Skip to content

chore: CLI version updates — Copilot 1.0.77, Pi 0.83.0, Playwright Browser v1.62.1, Syft v1.50.0, Grype v0.116.1 - #49521

Merged
pelikhan merged 4 commits into
mainfrom
copilot/ca-cli-version-updates
Aug 1, 2026
Merged

chore: CLI version updates — Copilot 1.0.77, Pi 0.83.0, Playwright Browser v1.62.1, Syft v1.50.0, Grype v0.116.1#49521
pelikhan merged 4 commits into
mainfrom
copilot/ca-cli-version-updates

Conversation

CopilotAI commented Aug 1, 2026

Copy link
Copy Markdown
Contributor

Bumps 3 CLI versions and 2 Docker image pins per the 2026-08-01 version check.

Version changes

ToolOldNewFile
Copilot CLI1.0.751.0.77pkg/constants/version_constants.go
Pi0.82.10.83.0pkg/constants/version_constants.go
Playwright Browser (Docker)v1.62.0v1.62.1pkg/constants/version_constants.go
Syft (Docker)v1.48.0v1.50.0pkg/cli/docker_images.go
Grype (Docker)v0.116.0v0.116.1pkg/cli/docker_images.go

Notable: Syft v1.50.0 and Grype v0.116.1 both include a remediation for gRPC vulnerability GHSA-hrxh-6v49-42gf. Playwright v1.62.1 is a pure regression-fix release for v1.62.0. All changes are additive or bug-fix only with no breaking changes impacting gh-aw.

266/266 workflows recompile cleanly.



✨ PR Review Safe Output Test - Run 30689578644

Warning

Firewall blocked 6 domains

The following domains were blocked by the firewall during workflow execution:

  • accounts.google.com
  • android.clients.google.com
  • clients2.google.com
  • contentautofill.googleapis.com
  • safebrowsingohttpgateway.googleapis.com
  • www.google.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
allowed:
- defaults
- "accounts.google.com"
- "android.clients.google.com"
- "clients2.google.com"
- "contentautofill.googleapis.com"
- "safebrowsingohttpgateway.googleapis.com"
- "www.google.com"

See Network Configuration for more information.

💥 [THE END] — Illustrated by Smoke Claude · sonnet46 · 59.9 AIC · ⌖ 10.7 AIC · ⊞ 6.3K ·
Comment /smoke-claude to run again

CopilotAIand others added 2 commits August 1, 2026 07:03
Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
…62.1, Syft v1.50.0, Grype v0.116.1)
Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
CopilotAI changed the title [WIP] Update CLI versions for Copilot, Pi, Playwright, Syft, and Grypechore: CLI version updates — Copilot 1.0.77, Pi 0.83.0, Playwright Browser v1.62.1, Syft v1.50.0, Grype v0.116.1Aug 1, 2026
CopilotAI requested a review from pelikhanAugust 1, 2026 07:10
@github-actions

Copy link
Copy Markdown
Contributor

PR Triage

  • Category:chore | Risk:low | Priority:low
  • Score: 16/100 (impact 8 + urgency 5 + quality 3)
  • Recommended action:defer
  • Batch:wip-drafts

Note: Draft, only lock.yml regenerated so far

Generated by 🔧 PR Triage Agent · auto · 48.9 AIC · ⌖ 6.24 AIC · ⊞ 7.9K ·

@github-actions

github-actionsBot commented Aug 1, 2026

Copy link
Copy Markdown
Contributor

Smoke Copilot Auto completed successfully!

@github-actions

github-actionsBot commented Aug 1, 2026

Copy link
Copy Markdown
Contributor

✨ The prophecy is fulfilled... Smoke Codex has completed its mystical journey. The stars align. 🌟

@github-actions

github-actionsBot commented Aug 1, 2026

Copy link
Copy Markdown
Contributor

✅ All tools validated successfully! Agent Container Smoke Test confirms agent container is ready.

@github-actions

github-actionsBot commented Aug 1, 2026

Copy link
Copy Markdown
Contributor

🚀 Smoke GeminiMISSION COMPLETE! Gemini has spoken. ✨

@github-actions

github-actionsBot commented Aug 1, 2026

Copy link
Copy Markdown
Contributor

🚀 Smoke PiMISSION COMPLETE! Pi delivered. 🥧

@github-actions

github-actionsBot commented Aug 1, 2026

Copy link
Copy Markdown
Contributor

🎬 THE ENDSmoke ClaudeMISSION: ACCOMPLISHED! The hero saves the day! ✨

@github-actions

github-actionsBot commented Aug 1, 2026

Copy link
Copy Markdown
Contributor

🚀 Smoke AntigravityMISSION COMPLETE! Antigravity has spoken. ✨

@github-actions

github-actionsBot commented Aug 1, 2026

Copy link
Copy Markdown
Contributor

Smoke OTEL completed successfully!

@github-actions

github-actionsBot commented Aug 1, 2026

Copy link
Copy Markdown
Contributor

Smoke Copilot MAI completed successfully!

@github-actions

Copy link
Copy Markdown
Contributor

📰 BREAKING: Smoke Copilot is now investigating this pull request. Sources say the story is developing...

@github-actions

github-actionsBot commented Aug 1, 2026

Copy link
Copy Markdown
Contributor

Smoke Copilot Small completed successfully!

@github-actions

Copy link
Copy Markdown
Contributor

📰 BREAKING: Smoke Copilot - AOAI (apikey) is now investigating this pull request. Sources say the story is developing...

@github-actions

Copy link
Copy Markdown
Contributor

Old tools shed their skins,
versions climb toward safer code—
gRPC patched clean.

Inspired by this PR's bump of five CLI/Docker tool versions, including a fix for a gRPC vulnerability.

Generated by 🌸 Smoke Copilot Auto for #49521 · auto · 10.2 AIC · ⌖ 8.01 AIC · ⊞ 5.9K ·
Add label smoke to run again

@github-actions

Copy link
Copy Markdown
Contributor

Agent Container Tool Check

ToolStatusVersion
bash5.2.21
shavailable
git2.54.0
jq1.7
yqv4.53.3
curl8.5.0
gh2.96.0
nodev24.18.0
python33.11.15 (PyPy)
go1.24.13
java21.0.11
dotnet10.0.302

Result: 12/12 tools available ✅

Overall status: PASS

🔧 Tool validation by Agent Container Smoke Test · auto · 15.5 AIC · ⌖ 4.66 AIC · ⊞ 8.2K ·
Comment /smoke-test-tools to run again

@github-actions

Copy link
Copy Markdown
Contributor

Smoke test summary: recent commits are focused on workflow/safe-output reliability, model/config fixes, and docs/community updates. Overall status: PASS

Generated by ⚡ Smoke Copilot MAI · mai10 · 3.1 AIC · ⌖ 1.51 AIC · ⊞ 19.7K ·
Comment /smoke-copilot-mai to run again
Add label smoke to run again

@github-actions

Copy link
Copy Markdown
Contributor

Smoke Test: Gemini

  • GitHub MCP Testing: ✅
  • Web Fetch Testing: ✅
  • File Writing Testing: ✅
  • Bash Tool Testing: ✅
  • Build gh-aw: ❌

Overall status: FAIL

Smoke Gemini — Powered by Gemini · agent · 17 AIC · ⌖ 1.61 AIC · ⊞ 9.4K ·
Comment /smoke-gemini to run again

@github-actions

Copy link
Copy Markdown
Contributor

Commit pushed: 89829bf

Generated by Changeset Generator · gpt54 · 5.74 AIC · ⌖ 3.58 AIC · ⊞ 12.2K

@github-actions

Copy link
Copy Markdown
Contributor

Comment Memory

Dawn over the build
Silent caches keep the record
Smoke test hums in green

Note

This comment is managed by comment memory.

It stores persistent context for this thread in the code block at the top of this comment.
Edit only the text inside the backtick fences; workflow metadata and the footer are regenerated automatically.

Learn more about comment memory

Warning

Firewall blocked 6 domains

The following domains were blocked by the firewall during workflow execution:

  • accounts.google.com
  • android.clients.google.com
  • clients2.google.com
  • contentautofill.googleapis.com
  • safebrowsingohttpgateway.googleapis.com
  • www.google.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
allowed:
- defaults
- "accounts.google.com"
- "android.clients.google.com"
- "clients2.google.com"
- "contentautofill.googleapis.com"
- "safebrowsingohttpgateway.googleapis.com"
- "www.google.com"

See Network Configuration for more information.

🔮 The oracle has spoken through Smoke Codex · gpt54 · 13.7 AIC · ⌖ 1.29 AIC · ⊞ 11.8K ·
Comment /smoke-codex to run again

@pelikhan
pelikhan marked this pull request as ready for review August 1, 2026 07:43
CopilotAI review requested due to automatic review settings August 1, 2026 07:43
@pelikhan
pelikhan merged commit ca5620d into mainAug 1, 2026
@pelikhan
pelikhan deleted the copilot/ca-cli-version-updates branch August 1, 2026 07:44
Copilot stopped reviewing on behalf of pelikhan due to an error August 1, 2026 07:44

CopilotAI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Note

Copilot could not run the full agentic suite for this review because it was automatically requested on a bot-authored pull request. Request a review from Copilot under Reviewers to retry with the full agentic suite. Improved support for bot-authored pull requests is coming soon.

Updates pinned tool/engine versions across the repo to keep CI agents and security tooling current (notably GitHub Copilot CLI, Pi, Playwright browser image, Syft, and Grype), and records the bump via a patch changeset.

Changes:

  • Bump default GitHub Copilot CLI version (and workflow-embedded engine versions) from 1.0.75 to 1.0.77.
  • Bump Pi (0.82.10.83.0) and Playwright browser image (v1.62.0v1.62.1), plus Syft/Grype container pins.
  • Update gh-aw compat + add a changeset documenting the version refresh.
Show a summary per file
FileDescription
pkg/constants/version_constants.goUpdates default pinned versions for Copilot CLI, Pi CLI, and Playwright browser image.
pkg/cli/docker_images.goUpdates pinned Syft and Grype container image versions/digests.
actions/setup/sh/install_copilot_cli.shAligns setup script fallback Copilot CLI version with new default.
.github/workflows/workflow-skill-extractor.lock.ymlBumps embedded Copilot engine/version metadata in generated workflow lock.
.github/workflows/workflow-normalizer.lock.ymlBumps embedded Copilot engine/version metadata in generated workflow lock.
.github/workflows/weekly-safe-outputs-spec-review.lock.ymlBumps embedded Copilot engine/version metadata in generated workflow lock.
.github/workflows/weekly-editors-health-check.lock.ymlBumps embedded Copilot engine/version metadata in generated workflow lock.
.github/workflows/visual-regression-checker.lock.ymlBumps embedded Copilot engine/version metadata in generated workflow lock.
.github/workflows/video-analyzer.lock.ymlBumps embedded Copilot engine/version metadata in generated workflow lock.
.github/workflows/update-astro.lock.ymlBumps embedded Copilot engine/version metadata in generated workflow lock.
.github/workflows/uk-ai-operational-resilience.lock.ymlBumps embedded Copilot engine/version metadata in generated workflow lock.
.github/workflows/terminal-stylist.lock.ymlBumps embedded Copilot engine/version metadata in generated workflow lock.
.github/workflows/super-linter.lock.ymlBumps embedded Copilot engine/version metadata in generated workflow lock.
.github/workflows/smoke-workflow-call.lock.ymlBumps embedded Copilot engine/version metadata in generated workflow lock.
.github/workflows/smoke-workflow-call-with-inputs.lock.ymlBumps embedded Copilot engine/version metadata in generated workflow lock.
.github/workflows/smoke-service-ports.lock.ymlBumps embedded Copilot engine/version metadata in generated workflow lock.
.github/workflows/smoke-multi-pr.lock.ymlBumps embedded Copilot engine/version metadata in generated workflow lock.
.github/workflows/smoke-create-cross-repo-pr.lock.ymlBumps embedded Copilot engine/version metadata in generated workflow lock.
.github/workflows/smoke-copilot-small.lock.ymlBumps embedded Copilot engine/version metadata in generated workflow lock.
.github/workflows/smoke-copilot-sdk.lock.ymlBumps embedded Copilot engine/version metadata in generated workflow lock.
.github/workflows/smoke-copilot-auto.lock.ymlBumps embedded Copilot engine/version metadata in generated workflow lock.
.github/workflows/smoke-ci.lock.ymlBumps embedded Copilot engine/version metadata in generated workflow lock.
.github/workflows/sighthound-security-scan.lock.ymlBumps embedded Copilot engine/version metadata in generated workflow lock.
.github/workflows/security-compliance.lock.ymlBumps embedded Copilot engine/version metadata in generated workflow lock.
.github/workflows/repo-tree-map.lock.ymlBumps embedded Copilot engine/version metadata in generated workflow lock.
.github/workflows/pr-nitpick-reviewer.lock.ymlBumps embedded Copilot engine/version metadata in generated workflow lock.
.github/workflows/pr-description-caveman.lock.ymlBumps embedded Copilot engine/version metadata in generated workflow lock.
.github/workflows/objective-impact-report.lock.ymlBumps embedded Copilot engine/version metadata in generated workflow lock.
.github/workflows/notion-issue-summary.lock.ymlBumps embedded Copilot engine/version metadata in generated workflow lock.
.github/workflows/layout-spec-maintainer.lock.ymlBumps embedded Copilot engine/version metadata in generated workflow lock.
.github/workflows/hippo-embed.lock.ymlBumps embedded Pi engine/version metadata and the installed Pi package version.
.github/workflows/github-remote-mcp-auth-test.lock.ymlBumps embedded Copilot engine/version metadata in generated workflow lock.
.github/workflows/firewall.lock.ymlBumps embedded Copilot engine/version metadata in generated workflow lock.
.github/workflows/example-permissions-warning.lock.ymlBumps embedded Copilot engine/version metadata in generated workflow lock.
.github/workflows/example-failure-category-filter.lock.ymlBumps embedded Copilot engine/version metadata in generated workflow lock.
.github/workflows/designer-drift-audit.lock.ymlBumps embedded Copilot engine/version metadata in generated workflow lock.
.github/workflows/daily-team-status.lock.ymlBumps embedded Copilot engine/version metadata in generated workflow lock.
.github/workflows/daily-model-resolution.lock.ymlBumps embedded Copilot engine/version metadata in generated workflow lock.
.github/workflows/daily-max-ai-credits-test.lock.ymlBumps embedded Copilot engine/version metadata in generated workflow lock.
.github/workflows/daily-malicious-code-scan.lock.ymlBumps embedded Copilot engine/version metadata in generated workflow lock.
.github/workflows/daily-credit-limit-test.lock.ymlBumps embedded Copilot engine/version metadata in generated workflow lock.
.github/workflows/bot-detection.lock.ymlBumps embedded Copilot engine/version metadata in generated workflow lock.
.github/aw/compat.jsonUpdates compat max-agent to allow Copilot CLI 1.0.77.
.changeset/patch-cli-version-updates-2026-08-01.mdAdds a patch changeset documenting the version bumps.

Review details

Tip

Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

  • Files reviewed: 139/190 changed files
  • Comments generated: 0
  • Review effort level: Lite

@github-actions

Copy link
Copy Markdown
Contributor

Smoke Test Results — Run 30689578644

Core Tests #1-12:
✅ GitHub MCP | ✅ GH CLI | ✅ Make Build | ✅ Playwright | ✅ Tavily | ✅ File Write | ✅ Bash Tool | ✅ Discussion | ✅ Agentic WF | ✅ Slack | ✅ Code Scan | ✅ Check Run

PR Review Tests #13-19:
✅ Update PR | ✅ Review Comments | ✅ Submit Review | ⚠️ Resolve Thread (skipped) | ✅ Add Reviewer | ❌ Push Branch (allowed-files) | ⚠️ Close PR (skipped)

Overall: PARTIAL

Warning

Firewall blocked 6 domains

The following domains were blocked by the firewall during workflow execution:

  • accounts.google.com
  • android.clients.google.com
  • clients2.google.com
  • contentautofill.googleapis.com
  • safebrowsingohttpgateway.googleapis.com
  • www.google.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
allowed:
- defaults
- "accounts.google.com"
- "android.clients.google.com"
- "clients2.google.com"
- "contentautofill.googleapis.com"
- "safebrowsingohttpgateway.googleapis.com"
- "www.google.com"

See Network Configuration for more information.

💥 [THE END] — Illustrated by Smoke Claude · sonnet46 · 59.9 AIC · ⌖ 10.7 AIC · ⊞ 6.3K ·
Comment /smoke-claude to run again

@github-actionsgithub-actionsBot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💥 Automated smoke test review - all systems nominal!

Warning

Firewall blocked 6 domains

The following domains were blocked by the firewall during workflow execution:

  • accounts.google.com
  • android.clients.google.com
  • clients2.google.com
  • contentautofill.googleapis.com
  • safebrowsingohttpgateway.googleapis.com
  • www.google.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
allowed:
- defaults
- "accounts.google.com"
- "android.clients.google.com"
- "clients2.google.com"
- "contentautofill.googleapis.com"
- "safebrowsingohttpgateway.googleapis.com"
- "www.google.com"

See Network Configuration for more information.

💥 [THE END] — Illustrated by Smoke Claude · sonnet46 · 59.9 AIC · ⌖ 10.7 AIC · ⊞ 6.3K
Comment /smoke-claude to run again

@@ -39,7 +39,7 @@ const DefaultClaudeCodeVersion Version = "2.1.220"
// When unpinning or upgrading this version, verify:
// - MCPs are not blocked from loading (tools.mcp configuration still works end-to-end)
// - /models does not silently fail on PATs (check that model listing works with PAT auth)
const DefaultCopilotVersion Version = "1.0.75"
const DefaultCopilotVersion Version = "1.0.77"

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🔍 Smoke Test Review — DefaultCopilotVersion bumped from 1.0.75 to 1.0.77. Good incremental update; verify MCPs still load and /models works with PAT auth as the inline comment advises. ✅

@@ -54,7 +54,7 @@ const DefaultGeminiVersion Version = "0.39.1"
const DefaultAntigravityVersion Version = "1.0.2-6113393518706688"

// DefaultPiVersion is the default version of the Pi CLI
const DefaultPiVersion Version = "0.82.1"
const DefaultPiVersion Version = "0.83.0"

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🔍 Smoke Test Review — DefaultPiVersion bumped from 0.82.1 to 0.83.0. Minor version bump; confirm no breaking API changes in the Pi CLI changelog before merging. ✅

@github-actions

Copy link
Copy Markdown
Contributor

Smoke Test Summary

PR: chore: CLI version updates - Copilot 1.0.77, Pi 0.83.0, Playwright v1.62.1, Syft v1.50.0, Grype v0.116.1

  • gh proxy PR review: PASS
  • mcpscripts pr list: PASS
  • Serena find_symbol: FAIL (timeout)
  • Playwright nav+screenshot: PASS
  • web-fetch github.com: PASS
  • File+bash smoke file: PASS
  • Discussion comment: PASS
  • Build: PASS
  • Artifact upload: PASS
  • Discussion create: PASS
  • Workflow dispatch: PASS
  • PR review comments+submit: PASS
  • Comment memory haiku: PASS
  • file-summarizer sub-agent: PASS
  • Check run: PASS
  • LSP TypeScript func count: PASS (13 functions)

Overall: PASS

Author: app/copilot-swe-agent. Assignees: pelikhan, Copilot.

Warning

Firewall blocked 6 domains

The following domains were blocked by the firewall during workflow execution:

  • accounts.google.com
  • android.clients.google.com
  • clients2.google.com
  • contentautofill.googleapis.com
  • safebrowsingohttpgateway.googleapis.com
  • www.google.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
allowed:
- defaults
- "accounts.google.com"
- "android.clients.google.com"
- "clients2.google.com"
- "contentautofill.googleapis.com"
- "safebrowsingohttpgateway.googleapis.com"
- "www.google.com"

See Network Configuration for more information.

📰 BREAKING: Report filed by Smoke Copilot · auto · 55.2 AIC · ⌖ 7.65 AIC · ⊞ 8.7K ·
Comment /smoke-copilot to run again
Add label smoke to run again

@github-actions

Copy link
Copy Markdown
Contributor

Comment Memory

Caveman code run test
Fire build pass, tool go clank
Copilot smash bug

Note

This comment is managed by comment memory.

It stores persistent context for this thread in the code block at the top of this comment.
Edit only the text inside the backtick fences; workflow metadata and the footer are regenerated automatically.

Learn more about comment memory

Warning

Firewall blocked 6 domains

The following domains were blocked by the firewall during workflow execution:

  • accounts.google.com
  • android.clients.google.com
  • clients2.google.com
  • contentautofill.googleapis.com
  • safebrowsingohttpgateway.googleapis.com
  • www.google.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
allowed:
- defaults
- "accounts.google.com"
- "android.clients.google.com"
- "clients2.google.com"
- "contentautofill.googleapis.com"
- "safebrowsingohttpgateway.googleapis.com"
- "www.google.com"

See Network Configuration for more information.

📰 BREAKING: Report filed by Smoke Copilot · auto · 55.2 AIC · ⌖ 7.65 AIC · ⊞ 8.7K ·
Comment /smoke-copilot to run again
Add label smoke to run again

@github-actionsgithub-actionsBot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Caveman review done. Version bump look ok. Grunt approve.

Warning

Firewall blocked 6 domains

The following domains were blocked by the firewall during workflow execution:

  • accounts.google.com
  • android.clients.google.com
  • clients2.google.com
  • contentautofill.googleapis.com
  • safebrowsingohttpgateway.googleapis.com
  • www.google.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
allowed:
- defaults
- "accounts.google.com"
- "android.clients.google.com"
- "clients2.google.com"
- "contentautofill.googleapis.com"
- "safebrowsingohttpgateway.googleapis.com"
- "www.google.com"

See Network Configuration for more information.

📰 BREAKING: Report filed by Smoke Copilot · auto · 55.2 AIC · ⌖ 7.65 AIC · ⊞ 8.7K
Comment /smoke-copilot to run again
Add label smoke to run again

@github-actions

Copy link
Copy Markdown
Contributor

🎉 This pull request is included in a new release.

Release: v0.84.2

Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[ca] CLI Version Updates: Copilot 1.0.77, Pi 0.83.0, Playwright Browser v1.62.1, Syft v1.50.0, Grype v0.116.1

3 participants

@pelikhan