feat: update npm dependencies and global CLI tools

[keito4]

Summary

このPRは、npm devDependencies、グローバルCLIツール、およびDevContainer環境の定期的な更新を実施します。

npm devDependencies

• eslint: 9.39.1 → 9.39.2 (マイナーバグフィックス)

グローバルCLIツール

• @anthropic-ai/claude-code: 2.0.62 → 2.0.71 (新機能と改善)
• @openai/codex: 0.66.0 → 0.73.0 (新機能と改善)
• mcp-remote: 0.1.31 → 0.1.37 (バグ修正と改善)
• npm: 11.6.4 → 11.7.0 (最新の安定版)

DevContainer

• Node.js: v20.18.1 → v20.19.6 (最新のLTS Iron release)

Test plan

• npm run lint - 正常終了
• npm test - 全17件のテストが成功
• ビルド確認 - 問題なし
• 脆弱性スキャン - 0件検出
• CI/CDパイプラインの確認

Changes

• package.json - eslintバージョン更新
• package-lock.json - 依存関係ツリー更新
• npm/global.json - グローバルCLIツールのバージョン更新
• .devcontainer/Dockerfile - Node.jsバージョン更新

🤖 Generated with Claude Code

[coderabbitai]

Walkthrough

This pull request updates several dependency versions: CLI/tool packages in npm/global.json, a devDependency in package.json, and the Node.js binary version referenced in .devcontainer/Dockerfile. No functional code or API surface changes.

Changes

Cohort / File(s)	Summary
CLI and tool dependencies npm/global.json	Version bumps: @anthropic-ai/claude-code 2.0.62 → 2.0.71, @openai/codex 0.66.0 → 0.73.0, mcp-remote 0.1.31 → 0.1.37, npm 11.6.4 → 11.7.0
Dev dependencies package.json	ESLint devDependency bumped: 9.39.1 → 9.39.2
DevContainer / Node runtime .devcontainer/Dockerfile	Node.js binary version updated: v20.18.1 → v20.19.6 (tarball/URL adjusted accordingly)

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~10 minutes

• Check that the Node tarball URL and checksum (if present elsewhere) align with the new Node version.
• Verify no downstream scripts rely on previous CLI/tool versions' behavior.

Possibly related PRs

• fix: update dependency manifests #145 — Updates the same npm/global.json dependency entries (overlapping version bumps).
• fix: パッケージを最新版に更新 #147 — Performs version bumps for @anthropic-ai/claude-code and @openai/codex in npm/global.json.
• chore: automate library updates #129 — Also bumps ESLint in package.json, related to devDependency adjustments.

Poem

🐰
I hopped through lines of JSON bright,
nudged versions up with gentle bite.
Node and ESLint, tools in tune,
Claude and Codex hum a tune.
A tiny hop — the code feels light.

Pre-merge checks and finishing touches

✅ Passed checks (3 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title accurately summarizes the main changes: updating npm dependencies (eslint) and global CLI tools (@anthropic-ai/claude-code, @openai/codex, mcp-remote, npm).
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.

✨ Finishing touches

• 📝 Generate docstrings

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Post copyable unit tests in a comment
• Commit unit tests in branch feat/update-dependencies-20251217

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[coderabbitai]

Actionable comments posted: 1

📜 Review details

Configuration used: defaults

Review profile: CHILL

Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between 4987946 and 02c1166.

⛔ Files ignored due to path filters (1)

• package-lock.json is excluded by !**/package-lock.json

📒 Files selected for processing (2)

• npm/global.json (1 hunks)
• package.json (1 hunks)

🧰 Additional context used

📓 Path-based instructions (1)

{.codex/**,.devcontainer/codex*,package*.json,npm/global.json}

📄 CodeRabbit inference engine (CLAUDE.md)

Use Conventional Commits format with release-triggering types (feat/fix/perf/revert/docs) for commits touching .codex/**, .devcontainer/codex*, package*.json, or npm/global.json

Files:

• package.json
• npm/global.json

🧠 Learnings (3)

📓 Common learnings

Learnt from: CR
Repo: keito4/config PR: 0
File: CLAUDE.md:0-0
Timestamp: 2025-12-01T03:45:17.253Z
Learning: Applies to .github/workflows/update-libraries.yml : Execute npm run update:libs on schedule and open pull requests when dependencies or Codex/Claude tooling changes in .github/workflows/update-libraries.yml

📚 Learning: 2025-12-01T03:45:17.253Z

Learnt from: CR
Repo: keito4/config PR: 0
File: CLAUDE.md:0-0
Timestamp: 2025-12-01T03:45:17.253Z
Learning: Generate GitHub releases automatically with semantic-release based on Conventional Commits

Applied to files:

• package.json

📚 Learning: 2025-12-01T03:45:17.253Z

Learnt from: CR
Repo: keito4/config PR: 0
File: CLAUDE.md:0-0
Timestamp: 2025-12-01T03:45:17.253Z
Learning: Applies to .github/workflows/update-libraries.yml : Execute npm run update:libs on schedule and open pull requests when dependencies or Codex/Claude tooling changes in .github/workflows/update-libraries.yml

Applied to files:

• npm/global.json

🔇 Additional comments (1)

npm/global.json (1)

4-27: Fix mcp-remote version: 0.1.37 does not exist on npm registry.

The version update for mcp-remote to 0.1.37 cannot be verified—npm registry shows latest is 0.1.31. Update to the actual latest version or clarify if a custom/pre-release build is intended. The @openai/codex (0.73.0) and npm (11.7.0) versions are confirmed as current. Verify that the commit message follows Conventional Commits format with a release-triggering type per coding guidelines for npm/global.json changes.

[coderabbitai]

⚠️ Potential issue | 🟡 Minor

ESLint patch bump to latest version confirmed.

Version 9.39.2 is the latest version, and this patch release fixes several bugs from the previous release. The update is backward compatible. Ensure the commit message follows Conventional Commits format with the appropriate type (likely fix: for a patch release).

🤖 Prompt for AI Agents

In package.json at line 29, the ESLint dependency was bumped to 9.39.2; finalize
this patch update by ensuring the lockfile is updated (run npm/yarn install or
npm ci as appropriate) and run the test/lint suite to confirm no regressions,
then commit the change using a Conventional Commit message indicating a patch
dependency fix (for example: "fix(deps): bump eslint to 9.39.2") so the repo
release tooling classifies it correctly.

[github-actions]

🎉 This PR is included in version 1.4.0 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀