[ca] CLI Version Updates: Claude Code 2.1.201, MCP Gateway v0.3.33

[github-actions]

Overview

Two CLI/component version updates detected and applied to pkg/constants/version_constants.go. Recompiled with make build && make recompile && make recompile (double recompile required for MCP Gateway container SHA pin refresh).

Component	Old	New	Published	Risk
Claude Code	2.1.198	2.1.201	2026-07-03 20:52Z	Low
MCP Gateway (gh-aw-mcpg)	v0.3.32	v0.3.33	2026-07-03 03:45Z	Low

No changes for: Copilot CLI 1.0.68, Copilot SDK 1.0.5, Codex 0.142.5, Pi 0.80.3, GitHub MCP Server v1.5.0, Playwright MCP 0.0.77, Playwright CLI 0.1.15, Playwright Browser v1.61.1.

---

Claude Code: 2.1.198 → 2.1.201

Three intermediate npm releases:

• 2.1.199 — pub 2026-07-02 17:33Z
• 2.1.200 — pub 2026-07-03 04:33Z
• 2.1.201 — pub 2026-07-03 20:52Z

CLI --help diff: identical to both cached 2.1.198 (main baseline) and 2.1.199 — no new/removed flags or subcommands. No public repository; relying on npm metadata + help output. Impact: none on gh-aw generated workflows (patch releases, no surface change). Categorized: Fixes/internal only. Risk: Low.

---

MCP Gateway: v0.3.32 → v0.3.33

Docker image ghcr.io/github/gh-aw-mcpg. Used as the default sandbox.agent container. ~45 PRs — predominantly internal refactors, added unit tests, and debug-logging. Notable changes:

• Breaking (spec): removed headers from OTEL JSON stdin config per OTEL spec §4.1.3.7 v1.14.0 — fix: remove headers from OTEL JSON stdin config (spec §4.1.3.7 v1.14.0 breaking change) gh-aw-mcpg#8500
• Feature: gojq middleware improvements — caching, panic-on-broken-init, secureCompileOpts — feat(middleware): gojq improvements — caching, panic-on-broken-init, secureCompileOpts gh-aw-mcpg#8280
• Fix: deduplicate write paths in label_response — fix: deduplicate write paths in label_response gh-aw-mcpg#8345
• Fix: WASM compilation cache cleanup in run() — fix: add missing WASM compilation cache cleanup in run() gh-aw-mcpg#8424
• Refactor (guard): reaction_kind: &str → ReactionKind enum; collapse issue_dependency_read double guard — refactor(rust-guard): replace reaction_kind: &str with ReactionKind enum; collapse issue_dependency_read double guard gh-aw-mcpg#8279
• Perf: reduce allocations in formatLogLine with sync.Pool — [Repo Assist] perf(logger): reduce allocations in formatLogLine with sync.Pool gh-aw-mcpg#8493
• Docs: example config api_key → agent_id — Replace deprecated api_key with agent_id in example config gh-aw-mcpg#8342

Impact: The OTEL headers removal only affects workflows that pass OTEL headers via the gateway's JSON stdin config; gh-aw does not emit that field, so no generated-workflow impact. Risk: Low.

Full MCP Gateway v0.3.33 changelog

Full changelog: github/gh-aw-mcpg@v0.3.32...v0.3.33

Selected PRs (all references converted to full URLs):

• [log] Add debug logging to FilterAndConvertLabeledData gh-aw-mcpg#8250 [log] debug logging to FilterAndConvertLabeledData
• docs: fix three documentation discrepancies from nightly reconciliation gh-aw-mcpg#8264 docs: fix three documentation discrepancies
• [test-improver] Improve tests for proxy handler gh-aw-mcpg#8251 [test-improver] improve tests for proxy handler
• [Repo Assist] test(guards): add unit tests for issue_integrity and pr_integrity gh-aw-mcpg#8291 test(guards): unit tests for issue_integrity and pr_integrity
• refactor(rust-guard): replace reaction_kind: &str with ReactionKind enum; collapse issue_dependency_read double guard gh-aw-mcpg#8279 refactor(rust-guard): ReactionKind enum
• feat(middleware): gojq improvements — caching, panic-on-broken-init, secureCompileOpts gh-aw-mcpg#8280 feat(middleware): gojq caching, secureCompileOpts
• Replace deprecated api_key with agent_id in example config gh-aw-mcpg#8342 replace deprecated api_key with agent_id in example config
• fix: deduplicate write paths in label_response gh-aw-mcpg#8345 fix: deduplicate write paths in label_response
• Extract shared HTTP response body read helpers to httputil package gh-aw-mcpg#8346 extract shared HTTP response body read helpers
• Replace raw fmt.Errorf with RequiredStringField and NonEmptyString validators gh-aw-mcpg#8356 replace raw fmt.Errorf with validators
• fix: add missing WASM compilation cache cleanup in run() gh-aw-mcpg#8424 fix: WASM compilation cache cleanup in run()
• Deduplicate /close lifecycle logging and align shutdown event messages gh-aw-mcpg#8425 deduplicate /close lifecycle logging
• [Repo Assist] perf(logger): reduce allocations in formatLogLine with sync.Pool gh-aw-mcpg#8493 perf(logger): reduce allocations with sync.Pool
• fix: remove headers from OTEL JSON stdin config (spec §4.1.3.7 v1.14.0 breaking change) gh-aw-mcpg#8500 fix: remove headers from OTEL JSON stdin config (spec breaking)
• config: use ParseError.ErrorWithUsage() for richer TOML startup diagnostics gh-aw-mcpg#8505 config: richer TOML startup diagnostics
• refactor(logger): replace 12 boilerplate log-level wrappers with var aliases gh-aw-mcpg#8502 refactor(logger): var aliases for log-level wrappers
• refactor(rust-guard): extract resolve_integrity_level helper + add promotion/demotion label tests gh-aw-mcpg#8506 refactor(rust-guard): resolve_integrity_level helper
• refactor: semantic function clustering improvements (Finding 1–4) gh-aw-mcpg#8507 refactor: semantic function clustering

---

Build Verification

• make build && make recompile && make recompile → 258/258 compiled, 0 errors, 209 warnings (all pre-existing)
• 0 stale references (2.1.198 / v0.3.32 fully removed from lock files)
• 60 lock files reference Claude 2.1.201; 258 reference MCPG v0.3.33
• No pkg/workflow/js/*.js files modified
• 259 files changed: 258 .lock.yml + pkg/constants/version_constants.go

Next Actions

• Review and merge the version bump. No migration required.

References:

• §28697688676

Warning

Firewall blocked 2 domains

The following domains were blocked by the firewall during workflow execution:

• awmgmcpg
• models.dev

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "awmgmcpg"
    - "models.dev"

See Network Configuration for more information.

Generated by 🔢 CLI Version Checker · 130.3 AIC · ⌖ 38.9 AIC · ⊞ 8.5K · ◷

• expires on Jul 5, 2026, 10:35 PM UTC-08:00

[github-actions]

🍪 Issue Monster selected this for Copilot

I've identified this issue as a good candidate for automated resolution and requested assignment to the Copilot coding agent.

If assignment succeeds, the Copilot coding agent will analyze the issue and create a pull request with the fix.

Om nom nom! 🍪

🍪 Om nom nom by Issue Monster · 1.69 AIC · ⌖ 5.53 AIC · ⊞ 8.6K · ◷