From e89518cb87b081ad68ad0b04b8b6d86cbf196fa2 Mon Sep 17 00:00:00 2001 From: Nathan Randall Date: Thu, 5 Feb 2026 18:16:28 -0700 Subject: [PATCH 1/5] Update package.json files : name, keywords & version Updates the package.json files for repo root, client & server in order to prepare for open-source release. --- .../upgrade-codeql-cli-and-packs/SKILL.md | 25 +++- LICENSE.md => LICENSE | 0 README.md | 138 ++++++++++++++---- client/package.json | 14 +- package-lock.json | 30 ++-- package.json | 19 ++- server/package.json | 16 +- 7 files changed, 174 insertions(+), 68 deletions(-) rename LICENSE.md => LICENSE (100%) diff --git a/.github/skills/upgrade-codeql-cli-and-packs/SKILL.md b/.github/skills/upgrade-codeql-cli-and-packs/SKILL.md index 22fd4138..047ed237 100644 --- a/.github/skills/upgrade-codeql-cli-and-packs/SKILL.md +++ b/.github/skills/upgrade-codeql-cli-and-packs/SKILL.md @@ -22,11 +22,12 @@ This skill guides you through upgrading the CodeQL CLI version used by the MCP s ### Version Alignment Strategy -This repository uses a **CLI-aligned versioning strategy** for `ql-mcp-*` packs: +This repository uses a **CLI-aligned versioning strategy** across all version-bearing files: 1. **`.codeql-version`**: Contains the target CLI version (e.g., `v2.23.9`) -2. **`ql-mcp-*` pack versions**: Use the CLI version number without the "v" prefix (e.g., `2.23.9`) -3. **`codeql/*-all` dependencies**: Must have `cliVersion <= target CLI version` +2. **`package.json` versions**: All `package.json` files (root, client, server) use the CLI version number without the "v" prefix (e.g., `2.23.9`) +3. **`ql-mcp-*` pack versions**: Use the CLI version number without the "v" prefix (e.g., `2.23.9`) +4. **`codeql/*-all` dependencies**: Must have `cliVersion <= target CLI version` ### Why Database Compatibility Matters @@ -68,6 +69,24 @@ gh codeql set-version vX.XX.Y codeql version # Verify installation ``` +#### 1.3 Update package.json Versions + +All `package.json` files must have their `version` field set to match the CLI version (without the "v" prefix): + +| File | Field to Update | +| --------------------- | --------------- | +| `package.json` | `version` | +| `client/package.json` | `version` | +| `server/package.json` | `version` | + +Example: If `.codeql-version` is `v2.23.9`, set all `package.json` versions to `"version": "2.23.9"`. + +After updating, regenerate the lock file: + +```bash +npm install +``` + ### Phase 2: Identify Compatible Pack Versions #### 2.1 List Available Packs diff --git a/LICENSE.md b/LICENSE similarity index 100% rename from LICENSE.md rename to LICENSE diff --git a/README.md b/README.md index 26778085..6344d4e8 100644 --- a/README.md +++ b/README.md @@ -1,48 +1,128 @@ # CodeQL Development MCP Server -A comprehensive Model Context Protocol (MCP) server designed specifically for agentic AI development of CodeQL (QL) code. This server provides tools and resources to help AI assistants write, validate, and optimize CodeQL queries for security analysis and code quality. +> Enabling AI-assisted CodeQL query development through the Model Context Protocol -## Quick Start +A comprehensive [Model Context Protocol (MCP)](https://modelcontextprotocol.io/) server designed specifically for agentic AI development of CodeQL (QL) code. This server provides tools, prompts, and resources to help AI assistants write, validate, and optimize CodeQL queries for security analysis and code quality. -For users who want to quickly get started with the MCP server: +## Features -### Download and Install +- **Comprehensive Tool Suite** - Wraps CodeQL CLI commands for query compilation, execution, testing, and database operations +- **Multi-Language Support** - Supports CodeQL query development for 9 languages including Python, JavaScript, Java, C/C++, and more +- **AI-Optimized Prompts** - Built-in prompts and resources that guide AI assistants through CodeQL development workflows +- **Test-Driven Development** - Integrated testing tools for validating query accuracy with expected results +- **Flexible Transport** - Supports both stdio and HTTP transport modes for different integration scenarios -1. Download the latest release from [GitHub Releases](https://github.com/advanced-security/codeql-development-mcp-server/releases) -2. Extract the archive: +## Limitations + +- Requires CodeQL CLI to be installed separately +- Performance depends on the size of CodeQL databases being analyzed +- Some advanced CodeQL CLI features may not yet be exposed as tools + +## Project Status + +**Active Development** - This project is actively maintained and used in production environments for AI-assisted CodeQL development. - ```bash - tar -xzvf codeql-development-mcp-server-vX.X.X.tar.gz -C /path/to/destination - ``` +## Background -3. Configure VS Code by adding to your `mcp.json`: +The `codeql-development-mcp-server` project is maintained by GitHub's CodeQL Expert Services team and builds (and hopefully improves) on the concepts from the [`advanced-security/codeql-development-template`](https://github.com/advanced-security/codeql-development-template) repository template. - ```json - { - "servers": { - "codeql-dev-mcp-server": { - "command": "node", - "args": ["/path/to/destination/server/dist/ql-mcp-server.js"], - "type": "stdio" - } - } - } - ``` +The main advantages of using the `codeql-development-mcp-server` are: -## Contributing +1. **Agnostic of development environment** +2. **Agnostic of calling Large Language Model (LLM)** +3. **MCP server tools codify advanced CodeQL development practices** -We welcome contributions to this project! Please see [CONTRIBUTING.md](CONTRIBUTING.md) for detailed guidelines on how to contribute. +### Roadmap + +Development priorities and open issues are tracked in [GitHub Issues](https://github.com/advanced-security/codeql-development-mcp-server/issues). + +### Contributing + +We welcome contributions! Whether it's bug fixes, new features, documentation improvements, or additional language support, please see [CONTRIBUTING.md](CONTRIBUTING.md) for guidelines. Please note that this project is released with a [Contributor Code of Conduct](CODE_OF_CONDUCT.md). By participating in this project you agree to abide by its terms. +## Requirements + +### Environment + +- **Node.js** v25.2.1 or later ([nodejs.org](https://nodejs.org/)) +- **Some calling LLM** Bring your own LLM, but some LLMs are (much) better than others. + +### External Dependencies + +- **CodeQL CLI** - Must be installed and available in PATH ([github.com/github/codeql-cli-binaries](https://github.com/github/codeql-cli-binaries/releases)) + +## Quick Start + +### Download and Install + +1. Download the latest release from [GitHub Releases](https://github.com/advanced-security/codeql-development-mcp-server/releases) +2. Extract the archive: + +```bash +unzip codeql-development-mcp-server-vX.X.X.zip -C /path/to/destination +``` + +### VS Code Configuration + +Add to your `mcp.json` file: + +| OS | Location | +| ------- | -------------------------------------------------- | +| Linux | `~/.config/Code/User/mcp.json` | +| macOS | `~/Library/Application Support/Code/User/mcp.json` | +| Windows | `%APPDATA%\Code\User\mcp.json` | + +```json +{ + "servers": { + "codeql-dev-mcp-server": { + "command": "node", + "args": ["/path/to/destination/server/dist/ql-mcp-server.js"], + "type": "stdio" + } + } +} +``` + +### Installing from Source + +```bash +git clone https://github.com/advanced-security/codeql-development-mcp-server.git +cd codeql-development-mcp-server +npm install && npm run build +``` + +### Verification + +1. Restart VS Code +2. Open Command Palette (`Ctrl+Shift+P` / `Cmd+Shift+P`) +3. Run "GitHub Copilot: List MCP Servers" +4. Confirm `codeql-dev-mcp-server` appears + +## Supported Languages + +| Language | CodeQL Identifier | +| --------------------- | ----------------- | +| GitHub Actions | `actions` | +| C/C++ | `cpp` | +| C# | `csharp` | +| Go | `go` | +| Java/Kotlin | `java` | +| JavaScript/TypeScript | `javascript` | +| Python | `python` | +| Ruby | `ruby` | +| Swift | `swift` | + ## Documentation -- [Getting Started Guide](docs/getting-started.md) - Installation and setup instructions -- [Tools Reference](docs/tools-reference.md) - Complete list of available MCP tools +- [Getting Started Guide](docs/getting-started.md) - Detailed installation and setup instructions +- [Tools Reference](docs/tools-reference.md) - Complete list of available MCP tools and usage examples ## License -See [LICENSE.md](LICENSE.md) for license terms. +This project is licensed under the terms of the GitHub CodeQL Terms and Conditions. Please refer to [LICENSE.md](LICENSE.md) for the full terms. ## Maintainers @@ -50,4 +130,10 @@ This repository is maintained by the team specified in [CODEOWNERS](CODEOWNERS). ## Support +This project uses GitHub issues to track bugs and feature requests. Please search existing issues before filing new ones to avoid duplicates. + This project comes with no expectation or guarantee of support, with more details in the [SUPPORT.md](SUPPORT.md) document. + +## Acknowledgement + +This project builds upon the [CodeQL CLI](https://github.com/github/codeql-cli-binaries) and the broader [CodeQL ecosystem](https://codeql.github.com/) developed by GitHub. Special thanks to the GitHub Advanced Security team and the open-source community for their contributions. diff --git a/client/package.json b/client/package.json index 61f93541..1aa36f70 100644 --- a/client/package.json +++ b/client/package.json @@ -1,6 +1,6 @@ { "name": "codeql-development-mcp-server_client", - "version": "1.0.0", + "version": "2.23.9", "description": "MCP client for integration testing of the CodeQL development MCP server", "main": "src/ql-mcp-client.js", "type": "module", @@ -9,20 +9,22 @@ }, "keywords": [ "codeql", - "github", + "development", "integration-testing", + "llm", "mcp", "model-context-protocol", "ql", "sast", "security", - "static-analysis" + "static-analysis", + "typescript" ], - "author": "GitHub", + "author": "@github/ps-codeql", "license": "MIT", "engines": { - "node": ">=24.10.0", - "npm": ">=11.6.1" + "node": ">=25.2.1", + "npm": ">=11.6.2" }, "dependencies": { "@modelcontextprotocol/sdk": "^1.26.0", diff --git a/package-lock.json b/package-lock.json index 3d5bb197..19f3dc71 100644 --- a/package-lock.json +++ b/package-lock.json @@ -1,12 +1,12 @@ { - "name": "codeql-development-mcp-server", - "version": "1.0.0", + "name": "codeql-development-mcp-server_repo", + "version": "2.23.9", "lockfileVersion": 3, "requires": true, "packages": { "": { - "name": "codeql-development-mcp-server", - "version": "1.0.0", + "name": "codeql-development-mcp-server_repo", + "version": "2.23.9", "license": "MIT", "workspaces": [ "client", @@ -27,7 +27,7 @@ }, "client": { "name": "codeql-development-mcp-server_client", - "version": "1.0.0", + "version": "2.23.9", "license": "MIT", "dependencies": { "@modelcontextprotocol/sdk": "^1.26.0", @@ -45,8 +45,8 @@ "prettier": "^3.8.1" }, "engines": { - "node": ">=24.10.0", - "npm": ">=11.6.1" + "node": ">=25.2.1", + "npm": ">=11.6.2" } }, "node_modules/@babel/helper-string-parser": { @@ -2017,12 +2017,12 @@ "url": "https://github.com/chalk/chalk?sponsor=1" } }, - "node_modules/codeql-development-mcp-server_client": { - "resolved": "client", + "node_modules/codeql-development-mcp-server": { + "resolved": "server", "link": true }, - "node_modules/codeql-development-mcp-server_server": { - "resolved": "server", + "node_modules/codeql-development-mcp-server_client": { + "resolved": "client", "link": true }, "node_modules/color-convert": { @@ -4398,8 +4398,8 @@ } }, "server": { - "name": "codeql-development-mcp-server_server", - "version": "1.0.0", + "name": "codeql-development-mcp-server", + "version": "2.23.9", "license": "MIT", "dependencies": { "@modelcontextprotocol/sdk": "^1.26.0", @@ -4430,8 +4430,8 @@ "vitest": "^4.0.18" }, "engines": { - "node": ">=24.10.0", - "npm": ">=11.6.1" + "node": ">=25.2.1", + "npm": ">=11.6.2" } } } diff --git a/package.json b/package.json index 4a50ddb6..ef21dd20 100644 --- a/package.json +++ b/package.json @@ -1,21 +1,20 @@ { - "name": "codeql-development-mcp-server", - "version": "1.0.0", + "name": "codeql-development-mcp-server_repo", + "version": "2.23.9", "description": "An MCP server supporting LLM requests for CodeQL development tools and resources.", "private": true, "type": "module", "keywords": [ + "codeql", + "development", + "llm", "mcp", "model-context-protocol", - "codeql", + "ql", + "sast", "security", - "typescript", - "claude", - "anthropic", - "ai", - "llm", - "development", - "static-analysis" + "static-analysis", + "typescript" ], "author": "@github/ps-codeql", "license": "MIT", diff --git a/server/package.json b/server/package.json index 007f88f3..c9706c90 100644 --- a/server/package.json +++ b/server/package.json @@ -1,6 +1,6 @@ { - "name": "codeql-development-mcp-server_server", - "version": "1.0.0", + "name": "codeql-development-mcp-server", + "version": "2.23.9", "description": "An MCP server supporting LLM requests for CodeQL development tools and resources.", "main": "dist/ql-mcp-server.js", "types": "dist/ql-mcp-server.d.ts", @@ -10,8 +10,8 @@ }, "keywords": [ "codeql", - "github", - "integration-testing", + "development", + "llm", "mcp", "model-context-protocol", "ql", @@ -20,11 +20,11 @@ "static-analysis", "typescript" ], - "author": "GitHub", + "author": "@github/ps-codeql", "license": "MIT", "engines": { - "node": ">=24.10.0", - "npm": ">=11.6.1" + "node": ">=25.2.1", + "npm": ">=11.6.2" }, "dependencies": { "@modelcontextprotocol/sdk": "^1.26.0", @@ -58,9 +58,9 @@ "clean": "rm -rf dist", "dev:stdio": "npm run build && TRANSPORT_MODE=stdio node dist/ql-mcp-server.js", "dev:http": "npm run build && TRANSPORT_MODE=http node dist/ql-mcp-server.js", + "format": "prettier --write 'src/**/*.ts'", "lint": "eslint src test --ext .ts", "lint:fix": "eslint src test --ext .ts --fix", - "format": "prettier --write 'src/**/*.ts'", "start": "npm run build && node dist/ql-mcp-server.js", "test": "npm run build && npm run test:ts:coverage", "test:coverage": "npm run test:ts:coverage", From 1c77535f2c1aee1c919d35a1d42519cc4475b109 Mon Sep 17 00:00:00 2001 From: Nathan Randall Date: Thu, 5 Feb 2026 18:19:44 -0700 Subject: [PATCH 2/5] Update esbuild dev dependency to latest --- package-lock.json | 216 ++++++++++++++++++++++---------------------- server/package.json | 2 +- 2 files changed, 109 insertions(+), 109 deletions(-) diff --git a/package-lock.json b/package-lock.json index 19f3dc71..bff03fda 100644 --- a/package-lock.json +++ b/package-lock.json @@ -110,9 +110,9 @@ } }, "node_modules/@esbuild/aix-ppc64": { - "version": "0.27.2", - "resolved": "https://registry.npmjs.org/@esbuild/aix-ppc64/-/aix-ppc64-0.27.2.tgz", - "integrity": "sha512-GZMB+a0mOMZs4MpDbj8RJp4cw+w1WV5NYD6xzgvzUJ5Ek2jerwfO2eADyI6ExDSUED+1X8aMbegahsJi+8mgpw==", + "version": "0.27.3", + "resolved": "https://registry.npmjs.org/@esbuild/aix-ppc64/-/aix-ppc64-0.27.3.tgz", + "integrity": "sha512-9fJMTNFTWZMh5qwrBItuziu834eOCUcEqymSH7pY+zoMVEZg3gcPuBNxH1EvfVYe9h0x/Ptw8KBzv7qxb7l8dg==", "cpu": [ "ppc64" ], @@ -127,9 +127,9 @@ } }, "node_modules/@esbuild/android-arm": { - "version": "0.27.2", - "resolved": "https://registry.npmjs.org/@esbuild/android-arm/-/android-arm-0.27.2.tgz", - "integrity": "sha512-DVNI8jlPa7Ujbr1yjU2PfUSRtAUZPG9I1RwW4F4xFB1Imiu2on0ADiI/c3td+KmDtVKNbi+nffGDQMfcIMkwIA==", + "version": "0.27.3", + "resolved": "https://registry.npmjs.org/@esbuild/android-arm/-/android-arm-0.27.3.tgz", + "integrity": "sha512-i5D1hPY7GIQmXlXhs2w8AWHhenb00+GxjxRncS2ZM7YNVGNfaMxgzSGuO8o8SJzRc/oZwU2bcScvVERk03QhzA==", "cpu": [ "arm" ], @@ -144,9 +144,9 @@ } }, "node_modules/@esbuild/android-arm64": { - "version": "0.27.2", - "resolved": "https://registry.npmjs.org/@esbuild/android-arm64/-/android-arm64-0.27.2.tgz", - "integrity": "sha512-pvz8ZZ7ot/RBphf8fv60ljmaoydPU12VuXHImtAs0XhLLw+EXBi2BLe3OYSBslR4rryHvweW5gmkKFwTiFy6KA==", + "version": "0.27.3", + "resolved": "https://registry.npmjs.org/@esbuild/android-arm64/-/android-arm64-0.27.3.tgz", + "integrity": "sha512-YdghPYUmj/FX2SYKJ0OZxf+iaKgMsKHVPF1MAq/P8WirnSpCStzKJFjOjzsW0QQ7oIAiccHdcqjbHmJxRb/dmg==", "cpu": [ "arm64" ], @@ -161,9 +161,9 @@ } }, "node_modules/@esbuild/android-x64": { - "version": "0.27.2", - "resolved": "https://registry.npmjs.org/@esbuild/android-x64/-/android-x64-0.27.2.tgz", - "integrity": "sha512-z8Ank4Byh4TJJOh4wpz8g2vDy75zFL0TlZlkUkEwYXuPSgX8yzep596n6mT7905kA9uHZsf/o2OJZubl2l3M7A==", + "version": "0.27.3", + "resolved": "https://registry.npmjs.org/@esbuild/android-x64/-/android-x64-0.27.3.tgz", + "integrity": "sha512-IN/0BNTkHtk8lkOM8JWAYFg4ORxBkZQf9zXiEOfERX/CzxW3Vg1ewAhU7QSWQpVIzTW+b8Xy+lGzdYXV6UZObQ==", "cpu": [ "x64" ], @@ -178,9 +178,9 @@ } }, "node_modules/@esbuild/darwin-arm64": { - "version": "0.27.2", - "resolved": "https://registry.npmjs.org/@esbuild/darwin-arm64/-/darwin-arm64-0.27.2.tgz", - "integrity": "sha512-davCD2Zc80nzDVRwXTcQP/28fiJbcOwvdolL0sOiOsbwBa72kegmVU0Wrh1MYrbuCL98Omp5dVhQFWRKR2ZAlg==", + "version": "0.27.3", + "resolved": "https://registry.npmjs.org/@esbuild/darwin-arm64/-/darwin-arm64-0.27.3.tgz", + "integrity": "sha512-Re491k7ByTVRy0t3EKWajdLIr0gz2kKKfzafkth4Q8A5n1xTHrkqZgLLjFEHVD+AXdUGgQMq+Godfq45mGpCKg==", "cpu": [ "arm64" ], @@ -195,9 +195,9 @@ } }, "node_modules/@esbuild/darwin-x64": { - "version": "0.27.2", - "resolved": "https://registry.npmjs.org/@esbuild/darwin-x64/-/darwin-x64-0.27.2.tgz", - "integrity": "sha512-ZxtijOmlQCBWGwbVmwOF/UCzuGIbUkqB1faQRf5akQmxRJ1ujusWsb3CVfk/9iZKr2L5SMU5wPBi1UWbvL+VQA==", + "version": "0.27.3", + "resolved": "https://registry.npmjs.org/@esbuild/darwin-x64/-/darwin-x64-0.27.3.tgz", + "integrity": "sha512-vHk/hA7/1AckjGzRqi6wbo+jaShzRowYip6rt6q7VYEDX4LEy1pZfDpdxCBnGtl+A5zq8iXDcyuxwtv3hNtHFg==", "cpu": [ "x64" ], @@ -212,9 +212,9 @@ } }, "node_modules/@esbuild/freebsd-arm64": { - "version": "0.27.2", - "resolved": "https://registry.npmjs.org/@esbuild/freebsd-arm64/-/freebsd-arm64-0.27.2.tgz", - "integrity": "sha512-lS/9CN+rgqQ9czogxlMcBMGd+l8Q3Nj1MFQwBZJyoEKI50XGxwuzznYdwcav6lpOGv5BqaZXqvBSiB/kJ5op+g==", + "version": "0.27.3", + "resolved": "https://registry.npmjs.org/@esbuild/freebsd-arm64/-/freebsd-arm64-0.27.3.tgz", + "integrity": "sha512-ipTYM2fjt3kQAYOvo6vcxJx3nBYAzPjgTCk7QEgZG8AUO3ydUhvelmhrbOheMnGOlaSFUoHXB6un+A7q4ygY9w==", "cpu": [ "arm64" ], @@ -229,9 +229,9 @@ } }, "node_modules/@esbuild/freebsd-x64": { - "version": "0.27.2", - "resolved": "https://registry.npmjs.org/@esbuild/freebsd-x64/-/freebsd-x64-0.27.2.tgz", - "integrity": "sha512-tAfqtNYb4YgPnJlEFu4c212HYjQWSO/w/h/lQaBK7RbwGIkBOuNKQI9tqWzx7Wtp7bTPaGC6MJvWI608P3wXYA==", + "version": "0.27.3", + "resolved": "https://registry.npmjs.org/@esbuild/freebsd-x64/-/freebsd-x64-0.27.3.tgz", + "integrity": "sha512-dDk0X87T7mI6U3K9VjWtHOXqwAMJBNN2r7bejDsc+j03SEjtD9HrOl8gVFByeM0aJksoUuUVU9TBaZa2rgj0oA==", "cpu": [ "x64" ], @@ -246,9 +246,9 @@ } }, "node_modules/@esbuild/linux-arm": { - "version": "0.27.2", - "resolved": "https://registry.npmjs.org/@esbuild/linux-arm/-/linux-arm-0.27.2.tgz", - "integrity": "sha512-vWfq4GaIMP9AIe4yj1ZUW18RDhx6EPQKjwe7n8BbIecFtCQG4CfHGaHuh7fdfq+y3LIA2vGS/o9ZBGVxIDi9hw==", + "version": "0.27.3", + "resolved": "https://registry.npmjs.org/@esbuild/linux-arm/-/linux-arm-0.27.3.tgz", + "integrity": "sha512-s6nPv2QkSupJwLYyfS+gwdirm0ukyTFNl3KTgZEAiJDd+iHZcbTPPcWCcRYH+WlNbwChgH2QkE9NSlNrMT8Gfw==", "cpu": [ "arm" ], @@ -263,9 +263,9 @@ } }, "node_modules/@esbuild/linux-arm64": { - "version": "0.27.2", - "resolved": "https://registry.npmjs.org/@esbuild/linux-arm64/-/linux-arm64-0.27.2.tgz", - "integrity": "sha512-hYxN8pr66NsCCiRFkHUAsxylNOcAQaxSSkHMMjcpx0si13t1LHFphxJZUiGwojB1a/Hd5OiPIqDdXONia6bhTw==", + "version": "0.27.3", + "resolved": "https://registry.npmjs.org/@esbuild/linux-arm64/-/linux-arm64-0.27.3.tgz", + "integrity": "sha512-sZOuFz/xWnZ4KH3YfFrKCf1WyPZHakVzTiqji3WDc0BCl2kBwiJLCXpzLzUBLgmp4veFZdvN5ChW4Eq/8Fc2Fg==", "cpu": [ "arm64" ], @@ -280,9 +280,9 @@ } }, "node_modules/@esbuild/linux-ia32": { - "version": "0.27.2", - "resolved": "https://registry.npmjs.org/@esbuild/linux-ia32/-/linux-ia32-0.27.2.tgz", - "integrity": "sha512-MJt5BRRSScPDwG2hLelYhAAKh9imjHK5+NE/tvnRLbIqUWa+0E9N4WNMjmp/kXXPHZGqPLxggwVhz7QP8CTR8w==", + "version": "0.27.3", + "resolved": "https://registry.npmjs.org/@esbuild/linux-ia32/-/linux-ia32-0.27.3.tgz", + "integrity": "sha512-yGlQYjdxtLdh0a3jHjuwOrxQjOZYD/C9PfdbgJJF3TIZWnm/tMd/RcNiLngiu4iwcBAOezdnSLAwQDPqTmtTYg==", "cpu": [ "ia32" ], @@ -297,9 +297,9 @@ } }, "node_modules/@esbuild/linux-loong64": { - "version": "0.27.2", - "resolved": "https://registry.npmjs.org/@esbuild/linux-loong64/-/linux-loong64-0.27.2.tgz", - "integrity": "sha512-lugyF1atnAT463aO6KPshVCJK5NgRnU4yb3FUumyVz+cGvZbontBgzeGFO1nF+dPueHD367a2ZXe1NtUkAjOtg==", + "version": "0.27.3", + "resolved": "https://registry.npmjs.org/@esbuild/linux-loong64/-/linux-loong64-0.27.3.tgz", + "integrity": "sha512-WO60Sn8ly3gtzhyjATDgieJNet/KqsDlX5nRC5Y3oTFcS1l0KWba+SEa9Ja1GfDqSF1z6hif/SkpQJbL63cgOA==", "cpu": [ "loong64" ], @@ -314,9 +314,9 @@ } }, "node_modules/@esbuild/linux-mips64el": { - "version": "0.27.2", - "resolved": "https://registry.npmjs.org/@esbuild/linux-mips64el/-/linux-mips64el-0.27.2.tgz", - "integrity": "sha512-nlP2I6ArEBewvJ2gjrrkESEZkB5mIoaTswuqNFRv/WYd+ATtUpe9Y09RnJvgvdag7he0OWgEZWhviS1OTOKixw==", + "version": "0.27.3", + "resolved": "https://registry.npmjs.org/@esbuild/linux-mips64el/-/linux-mips64el-0.27.3.tgz", + "integrity": "sha512-APsymYA6sGcZ4pD6k+UxbDjOFSvPWyZhjaiPyl/f79xKxwTnrn5QUnXR5prvetuaSMsb4jgeHewIDCIWljrSxw==", "cpu": [ "mips64el" ], @@ -331,9 +331,9 @@ } }, "node_modules/@esbuild/linux-ppc64": { - "version": "0.27.2", - "resolved": "https://registry.npmjs.org/@esbuild/linux-ppc64/-/linux-ppc64-0.27.2.tgz", - "integrity": "sha512-C92gnpey7tUQONqg1n6dKVbx3vphKtTHJaNG2Ok9lGwbZil6DrfyecMsp9CrmXGQJmZ7iiVXvvZH6Ml5hL6XdQ==", + "version": "0.27.3", + "resolved": "https://registry.npmjs.org/@esbuild/linux-ppc64/-/linux-ppc64-0.27.3.tgz", + "integrity": "sha512-eizBnTeBefojtDb9nSh4vvVQ3V9Qf9Df01PfawPcRzJH4gFSgrObw+LveUyDoKU3kxi5+9RJTCWlj4FjYXVPEA==", "cpu": [ "ppc64" ], @@ -348,9 +348,9 @@ } }, "node_modules/@esbuild/linux-riscv64": { - "version": "0.27.2", - "resolved": "https://registry.npmjs.org/@esbuild/linux-riscv64/-/linux-riscv64-0.27.2.tgz", - "integrity": "sha512-B5BOmojNtUyN8AXlK0QJyvjEZkWwy/FKvakkTDCziX95AowLZKR6aCDhG7LeF7uMCXEJqwa8Bejz5LTPYm8AvA==", + "version": "0.27.3", + "resolved": "https://registry.npmjs.org/@esbuild/linux-riscv64/-/linux-riscv64-0.27.3.tgz", + "integrity": "sha512-3Emwh0r5wmfm3ssTWRQSyVhbOHvqegUDRd0WhmXKX2mkHJe1SFCMJhagUleMq+Uci34wLSipf8Lagt4LlpRFWQ==", "cpu": [ "riscv64" ], @@ -365,9 +365,9 @@ } }, "node_modules/@esbuild/linux-s390x": { - "version": "0.27.2", - "resolved": "https://registry.npmjs.org/@esbuild/linux-s390x/-/linux-s390x-0.27.2.tgz", - "integrity": "sha512-p4bm9+wsPwup5Z8f4EpfN63qNagQ47Ua2znaqGH6bqLlmJ4bx97Y9JdqxgGZ6Y8xVTixUnEkoKSHcpRlDnNr5w==", + "version": "0.27.3", + "resolved": "https://registry.npmjs.org/@esbuild/linux-s390x/-/linux-s390x-0.27.3.tgz", + "integrity": "sha512-pBHUx9LzXWBc7MFIEEL0yD/ZVtNgLytvx60gES28GcWMqil8ElCYR4kvbV2BDqsHOvVDRrOxGySBM9Fcv744hw==", "cpu": [ "s390x" ], @@ -382,9 +382,9 @@ } }, "node_modules/@esbuild/linux-x64": { - "version": "0.27.2", - "resolved": "https://registry.npmjs.org/@esbuild/linux-x64/-/linux-x64-0.27.2.tgz", - "integrity": "sha512-uwp2Tip5aPmH+NRUwTcfLb+W32WXjpFejTIOWZFw/v7/KnpCDKG66u4DLcurQpiYTiYwQ9B7KOeMJvLCu/OvbA==", + "version": "0.27.3", + "resolved": "https://registry.npmjs.org/@esbuild/linux-x64/-/linux-x64-0.27.3.tgz", + "integrity": "sha512-Czi8yzXUWIQYAtL/2y6vogER8pvcsOsk5cpwL4Gk5nJqH5UZiVByIY8Eorm5R13gq+DQKYg0+JyQoytLQas4dA==", "cpu": [ "x64" ], @@ -399,9 +399,9 @@ } }, "node_modules/@esbuild/netbsd-arm64": { - "version": "0.27.2", - "resolved": "https://registry.npmjs.org/@esbuild/netbsd-arm64/-/netbsd-arm64-0.27.2.tgz", - "integrity": "sha512-Kj6DiBlwXrPsCRDeRvGAUb/LNrBASrfqAIok+xB0LxK8CHqxZ037viF13ugfsIpePH93mX7xfJp97cyDuTZ3cw==", + "version": "0.27.3", + "resolved": "https://registry.npmjs.org/@esbuild/netbsd-arm64/-/netbsd-arm64-0.27.3.tgz", + "integrity": "sha512-sDpk0RgmTCR/5HguIZa9n9u+HVKf40fbEUt+iTzSnCaGvY9kFP0YKBWZtJaraonFnqef5SlJ8/TiPAxzyS+UoA==", "cpu": [ "arm64" ], @@ -416,9 +416,9 @@ } }, "node_modules/@esbuild/netbsd-x64": { - "version": "0.27.2", - "resolved": "https://registry.npmjs.org/@esbuild/netbsd-x64/-/netbsd-x64-0.27.2.tgz", - "integrity": "sha512-HwGDZ0VLVBY3Y+Nw0JexZy9o/nUAWq9MlV7cahpaXKW6TOzfVno3y3/M8Ga8u8Yr7GldLOov27xiCnqRZf0tCA==", + "version": "0.27.3", + "resolved": "https://registry.npmjs.org/@esbuild/netbsd-x64/-/netbsd-x64-0.27.3.tgz", + "integrity": "sha512-P14lFKJl/DdaE00LItAukUdZO5iqNH7+PjoBm+fLQjtxfcfFE20Xf5CrLsmZdq5LFFZzb5JMZ9grUwvtVYzjiA==", "cpu": [ "x64" ], @@ -433,9 +433,9 @@ } }, "node_modules/@esbuild/openbsd-arm64": { - "version": "0.27.2", - "resolved": "https://registry.npmjs.org/@esbuild/openbsd-arm64/-/openbsd-arm64-0.27.2.tgz", - "integrity": "sha512-DNIHH2BPQ5551A7oSHD0CKbwIA/Ox7+78/AWkbS5QoRzaqlev2uFayfSxq68EkonB+IKjiuxBFoV8ESJy8bOHA==", + "version": "0.27.3", + "resolved": "https://registry.npmjs.org/@esbuild/openbsd-arm64/-/openbsd-arm64-0.27.3.tgz", + "integrity": "sha512-AIcMP77AvirGbRl/UZFTq5hjXK+2wC7qFRGoHSDrZ5v5b8DK/GYpXW3CPRL53NkvDqb9D+alBiC/dV0Fb7eJcw==", "cpu": [ "arm64" ], @@ -450,9 +450,9 @@ } }, "node_modules/@esbuild/openbsd-x64": { - "version": "0.27.2", - "resolved": "https://registry.npmjs.org/@esbuild/openbsd-x64/-/openbsd-x64-0.27.2.tgz", - "integrity": "sha512-/it7w9Nb7+0KFIzjalNJVR5bOzA9Vay+yIPLVHfIQYG/j+j9VTH84aNB8ExGKPU4AzfaEvN9/V4HV+F+vo8OEg==", + "version": "0.27.3", + "resolved": "https://registry.npmjs.org/@esbuild/openbsd-x64/-/openbsd-x64-0.27.3.tgz", + "integrity": "sha512-DnW2sRrBzA+YnE70LKqnM3P+z8vehfJWHXECbwBmH/CU51z6FiqTQTHFenPlHmo3a8UgpLyH3PT+87OViOh1AQ==", "cpu": [ "x64" ], @@ -467,9 +467,9 @@ } }, "node_modules/@esbuild/openharmony-arm64": { - "version": "0.27.2", - "resolved": "https://registry.npmjs.org/@esbuild/openharmony-arm64/-/openharmony-arm64-0.27.2.tgz", - "integrity": "sha512-LRBbCmiU51IXfeXk59csuX/aSaToeG7w48nMwA6049Y4J4+VbWALAuXcs+qcD04rHDuSCSRKdmY63sruDS5qag==", + "version": "0.27.3", + "resolved": "https://registry.npmjs.org/@esbuild/openharmony-arm64/-/openharmony-arm64-0.27.3.tgz", + "integrity": "sha512-NinAEgr/etERPTsZJ7aEZQvvg/A6IsZG/LgZy+81wON2huV7SrK3e63dU0XhyZP4RKGyTm7aOgmQk0bGp0fy2g==", "cpu": [ "arm64" ], @@ -484,9 +484,9 @@ } }, "node_modules/@esbuild/sunos-x64": { - "version": "0.27.2", - "resolved": "https://registry.npmjs.org/@esbuild/sunos-x64/-/sunos-x64-0.27.2.tgz", - "integrity": "sha512-kMtx1yqJHTmqaqHPAzKCAkDaKsffmXkPHThSfRwZGyuqyIeBvf08KSsYXl+abf5HDAPMJIPnbBfXvP2ZC2TfHg==", + "version": "0.27.3", + "resolved": "https://registry.npmjs.org/@esbuild/sunos-x64/-/sunos-x64-0.27.3.tgz", + "integrity": "sha512-PanZ+nEz+eWoBJ8/f8HKxTTD172SKwdXebZ0ndd953gt1HRBbhMsaNqjTyYLGLPdoWHy4zLU7bDVJztF5f3BHA==", "cpu": [ "x64" ], @@ -501,9 +501,9 @@ } }, "node_modules/@esbuild/win32-arm64": { - "version": "0.27.2", - "resolved": "https://registry.npmjs.org/@esbuild/win32-arm64/-/win32-arm64-0.27.2.tgz", - "integrity": "sha512-Yaf78O/B3Kkh+nKABUF++bvJv5Ijoy9AN1ww904rOXZFLWVc5OLOfL56W+C8F9xn5JQZa3UX6m+IktJnIb1Jjg==", + "version": "0.27.3", + "resolved": "https://registry.npmjs.org/@esbuild/win32-arm64/-/win32-arm64-0.27.3.tgz", + "integrity": "sha512-B2t59lWWYrbRDw/tjiWOuzSsFh1Y/E95ofKz7rIVYSQkUYBjfSgf6oeYPNWHToFRr2zx52JKApIcAS/D5TUBnA==", "cpu": [ "arm64" ], @@ -518,9 +518,9 @@ } }, "node_modules/@esbuild/win32-ia32": { - "version": "0.27.2", - "resolved": "https://registry.npmjs.org/@esbuild/win32-ia32/-/win32-ia32-0.27.2.tgz", - "integrity": "sha512-Iuws0kxo4yusk7sw70Xa2E2imZU5HoixzxfGCdxwBdhiDgt9vX9VUCBhqcwY7/uh//78A1hMkkROMJq9l27oLQ==", + "version": "0.27.3", + "resolved": "https://registry.npmjs.org/@esbuild/win32-ia32/-/win32-ia32-0.27.3.tgz", + "integrity": "sha512-QLKSFeXNS8+tHW7tZpMtjlNb7HKau0QDpwm49u0vUp9y1WOF+PEzkU84y9GqYaAVW8aH8f3GcBck26jh54cX4Q==", "cpu": [ "ia32" ], @@ -535,9 +535,9 @@ } }, "node_modules/@esbuild/win32-x64": { - "version": "0.27.2", - "resolved": "https://registry.npmjs.org/@esbuild/win32-x64/-/win32-x64-0.27.2.tgz", - "integrity": "sha512-sRdU18mcKf7F+YgheI/zGf5alZatMUTKj/jNS6l744f9u3WFu4v7twcUI9vu4mknF4Y9aDlblIie0IM+5xxaqQ==", + "version": "0.27.3", + "resolved": "https://registry.npmjs.org/@esbuild/win32-x64/-/win32-x64-0.27.3.tgz", + "integrity": "sha512-4uJGhsxuptu3OcpVAzli+/gWusVGwZZHTlS63hh++ehExkVT8SgiEf7/uC/PclrPPkLhZqGgCTjd0VWLo6xMqA==", "cpu": [ "x64" ], @@ -2235,9 +2235,9 @@ } }, "node_modules/esbuild": { - "version": "0.27.2", - "resolved": "https://registry.npmjs.org/esbuild/-/esbuild-0.27.2.tgz", - "integrity": "sha512-HyNQImnsOC7X9PMNaCIeAm4ISCQXs5a5YasTXVliKv4uuBo1dKrG0A+uQS8M5eXjVMnLg3WgXaKvprHlFJQffw==", + "version": "0.27.3", + "resolved": "https://registry.npmjs.org/esbuild/-/esbuild-0.27.3.tgz", + "integrity": "sha512-8VwMnyGCONIs6cWue2IdpHxHnAjzxnw2Zr7MkVxB2vjmQ2ivqGFb4LEG3SMnv0Gb2F/G/2yA8zUaiL1gywDCCg==", "dev": true, "hasInstallScript": true, "license": "MIT", @@ -2248,32 +2248,32 @@ "node": ">=18" }, "optionalDependencies": { - "@esbuild/aix-ppc64": "0.27.2", - "@esbuild/android-arm": "0.27.2", - "@esbuild/android-arm64": "0.27.2", - "@esbuild/android-x64": "0.27.2", - "@esbuild/darwin-arm64": "0.27.2", - "@esbuild/darwin-x64": "0.27.2", - "@esbuild/freebsd-arm64": "0.27.2", - "@esbuild/freebsd-x64": "0.27.2", - "@esbuild/linux-arm": "0.27.2", - "@esbuild/linux-arm64": "0.27.2", - "@esbuild/linux-ia32": "0.27.2", - "@esbuild/linux-loong64": "0.27.2", - "@esbuild/linux-mips64el": "0.27.2", - "@esbuild/linux-ppc64": "0.27.2", - "@esbuild/linux-riscv64": "0.27.2", - "@esbuild/linux-s390x": "0.27.2", - "@esbuild/linux-x64": "0.27.2", - "@esbuild/netbsd-arm64": "0.27.2", - "@esbuild/netbsd-x64": "0.27.2", - "@esbuild/openbsd-arm64": "0.27.2", - "@esbuild/openbsd-x64": "0.27.2", - "@esbuild/openharmony-arm64": "0.27.2", - "@esbuild/sunos-x64": "0.27.2", - "@esbuild/win32-arm64": "0.27.2", - "@esbuild/win32-ia32": "0.27.2", - "@esbuild/win32-x64": "0.27.2" + "@esbuild/aix-ppc64": "0.27.3", + "@esbuild/android-arm": "0.27.3", + "@esbuild/android-arm64": "0.27.3", + "@esbuild/android-x64": "0.27.3", + "@esbuild/darwin-arm64": "0.27.3", + "@esbuild/darwin-x64": "0.27.3", + "@esbuild/freebsd-arm64": "0.27.3", + "@esbuild/freebsd-x64": "0.27.3", + "@esbuild/linux-arm": "0.27.3", + "@esbuild/linux-arm64": "0.27.3", + "@esbuild/linux-ia32": "0.27.3", + "@esbuild/linux-loong64": "0.27.3", + "@esbuild/linux-mips64el": "0.27.3", + "@esbuild/linux-ppc64": "0.27.3", + "@esbuild/linux-riscv64": "0.27.3", + "@esbuild/linux-s390x": "0.27.3", + "@esbuild/linux-x64": "0.27.3", + "@esbuild/netbsd-arm64": "0.27.3", + "@esbuild/netbsd-x64": "0.27.3", + "@esbuild/openbsd-arm64": "0.27.3", + "@esbuild/openbsd-x64": "0.27.3", + "@esbuild/openharmony-arm64": "0.27.3", + "@esbuild/sunos-x64": "0.27.3", + "@esbuild/win32-arm64": "0.27.3", + "@esbuild/win32-ia32": "0.27.3", + "@esbuild/win32-x64": "0.27.3" } }, "node_modules/escape-html": { @@ -4420,7 +4420,7 @@ "@types/js-yaml": "^4.0.9", "@types/node": "^25.2.1", "@vitest/coverage-v8": "^4.0.18", - "esbuild": "^0.27.2", + "esbuild": "^0.27.3", "eslint": "^9.39.2", "eslint-config-prettier": "^10.1.8", "eslint-plugin-prettier": "^5.5.5", diff --git a/server/package.json b/server/package.json index c9706c90..69b7f901 100644 --- a/server/package.json +++ b/server/package.json @@ -42,7 +42,7 @@ "@types/js-yaml": "^4.0.9", "@types/node": "^25.2.1", "@vitest/coverage-v8": "^4.0.18", - "esbuild": "^0.27.2", + "esbuild": "^0.27.3", "eslint": "^9.39.2", "eslint-config-prettier": "^10.1.8", "eslint-plugin-prettier": "^5.5.5", From 06a2c9fe5254a5fb73dcb15fde3bf9e5dbf5a7b2 Mon Sep 17 00:00:00 2001 From: Copilot <198982749+Copilot@users.noreply.github.com> Date: Thu, 5 Feb 2026 20:37:38 -0700 Subject: [PATCH 3/5] Update license field in package.json files to reference LICENSE file (#15) --- client/package.json | 2 +- package.json | 2 +- server/package.json | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/client/package.json b/client/package.json index 1aa36f70..4728bd33 100644 --- a/client/package.json +++ b/client/package.json @@ -21,7 +21,7 @@ "typescript" ], "author": "@github/ps-codeql", - "license": "MIT", + "license": "SEE LICENSE IN LICENSE", "engines": { "node": ">=25.2.1", "npm": ">=11.6.2" diff --git a/package.json b/package.json index ef21dd20..f2d02c2f 100644 --- a/package.json +++ b/package.json @@ -17,7 +17,7 @@ "typescript" ], "author": "@github/ps-codeql", - "license": "MIT", + "license": "SEE LICENSE IN LICENSE", "engines": { "node": ">=25.2.1", "npm": ">=11.6.2" diff --git a/server/package.json b/server/package.json index 69b7f901..aa9f3ef6 100644 --- a/server/package.json +++ b/server/package.json @@ -21,7 +21,7 @@ "typescript" ], "author": "@github/ps-codeql", - "license": "MIT", + "license": "SEE LICENSE IN LICENSE", "engines": { "node": ">=25.2.1", "npm": ">=11.6.2" From 3ac8658171e0a24c1448f2012c0bae62c8925956 Mon Sep 17 00:00:00 2001 From: Nathan Randall <70299490+data-douser@users.noreply.github.com> Date: Thu, 5 Feb 2026 20:38:58 -0700 Subject: [PATCH 4/5] Update README.md Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index 6344d4e8..191638c9 100644 --- a/README.md +++ b/README.md @@ -122,7 +122,7 @@ npm install && npm run build ## License -This project is licensed under the terms of the GitHub CodeQL Terms and Conditions. Please refer to [LICENSE.md](LICENSE.md) for the full terms. +This project is licensed under the terms of the GitHub CodeQL Terms and Conditions. Please refer to [LICENSE](LICENSE) for the full terms. ## Maintainers From 6c36474765d4391ae36549d497ac4c6d9bcd5371 Mon Sep 17 00:00:00 2001 From: Copilot <198982749+Copilot@users.noreply.github.com> Date: Thu, 5 Feb 2026 21:14:41 -0700 Subject: [PATCH 5/5] Fix unzip command syntax in release installation docs (#16) --- README.md | 2 +- docs/getting-started.md | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index 191638c9..e2fa1690 100644 --- a/README.md +++ b/README.md @@ -61,7 +61,7 @@ Please note that this project is released with a [Contributor Code of Conduct](C 2. Extract the archive: ```bash -unzip codeql-development-mcp-server-vX.X.X.zip -C /path/to/destination +unzip codeql-development-mcp-server-vX.X.X.zip -d /path/to/destination ``` ### VS Code Configuration diff --git a/docs/getting-started.md b/docs/getting-started.md index a0dcda3b..35f5325c 100644 --- a/docs/getting-started.md +++ b/docs/getting-started.md @@ -13,7 +13,7 @@ This guide covers installation, configuration, and usage of the CodeQL Developme ### From GitHub Releases 1. Download the latest release from [Releases](https://github.com/advanced-security/codeql-development-mcp-server/releases) -2. Extract: `tar -xzvf codeql-development-mcp-server-vX.X.X.tar.gz -C /path/to/destination` +2. Extract: `unzip codeql-development-mcp-server-vX.X.X.zip -d /path/to/destination` ### From Source