Uh oh!
There was an error while loading. Please reload this page.
chore: bump default Claude/Copilot/Codex CLI pins - #37097
Conversation
Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
✅ PR Code Quality Reviewer completed the code quality review. |
🚀 Smoke AntigravityMISSION COMPLETE! Antigravity has spoken. ✨ |
🚀 Smoke GeminiMISSION COMPLETE! Gemini has spoken. ✨ |
💫 TO BE CONTINUED...Smoke Claude failed to deliver outputs! Our hero faces unexpected challenges... |
🧠 Matt Pocock Skills Reviewer has completed the skills-based review. ✅ |
✅ All tools validated successfully! Agent Container Smoke Test confirms agent container is ready. |
🧪 Test Quality Sentinel completed test quality analysis. No test files were added or modified in PR #37097 ('chore: bump default Claude/Copilot/Codex CLI pins'). The only change is a 3-line update to pkg/constants/version_constants.go (version pin bumps). Test Quality Sentinel skipped. |
✨ The prophecy is fulfilled... Smoke Codex has completed its mystical journey. The stars align. 🌟 Smoke test: no GitHub writes yet; gathering required checks. |
✅ Design Decision Gate 🏗️ completed the design decision gate check. No ADR enforcement needed: PR #37097 does not have the 'implementation' label and has only 3 new lines in business logic directories (≤100 threshold). No custom design-gate config present. |
🚀 Smoke PiMISSION COMPLETE! Pi delivered. 🥧 |
There was a problem hiding this comment.
Pull request overview
This PR updates the project’s default pinned versions for three agentic CLI tools by changing only the version constants in pkg/constants/version_constants.go, keeping existing upgrade guidance comments intact.
Changes:
- Bump
DefaultClaudeCodeVersionfrom2.1.160to2.1.165. - Bump
DefaultCopilotVersionfrom1.0.57to1.0.59. - Bump
DefaultCodexVersionfrom0.136.0to0.137.0.
Show a summary per file
| File | Description |
|---|---|
pkg/constants/version_constants.go | Updates the default pinned versions for Claude Code, Copilot CLI, and Codex CLI. |
Copilot's findings
Tip
Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
- Files reviewed: 1/1 changed files
- Comments generated: 0
📰 BREAKING: Smoke Copilot is now investigating this pull request. Sources say the story is developing... |
Smoke Test: Gemini - 27026181658
Overall Status: FAIL Warning Firewall blocked 1 domainThe following domain was blocked by the firewall during workflow execution:
network:
allowed:
- defaults
- "localhost"See Network Configuration for more information.
|
Agent Container Tool Check
Result: 12/12 tools available ✅ — PASS
|
There was a problem hiding this comment.
Skills-Based Review 🧠
Applied /zoom-out — clean, minimal version bump. Approving with one non-blocking observation.
📋 Key Themes & Highlights
Key Themes
- Copilot version skip: Bump jumps 1.0.57 → 1.0.59 (skipping 1.0.58); the inline comment flags two known regression vectors (MCP loading, PAT
/models) that ideally surface explicitly in the PR description.
Positive Highlights
- ✅ Single-file, single-concern change — blast radius is minimal
- ✅ Existing upgrade caveats comment preserved faithfully
- ✅ PR description clearly explains scope and policy alignment
🧠 Reviewed using Matt Pocock's skills by Matt Pocock Skills Reviewer · sonnet46 1.1M · 120.3 AIC
| // - MCPs are not blocked from loading (tools.mcp configuration still works end-to-end) | ||
| // - /models does not silently fail on PATs (check that model listing works with PAT auth) | ||
| const DefaultCopilotVersion Version = "1.0.57" | ||
| const DefaultCopilotVersion Version = "1.0.59" |
There was a problem hiding this comment.
[/zoom-out] The Copilot bump skips v1.0.58 and goes straight to v1.0.59. The existing comment above documents two known regression vectors (MCP tool loading and PAT /models silent failure) that should be verified before merging.
💡 Suggested PR description addition
Consider adding a checklist to the PR body explicitly confirming the caveats were checked:
### Copilot upgrade checklist
- [ ] MCP tools still load correctly end-to-end
- [ ] `gh copilot ... /models` returns results with PAT auth
- [ ] v1.0.58 intentionally skipped (or explain why)
This makes reviewer intent clear and provides a lightweight audit trail for future bumps.
This comment has been minimized.
This comment has been minimized.
🧪 Smoke Test: Claude — Run 27026181741Overall: FAIL (Serena MCP unavailable) Core #1–13: 1✅ 2✅ 3❌ 4✅ 5✅ 6✅ 7✅ 8✅ 9✅ 10✅ 11✅ 12✅ 13✅ ❌ #3 Serena MCP server not available on PATH. Warning Firewall blocked 6 domainsThe following domains were blocked by the firewall during workflow execution:
network:
allowed:
- defaults
- "accounts.google.com"
- "android.clients.google.com"
- "clients2.google.com"
- "contentautofill.googleapis.com"
- "safebrowsingohttpgateway.googleapis.com"
- "www.google.com"See Network Configuration for more information.
|
There was a problem hiding this comment.
💥 Automated smoke test review - all systems nominal!
Warning
Firewall blocked 6 domains
The following domains were blocked by the firewall during workflow execution:
accounts.google.comandroid.clients.google.comclients2.google.comcontentautofill.googleapis.comsafebrowsingohttpgateway.googleapis.comwww.google.com
To allow these domains, add them to the
network.allowedlist in your workflow frontmatter:
network:
allowed:
- defaults
- "accounts.google.com"
- "android.clients.google.com"
- "clients2.google.com"
- "contentautofill.googleapis.com"
- "safebrowsingohttpgateway.googleapis.com"
- "www.google.com"See Network Configuration for more information.
💥 [THE END] — Illustrated by Smoke Claude · opus48 3.5M · 74.8 AIC
Smoke test
Warning Firewall blocked 6 domainsThe following domains were blocked by the firewall during workflow execution:
network:
allowed:
- defaults
- "accounts.google.com"
- "android.clients.google.com"
- "clients2.google.com"
- "contentautofill.googleapis.com"
- "safebrowsingohttpgateway.googleapis.com"
- "www.google.com"See Network Configuration for more information.
|
Comment MemoryNote This comment is managed by comment memory.It stores persistent context for this thread in the code block at the top of this comment. Warning Firewall blocked 6 domainsThe following domains were blocked by the firewall during workflow execution:
network:
allowed:
- defaults
- "accounts.google.com"
- "android.clients.google.com"
- "clients2.google.com"
- "contentautofill.googleapis.com"
- "safebrowsingohttpgateway.googleapis.com"
- "www.google.com"See Network Configuration for more information.
|
PRs:
Warning Firewall blocked 6 domainsThe following domains were blocked by the firewall during workflow execution:
network:
allowed:
- defaults
- "accounts.google.com"
- "android.clients.google.com"
- "clients2.google.com"
- "contentautofill.googleapis.com"
- "safebrowsingohttpgateway.googleapis.com"
- "www.google.com"See Network Configuration for more information.
|
|
|
|
…o, wasm goldens) (#37226) * test(ci): fix pre-existing failures on main JS: - send_otlp_span.test.cjs: set INPUT_JOB_NAME=agent in the two tests that exercise GH_AW_EFFECTIVE_TOKENS / GH_AW_AIC. The producer gates both attributes behind jobEmitsOwnTokenUsage = jobName in {agent, detection} so the tests would never see the attribute without that env var. - safe_outputs_mcp_large_content.test.cjs: set GH_AW_TARGET_REPO_SLUG=test-owner/test-repo in beforeEach. The create_issue handler now calls resolveAndValidateRepo and returns an error when no target repo is resolvable, which is the default in a spawned subprocess that does not inherit GITHUB_REPOSITORY. - safe_outputs_mcp_server_defaults.test.cjs: same fix for the 'should return stringified JSON in text content' subtest, applied inline in the spawn env. Go: - Regenerate TestWasmGolden_* fixtures for the CLI version bump (1.0.57 -> 1.0.59, etc.) introduced by #37097 but not propagated to the wasm golden files. * style: prettier-format expanded env object * test(mcp): set GH_AW_TARGET_REPO_SLUG via beforeEach for whole describe Addresses Copilot review comment on PR #37226: the sibling test "should include isError field in tool call responses" also calls create_issue and relied on ambient env. Move the target-repo setup to beforeEach/afterEach so both tests in the describe block are deterministic. * test(workflow): use strings.Builder in fuzz helper to satisfy perfsprint * fix(setup): add safe_outputs_mcp_arguments.cjs to SAFE_OUTPUTS_FILES Required transitively by safe_outputs_mcp_server.cjs and safe_outputs_mcp_server_http.cjs. Fixes setup_sh_file_lists test: 'contains all transitive local dependencies (including entry point safe-outputs-mcp-server.cjs)'. --------- Co-authored-by: dsyme <don.syme@gmail.com>
Three monitored agentic CLI defaults were behind current stable patch releases. This PR updates the pinned defaults for Claude Code, Copilot CLI, and Codex to the latest versions called out in the issue, while keeping non-target tool pins unchanged.
Scope
pkg/constants/version_constants.goonly./modelsand MCP-load caveats).Version pin updates
DefaultClaudeCodeVersion:2.1.160→2.1.165DefaultCopilotVersion:1.0.57→1.0.59DefaultCodexVersion:0.136.0→0.137.0Artifact policy alignment
*.lock.ymlfiles are included in this PR.✨ PR Review Safe Output Test - Run 27026181741
Warning
Firewall blocked 6 domains
The following domains were blocked by the firewall during workflow execution:
accounts.google.comandroid.clients.google.comclients2.google.comcontentautofill.googleapis.comsafebrowsingohttpgateway.googleapis.comwww.google.comSee Network Configuration for more information.
Changeset
pr-sous-chef: updated branch during https://github.com/github/gh-aw/actions/runs/27027532322
pr-sous-chef: refreshed branch for run https://github.com/github/gh-aw/actions/runs/27032039509