[github-actions]

Summary

Updates two newer stable CLI pins found during the scheduled version check:

• Claude Code: 2.1.312 -> 2.1.316 (npm metadata verified)
• OpenAI Codex: 0.165.0 -> 0.166.0 (npm metadata and release notes verified)

No active pull request covered these updates.

Evidence and impact

• Claude Code 2.1.316 is the current stable npm release. Claude Code has no public source repository, so the update is based on npm metadata and installed CLI help.
• Codex 0.166.0 is the current stable npm release, published 2026-10-29. The release includes transcript selection and navigation, codex queue --resume, codex doctor --network-only, model-catalog additions, and resume or runtime lifecycle fixes. Release notes: https://github.com/openai/codex/releases/tag/rust-v0.166.0
• Installed-version help was captured for both updated CLIs. Codex help confirms the current command surface, including doctor, queue, and exec-server.
• Playwright CLI 0.1.23 and MCP Gateway v0.5.1 were observed but not selected because both releases were inside the repository release-age safety window at check time. Copilot 1.0.105 was not pinned because the required authenticated release checksum could not be independently verified.
• Docker Hub image digests and yamllint were rechecked and matched existing pins. GHCR digest requests returned 404 from the anonymous registry endpoint, so no GHCR pin was changed.

Implementation

• Updated DefaultClaudeCodeVersion and DefaultCodexVersion.
• Updated the corresponding version contract test expectations.

Validation

• make recompile: passed; 353 workflows compiled successfully with existing warnings. Generated lock-file changes were discarded and are intentionally excluded from this PR.
• go test ./pkg/constants: passed.
• go test ./pkg/workflow -run Test(AWInfo.*Version|Codex.*Version|MCPGateway.*Version|Default.*Version): passed.
• make fmt: Go formatting completed, but the overall target exited non-zero because actions/setup/js/node_modules/.bin/prettier is absent.
• go test ./pkg/constants ./pkg/workflow: attempted; constants passed, while workflow had unrelated baseline failures in TestVerifyGitCredentials, TestBuildDynamicEnclaveExpiryScriptResolvesMinOfConfiguredAndJobExpiry, and TestUserFacingErrorsDontLeakInternals.

Commit

732046f chore: update Claude and Codex CLI versions

Generated by 🔢 CLI Version Checker · pi · gpt50 · ~6 AIC · ⌖ ~1 AIC · ⊞ 19.1K · ◷

• expires on Nov 2, 2026, 9:47 PM UTC-08:00

[pelikhan]

@copilot update cli version checker to apply a 3 day cooldown when resolving versions.

[Copilot]

@copilot update cli version checker to apply a 3 day cooldown when resolving versions.

Added a 72-hour cooldown for newer CLI, MCP server, and threat-detect releases, using npm publication timestamps or GitHub published_at; versions without verifiable dates are skipped. Commit: b298f56.