Repository navigation
[ca] CLI version update: Claude Code, Codex, Playwright MCP, Pi (2026-08-07) #51014
Description
CLI & Docker image version check — 2026-08-07
5 CLI tools have updates available; all Docker images (zizmor, poutine, actionlint, runner-guard, syft, grype, grant, yamllint) are unchanged (version and registry digest both match the pinned constants — no action needed there).
pkg/constants/version_constants.go has been updated and make recompile was run successfully (276/276 workflows compiled). @playwright/cli was intentionally not bumped — see below.
Summary
| Tool | Old | New | Risk |
|---|---|---|---|
| Claude Code | 2.1.222 | 2.1.224 | Low |
| OpenAI Codex | 0.146.0 | 0.147.0 | Medium |
| Playwright MCP | 0.0.78 | 0.0.79 | Low |
| Pi | 0.83.0 | 0.84.0 | Low |
| Playwright CLI | 0.1.17 | 0.1.18 (held, cooldown) | Medium |
| GitHub Copilot CLI | 1.0.78 | unchanged | — |
| GitHub MCP Server | v1.8.0 | unchanged | — |
| Playwright Browser | v1.62.1 | unchanged | — |
| MCP Gateway | v0.4.8 | unchanged | — |
Claude Code: 2.1.222 → 2.1.224
Two patch releases (2.1.223, 2.1.224). Claude Code has no public repository/changelog; npm metadata shows only version bumps published 2026-08-04 through 2026-08-07. No known breaking changes. Risk: Low.
OpenAI Codex: 0.146.0 → 0.147.0
Release notes (rust-v0.147.0, published 2026-08-07)
New Features
- Install portable Agent Plugins and search across local, personal, workspace, and remote plugin catalogs. (Support portable Agent Plugins throughout installation openai/codex#36544, Implement remote plugin search openai/codex#36409, Merge local plugins into plugin search results openai/codex#36919, Add Agent Plugins MCP config parsing openai/codex#36796)
- Organize conversations into persistent, manually ordered sections and browse long transcripts incrementally. (Add persisted sections for organizing threads openai/codex#35722, Add persisted manual ordering for thread sections openai/codex#36007, Add thread section management APIs openai/codex#36380, Paginate transcript history in the TUI openai/codex#36948, Paginate TUI transcript history openai/codex#36950)
- New
--approve-for-meCLI flag for automatically reviewed approvals. (Add an--approve-for-meCLI flag openai/codex#36373) - Import Cursor-managed skills and synchronize imported Claude/Cursor conversations without creating duplicates. (Migrate Cursor-managed skills into Codex openai/codex#36361, Sync updates to imported external agent sessions openai/codex#36356, Parse Claude and Cursor session records separately openai/codex#35623)
- Support the opt-in MCP 2026-07-28 protocol: paginated discovery, multi-round requests, non-blocking server startup. (Add MCP 2026-07-28 discovery support openai/codex#35724, Complete MCP 2026 client support openai/codex#35725, Expose cached MCP tools before server startup openai/codex#35590, Avoid blocking turns on optional MCP startup openai/codex#35742)
- Cached web search and remote conversation compaction for Amazon Bedrock. (Enable cached web search for Amazon Bedrock openai/codex#36938, Enable remote compaction for Amazon Bedrock openai/codex#36981)
Bug Fixes (Security-relevant)
- Redact secrets and complete bearer tokens from displayed commands and replayed conversation history. (Redact secrets from app-server command execution items openai/codex#36893, Improve bearer token secret redaction openai/codex#36908)
- Require explicit trust for unfamiliar local projects and enforce managed authentication restrictions before credentials are used. (Prompt before trusting local project directories openai/codex#36960, Enforce managed authentication requirements locally openai/codex#37132)
- Harden plugin isolation and deny network access when policy updates fail. (Enforce Agent Plugin runtime boundaries openai/codex#37027, Skip symlinks when installing plugins openai/codex#36967, Deny network access when an allow amendment fails openai/codex#36037)
Other Bug Fixes
- Prevent lost/stalled terminal input on focus return, MCP server init, or Ghostty keyboard shortcuts. (Preserve TUI input when terminal focus returns openai/codex#35649, Fix TUI input queue handling during MCP startup openai/codex#35957, Avoid requesting key-release events in Ghostty openai/codex#36834)
- Correct rendering/cursor positioning for Japanese characters, emoji, hyperlinks, viewport boundaries. (Preserve hyperlink cell widths during terminal diffing openai/codex#35960, Fix TUI layout for halfwidth Japanese sound marks openai/codex#35962, Keep textarea cursors and rendering inside the viewport openai/codex#37166)
- Properly interrupt Windows background processes and handle Windows filesystem paths consistently. (Terminate Windows non-TTY processes on interrupt openai/codex#35655, Normalize Windows namespace paths in path URIs openai/codex#35851, Make Windows path URI comparisons ASCII-case-insensitive openai/codex#37129)
Chores
- Upgrade MCP SDK to 3.0.0, Ratatui to 0.30.2, V8 to 150.4.0. (Upgrade rmcp to 3.0.0 openai/codex#36001, Upgrade Ratatui to 0.30.2 openai/codex#35959, Update rusty_v8 to 150.4.0 openai/codex#35831)
- Secure macOS release notarization via Azure Key Vault instead of exported private signing keys. (Use Azure Key Vault for macOS notarization openai/codex#37154)
- Breaking: Removed deprecated
codex exec --full-autoflag; use--sandbox workspace-writeinstead. (Remove legacy--full-autohandling fromcodex execopenai/codex#36054) - Stop publishing redundant Linux bundle archives; use standard
codex-package-<target>archives. (Stop publishing legacy Linux bundle archives openai/codex#36342)
Full changelog: openai/codex@rust-v0.146.0...rust-v0.147.0
Impact assessment: The removed codex exec --full-auto flag is a breaking CLI change — worth grepping gh-aw's Codex engine integration (pkg/workflow/codex_engine.go) and workflow templates for any use of --full-auto before release, since it would now error instead of falling back to --sandbox workspace-write. No such usage was found in a quick pass, but a dedicated review before merge is recommended. Risk: Medium (one breaking flag removal, otherwise additive).
Playwright MCP: 0.0.78 → 0.0.79
Tracks the microsoft/playwright monorepo release that also produced Playwright CLI v0.1.18 (see below) — the two packages share a release train, so the underlying MCP server changes are documented there: structured JSON snapshots, configurable snapshot.boxes, extension-relay reconnect/CDP profile fixes, and a Host/Origin validation hardening fix for the extension relay WebSocket upgrade. Risk: Low (bug fixes and additive config, no breaking API change for the gh-aw integration).
Pi: 0.83.0 → 0.84.0
No public repository; npm metadata shows only a version bump with no changelog detail available. Risk: Low.
Playwright CLI: 0.1.17 → 0.1.18 — HELD (cooldown)
v0.1.18 was published 2026-08-06T00:15:21Z (~30 hours before this check). pkg/constants/version_constants_test.go (TestDefaultPlaywrightCLIVersionOutsideCooldownWindow) enforces a 72-hour cooldown before a new Playwright CLI version can be pinned, so this update was not applied. It should become eligible around 2026-08-09T00:15:21Z.
Release notes (v0.1.18) for when the cooldown clears
Highlights
install --skillssupports-gto install into the home directory instead of the workspace. (feat(cli): add -g flag to install skills globally microsoft/playwright#42099, issue [Feature]:playwright-cli install --skillsshould support the-gflag microsoft/playwright#42087)- Generated code now supports Python, Java, and C# in addition to JavaScript. (feat(mcp): support python, java and csharp in --codegen microsoft/playwright#42106, issue Add support for Java, Python code as options with --codegen microsoft/playwright-mcp#1696)
- Configurable post-action settle delay. (feat(mcp): make post-action settle delay configurable microsoft/playwright#41924)
Fixes (security-relevant)
- Validate Host and Origin on CDP relay WebSocket upgrades — hardens the extension relay against unauthorized cross-origin connections. (fix(mcp): validate Host and Origin on CDP relay WebSocket upgrades microsoft/playwright#42103)
Other fixes
--jsonnow emits a structured page snapshot instead of a string-wrapped blob. (feat(mcp): emit structured snapshot in --json responses microsoft/playwright#42098, issue [CLI]: --json emits formatted text wrapped in a string, not structured data microsoft/playwright#42076)snapshot.boxesconfig to enable bounding boxes globally. (feat(mcp): add snapshot.boxes config to include bounding boxes in snapshots microsoft/playwright#42102, issue feat: add snapshot.boxes config to include bounding boxes in auto-snapshots microsoft/playwright-mcp#1695)uploadcommand now accepts multiple files. (fix(cli): accept multiple files in upload command microsoft/playwright#42057, issue [CLI]:uploadrejects a second file although it advertises "one or multiple files" microsoft/playwright#42047)- Failed commands now exit non-zero instead of 0. (fix(cli): exit with non-zero code when the tool result is an error microsoft/playwright#42042, issue [CLI]: playwright-cli exits with status 0 when the tool result has isError: true microsoft/playwright#42028)
- Extension relay reconnects after browser-extension disconnect;
attachtargets the correct Chrome profile. (fix(mcp): reconnect to the browser after disconnect microsoft/playwright#41966, fix(mcp): launch the Chrome profile that has the extension installed microsoft/playwright#41939) - Note: the v0.1.17 fix for
gotocrashing on privileged pages (`(redacted) was reverted upstream — the crash originates in the browser process itself and the fix only masked it. (Revert "fix(cli): don't crash the response when navigating closes the last tab" microsoft/playwright#41931)
Full release: https://github.com/microsoft/playwright-cli/releases/tag/v0.1.18
Docker images — no changes
All 8 images were checked for both version and registry digest drift. Every digest matched the value already pinned in pkg/cli/docker_images.go exactly:
| Image | Constant | Pinned version | Registry digest match |
|---|---|---|---|
| zizmor | ZizmorImage |
1.29.0 | ✓ matches |
| poutine | PoutineImage |
1.1.6 | ✓ matches |
| actionlint | ActionlintImage |
1.7.12 | ✓ matches |
| runner-guard | RunnerGuardImage |
3.1.5 | ✓ matches |
| syft | SyftImage |
v1.50.0 | ✓ matches |
| grype | GrypeImage |
v0.116.1 | ✓ matches |
| grant | GrantImage |
v0.6.8 | ✓ matches |
| yamllint | YamllintImage |
latest | ✓ matches |
No edits needed to pkg/cli/docker_images.go.
Changes made
pkg/constants/version_constants.go: bumpedDefaultClaudeCodeVersion,DefaultCodexVersion,DefaultPiVersion,DefaultPlaywrightMCPVersion.- Ran
make fmtandmake recompile(foreground) — 276/276 workflow lock files recompiled successfully with no new errors. pkg/constants/version_constants_test.gowas left unchanged since Playwright CLI was not bumped.- Not committed — this issue documents the change so it can be reviewed and merged via PR.
Next actions
- Review and merge the version bump for Claude Code, Codex, Playwright MCP, and Pi.
- Grep
pkg/workflow/codex_engine.goand workflow prompt templates for--full-autobefore merging the Codex bump (flag was removed in 0.147.0). - Re-run this check after 2026-08-09 to pick up Playwright CLI v0.1.18 once its cooldown clears.
- Regenerate wasm golden test fixtures referencing the old Claude Code version (
pkg/workflow/testdata/TestWasmGolden_AllEngines/claude.golden) viamake update-wasm-goldenas part of the follow-up PR.
References:
- https://github.com/openai/codex/releases/tag/rust-v0.147.0
- https://github.com/microsoft/playwright-cli/releases/tag/v0.1.18
Generated by 🔢 CLI Version Checker · agent · 103.9 AIC · ⊞ 11.8K · ◷
- expires on Aug 8, 2026, 10:01 PM UTC-08:00
Activity
github-actions commentedon Aug 7, 2026
🍪 Issue Monster selected this for Copilot
I have identified this issue as a good candidate for automated resolution and requested assignment to the Copilot coding agent.
If assignment succeeds, the Copilot coding agent will analyze the issue and create a pull request with the fix.
Om nom nom! 🍪