[ca] CLI Version Updates: Copilot CLI 0.0.407, Codex 0.99.0, MCP Gateway v0.1.1

[github-actions]

Three agentic CLI tool updates detected and applied to pkg/constants/constants.go.

Update Summary

• Copilot CLI: 0.0.406 → 0.0.407 (released 2026-02-11)
• Codex: 0.98.0 → 0.99.0 (released 2026-02-11)
• MCP Gateway: v0.1.0 → v0.1.1 (released 2026-02-12)
• Status: ✅ Constants updated, ⚠️ Recompile required
• Risk: Low (minor version increments)

---

🚨 Action Required

The constants have been updated, but make recompile failed due to Go download issues. Manual intervention required:

1. Run make recompile locally or in a clean CI environment
2. Review generated workflow lock files
3. Run integration tests for Copilot CLI (per warning in constants.go:line_311)

---

Copilot CLI 0.0.407

Release Date: February 11, 2026 at 19:47 UTC

Key Changes

• Minor version increment with no public changelog available
• Repository is private, detailed changes unavailable
• NPM package metadata shows standard release

Impact Assessment

• Risk: Low - patch-level update
• Affects: GitHub Copilot agent execution
• Testing: Integration tests required per constants.go warning

Package Links

• NPM Package: https://www.npmjs.com/package/`@github/copilot`
• Repository: Private (github/copilot-cli)
• Version: 0.0.407

---

Codex 0.99.0

Release Date: February 11, 2026 at 20:43 UTC

Breaking Changes

None identified

Key Features

• Concurrent shell execution: Running direct shell commands no longer interrupts active turns
• TUI statusline customization: Added /statusline command for interactive metadata configuration
• Resume picker improvements: Toggle sort order between creation and last-updated timestamps
• App-server APIs: New endpoints for turn steering, feature discovery, agent resumption, and notification opt-outs
• Enterprise restrictions: Web search mode and network constraint controls via requirements.toml
• Image format support: Added GIF and WebP inputs alongside existing formats
• Shell environment snapshots: RC file and environment variable preservation capability

View Full Changelog

Release Highlights

This release introduces concurrent shell command execution during active turns, enhanced TUI configuration capabilities, and expanded app-server APIs for turn steering and agent resumption.

Bug Fixes

• Fixed Windows startup issue with buffered keypresses interrupting TUI sign-in
• Required MCP servers now fail fast during start/resume flows
• Resolved file-watcher bug causing spurious skills reload events
• Improved TUI input reliability for wrapped labels, Tab submission, history recall
• Corrected model-modality edge cases for image handling
• Reduced false approval mismatches for wrapped/heredoc shell commands

Documentation Updates

• Expanded app-server protocol references for turn steering and feature discovery
• Updated TUI composer documentation reflecting draft/image restoration behavior
• Clarified null developer_instructions normalization

Chores & Dependencies

• Restructured npm release packaging with platform-specific @openai/codex dist-tags
• Security dependency update for time crate (RUSTSEC-2026-0009)

Contributors

38 contributors participated in this release

Impact Assessment

• Risk: Low - feature additions with security fixes
• Affects: Codex agent execution, enterprise deployments
• Benefits:
  • Improved shell command handling
  • Better TUI customization
  • Enhanced app-server capabilities
  • Security dependency updates

Package Links

• NPM Package: https://www.npmjs.com/package/`@openai/codex`
• Repository: https://github.com/openai/codex
• Release Notes: https://github.com/openai/codex/releases/tag/rust-v0.99.0
• Commits: 46 commits since release to main

---

MCP Gateway v0.1.1

Release Date: February 12, 2026

Breaking Changes

None

Key Features

• GPL dependency detection: Automated daily workflow for detecting GPL dependencies
• MCP server tool discovery: Added tools.json logging to facilitate tool discovery

Bug Fixes

• Corrected payload threshold documentation and internal directory references
• Resolved environment variable documentation discrepancies

View Full Changelog

Merged Pull Requests

1. #889 – Documentation corrections for payload thresholds and directories
2. #901 – Environment variable documentation fixes
3. #902 – Daily GPL dependency detection workflow (Copilot-contributed)
4. #903 – MCP server tool discovery logging (Copilot-contributed)

Contributors

• claude

Impact Assessment

• Risk: Low - documentation and tooling improvements
• Affects: MCP Gateway deployment and documentation
• Benefits:
  • Better documentation accuracy
  • Automated license compliance monitoring
  • Improved MCP server debugging

Package Links

• Repository: https://github.com/github/gh-aw-mcpg
• Release Notes: https://github.com/github/gh-aw-mcpg/releases/tag/v0.1.1
• Docker Image: ghcr.io/github/gh-aw-mcpg:v0.1.1
• Full Changelog: github/gh-aw-mcpg@v0.1.0...v0.1.1

---

Recommendations

1. Immediate: Complete make recompile in clean environment
2. Testing: Run full integration test suite for Copilot CLI 0.0.407
3. Deployment: Low risk updates, can deploy after testing
4. Monitoring: Watch for any regression in shell command handling (Codex) and MCP Gateway functionality

File Changes

pkg/constants/constants.go
- const DefaultCopilotVersion Version = "0.0.406"
+ const DefaultCopilotVersion Version = "0.0.407"

- const DefaultCodexVersion Version = "0.98.0"
+ const DefaultCodexVersion Version = "0.99.0"

- const DefaultMCPGatewayVersion Version = "v0.1.0"
+ const DefaultMCPGatewayVersion Version = "v0.1.1"

References:

• Workflow Run §21929617405
• Codex Release rust-v0.99.0
• MCP Gateway Release v0.1.1

AI generated by CLI Version Checker

• expires on Feb 14, 2026, 1:16 AM UTC