[ca] Update CLI pins: Claude Code 2.1.299, Copilot CLI 1.0.97, MCP Gateway v0.4.31 #68619

Overview

CLI Version Checker detected stable updates in run §38517044934 and prepared the corresponding local version constant changes.

Updates detected:

No updates were needed for Codex, GitHub MCP Server, Playwright CLI, Pi, threat-detect, or the scanner Docker images.

Local changes prepared

• pkg/constants/version_constants.go
  • DefaultClaudeCodeVersion: 2.1.296 → 2.1.299
  • DefaultCopilotVersion: 1.0.96 → 1.0.97
  • DefaultMCPGatewayVersion: v0.4.30 → v0.4.31
• pkg/constants/version_constants_test.go updated to match.
• make recompile completed and regenerated generated workflow locks plus setup compatibility files, including actions/setup/sh/install_copilot_cli.sh and .github/aw/compat.json.

Validation

• make recompile && echo done: passed; compiled 344/344 workflows.
• go test ./pkg/constants: passed.
• make test-unit: passed impacted constants samples.
• make fmt: Go formatting phase passed, but the JavaScript prettier phase failed because actions/setup/js/node_modules/.bin/prettier was missing.
• Attempted npm ci --prefix actions/setup/js to install pinned prettier, but npm failed with DEPTH_ZERO_SELF_SIGNED_CERT while fetching a GitHub tarball dependency. Retried with NODE_OPTIONS=--use-system-ca and saw the same certificate failure.

Claude Code 2.1.296 → 2.1.299

Release timeline:

• npm latest: 2.1.299
• Published: 2026-10-14T00:23:19.588Z
• Package: https://www.npmjs.com/package/`@anthropic-ai/claude-code`
• NPM tarball: https://registry.npmjs.org/`@anthropic-ai/claude-code`/-/claude-code-2.1.299.tgz
• Integrity: sha512-7pI5Pi+q0GHtX429SHGT0+IZgQ/2VlgcwRAHeDcH0vsumkF3tCHFp2vzKxp0uh8aytskZWHhmJ3kBi7ZfabywQ==

Change analysis:

• Breaking: none identified from npm metadata or CLI help comparison.
• Features: none visible in main --help output compared with cached 2.1.296 help.
• Fixes: no public changelog available; treat as opaque upstream maintenance/fix release.
• Security: no security notes were available in public npm metadata.
• Performance: no performance notes were available in public npm metadata.

Impact assessment: Low. gh-aw pins the CLI version and does not rely on newly discovered flags. Help output diff against cached 2.1.296 output showed no command-line surface changes.

Migration requirements: update DefaultClaudeCodeVersion only.

GitHub Copilot CLI 1.0.96 → 1.0.97

Release timeline:

• npm latest: 1.0.97
• Published: 2026-10-13T18:37:41.431Z
• Release notes: https://github.com/github/copilot-cli/releases/tag/v1.0.97
• Package: https://www.npmjs.com/package/`@github/copilot`
• NPM tarball: https://registry.npmjs.org/`@github/copilot`/-/copilot-1.0.97.tgz
• Integrity: sha512-Uh1li820BxT6yS8/bDCf7KC6Rn9jb/J1rWs2z9JpdfIyGHEWeyUS0rA6/tEV7FDc/5AOWS64dYJe8QF+w/mWqg==

Change analysis:

• Breaking: none identified. Main help, config help, and environment help match cached 1.0.96 outputs.
• Features:
  • Agent-scoped declarative hooks for custom agents.
  • Remote plugin marketplace and plugin fetches retry once with the signed-in GitHub token after HTTPS auth fails.
  • Inline images render by default on supported terminals; use /settings inlineImages false to disable.
  • /usage shows billed AI Credits for token-billed sessions, including after resume.
• Fixes:
  • Streamed responses behind TLS-intercepting proxies complete when close_notify is omitted.
  • GitHub SCP remotes with absolute paths parse correctly for owner/name resolution.
  • Custom agent discovery handles more than 100 agents and deeply nested agent files.
  • Autopilot denies a preToolUse hook ask decision instead of blocking on an unattended permission dialog.
  • Config robustness: invalid config.json entries no longer reset unrelated saved settings.
  • Managed permission rules in /config are read-only and hidden unless set by the organization.
  • view_range timeline/export issues fixed for malformed ranges.
  • Resumed sessions report interrupted tool calls and avoid replaying canceled writes.
  • Explicit GitHub MCP tool/toolset selections use the correct endpoint so requested write tools remain available.
  • Cached MCP tool calls recheck definitions after concurrent catalog refreshes.
  • Plugin-dir skills and custom agents reach autocomplete and invocation.
  • Resumed sessions rebuild plugin hooks from the correct plugin list.
  • Permission recovery retry budgets are tracked per request.
  • Background-shell wait status animation is suppressed when no foreground work is running.
  • Emergency memory relief can bypass cooldown before V8 heap OOM.
• Security:
  • Redacts secrets safely in --output-format json output while preserving valid variable references.
  • MCP endpoint/toolset fix reduces risk of missing requested tool policy behavior.
• Performance/reliability:
  • Streaming proxy robustness and emergency memory relief improve long-running agent reliability.

Impact assessment: Medium. The release includes permission, MCP endpoint, plugin hook, config, and JSON redaction changes that are relevant to gh-aw Copilot workflows. No CLI flag changes were found, so migration risk is mostly behavioral/runtime.

Migration requirements: update DefaultCopilotVersion and recompile generated compatibility/install artifacts.

MCP Gateway v0.4.30 → v0.4.31

Release timeline:

• Latest: v0.4.31
• Published: 2026-10-14T04:33:43Z
• Release notes: https://github.com/github/gh-aw-mcpg/releases/tag/v0.4.31
• Container digest for ghcr.io/github/gh-aw-mcpg:v0.4.31: sha256:dbec0f2ddef6adf83b7764019323096e3e5cc0f3886255f6320555b7fe2a7caf

Change analysis:

• Breaking: none called out in release notes.
• Features/refactors:
  • Centralized Rust guard tool-name constants, including codespace, gist, deploy-key, GPG/SSH key, workflow-toggle, and repository lifecycle/write-tool names.
  • Additional guard coverage for gh gist rename.
• Fixes:
  • Classifies gh gist rename as a write with user-scoped labels.
  • Adds regression coverage for repository lifecycle writes.
  • Adds tests around shutdown tracing provider timeout, config normalization, enclave session detection, proxy URL rewriting, override-to-public-scope, and command execution.
• Security:
  • Guard classification and write-tool centralization are security-relevant because they affect MCP Gateway command/tool policy enforcement.
• Performance: no performance-specific changes identified.

Impact assessment: Medium. MCP Gateway is used as a default sandbox.agent container; the guard write-tool classification improvements are relevant to workflow isolation and policy correctness. The release is very recent, so extra runtime smoke coverage is recommended before broad rollout.

Migration requirements: update DefaultMCPGatewayVersion and recompile generated workflow locks.

Docker image digest check

Scanner image digests were resolved and matched the pinned values in pkg/cli/docker_images.go:

GitHub release checks found no newer stable scanner releases that passed the applicable criteria; PipelineComponents/yamllint latest release endpoint returned 404, so the existing latest tag digest was checked directly.

Unchanged components

• Codex: current 0.162.1, latest 0.162.1.
• GitHub MCP Server: current v2.0.2, latest v2.0.2.
• Playwright CLI: current 0.1.22, latest 0.1.22.
• Pi: current 1.2.0, latest 1.2.0.
• Threat-detect: current v0.5.2, latest v0.5.2.

Next actions

1. Review the prepared constants and generated recompile output.
2. Resolve the local npm certificate issue so make fmt can complete its JavaScript prettier phase.
3. Run final repository validation after prettier dependencies are available.
4. Give extra smoke-test attention to Copilot MCP/toolset selection and MCP Gateway guard/write classification paths.

References:

• §38517044934

Generated by 🔢 CLI Version Checker · pi · gpt55 · 182.6 AIC · ⌖ 20.5 AIC · ⊞ 11.3K · ◷

• expires on Oct 15, 2026, 9:42 PM UTC-08:00