jeffreyaven · Sep 20, 2026 · Sep 19, 2026 · Sep 19, 2026
diff --git a/.github/actionlint.yaml b/.github/actionlint.yaml
@@ -9,4 +9,5 @@ self-hosted-runner:
     - macos-15 # should not be necessary
     - macos-15-intel # should not be necessary
     - windows-11-arm # GitHub-hosted arm64 Windows runner, newer than actionlint's built-in label list
-    - ubuntu-24.04-arm # GitHub-hosted arm64 Linux runner, newer than actionlint's built-in label list
+    - ubuntu-24.04-arm # GitHub-hosted arm64 Linux runner, newer than actionlint's built-in label list
+    - ubuntu-24.04 # GitHub-hosted Linux runner, newer than actionlint's built-in label list
diff --git a/.github/workflows/build-expt.yaml b/.github/workflows/build-expt.yaml
@@ -10,27 +10,27 @@
 
 jobs:
   build-linux-binary:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
       - name: Checkout
         uses: actions/checkout@v4
        with:
          fetch-depth: 0
      - name: Setup Go
        uses: actions/setup-go@v4
        with:
          go-version: ^1.19
      - name: Install cross-compiler for linux/arm64
        run: sudo apt-get install gcc-aarch64-linux-gnu g++-aarch64-linux-gnu
      - name: Run Goreleaser
        uses: goreleaser/goreleaser-action@v5
        with:
          version: latest
          args: release --clean --config .github/goreleaser/.goreleaser-for-linux.yaml --verbose
        env:
          GITHUB_TOKEN: ${{env.GH_ACCESS_TOKEN}}

  build-macos-binary:
    runs-on: macos-latest
    steps:
      - name: Checkout

diff --git a/.github/workflows/claude.yml b/.github/workflows/claude.yml
@@ -17,7 +17,7 @@ jobs:
       (github.event_name == 'pull_request_review_comment' && contains(github.event.comment.body, '@claude')) ||
       (github.event_name == 'pull_request_review' && contains(github.event.review.body, '@claude')) ||
       (github.event_name == 'issues' && contains(github.event.issue.body, '@claude'))
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     permissions:
       contents: write
       pull-requests: write

diff --git a/.github/workflows/contributors.yml b/.github/workflows/contributors.yml
@@ -26,7 +26,7 @@ env:
 
 jobs:
   contributors:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@v6
 

diff --git a/.github/workflows/goreleaser.yml b/.github/workflows/goreleaser.yml
@@ -8,28 +8,28 @@
 
 jobs:
   goreleaser:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
 
 
      - name: Get rid of dissruptive line endings before checkout
        run: |
          git config --global core.autocrlf false

      -
        name: Checkout
        uses: actions/checkout@v2
        with:
          fetch-depth: 0
      -
        name: Set up Go
        uses: actions/setup-go@v2
        with:
          go-version: 1.16
      -
        name: Run GoReleaser
        uses: goreleaser/goreleaser-action@v2
        with:
          version: latest
          args: release --rm-dist
        env:

diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
@@ -17,26 +17,26 @@
 
 jobs:
   lint:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
       - name: Checkout code
         uses: actions/checkout@v4.1.1

      - name: Setup Go environment
        uses: actions/setup-go@v5.0.0
        with:
          go-version: '1.23.0'
          cache: false

      - name: Check workflow files
        uses: docker://rhysd/actionlint:1.6.23
        with:
          args: -color

      - name: Update Go dependencies
        run: go mod tidy

      - name: Run golangci-lint
        uses: golangci/golangci-lint-action@v8.0.0
        with:
          version: ${{ env.GOLANGCI_LINT_VERSION }}

diff --git a/.github/workflows/mcp-packaging.yml b/.github/workflows/mcp-packaging.yml
@@ -37,7 +37,7 @@ defaults:
 jobs:
   version:
     name: resolve version
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     outputs:
       version: ${{ steps.resolve.outputs.version }}
       is_publish: ${{ steps.resolve.outputs.is_publish }}
@@ -65,7 +65,7 @@ jobs:
       matrix:
         include:
           - target: linux-x64
-            runner: ubuntu-latest
+            runner: ubuntu-24.04
           - target: linux-arm64
             runner: ubuntu-24.04-arm
           - target: darwin-universal
@@ -90,7 +90,7 @@ jobs:
   bundle-windows:
     name: windows-x64 (build)
     needs: version
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@v6
       - name: Build bundle
@@ -121,7 +121,7 @@ jobs:
   oci:
     name: oci (build + smoke)
     needs: version
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@v6
       - name: Build image
@@ -135,7 +135,7 @@ jobs:
   combined:
     name: multiplatform (combined build + byte verification)
     needs: [version, bundle, bundle-windows]
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@v6
       - name: Gather per-platform bundle artifacts
@@ -165,7 +165,7 @@ jobs:
       fail-fast: false
       matrix:
         include:
-          - runner: ubuntu-latest
+          - runner: ubuntu-24.04
             py: python3
           - runner: ubuntu-24.04-arm
             py: python3
@@ -188,7 +188,7 @@ jobs:
     name: upload bundles to release
     if: needs.version.outputs.is_publish == 'true'
     needs: [version, bundle, bundle-windows, smoke-windows, oci, combined, combined-smoke]
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     permissions:
       contents: write
     steps:
@@ -219,7 +219,7 @@ jobs:
     name: push OCI image
     if: needs.version.outputs.is_publish == 'true'
     needs: [version, oci]
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@v6
       - name: Push multi-arch image
@@ -252,12 +252,12 @@ jobs:
       fail-fast: false
       matrix:
         include:
-          - { vector: cargo,  runner: ubuntu-latest,  target: linux-x64,        py: python3 }
+          - { vector: cargo,  runner: ubuntu-24.04,  target: linux-x64,        py: python3 }
           - { vector: cargo,  runner: windows-latest, target: windows-x64,      py: python }
           - { vector: cargo,  runner: macos-latest,   target: darwin-universal, py: python3 }
-          - { vector: go,     runner: ubuntu-latest,  target: linux-x64,        py: python3 }
+          - { vector: go,     runner: ubuntu-24.04,  target: linux-x64,        py: python3 }
           - { vector: go,     runner: windows-latest, target: windows-x64,      py: python }
-          - { vector: dotnet, runner: ubuntu-latest,  target: linux-x64,        py: python3 }
+          - { vector: dotnet, runner: ubuntu-24.04,  target: linux-x64,        py: python3 }
           - { vector: dotnet, runner: windows-latest, target: windows-x64,      py: python }
     runs-on: ${{ matrix.runner }}
     env:
@@ -317,7 +317,7 @@ jobs:
     name: publish cargo (crates.io)
     if: needs.version.outputs.is_publish == 'true'
     needs: [version, sdk]
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@v6
       - uses: dtolnay/rust-toolchain@stable
@@ -332,7 +332,7 @@ jobs:
     name: publish dotnet (NuGet)
     if: needs.version.outputs.is_publish == 'true'
     needs: [version, sdk]
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     permissions:
       contents: read
       id-token: write
@@ -356,7 +356,7 @@ jobs:
     name: publish go (mirror stackql-mcp-go, tag)
     if: needs.version.outputs.is_publish == 'true'
     needs: [version, sdk]
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@v6
       - env:

diff --git a/.github/workflows/mcp-registry-publish.yml b/.github/workflows/mcp-registry-publish.yml
@@ -29,7 +29,7 @@ defaults:
 jobs:
   registry-publish:
     name: publish to MCP registry
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     permissions:
       id-token: write
       contents: read

diff --git a/.github/workflows/openai-plugin.yml b/.github/workflows/openai-plugin.yml
@@ -18,7 +18,7 @@ jobs:
       fail-fast: false
       matrix:
         include:
-          - os: ubuntu-latest
+          - os: ubuntu-24.04
             python: python3
             binary: stackql-plugin-smoke
           - os: macos-latest

diff --git a/.github/workflows/scenario.yaml b/.github/workflows/scenario.yaml
@@ -14,117 +14,117 @@
 
 jobs:
   scenario-testing:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     timeout-minutes: ${{ vars.DEFAULT_JOB_TIMEOUT_MIN == '' && 120 || vars.DEFAULT_JOB_TIMEOUT_MIN }}
     steps:
       - name: Install Package dependencies
        run: |
          sudo apt-get update
          sudo apt-get install -y jq

      - name: Check out code into the Go module directory
        uses: actions/checkout@v4.1.1

      - name: Setup Python
        uses: actions/setup-python@v5.0.0
        with:
          cache: pip
          python-version: '3.11' 

      - name: Install Python dependencies
        run: |
          pip3 install -r cicd/requirements.txt

      - name: Ref Parse
        run: |
          _defaultRunType="${{ env.RUNTYPE_READ_ONLY }}"
          tag_obj="$(python3 cicd/python/tag_parse.py '${{ github.ref_name }}' --parse-scenario-tag)"
          echo "tag_obj: $tag_obj"
          runID="$(echo "${tag_obj}" | jq -r '.run_id')"
          runType="$(echo "${tag_obj}" | jq -r '.run_type')"
          repositoryShorthand="$(echo "${tag_obj}" | jq -r '.repository_shorthand')"
          artifactRepositoryFullName='stackql/stackql'
          if [ "$repositoryShorthand" = "devel" ]; then
            artifactRepositoryFullName='stackql/stackql-devel'
          fi
          if [ "$runType" = "" ]; then
            runType="$_defaultRunType"
          elif [ "$runType" != "${{ env.RUNTYPE_READ_ONLY }}" ] \
                 && [ "$runType" != "${{ env.RUNTYPE_READ_WRITE }}" ] \
                 && [ "$runType" != "${{ env.RUNTYPE_DEPLOY }}" ] \
                 && [ "$runType" != "${{ env.RUNTYPE_ALL }}" ]
          then
            echo "Invalid run type: $runType"
            exit 1
          fi
          {
            echo "runID=$runID"
            echo "artifactRepositoryFullName=$artifactRepositoryFullName"
            echo "runType=$runType"
          } >> "${GITHUB_ENV}"

      - name: Download Artifact
        uses: actions/download-artifact@v4.1.2
        with:
          name: stackql_linux_amd64
          path: build
          github-token: ${{ secrets.CI_STACKQL_PACKAGE_DOWNLOAD_TOKEN }}
          repository: ${{ env.artifactRepositoryFullName }}
          run-id: ${{ env.runID }}

      - name: Stackql permissions
        run:  |
          sudo chmod a+rwx build/stackql
          ls -al build/stackql
          {
            echo "$(pwd)/build"
          } >> "${GITHUB_PATH}"

      - name: Check Stackql Version
        run: |
          stackql --version

      - name: Persist secrets
        run: |
          echo "$GCP_RO_SECRET" > cicd/keys/testing/google-ro-credentials.json
          echo "$GCP_RW_SECRET" > cicd/keys/testing/google-rw-credentials.json
        shell: bash
        env:
          GCP_RO_SECRET: ${{ secrets.CI_SCENARIO_GCP_RO_SECRET }}
          GCP_RW_SECRET: ${{ secrets.CI_SCENARIO_GCP_RW_SECRET }}

      - name: Run Read Only Walkthrough Scenarios
        if: ${{ env.runType == env.RUNTYPE_READ_ONLY || env.runType == env.RUNTYPE_ALL }}
        env:
          AWS_ACCESS_KEY_ID: ${{ secrets.CI_SCENARIO_RO_AWS_ACCESS_KEY_ID }}
          AWS_SECRET_ACCESS_KEY: ${{ secrets.CI_SCENARIO_RO_AWS_SECRET_ACCESS_KEY }}
        run: |
          python3 test/python/markdown_testing/markdown_testing.py "$(pwd)" --test-root=docs/walkthroughs/readonly 2>&1 | tee cicd/log/markdown-readonly-testing-results.log

      - name: Run Read Write Walkthrough Scenarios
        if: ${{ env.runType == env.RUNTYPE_READ_WRITE || env.runType == env.RUNTYPE_ALL }}
        env:
          AWS_ACCESS_KEY_ID: ${{ secrets.CI_SCENARIO_RW_AWS_ACCESS_KEY_ID }}
          AWS_SECRET_ACCESS_KEY: ${{ secrets.CI_SCENARIO_RW_AWS_SECRET_ACCESS_KEY }}
        run: |
          python3 test/python/markdown_testing/markdown_testing.py "$(pwd)" --test-root=docs/walkthroughs/readwrite 2>&1 | tee cicd/log/markdown-readwrite-testing-results.log

      - name: Run Deploy Walkthrough Scenarios
        if: ${{ env.runType == env.RUNTYPE_DEPLOY || env.runType == env.RUNTYPE_ALL }}
        env:
          AWS_ACCESS_KEY_ID: ${{ secrets.CI_SCENARIO_RW_AWS_ACCESS_KEY_ID }}
          AWS_SECRET_ACCESS_KEY: ${{ secrets.CI_SCENARIO_RW_AWS_SECRET_ACCESS_KEY }}
        run: |
          python3 test/python/markdown_testing/markdown_testing.py "$(pwd)" --test-root=docs/walkthroughs/deploy 2>&1 | tee cicd/log/markdown-deploy-testing-results.log

      - name: Upload Test Results
        uses: actions/upload-artifact@v4.3.1
        with:
          name: scenario_test_results
          path: cicd/log/markdown-*.log

      - name: Cleanup
        if: always()
        run: |
          rm -rf cicd/keys/testing

diff --git a/packaging/mcpb/.gitignore b/packaging/mcpb/.gitignore
@@ -6,7 +6,6 @@ tmp/
 /.tools
 /.oci-stage
 npm/platforms.json
-npm/package-lock.json
 npm/*.tgz
 pypi/dist/
 pypi/src/stackql_mcp_server/platforms.json

diff --git a/packaging/mcpb/npm/package-lock.json b/packaging/mcpb/npm/package-lock.json
diff --git a/packaging/mcpb/npm/package.json b/packaging/mcpb/npm/package.json
@@ -31,6 +31,6 @@
     "multicloud"
   ],
   "dependencies": {
-    "adm-zip": "^0.5.16"
+    "adm-zip": "^0.6.1"
   }
 }