You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Impact on gh-aw: Low. The two console-log/network-output redaction fixes (#41515, #41450) are mild security improvements for workflows using the Playwright MCP. No repo workflow currently enables Playwright MCP, so no .lock.yml references it yet; the constant is updated for future use. Patch bump, low risk.
Recompile Verification
make recompile → 257/257 compiled, 0 errors, 205 warnings.
Claude 2.1.196 propagated to 60 lock files; 0 stale 2.1.195 remaining.
No pkg/workflow/js/*.js files modified.
61 files changed total (60 .lock.yml + 1 version_constants.go).
Overview
Two CLI/MCP updates detected on 2026-06-30 and applied to
pkg/constants/version_constants.go. Recompile succeeded: 257/257 workflows, 0 errors.No changes for: Copilot CLI 1.0.65, Copilot SDK 1.0.4, Codex 0.142.4, Pi 0.80.2, GitHub MCP Server v1.5.0, MCP Gateway v0.3.32, Playwright CLI 0.1.14, Playwright Browser v1.61.1.
Claude Code 2.1.195 → 2.1.196
No public repository; analysis from NPM metadata and
--helpdiff (stable dist-tag).CLI changes (help diff):
--mcp-debugflag (superseded by--debug).gatewaysubcommand — "Run the enterprise auth/telemetry gateway".Impact on gh-aw: None expected. gh-aw does not invoke
--mcp-debug; the newgatewaysubcommand is opt-in enterprise tooling. Patch bump, low risk.Playwright MCP 0.0.76 → 0.0.77
Repository: microsoft/playwright (monorepo). Stable
latestdist-tag. Bundlesplaywright@1.62.0-alpha-2026-06-29.Features:
browser_take_screenshotgains ascaleoption — choose CSS-pixel (smaller, device-consistent) vs device-pixel (high-res) screenshots — feat(mcp): add scale option to screenshot, --hires to playwright-cli microsoft/playwright#41465Security / Fixes:
browser_resumewaits for next pause or context closure — fix(mcp): wait for next pause or context closure in browser_resume microsoft/playwright#41293browser_wait_forwaitFor calls — fix(mcp): pass action timeout to browser_wait_for waitFor calls microsoft/playwright#41270browser_stop_tracing— fix(mcp): check tracing state before stopping in browser_stop_tracing microsoft/playwright#41040--visionflag — fix(mcp): assign caps as array for legacy --vision flag microsoft/playwright#41253.catch()on sessionLog write queue — fix(mcp): add missing .catch() on sessionLog write queue microsoft/playwright#41234Impact on gh-aw: Low. The two console-log/network-output redaction fixes (#41515, #41450) are mild security improvements for workflows using the Playwright MCP. No repo workflow currently enables Playwright MCP, so no
.lock.ymlreferences it yet; the constant is updated for future use. Patch bump, low risk.Recompile Verification
make recompile→ 257/257 compiled, 0 errors, 205 warnings.2.1.196propagated to 60 lock files; 0 stale2.1.195remaining.pkg/workflow/js/*.jsfiles modified..lock.yml+ 1version_constants.go).Sources
References: §28425489577
Warning
Firewall blocked 1 domain
The following domain was blocked by the firewall during workflow execution:
awmgmcpgSee Network Configuration for more information.