Repository navigation
Upgrade CodeQL dependencies and prep for v2.27.1 release - #369
Merged
Merged
Conversation
Contributor
Author
Dependency ReviewThe following issues were found:
License Issuespackage-lock.json
OpenSSF Scorecard
Scanned Files
|
data-douser
changed the title
v2.27.1 release
data-douser
added
enhancement
Contributor
There was a problem hiding this comment.
Copilot review overview
🔵 Needs a closer look
The broad dependency and generated-artifact updates received mixed readiness assessments and require final human verification.
Review effort: Balanced
Findings: 1
Open (1)
What changed in this PR
Upgrades the CodeQL toolchain and language packs to v2.27.1, refreshes generated fixtures, and adds GitHub Actions lockfile test coverage.
Changes:
- Updates versions and dependency lockfiles across supported languages.
- Adds Actions lockfile extraction and pinning tests.
- Refreshes AST, SARIF, generated server, and release artifacts.
| File | Description |
|---|---|
server/src/codeql-development-mcp-server.ts |
Updates the runtime server version. |
server/ql/swift/tools/test/codeql-pack.yml |
Updates the Swift test pack. |
server/ql/swift/tools/test/codeql-pack.lock.yml |
Updates Swift test dependencies. |
server/ql/swift/tools/src/codeql-pack.yml |
Updates the Swift source pack. |
server/ql/swift/tools/src/codeql-pack.lock.yml |
Updates Swift source dependencies. |
server/ql/rust/tools/test/PrintAST/PrintAST.expected |
Refreshes Rust AST expectations. |
server/ql/rust/tools/test/codeql-pack.yml |
Updates the Rust test pack. |
server/ql/rust/tools/test/codeql-pack.lock.yml |
Updates Rust test dependencies. |
server/ql/rust/tools/src/codeql-pack.yml |
Updates the Rust source pack. |
server/ql/rust/tools/src/codeql-pack.lock.yml |
Updates Rust source dependencies. |
server/ql/ruby/tools/test/codeql-pack.yml |
Updates the Ruby test pack. |
server/ql/ruby/tools/test/codeql-pack.lock.yml |
Updates Ruby test dependencies. |
server/ql/ruby/tools/src/codeql-pack.yml |
Updates the Ruby source pack. |
server/ql/ruby/tools/src/codeql-pack.lock.yml |
Updates Ruby source dependencies. |
server/ql/python/tools/test/codeql-pack.yml |
Updates the Python test pack. |
server/ql/python/tools/test/codeql-pack.lock.yml |
Updates Python test dependencies. |
server/ql/python/tools/src/codeql-pack.yml |
Updates the Python source pack. |
server/ql/python/tools/src/codeql-pack.lock.yml |
Updates Python source dependencies. |
server/ql/javascript/tools/test/codeql-pack.yml |
Updates the JavaScript test pack. |
server/ql/javascript/tools/test/codeql-pack.lock.yml |
Updates JavaScript test dependencies. |
server/ql/javascript/tools/src/codeql-pack.yml |
Updates the JavaScript source pack. |
server/ql/javascript/tools/src/codeql-pack.lock.yml |
Updates JavaScript source dependencies. |
server/ql/javascript/examples/test/codeql-pack.lock.yml |
Updates JavaScript example-test dependencies. |
server/ql/javascript/examples/src/codeql-pack.lock.yml |
Updates JavaScript example dependencies. |
server/ql/java/tools/test/codeql-pack.yml |
Updates the Java test pack. |
server/ql/java/tools/test/codeql-pack.lock.yml |
Updates Java test dependencies. |
server/ql/java/tools/src/codeql-pack.yml |
Updates the Java source pack. |
server/ql/java/tools/src/codeql-pack.lock.yml |
Updates Java source dependencies. |
server/ql/go/tools/test/codeql-pack.yml |
Updates the Go test pack. |
server/ql/go/tools/test/codeql-pack.lock.yml |
Updates Go test dependencies. |
server/ql/go/tools/src/codeql-pack.yml |
Updates the Go source pack. |
server/ql/go/tools/src/codeql-pack.lock.yml |
Updates Go source dependencies. |
server/ql/csharp/tools/test/PrintAST/PrintAST.expected |
Refreshes C# AST expectations. |
server/ql/csharp/tools/test/codeql-pack.yml |
Updates the C# test pack. |
server/ql/csharp/tools/test/codeql-pack.lock.yml |
Updates C# test dependencies. |
server/ql/csharp/tools/src/codeql-pack.yml |
Updates the C# source pack. |
server/ql/csharp/tools/src/codeql-pack.lock.yml |
Updates C# source dependencies. |
server/ql/cpp/tools/test/codeql-pack.yml |
Updates the C++ test pack. |
server/ql/cpp/tools/test/codeql-pack.lock.yml |
Updates C++ test dependencies. |
server/ql/cpp/tools/src/codeql-pack.yml |
Updates the C++ source pack. |
server/ql/cpp/tools/src/codeql-pack.lock.yml |
Updates C++ source dependencies. |
server/ql/actions/tools/test/codeql-pack.yml |
Updates the Actions test pack. |
server/ql/actions/tools/test/codeql-pack.lock.yml |
Updates Actions test dependencies. |
server/ql/actions/tools/test/ActionsLock/options |
Enables lockfile YAML extraction. |
server/ql/actions/tools/test/ActionsLock/ActionsLock.ql |
Adds lockfile queries. Nit (1 vote): describe the returned value as the lockfile ref, not a commit digest. |
server/ql/actions/tools/test/ActionsLock/ActionsLock.expected |
Adds expected lockfile results. |
server/ql/actions/tools/test/ActionsLock/.github/workflows/build.yml |
Adds pinned and unpinned workflow fixtures. |
server/ql/actions/tools/test/ActionsLock/.github/workflows/actions.lock |
Adds the Actions lockfile fixture. |
server/ql/actions/tools/src/codeql-pack.yml |
Updates the Actions source pack. |
server/ql/actions/tools/src/codeql-pack.lock.yml |
Updates Actions source dependencies. |
server/package.json |
Updates the server package version and metadata. |
server/dist/codeql-development-mcp-server.js |
Updates the generated server artifact. |
package.json |
Updates the repository version and packaging configuration. |
package-lock.json |
Synchronizes workspace versions and dependencies. |
extensions/vscode/package.json |
Updates the extension version. |
client/integration-tests/primitives/tools/codeql_bqrs_interpret/sarif_format/after/results.sarif |
Refreshes expected CodeQL version metadata. |
CHANGELOG.md |
Adds release notes. Nit (2 votes): retain them under Unreleased until v2.27.1 is tagged. |
.codeql-version |
Selects CodeQL CLI v2.27.1. |
💡 Configure MCP servers for context-aware, tailored reviews. Learn more in the docs.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This pull request upgrades the CodeQL Development MCP Server and all related query packs, dependencies, and test infrastructure to CodeQL CLI v2.27.1. It also introduces new unit tests for GitHub Actions lockfile extraction and pin coverage, and addresses several compatibility and packaging issues following the dependency updates.
Key changes include:
Dependency and Version Upgrades:
Upgraded the CodeQL CLI and all related dependencies to v2.27.1, including all per-language query packs and version-bearing files such as
.codeql-version,package.json, andcodeql-pack.yml. This ensures compatibility with the latest CodeQL features and fixes. [1] [2] [3] [4] [5] [6] [7] [8] [9] [10] [11] [12]Updated all lockfiles (
codeql-pack.lock.yml) and manifests to reference the new dependency versions for all supported languages and tools. [1] [2] [3]New Features and Tests:
.github/workflows/actions.lockfiles in GitHub Actions workflows. This test verifies that the lockfile is properly extracted and thatActionsLock.pinscorrectly resolves pinned and unpinneduses:steps. [1] [2] [3] [4]Bug Fixes and Compatibility:
Regenerated expected outputs for C# and Rust
PrintASTunit tests to accommodate upstream changes in AST class names and macro expansions introduced with the new CodeQL CLI version.Fixed release packaging issues by ensuring Node.js version consistency and including hidden files in build artifacts.
Documentation and Changelog:
CHANGELOG.mdto document all changes, new features, fixes, and dependency upgrades related to this release. Also updated release links and version references. [1] [2]Test Data and Output:
These changes collectively ensure the MCP server and its query packs are up-to-date with the latest CodeQL toolchain, improve test coverage for GitHub Actions lockfiles, and maintain compatibility with recent dependency updates.