[ca] chore(deps): bump CLI versions — Claude Code 2.1.150, Copilot 1.0.51, Codex 0.133.0, GitHub MCP Server v1.0.5

[github-actions]

Summary

This update bumps four CLI dependencies. Key highlights: Codex 0.133.0 enables goals on by default and adds rich permission profile / plugin improvements; GitHub MCP Server v1.0.5 adds new tools (list repo collaborators, discussion comment writes) and pagination fixes; Claude Code and Copilot CLI receive incremental patch updates.

Updates Applied

Tool	Previous	New	Notes
Claude Code	2.1.142	2.1.150	8 patch versions
Copilot CLI	1.0.48	1.0.51	3 patch versions
Codex	0.130.0	0.133.0	3 minor versions w/ notable features
GitHub MCP Server	v1.0.4	v1.0.5	New tools, pagination fixes

No Changes Needed

• MCP Gateway: v0.3.18 (already current)
• Playwright MCP: 0.0.75
• Playwright CLI: 0.1.13
• Playwright Browser: v1.60.0

Update Codex CLI

• Previous: 0.130.0 → New: 0.133.0
• Timeline: 0.131.0, 0.132.0, 0.133.0

Breaking Changes

None directly affecting gh-aw integration.

Key Features

• Goals enabled by default in 0.133.0, backed by dedicated storage and tracking progress across turns (feat: dedicated goal DB openai/codex#23300, Make goals feature on by default and no longer experimental openai/codex#23732)
• codex remote-control now runs as foreground command with explicit start/stop daemon management (Improve codex remote-control CLI UX openai/codex#22878)
• Permission profile API expansion: list APIs, inheritance, managed requirements.toml (core: expose permission profile picker metadata openai/codex#22928, feat: add permission profile list api openai/codex#23412, feat: support managed permission profiles in requirements.toml openai/codex#23433)
• Plugin discovery: marketplace-aware list output, remote collection support (Split plugin install discovery into list and request tools openai/codex#23372, feat: Add vertical remote plugin collection support openai/codex#23584, feat(plugins): tabulate plugin list output openai/codex#23727)
• codex exec resume accepts --output-schema (0.132.0, Support --output-schema for exec resume openai/codex#23123)
• Python SDK first-class auth (login/logout, ChatGPT/device-code flows) (0.132.0, sdk/python: add first-class login support openai/codex#23093)
• New codex doctor diagnostics command (0.131.0, feat(cli): add codex doctor diagnostics openai/codex#22336)
• Unified @ mentions for files, directories, plugins, and skills in TUI (0.131.0, Unified mentions in TUI openai/codex#19068)

View Full Changelog

0.133.0 Highlights

• Extensions can observe more lifecycle events (subagent start/stop, tool execution, turn metadata)
• Stronger Windows sandbox integration for permission profiles
• Plugin marketplace inspection improvements

0.132.0 Highlights

• Python SDK turn APIs support plain string input, return richer TurnResult
• TUI startup is faster (batched terminal capability probes)
• App-server turns preserve image fidelity

0.131.0 Highlights

• TUI: blended token usage in status line, permission/approval mode display
• Plugin workflows: marketplace CLI commands, version-aware sharing
• Python SDK renamed to openai-codex, integration coverage added

Bug Fixes (selected)

• TUI startup wrong working directory (0.133.0, Fix: TUI starting in wrong CWD openai/codex#23538)
• Plan-mode Shift+Enter no longer accidentally submits (fix(tui): preserve modified enter in plan questions openai/codex#23536)
• Goal continuations stop on usage limits/repeated blocker (0.132.0, goal: pause continuation loops on usage limits and blockers openai/codex#23094)
• Windows MSVC release binaries no longer depend on separate VC++ runtime DLLs (0.132.0, windows: link MSVC release binaries with static CRT openai/codex#22905)
• Windows sandbox deny-read parity (0.131.0, feat(sandbox): add Windows deny-read parity openai/codex#18202)

View Migration Guide (Codex)

No breaking changes affecting gh-aw workflow YAML, lock files, or runtime. Lock files were regenerated via make recompile. Verify behavior of:

• Workflows that pin codex via engine.id: codex
• Permission profile features if used

Update GitHub MCP Server

• Previous: v1.0.4 → New: v1.0.5
• Released: 2026-05-18

Key Features

• New tool: list_repo_collaborators (Add tool to list repo collaborators github-mcp-server#2477)
• New tool: Discussion comment write operations (feat: Add tool for discussion comment write operations github-mcp-server#2427)
• update_issue_type gains optional rationale parameter (Add optional rationale parameter to update_issue_type tool github-mcp-server#2458)
• Code search returns minimal results with text match snippets (feat: return minimal code search results with text match snippets github-mcp-server#2476)

Bug Fixes

• Missing pagination on get_reviews (fix: add missing pagination on get_reviews github-mcp-server#2367)
• Document Copilot Spaces PAT requirements (Document Copilot Spaces PAT requirements github-mcp-server#2479)

View Full Changelog

• Add ifc label for list_issues tool (Add ifc label for list_issues tool github-mcp-server#2453)
• Add ifc label for get_file_contents tool (Add ifc label for get_file_contents tool github-mcp-server#2454)
• Add ifc label for search_issues tool (Add ifc label for search_issues tool github-mcp-server#2456)
• Add ifc label for issue_read tool (Add ifc label for issue_read tool github-mcp-server#2457)
• Add ifc label for search_repositories tool (Add ifc label for search_repositories tool github-mcp-server#2459)
• Replace ingress IFC reader list with private marker (Replace ingress IFC reader list with private marker github-mcp-server#2478)
• Upgrade go-github to v0.87 (Upgrade go-github to v 0.87 github-mcp-server#2452)

Full diff: github/github-mcp-server@v1.0.4...v1.0.5

Update Claude Code

• Previous: 2.1.142 → New: 2.1.150
• Intermediate: 2.1.143, 2.1.144, 2.1.145, 2.1.146, 2.1.147, 2.1.148, 2.1.149

No public repository — release notes unavailable. Patch releases typically include bug fixes and incremental improvements. Risk: Low.

Update Copilot CLI

• Previous: 1.0.48 → New: 1.0.51
• Intermediate: 1.0.49, 1.0.50, 1.0.51

Repository is private; relying on NPM metadata. Patch releases with incremental improvements. Risk: Low. When using, verify that:

• MCPs still load correctly (tools.mcp configuration works end-to-end)
• /models does not silently fail when using a PAT

Impact Assessment

• Risk: Low — all updates are patch or minor releases with no documented breaking changes for gh-aw workflows
• Affects: Default CLI versions installed by gh-aw workflows for Claude Code, Copilot, Codex, and the GitHub MCP server Docker image
• Migration: None required; make recompile ran successfully twice and regenerated 234 lock files

Recommendations

• Update priority: Standard — incremental patches and feature additions
• Testing: Sanity-check a workflow run for each engine (claude, copilot, codex) and confirm GitHub MCP server tools list works after image pin update
• Rollout: Merge during normal review cycle

Package Links

• Claude Code NPM: https://www.npmjs.com/package/`@anthropic-ai/claude-code`
• Copilot CLI NPM: https://www.npmjs.com/package/`@github/copilot`
• Codex NPM: https://www.npmjs.com/package/`@openai/codex`
• Codex Releases: https://github.com/openai/codex/releases
• GitHub MCP Server Releases: https://github.com/github/github-mcp-server/releases
• MCP Gateway Releases: https://github.com/github/gh-aw-mcpg/releases

References:

• §26325644830

Generated by 🔢 CLI Version Checker · ● 9.9M · ◷

• expires on May 25, 2026, 6:28 AM UTC

[github-actions]

This issue is being closed as outdated. A newer issue has been created: #34386

View newer issue

---

This action was performed automatically by the CLI Version Checker workflow.