[ca] CLI Version Updates: Claude 2.1.198, Copilot 1.0.68, Codex 0.142.5, Pi 0.80.3 (2026-07-02)

[github-actions]

CLI Version Updates — 2026-07-02

Five agentic CLI tools have newer stable versions. All updates applied to pkg/constants/version_constants.go and lock files regenerated via make recompile (258/258 compiled, 0 errors).

Tool	Old	New	Risk
Claude Code	2.1.195	2.1.198	Low
Copilot CLI	1.0.67	1.0.68	Low
Copilot SDK	1.0.4	1.0.5	Low
Codex	0.142.4	0.142.5	Low (security)
Pi	0.80.2	0.80.3	Low

No changes: Playwright MCP 0.0.77 · Playwright CLI 0.1.15 · GitHub MCP Server v1.5.0 · MCP Gateway v0.3.32 · Playwright Browser v1.61.1

Key changes

• Codex 0.142.5 — Security/bug fix: prevents full Responses WebSocket request payloads from being written to trace logs (backport). PR [codex] Backport websocket trace fix to release/0.142 openai/codex#30771. No --help changes.
• Copilot CLI 1.0.68 — --help restructured (diff vs last-cached 1.0.65, spanning 3 releases): config and environment moved from Commands: to Help Topics: (now accessed via copilot help config / copilot help environment rather than copilot config --help); skill and billing subcommands removed from top-level command list; --enable-memory flag and -r resume shortcut removed; --no-remote-export/--remote-export flags dropped (--remote retained). Config model list adds gpt-5.2, gpt-5.2-codex, gpt-4.1; new builtInAgents.rubberDuck setting. Repository is private — analysis from CLI help output only.
• Claude Code 2.1.198 — No --help diff vs 2.1.197. No public repository; NPM metadata only.
• Pi 0.80.3 — No --help diff vs 0.80.2. No public repository.
• Copilot SDK 1.0.5 — Companion bump to Copilot CLI 1.0.68.

Impact on gh-aw

Low across the board. The Copilot CLI subcommand restructuring (config/environment → help topics) does not affect gh-aw, which does not shell out to copilot config; the workflow's own cache tooling was updated to use copilot help config. The Codex change is a defensive log-hygiene fix with no behavioral impact on workflows.

Verification details

• make recompile: 258/258 workflows compiled, 0 errors, 209 warnings (pre-existing).
• Stale old-version references in *.lock.yml: 0 for all five updated tools.
• New references present: 60 locks → Claude 2.1.198; 1926 → Copilot 1.0.68; 26 → codex@0.142.5; 21 → pi-coding-agent@0.80.3; 64 → copilot-sdk@1.0.5.
• No pkg/workflow/js/*.js files modified. 255 files changed total.
• Help outputs and version-check summary saved to cache-memory.

References

• Codex 0.142.5 release: https://github.com/openai/codex/releases/tag/rust-v0.142.5
• Codex PR [safe-output-health] Safe Output Health Report - 2026-05-07 #30771: [codex] Backport websocket trace fix to release/0.142 openai/codex#30771

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

• awmgmcpg

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "awmgmcpg"

See Network Configuration for more information.

Generated by 🔢 CLI Version Checker · 129.2 AIC · ⌖ 31.3 AIC · ⊞ 8.5K · ◷

• expires on Jul 3, 2026, 10:46 PM UTC-08:00