Upgrade Node.js dependencies across workspaces (targeting next) (#240)

data-douser · Copilot · web-flow · commit 2fa1ef97df50 · 2026-04-12T19:51:33.000-06:00
* Upgrade NodeJS dependencies across workspaces * Update extension "engines.vscode" to "^1.115.0" Updates the minimum required "engines.vscode" version from "^1.110.0" to "^1.115.0" in order to align with newer @types/vscode. * Update minimum required NodeJS version to "^25.6.0" * Regenerate package-lock.json to fix build * Sync server/dist/ * Update extensions/vscode/README.md Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> Signed-off-by: Nathan Randall <70299490+data-douser@users.noreply.github.com> * Update devcontainer.json for Node 24->25 upgrade * Sync server/dist/** * Update client/README.md Node.js prerequisite to v25.6.0 * Update CHANGELOG.md with dependency upgrades from #240 --------- Signed-off-by: Nathan Randall <70299490+data-douser@users.noreply.github.com> Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
diff --git a/.devcontainer/devcontainer.json b/.devcontainer/devcontainer.json
@@ -1,5 +1,5 @@
 {
-  "image": "mcr.microsoft.com/devcontainers/typescript-node:24",
+  "image": "mcr.microsoft.com/devcontainers/typescript-node:25",
   "customizations": {
     "vscode": {
       "extensions": [
diff --git a/.node-version b/.node-version
@@ -1 +1 @@
-v24.13.0
+v25.6.0
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -103,6 +103,10 @@ _Changes on `main` since the latest tagged release that have not yet been includ
 
 - Replaced `lowdb` with `sql.js` as the persistence backend, removing the previous JSON-file storage dependency. ([#169](https://github.com/advanced-security/codeql-development-mcp-server/pull/169))
 - Added `codeql/rust-all` support for the new Rust tool queries. ([#195](https://github.com/advanced-security/codeql-development-mcp-server/pull/195))
+- Bumped minimum Node.js version from `>=24.13.0` to `>=25.6.0` across root, server, and VS Code extension workspaces. ([#240](https://github.com/advanced-security/codeql-development-mcp-server/pull/240))
+- Bumped VS Code engine from `^1.110.0` to `^1.115.0` and `@types/vscode` to match. ([#240](https://github.com/advanced-security/codeql-development-mcp-server/pull/240))
+- Upgraded `eslint` to `^10.2.0`, `prettier` to `^3.8.2`, `typescript-eslint` to `^8.58.1`, `@vitest/coverage-v8` and `vitest` to `^4.1.4`, and `dotenv` to `^17.4.1`. ([#240](https://github.com/advanced-security/codeql-development-mcp-server/pull/240))
+- Updated devcontainer image from `typescript-node:24` to `typescript-node:25`. ([#240](https://github.com/advanced-security/codeql-development-mcp-server/pull/240))
 
 ### New Contributors
 
diff --git a/README.md b/README.md
@@ -46,7 +46,7 @@ Please note that this project is released with a [Contributor Code of Conduct](C
 
 ### Environment
 
-- **Node.js** v24.13.0 or later ([nodejs.org](https://nodejs.org/))
+- **Node.js** v25.6.0 or later ([nodejs.org](https://nodejs.org/))
 - **Some calling LLM** Bring your own LLM, but some LLMs are (much) better than others.
 
 ### External Dependencies
diff --git a/client/README.md b/client/README.md
@@ -8,7 +8,7 @@ Installable as a standalone binary or as a `gh` CLI extension (`gh ql-mcp-client
 
 - **Go** 1.25.6 or later
 - **GitHub CLI** (`gh`) authenticated — used for GitHub API calls via `go-gh`
-- **Node.js** v24.13.0 or later — required to run the MCP server subprocess in `stdio` mode
+- **Node.js** v25.6.0 or later — required to run the MCP server subprocess in `stdio` mode
 - **CodeQL CLI** — required for integration tests that exercise CodeQL tools
 
 ## Build
diff --git a/docs/getting-started.md b/docs/getting-started.md
@@ -4,7 +4,7 @@ This guide covers installation, configuration, and usage of the CodeQL Developme
 
 ## Prerequisites
 
-- **Node.js** v24.13.0 or later ([nodejs.org](https://nodejs.org/))
+- **Node.js** v25.6.0 or later ([nodejs.org](https://nodejs.org/))
 - **CodeQL CLI** ([github.com/github/codeql-cli-binaries](https://github.com/github/codeql-cli-binaries/releases))
 - **VS Code** with GitHub Copilot extension
 
diff --git a/docs/public.md b/docs/public.md
@@ -12,14 +12,14 @@ Users install the server via `npm` and the tool query packs via `codeql pack dow
 
 | Dependency                                                                                           | Minimum Version | Purpose                         |
 | ---------------------------------------------------------------------------------------------------- | --------------- | ------------------------------- |
-| [Node.js](https://nodejs.org/)                                                                       | v24.13.0        | Runtime for the MCP server      |
+| [Node.js](https://nodejs.org/)                                                                       | v25.6.0         | Runtime for the MCP server      |
 | [CodeQL CLI](https://github.com/github/codeql-cli-binaries/releases)                                 | Latest          | Query compilation and execution |
 | [VS Code](https://code.visualstudio.com/) with [GitHub Copilot](https://github.com/features/copilot) | Latest          | IDE with MCP support            |
 
 Verify prerequisites:
 
 ```bash
-node --version   # >= v24.13.0
+node --version   # >= v25.6.0
 codeql --version # any recent release
 ```
 
diff --git a/extensions/vscode/README.md b/extensions/vscode/README.md
@@ -4,8 +4,8 @@ A VS Code extension that automatically installs, configures, and manages the [Co
 
 ## Prerequisites
 
-- **VS Code** `^1.109.0`
-- **Node.js** `>=24.13.0`
+- **VS Code** `^1.115.0`
+- **Node.js** `>=25.6.0`
 - **[CodeQL for VS Code](https://marketplace.visualstudio.com/items?itemName=GitHub.vscode-codeql)** — declared as an `extensionDependency` and must be installed first.
 
 ## Installation
diff --git a/extensions/vscode/package.json b/extensions/vscode/package.json
@@ -16,8 +16,8 @@
     "url": "https://github.com/advanced-security/codeql-development-mcp-server/issues"
   },
   "engines": {
-    "vscode": "^1.110.0",
-    "node": ">=24.13.0"
+    "vscode": "^1.115.0",
+    "node": ">=25.6.0"
   },
   "categories": [
     "AI",
@@ -168,21 +168,21 @@
   "devDependencies": {
     "@eslint/js": "^10.0.1",
     "@types/mocha": "^10.0.10",
-    "@types/node": "^25.5.0",
-    "@types/vscode": "^1.110.0",
-    "@vitest/coverage-v8": "^4.1.2",
+    "@types/node": "^25.6.0",
+    "@types/vscode": "^1.115.0",
+    "@vitest/coverage-v8": "^4.1.4",
     "@vscode/test-cli": "^0.0.12",
     "@vscode/test-electron": "^2.5.2",
     "@vscode/vsce": "^3.7.1",
     "esbuild": "^0.28.0",
-    "eslint": "^10.1.0",
+    "eslint": "^10.2.0",
     "eslint-config-prettier": "^10.1.8",
     "eslint-plugin-prettier": "^5.5.5",
     "glob": "^13.0.6",
     "mocha": "^11.7.5",
-    "prettier": "^3.8.1",
+    "prettier": "^3.8.2",
     "typescript": "^6.0.2",
-    "typescript-eslint": "^8.58.0",
-    "vitest": "^4.1.2"
+    "typescript-eslint": "^8.58.1",
+    "vitest": "^4.1.4"
   }
 }
diff --git a/package-lock.json b/package-lock.json
diff --git a/package.json b/package.json
@@ -19,17 +19,17 @@
   "author": "@github/ps-codeql",
   "license": "LicenseRef-CodeQL-Terms",
   "engines": {
-    "node": ">=24.13.0",
+    "node": ">=25.6.0",
     "npm": ">=11.6.2"
   },
   "devDependencies": {
-    "eslint": "^10.1.0",
+    "eslint": "^10.2.0",
     "eslint-config-prettier": "^10.1.8",
     "eslint-plugin-prettier": "^5.5.5",
     "markdownlint-cli": "^0.48.0",
-    "prettier": "^3.8.1",
+    "prettier": "^3.8.2",
     "typescript": "^6.0.2",
-    "typescript-eslint": "^8.57.2"
+    "typescript-eslint": "^8.58.1"
   },
   "scripts": {
     "build": "npm run build -w server && npm run build -w extensions/vscode",
diff --git a/server/README.md b/server/README.md
@@ -6,7 +6,7 @@
 
 ### Prerequisites
 
-- **Node.js** v24.13.0+ ([nodejs.org](https://nodejs.org/))
+- **Node.js** v25.6.0+ ([nodejs.org](https://nodejs.org/))
 - **CodeQL CLI** ([github.com/github/codeql-cli-binaries](https://github.com/github/codeql-cli-binaries/releases))
 - **VS Code** with GitHub Copilot extension (only required for this "Quick Start" guide)
 
diff --git a/server/package.json b/server/package.json
@@ -52,14 +52,14 @@
     "url": "https://github.com/advanced-security/codeql-development-mcp-server/issues"
   },
   "engines": {
-    "node": ">=24.13.0",
+    "node": ">=25.6.0",
     "npm": ">=11.6.2"
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.29.0",
     "adm-zip": "^0.5.17",
     "cors": "^2.8.6",
-    "dotenv": "^17.4.0",
+    "dotenv": "^17.4.1",
     "express": "^5.2.1",
     "js-yaml": "^4.1.1",
     "sql.js": "^1.14.1",
@@ -71,16 +71,16 @@
     "@types/cors": "^2.8.19",
     "@types/express": "^5.0.6",
     "@types/js-yaml": "^4.0.9",
-    "@types/node": "^25.5.0",
-    "@vitest/coverage-v8": "^4.1.2",
+    "@types/node": "^25.6.0",
+    "@vitest/coverage-v8": "^4.1.4",
     "esbuild": "^0.28.0",
-    "eslint": "^10.1.0",
+    "eslint": "^10.2.0",
     "eslint-config-prettier": "^10.1.8",
     "eslint-plugin-prettier": "^5.5.5",
-    "prettier": "^3.8.1",
+    "prettier": "^3.8.2",
     "typescript": "^6.0.2",
-    "typescript-eslint": "^8.58.0",
-    "vitest": "^4.1.2"
+    "typescript-eslint": "^8.58.1",
+    "vitest": "^4.1.4"
   },
   "scripts": {
     "build": "npm run clean && npm run lint && npm run bundle",

Original file line number	Diff line number	Diff line change
`@@ -1,5 +1,5 @@`
`1`	`1`	`{`
`2`		`- "image": "mcr.microsoft.com/devcontainers/typescript-node:24",`
	`2`	`+ "image": "mcr.microsoft.com/devcontainers/typescript-node:25",`
`3`	`3`	`"customizations": {`
`4`	`4`	`"vscode": {`
`5`	`5`	`"extensions": [`