[ca] CLI Version Updates: MCP Gateway v0.1.17, APM v0.8.1, Claude Code 2.1.78, Copilot CLI 1.0.7

[github-actions]

Summary

Version check completed on 2026-03-18. Two pinned versions updated in pkg/constants/constants.go and make recompile run. Two "latest"-pinned tools also moved to new versions (no constants change needed).

Tool	Previous	Latest	Status
MCP Gateway	v0.1.15	v0.1.17	✅ Updated
APM	v0.8.0	v0.8.1	✅ Updated
Claude Code	2.1.77	2.1.78	ℹ️ Uses latest
Copilot CLI	1.0.6	1.0.7	ℹ️ Uses latest
GitHub MCP Server	v0.32.0	v0.32.0	— No change
Playwright MCP	0.0.68	0.0.68	— No change
Playwright Browser	v1.58.2	v1.58.2	— No change
Codex	0.115.0	0.115.0	— No change

---

Update MCP Gateway v0.1.15 → v0.1.17

Released: 2026-03-17 (v0.1.16) and 2026-03-18 (v0.1.17)

View v0.1.16 Changelog

Key changes in v0.1.16 (v0.1.15 → v0.1.16):

Features

• DIFC structured logging: Structured logging for every filtered item (feat(difc): structured logging for every filtered item gh-aw-mcpg#2066)
• Debug logging added: DIFC path_labels.go and bulk label operations ([log] difc: add debug logging to path_labels.go gh-aw-mcpg#1888, [log] difc/agent: add debug logging to bulk label operations gh-aw-mcpg#1965)
• Guard Status Tracker workflow: New workflow for tracking guard status (feat: add Guard Status Tracker workflow for issue #1711 gh-aw-mcpg#1938)
• Rust Guard Improver daily workflow: Added daily improvement workflow (feat: add Rust Guard Improver daily workflow gh-aw-mcpg#1920)
• TTY helpers: Added IsStdoutTerminal, StderrTerminalWidth, and IsInteractiveTerminal (tty: add IsStdoutTerminal, StderrTerminalWidth, and IsInteractiveTerminal gh-aw-mcpg#1931)

Bug Fixes

• Fix: eliminate duplicate sys tool delegation via callSysHelper (fix: eliminate duplicate sys tool delegation block via callSysServer helper gh-aw-mcpg#1910)
• Fix: remove unused cleared variable causing lint failure (fix: remove unused cleared variable causing lint failure gh-aw-mcpg#2038)
• Fix: staticcheck SA1012 for intentional nil context test (fix: suppress staticcheck SA1012 for intentional nil context test gh-aw-mcpg#1895)
• Fix: remove dead *toml.ParseError pointer assertion with %w wrapping (fix(config): remove dead *toml.ParseError pointer assertion and use %w error wrapping gh-aw-mcpg#1929)
• Fix: gofmt formatting in connection_pool_test.go (fix: gofmt formatting in connection_pool_test.go gh-aw-mcpg#1993)

Refactoring

• Deduplicate code across logger, validation, and launcher packages (refactor: deduplicate code across logger, validation, and launcher packages gh-aw-mcpg#1926)
• Eliminate duplicate dispatch, config resolution, and label flow patterns (refactor: eliminate duplicate dispatch, config resolution, and label flow patterns gh-aw-mcpg#1953)
• Semantic function clustering: absorb dockerutil, reduce duplication (refactor: semantic function clustering — absorb dockerutil, reduce duplication, move outlier free functions gh-aw-mcpg#1933)
• Move guard-policy parsing, AllowOnly factory, and DIFC sink state to proper packages (refactor: Move guard-policy parsing, AllowOnly factory, and DIFC sink state to proper packages gh-aw-mcpg#1987)
• Deduplicate code in DIFC labels and RPC logger (refactor: eliminate duplicate code in DIFC labels and RPC logger gh-aw-mcpg#2006)
• Rust guard: deduplicate MCP unwrapping and remove dead code (rust-guard: deduplicate MCP unwrapping and remove dead code in permissions.rs gh-aw-mcpg#2013)

Full changelog: github/gh-aw-mcpg@v0.1.15...v0.1.16

View v0.1.17 Changelog

Key changes in v0.1.17 (v0.1.16 → v0.1.17):

Features

• DIFC filter events in rpc-messages.jsonl: Filter events now co-located with RPC traffic in JSONL log for easier correlation (refactor: move DIFC filter events into JSONL log gh-aw-mcpg#2077)

Bug Fixes

• Fix: type mismatch in LogDifcFilteredItem — *JSONLFilteredItem incorrectly passed to LogMessage (fix: type mismatch in LogDifcFilteredItem causes build failure gh-aw-mcpg#2080)
• Fix: missing FilteredItemLogEntry type and buildFilteredItemLogEntry function (fix: add FilteredItemLogEntry type and buildFilteredItemLogEntry to fix lint failure gh-aw-mcpg#2078)
• Fix: restored #[allow(dead_code)] on is_bot helper in Rust guard (fix: restore #[allow(dead_code)] on is_bot helper gh-aw-mcpg#2074)

Docker image: ghcr.io/github/gh-aw-mcpg:v0.1.17

Full changelog: github/gh-aw-mcpg@v0.1.16...v0.1.17

Impact Assessment

• Risk: Low
• Affects: MCP Gateway sandbox container, DIFC observability, log correlation
• Migration: Docker image tag updated; no API or config changes required

---

Update APM v0.8.0 → v0.8.1

Released: 2026-03-18

View Changelog

Features

• Audit hardening: Unpack scanning, SARIF/JSON/Markdown output (feat: audit hardening — unpack scanning, SARIF/JSON/Markdown output microsoft/apm#330)
• Version pinning guidance: Improved version pinning CLI visibility (feat: improve version pinning guidance and CLI visibility microsoft/apm#340)
• Variable resolution: Support for \$\{input:...} variable resolution for self-defined MCP servers (feat: support ${input:...} variable resolution for self-defined MCP servers microsoft/apm#344)

Bug Fixes

• Fix: auth asymmetry between folder and file downloads (fix: close auth asymmetry between folder and file downloads microsoft/apm#332)
• Fix: preserve GHE custom domain host in lockfile download refs (fix: preserve GHE custom domain host in lockfile download refs microsoft/apm#338)
• Fix: MCP registry validation resilience for transient network errors (fix: MCP registry validation resilience for transient network errors microsoft/apm#337)
• Fix: move pinning hint to diagnostics section (fix: move pinning hint to diagnostics section microsoft/apm#347)

Full changelog: microsoft/apm@v0.8.0...v0.8.1

Impact Assessment

• Risk: Low
• Affects: microsoft/apm-action version: input in generated workflow steps
• Migration: No breaking changes; audit output formats are new additions

---

Claude Code 2.1.77 → 2.1.78 (uses latest)

No constants change required. NPM latest tag now resolves to 2.1.78.

• Package: https://www.npmjs.com/package/`@anthropic-ai/claude-code`

---

Copilot CLI 1.0.6 → 1.0.7 (uses latest)

No constants change required. NPM latest tag now resolves to 1.0.7.

• Package: https://www.npmjs.com/package/`@github/copilot`

---

Changes Made

• pkg/constants/constants.go: DefaultMCPGatewayVersion v0.1.15 → v0.1.17
• pkg/constants/constants.go: DefaultAPMVersion v0.8.0 → v0.8.1
• make recompile: 174/174 workflow files compiled successfully

References:

• §23239115671

Generated by CLI Version Checker · ◷

• expires on Mar 20, 2026, 10:06 AM UTC