chore: bump CLI tool versions (Claude 2.1.178, Copilot 1.0.63, Codex 0.140.0, Pi 0.79.4, GH MCP Server v1.3.0, Playwright v1.61.0)#39624
Conversation
… Codex 0.140.0, Pi 0.79.4, GH MCP Server v1.3.0, Playwright MCP 0.0.76, CLI 0.1.14, Browser v1.61.0 Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
|
🚀 Smoke Pi MISSION COMPLETE! Pi delivered. 🥧 |
|
✅ All tools validated successfully! Agent Container Smoke Test confirms agent container is ready. |
|
💫 TO BE CONTINUED... Smoke Claude failed to deliver outputs! Our hero faces unexpected challenges... |
|
🚀 Smoke Gemini MISSION COMPLETE! Gemini has spoken. ✨ |
|
✨ The prophecy is fulfilled... Smoke Codex has completed its mystical journey. The stars align. 🌟 |
|
🚀 Smoke Antigravity MISSION COMPLETE! Antigravity has spoken. ✨ |
|
📰 BREAKING: Smoke Copilot - AOAI (apikey) is now investigating this pull request. Sources say the story is developing... |
|
📰 BREAKING: Smoke Copilot is now investigating this pull request. Sources say the story is developing... |
|
📰 BREAKING: Smoke Copilot - AOAI (Entra) is now investigating this pull request. Sources say the story is developing... |
Agent Container Tool Check
Result: 12/12 tools available ✅ Overall Status: PASS
|
Smoke Test: Gemini
Overall Status: FAIL Warning Firewall blocked 1 domainThe following domain was blocked by the firewall during workflow execution:
network:
allowed:
- defaults
- "localhost"See Network Configuration for more information.
|
|
Smoke Test: FAIL Warning Firewall blocked 6 domainsThe following domains were blocked by the firewall during workflow execution:
network:
allowed:
- defaults
- "accounts.google.com"
- "android.clients.google.com"
- "clients2.google.com"
- "contentautofill.googleapis.com"
- "safebrowsingohttpgateway.googleapis.com"
- "www.google.com"See Network Configuration for more information.
|
Comment MemoryNote This comment is managed by comment memory.It stores persistent context for this thread in the code block at the top of this comment. Warning Firewall blocked 6 domainsThe following domains were blocked by the firewall during workflow execution:
network:
allowed:
- defaults
- "accounts.google.com"
- "android.clients.google.com"
- "clients2.google.com"
- "contentautofill.googleapis.com"
- "safebrowsingohttpgateway.googleapis.com"
- "www.google.com"See Network Configuration for more information.
|
|
Smoke Test: Claude — Run 27638038964 Core #1-12: ✅ all passed Overall: PARTIAL (skipped #16 no unresolved threads, #19 no safe test PR) Warning Firewall blocked 6 domainsThe following domains were blocked by the firewall during workflow execution:
network:
allowed:
- defaults
- "accounts.google.com"
- "android.clients.google.com"
- "clients2.google.com"
- "contentautofill.googleapis.com"
- "safebrowsingohttpgateway.googleapis.com"
- "www.google.com"See Network Configuration for more information.
|
|
Smoke Tests:
|
|
Smoke run 27638146469. Warning Firewall blocked 6 domainsThe following domains were blocked by the firewall during workflow execution:
network:
allowed:
- defaults
- "accounts.google.com"
- "android.clients.google.com"
- "clients2.google.com"
- "contentautofill.googleapis.com"
- "safebrowsingohttpgateway.googleapis.com"
- "www.google.com"See Network Configuration for more information.
|
Comment MemoryNote This comment is managed by comment memory.It stores persistent context for this thread in the code block at the top of this comment. Warning Firewall blocked 6 domainsThe following domains were blocked by the firewall during workflow execution:
network:
allowed:
- defaults
- "accounts.google.com"
- "android.clients.google.com"
- "clients2.google.com"
- "contentautofill.googleapis.com"
- "safebrowsingohttpgateway.googleapis.com"
- "www.google.com"See Network Configuration for more information.
|
![github-actions[bot]](https://avatars.githubusercontent.com/in/15368?s=60&v=4){kind=small}
There was a problem hiding this comment.
Smoke cave review done.
Warning
Firewall blocked 6 domains
The following domains were blocked by the firewall during workflow execution:
accounts.google.comandroid.clients.google.comclients2.google.comcontentautofill.googleapis.comsafebrowsingohttpgateway.googleapis.comwww.google.com
To allow these domains, add them to the
network.allowedlist in your workflow frontmatter:
network:
allowed:
- defaults
- "accounts.google.com"
- "android.clients.google.com"
- "clients2.google.com"
- "contentautofill.googleapis.com"
- "safebrowsingohttpgateway.googleapis.com"
- "www.google.com"See Network Configuration for more information.
📰 BREAKING: Report filed by Smoke Copilot
There was a problem hiding this comment.
Pull request overview
This PR updates gh-aw’s pinned/default versions for several engine CLIs and supporting tooling, refreshes the GitHub MCP Server container digest pin, and regenerates the compiled workflow + wasm golden artifacts to reflect the new defaults.
Changes:
- Bump default engine/tool versions (Claude Code, Copilot CLI + SDK, Codex, Pi, GitHub MCP Server, Playwright MCP/CLI/Browser).
- Add the GitHub MCP Server
v1.3.0image digest pin to the action/container pin datasets. - Recompile workflows and update wasm golden outputs to match the new version strings and container references.
Show a summary per file
| File | Description |
|---|---|
pkg/constants/version_constants.go |
Updates the canonical default versions used across compilation/runtime behavior. |
pkg/workflow/data/action_pins.json |
Adds the new GitHub MCP Server v1.3.0 container pin (tag → digest). |
pkg/actionpins/data/action_pins.json |
Mirrors the updated container pin data for action pin packaging/consumption. |
.github/aw/actions-lock.json |
Updates the repo’s lock data with the new GitHub MCP Server v1.3.0 digest pin. |
.changeset/patch-bump-cli-versions-2026-06-16.md |
Records the version bump as a patch changeset. |
pkg/workflow/testdata/TestWasmGolden_CompileFixtures/with-imports.golden |
Refreshes wasm golden output for fixture compilation with new versions/pins. |
pkg/workflow/testdata/TestWasmGolden_CompileFixtures/smoke-copilot.golden |
Refreshes wasm golden output for Copilot smoke fixture with new versions/pins. |
pkg/workflow/testdata/TestWasmGolden_CompileFixtures/playwright-cli-mode.golden |
Refreshes wasm golden output for Playwright CLI-mode fixture with new versions/pins. |
pkg/workflow/testdata/TestWasmGolden_CompileFixtures/basic-copilot.golden |
Refreshes wasm golden output for basic Copilot fixture with new versions/pins. |
pkg/workflow/testdata/TestWasmGolden_AllEngines/pi.golden |
Refreshes wasm golden output for Pi engine with new version/pins. |
pkg/workflow/testdata/TestWasmGolden_AllEngines/gemini.golden |
Updates GitHub MCP Server container references in Gemini engine golden output. |
pkg/workflow/testdata/TestWasmGolden_AllEngines/copilot.golden |
Refreshes Copilot engine golden output for new Copilot + GitHub MCP Server versions. |
pkg/workflow/testdata/TestWasmGolden_AllEngines/codex.golden |
Refreshes Codex engine golden output for new Codex + GitHub MCP Server versions. |
pkg/workflow/testdata/TestWasmGolden_AllEngines/claude.golden |
Refreshes Claude engine golden output for new Claude + GitHub MCP Server versions. |
.github/workflows/test-workflow.lock.yml |
Recompiled workflow lock updating engine versions and GitHub MCP Server pin to v1.3.0@sha256:…. |
.github/workflows/smoke-opencode.lock.yml |
Recompiled workflow lock updating GitHub MCP Server pin to v1.3.0@sha256:…. |
.github/workflows/smoke-gemini.lock.yml |
Recompiled workflow lock updating GitHub MCP Server pin to v1.3.0@sha256:…. |
.github/workflows/smoke-crush.lock.yml |
Recompiled workflow lock updating GitHub MCP Server pin to v1.3.0@sha256:…. |
.github/workflows/smoke-ci.lock.yml |
Recompiled workflow lock updating Copilot version + GitHub MCP Server pin to v1.3.0@sha256:…. |
.github/workflows/smoke-antigravity.lock.yml |
Recompiled workflow lock updating GitHub MCP Server pin to v1.3.0@sha256:…. |
.github/workflows/schema-feature-coverage.lock.yml |
Recompiled workflow lock updating Codex version metadata/install steps to 0.140.0. |
.github/workflows/hippo-embed.lock.yml |
Recompiled workflow lock updating Copilot version + GitHub MCP Server pin to v1.3.0@sha256:…. |
.github/workflows/github-remote-mcp-auth-test.lock.yml |
Recompiled workflow lock updating Copilot version metadata/install steps. |
.github/workflows/github-mcp-tools-report.lock.yml |
Recompiled workflow lock updating Claude version metadata/install steps. |
.github/workflows/firewall.lock.yml |
Recompiled workflow lock updating Copilot + Copilot SDK versions and GitHub MCP Server pin. |
.github/workflows/example-permissions-warning.lock.yml |
Recompiled workflow lock updating Copilot version + GitHub MCP Server pin. |
.github/workflows/daily-choice-test.lock.yml |
Recompiled workflow lock updating Claude version + GitHub MCP Server pin. |
.github/workflows/copilot-pr-merged-report.lock.yml |
Recompiled workflow lock updating Copilot + Copilot SDK versions. |
.github/workflows/codex-github-remote-mcp-test.lock.yml |
Recompiled workflow lock updating Codex version metadata/install steps. |
.github/workflows/bot-detection.lock.yml |
Recompiled workflow lock updating Copilot version + GitHub MCP Server pin. |
.github/workflows/agentic-token-optimizer.lock.yml |
Recompiled workflow lock updating Copilot version + GitHub MCP Server pin. |
.github/workflows/ace-editor.lock.yml |
Recompiled workflow lock updating Copilot version + GitHub MCP Server pin. |
Copilot's findings
Tip
Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
- Files reviewed: 78/263 changed files
- Comments generated: 2
| // DefaultPlaywrightCLIVersion is the default version of the @playwright/cli package | ||
| // Used when tools.playwright.mode is "cli" to install the CLI tool instead of the MCP server. | ||
| const DefaultPlaywrightCLIVersion Version = "0.1.13" | ||
| const DefaultPlaywrightCLIVersion Version = "0.1.14" |
|
|
||
| // DefaultCopilotVersion is the default version of the GitHub Copilot CLI. | ||
| // | ||
| // When unpinning or upgrading this version, verify: | ||
| // - MCPs are not blocked from loading (tools.mcp configuration still works end-to-end) | ||
| // - /models does not silently fail on PATs (check that model listing works with PAT auth) | ||
| const DefaultCopilotVersion Version = "1.0.60" | ||
| const DefaultCopilotVersion Version = "1.0.63" |
|
Smoke test results: ✅1,2,4-6,8-10,15; ❌3,7,11-14; Overall FAIL. Warning Firewall blocked 6 domainsThe following domains were blocked by the firewall during workflow execution:
network:
allowed:
- defaults
- "accounts.google.com"
- "android.clients.google.com"
- "clients2.google.com"
- "contentautofill.googleapis.com"
- "safebrowsingohttpgateway.googleapis.com"
- "www.google.com"See Network Configuration for more information.
|
Comment MemoryNote This comment is managed by comment memory.It stores persistent context for this thread in the code block at the top of this comment. Warning Firewall blocked 6 domainsThe following domains were blocked by the firewall during workflow execution:
network:
allowed:
- defaults
- "accounts.google.com"
- "android.clients.google.com"
- "clients2.google.com"
- "contentautofill.googleapis.com"
- "safebrowsingohttpgateway.googleapis.com"
- "www.google.com"See Network Configuration for more information.
|
There was a problem hiding this comment.
Warning
Firewall blocked 6 domains
The following domains were blocked by the firewall during workflow execution:
accounts.google.comandroid.clients.google.comclients2.google.comcontentautofill.googleapis.comsafebrowsingohttpgateway.googleapis.comwww.google.com
To allow these domains, add them to the
network.allowedlist in your workflow frontmatter:
network:
allowed:
- defaults
- "accounts.google.com"
- "android.clients.google.com"
- "clients2.google.com"
- "contentautofill.googleapis.com"
- "safebrowsingohttpgateway.googleapis.com"
- "www.google.com"See Network Configuration for more information.
📰 BREAKING: Report filed by Smoke Copilot - AOAI (Entra)
Weekly CLI version check (2026-06-16) found 10 tools newer than pinned defaults; supersedes #39194.
Version bumps (
pkg/constants/version_constants.go)DefaultClaudeCodeVersionDefaultCopilotVersionDefaultCopilotSDKVersionDefaultCodexVersionDefaultPiVersionDefaultGitHubMCPServerVersionDefaultPlaywrightMCPVersionDefaultPlaywrightCLIVersionDefaultPlaywrightBrowserVersionDefaultMCPGatewayVersionwas already at v0.3.26.Container pins
Resolved and embedded SHA digest for the new
github-mcp-server:v1.3.0image:Downstream
actions-lock.jsonupdated with new pin; synced topkg/actionpins/data/✨ PR Review Safe Output Test - Run 27638038964
Warning
Firewall blocked 6 domains
The following domains were blocked by the firewall during workflow execution:
accounts.google.comandroid.clients.google.comclients2.google.comcontentautofill.googleapis.comsafebrowsingohttpgateway.googleapis.comwww.google.comSee Network Configuration for more information.