Update CLI versions: Copilot 0.0.407, Codex 0.99.0, MCP Gateway v0.1.1

[Copilot]

Updates default CLI versions in constants for three agentic tools released Feb 11-12, 2026. All workflow lock files regenerated to reflect new versions.

Changes

Version constants updated in pkg/constants/constants.go:

• DefaultCopilotVersion: 0.0.406 → 0.0.407
• DefaultCodexVersion: 0.98.0 → 0.99.0
• DefaultMCPGatewayVersion: v0.1.0 → v0.1.1

Workflow compilation:

• 148 workflow .lock.yml files regenerated with updated CLI versions
• Binary rebuilt to embed new constants

Notable version changes

Codex 0.99.0 adds concurrent shell execution (commands no longer interrupt active turns) and enterprise web search controls via requirements.toml.

MCP Gateway v0.1.1 adds GPL dependency detection workflow and tools.json logging for server discovery.

Copilot CLI 0.0.407 is a minor update with no public changelog (private repository).

Risk assessment

Low risk: all patch/minor version updates with no breaking changes identified.

Original prompt

---

This section details on the original issue you should resolve

<issue_title>[ca] CLI Version Updates: Copilot CLI 0.0.407, Codex 0.99.0, MCP Gateway v0.1.1</issue_title>
<issue_description>Three agentic CLI tool updates detected and applied to pkg/constants/constants.go.

Update Summary

• Copilot CLI: 0.0.406 → 0.0.407 (released 2026-02-11)
• Codex: 0.98.0 → 0.99.0 (released 2026-02-11)
• MCP Gateway: v0.1.0 → v0.1.1 (released 2026-02-12)
• Status: ✅ Constants updated, ⚠️ Recompile required
• Risk: Low (minor version increments)

---

🚨 Action Required

The constants have been updated, but make recompile failed due to Go download issues. Manual intervention required:

1. Run make recompile locally or in a clean CI environment
2. Review generated workflow lock files
3. Run integration tests for Copilot CLI (per warning in constants.go:line_311)

---

Copilot CLI 0.0.407

Release Date: February 11, 2026 at 19:47 UTC

Key Changes

• Minor version increment with no public changelog available
• Repository is private, detailed changes unavailable
• NPM package metadata shows standard release

Impact Assessment

• Risk: Low - patch-level update
• Affects: GitHub Copilot agent execution
• Testing: Integration tests required per constants.go warning

Package Links

• NPM Package: https://www.npmjs.com/package/`@github/copilot`
• Repository: Private (github/copilot-cli)
• Version: 0.0.407

---

Codex 0.99.0

Release Date: February 11, 2026 at 20:43 UTC

Breaking Changes

None identified

Key Features

• Concurrent shell execution: Running direct shell commands no longer interrupts active turns
• TUI statusline customization: Added /statusline command for interactive metadata configuration
• Resume picker improvements: Toggle sort order between creation and last-updated timestamps
• App-server APIs: New endpoints for turn steering, feature discovery, agent resumption, and notification opt-outs
• Enterprise restrictions: Web search mode and network constraint controls via requirements.toml
• Image format support: Added GIF and WebP inputs alongside existing formats
• Shell environment snapshots: RC file and environment variable preservation capability

View Full Changelog

Release Highlights

This release introduces concurrent shell command execution during active turns, enhanced TUI configuration capabilities, and expanded app-server APIs for turn steering and agent resumption.

Bug Fixes

• Fixed Windows startup issue with buffered keypresses interrupting TUI sign-in
• Required MCP servers now fail fast during start/resume flows
• Resolved file-watcher bug causing spurious skills reload events
• Improved TUI input reliability for wrapped labels, Tab submission, history recall
• Corrected model-modality edge cases for image handling
• Reduced false approval mismatches for wrapped/heredoc shell commands

Documentation Updates

• Expanded app-server protocol references for turn steering and feature discovery
• Updated TUI composer documentation reflecting draft/image restoration behavior
• Clarified null developer_instructions normalization

Chores & Dependencies

• Restructured npm release packaging with platform-specific @openai/codex dist-tags
• Security dependency update for time crate (RUSTSEC-2026-0009)

Contributors

38 contributors participated in this release

Impact Assessment

• Risk: Low - feature additions with security fixes
• Affects: Codex agent execution, enterprise deployments
• Benefits:
  • Improved shell command handling
  • Better TUI customization
  • Enhanced app-server capabilities
  • Security dependency updates

Package Links

• NPM Package: https://www.npmjs.com/package/`@openai/codex`
• Repository: https://github.com/openai/codex
• Release Notes: https://github.com/openai/codex/releases/tag/rust-v0.99.0
• Commits: 46 commits since release to main

---

MCP Gateway v0.1.1

Release Date: February 12, 2026

Breaking Changes

None

Key Features

• GPL dependency detection: Automated daily workflow for detecting GPL dependencies
• MCP server tool discovery: Added tools.json logging to facilitate tool discovery

Bug Fixes

• Corrected payload threshold documentation and internal directory references
• Resolved environment variable documentation discrepancies

View Full Changelog

Merged Pull Requests

1. #889 – Documentation corrections for payload thresholds and directories
2. #901 – Environment variable documentation fixes
3. #902 – Daily GPL dependency detection workflow (Copilot-contributed)
4. **[Rename supportsToolsWhitelist to supportsToolsAllowlist #903](https://github.com/github/...

• Fixes [ca] CLI Version Updates: Copilot CLI 0.0.407, Codex 0.99.0, MCP Gateway v0.1.1 #15056

---

💬 We'd love your input! Share your thoughts on Copilot coding agent in our 2 minute survey.

[github-actions]

🌑 The shadows whisper... Smoke Codex failed. The oracle requires further meditation...

[github-actions]

📰 BREAKING: Smoke Copilot is now investigating this pull request. Sources say the story is developing...

[github-actions]

❌ Changeset Generator failed. Please review the logs for details.

[github-actions]

🧪 Smoke Project is now testing project operations...

[github-actions]

💫 TO BE CONTINUED... Smoke Claude failed! Our hero faces unexpected challenges...

[github-actions]

❌ Smoke Project encountered failures. Check the logs for details.

[github-actions]

📰 DEVELOPING STORY: Smoke Copilot reports failed. Our correspondents are investigating the incident...