[ca] Update agentic CLI and scanner pins (2026-10-10) #67361

Overview

CLI/MCP/Docker version check for §38027848687 found stable updates. I prepared the corresponding workspace changes and cached the latest version/help/digest observations under /tmp/gh-aw/cache-memory/cli-version-checker/.

Key updates detected

Prepared file changes

• pkg/constants/version_constants.go
  • DefaultClaudeCodeVersion: 2.1.288 → 2.1.296
  • DefaultCopilotVersion: 1.0.90 → 1.0.95
  • DefaultCodexVersion: 0.159.3 → 0.162.1
  • DefaultPiVersion: 1.0.0 → 1.1.0
  • DefaultGitHubMCPServerVersion: v1.12.2 → v2.0.2
  • DefaultPlaywrightCLIVersion: 0.1.21 → 0.1.22
• pkg/constants/version_constants_test.go
  • Updated expected versions and Playwright npm publication timestamp (2026-09-28T23:24:31.286Z).
• pkg/cli/docker_images.go
  • SyftImage: anchore/syft:v1.52.0@sha256:500e2d872ac019436926e8322b4fc1f39441d94d21f6f4046c6ff29b30e8cb02 → anchore/syft:v1.54.1@sha256:3eb5379ba7b409c3f4069b686110527af0c47df993fa5c10d13e7cf34f49b1aa
• Generated by make recompile:
  • .github/aw/compat.json
  • actions/setup/sh/install_copilot_cli.sh
  • workflow lock files regenerated in the workspace (not listed individually here).

Release analysis

GitHub Copilot CLI 1.0.90 → 1.0.95

Release: https://github.com/github/copilot-cli/releases/tag/v1.0.95

Breaking: none identified from release notes.

Features / improvements:

• Native Microsoft Entra broker authentication on macOS when available, with browser fallback.
• copilot config supports sandbox credential injectHosts keys, with Bash/Zsh/Fish key completion.
• --context now applies to new and resumed ACP sessions instead of silently using the default or previously saved context tier.
• Managed plugin setup retries hourly or after policy changes instead of retrying on every message failure.

Impact on gh-aw: medium. Auth and sandbox credential behavior are directly relevant to agent execution. The installed 1.0.95 main/config/environment help output did not change relative to cached 1.0.93 output, so no CLI invocation changes were detected through help comparison.

Additional research: README was accessible and confirms supported platforms, npm install path, PAT authentication through GH_TOKEN/GITHUB_TOKEN, MCP extensibility, LSP configuration, and experimental/autopilot mode. The changelog file is large (>20 KB); I avoided fetching it whole per the repository large-file guard.

OpenAI Codex 0.159.3 → 0.162.1

Releases:

• https://github.com/openai/codex/releases/tag/rust-v0.162.0
• https://github.com/openai/codex/releases/tag/rust-v0.162.1

Breaking: none identified in the selected stable release notes.

Features:

• Managed Git worktree creation/listing for trusted local projects when the worktrees feature is enabled.
• Command Center task pinning.
• Transcript block navigation/copying (/copy, Ctrl+Insert) and mouse-wheel tuning.
• Clickable URLs in approval headers, questions, MCP prompts, warnings, banners, and verification prompts.
• Custom Responses-compatible provider configuration for live web access and remote compaction.
• JavaScript helpers for streaming promise results and opt-in ranked tool search in Code Mode.

Fixes / security-relevant hardening:

• Linux sandbox startup fixes with multiple denied files.
• Reject writable sandbox-construction executables.
• Keep ripgrep configuration from weakening deny-glob masks.
• Preserve CRLF line endings in apply_patch updates.
• Honor Retry-After for retryable Responses/WebSocket failures.
• Fix TUI crash on multi-line async questions and startup failures from background server feature-setting differences.

Impact on gh-aw: medium. Sandbox fixes and provider behavior changes are directly relevant to secure/reliable Codex-backed workflows. Help output was unchanged vs cached 0.161.0.

GitHub MCP Server v1.12.2 → v2.0.2

Releases:

• https://github.com/github/github-mcp-server/releases/tag/v1.13.0
• https://github.com/github/github-mcp-server/releases/tag/v1.14.0
• https://github.com/github/github-mcp-server/releases/tag/v2.0.0
• https://github.com/github/github-mcp-server/releases/tag/v2.0.1
• https://github.com/github/github-mcp-server/releases/tag/v2.0.2

Breaking: v2.0.1 notes call out fix(go)!: use the v2 module path for Go consumers (github/github-mcp-server#3445). This is primarily a Go library consumer concern, not expected to break gh-aw's Docker/server usage.

Features:

• v2.0.0 adds structured outputs and output schemas for clients advertising MCP 2026-07-28 or later.
• Typed tool schemas/outputs across context, comments, search, security alerts, discussions, notifications, repositories, and issues.
• v1.13.0 added granular hide/unhide issue comment, PR review comment, and PR review tools.
• v1.14.0 migrated MCP Apps UI to v2 and updated React/Primer toolchain.

Fixes / security:

• v2.0.2 restores typed tool HTTP header validation (fix(inventory): restore typed tool HTTP header validation github-mcp-server#3454).
• v1.14.0 includes npm alert remediation and pinned GitHub Actions SHAs.

Impact on gh-aw: medium. Protocol-gated typed outputs are beneficial for newer clients, but the major version warrants smoke coverage for tool schema compatibility.

Playwright CLI 0.1.21 → 0.1.22

Release: https://github.com/microsoft/playwright-cli/releases/tag/v0.1.22

Breaking: none identified.

Fixes:

• run-code scripts can use timers, fetch, URL, Buffer, crypto, AbortController, and text encoders/decoders while keeping require and process unavailable.
• find --filename=results.md handles large result sets.
• Dialogs during goto/reload are reported rather than causing timeouts.
• Browser-close-during-download crash fixed.
• install-browser --no-shell accepted.
• webmcp-call avoids stale tabs/frames and supports Chromium 155+.
• Snapshot quoting and bundled skill preapproval behavior improved.

Impact on gh-aw: low. This is a targeted bug-fix update, and the npm release is outside the 3-day cooldown.

Syft image v1.52.0 → v1.54.1

Release: https://github.com/anchore/syft/releases/tag/v1.54.1

Version: v1.52.0 → v1.54.1
Release date: 2026-10-06T15:35:10Z — over 3 days old at check time, cooldown passed.
Digest: sha256:500e2d872ac019436926e8322b4fc1f39441d94d21f6f4046c6ff29b30e8cb02 → sha256:3eb5379ba7b409c3f4069b686110527af0c47df993fa5c10d13e7cf34f49b1aa
Full image: anchore/syft:v1.54.1@sha256:3eb5379ba7b409c3f4069b686110527af0c47df993fa5c10d13e7cf34f49b1aa

Fixes: deterministic packages.lock dependency resolution and local podman image attestation-file fix.

Dependencies: 9 updated packages, including github.com/anchore/stereoscope, Docker CLI, klauspost/compress, sigstore packages, and SIF.

Impact on gh-aw: medium. Scanner behavior changes can affect SBOM/static analysis output, but this is a stable patch release with focused fixes.

Docker image checks

Unchanged / skipped components

• MCP Gateway remains at v0.4.30.
• Threat Detect remains at v0.5.2; latest stable release unchanged (pre-release main ignored).
• Grype latest stable v0.120.1 was published 2026-10-06T20:46:45Z, less than 3 days old at the check time, so the Grype version update was skipped. Digest for current v0.119.0 was unchanged.
• Yamllint GitHub releases endpoint returned 404; Docker Hub latest digest was re-resolved and unchanged.

Validation

• make fmt succeeded.
• make recompile ran in the foreground and completed successfully (334/334 workflow files compiled).
• go test ./pkg/constants succeeded.
• go test ./pkg/constants ./pkg/cli was attempted; pkg/constants passed, but pkg/cli failed in the existing broader suite after emitting CLI/test harness output ending with No workflow markdown files found ... FAIL github.com/github/gh-aw/pkg/cli. This should be rechecked before merging the prepared update.

Next actions

1. Review and commit the prepared version/digest changes.
2. Re-run the impacted unit suite (or full make agent-report-progress) before final merge.
3. Smoke test GitHub MCP Server v2.0.2 tool schema compatibility and Copilot CLI 1.0.95 auth/config behavior.

References:

• §38027848687

Generated by 🔢 CLI Version Checker · pi · gpt55 · 251.2 AIC · ⌖ 20.8 AIC · ⊞ 11.2K · ◷

• expires on Oct 11, 2026, 9:42 PM UTC-08:00