chore: bump default Claude/Copilot/Codex and GitHub MCP Server versions by Copilot · Pull Request #35691 · github/gh-aw

Copilot · 2026-05-29T12:13:35Z

This updates the pinned default CLI/MCP versions to current stable releases, including a GitHub MCP Server minor bump (v1.0.4 → v1.1.0) that introduces additive capabilities such as search_commits and response-shape changes for project items. Scope is limited to version constants and regenerated generated artifacts.

Version constants
- Updated /home/runner/work/gh-aw/gh-aw/pkg/constants/version_constants.go:
  - DefaultClaudeCodeVersion: 2.1.150 → 2.1.156
  - DefaultCopilotVersion: 1.0.52 → 1.0.55
  - DefaultCodexVersion: 0.133.0 → 0.135.0
  - DefaultGitHubMCPServerVersion: v1.0.4 → v1.1.0
Compiled workflow artifacts
- Regenerated .github/workflows/*.lock.yml via make recompile so workflow lockfiles reflect the new default pins.
Golden fixtures aligned with new outputs
- Refreshed affected wasm golden files under pkg/workflow/testdata/ where embedded default-version output changed.

constDefaultClaudeCodeVersionVersion="2.1.156"constDefaultCopilotVersionVersion="1.0.55"constDefaultCodexVersionVersion="0.135.0"constDefaultGitHubMCPServerVersionVersion="v1.1.0"

Changeset\n\n- Type: patch\n- Description: Bumped the default Claude, Copilot, Codex, and GitHub MCP Server versions and regenerated the affected workflow artifacts.

Generated by 📋 Changeset Generator for issue #35691 · gpt54 393.7K · ◷

✨ PR Review Safe Output Test - Run 26641731716

Warning

Firewall blocked 6 domains

The following domains were blocked by the firewall during workflow execution:

accounts.google.com
android.clients.google.com
clients2.google.com
contentautofill.googleapis.com
safebrowsingohttpgateway.googleapis.com
www.google.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
allowed:
- defaults
- "accounts.google.com"
- "android.clients.google.com"
- "clients2.google.com"
- "contentautofill.googleapis.com"
- "safebrowsingohttpgateway.googleapis.com"
- "www.google.com"

See Network Configuration for more information.

💥 [THE END] — Illustrated by Smoke Claude · opus48 1.1M · ◷

Co-authored-by: gh-aw-bot <259018956+gh-aw-bot@users.noreply.github.com>

github-actions · 2026-05-29T14:02:47Z

💫 TO BE CONTINUED...Smoke Claude failed! Our hero faces unexpected challenges...

github-actions · 2026-05-29T14:02:49Z

🚀 Smoke PiMISSION COMPLETE! Pi delivered. 🥧

github-actions · 2026-05-29T14:02:56Z

✨ The prophecy is fulfilled... Smoke Codex has completed its mystical journey. The stars align. 🌟

github-actions · 2026-05-29T14:02:58Z

📰 BREAKING: Smoke Copilot is now investigating this pull request. Sources say the story is developing...

github-actions · 2026-05-29T14:02:59Z

🚀 Smoke GeminiMISSION COMPLETE! Gemini has spoken. ✨

github-actions · 2026-05-29T14:02:59Z

⚠️Smoke Antigravity failed. Antigravity encountered unexpected challenges...

github-actions · 2026-05-29T14:06:01Z

Commit pushed: 526176a

Generated by Changeset Generator · gpt54 393.7K

github-actions · 2026-05-29T14:06:13Z

Agent Container Tool Check

Tool	Status	Version
bash	✅	5.2.21
sh	✅	available
git	✅	2.54.0
jq	✅	1.7
yq	✅	4.53.2
curl	✅	8.5.0
gh	✅	2.92.0
node	✅	24.16.0
python3	✅	3.13.13
go	✅	1.24.13
java	✅	10.0.300
dotnet	❌	NOT FOUND

Result: 11/12 tools available ⚠️

Status: FAIL — dotnet (.NET runtime) is not installed in the agent container.

🔧 Tool validation by Agent Container Smoke Test · sonnet46 514.3K · ◷

github-actions · 2026-05-29T14:07:02Z

Smoke Test Results

GitHub MCP: ✅
Web Fetch: ✅
File Writing: ✅
Bash Tool: ✅
Build gh-aw: ❌

Status: FAIL

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

localhost

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
allowed:
- defaults
- "localhost"

See Network Configuration for more information.

✨ Smoke Gemini — Powered by Gemini · ◷

github-actions · 2026-05-29T14:10:51Z

Comment Memory

Swift debug dawn
GitHub paths hum in quiet loops
Tests trace steady light

Note

This comment is managed by comment memory.

It stores persistent context for this thread in the code block at the top of this comment.
Edit only the text inside the backtick fences; workflow metadata and the footer are regenerated automatically.

Learn more about comment memory

Warning

Firewall blocked 6 domains

The following domains were blocked by the firewall during workflow execution:

accounts.google.com
android.clients.google.com
clients2.google.com
contentautofill.googleapis.com
safebrowsingohttpgateway.googleapis.com
www.google.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
allowed:
- defaults
- "accounts.google.com"
- "android.clients.google.com"
- "clients2.google.com"
- "contentautofill.googleapis.com"
- "safebrowsingohttpgateway.googleapis.com"
- "www.google.com"

See Network Configuration for more information.

🔮 The oracle has spoken through Smoke Codex · gpt54 11.9M · ◷

github-actions · 2026-05-29T14:18:29Z

🤖 Smoke Test: Claude — Run 26641731716

Core (#1–13): 1✅ 2⚠️(mcpscripts-gh n/a) 3✅ 4✅ 5✅ 6✅ 7✅ 8✅ 9✅ 10✅ 11✅ 12✅ 13✅
PR Review (#14–20): 14✅ 15✅ 16✅ 17⚠️(no unresolved threads) 18✅ 19✅ 20⚠️(no safe PR)

Overall: PARTIAL — all functional tests passed; #17/#20 skipped by design.

Warning

Firewall blocked 6 domains

The following domains were blocked by the firewall during workflow execution:

accounts.google.com
android.clients.google.com
clients2.google.com
contentautofill.googleapis.com
safebrowsingohttpgateway.googleapis.com
www.google.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
allowed:
- defaults
- "accounts.google.com"
- "android.clients.google.com"
- "clients2.google.com"
- "contentautofill.googleapis.com"
- "safebrowsingohttpgateway.googleapis.com"
- "www.google.com"

See Network Configuration for more information.

💥 [THE END] — Illustrated by Smoke Claude · opus48 1.1M · ◷

github-actions

💥 Automated smoke test review - all systems nominal!

Warning

Firewall blocked 6 domains

The following domains were blocked by the firewall during workflow execution:

accounts.google.com
android.clients.google.com
clients2.google.com
contentautofill.googleapis.com
safebrowsingohttpgateway.googleapis.com
www.google.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
allowed:
- defaults
- "accounts.google.com"
- "android.clients.google.com"
- "clients2.google.com"
- "contentautofill.googleapis.com"
- "safebrowsingohttpgateway.googleapis.com"
- "www.google.com"

See Network Configuration for more information.

💥 [THE END] — Illustrated by Smoke Claude · opus48 1.1M

github-actions · 2026-05-29T14:18:40Z

@@ -32,17 +32,17 @@ func (v Version) IsValid() bool {
 type ModelName string

 // DefaultClaudeCodeVersion is the default version of the Claude Code CLI.
-const DefaultClaudeCodeVersion Version = "2.1.150"
+const DefaultClaudeCodeVersion Version = "2.1.156"


Smoke test review: Claude Code default version bump looks consistent with the PR description. ✅

github-actions · 2026-05-29T14:18:40Z


 // DefaultCodexVersion is the default version of the OpenAI Codex CLI
-const DefaultCodexVersion Version = "0.133.0"
+const DefaultCodexVersion Version = "0.135.0"


Smoke test review: Codex default version constant updated as expected. ✅

github-actions · 2026-05-29T14:18:52Z

Smoke Copilot 26641731802: FAIL
PRs: chore: bump default Claude/Copilot/Codex and GitHub MCP Server versions; feat: expose authHeader in awf.apiProxy.targets frontmatter
✅ GitHub/PR, MCP scripts, Serena, Playwright, file/bash, discussion, build/artifact, review, memory, sub-agent, check run
❌ Direct web-fetch tool
Author: app/copilot-swe-agent; Assignees: Copilot, gh-aw-bot

Warning

Firewall blocked 6 domains

The following domains were blocked by the firewall during workflow execution:

accounts.google.com
android.clients.google.com
clients2.google.com
contentautofill.googleapis.com
safebrowsingohttpgateway.googleapis.com
www.google.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
allowed:
- defaults
- "accounts.google.com"
- "android.clients.google.com"
- "clients2.google.com"
- "contentautofill.googleapis.com"
- "safebrowsingohttpgateway.googleapis.com"
- "www.google.com"

See Network Configuration for more information.

📰 BREAKING: Report filed by Smoke Copilot · gpt55 12.9M · ◷

github-actions · 2026-05-29T14:18:53Z

Comment Memory

Soft tests bloom at dawn
Bots trace green paths through branches
Ship lights wake gently

Note

This comment is managed by comment memory.

It stores persistent context for this thread in the code block at the top of this comment.
Edit only the text inside the backtick fences; workflow metadata and the footer are regenerated automatically.

Learn more about comment memory

Warning

Firewall blocked 6 domains

The following domains were blocked by the firewall during workflow execution:

accounts.google.com
android.clients.google.com
clients2.google.com
contentautofill.googleapis.com
safebrowsingohttpgateway.googleapis.com
www.google.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
allowed:
- defaults
- "accounts.google.com"
- "android.clients.google.com"
- "clients2.google.com"
- "contentautofill.googleapis.com"
- "safebrowsingohttpgateway.googleapis.com"
- "www.google.com"

See Network Configuration for more information.

📰 BREAKING: Report filed by Smoke Copilot · gpt55 12.9M · ◷

github-actions

Smoke review completed: version pin changes reviewed with inline notes. No existing review comments were available to reply to.

Warning

Firewall blocked 6 domains

The following domains were blocked by the firewall during workflow execution:

accounts.google.com
android.clients.google.com
clients2.google.com
contentautofill.googleapis.com
safebrowsingohttpgateway.googleapis.com
www.google.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
allowed:
- defaults
- "accounts.google.com"
- "android.clients.google.com"
- "clients2.google.com"
- "contentautofill.googleapis.com"
- "safebrowsingohttpgateway.googleapis.com"
- "www.google.com"

See Network Configuration for more information.

📰 BREAKING: Report filed by Smoke Copilot · gpt55 12.9M

github-actions · 2026-05-29T14:19:01Z


 // DefaultCopilotVersion is the default version of the GitHub Copilot CLI.
 //
 // When unpinning or upgrading this version, verify:
 // - MCPs are not blocked from loading (tools.mcp configuration still works end-to-end)
 // - /models does not silently fail on PATs (check that model listing works with PAT auth)
-const DefaultCopilotVersion Version = "1.0.52"
+const DefaultCopilotVersion Version = "1.0.55"


Smoke review note: the Copilot default pin is updated here as part of the version bump.

github-actions · 2026-05-29T14:19:01Z

@@ -60,7 +60,7 @@ const DefaultPiVersion Version = "0.75.4"
 const DefaultOpenCodeVersion Version = "1.2.14"

 // DefaultGitHubMCPServerVersion is the default version of the GitHub MCP server Docker image
-const DefaultGitHubMCPServerVersion Version = "v1.0.4"
+const DefaultGitHubMCPServerVersion Version = "v1.1.0"


Smoke review note: the GitHub MCP server default pin is updated here as expected.

github-actions · 2026-05-29T14:19:41Z

📰 VERDICT: Smoke Copilot has concluded. All systems operational. This is a developing story. 🎤

Copilot

Pull request overview

This PR bumps the default pinned versions for Claude Code, GitHub Copilot CLI, Codex CLI, and GitHub MCP Server, then refreshes generated workflow lockfiles and golden fixtures that embed those defaults.

Changes:

Updated default CLI/MCP version constants in pkg/constants/version_constants.go.
Regenerated affected .lock.yml workflows and wasm golden fixtures.
Added a patch changeset documenting the default-version bump.

Show a summary per file

File	Description
`pkg/constants/version_constants.go`	Updates default Claude, Copilot, Codex, and GitHub MCP Server versions.
`.changeset/patch-bump-cli-default-versions-2026-05-29.md`	Adds patch release note for the version bump.
`.github/workflows/ace-editor.lock.yml`	Refreshes generated workflow pins/version metadata.
`.github/workflows/agentic-token-optimizer.lock.yml`	Refreshes generated workflow pins/version metadata.
`.github/workflows/artifacts-summary.lock.yml`	Refreshes generated workflow pins/version metadata.
`.github/workflows/avenger.lock.yml`	Refreshes generated workflow pins/version metadata.
`.github/workflows/bot-detection.lock.yml`	Refreshes generated workflow pins/version metadata.
`.github/workflows/changeset.lock.yml`	Refreshes generated workflow pins/version metadata.
`.github/workflows/codex-github-remote-mcp-test.lock.yml`	Refreshes generated Codex version metadata.
`.github/workflows/commit-changes-analyzer.lock.yml`	Refreshes generated workflow pins/version metadata.
`.github/workflows/contribution-check.lock.yml`	Refreshes generated workflow pins/version metadata.
`.github/workflows/copilot-pr-merged-report.lock.yml`	Refreshes generated Copilot version metadata.
`.github/workflows/daily-choice-test.lock.yml`	Refreshes generated workflow pins/version metadata.
`.github/workflows/daily-malicious-code-scan.lock.yml`	Refreshes generated workflow pins/version metadata.
`.github/workflows/daily-reliability-review.lock.yml`	Refreshes generated workflow pins/version metadata.
`.github/workflows/daily-safe-outputs-conformance.lock.yml`	Refreshes generated workflow pins/version metadata.
`.github/workflows/daily-team-evolution-insights.lock.yml`	Refreshes generated workflow pins/version metadata.
`.github/workflows/example-permissions-warning.lock.yml`	Refreshes generated workflow pins/version metadata.
`.github/workflows/firewall.lock.yml`	Refreshes generated workflow pins/version metadata.
`.github/workflows/github-mcp-tools-report.lock.yml`	Refreshes generated Claude version metadata.
`.github/workflows/github-remote-mcp-auth-test.lock.yml`	Refreshes generated Copilot version metadata.
`.github/workflows/hippo-embed.lock.yml`	Refreshes generated workflow pins/version metadata.
`.github/workflows/lint-monster.lock.yml`	Refreshes generated workflow pins/version metadata.
`.github/workflows/schema-feature-coverage.lock.yml`	Refreshes generated Codex version metadata.
`.github/workflows/smoke-antigravity.lock.yml`	Refreshes generated GitHub MCP Server image reference.
`.github/workflows/smoke-ci.lock.yml`	Refreshes generated workflow pins/version metadata.
`.github/workflows/smoke-crush.lock.yml`	Refreshes generated GitHub MCP Server image reference.
`.github/workflows/smoke-gemini.lock.yml`	Refreshes generated GitHub MCP Server image reference.
`.github/workflows/smoke-opencode.lock.yml`	Refreshes generated GitHub MCP Server image reference.
`.github/workflows/smoke-pi.lock.yml`	Refreshes generated GitHub MCP Server image reference.
`.github/workflows/test-workflow.lock.yml`	Refreshes generated workflow pins/version metadata.
`pkg/workflow/testdata/TestWasmGolden_AllEngines/claude.golden`	Updates expected Claude and GitHub MCP Server output.
`pkg/workflow/testdata/TestWasmGolden_AllEngines/codex.golden`	Updates expected Codex and GitHub MCP Server output.
`pkg/workflow/testdata/TestWasmGolden_AllEngines/copilot.golden`	Updates expected Copilot and GitHub MCP Server output.
`pkg/workflow/testdata/TestWasmGolden_AllEngines/gemini.golden`	Updates expected GitHub MCP Server output.
`pkg/workflow/testdata/TestWasmGolden_AllEngines/pi.golden`	Updates expected GitHub MCP Server output.
`pkg/workflow/testdata/TestWasmGolden_CompileFixtures/basic-copilot.golden`	Updates expected Copilot and GitHub MCP Server output.
`pkg/workflow/testdata/TestWasmGolden_CompileFixtures/playwright-cli-mode.golden`	Updates expected Copilot and GitHub MCP Server output.
`pkg/workflow/testdata/TestWasmGolden_CompileFixtures/smoke-copilot.golden`	Updates expected Copilot and GitHub MCP Server output.
`pkg/workflow/testdata/TestWasmGolden_CompileFixtures/with-imports.golden`	Updates expected Copilot and GitHub MCP Server output.

Copilot's findings

Tip

Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Files reviewed: 106/247 changed files
Comments generated: 1

@@ -60,7 +60,7 @@ const DefaultPiVersion Version = "0.75.4"
 const DefaultOpenCodeVersion Version = "1.2.14"

 // DefaultGitHubMCPServerVersion is the default version of the GitHub MCP server Docker image
-const DefaultGitHubMCPServerVersion Version = "v1.0.4"
+const DefaultGitHubMCPServerVersion Version = "v1.1.0"


…ns (#35691)

Initial plan
1bcc68f

CopilotAI assigned Copilot and gh-aw-bot May 29, 2026

Copilotstarted work on behalf of gh-aw-bot May 29, 2026 12:13 View session

CopilotAI linked an issue May 29, 2026 that may be closed by this pull request
[ca] chore: update CLI versions (Claude Code, Copilot CLI, Codex, GitHub MCP Server) #35657
Closed

chore: bump default CLI and GitHub MCP versions
dd4de9b
Co-authored-by: gh-aw-bot <259018956+gh-aw-bot@users.noreply.github.com>

CopilotAI changed the title ~~[WIP] Chore update CLI versions for dependencies~~chore: bump default Claude/Copilot/Codex and GitHub MCP Server versionsMay 29, 2026

Copilotfinished work on behalf of gh-aw-bot May 29, 2026 12:30

CopilotAI requested a review from gh-aw-bot May 29, 2026 12:30

github-actionsBot mentioned this pull request May 29, 2026
[PR Triage Report] PR Triage Report — 2026-05-29 (Run §26639937889) #35708
Closed

pelikhan added the smoke label May 29, 2026

github-actionsBot removed the smoke label May 29, 2026

Add changeset for default version bump
526176a

github-actionsBot mentioned this pull request May 29, 2026
Smoke Test: Claude - 26641731716 #35723
Closed

github-actionsBot added the smoke-claude label May 29, 2026

github-actionsBot reviewed May 29, 2026
View reviewed changes

pelikhan marked this pull request as ready for review May 29, 2026 14:22

CopilotAI review requested due to automatic review settings May 29, 2026 14:22

pelikhan merged commit e1a0bc8 into mainMay 29, 2026
1 check passed

pelikhan deleted the copilot/update-cli-versions-one-more-time branch May 29, 2026 14:22

CopilotAI reviewed May 29, 2026
View reviewed changes

github-actionsBot added a commit that referenced this pull request May 29, 2026
chore: bump default Claude/Copilot/Codex and GitHub MCP Server versio…
be6be60
…ns (#35691)

Uh oh!

Conversation

CopilotAI commented May 29, 2026• edited by github-actions BotLoading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Changeset\n\n- Type: patch\n- Description: Bumped the default Claude, Copilot, Codex, and GitHub MCP Server versions and regenerated the affected workflow artifacts.

Uh oh!

github-actionsBot commented May 29, 2026• edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actionsBot commented May 29, 2026• edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actionsBot commented May 29, 2026• edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actionsBot commented May 29, 2026

Uh oh!

github-actionsBot commented May 29, 2026• edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actionsBot commented May 29, 2026• edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actionsBot commented May 29, 2026

Uh oh!

github-actionsBot commented May 29, 2026

Agent Container Tool Check

Uh oh!

github-actionsBot commented May 29, 2026

Smoke Test Results

Uh oh!

github-actionsBot commented May 29, 2026

Comment Memory

Uh oh!

github-actionsBot commented May 29, 2026

🤖 Smoke Test: Claude — Run 26641731716

Uh oh!

github-actionsBot left a comment

Choose a reason for hiding this comment

Uh oh!

github-actionsBotMay 29, 2026

Choose a reason for hiding this comment

Uh oh!

github-actionsBotMay 29, 2026

Choose a reason for hiding this comment

Uh oh!

github-actionsBot commented May 29, 2026

Uh oh!

github-actionsBot commented May 29, 2026

Comment Memory

Uh oh!

github-actionsBot left a comment

Choose a reason for hiding this comment

Uh oh!

github-actionsBotMay 29, 2026

Choose a reason for hiding this comment

Uh oh!

github-actionsBotMay 29, 2026

Choose a reason for hiding this comment

Uh oh!

github-actionsBot commented May 29, 2026

Uh oh!

Uh oh!

CopilotAI left a comment

Choose a reason for hiding this comment

Pull request overview

Copilot's findings

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

CopilotAI commented May 29, 2026•
edited by github-actions Bot
Loading

github-actionsBot commented May 29, 2026•
edited
Loading

github-actionsBot commented May 29, 2026•
edited
Loading

github-actionsBot commented May 29, 2026•
edited
Loading

github-actionsBot commented May 29, 2026•
edited
Loading

github-actionsBot commented May 29, 2026•
edited
Loading