[ca] CLI Version Updates: Claude Code, Codex, Pi, Copilot SDK, GitHub MCP Server

[github-actions]

Overview

Five agentic CLI/MCP dependencies have newer stable releases. Constants in pkg/constants/version_constants.go were updated and make recompile was run twice (249/249 workflows compiled, 0 errors, 249 lock files regenerated, no stale version references remaining).

Tool	Old	New	Risk
Claude Code	2.1.179	2.1.183	Low
Copilot SDK	1.0.1	1.0.2	Low
Codex	0.140.0	0.141.0	Low
Pi	0.79.6	0.79.8	Low
GitHub MCP Server	v1.3.0	v1.4.0	Low–Medium

No changes needed: Copilot CLI (1.0.63), Gemini (0.39.1), MCP Gateway (v0.3.27), Playwright MCP (0.0.76), Playwright CLI (0.1.14), Playwright Browser (v1.61.0).

---

Update Claude Code

• Previous: 2.1.179 → New: 2.1.183 (intermediate: 2.1.181, 2.1.182; 2.1.180 was never published to npm)
• Timeline: 2.1.179 (2026-06-16) → 2.1.183 (2026-06-19)
• Risk: Low (patch releases)
• CLI Discovery: main --help unchanged from 2.1.179 (per prior runs)

No public repository; relying on npm metadata. Package: https://www.npmjs.com/package/`@anthropic-ai/claude-code`

Update Codex

• Previous: 0.140.0 → New: 0.141.0
• Released: 2026-06-18
• Risk: Low

Key Features

• Remote executors now use authenticated, end-to-end encrypted Noise relay channels (exec-server: add Noise relay transport openai/codex#26242, exec-server: default remote transport to Noise openai/codex#26245)
• Cross-platform remote execution preserves executor-native working directories and shells (path-uri: render native paths across platforms openai/codex#27819, [codex] exec-server honors remote environment cwd and shell openai/codex#28122)
• Executor plugins can activate stdio MCP servers per thread; plugin discovery adds curated catalogs (Discover stdio MCP servers from selected executor plugins openai/codex#27870, Add selected-plugin precedence and attribution to the MCP catalog openai/codex#27884)
• TUI input prompts can auto-resolve after inactivity with a pausing countdown (Add request user input auto-resolution timer openai/codex#28235)

Bug Fixes

• Hook trust bypass persists through codex exec thread start/resume; blocking PostToolUse hooks correctly reject code-mode tool calls (Preserve hook trust bypass in codex exec threads openai/codex#26434, Respect blocking PostToolUse hooks in code mode openai/codex#28365)
• Bundled SQLite pinned to a version with the WAL-reset corruption fix ([codex] Pin bundled SQLite to fixed WAL-reset version openai/codex#27992)
• TLS connections now support P-521 certificate signatures used by enterprise proxies (Use aws-lc-rs for rustls crypto provider openai/codex#27706)

View Full Changelog (Codex 0.141.0)

Chores

• Reduced latency/memory in large tool-heavy sessions via tool-search caching and fewer request/history copies (core: cache the tool search handler per session openai/codex#27258, avoid cloning sampling request input openai/codex#28306)
• Bounded prompt-image caching to 64 MiB and feedback uploads to eight related threads (bound prompt image cache retention openai/codex#28294, [codex] Cap feedback upload subtrees openai/codex#28332)
• Terminal resize reflow is now always enabled (Remove terminal resize reflow flag gates openai/codex#27794)

CLI Discovery: delete subcommand (delete a saved session by id/name) was added in 0.141.0 vs the older cached 0.138.0; main help otherwise unchanged.

Full changelog: openai/codex@rust-v0.140.0...rust-v0.141.0

Release notes: https://github.com/openai/codex/releases/tag/rust-v0.141.0

Update Pi

• Previous: 0.79.6 → New: 0.79.8 (intermediate: 0.79.7)
• Timeline: 0.79.6 (2026-06-16) → 0.79.7 (2026-06-18) → 0.79.8 (2026-06-19)
• Risk: Low
• CLI Discovery: main --help identical to 0.79.7

No public repository; relying on npm metadata. Package: https://www.npmjs.com/package/`@earendil-works/pi-coding-agent`

Update Copilot SDK

• Previous: 1.0.1 → New: 1.0.2
• Released: 2026-06-18
• Risk: Low

Package: https://www.npmjs.com/package/`@github/copilot-sdk`

Update GitHub MCP Server

• Previous: v1.3.0 → New: v1.4.0
• Released: 2026-06-18
• Risk: Low–Medium (new tools + a default-behavior change for repo creation)

Breaking / Behavior Changes

• create_repository now defaults to private when visibility is omitted (fix(repos): default create_repository to private when visibility omitted github-mcp-server#2694)

Key Features

• New tool for retrieving code quality findings (Add tool for getting code quality findings github-mcp-server#2604)
• Explicit show_ui parameter added to UI-enabled write tools (Add explicit show_ui parameter to UI-enabled write tools github-mcp-server#2601)
• MCP Apps with extra functionality (MCP Apps with extra functionality github-mcp-server#1974)
• HTTP server supports a custom listen address (feat(http): support custom listen address github-mcp-server#2655)
• Repo-scoped support added to the list_issue_types tool (Add repo-scoped support to list_issue_types tool github-mcp-server#2692)

View Full Changelog (GitHub MCP Server v1.4.0)

Fixes

• Fix IFC private repository labels (Fix IFC private repository labels github-mcp-server#2695)
• Change confidence enum to uppercase to match GraphQL schema (Change confidence enum to use uppercase values to match GraphQL schema github-mcp-server#2715)
• Dependency bumps: npm group (build(deps): bump the npm_and_yarn group across 1 directory with 2 updates github-mcp-server#2703), golang base image, distroless/base-debian12, node base image

Full changelog: github/github-mcp-server@v1.3.0...v1.4.0

Release notes: https://github.com/github/github-mcp-server/releases/tag/v1.4.0

---

Impact Assessment

• Claude Code / Copilot SDK / Pi: patch updates, no surface changes; Low risk.
• Codex 0.141.0: feature-heavy but mostly remote-executor/plugin internals not used by default gh-aw flows; the WAL-reset SQLite and TLS P-521 fixes are net positives. Low risk.
• GitHub MCP Server v1.4.0: the create_repository default-to-private change is the only behavior change worth noting; safe-by-default and unlikely to affect existing workflows. New code-quality-findings tool is additive. Low–Medium risk.

Recommendations

• Update priority: routine. Merge after CI passes.
• Testing: standard recompile/CI is sufficient; no migration steps required.

Verification

• make recompile ran twice: 249/249 workflows compiled, 0 errors, 249 lock files updated.
• Stale-reference scan for old versions returned empty; 244 lock files now pin GitHub MCP Server v1.4.0.

References: §27863312344

Generated by 🔢 CLI Version Checker · 146.8 AIC · ⌖ 35.9 AIC · ⊞ 11.2K · ◷

• expires on Jun 21, 2026, 10:54 PM UTC-08:00

[github-actions]

Caution

agentic threat detected
Threat detection flagged this output in warn mode. Manual review is REQUIRED before any follow-up automation.

Details

The threat detection results could not be parsed.

Review the workflow run logs for details.

🍪 Issue Monster selected this for Copilot

I've identified this issue as a good candidate for automated resolution and requested assignment to the Copilot coding agent.

If assignment succeeds, the Copilot coding agent will analyze the issue and create a pull request with the fix.

Om nom nom! 🍪

🍪 Om nom nom by Issue Monster · 7.82 AIC · ⌖ 2.28 AIC · ⊞ 7.7K · ◷

[github-actions]

Caution

agentic threat detected
Threat detection flagged this output in warn mode. Manual review is REQUIRED before any follow-up automation.

Details

The threat detection results could not be parsed.

Review the workflow run logs for details.

🍪 Issue Monster selected this for Copilot

I've identified this issue as a good candidate for automated resolution and requested assignment to the Copilot coding agent.

If assignment succeeds, the Copilot coding agent will analyze the issue and create a pull request with the fix.

Om nom nom! 🍪

🍪 Om nom nom by Issue Monster · 6.31 AIC · ⌖ 2.28 AIC · ⊞ 7.7K · ◷

[github-actions]

🍪 Issue Monster selected this for Copilot

I've identified this issue as a good candidate for automated resolution and requested assignment to the Copilot coding agent.

If assignment succeeds, the Copilot coding agent will analyze the issue and create a pull request with the fix.

Om nom nom! 🍪

🍪 Om nom nom by Issue Monster · 7.28 AIC · ⌖ 2.24 AIC · ⊞ 7.5K · ◷

[copilot-swe-agent]

The agent encountered an error and was unable to start working on this issue: Please try again later, or contact support if the problem persists. (Request id: 1840:1A386C:39BC821:D69704B:6A36C8F7)

[github-actions]

This issue is being closed as outdated. A newer issue has been created: #40592

View newer issue

---

This action was performed automatically by the CLI Version Checker workflow.