[ca] chore: update Claude and Codex CLI pins by github-actions[bot] · Pull Request #72874 · github/gh-aw

github-actions · 2026-10-29T05:36:54Z

Caution

Protected files were modified in this change.
This pull request is in request-review mode and requires explicit human scrutiny before merge.

Protected files: .changeset/patch-cli-version-updates-2026-10-29.md

Summary

Updates the default Claude Code and OpenAI Codex CLI pins to the latest stable versions detected during the 2026-10-29 check. No active pull request covered these updates; the previous Claude/Codex update PR was closed without merging.

Evidence and implementation

Claude Code: 2.1.310 → 2.1.312, verified with npm view @anthropic-ai/claude-code version. The package has no public release repository, so NPM metadata is the release source.
Codex: 0.164.0 → 0.165.0, verified with npm view @openai/codex version. Release notes: https://github.com/openai/codex/releases/tag/rust-v0.165.0
Codex 0.165.0 adds a built-in Google Cloud Vertex AI provider, GPT-6.1 Terra catalog support, session navigation improvements, experimental attached thread forks, default reasoning-effort changes, memory v2 defaults, and marketplace URL validation and MCP cancellation fixes.
Updated the Codex documentation and routing-contract review comments/tests so the reviewed Codex version evidence matches the new pin.
Copilot CLI 1.0.105 was detected but intentionally not changed: the independently authenticated SHA256SUMS.txt release pin was not available in this environment, and changing the version without that pin would weaken the existing release-integrity check.

Validation

go test ./pkg/constants: passed.
make recompile: passed in the foreground; all 349 workflow sources compiled successfully. Generated lock-file changes were restored and are intentionally excluded from this PR.
git diff --check: passed.
make fmt: Go formatting passed, but the overall target exited non-zero because actions/setup/js/node_modules/.bin/prettier is not installed in the checkout.
The focused JavaScript test was not runnable because the checkout has no installed Vitest/module setup; invoking it directly with Node failed at the existing ESM/Vitest import boundary.

Files

pkg/constants/version_constants.go and tests
actions/setup/js/awf_model_routing.cjs and its test
docs/src/content/docs/reference/engines/codex.md
.changeset/patch-cli-version-updates-2026-10-29.md

Release links

Claude Code: NPM package metadata for @anthropic-ai/claude-code
Codex 0.165.0: https://github.com/openai/codex/releases/tag/rust-v0.165.0

Generated by 🔢 CLI Version Checker · pi · gpt50 · ~6 AIC · ⌖ ~3 AIC · ⊞ 18.7K · ◷

expires on Oct 30, 2026, 9:36 PM UTC-08:00

github-actions

Protected files were modified in this pull request and require manual scrutiny before merge.

Please verify that each protected-file change is intentional, policy-compliant, and safe:

Protected files: .changeset/patch-cli-version-updates-2026-10-29.md

pelikhan · 2026-10-29T10:13:05Z

@copilot recompile

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot · 2026-10-29T10:32:53Z

@copilot recompile

Recompiled all 349 workflows and updated the generated lockfiles for the new CLI pins. make recompile and final validation passed. Commit: 3faa1ede.

github-actions · 2026-10-29T10:45:55Z

✅ PR Code Quality Reviewer completed the code quality review.

🔎 Code quality review by PR Code Quality Reviewer

github-actions · 2026-10-29T10:45:58Z

🧠 Matt Pocock Skills Reviewer has completed the skills-based review. ✅

🧠 Reviewed using Matt Pocock's skills by Matt Pocock Skills Reviewer

github-actions · 2026-10-29T10:46:03Z

✅ Ponytail Reviewer completed successfully!

Ponytail Reviewer

Outcome: reported_no_action

The agent completed and reported no action. A no-op output alone does not verify that all required work was completed or that publication was possible.

Agent messages are omitted from this comment. The category uses structured run status, not interpretation of agent prose.

Generated from Ponytail Reviewer · gpt56 · ~10 AIC · ⌖ ~6 AIC · ⊞ 14.8K · ◷

Generated by Ponytail Reviewer for #72874

github-actions · 2026-10-29T10:46:16Z

✅ Test Quality Sentinel completed test quality analysis.

Test Quality Sentinel

Outcome: reported_no_action

The agent completed and reported no action. A no-op output alone does not verify that all required work was completed or that publication was possible.

Agent messages are omitted from this comment. The category uses structured run status, not interpretation of agent prose.

Generated from Test Quality Sentinel · sonnet50 · ~12 AIC · ⌖ ~16 AIC · ◇ ~5 AIC · ⊞ 12.2K · ◷

🧪 Test quality analysis by Test Quality Sentinel

pelikhan · 2026-10-29T10:48:50Z

@copilot resolve the merge conflicts in this pull request

github-actions

Skills-Based Review 🧠

Small, self-consistent version-pin bump (Claude Code 2.1.310→2.1.312, Codex 0.164.0→0.165.0). No new abstractions or logic changes to review against /codebase-design or /tdd beyond what's already here.

📋 Notes

The Codex routing-contract comment, its companion test (awf_model_routing.test.cjs), the docs string, and the Go constant were all updated together and remain consistent — good discipline per /tdd's "tests as specification" principle (the test literally forces re-review of the routing contract on every pin bump).
Changed files are limited to the constant, its test, the routing-contract comment/test pair, docs, a changeset, and 144 regenerated .lock.yml files — no hand-edited generated files found.
Nothing actionable found; approving.

🧠 Reviewed using Matt Pocock's skills by Matt Pocock Skills Reviewer · copilot · sonnet50 · ~14 AIC · ⌖ ~15 AIC · ⊞ 10.2K
_{Comment /matt to run again}

github-actions

Review summary

No actionable correctness, security, or maintainability issues found in the reviewed source diff. The changes consistently update the Claude and Codex pins, associated tests, routing-review evidence, documentation, and changeset.

🔎 Code quality review by PR Code Quality Reviewer · copilot · gpt50 · ~2 AIC · ⌖ ~1 AIC · ⊞ 1.6K
_{Comment /review to run again}

Copilot

🟡 Changes recommended

A moderate active finding remains because the generated lock-file change violates the repository’s delivery contract and must be removed or regenerated through the approved maintainer path.

1 open issue

Remove generated lock files or follow approved regeneration path · New

What changed in this PR

Updates the default Claude Code and OpenAI Codex CLI pins and propagates the new versions through routing evidence, documentation, tests, and workflow metadata.

Changes:

Bumps Claude Code from 2.1.310 to 2.1.312.
Bumps Codex from 0.164.0 to 0.165.0.
Updates Codex routing-contract fixtures, documentation, tests, generated workflow locks, and the patch changeset.

Open review comments remain:

Moderate: Generated .lock.yml changes conflict with the repository delivery contract and the PR description; these should be removed or handled through the approved regeneration path.
Nit: The PR description should acknowledge the included generated lock-file changes, or those changes should be removed.
Nit: The Codex documentation should include GPT-6.1 Terra or explicitly state that its supported-model list is non-exhaustive.

File	Description
`pkg/constants/version_constants.go`	Updates the default Claude Code and Codex pins.
`pkg/constants/version_constants_test.go`	Updates expected default-version assertions.
`docs/src/content/docs/reference/engines/codex.md`	Documents the new Codex default pin.
`actions/setup/js/awf_model_routing.test.cjs`	Updates routing-contract test evidence for Codex `0.165.0`.
`actions/setup/js/awf_model_routing.cjs`	Updates Codex routing-contract review evidence.
`.github/workflows/windows.lock.yml`	Regenerated workflow metadata and installer pins.
`.github/workflows/update-astro.lock.yml`	Regenerated workflow metadata and installer pins.
`.github/workflows/smoke-github-codex.lock.yml`	Regenerated Codex workflow metadata and installer pins.
`.github/workflows/smoke-github-claude.lock.yml`	Regenerated Claude workflow metadata and installer pins.
`.github/workflows/smoke-codex-routed.lock.yml`	Regenerated Codex workflow metadata and installer pins.
`.github/workflows/smoke-codex-bare-auto.lock.yml`	Regenerated Codex workflow metadata and installer pins.
`.github/workflows/smoke-codex-auto.lock.yml`	Regenerated Codex workflow metadata and installer pins.
`.github/workflows/smoke-claude-sub-agents.lock.yml`	Regenerated Claude workflow metadata and installer pins.
`.github/workflows/smoke-claude-routed.lock.yml`	Regenerated Claude workflow metadata and installer pins.
`.github/workflows/smoke-claude-on-copilot.lock.yml`	Regenerated Claude workflow metadata and installer pins.
`.github/workflows/smoke-claude-dynamic.lock.yml`	Regenerated Claude workflow metadata and installer pins.
`.github/workflows/smoke-claude-copilot.lock.yml`	Regenerated Claude workflow metadata and installer pins.
`.github/workflows/smoke-claude-copilot-auto.lock.yml`	Regenerated Claude workflow metadata and installer pins.
`.github/workflows/smoke-claude-auto.lock.yml`	Regenerated Claude workflow metadata and installer pins.
`.github/workflows/smoke-ci.lock.yml`	Regenerated Codex workflow metadata and installer pins.
`.github/workflows/smoke-azure-codex.lock.yml`	Regenerated Codex workflow metadata and installer pins.
`.github/workflows/sighthound-security-scan.lock.yml`	Regenerated Codex workflow metadata and installer pins.
`.github/workflows/semantic-function-refactor.lock.yml`	Regenerated Claude workflow metadata and installer pins.
`.github/workflows/schema-feature-coverage.lock.yml`	Regenerated Codex workflow metadata and installer pins.
`.github/workflows/notion-issue-summary.lock.yml`	Regenerated Codex workflow metadata and installer pins.
`.github/workflows/lint-monster.lock.yml`	Regenerated Codex workflow metadata and installer pins.
`.github/workflows/grumpy-reviewer.lock.yml`	Regenerated Codex workflow metadata and installer pins.
`.github/workflows/github-remote-mcp-auth-test.lock.yml`	Regenerated Codex workflow metadata and installer pins.
`.github/workflows/front-page-copy-guard.lock.yml`	Regenerated Codex workflow metadata and installer pins.
`.github/workflows/example-permissions-warning.lock.yml`	Regenerated Codex workflow metadata and installer pins.
`.github/workflows/example-failure-category-filter.lock.yml`	Regenerated Codex workflow metadata and installer pins.
`.github/workflows/engine-conformance-codex.lock.yml`	Regenerated Codex workflow metadata and installer pins.
`.github/workflows/engine-conformance-claude.lock.yml`	Regenerated Claude workflow metadata and installer pins.
`.github/workflows/designer-drift-audit.lock.yml`	Regenerated Codex workflow metadata and installer pins.
`.github/workflows/daily-windows-defender-scan.lock.yml`	Regenerated Codex workflow metadata and installer pins.
`.github/workflows/daily-max-ai-credits-test.lock.yml`	Regenerated Codex workflow metadata and installer pins.
`.github/workflows/daily-choice-test.lock.yml`	Regenerated Claude workflow metadata and installer pins.
`.github/workflows/daily-byok-ollama-test.lock.yml`	Regenerated Claude detection-runtime metadata and installer pins.
`.github/workflows/codex-github-remote-mcp-test.lock.yml`	Regenerated Codex workflow metadata and installer pins.
`.changeset/patch-cli-version-updates-2026-10-29.md`	Adds the patch-release changeset for the CLI pin updates.

_{Review effort: Lite (auto)}

@@ -1,4 +1,4 @@
-# gh-aw-metadata: {"schema_version":"v4","frontmatter_hash":"94d5e30f9bbeac881b998f5d6d5032c7979599e1c3f565292fe437af928fdc87","body_hash":"4d94f307d6aac50d66aad5c1818d820ec0935cb40cb20252522b6b5b41d7fabd","strict":true,"agent_id":"codex","agent_model":"copilot/gpt-5.6-terra","engine_versions":{"codex":"0.164.0"},"agent_image_runner":"windows-latest"}
+# gh-aw-metadata: {"schema_version":"v4","frontmatter_hash":"94d5e30f9bbeac881b998f5d6d5032c7979599e1c3f565292fe437af928fdc87","body_hash":"4d94f307d6aac50d66aad5c1818d820ec0935cb40cb20252522b6b5b41d7fabd","strict":true,"agent_id":"codex","agent_model":"copilot/gpt-5.6-terra","engine_versions":{"codex":"0.165.0"},"agent_image_runner":"windows-latest"}


pelikhan · 2026-10-29T11:12:39Z

@copilot resolve the merge conflicts in this pull request

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot · 2026-10-29T11:24:32Z

@copilot resolve the merge conflicts in this pull request

Merged origin/main and resolved the generated workflow-lock conflicts by recompiling all 349 workflows. Merge commit: 51429f3.

Apply filtered changes

6085d1a

github-actions Bot added automation cookie Issue Monster Loves Cookies! dependencies Pull requests that update a dependency file labels Oct 29, 2026

github-actions Bot commented Oct 29, 2026

View reviewed changes

This was referenced Oct 29, 2026

[pr-review] Daily PR Code Quality Review — 40825072105 #72878

Closed

[Contribution Check Report] Contribution Check — 2026-10-29 #72830

Closed

Copilot started work on behalf of pelikhan October 29, 2026 10:13

View session

pelikhan mentioned this pull request Oct 29, 2026

fix: explain scoped exclusions in protected-file warnings #72920

Merged

chore: recompile workflow locks

3faa1ed

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot finished work on behalf of pelikhan October 29, 2026 10:33

Copilot AI requested a review from pelikhan October 29, 2026 10:33

pelikhan marked this pull request as ready for review October 29, 2026 10:44

Copilot AI auto review requested due to automatic review settings October 29, 2026 10:44

pelikhan added smoke-copilot smoke-claude labels Oct 29, 2026

Copilot started reviewing on behalf of pelikhan October 29, 2026 10:45

View session

github-actions Bot commented Oct 29, 2026

View reviewed changes

Copilot AI reviewed Oct 29, 2026

View reviewed changes

Copilot started work on behalf of pelikhan October 29, 2026 10:57

View session

Merge origin/main and regenerate workflow locks

51429f3

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Copilot finished work on behalf of pelikhan October 29, 2026 11:25

pelikhan merged commit 158d99c into main Oct 29, 2026
56 of 57 checks passed

Copilot started work on behalf of pelikhan October 29, 2026 11:29

View session

pelikhan deleted the chore/update-cli-versions-2026-10-29-d125b96b0127823f branch October 29, 2026 11:29

Copilot stopped work on behalf of pelikhan due to an error October 29, 2026 11:30
The session was cancelled by the user.

		@@ -1,4 +1,4 @@
		# gh-aw-metadata: {"schema_version":"v4","frontmatter_hash":"94d5e30f9bbeac881b998f5d6d5032c7979599e1c3f565292fe437af928fdc87","body_hash":"4d94f307d6aac50d66aad5c1818d820ec0935cb40cb20252522b6b5b41d7fabd","strict":true,"agent_id":"codex","agent_model":"copilot/gpt-5.6-terra","engine_versions":{"codex":"0.164.0"},"agent_image_runner":"windows-latest"}
		# gh-aw-metadata: {"schema_version":"v4","frontmatter_hash":"94d5e30f9bbeac881b998f5d6d5032c7979599e1c3f565292fe437af928fdc87","body_hash":"4d94f307d6aac50d66aad5c1818d820ec0935cb40cb20252522b6b5b41d7fabd","strict":true,"agent_id":"codex","agent_model":"copilot/gpt-5.6-terra","engine_versions":{"codex":"0.165.0"},"agent_image_runner":"windows-latest"}

Conversation

github-actions Bot commented Oct 29, 2026

Summary

Evidence and implementation

Validation

Files

Release links

Uh oh!

github-actions Bot left a comment

Choose a reason for hiding this comment

Uh oh!

pelikhan commented Oct 29, 2026

Uh oh!

Copilot AI commented Oct 29, 2026

Uh oh!

github-actions Bot commented Oct 29, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Oct 29, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions Bot commented Oct 29, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Ponytail Reviewer

Uh oh!

github-actions Bot commented Oct 29, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Test Quality Sentinel

Uh oh!

pelikhan commented Oct 29, 2026

Uh oh!

github-actions Bot left a comment

Choose a reason for hiding this comment

Skills-Based Review 🧠

Uh oh!

github-actions Bot left a comment

Choose a reason for hiding this comment

Review summary

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

🟡 Changes recommended

Uh oh!

pelikhan commented Oct 29, 2026

Uh oh!

Copilot AI commented Oct 29, 2026

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

github-actions Bot commented Oct 29, 2026 •

edited

Loading

github-actions Bot commented Oct 29, 2026 •

edited

Loading

github-actions Bot commented Oct 29, 2026 •

edited

Loading

github-actions Bot commented Oct 29, 2026 •

edited

Loading