–2.1.145)
2.1.145
claude agents --jsonto list live Claude sessions as JSON for scriptingagent_idandparent_agent_idattributes toclaude_code.toolOTEL spans/pluginDiscover and Browse screens now show plugin's commands, agents, skills, hooks, MCP/LSP serversclaude agentsterminal tab title now shows awaiting-input countbackground_tasksandsession_cronsfields/reviewusing deprecatedprojectCardsGraphQL query2.1.144
/resumesupport for background sessions/pluginbrowse/discover panes show when plugin was last updated/modelchanges for current session only (pressdto set default)/extra-usagestill works)tools/listonly returning first page2.1.143
claude plugin disablerefuses when another plugin depends on target/pluginmarketplace browse paneworktree.bgIsolation: "none"setting-ExecutionPolicy Bypass.credentials.jsonhanging CLI on startupclaude agentson Windows Terminal and WSL/goalevaluator firing while background shells/subagents still runningNO_COLOR/FORCE_COLORsettings stripping Claude Code's own UI colorsrm -rfwhengit worktree removefailsPackage Links
Update: GitHub Copilot CLI
Key Features (from v1.0.49 release)
/chronicle searchsubcommand to search session content by keyword/topic/rubber-duckcommand (experimental) for independent critique of agent's work/session idsubcommand to display/copy current session ID/memory on|off|showslash command (persistent memory status control)/exit printoption to print session before exitingcopilot plugin update --allto update all plugins at onceauth.redirectPortMCP config option to pin OAuth callback port/mcp searchto search and install MCP servers from registryCOPILOT_PLUGIN_DIR_ONLYenv var to disable automatic plugin discoveryKey Fixes
additionalContextnow injected as system message (was silently discarded)argsfield now accepted (treated as empty list)owner/repo)--plugin-dirregister agents as availabletask(agent_type=...)subagents in prompt mode--plugin-dirand--additional-mcp-confignow work in--server/--headlessmode.github/hooks/now load in prompt mode when folder trusted&&chaining in PowerShell 5.x)Impact on gh-aw
DefaultCopilotVersioncomment: confirm MCPs load and/modelsworks with PATs. The release notes mention multiple MCP improvements but no breaking MCP changes.Package Links
Update: OpenAI Codex
Key Features
0.131.0 (2026-05-18)
@mentions now search files, directories, plugins, and skills in one picker (#19068, #22375)codex remote-controldaemon, runtime enable/disable APIs (#20718)openai-codex/openai_codexwith pinned runtime-generated types (#21778)codex doctorfor support-ready diagnostics across runtime, auth, terminal, network, config, and local state (#22336)0.132.0 (2026-05-20)
TurnResultwith collected items, timing, usage (#23151, #23162)codex exec resumenow accepts--output-schemato enforce structured JSON output on resumed automations (#23123)Key Fixes
name (thread-id); remote sessions keep websocket connections alive; Windows MSVC release binaries no longer depend on separately installed VC++ runtime DLLs (#22905);codex doctordetects npm-managed installs correctly on Windows (#22967)Documentation
Impact Assessment
openai-codex/openai_codex); gh-aw does not use the Python SDK directly so impact is limitedPackage Links
Update: GitHub MCP Server
Key Changes
Features
list_repository_collaboratorstool (PR #2477)search_code(PR #2476)rationaleparameter toupdate_issue_typetool (PR #2458)get_reviews(PR #2367)Improvements
list_issues(PR #2453),get_file_contents(PR #2454),search_issues(PR #2456),issue_read(PR #2457),search_repositories(PR #2459)Impact Assessment
search_coderesponse shape narrowed to minimal results with text-match snippets (verify any gh-aw code that consumessearch_coderesults — seepkg/workflow/tools_validation_github_integrity_reactions.go)Package Links
Update: MCP Gateway (gh-aw-mcpg)
Key Changes
v0.3.10 (2026-05-15)
Cow<str>and zero-alloc rank matching (PR #5754) — performance improvementv0.3.11 (2026-05-17)
http.Errorwithhttputil.WriteErrorResponsefor consistent JSON error shape (PR #5819)discussion_comment_write; addlist_repository_collaboratorsDIFC rules (PR #5818) — aligns with GitHub MCP Server v1.0.5 new toolslist_repository_collaboratorsDIFC integrity to reader-level (PR #5843)OTEL_EXPORTER_OTLP_HEADERSenv var as fallback for OTLP export headers (PR #5849) — relevant to GH_AW_OTEL_*_AUTHORIZATION secret consumersv0.3.12 (2026-05-18)
/metaprobe in DIFC proxy (PR #5924) — relevant for sandboxed gh invocations through MCP GatewayImpact Assessment
GH_AW_OTEL_*_AUTHORIZATION)Package Links
ghcr.io/github/gh-aw-mcpg:v0.3.12Constants Diff
Migration Steps Performed
pkg/constants/version_constants.gowith 5 new versionsmake recompiletwice (perDefaultMCPGatewayVersioncomment to refresh container SHA pins on the second pass)*.lock.ymlfiles regenerated + constants fileRecommendations
DefaultCopilotVersioncomment in constants: that MCPs are not blocked from loading and/modelsdoes not silently fail on PATs (run a smoke-copilot workflow)search_coderesponse handling — minimal results with text-match snippets is a slightly narrowed response shapelist_repository_collaborators,discussion_comment_write)Release Timeline
References:
Warning
Firewall blocked 1 domain
The following domain was blocked by the firewall during workflow execution:
docs.claude.comSee Network Configuration for more information.