[ca] CLI Version Updates - 2026-07-24: Claude Code, Copilot CLI/SDK, Codex, Pi, GitHub MCP Server

[github-actions]

Overview

Daily CLI version check found 6 updates. All constants in pkg/constants/version_constants.go were bumped and make recompile ran twice (261/261 workflows, 0 errors) to refresh container SHA pins for the GitHub MCP Server image.

Updated Versions

Tool	Old	New	Risk
Claude Code	2.1.216	2.1.218	Low
Copilot CLI	1.0.73	1.0.74	Low
Copilot SDK	1.0.7	1.0.8	Low
Codex	0.144.6	0.145.0	Low
Pi	0.80.10	0.82.0	Low
GitHub MCP Server	v1.6.0	v1.7.0	Low

No change: Playwright MCP 0.0.78 · Playwright CLI 0.1.17 · Playwright Browser v1.61.1 · MCP Gateway v0.4.5

No --help / subcommand diffs were detected for any updated CLI (Copilot config/environment included).

---

Claude Code 2.1.216 → 2.1.218

Published 2026-07-23. No --help diff.

Features

• /code-review now runs as a background subagent
• Skills with context: fork run in the background by default
• Screen-reader announcements for deleted text
• (2.1.217) Emoji shortcode autocomplete (:heart:), concurrent subagent cap default 20; subagents no longer spawn nested subagents by default

Fixes

• Windows paths with \u-prefixed segments no longer corrupt into CJK characters
• Arrow-key edits confirm before discarding
• /context stale token reporting fixed
• MCP list / /mcp show HTTP status on connection failure
• (2.1.217) MCP truncated-output memory leak, Windows auto-update missing claude.exe, Opus 4.8 Bedrock auto-compact, corporate mTLS/proxy ignored in Desktop; login-expiry warning shortened to 3 days

No public repository; changelog via NPM metadata.

---

Copilot CLI 1.0.73 → 1.0.74

Published 2026-07-23 (commit 2b809c8). No --help, config, or environment diff.

Features

• Support for Open Plugin Spec v1 plugin manifests and mcp.json configuration
• New model gemini-3.6-flash
• New /model plan (/model --plan) command to select a model for plan mode
• First-run splash to opt into the default sandbox
• Plan mode allows session-folder planning artifacts while blocking file mutations outside the session folder

Fixes

• /mcp add and /mcp edit wizard preserves = characters in env variable values (base64 padding, secrets, tokens)
• IDE integration reconnects reliably during MCP server reloads or directory changes
• Multi-turn subagent timelines display prompts/responses in correct order after reopening /tasks
• Remote session uploads stop retrying permanent Mission Control 400/404 responses
• Oversized tool-result images downscaled to keep CAPI Responses requests working

Copilot SDK bumped 1.0.7 → 1.0.8 (tracks the CLI release).

---

Codex 0.144.6 → 0.145.0

Latest stable, published 2026-07-21. No --help diff. (Alpha builds 0.145.0-alpha.30 / 0.146.0-alpha.1 skipped.)

Features

• Paginated thread history + resume/search/memories/sub-agents (experimental)
• /import migrates Cursor and Claude Code settings/MCP/plugins/sessions/memories
• Experimental Amazon Bedrock login
• Audio inputs and realtime V3 conversations
• Stabilized multi-agent V2 (configurable sub-agent models/reasoning/concurrency)

Chores

• Bundled ripgrep bumped to 15.2.0

Full diff: openai/codex@rust-v0.144.0...rust-v0.145.0

---

Pi 0.80.10 → 0.82.0

Latest, 0.82.0 published 2026-07-24T06:12Z. No --help diff. No public GitHub repository; NPM metadata only.

---

GitHub MCP Server v1.6.0 → v1.7.0

Published 2026-07-23.

Highlights

• Server-to-server authentication for GitHub Apps over stdio (enterprise/cloud workloads) — feat(auth): add GitHub App server-to-server authentication for stdio github-mcp-server#2797
• Improved pagination for Projects tools — Paginate project item lookup across memberships github-mcp-server#2914 , Add node IDs to project resolver results github-mcp-server#2922 , Extract aliased project mutation primitive github-mcp-server#2923
• Incorporates MCP 2026-07-28 spec changes via go-sdk 1.7.0-pre.3 — build(deps): bump go-sdk to 1.7.0-pre.3 github-mcp-server#2907
• Lockdown mode enhancements (centralised author checks) — Centralise lockdown author checks github-mcp-server#2881

Full changelog (v1.6.0...v1.7.0)

• Bump go-sdk to 1.7.0-pre.2 and migrate OAuth to multi-round-trip elicitation — build(deps): bump go-sdk to 1.7.0-pre.2 and migrate OAuth to multi-round-trip elicitation github-mcp-server#2870
• Centralise lockdown author checks — Centralise lockdown author checks github-mcp-server#2881
• Embed precomputed data URIs for octicons — perf(octicons): embed precomputed data URIs github-mcp-server#2895
• Add DestructiveHint to label_write tool — fix(labels): add DestructiveHint to label_write tool github-mcp-server#2763
• Bump go-sdk to 1.7.0-pre.3 — build(deps): bump go-sdk to 1.7.0-pre.3 github-mcp-server#2907
• Paginate project item lookup across memberships — Paginate project item lookup across memberships github-mcp-server#2914
• Add opt-in intent-aware Copilot issue assignment tool — Add opt-in intent-aware Copilot issue assignment tool github-mcp-server#2909
• Add node IDs to project resolver results — Add node IDs to project resolver results github-mcp-server#2922
• Extract aliased project mutation primitive — Extract aliased project mutation primitive github-mcp-server#2923
• Use patched Go toolchain and UI dependency — build: use patched Go toolchain and UI dependency github-mcp-server#2927
• Add GitHub App server-to-server authentication for stdio — feat(auth): add GitHub App server-to-server authentication for stdio github-mcp-server#2797
• Add MCP App form deferral opt-out — Add MCP App form deferral opt-out github-mcp-server#2921
• Numerous dependabot bumps (chi, docker actions, golang 1.25.12-alpine, distroless, setup-go/node 7, oauth2 0.36.0)

New contributor: @loganrosen (#2927)

Impact: Docker image tag change; SHA pins refreshed via double recompile. Low risk — read-only usage in gh-aw workflows.

---

Next Actions

• Review and merge the accompanying constants + regenerated lock files.

References:

• Claude Code: https://www.npmjs.com/package/`@anthropic-ai/claude-code`
• Copilot CLI: https://github.com/github/copilot-cli/releases/tag/v1.0.74
• Codex: https://github.com/openai/codex/releases/tag/rust-v0.145.0
• GitHub MCP Server: https://github.com/github/github-mcp-server/releases/tag/v1.7.0

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

• models.dev

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "models.dev"

See Network Configuration for more information.

Generated by 🔢 CLI Version Checker · age00 · 164.2 AIC · ⌖ 37.9 AIC · ⊞ 8.6K · ◷

• expires on Jul 25, 2026, 10:22 PM UTC-08:00