Updated versions & CHANGELOG.md for v2.25.1-next.1 release

CHANGELOG.md

@@ -14,6 +14,72 @@ release cadence.
 
 _Changes on `main` since the latest tagged release that have not yet been included in a stable release._
 
+> Preview theme: the **next** phase of MCP-assisted CodeQL query development, incorporating and extending ideas for [`GitHubSecurityLab/seclab-taskflow-agent`](https://github.com/GitHubSecurityLab/seclab-taskflow-agent) and `seclab-taskflows` for multi-repository variant analysis workflows.
+
+### Highlights
+
+- **Persistent MRVA workflow state and caching** — Introduced a new `SqliteStore` backend plus opt-in annotation, audit, and query result cache tools to support the next phase of MCP-assisted CodeQL development and `seclab-taskflow-agent` integration. ([#169](https://github.com/advanced-security/codeql-development-mcp-server/pull/169))
+- **Rust language support** — Added first-class Rust support with `PrintAST`, `PrintCFG`, `CallGraphFrom`, `CallGraphTo`, and `CallGraphFromTo` queries, bringing the total supported languages to 10. ([#195](https://github.com/advanced-security/codeql-development-mcp-server/pull/195))
+- **VS Code workspace change reliability** — Fixed MCP server restart behavior when workspace folders change so the extension now restarts the server with a fresh environment instead of leaving it partially stopped. ([#196](https://github.com/advanced-security/codeql-development-mcp-server/pull/196))
+
+### Added
+
+#### MCP Server Tools
+
+| Tool                                                                                                                     | Description                                                                                                                                                                                            |
+| ------------------------------------------------------------------------------------------------------------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
+| `annotation_create`, `annotation_get`, `annotation_list`, `annotation_update`, `annotation_delete`, `annotation_search`  | General-purpose annotation tools for creating, managing, and searching notes and bookmarks on analysis entities. ([#169](https://github.com/advanced-security/codeql-development-mcp-server/pull/169)) |
+| `audit_store_findings`, `audit_list_findings`, `audit_add_notes`, `audit_clear_repo`                                     | Repo-keyed audit tools for MRVA finding management and triage workflows. ([#169](https://github.com/advanced-security/codeql-development-mcp-server/pull/169))                                         |
+| `query_results_cache_lookup`, `query_results_cache_retrieve`, `query_results_cache_clear`, `query_results_cache_compare` | Query result cache tools for lookup, subset retrieval, cache clearing, and cross-database comparison. ([#169](https://github.com/advanced-security/codeql-development-mcp-server/pull/169))            |
+
+#### MCP Server Resources
+
+| URI                           | Description                                                                                                                                                                       |
+| ----------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `codeql://languages/rust/ast` | Rust AST reference resource with verified accessor predicates for CodeQL query development. ([#195](https://github.com/advanced-security/codeql-development-mcp-server/pull/195)) |
+
+#### CodeQL Query Packs
+
+| Pack            | Description                                                                                                                                                                                 |
+| --------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| Rust tools pack | Added `PrintAST`, `PrintCFG`, `CallGraphFrom`, `CallGraphTo`, and `CallGraphFromTo` support for Rust. ([#195](https://github.com/advanced-security/codeql-development-mcp-server/pull/195)) |
+
+#### Infrastructure & CI/CD
+
+- Added Rust coverage to CI and release workflows, including query unit tests and VSIX bundling. ([#195](https://github.com/advanced-security/codeql-development-mcp-server/pull/195))
+- Added client integration tests for the new Rust queries and for the annotation, audit, and cache tool suites, including an MRVA triage workflow end-to-end test. ([#169](https://github.com/advanced-security/codeql-development-mcp-server/pull/169), [#195](https://github.com/advanced-security/codeql-development-mcp-server/pull/195))
+
+### Changed
+
+#### MCP Server Tools
+
+| Tool                                   | Change                                                                                                                                                                                                |
+| -------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `codeql_query_run`                     | Query results are now auto-cached after SARIF interpretation, enabling later lookup and comparison workflows. ([#169](https://github.com/advanced-security/codeql-development-mcp-server/pull/169))   |
+| query metadata and database resolution | Added in-memory caching with mtime-based invalidation and deduplicated resolution logic for better performance. ([#169](https://github.com/advanced-security/codeql-development-mcp-server/pull/169)) |
+
+#### VS Code Extension
+
+- `McpProvider.requestRestart()` now invalidates the environment cache and bumps a `+rN` revision suffix so VS Code reliably restarts the MCP server after configuration changes. ([#196](https://github.com/advanced-security/codeql-development-mcp-server/pull/196))
+- Cached the extension version in the provider constructor to avoid repeated synchronous reads of `package.json`. ([#196](https://github.com/advanced-security/codeql-development-mcp-server/pull/196))
+
+#### Infrastructure & CI/CD
+
+- Refactored monolithic server logic into focused `database-resolver`, `query-resolver`, `result-processor`, and `codeql-version` modules for maintainability and reuse. ([#169](https://github.com/advanced-security/codeql-development-mcp-server/pull/169))
+
+### Fixed
+
+- **Workspace folder changes could leave the MCP server stopped but not restarted** — The VS Code extension now rebuilds the environment and forces a proper restart when workspace folders change. ([#196](https://github.com/advanced-security/codeql-development-mcp-server/pull/196))
+
+### Dependencies
+
+- Replaced `lowdb` with `sql.js` as the persistence backend, removing the previous JSON-file storage dependency. ([#169](https://github.com/advanced-security/codeql-development-mcp-server/pull/169))
+- Added `codeql/rust-all` support for the new Rust tool queries. ([#195](https://github.com/advanced-security/codeql-development-mcp-server/pull/195))
+
+### New Contributors
+
+- [@Copilot](https://github.com/apps/copilot-swe-agent) made their first contribution in [#195](https://github.com/advanced-security/codeql-development-mcp-server/pull/195)
+
 ## [v2.25.1] — 2026-03-29
 
 ### Highlights

client/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codeql-development-mcp-server_client",
-  "version": "2.25.1",
+  "version": "2.25.1-next.1",
   "description": "MCP client for integration testing of the CodeQL development MCP server",
   "main": "src/ql-mcp-client.js",
   "type": "module",

extensions/vscode/package.json

@@ -2,7 +2,7 @@
   "name": "vscode-codeql-development-mcp-server",
   "displayName": "CodeQL Development MCP Server",
   "description": "LLM-assisted development of CodeQL queries, libraries, and tests via #ql-mcp prompts, resources, and tools.",
-  "version": "2.25.1",
+  "version": "2.25.1-next.1",
   "publisher": "advanced-security",
   "license": "SEE LICENSE IN LICENSE",
   "icon": "media/codeql-icon.png",

package.json

@@ -1,6 +1,6 @@
 {
   "name": "codeql-development-mcp-server_repo",
-  "version": "2.25.1",
+  "version": "2.25.1-next.1",
   "description": "An MCP server supporting LLM requests for CodeQL development tools and resources.",
   "private": true,
   "type": "module",

server/dist/codeql-development-mcp-server.js

@@ -193908,7 +193908,7 @@ init_package_paths();
 init_logger();
 import_dotenv.default.config({ path: resolve14(packageRootDir, ".env"), quiet: true });
 var PACKAGE_NAME = "codeql-development-mcp-server";
-var VERSION = "2.25.1";
+var VERSION = "2.25.1-next.1";
 async function startServer(mode = "stdio") {
   logger.info(`Starting CodeQL Development MCP McpServer v${VERSION} in ${mode} mode`);
   const codeqlBinary = resolveCodeQLBinary();

server/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codeql-development-mcp-server",
-  "version": "2.25.1",
+  "version": "2.25.1-next.1",
   "description": "An MCP server supporting LLM requests for CodeQL development tools and resources.",
   "main": "dist/codeql-development-mcp-server.js",
   "type": "module",

server/ql/actions/tools/src/codeql-pack.yml

@@ -1,5 +1,5 @@
 name: advanced-security/ql-mcp-actions-tools-src
-version: 2.25.1
+version: 2.25.1-next.1
 description: 'Queries for codeql-development-mcp-server tools for actions language'
 library: false
 dependencies:

server/ql/actions/tools/test/codeql-pack.yml

@@ -1,5 +1,5 @@
 name: advanced-security/ql-mcp-actions-tools-test
-version: 2.25.1
+version: 2.25.1-next.1
 dependencies:
   advanced-security/ql-mcp-actions-tools-src: ${workspace}
 extractor: actions

server/ql/cpp/tools/src/codeql-pack.yml

@@ -1,5 +1,5 @@
 name: advanced-security/ql-mcp-cpp-tools-src
-version: 2.25.1
+version: 2.25.1-next.1
 description: 'Queries for codeql-development-mcp-server tools for cpp language'
 library: false
 dependencies:

server/ql/cpp/tools/test/codeql-pack.yml

@@ -1,5 +1,5 @@
 name: advanced-security/ql-mcp-cpp-tools-test
-version: 2.25.1
+version: 2.25.1-next.1
 dependencies:
   advanced-security/ql-mcp-cpp-tools-src: ${workspace}
 extractor: cpp

server/ql/csharp/tools/src/codeql-pack.yml

@@ -1,5 +1,5 @@
 name: advanced-security/ql-mcp-csharp-tools-src
-version: 2.25.1
+version: 2.25.1-next.1
 description: 'Queries for codeql-development-mcp-server tools for csharp language'
 library: false
 dependencies:

server/ql/csharp/tools/test/codeql-pack.yml

@@ -1,5 +1,5 @@
 name: advanced-security/ql-mcp-csharp-tools-test
-version: 2.25.1
+version: 2.25.1-next.1
 dependencies:
   advanced-security/ql-mcp-csharp-tools-src: ${workspace}
 extractor: csharp

server/ql/go/tools/src/codeql-pack.yml

@@ -1,5 +1,5 @@
 name: advanced-security/ql-mcp-go-tools-src
-version: 2.25.1
+version: 2.25.1-next.1
 description: 'Queries for codeql-development-mcp-server tools for go language'
 library: false
 dependencies:

server/ql/go/tools/test/codeql-pack.yml

@@ -1,5 +1,5 @@
 name: advanced-security/ql-mcp-go-tools-test
-version: 2.25.1
+version: 2.25.1-next.1
 dependencies:
   advanced-security/ql-mcp-go-tools-src: ${workspace}
 extractor: go

server/ql/java/tools/src/codeql-pack.yml

@@ -1,5 +1,5 @@
 name: advanced-security/ql-mcp-java-tools-src
-version: 2.25.1
+version: 2.25.1-next.1
 description: 'Queries for codeql-development-mcp-server tools for java language'
 library: false
 dependencies:

server/ql/java/tools/test/codeql-pack.yml

@@ -1,5 +1,5 @@
 name: advanced-security/ql-mcp-java-tools-test
-version: 2.25.1
+version: 2.25.1-next.1
 dependencies:
   advanced-security/ql-mcp-java-tools-src: ${workspace}
 extractor: java

server/ql/javascript/tools/src/codeql-pack.yml

@@ -1,5 +1,5 @@
 name: advanced-security/ql-mcp-javascript-tools-src
-version: 2.25.1
+version: 2.25.1-next.1
 description: 'Queries for codeql-development-mcp-server tools for javascript language'
 library: false
 dependencies:

server/ql/javascript/tools/test/codeql-pack.yml

@@ -1,5 +1,5 @@
 name: advanced-security/ql-mcp-javascript-tools-test
-version: 2.25.1
+version: 2.25.1-next.1
 dependencies:
   advanced-security/ql-mcp-javascript-tools-src: ${workspace}
 extractor: javascript

server/ql/python/tools/src/codeql-pack.yml

@@ -1,5 +1,5 @@
 name: advanced-security/ql-mcp-python-tools-src
-version: 2.25.1
+version: 2.25.1-next.1
 description: 'Queries for codeql-development-mcp-server tools for python language'
 library: false
 dependencies:

server/ql/python/tools/test/codeql-pack.yml

@@ -1,5 +1,5 @@
 name: advanced-security/ql-mcp-python-tools-test
-version: 2.25.1
+version: 2.25.1-next.1
 dependencies:
   advanced-security/ql-mcp-python-tools-src: ${workspace}
 extractor: python

server/ql/ruby/tools/src/codeql-pack.yml

@@ -1,5 +1,5 @@
 name: advanced-security/ql-mcp-ruby-tools-src
-version: 2.25.1
+version: 2.25.1-next.1
 description: 'Queries for codeql-development-mcp-server tools for ruby language'
 library: false
 dependencies:

server/ql/ruby/tools/test/codeql-pack.yml

@@ -1,5 +1,5 @@
 name: advanced-security/ql-mcp-ruby-tools-test
-version: 2.25.1
+version: 2.25.1-next.1
 dependencies:
   advanced-security/ql-mcp-ruby-tools-src: ${workspace}
 extractor: ruby

server/ql/rust/tools/src/codeql-pack.yml

@@ -1,5 +1,5 @@
 name: advanced-security/ql-mcp-rust-tools-src
-version: 2.25.1
+version: 2.25.1-next.1
 description: 'Queries for codeql-development-mcp-server tools for rust language'
 library: false
 dependencies:

server/ql/rust/tools/test/codeql-pack.yml

@@ -1,5 +1,5 @@
 name: advanced-security/ql-mcp-rust-tools-test
-version: 2.25.1
+version: 2.25.1-next.1
 dependencies:
   advanced-security/ql-mcp-rust-tools-src: ${workspace}
 extractor: rust

server/ql/swift/tools/src/codeql-pack.yml

@@ -1,5 +1,5 @@
 name: advanced-security/ql-mcp-swift-tools-src
-version: 2.25.1
+version: 2.25.1-next.1
 description: 'Queries for codeql-development-mcp-server tools for swift language'
 library: false
 dependencies:

server/ql/swift/tools/test/codeql-pack.yml

@@ -1,5 +1,5 @@
 name: advanced-security/ql-mcp-swift-tools-test
-version: 2.25.1
+version: 2.25.1-next.1
 dependencies:
   advanced-security/ql-mcp-swift-tools-src: ${workspace}
 extractor: swift

server/src/codeql-development-mcp-server.ts

@@ -34,7 +34,7 @@ import { logger } from './utils/logger';
 dotenv.config({ path: resolve(packageRootDir, '.env'), quiet: true });
 
 const PACKAGE_NAME = 'codeql-development-mcp-server';
-const VERSION = '2.25.1';
+const VERSION = '2.25.1-next.1';
 
 /**
  * Start the MCP server