[ca] CLI Updates: GitHub MCP Server v1.5.0, Codex 0.142.4

[github-actions]

Overview

Two CLI/MCP version updates applied to pkg/constants/version_constants.go and propagated across 254 lock files. Recompile clean: 257/257 compiled, 0 errors.

Updates Applied

Component	Old	New	Risk
GitHub MCP Server	v1.4.0	v1.5.0	Low
Codex	0.142.3	0.142.4	Low

GitHub MCP Server v1.4.0 → v1.5.0 (pub 2026-06-27)

Features

• STDIO server now ships built-in OAuth 2.1 login — no PAT required
• React to issue and pull request comments (new reaction tools)
• issue_read can fetch parent issues via get_parent
• Issue dependency read/write MCP tools
• MCP App for Issues shows labels, milestones, assignees, type

Breaking / Deprecation

• Legacy issue write tool deprecated; issue fields promoted (Promote issue fields and deprecate legacy issue write tool  github-mcp-server#2696)
• MCP-apps show/defer contract reconciled, show_ui removed (fix(mcp-apps): reconcile the show/defer contract — render results, remove show_ui github-mcp-server#2774)

Fixes: validate required params in add_comment_to_pending_review (github/github-mcp-server#2770), bound ui_get pagination (github/github-mcp-server#2766), fix delete:true on issue fields (github/github-mcp-server#2755).

Impact: gh-aw uses a pinned PAT, so OAuth is additive. New reaction/dependency tools available. Low risk.

Full PR list

• Add get_parent method to issue_read github-mcp-server#2726 get_parent on issue_read
• Show issue_write MCP App form for labels/assignees/milestone/type github-mcp-server#2767 issue_write MCP App form
• feat(oauth): add stdio OAuth 2.1 login core library (1/4) github-mcp-server#2704 stdio OAuth 2.1 core
• Add issue dependency read/write MCP tools github-mcp-server#2751 issue dependency tools
• Add reaction tools for issues and pull requests github-mcp-server#2732 reaction tools

Full: github/github-mcp-server@v1.4.0...v1.5.0

Codex 0.142.3 → 0.142.4 (pub 2026-06-29)

Maintenance-only — no user-facing changes; CLI help unchanged. openai/codex@rust-v0.142.3...rust-v0.142.4

No Changes

Claude 2.1.195, Copilot 1.0.65, Copilot SDK 1.0.4, Pi 0.80.2, MCP Gateway v0.3.32, Playwright MCP 0.0.76, Playwright CLI 0.1.14, Playwright Browser v1.61.1.

Next Actions

Review and merge. v1.5.0 in 252 lock files, 0.142.4 in 15; no stale v1.4.0 refs, no JS files modified.

References: §28354461247

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

• awmgmcpg

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "awmgmcpg"

See Network Configuration for more information.

Generated by 🔢 CLI Version Checker · 80.6 AIC · ⌖ 28.8 AIC · ⊞ 8.4K · ◷

• expires on Jun 30, 2026, 11:10 PM UTC-08:00

[github-actions]

🍪 Issue Monster selected this for Copilot

I have identified this issue as a good candidate for automated resolution and requested assignment to the Copilot coding agent.

If assignment succeeds, the Copilot coding agent will analyze the issue and create a pull request with the fix.

Om nom nom! 🍪

🍪 Om nom nom by Issue Monster · 4.02 AIC · ⌖ 26.3 AIC · ⊞ 7K · ◷