[ca] CLI Version Updates: MCP Gateway v0.2.7, Copilot CLI 1.0.12, Codex 0.117.0, Claude Code 2.1.85

[github-actions]

Summary

Version check run §23630943347 detected the following changes since last check (2026-03-26):

Tool	Previous	Latest	Status
MCP Gateway	v0.2.6	v0.2.7	✅ Updated in constants.go
Copilot CLI	1.0.11	1.0.12	ℹ️ Uses latest
Claude Code	2.1.84	2.1.85	ℹ️ Uses latest
Codex	0.116.0	0.117.0	ℹ️ Uses latest
GitHub MCP Server	v0.32.0	v0.32.0	— No change
Playwright MCP	0.0.68	0.0.68	— No change
Playwright Browser	v1.58.2	v1.58.2	— No change
APM	v0.8.5	v0.8.5	— No change

DefaultMCPGatewayVersion has been updated from v0.2.6 → v0.2.7 in pkg/constants/constants.go and make recompile was run (178/178 workflows recompiled).

---

MCP Gateway v0.2.6 → v0.2.7

Released: 2026-03-27 (today)

Key Features

• GHEC Tenant Support (feat: GHEC tenant support for proxy and guard URL parsing gh-aw-mcpg#2481, fix: port-safe GHEC detection in deriveAPIFromServerURL gh-aw-mcpg#2484): MCP Gateway now correctly handles GitHub Enterprise Cloud tenants in proxy routing and guard URL parsing, including port-safe GHEC detection. Configure via GITHUB_SERVER_URL or GITHUB_API_URL.

• Trusted Users in AllowOnly Guard (feat: add trusted-users list to AllowOnly guard policy for user integrity elevation gh-aw-mcpg#2584): The allow-only guard policy now supports a trusted-users list for elevated integrity levels — fine-grained control over sensitive operations.

Bug Fixes & Improvements

• Transparent Session Reconnection (fix: reconnect expired MCP backend sessions transparently, extend server session timeout gh-aw-mcpg#2597): Expired MCP backend sessions reconnect automatically; extended session timeout.
• HTTP Backend Compatibility (Fix HTTP 400 on tools/list for HTTP backends with custom auth headers (Atlassian MCP) gh-aw-mcpg#2608): Fixed HTTP 400 errors on tools/list for HTTP backends using custom auth headers (e.g., Atlassian MCP).
• Guard Write Classification (fix(guard): pre-emptive write classification for set_variable, upload_release_asset, sync_fork gh-aw-mcpg#2613): Pre-emptive write classification for set_variable, upload_release_asset, and sync_fork.
• Schema Fetch Reliability (fix: add retry with exponential backoff to schema fetch for transient HTTP errors gh-aw-mcpg#2582): Retry logic with exponential backoff for schema fetches.
• Accurate DIFC Filter Notices (fix: distinguish secrecy vs integrity in filtered notice gh-aw-mcpg#2518): Filter notices now correctly distinguish secrecy vs. integrity violations.
• Trusted Bot Elevation Fix (rust-guard: fix configured trusted bot elevation in apply_tool_labels + deduplicate item collection gh-aw-mcpg#2574): Corrected trusted-bot elevation in apply_tool_labels.

View Full Changelog

Full release notes: https://github.com/github/gh-aw-mcpg/releases/tag/v0.2.7

Key merged PRs:

• feat: GHEC tenant support for proxy and guard URL parsing gh-aw-mcpg#2481 — GHEC tenant support for proxy and guard URL parsing
• fix: port-safe GHEC detection in deriveAPIFromServerURL gh-aw-mcpg#2484 — Port-safe GHEC detection in deriveAPIFromServerURL
• fix: distinguish secrecy vs integrity in filtered notice gh-aw-mcpg#2518 — Fix: distinguish secrecy vs integrity in filtered notice
• rust-guard: fix configured trusted bot elevation in apply_tool_labels + deduplicate item collection gh-aw-mcpg#2574 — Fix: configured trusted bot elevation in apply_tool_labels
• fix: add retry with exponential backoff to schema fetch for transient HTTP errors gh-aw-mcpg#2582 — Fix: retry with exponential backoff for schema fetch
• feat: add trusted-users list to AllowOnly guard policy for user integrity elevation gh-aw-mcpg#2584 — Feat: trusted-users list in AllowOnly guard policy
• fix: reconnect expired MCP backend sessions transparently, extend server session timeout gh-aw-mcpg#2597 — Fix: reconnect expired MCP backend sessions transparently
• Fix HTTP 400 on tools/list for HTTP backends with custom auth headers (Atlassian MCP) gh-aw-mcpg#2608 — Fix HTTP 400 on tools/list for HTTP backends with custom auth headers
• fix(guard): pre-emptive write classification for set_variable, upload_release_asset, sync_fork gh-aw-mcpg#2613 — Fix: pre-emptive write classification for set_variable, upload_release_asset, sync_fork

Impact Assessment

• Risk: Low — primarily bug fixes and GHEC support
• Docker Image: ghcr.io/github/gh-aw-mcpg:v0.2.7
• Affects: Sandbox agent container, DIFC guard policies, GHEC deployments

---

Copilot CLI 1.0.11 → 1.0.12 (uses latest)

CLI Changes (from help diff)

Removed flags:

• --alt-screen[=value] — Use the terminal alternate screen buffer (on|off)
• --no-alt-screen — Disable the terminal alternate screen buffer

Added flags:

• --enable-reasoning-summaries — Request reasoning summaries for OpenAI models

New subcommand:

• providers — Custom Model Providers (BYOK)

Subcommand: providers (BYOK — Bring Your Own Key)

Allows using a custom model provider instead of GitHub Copilot's model routing. Key environment variables:

Variable	Purpose
COPILOT_PROVIDER_BASE_URL	API endpoint URL (required to activate BYOK)
COPILOT_PROVIDER_TYPE	openai (default), azure, or anthropic
COPILOT_PROVIDER_API_KEY	API key (optional for local providers like Ollama)
COPILOT_PROVIDER_BEARER_TOKEN	Bearer token (takes precedence over API key)
COPILOT_PROVIDER_WIRE_API	completions (default) or responses
COPILOT_MODEL	Model name (required for BYOK; no default)

Supports: Ollama, vLLM, Foundry Local, Azure OpenAI, Anthropic, and any OpenAI-compatible endpoint.

View providers Help Output

Custom Model Providers (BYOK):

  Use your own model provider instead of GitHub Copilot's model routing.
  Set the COPILOT_PROVIDER_BASE_URL environment variable to activate BYOK mode.
  GitHub authentication is not required when using a custom provider.

  # Ollama (local, no API key required)
  $ COPILOT_PROVIDER_BASE_URL=(localhost/redacted) \
    COPILOT_MODEL=deepseek-coder-v2:16b \
    copilot

  # Anthropic
  $ COPILOT_PROVIDER_TYPE=anthropic \
    COPILOT_PROVIDER_BASE_URL=https://api.anthropic.com \
    COPILOT_PROVIDER_API_KEY=sk-ant-... \
    COPILOT_MODEL=claude-sonnet-4-20250514 \
    copilot

Impact Assessment

• Risk: Low — additive features, uses latest tag
• Notable: BYOK providers feature enables running Copilot CLI against any OpenAI-compatible or Anthropic endpoint — may be useful for gh-aw local/offline testing scenarios

---

Codex 0.116.0 → 0.117.0 (uses latest)

View Highlights

• Plugin System: Product-scoped syncing at startup, browsable plugin directory, streamlined installation/removal (feat: support product-scoped plugins. openai/codex#15041, Support featured plugins openai/codex#15042, [plugins] Install MCPs when calling plugin/install openai/codex#15195)
• Multi-Agent Architecture: Sub-agents now use readable path-based addressing (e.g., /root/agent_a) with structured inter-agent messaging (feat: change multi-agent to use path-like system instead of uuids openai/codex#15313, feat: structured multi-agent output openai/codex#15515)
• Terminal Title Picker: /title command works in both classic and app-server TUI modes (feat(tui): add /title terminal title configuration openai/codex#12334)
• App-Server TUI enabled by default (Enable tui_app_server feature by default openai/codex#15661)
• Legacy artifact tool removed: read_file, grep_files deprecated handlers removed (feat: drop artifact tool and feature openai/codex#15851)
• Bug fixes: TUI stability, ChatGPT login, terminal state, sandboxing (Linux bubblewrap older versions)

Impact Assessment

• Risk: Low — uses latest tag
• Breaking: Legacy read_file and grep_files tool handlers removed (feat: drop artifact tool and feature openai/codex#15851, chore: drop artifacts lib openai/codex#15864)

---

Claude Code 2.1.84 → 2.1.85 (uses latest)

Minor patch release. No public repository; changelog not available.

Impact Assessment

• Risk: Low — uses latest tag, patch-level bump

---

Package Links

• MCP Gateway: https://github.com/github/gh-aw-mcpg/releases/tag/v0.2.7
• Copilot CLI: https://www.npmjs.com/package/`@github/copilot`
• Codex: https://www.npmjs.com/package/`@openai/codex`
• Claude Code: https://www.npmjs.com/package/`@anthropic-ai/claude-code`

References:

• §23630943347

Generated by CLI Version Checker · ◷

• expires on Mar 29, 2026, 4:25 AM UTC

[github-actions]

This issue is being closed as outdated. A newer issue has been created: #23313

View newer issue

---

This action was performed automatically by the CLI Version Checker workflow.