fix: update release toolchain

[keito4]

概要

• semantic-release と @semantic-release/github を最新安定版へ更新し、release bot の Node18 サポートを維持
• npm/global.json の Codex/Claude CLI バージョンを最新化（claude-code 2.0.37、codex 0.58.0）
• lockfile を再生成し、ローカル検証スイートを実行

セキュリティ

npm audit で報告される tar@7.5.1 の脆弱性は、semantic-release@25.x が内部依存する npm@11.6.2 に同梱されているため依然残存します。npm audit fix --force を実行すると semantic-release が 24.x 系へダウングレードされるため今回は適用していません。npm 側で修正版 (tar>=7.5.2 同梱) が出次第、semantic-release を再インストールすることで解消できます。

テスト

• npm test

Summary by CodeRabbit

• Chores
  • Updated project dependencies, including release tooling and AI/code-assistant SDKs, to newer versions for improved stability and maintenance.
  • These updates are dependency-only and do not change public APIs or user-facing functionality.

[coderabbitai]

Walkthrough

Bumped release tooling and AI SDK/global CLI dependency versions: @semantic-release/github 11.0.6 → 12.0.2 and semantic-release 24.2.9 → 25.0.2 in package.json; bumped @anthropic-ai/claude-code 2.0.36 → 2.0.37 and @openai/codex 0.57.0 → 0.58.0 in npm/global.json and .devcontainer/Dockerfile.

Changes

Cohort / File(s)	Summary
Release tooling package.json	Updated @semantic-release/github from 11.0.6 → 12.0.2 and semantic-release from 24.2.9 → 25.0.2.
Global npm SDKs / Devcontainer npm/global.json, .devcontainer/Dockerfile	Bumped @anthropic-ai/claude-code 2.0.36 → 2.0.37 and @openai/codex 0.57.0 → 0.58.0 (updated global install command in devcontainer).

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~10 minutes

• Check semantic-release major-minor release notes for config/schema changes.
• Verify CI/devcontainer global installs and any CLI behavior changes for claude-code / codex.
• Confirm no runtime/API-breaking changes impact code that relies on these SDKs.

Possibly related PRs

• fix: pin tooling versions #126 — modifies the same dependency entries (semantic-release, SDK versions).
• feat: add semantic versioning to Docker workflow #28 — adds/changes semantic-release configuration/workflow related to these tooling updates.
• Feat/add vercel cli #100 — touches .devcontainer and global SDK/CLI installs (codex/claude) similarly.

Suggested labels

released

Poem

🐰 I hopped through package trees today,
Pushed tiny bumps along the way,
Tooling tidy, SDKs tuned,
A happy hop — the build resumed. 🥕

Pre-merge checks and finishing touches

✅ Passed checks (3 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title 'fix: update release toolchain' accurately summarizes the main changes, which involve updating semantic-release and @semantic-release/github versions for release bot maintenance.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

✨ Finishing touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Post copyable unit tests in a comment
• Commit unit tests in branch fix/update-release-toolchain

---

📜 Recent review details

Configuration used: CodeRabbit UI

Review profile: CHILL

Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between 516e4d9 and 364a703.

📒 Files selected for processing (1)

• .devcontainer/Dockerfile (1 hunks)

🔇 Additional comments (1)

.devcontainer/Dockerfile (1)

46-46: I need to verify the availability of the specific claude-code@2.0.37 version, as the initial search didn't confirm this exact version. Let me search for more specific information:

Version bumps confirmed as valid and current.

Both @anthropic-ai/claude-code@2.0.37 (latest version, published 4 days ago) and @openai/codex@0.58.0 are available on npm and installable. The Dockerfile change itself is correct. However, verify that npm/global.json has been updated with matching versions—this file was not provided for review and requires manual verification to ensure consistency across the configuration.

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}