You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: CHANGELOG.md
+20-1Lines changed: 20 additions & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -14,6 +14,13 @@ release cadence.
14
14
15
15
_Changes on `main` since the latest tagged release that have not yet been included in a stable release._
16
16
17
+
## [v2.26.2] — 2026-07-29
18
+
19
+
### Highlights
20
+
21
+
-**Upgraded CodeQL CLI to v2.26.2** — All bundled CodeQL tool query packs were re-resolved against the v2.26.2 library set (`actions-all` 0.4.40, `cpp-all` 12.0.1, `csharp-all` 7.1.1, `go-all` 7.2.2, `java-all` 9.2.2, `javascript-all` 2.8.2, `python-all` 7.2.2, `ruby-all` 6.0.2, `rust-all` 0.2.18, `swift-all` 6.8.0). ([#329](https://github.com/advanced-security/codeql-development-mcp-server/pull/329))
22
+
-**Realigned Node.js support with the LTS release line** — Node.js 24 is now the default development and CI runtime, Node.js 26 is tested across the build workflows, and the unsupported non-LTS Node.js 25 line has been removed from the package engine constraints. ([#328](https://github.com/advanced-security/codeql-development-mcp-server/pull/328))
23
+
17
24
### Changed
18
25
19
26
#### Infrastructure & CI/CD
@@ -22,12 +29,23 @@ _Changes on `main` since the latest tagged release that have not yet been includ
22
29
-**Added Node.js matrix testing to the build workflows.**`build-server.yml`, `build-and-test-client.yml`, and `build-and-test-extension.yml` now run against both Node 24 (via `.node-version`) and Node 26, with the Node version surfaced in job names and `$GITHUB_STEP_SUMMARY` output. Each matrix entry uses two `if:`-guarded `actions/setup-node` steps so `node-version` is never passed as an empty string (which would otherwise take precedence over `node-version-file` and silently select the runner's default Node). ([#328](https://github.com/advanced-security/codeql-development-mcp-server/pull/328))
23
30
-**Pinned `@types/node` repo-wide via a root `overrides` entry** (`^24.13.3`) so every workspace type-checks against a single Node typings version that matches the supported Node 24 LTS baseline. ([#328](https://github.com/advanced-security/codeql-development-mcp-server/pull/328))
24
31
32
+
### Security
33
+
34
+
- Upgraded the transitive `brace-expansion` dependency from 1.1.14 to 1.1.16, incorporating the v1 backport for CVE-2026-13149. ([#320](https://github.com/advanced-security/codeql-development-mcp-server/pull/320))
35
+
25
36
### Dependencies
26
37
38
+
-**Upgraded the CodeQL CLI dependency to v2.26.2.** All version-bearing files (including `.codeql-version`, the root/server/extension `package.json` files, the per-language `codeql-pack.yml` manifests, and the server `VERSION` constant) and all `codeql-pack.lock.yml` files were updated. ([#329](https://github.com/advanced-security/codeql-development-mcp-server/pull/329))
27
39
- Upgraded server runtime dependencies: `adm-zip` 0.5.17 → 0.6.0 and `js-yaml` 4.1.1 → 5.2.2 (5.2.2 carries a fix for a high-severity advisory affecting 5.2.1). Both packages now ship their own type declarations, so the `@types/adm-zip` and `@types/js-yaml` devDependencies were removed. ([#328](https://github.com/advanced-security/codeql-development-mcp-server/pull/328))
- Upgraded VS Code extension devDependencies: `@vscode/test-cli` 0.0.12 → 0.0.15, `@vscode/test-electron` 2.5.2 → 3.0.0, and `@vscode/vsce` 3.9.1 → 3.9.2. ([#328](https://github.com/advanced-security/codeql-development-mcp-server/pull/328))
30
42
- Upgraded Go MCP client dependencies: `github.com/mark3labs/mcp-go` 0.56.0 → 0.57.0, plus refreshed transitive modules (`cli/safeexec`, `google/jsonschema-go`, `henvic/httpretty`, `lucasb-eyer/go-colorful`, `mattn/go-isatty`, `spf13/cast`, `spf13/pflag`, `thlib/go-timezone-local`, and `golang.org/x/{sys,term,text}`). ([#328](https://github.com/advanced-security/codeql-development-mcp-server/pull/328))
43
+
- Bumped `hono` from 4.12.25 to 4.12.31. ([#323](https://github.com/advanced-security/codeql-development-mcp-server/pull/323))
44
+
- Bumped `actions/setup-go` from 6.5.0 to 7.0.0, `actions/setup-node` from 6.4.0 to 7.0.0, and `softprops/action-gh-release` from 3.0.1 to 3.0.2. ([#325](https://github.com/advanced-security/codeql-development-mcp-server/pull/325))
0 commit comments