Prep for `v2.25.2` release of `codeql-development-mcp-server` by data-douser · Pull Request #251 · advanced-security/codeql-development-mcp-server

data-douser · 2026-04-15T16:40:16Z

Summary of Changes

Upgrades the value of .codeql-version file to v2.25.2 in preparation for v2.25.2 release version of the codeql-development-mcp-server repository.

Fixes a bug in the server/upgrade-packs.sh script so that packs for Rust language are part of update-codeql.yml actions workflow automation.

Updates package.json and other static references to old versions in order to synchronize versions in preparation for repo release.

Updates CHANGELOG.md to move "unreleased" changes under the (pending) v2.25.2 release section.

Outline of Changes

Highlights and New Features:

Prompt and Tool Improvements:
- All 14 workflow prompts now offer auto-complete suggestions for parameters like queryPath, database, language, and sarifPath using the MCP SDK's completable() function. Several prompts can now automatically derive the language parameter from the nearest codeql-pack.yml. [1] [2]
- CLI tools now normalize camelCase and snake_case parameter names to kebab-case and report all validation errors at once, making them more robust for LLM-driven usage. [1] [2]
SARIF Analysis and Persistent State:
- Added five SARIF analysis tools, persistent workflow state and caching via a new SqliteStore backend, and first-class Rust language support, bringing the total supported languages to 10. [1] [2]

Dependency and Version Updates:

Upgraded CodeQL CLI and QL packs:
- Updated the CodeQL CLI and all ql-mcp-* pack dependencies to v2.25.2, including lock file regeneration and Rust pack support. [1] [2] [3] [4] [5] [6] [7] [8] [9]
- Bumped several npm dependencies to their latest compatible versions.

Documentation and Changelog:

Updated the CHANGELOG.md:
- Added a new section for v2.25.2 with detailed highlights, new features, fixes, and dependency changes. Updated comparison links and release references. [1] [2]

Fixes and Infrastructure:

Fixed issues with Rust pack upgrades, stale test output cleanup, and improved CI scripts for test databases.
Various improvements to the VS Code extension for reliability, logging, and file watching.

This release brings significant usability improvements for both end-users and LLM-driven workflows, ensures compatibility with the latest CodeQL ecosystem, and addresses several reliability and infrastructure issues.

Upgrades the .codeql-version to v2.25.2 in preparation for same release version of the codeql-development-mcp-server repository. Fixes a bug in the server/upgrade-packs.sh script so that packs for Rust language are part of update-codeql.yml actions workflow automation. Updates package.json and other static references to old versions in order to synchronize versions in preparation for repo release.

github-actions · 2026-04-15T16:40:32Z

Dependency Review

The following issues were found:

✅ 0 vulnerable package(s)
✅ 0 package(s) with incompatible licenses
✅ 0 package(s) with invalid SPDX license definitions
⚠️ 3 package(s) with unknown licenses.

See the Details below.

Snapshot Warnings

⚠️: No snapshots were found for the head SHA 5b7f6bf.

Ensure that dependencies are being submitted on PR branches and consider enabling retry-on-snapshot-warnings. See the documentation for more information and troubleshooting advice.

License Issues

package-lock.json

Package	Version	License	Issue Type
client	2.25.2	Null	Unknown License
extensions/vscode	2.25.2	Null	Unknown License
server	2.25.2	Null	Unknown License

OpenSSF Scorecard

Package	Version	Score	Details
npm/client	2.25.2	Unknown	Unknown
npm/extensions/vscode	2.25.2	Unknown	Unknown
npm/server	2.25.2	Unknown	Unknown

Scanned Files

package-lock.json

Copilot

Pull request overview

Prepares the repository for the v2.25.2 stable release by aligning CodeQL CLI/version references, ensuring Rust packs are included in the pack-upgrade automation, and updating release documentation.

Changes:

Bump repo/server/client/extension/package versions to 2.25.2 and update .codeql-version to v2.25.2.
Fix pack upgrade automation to include Rust packs; update QL pack versions/lockfiles accordingly.
Roll forward CHANGELOG.md for the v2.25.2 release and update integration test expected SARIF output.

Show a summary per file

File	Description
server/src/codeql-development-mcp-server.ts	Bumps the server’s reported runtime version to `2.25.2`.
server/scripts/upgrade-packs.sh	Includes Rust tools packs in the “all languages” upgrade loop.
server/ql/swift/tools/test/codeql-pack.yml	Bumps Swift tools test pack version to `2.25.2`.
server/ql/swift/tools/src/codeql-pack.yml	Bumps Swift tools src pack version to `2.25.2`.
server/ql/rust/tools/test/codeql-pack.yml	Bumps Rust tools test pack version to `2.25.2`.
server/ql/rust/tools/src/codeql-pack.yml	Bumps Rust tools src pack version to `2.25.2`.
server/ql/ruby/tools/test/codeql-pack.yml	Bumps Ruby tools test pack version to `2.25.2`.
server/ql/ruby/tools/src/codeql-pack.yml	Bumps Ruby tools src pack version to `2.25.2`.
server/ql/python/tools/test/codeql-pack.yml	Bumps Python tools test pack version to `2.25.2`.
server/ql/python/tools/src/codeql-pack.yml	Bumps Python tools src pack version to `2.25.2`.
server/ql/javascript/tools/test/codeql-pack.yml	Bumps JavaScript tools test pack version to `2.25.2`.
server/ql/javascript/tools/src/codeql-pack.yml	Bumps JavaScript tools src pack version to `2.25.2`.
server/ql/javascript/examples/test/codeql-pack.lock.yml	Updates example test pack lock dependencies for the new CodeQL ecosystem versions.
server/ql/javascript/examples/src/codeql-pack.lock.yml	Updates example src pack lock dependencies for the new CodeQL ecosystem versions.
server/ql/java/tools/test/codeql-pack.yml	Bumps Java tools test pack version to `2.25.2`.
server/ql/java/tools/src/codeql-pack.yml	Bumps Java tools src pack version to `2.25.2`.
server/ql/go/tools/test/codeql-pack.yml	Bumps Go tools test pack version to `2.25.2`.
server/ql/go/tools/src/codeql-pack.yml	Bumps Go tools src pack version to `2.25.2`.
server/ql/csharp/tools/test/codeql-pack.yml	Bumps C# tools test pack version to `2.25.2`.
server/ql/csharp/tools/src/codeql-pack.yml	Bumps C# tools src pack version to `2.25.2`.
server/ql/cpp/tools/test/codeql-pack.yml	Bumps C/C++ tools test pack version to `2.25.2`.
server/ql/cpp/tools/src/codeql-pack.yml	Bumps C/C++ tools src pack version to `2.25.2`.
server/ql/actions/tools/test/codeql-pack.yml	Bumps Actions tools test pack version to `2.25.2`.
server/ql/actions/tools/src/codeql-pack.yml	Bumps Actions tools src pack version to `2.25.2`.
server/package.json	Bumps server package version to `2.25.2`.
server/dist/codeql-development-mcp-server.js	Updates built artifact to reflect `2.25.2` runtime version.
package.json	Bumps workspace root version to `2.25.2`.
package-lock.json	Regenerates lockfile metadata versions for the workspace packages to `2.25.2`.
extensions/vscode/package.json	Bumps VS Code extension version to `2.25.2`.
client/package.json	Bumps client package version to `2.25.2`.
client/integration-tests/primitives/tools/codeql_bqrs_interpret/sarif_format/after/results.sarif	Updates expected SARIF driver semantic version to `2.25.2`.
CHANGELOG.md	Adds `v2.25.2` release section, updates comparison links, and records changes.
.codeql-version	Pins CodeQL CLI version to `v2.25.2`.

Copilot's findings

Files reviewed: 31/34 changed files
Comments generated: 2

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> Signed-off-by: Nathan Randall <70299490+data-douser@users.noreply.github.com>

Copilot

Pull request overview

Prepares the repository for the v2.25.2 stable release by synchronizing version numbers across server/client/extension artifacts, updating CodeQL pack metadata/locks, and adjusting release documentation and automation.

Changes:

Bump repository/package/server versions to 2.25.2 and CodeQL CLI version to v2.25.2.
Fix server/scripts/upgrade-packs.sh to include Rust packs in the “all languages” upgrade path.
Update pack versions/lock files and move release notes into a new CHANGELOG.md v2.25.2 section.

Show a summary per file

File	Description
server/src/codeql-development-mcp-server.ts	Bumps runtime server version constant to `2.25.2`.
server/scripts/upgrade-packs.sh	Adds Rust pack upgrades to the all-languages upgrade loop.
server/ql/swift/tools/test/codeql-pack.yml	Bumps Swift test pack version to `2.25.2`.
server/ql/swift/tools/src/codeql-pack.yml	Bumps Swift src pack version to `2.25.2`.
server/ql/rust/tools/test/codeql-pack.yml	Bumps Rust test pack version to `2.25.2`.
server/ql/rust/tools/src/codeql-pack.yml	Bumps Rust src pack version to `2.25.2`.
server/ql/ruby/tools/test/codeql-pack.yml	Bumps Ruby test pack version to `2.25.2`.
server/ql/ruby/tools/src/codeql-pack.yml	Bumps Ruby src pack version to `2.25.2`.
server/ql/python/tools/test/codeql-pack.yml	Bumps Python test pack version to `2.25.2`.
server/ql/python/tools/src/codeql-pack.yml	Bumps Python src pack version to `2.25.2`.
server/ql/javascript/tools/test/codeql-pack.yml	Bumps JavaScript test pack version to `2.25.2`.
server/ql/javascript/tools/src/codeql-pack.yml	Bumps JavaScript src pack version to `2.25.2`.
server/ql/javascript/examples/test/codeql-pack.lock.yml	Updates JS example test pack lock dependencies.
server/ql/javascript/examples/src/codeql-pack.lock.yml	Updates JS example src pack lock dependencies.
server/ql/java/tools/test/codeql-pack.yml	Bumps Java test pack version to `2.25.2`.
server/ql/java/tools/src/codeql-pack.yml	Bumps Java src pack version to `2.25.2`.
server/ql/go/tools/test/codeql-pack.yml	Bumps Go test pack version to `2.25.2`.
server/ql/go/tools/src/codeql-pack.yml	Bumps Go src pack version to `2.25.2`.
server/ql/csharp/tools/test/codeql-pack.yml	Bumps C# test pack version to `2.25.2`.
server/ql/csharp/tools/src/codeql-pack.yml	Bumps C# src pack version to `2.25.2`.
server/ql/cpp/tools/test/codeql-pack.yml	Bumps C/C++ test pack version to `2.25.2`.
server/ql/cpp/tools/src/codeql-pack.yml	Bumps C/C++ src pack version to `2.25.2`.
server/ql/actions/tools/test/codeql-pack.yml	Bumps Actions test pack version to `2.25.2`.
server/ql/actions/tools/src/codeql-pack.yml	Bumps Actions src pack version to `2.25.2`.
server/package.json	Bumps server package version to `2.25.2`.
server/dist/codeql-development-mcp-server.js	Updates bundled output to reflect version `2.25.2`.
package.json	Bumps repo root workspace version to `2.25.2`.
package-lock.json	Synchronizes workspace versions to `2.25.2`.
extensions/vscode/package.json	Bumps VS Code extension version to `2.25.2`.
client/package.json	Bumps client package version to `2.25.2`.
client/integration-tests/primitives/tools/codeql_bqrs_interpret/sarif_format/after/results.sarif	Updates expected SARIF output (currently appears inconsistent with actual pack metadata).
CHANGELOG.md	Adds `v2.25.2` release section and updates comparison links.
.codeql-version	Bumps CodeQL CLI version to `v2.25.2`.

Copilot's findings

Files reviewed: 31/34 changed files
Comments generated: 1

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> Signed-off-by: Nathan Randall <70299490+data-douser@users.noreply.github.com>

Copilot

Pull request overview

Note

Copilot was unable to run its full agentic suite in this review.

Prepares the repo for the v2.25.2 release by bumping version references across the server/client/extension, updating CodeQL pack metadata/locks, and fixing Rust pack upgrades in automation.

Changes:

Bumped repo, server, client, extension, and QL pack versions to 2.25.2 (and .codeql-version to v2.25.2)
Fixed server/scripts/upgrade-packs.sh to include Rust packs in the all-languages upgrade loop
Updated CodeQL pack lockfiles and moved “unreleased” changelog content under the v2.25.2 section

Show a summary per file

File	Description
server/src/codeql-development-mcp-server.ts	Bumps server-reported version to `2.25.2`.
server/scripts/upgrade-packs.sh	Includes Rust packs in the bulk upgrade loop.
server/ql/swift/tools/test/codeql-pack.yml	Bumps Swift tools test pack version to `2.25.2`.
server/ql/swift/tools/src/codeql-pack.yml	Bumps Swift tools src pack version to `2.25.2`.
server/ql/rust/tools/test/codeql-pack.yml	Bumps Rust tools test pack version to `2.25.2`.
server/ql/rust/tools/src/codeql-pack.yml	Bumps Rust tools src pack version to `2.25.2`.
server/ql/ruby/tools/test/codeql-pack.yml	Bumps Ruby tools test pack version to `2.25.2`.
server/ql/ruby/tools/src/codeql-pack.yml	Bumps Ruby tools src pack version to `2.25.2`.
server/ql/python/tools/test/codeql-pack.yml	Bumps Python tools test pack version to `2.25.2`.
server/ql/python/tools/src/codeql-pack.yml	Bumps Python tools src pack version to `2.25.2`.
server/ql/javascript/tools/test/codeql-pack.yml	Bumps JavaScript tools test pack version to `2.25.2`.
server/ql/javascript/tools/src/codeql-pack.yml	Bumps JavaScript tools src pack version to `2.25.2`.
server/ql/javascript/examples/test/codeql-pack.lock.yml	Updates JS examples test lockfile dependency versions.
server/ql/javascript/examples/src/codeql-pack.lock.yml	Updates JS examples src lockfile dependency versions.
server/ql/java/tools/test/codeql-pack.yml	Bumps Java tools test pack version to `2.25.2`.
server/ql/java/tools/src/codeql-pack.yml	Bumps Java tools src pack version to `2.25.2`.
server/ql/go/tools/test/codeql-pack.yml	Bumps Go tools test pack version to `2.25.2`.
server/ql/go/tools/src/codeql-pack.yml	Bumps Go tools src pack version to `2.25.2`.
server/ql/csharp/tools/test/codeql-pack.yml	Bumps C# tools test pack version to `2.25.2`.
server/ql/csharp/tools/src/codeql-pack.yml	Bumps C# tools src pack version to `2.25.2`.
server/ql/cpp/tools/test/codeql-pack.yml	Bumps C++ tools test pack version to `2.25.2`.
server/ql/cpp/tools/src/codeql-pack.yml	Bumps C++ tools src pack version to `2.25.2`.
server/ql/actions/tools/test/codeql-pack.yml	Bumps Actions tools test pack version to `2.25.2`.
server/ql/actions/tools/src/codeql-pack.yml	Bumps Actions tools src pack version to `2.25.2`.
server/package.json	Bumps server package version to `2.25.2`.
server/dist/codeql-development-mcp-server.js	Updates built output version string to `2.25.2`.
package.json	Bumps repo package version to `2.25.2`.
extensions/vscode/package.json	Bumps VS Code extension version to `2.25.2`.
client/package.json	Bumps client package version to `2.25.2`.
client/integration-tests/primitives/tools/codeql_bqrs_interpret/sarif_format/after/results.sarif	Updates SARIF golden output to reflect `2.25.2`.
CHANGELOG.md	Moves unreleased content into `v2.25.2` section and updates links.
.codeql-version	Bumps CodeQL CLI version to `v2.25.2`.

Copilot's findings

Comments suppressed due to low confidence (1)

server/src/codeql-development-mcp-server.ts:1

The server version is hardcoded here while the same version also lives in server/package.json (and other manifests). This can drift over time. Consider sourcing VERSION from a single authoritative place (e.g., injecting from package.json at build time or generating this constant during the build) to avoid inconsistent version reporting.

Files reviewed: 31/34 changed files
Comments generated: 1

data-douser added 2 commits April 15, 2026 10:25

Update CHANGELOG.md for pending v2.25.2 release

9538783

data-douser self-assigned this Apr 15, 2026

Copilot AI review requested due to automatic review settings April 15, 2026 16:40

data-douser added enhancement New feature or request dependencies Pull requests that update a dependency file labels Apr 15, 2026

github-license-compliance bot found potential problems Apr 15, 2026

View reviewed changes

Comment thread package-lock.json Fixed

Copilot started reviewing on behalf of data-douser April 15, 2026 16:40 View session

Copilot AI reviewed Apr 15, 2026

View reviewed changes

Comment thread CHANGELOG.md Outdated

Comment thread ...nt/integration-tests/primitives/tools/codeql_bqrs_interpret/sarif_format/after/results.sarif Outdated

Apply suggestions from code review

3acef3d

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> Signed-off-by: Nathan Randall <70299490+data-douser@users.noreply.github.com>

Copilot AI review requested due to automatic review settings April 15, 2026 17:04

Copilot started reviewing on behalf of data-douser April 15, 2026 17:05 View session

Copilot AI reviewed Apr 15, 2026

View reviewed changes

Comment thread CHANGELOG.md Outdated

Update CHANGELOG.md

5b7f6bf

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> Signed-off-by: Nathan Randall <70299490+data-douser@users.noreply.github.com>

Copilot AI review requested due to automatic review settings April 15, 2026 17:14

Copilot started reviewing on behalf of data-douser April 15, 2026 17:15 View session

data-douser temporarily deployed to release-tag April 15, 2026 17:16 — with GitHub Actions Inactive

Copilot AI reviewed Apr 15, 2026

View reviewed changes

Comment thread CHANGELOG.md

data-douser temporarily deployed to release-npm April 15, 2026 17:21 — with GitHub Actions Inactive

data-douser temporarily deployed to release-vsix April 15, 2026 17:21 — with GitHub Actions Inactive

data-douser temporarily deployed to release-codeql April 15, 2026 17:21 — with GitHub Actions Inactive

data-douser marked this pull request as ready for review April 15, 2026 17:44

data-douser requested review from a team and enyil as code owners April 15, 2026 17:44

data-douser merged commit fd7f222 into main Apr 15, 2026
38 of 39 checks passed

data-douser deleted the dd/release-prep/2.25.2 branch April 15, 2026 17:44

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Prep for `v2.25.2` release of `codeql-development-mcp-server`#251

Prep for `v2.25.2` release of `codeql-development-mcp-server`#251
data-douser merged 4 commits intomainfrom
dd/release-prep/2.25.2

data-douser commented Apr 15, 2026

Uh oh!

Uh oh!

github-actions bot commented Apr 15, 2026 •

edited

Loading

Uh oh!

Copilot AI left a comment

Uh oh!

Uh oh!

Uh oh!

Copilot AI left a comment

Uh oh!

Uh oh!

Copilot AI left a comment

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Conversation

data-douser commented Apr 15, 2026

Summary of Changes

Outline of Changes

Uh oh!

Uh oh!

github-actions bot commented Apr 15, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Dependency Review

Snapshot Warnings

License Issues

package-lock.json

OpenSSF Scorecard

Scanned Files

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Copilot's findings

Uh oh!

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Copilot's findings

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Copilot's findings

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

github-actions bot commented Apr 15, 2026 •

edited

Loading