How to handle non-published thesis work from previous co-workers in a publication?
Even if not "published" in some sense, prior work can/should/must be cited. E.g., cited literally as "... Ph.D. thesis 20xx, University of X, (unpublished)."

Unless they literally help you significantly change what they'd already done, they should not be authors on your work.