Skip to content

Comments

Add advanced-security/ql-mcp-*-tools-src query pack archives as uploaded release artifacts#41

Merged
enyil merged 5 commits intodd/update-release-v2-24-1from
dd/update-release-artifact-upload/1
Feb 10, 2026
Merged

Add advanced-security/ql-mcp-*-tools-src query pack archives as uploaded release artifacts#41
enyil merged 5 commits intodd/update-release-v2-24-1from
dd/update-release-artifact-upload/1

Conversation

@data-douser
Copy link
Collaborator

Summary of Changes

This pull request updates the release workflow in .github/workflows/release.yml to improve handling of CodeQL tool query packs and tag creation during manual releases. The changes automate the creation and bundling of CodeQL packs, streamline artifact uploads, and enhance tag management for workflow dispatch events.

Outline of Changes

Release workflow improvements:

  • Updated the tag handling for manual releases (workflow_dispatch) to automatically create and push the tag if it does not exist, instead of failing the workflow. [1] [2]
  • Added steps to install CodeQL pack dependencies and bundle CodeQL tool query packs for multiple languages, then upload these as artifacts during the release process. [1] [2]
  • Modified the release artifact upload to include bundled CodeQL tool query pack archives alongside the main server archive.
  • Enhanced the release summary to indicate successful bundling of CodeQL tool query pack archives.

Dependency and packaging changes:

  • Changed the production dependency installation step from npm ci to npm install, and removed copying of the root package-lock.json to the server directory, simplifying dependency management. [1] [2]

@data-douser data-douser self-assigned this Feb 10, 2026
@data-douser data-douser requested a review from enyil as a code owner February 10, 2026 04:55
@data-douser data-douser added the enhancement New feature or request label Feb 10, 2026
@data-douser data-douser requested a review from a team as a code owner February 10, 2026 04:55
@data-douser data-douser added the dependencies Pull requests that update a dependency file label Feb 10, 2026
Copy link

@enyil enyil left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm

@enyil enyil merged commit d5789a1 into dd/update-release-v2-24-1 Feb 10, 2026
1 check failed
@enyil enyil deleted the dd/update-release-artifact-upload/1 branch February 10, 2026 14:22
data-douser added a commit that referenced this pull request Feb 10, 2026
* Fix release workflow: use setup-codeql-environment action instead of codeql-action/init

Co-authored-by: data-douser <70299490+data-douser@users.noreply.github.com>

* Add "fetch-tags" to release.yml workflow checkout

* Upgrade codeql and repo version to 2.24.1

* Upgrade NodeJS dependencies to latest

* Enhance MCP prompts with LSP tool guidance

This commit:

- updates 'server/src/prompts/*.prompt.md` files to provide better
  guidance to LLMs in relation to iterative and/or LSP-based tools;
- improves unit tests of MCP ^ "workflow prompts";
- adds an example workshop, focused on using LSP-based MCP server
  tools, under the existing create-codeql-query-development-workshop
  agent skill;
- updates .github/ instructions and prompts with lessons learned
  from tool validation via example workshop development.

* improve release.yml workflow_dispatch compatibility

* Improve prettier fix markdownlint required workflow

* Fix tests flagged in PR review comments

* Fix `release.yml` workflow for publishing CodeQL packs and npm package for `codeql-development-mcp-server` (#40)

* Initial plan

* Enable auto-creation of tags in release workflow for workflow_dispatch

Co-authored-by: data-douser <70299490+data-douser@users.noreply.github.com>

* More fixes for release workflow

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>

* Add `advanced-security/ql-mcp-*-tools-src` query pack archives as uploaded release artifacts (#41)

* Initial plan

* Enable auto-creation of tags in release workflow for workflow_dispatch

Co-authored-by: data-douser <70299490+data-douser@users.noreply.github.com>

* More fixes for release workflow

* Add CodeQL query packs as uploaded release artifacts

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>

* Add version update script & fix packs for release (#42)

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file enhancement New feature or request

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants