Update CLI tools: Copilot 0.0.403, Codex 0.96.0, MCP Gateway v0.0.99

[Copilot]

Bump three CLI tool versions to latest releases. Copilot CLI includes stability improvements, Codex CLI spans two releases (v0.95.0, v0.96.0) with thread compaction API and security hardening, MCP Gateway adds OAuth discovery endpoint and 10+ new server integrations.

Changes

• Constants: Updated version constants in pkg/constants/constants.go

  • DefaultCopilotVersion: 0.0.402 → 0.0.403
  • DefaultCodexVersion: 0.94.0 → 0.96.0
  • DefaultMCPGatewayVersion: v0.0.98 → v0.0.99

• Test expectations: Updated pkg/constants/constants_test.go to match new versions

• Workflow lock files: Regenerated 145 .lock.yml files with updated CLI versions in installation steps, Docker image references, and version metadata

Integration Testing

Per WARNING in constants.go, Copilot CLI version changes require full integration test run to verify compatibility.

Original prompt

---

This section details on the original issue you should resolve

<issue_title>[ca] Update CLI Tools: Copilot 0.0.403, Codex 0.96.0, MCP Gateway v0.0.99</issue_title>
<issue_description>Three CLI tools and containers have new versions available with important updates including new features, bug fixes, and stability improvements.

Summary

Updates Required:

• Copilot CLI: 0.0.402 → 0.0.403 (Published: Feb 4, 2026)
• Codex CLI: 0.94.0 → 0.96.0 (Two major releases: v0.95.0 and v0.96.0)
• MCP Gateway: v0.0.98 → v0.0.99 (Published: Feb 4, 2025)

Current Status:

• ✅ Constants updated in pkg/constants/constants.go
• ⚠️ Workflow recompilation needed (Go environment issue in current run)
• ⚠️ Integration testing required for Copilot CLI (per WARNING in constants.go)

---

Update: Copilot CLI (0.0.402 → 0.0.403)

Version: 0.0.402 → 0.0.403
Timeline: Published Feb 4, 2026 (1 day interval)
Update Priority: Medium

Release Information

• Published: 2026-02-04T21:38:46.610Z
• Description: GitHub Copilot CLI brings the power of Copilot coding agent directly to your terminal.
• Release Notes: Not publicly available (404 on GitHub releases page)

CLI Discovery

Unable to test CLI installation in current environment due to permission restrictions. Help output comparison deferred to integration testing environment.

Impact Assessment

• Risk: Medium
• Affects: All Copilot-based workflows and agentic operations
• Testing Required: Full integration test run (per constant file WARNING)

Recommendations

1. Run integration tests before merging to ensure compatibility
2. Test all Copilot-based workflows to verify no breaking changes
3. Monitor for public release notes that may become available later

Package Links

• NPM Package: https://www.npmjs.com/package/`@github/copilot`
• Repository: https://github.com/github/copilot-cli (may be private)

---

Update: Codex CLI (0.94.0 → 0.96.0)

Version: 0.94.0 → 0.96.0
Timeline: Two releases (v0.95.0 and v0.96.0) on Feb 4, 2025
Update Priority: High (Security fixes, API enhancements)

Breaking Changes

None identified, but includes significant behavioral changes:

• Git safety hardening prevents bypass of approval checks
• Thread environment variable added to shell executions
• Sandbox mode consistency improvements

Key Features (v0.95.0)

• macOS CLI Launcher: codex app (path) launches Codex Desktop from CLI with automatic DMG download
• Personal Skill Loading: Reads custom skills from ~/.agents/skills with backward compatibility
• Enhanced /plan Command: Better editing/highlighting, inline arguments, and pasted image support
• Parallel Shell Execution: Shell tools can run concurrently for better performance
• Thread Environment Variable: CODEX_THREAD_ID available in shell executions
• Linux Sandbox Foundation: Bubblewrap integration for runtime features

Key Features (v0.96.0)

• Thread Compaction API: thread/compact for async compaction in v2 app-server API
• WebSocket Rate Limiting: codex.rate_limits event for rate limit signaling
• Unified Execution: unified_exec activated across non-Windows platforms
• Configuration Debugging: Requirement values include source provenance for /debug-config

View Full Changelog (v0.95.0)

Bug Fixes (v0.95.0)

• Git Safety Hardening: Destructive/write-capable git invocations no longer bypass approval checks (fix: unsafe auto-approval of git commands openai/codex#10258)
• Thread Management: Fixed thread name display and listing reliability (Session picker shows thread_name if set openai/codex#10340, fix: thread listing openai/codex#10383)
• Sandbox Mode: Resolved first-run trust-mode handling; $PWD/.agents now read-only like $PWD/.codex (Fixed sandbox mode inconsistency if untrusted is selected openai/codex#10415, fix: make $PWD/.agents read-only like $PWD/.codex openai/codex#10524)
• Interrupt Handling: Fixed codex exec hanging after interrupts in websocket/streaming (Handle exec shutdown on Interrupt (fixes immortal codex exec with websockets) openai/codex#10519)
• Review Mode: Aligned requestApproval IDs with command execution items (fix(app-server): fix approval events in review mode openai/codex#10416)
• Error Diagnostics: Enhanced 401 errors with server details, cf-ray, requestId (Add more detail to 401 error openai/codex#10508)

Technical Changes (v0.95.0)

• Completed migration from deprecated mcp-types to rmcp-based protocol types (feat: add MCP protocol types and rmcp adapters openai/codex#10356, feat: replace custom mcp-types crate with equivalents from rmcp openai/codex#10349, chore: remove deprecated mcp-types crate openai/codex#10357)
• Updated bytes dependency for security advisory compliance (chore: update bytes crate in response to security advisory openai/codex#10525)

Contributors: 23 contributors including bolinfest, owenlin0, rasmusrygaard

Full Changelog: openai/codex@rust-v0.94.0...rust-v0.95.0

View Full Changelog (v0.96.0)

Bug Fixes (v0.96.0)

-...

• Fixes [ca] Update CLI Tools: Copilot 0.0.403, Codex 0.96.0, MCP Gateway v0.0.99 #13821

---

💡 You can make Copilot smarter by setting up custom instructions, customizing its development environment and configuring Model Context Protocol (MCP) servers. Learn more Copilot coding agent tips in the docs.

---

Changeset

• Type: patch
• Description: Update the bundled CLI tool versions (Copilot 0.0.403, Codex 0.96.0, MCP Gateway 0.0.99) and refresh dependent tests.

Ahoy! This treasure was crafted by 🏴‍☠️ Changeset Generator

[github-actions]

📰 BREAKING: Smoke Copilot is now investigating this pull request. Sources say the story is developing...

[github-actions]

🎉 Yo ho ho! Changeset Generator found the treasure and completed successfully! ⚓💰

[github-actions]

🌑 The shadows whisper... Smoke Codex failed. The oracle requires further meditation...

[github-actions]

🎬 THE END — Smoke Claude MISSION: ACCOMPLISHED! The hero saves the day! ✨

[github-actions]

📰 DEVELOPING STORY: Smoke Copilot reports failed. Our correspondents are investigating the incident...

[github-actions]

📰 BREAKING: Smoke Copilot is now investigating this pull request. Sources say the story is developing...

[github-actions]

📰 DEVELOPING STORY: Smoke Copilot reports failed. Our correspondents are investigating the incident...

[github-actions]

🔍 PR Triage Results

Category: chore | Risk: high | Priority: 34/100

Scores Breakdown

• Impact: 25/50 - CLI tool version updates affecting 148 files
• Urgency: 0/30 - Very recent PR (0.24 hours old)
• Quality: 9/20 - Draft PR, CI pending but has issue reference ([ca] Update CLI Tools: Copilot 0.0.403, Codex 0.96.0, MCP Gateway v0.0.99 #13821)

📋 Recommended Action: batch_review

Dependency updates for Copilot, Codex, and MCP Gateway CLI tools. The extensive file changes (148 files) suggest automatic recompilation of workflow lock files. Review impact on existing workflows.

---

Triaged by PR Triage Agent on 2026-02-05

AI generated by PR Triage Agent