Skip to content

Update CHANGELOG.md for v2.26.2 release prep - #330

Merged
data-douser merged 1 commit into
mainfrom
dd/release-prep/v2.26.2
Jul 29, 2026
Merged

Update CHANGELOG.md for v2.26.2 release prep#330
data-douser merged 1 commit into
mainfrom
dd/release-prep/v2.26.2

Conversation

@data-douser

Copy link
Copy Markdown
Collaborator

This pull request updates the changelog for the expected/pending v2.26.2 release -- documenting major dependency upgrades, security improvements, and infrastructure changes. The highlights include upgrading the CodeQL CLI and realigning Node.js support with the LTS release line, as well as patching a security vulnerability and updating several dependencies.

Release highlights

  • Added release notes for v2.26.2, including:
    • Upgrade of CodeQL CLI to v2.26.2 (latest) with all query packs re-resolved against the new library set.
    • Node.js support realigned to use Node.js 24 as the default and Node.js 26 in CI, with Node.js 25 support removed.

Security

  • Documented the upgrade of the transitive brace-expansion dependency to 1.1.16, addressing CVE-2026-13149.

Dependency updates

  • Noted the upgrade of the CodeQL CLI dependency to v2.26.2 across all relevant files and manifests.
  • Added entries for other dependency bumps, including hono, actions/setup-go, actions/setup-node, and softprops/action-gh-release.

Documentation

  • Updated changelog link definitions for v2.26.2 and set [Unreleased] to compare from v2.26.2.

@data-douser data-douser self-assigned this Jul 29, 2026
@data-douser data-douser added the documentation Improvements or additions to documentation label Jul 29, 2026
Copilot AI review requested due to automatic review settings July 29, 2026 20:50
@github-actions

Copy link
Copy Markdown
Contributor

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

Scanned Files

None

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Prepares CHANGELOG.md for an anticipated v2.26.2 release by adding a new release section and updating link definitions to point [Unreleased] comparisons at v2.26.2.

Changes:

  • Added a new v2.26.2 release entry with Highlights, Security, and Dependencies bullets.
  • Updated the [Unreleased] comparison link and added a [v2.26.2] link definition.
Show a summary per file
File Description
CHANGELOG.md Adds a v2.26.2 release section and updates the reference-style links at the bottom.

Review details

Comments suppressed due to low confidence (1)

CHANGELOG.md:668

  • These link definitions assume v2.26.2 exists. Right now, the v2.26.2 release/tag link is broken (404), and the [Unreleased] compare link points at a non-existent tag. Consider leaving [Unreleased] comparing from the latest existing tag until v2.26.2 is actually tagged, and only then updating these definitions.
[Unreleased]: https://github.com/advanced-security/codeql-development-mcp-server/compare/v2.26.2...HEAD
[v2.26.2]: https://github.com/advanced-security/codeql-development-mcp-server/releases/tag/v2.26.2
  • Files reviewed: 1/1 changed files
  • Comments generated: 1
  • Review effort level: Low

Comment thread CHANGELOG.md
@data-douser
data-douser marked this pull request as ready for review July 29, 2026 22:11
@data-douser
data-douser requested review from a team and enyil as code owners July 29, 2026 22:11
@data-douser
data-douser merged commit ff3481d into main Jul 29, 2026
15 of 16 checks passed
@data-douser
data-douser deleted the dd/release-prep/v2.26.2 branch July 29, 2026 22:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

documentation Improvements or additions to documentation

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants