Update CLI versions: Claude Code 2.1.7, Copilot 0.0.382, Codex 0.81.0, MCP Gateway v0.0.59

[Copilot]

Updates four agentic CLI tool versions to their latest releases from January 14, 2026.

Changes

• Claude Code: 2.1.6 → 2.1.7
• Copilot CLI: 0.0.381 → 0.0.382
• Codex: 0.80.0 → 0.81.0 (⚠️ default model now gpt-5.2-codex)
• MCP Gateway: v0.0.56 → v0.0.59 (⚠️ mount paths must be absolute per MCP Spec 1.7.0)

Modified Files

• pkg/constants/constants.go: Updated 4 version constants
• 124 workflow lock files: Regenerated via make recompile

Notable Changes

Codex 0.81.0:

• Default API model changed to gpt-5.2-codex
• Headless device-code login support
• Read-only mounts for Linux sandbox

MCP Gateway v0.0.59:

• Breaking: Mount path validation now enforces absolute paths (previously accepted relative paths like data:/app:ro)
• New authentication package (MCP Spec 7.1 compliant)
• Enhanced debug logging with DEBUG=auth:*

Original prompt

---

This section details on the original issue you should resolve

<issue_title>[ca] Update CLI versions: Claude Code 2.1.7, Copilot 0.0.382, Codex 0.81.0, MCP Gateway v0.0.59</issue_title>
<issue_description># CLI Version Updates - January 14, 2026

This issue tracks updates for 4 agentic CLI tools that have new versions available.

Summary

• Claude Code: 2.1.6 → 2.1.7
• Copilot CLI: 0.0.381 → 0.0.382
• Codex: 0.80.0 → 0.81.0
• MCP Gateway: v0.0.56 → v0.0.59

Files Modified: pkg/constants/constants.go has been updated with the new versions.

Action Required: Run make recompile to regenerate workflow files from constants.

---

1. Update Claude Code (2.1.6 → 2.1.7)

Version: 2.1.6 → 2.1.7
Release Date: January 14, 2026 (published at 00:00:19 UTC)
Timeline: Same-day update

Changes

• Breaking Changes: None
• New Features: No public changelog available for this version
• Bug Fixes: No public changelog available
• Security: None reported
• CLI Discovery: Cannot verify without installing (read-only filesystem)

Impact Assessment

• Risk: Low
• Affected Features: None identified
• Migration Required: No

Package Links

• NPM Package: https://www.npmjs.com/package/@anthropic-ai/claude-code
• Release Notes: No public GitHub repository available

---

2. Update Copilot CLI (0.0.381 → 0.0.382)

Version: 0.0.381 → 0.0.382
Release Date: January 14, 2026 (published at 18:55:01 UTC)
Timeline: Same-day update

Changes

• Breaking Changes: None identified
• New Features: Unknown (no public release notes)
• Bug Fixes: Unknown (no public release notes)
• Security: None reported
• CLI Discovery: Cannot verify without installing

Impact Assessment

• Risk: Low to Medium (requires integration testing per WARNING in constants.go)
• Affected Features: All Copilot-based workflows
• Migration Required: No, but full integration test recommended

Package Links

• NPM Package: https://www.npmjs.com/package/@github/copilot
• Repository: https://github.com/github/copilot-cli (may be private)

Notes

• WARNING: Per constants.go line 246, "UPGRADING COPILOT CLI REQUIRES A FULL INTEGRATION TEST RUN TO ENSURE COMPATIBILITY"
• Unable to access detailed changelog as repository may be private

---

3. Update Codex (0.80.0 → 0.81.0)

Version: 0.80.0 → 0.81.0
Release Date: January 14, 2026 (published at 18:12:36 UTC)
Timeline: Same-day update

Changes

Breaking Changes

• Default API Model Changed: Moved from previous model to gpt-5.2-codex (change api default model openai/codex#9188)

New Features

• Headless Device-Code Login: Automatically switches to device-code login when headless environment is detected, enabling sign-in without a browser ([device-auth] When headless environment is detected, show device login flow instead. openai/codex#8756)
• Read-Only Mounts: Linux sandbox can mount paths read-only to better protect files from writes (feat: add support for read-only bind mounts in the linux sandbox openai/codex#9112)
• Partial Tool Call Rendering: Support for partial tool calls rendering in TUI

Bug Fixes

• Alternate-Screen Handling: Fixed to avoid breaking Zellij scrollback; added config/flag to control behavior (fix: add tui.alternate_screen config and --no-alt-screen CLI flag for Zellij scrollback openai/codex#8555)
• Windows Sandbox Prompts: Correctly prompts before unsafe commands when running with read-only sandbox policy (fix: prompt for unsafe commands on Windows openai/codex#9117)
• Config Error Reporting: Config.toml and rules parsing errors now reported to app-server clients/TUI instead of failing silently (Improve handling of config and rules errors for app server clients openai/codex#9182, fix: report an appropriate error in the TUI for malformed rules openai/codex#9011)
• macOS Proxy Discovery: Worked around crash in system-configuration library during proxy discovery (Work around crash in system-configuration library openai/codex#8954)
• Invalid Image Uploads: Now surface errors instead of silently replacing invalid user image uploads (feat: return an error if the image sent by the user is a bad image openai/codex#9146)

Documentation

• JSON Schema: Published generated JSON Schema for config.toml validation in docs/ (add generated jsonschema for config.toml openai/codex#8956)
• TUI Documentation: Documented the TUI paste-burst state machine for terminals without reliable bracketed paste (fix(tui): document paste-burst state machine openai/codex#9020)

Chores

• Bazel Support: Added Bazel build support plus just bazel-codex helper for contributors (feat: add support for building with Bazel openai/codex#8875, feat: add bazel-codex entry to justfile openai/codex#9177)

Impact Assessment

• Risk: Medium (default model change could affect API behavior)
• Affected Features:
  • All Codex API calls (new default model)
  • Headless environments (improved login flow)
  • Linux sandbox configurations (new read-only mount capability)
  • Windows sandbox workflows (improved safety prompts)
• Migration Required: No code changes required, but test with new default model

Package Links

• NPM Package: https://www.npmjs.com/package/@op...

• Fixes [ca] Update CLI versions: Claude Code 2.1.7, Copilot 0.0.382, Codex 0.81.0, MCP Gateway v0.0.59 #9989

---

✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.

[github-actions]

🎬 THE END — Smoke Claude MISSION: ACCOMPLISHED! The hero saves the day! ✨

[github-actions]

✨ The prophecy is fulfilled... Smoke Codex has completed its mystical journey. The stars align. 🌟

[github-actions]

🎉 Yo ho ho! Changeset Generator found the treasure and completed successfully! ⚓💰

[github-actions]

📰 VERDICT: Smoke Copilot has concluded. All systems operational. This is a developing story. 🎤

[github-actions]

Smoke Test Results - Claude Engine

Recent PRs:

• Add workflow: githubnext/agentics/weekly-research #8: Add workflow: githubnext/agentics/weekly-research
• Remove ai-inference, opencode, genaiscript agentic engines for now #10: Remove ai-inference, opencode, genaiscript agentic engines for now

Test Results:

• ✅ GitHub MCP: Retrieved 2 merged PRs
• ✅ Serena: Active (v0.1.4, gh-aw project)
• ✅ Playwright: Loaded github.com (title contains "GitHub")
• ✅ Tavily Web Search: Found 5 results for "GitHub Agentic Workflows"
• ✅ File Writing: Created test file successfully
• ✅ Bash Tool: Read file back successfully

Overall Status: PASS ✅

AI generated by Smoke Claude

[github-actions]

Smoke Test Results (Run #21031266835)

Last 2 Merged PRs:

• Add usage example and pull request support to assign_to_agent tool
• Add comprehensive campaign flow documentation

Test Results:

• ✅ GitHub MCP: Retrieved PR data
• ❌ Serena Go: Command not found
• ✅ Playwright: Page title "GitHub · Change is constant. GitHub keeps you ahead. · GitHub"
• ✅ File Writing: Created and verified test file
• ✅ Bash Tool: File operations successful

Overall Status: PARTIAL PASS (4/5 tests passed)

cc @pelikhan

AI generated by Smoke Copilot