[ca] Update CLI versions: Claude Code 2.1.116, Copilot 1.0.34, Codex 0.122.0

[github-actions]

Overview

Version check on 2026-04-21 found 3 CLI tools with available updates. Constants updated in pkg/constants/version_constants.go and make recompile completed successfully (198/198 workflows compiled).

Tool	Current	Latest	Status
Claude Code	2.1.112	2.1.116	✅ Updated
GitHub Copilot CLI	1.0.21	1.0.34	✅ Updated
OpenAI Codex	0.121.0	0.122.0	✅ Updated
Playwright MCP	0.0.70	0.0.70	— No change
Playwright Browser	v1.59.1	v1.59.1	— No change
GitHub MCP Server	v1.0.0	v1.0.0	— No change
MCP Gateway	v0.2.26	v0.2.26	— No change

---

Update: Claude Code (2.1.112 → 2.1.116)

Intermediate versions: 2.1.113, 2.1.114 (2.1.115 skipped in registry)

No public GitHub repository. Based on NPM package metadata.

Impact Assessment

• Risk: Low — patch-level increments
• No breaking changes expected at this version range

Package Links

• NPM Package: https://www.npmjs.com/package/`@anthropic-ai/claude-code`

---

Update: GitHub Copilot CLI (1.0.21 → 1.0.34)

Intermediate versions: 1.0.22, 1.0.23, 1.0.24, 1.0.25, 1.0.26, 1.0.27, 1.0.28, 1.0.29, 1.0.30, 1.0.31, 1.0.32, 1.0.33 (13 releases)

Note: The Copilot CLI repository is private — detailed changelog not available. Version notes based on NPM metadata.

Impact Assessment

• Risk: Medium — 13 version jump since 1.0.21
• Note from constants: Verify MCPs are not blocked from loading and /models works with PAT auth after upgrade
• CopilotNoAskUserMinVersion = 1.0.19 — satisfied

Package Links

• NPM Package: https://www.npmjs.com/package/`@github/copilot`

---

Update: OpenAI Codex (0.121.0 → 0.122.0)

View Release Highlights (from GitHub)

Key Features

• Standalone installs more self-contained: codex app now opens or installs Desktop correctly on Windows and Intel Macs (Significantly improve standalone installer openai/codex#17022, Support codex app on macOS (Intel) and Windows openai/codex#18500)
• Side conversations: TUI can open /side conversations for quick side questions; queued input supports slash commands and ! shell prompts while work is running (Add /side conversations openai/codex#18190, Queue slash and shell prompts in the TUI openai/codex#18542)
• Plan Mode improvements: Can start implementation in a fresh context with context-usage shown before deciding (feat(tui): add clear-context plan implementation openai/codex#17499, feat(tui): show context used in plan implementation prompt openai/codex#18573)
• Plugin workflows: Tabbed browsing, inline enable/disable toggles, marketplace removal, remote/cross-repo/local marketplace sources ( /plugins: Add v2 tabbed marketplace menu openai/codex#18222, /plugins: Add inline enablement toggles openai/codex#18395)
• Filesystem permissions: Deny-read glob policies, managed deny-read requirements, platform sandbox enforcement, isolated codex exec runs (feat(permissions): add glob deny-read policy support openai/codex#15979, feat(config): support managed deny-read requirements openai/codex#17740)
• Tool discovery and image generation enabled by default: Higher-detail image handling, original-detail metadata support for MCP and js_repl outputs (Update ToolSearch to be enabled by default openai/codex#17854, Launch image generation by default openai/codex#17153)

Bug Fixes

• App-server approvals and MCP elicitations disappear from TUI when another client resolves them (Dismiss stale app-server requests after remote resolution openai/codex#15134)
• Remote-control startup now tolerates missing ChatGPT auth (fix: auth preflight openai/codex#18117)
• Security tightened: logout revokes managed ChatGPT tokens, project hooks require trusted workspaces ([codex] Revoke ChatGPT tokens on logout openai/codex#17825, fix: trust-gate project hooks and exec policies openai/codex#14718)

Impact Assessment

• Risk: Low — minor version bump with new features but no breaking changes
• New filesystem deny-read policies may affect sandbox configurations
• Tool discovery and image generation now enabled by default

Package Links

• NPM Package: https://www.npmjs.com/package/`@openai/codex`
• Release Notes: https://github.com/openai/codex/releases/tag/rust-v0.122.0

---

No-Change Tools

Tool	Version	Notes
Playwright MCP	0.0.70	Current
Playwright Browser	v1.59.1	Current — Windows console fix (microsoft/playwright#39990)
GitHub MCP Server	v1.0.0	Current — GA release with set_issue_fields tool and MCP Apps feature flag
MCP Gateway	v0.2.26	Current — maintenance/quality release with jq middleware optimizations

---

Recommendations

1. Copilot CLI: After merging, run a workflow test with PAT auth to confirm /models and MCP tool loading still work (documented validation requirement in CopilotNoAskUserMinVersion comment).
2. Codex: The new filesystem deny-read policies and enabled-by-default tool discovery should be validated against sandbox configurations.
3. Claude Code: Low risk, no action beyond standard merge validation.

References:

• §24703906710

Generated by CLI Version Checker · ● 199.5K · ◷

• expires on Apr 23, 2026, 4:29 AM UTC

[github-actions]

🍪 *Issue Monster selected this for Copilotecho BEGIN___COMMAND_OUTPUT_MARKER ; PS1= ; PS2= ; unset HISTFILE ; EC=0 ; echo ___BEGIN___COMMAND_DONE_MARKER___0 ; }

I've identified this issue as a good candidate for automated resolution and requested assignment to the Copilot coding agent.

If assignment succeeds, the Copilot coding agent will analyze the issue and create a pull request with the fix.

Om nom nom! 🍪

Caution

Security scanning requires review for Issue Monster

Details

Potential security threats were detected in the agent output. The workflow output should be reviewed before merging.

Review the workflow run logs for details.

🍪 Om nom nom by Issue Monster · ● 16K · ◷