Summary
- MCP Gateway updated: v0.1.19 → v0.1.20 (released 2026-03-20)
constants.go updated and make recompile run successfully (177/177 workflows compiled)- Other tracked tools with new versions use
"latest" pinning (no constant changes needed):
- Claude Code: 2.1.79 → 2.1.80
- Codex: 0.115.0 → 0.116.0
Update MCP Gateway v0.1.19 → v0.1.20
- Previous: v0.1.19 → New: v0.1.20
- Released: 2026-03-20
- Docker image:
ghcr.io/github/gh-aw-mcpg:v0.1.20
Breaking Changes
None
Key Features
View Full Changelog
Bug Fixes & Improvements
- Hardened DIFC proxy enforcement — fail closed throughout pipeline (no silent info leaks on DIFC errors)
- Human-readable secrecy level names in write-denial reasons (e.g.
private:owner/repo)
- Fixed crash when
ParseToolArguments received nil Params
- Empty/invalid
trusted_bots entries now caught at config load time (TOML and stdin JSON paths)
- Rust guard: removed dead params from
issue_integrity, fixed heap-allocating string comparison
Merged PRs (from GitHub)
Impact Assessment
- Risk: Low
- Affects: MCP Gateway sandbox container; DIFC enforcement pipeline
- Migration: No breaking changes; new proxy mode and trusted bots features are additive
Package Links
Other Version Updates (no constant changes required)
| Tool |
Previous |
Latest |
Notes |
| Claude Code |
2.1.79 |
2.1.80 |
Uses "latest" — no constant change |
| Codex |
0.115.0 |
0.116.0 |
Uses "latest" — no constant change |
Codex 0.116.0 Highlights
- App-server TUI now supports device-code ChatGPT sign-in during onboarding with token refresh
- New
userpromptsubmit hook for blocking/augmenting prompts before execution
- Smoother plugin/connector setup with automatic missing plugin installation prompts
- Realtime sessions begin with recent thread context; fewer self-interruptions during audio playback
- Fixed websocket prewarm delays causing first-turn stalls
References:
Generated by CLI Version Checker · ◷
Summary
constants.goupdated andmake recompilerun successfully (177/177 workflows compiled)"latest"pinning (no constant changes needed):Update MCP Gateway v0.1.19 → v0.1.20
ghcr.io/github/gh-aw-mcpg:v0.1.20Breaking Changes
None
Key Features
approvedintegrity levels (spec §4.1.3.4); see https://github.com/github/gh-aw-mcpg/blob/main/docs/CONFIGURATION.md[DIFC] 3 item(s) removed by integrity policy), preventing agents from concluding result sets are emptyView Full Changelog
Bug Fixes & Improvements
private:owner/repo)ParseToolArgumentsreceived nilParamstrusted_botsentries now caught at config load time (TOML and stdin JSON paths)issue_integrity, fixed heap-allocating string comparisonMerged PRs (from GitHub)
issue_integrity+ fix heap-allocating string comparison gh-aw-mcpg#2152 — rust-guard cleanupImpact Assessment
Package Links
Other Version Updates (no constant changes required)
"latest"— no constant change"latest"— no constant changeCodex 0.116.0 Highlights
userpromptsubmithook for blocking/augmenting prompts before executionReferences: