Bump MCPG container image to v0.2.16

[Copilot]

Bumps the default MCP Gateway image from v0.2.15 to v0.2.16 to pick up the string-only OTLP headers change (gh-aw-mcpg#3337) and other recent fixes.

Changes

• pkg/constants/version_constants.go — DefaultMCPGatewayVersion updated to v0.2.16
• 182 .lock.yml files — recompiled; all references to ghcr.io/github/gh-aw-mcpg now pin v0.2.16

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

• https://api.github.com/graphql
  • Triggering command: /usr/bin/gh /usr/bin/gh api graphql -f query=query($owner: String!, $name: String!) { repository(owner: $owner, name: $name) { hasDiscussionsEnabled } } -f owner=github -f name=gh-aw (http block)
• https://api.github.com/repos/astral-sh/setup-uv/git/ref/tags/eac588ad8def6316056a12d4907a9d4d84ff7a3b
  • Triggering command: /usr/bin/gh gh api /repos/astral-sh/setup-uv/git/ref/tags/eac588ad8def6316056a12d4907a9d4d84ff7a3b --jq .object.sha (http block)
• https://api.github.com/repos/github/gh-aw
  • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw --jq .visibility (http block)
• https://api.github.com/repos/githubnext/agentics/git/ref/tags/-
  • Triggering command: /usr/bin/gh gh api /repos/githubnext/agentics/git/ref/tags/- --jq .object.sha (http block)

If you need me to access, download, or install something from one of these locations, you can either:

• Configure Actions setup steps to set up my environment, which run before the firewall is enabled
• Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

[Copilot]

Pull request overview

Bumps the default MCP Gateway (gh-aw-mcpg) container image version to v0.2.16 and propagates that pin through generated workflow lockfiles.

Changes:

• Update DefaultMCPGatewayVersion from v0.2.15 to v0.2.16.
• Recompile workflow .lock.yml files to pin ghcr.io/github/gh-aw-mcpg to v0.2.16.

Show a summary per file

File	Description
pkg/constants/version_constants.go	Updates the default MCP Gateway image version constant to v0.2.16.
.github/workflows/*.lock.yml	Updates pinned ghcr.io/github/gh-aw-mcpg references in locked workflows to v0.2.16 (generated output).

Copilot's findings

Tip

Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

• Files reviewed: 183/183 changed files
• Comments generated: 1

[Copilot]

PR description says all references to ghcr.io/github/gh-aw-mcpg are pinned to v0.2.16, but pkg/cli/workflows/example-blocked-domains.lock.yml still references ghcr.io/github/gh-aw-mcpg:v0.2.15 (lines 337 and 360). Please update that lockfile (or re-run the lockfile compilation step) so it also pins v0.2.16 to avoid some workflows continuing to run the older gateway.

[lpcox]

@copilot apply changes based on the comments in this thread

[Copilot]

@copilot apply changes based on the comments in this thread

Fixed in 45f5a45 — recompiled pkg/cli/workflows/example-blocked-domains.lock.yml so both occurrences now reference ghcr.io/github/gh-aw-mcpg:v0.2.16. No remaining v0.2.15 references in the repo.