[ca] Version Update: 7 CLI/MCP Tools (Jan 24, 2026)

[github-actions]

Update Summary

Date: 2026-01-24
Updates Found: 7 version updates
Status: Constants updated, requires make recompile and testing

Tool	Previous	Latest	Change
Claude Code	2.1.15	2.1.19	+4 minor versions
Copilot CLI	0.0.389	0.0.394	+5 patch versions
Codex	0.88.0	0.89.0	+1 minor version
Playwright MCP	0.0.56	0.0.58	+2 patch versions
Playwright Browser	v1.57.0	v1.58.0	+1 minor version
Sandbox Runtime	0.0.29	0.0.32	+3 patch versions
MCP Gateway	v0.0.76	v0.0.78	+2 patch versions

Critical Actions Required

1. Run make recompile - Required after constant updates to regenerate workflow lock files
2. Integration Testing - Copilot CLI upgrade requires full integration test run (see warning in constants.go)
3. Review Breaking Changes - Playwright v1.58.0 has several breaking changes (see below)

---

Detailed Changes by Tool

Claude Code: 2.1.15 → 2.1.19

Timeline: 4 minor version increments
Risk: Low
Package: https://www.npmjs.com/package/`@anthropic-ai/claude-code`

CLI Changes Detected

Based on cached help output comparison between v2.1.14 and v2.1.5:

Removed flags:

• --file (specs...) - File resources download flag removed

This flag removal suggests internal changes to how file resources are handled at startup.

NPM Package Info

• Latest Version: 2.1.19
• Repository: No public repository available
• Changelog: Not publicly available

Impact Assessment

• Risk Level: Low
• Affected Features: File resource initialization (internal change only)
• Migration Notes: No external API changes detected

---

Copilot CLI: 0.0.389 → 0.0.394

Timeline: 5 patch version increments
Risk: Medium (requires integration testing)
Package: https://www.npmjs.com/package/`@github/copilot`
Repository: https://github.com/github/copilot-cli (may be private)

CLI Changes Detected

Comparing v0.0.376 → v0.0.374 (latest cached versions):

View Removed Flags

GitHub MCP Tool Configuration:

• --add-github-mcp-tool (tool) - Removed
• --add-github-mcp-toolset (toolset) - Removed

Session Sharing:

• --share [path] - Removed
• --share-gist - Removed

Remaining Flag Changes:

• --enable-all-github-mcp-tools description simplified (no longer mentions overriding removed flags)

Intermediate Versions

• 0.0.390
• 0.0.391
• 0.0.392
• 0.0.393

Impact Assessment

• Risk Level: Medium
• Affected Features: GitHub MCP tool configuration, session sharing
• Migration Notes:
  • Use --enable-all-github-mcp-tools for GitHub MCP instead of individual tool flags
  • Session sharing functionality removed from CLI
• Testing Required: Full integration test run per constants.go warning

Repository Access Note

The Copilot CLI repository (https://github.com/github/copilot-cli) may be private. Release notes were not accessible during this check. Detailed changelog should be consulted if available.

---

Codex: 0.88.0 → 0.89.0

Timeline: 1 minor version increment (released 2025-01-22)
Risk: Low
Package: https://www.npmjs.com/package/`@openai/codex`
Repository: https://github.com/openai/codex
Release Notes: https://github.com/openai/codex/releases/tag/rust-v0.89.0

View Full Changelog

Release Highlights (from GitHub)

New Features:

• Introduced /permissions command with streamlined approval workflow while maintaining /approvals for backward compatibility (feat(tui) /permissions flow openai/codex#9561)
• Added UI for toggling individual skills on or off (Add UI for skill enable/disable. openai/codex#9627)
• Enhanced slash-command matching by prioritizing exact and prefix matches ahead of fuzzy matching (feat: better sorting of shell commands openai/codex#9629)
• App server now supports thread/read operations and can filter archived threads in thread/list (feat(app-server): thread/read API openai/codex#9569, feat(app-server): support archived threads in thread/list openai/codex#9571)
• App server clients support layered config.toml resolution and config/read can determine effective configuration from a specified working directory (Add layered config.toml support to app server openai/codex#9510)
• Release artifacts now include stable URLs for published config schema (feat: publish config schema on release openai/codex#9572)

Bug Fixes:

• Fixed tilde expansion preventing path escape on entries like ~//... (fix: Fix tilde expansion to avoid absolute-path escape openai/codex#9621)
• TUI turn timing now resets between assistant responses for accurate elapsed time tracking (fix(tui) turn timing incremental openai/codex#9599)

Documentation:

• Synchronized MCP subcommand documentation with current CLI functionality (docs: fix outdated MCP subcommands documentation openai/codex#9622)
• Refreshed skills/list protocol README example to reflect current response structure (Update skills/list protocol readme openai/codex#9623)

Maintenance:

• Removed TUI2 experiment and related configuration/documentation, maintaining terminal-native UI focus (feat(tui): retire the tui2 experiment openai/codex#9640)

CLI Changes Detected

No significant changes detected in help output between recent versions.

Impact Assessment

• Risk Level: Low
• Affected Features: Permissions UI, slash-command matching, app server operations
• Migration Notes: /approvals remains for backward compatibility; /permissions is the new recommended command

---

Playwright MCP: 0.0.56 → 0.0.58

Timeline: 2 patch version increments
Risk: Low
Package: https://www.npmjs.com/package/`@playwright/mcp`
Repository: https://github.com/microsoft/playwright

Intermediate Versions

• 0.0.57

NPM Versions Available

0.0.56
0.0.57
0.0.58
```

#### Impact Assessment

- **Risk Level:** Low
- **Affected Features:** MCP server implementation for Playwright
- **Migration Notes:** Standard patch updates, no breaking changes expected

---

### Playwright Browser: v1.57.0 → v1.58.0

**Timeline:** 1 minor version increment (released 2025-01-23)  
**Risk:** High (breaking changes)  
**Repository:** https://github.com/microsoft/playwright  
**Release Notes:** https://github.com/microsoft/playwright/releases/tag/v1.58.0  
**Docker Image:** `mcr.microsoft.com/playwright:v1.58.0`

### Breaking Changes ⚠️

<details>
<summary><b>View Breaking Changes Details</b></summary>

1. **Removed Selectors:**
   - `_react` selector removed
   - `_vue` selector removed
   - See locators guide for alternatives

2. **Removed Selector Engine:**
   - `:light` selector engine suffix removed

3. **Removed Launch Option:**
   - `devtools` option removed from `browserType.launch()`
   - **Migration:** Use `args: ['--auto-open-devtools-for-tabs']` instead

4. **Platform Support:**
   - macOS 13 WebKit support discontinued

</details>

<details>
<summary><b>View Key Features</b></summary>

### Timeline in HTML Reports
The merged reports HTML report now includes a Speedboard tab displaying timeline visualization for better test execution analysis.

### UI Mode & Trace Viewer Enhancements
- "System" theme option automatically adapts to OS dark/light preferences
- Code editors now support search functionality (Cmd/Ctrl+F)
- Network details panel reorganization improves usability
- JSON responses display with automatic formatting

### CDP Connection Optimization
`browserType.connectOverCDP()` introduces an `isLocal` option enabling file system optimizations when connecting to local CDP servers.

### Browser Versions
- Chromium 145.0.7632.6
- Mozilla Firefox 146.0.1
- WebKit 26.0

**Tested Against:**
- Google Chrome 144
- Microsoft Edge 144

</details>

#### Impact Assessment

- **Risk Level:** High
- **Affected Features:** 
  - React/Vue selectors (if used)
  - DevTools launch option
  - macOS 13 WebKit users
- **Migration Required:** 
  - Update selector usage (remove `_react`, `_vue`, `:light`)
  - Replace `devtools: true` with `args: ['--auto-open-devtools-for-tabs']`
- **Testing Priority:** High - validate selector usage in workflows

---

### Sandbox Runtime: 0.0.29 → 0.0.32

**Timeline:** 3 patch version increments  
**Risk:** Low  
**Package:** https://www.npmjs.com/package/`@anthropic-ai/sandbox-runtime`  
**Repository:** https://github.com/anthropic-experimental/sandbox-runtime

#### Intermediate Versions

- 0.0.30
- 0.0.31

#### NPM Versions Available

```
0.0.29
0.0.30
0.0.31
0.0.32

Impact Assessment

• Risk Level: Low
• Affected Features: Sandbox runtime environment
• Migration Notes: Standard patch updates, no breaking changes expected in library

---

MCP Gateway: v0.0.76 → v0.0.78

Timeline: 2 patch version increments (released 2025-01-23)
Risk: Low
Repository: https://github.com/githubnext/gh-aw-mcpg
Release Notes: https://github.com/githubnext/gh-aw-mcpg/releases/tag/v0.0.78
Docker Image: ghcr.io/githubnext/gh-aw-mcpg:v0.0.78

View Full Changelog (v0.0.78)

Key Highlights

Protocol Compliance:

• Graceful shutdown handling (#443): MCP endpoints now return proper 503 Service Unavailable responses during gateway shutdown

JSON Schema Enhancements (#444):

• Response caching to reduce redundant processing
• Enhanced documentation fields for introspection
• Version pinning support for consistent validation

Improved Debugging:

• DIFC evaluator logging (#430)
• Configuration validation logging (#440)

Changes & Fixes

PR	Change
#420	Launcher stdio path test coverage
#430	DIFC evaluator debug logging
#433	DIFC evaluator comprehensive tests
#440	Config validation schema logging
#442	Logger package test improvements
#443	503 response during shutdown
#444	JSON schema caching & versioning
#445	Fixed duplicate test declarations
#446	Launcher test reliability fixes
#447	Documentation updates
#448	Logger initialization refactoring

View v0.0.77 Changes

What's Changed (v0.0.77)

• Testing enhancements: Comprehensive test coverage added for launcher.GetOrLaunch stdio functionality and the difc.Evaluator component
• Logging improvements: Debug logging introduced for the DIFC evaluator and config validation schema; logger package tests refactored to eliminate duplication
• MCP compliance: "503 response for MCP endpoints during shutdown (Spec 5.1.3)"
• Bug fixes: Resolved duplicate test function declarations in logger package
• Schema updates: JSONSchema module now supports caching, documentation, and version pinning
• Code quality: Launcher tests refined and documentation synchronized across repository

Complete comparison: v0.0.75...v0.0.77

Impact Assessment

• Risk Level: Low
• Affected Features:
  • MCP endpoint shutdown behavior (now returns proper 503 status)
  • JSON schema validation (improved caching and versioning)
  • Debug logging (DIFC evaluator and config validation)
• Migration Notes: No breaking changes; improvements to protocol compliance and observability

---

Recommendations

Update Priority

1. Immediate (This PR):

   • ✅ Constants updated in pkg/constants/constants.go
   • ⚠️ Run make recompile to regenerate workflow lock files
   • ⚠️ Commit generated lock files

2. Testing Priority:

   • High: Playwright Browser v1.58.0 (breaking changes to selectors)
   • Medium: Copilot CLI v0.0.394 (flag removals, integration testing required)
   • Low: All other updates (standard patch/minor updates)

3. Migration Tasks:

   • Audit workflows for Playwright _react, _vue, :light selector usage
   • Verify Copilot CLI integration still works with removed flags
   • Test MCP Gateway shutdown behavior (now returns 503 properly)

Testing Strategy

# 1. Recompile workflows
make recompile

# 2. Run integration tests
make test-integration

# 3. Validate specific tools
gh aw run --engine copilot  # Test Copilot CLI
gh aw run --engine codex    # Test Codex

# 4. Test Playwright browser automation
# Verify no usage of removed selectors in workflows

Rollout Plan

1. Complete recompilation and commit lock files
2. Run CI/CD pipeline to validate all workflows
3. Monitor for selector-related failures (Playwright)
4. Monitor for GitHub MCP tool configuration issues (Copilot)
5. Deploy to production after validation

---

Files Modified

• pkg/constants/constants.go - Updated 7 version constants

Next Steps

• Run make recompile to regenerate workflow lock files
• Commit generated lock files (.lock.yml, pkg/workflow/js/*.js)
• Run integration tests
• Audit Playwright selector usage for breaking changes
• Validate Copilot CLI integration
• Deploy after validation

References:

• §21314236532

AI generated by CLI Version Checker

[pelikhan]

@copilot validate that "--share" is not currently used for copilot cli