spec-kit

Install

uv tool install specify-cli --from git+https://github.com/github/spec-kit.git@v0.16.4
specify init my-project

What's Changed

• chore: bump version to 0.16.4
• Add SpecAssay preset to community catalog (#4123)
• Update Intake Authoring Governance preset to v0.3.1 (#4121)
• Update Superspec extension to v1.0.2 (#4120)
• fix(taskstoissues): widen task-ID regex to match IDs longer than 3 digits (#4101)
• Add Architecture Governance extension to community catalog (#4122)
• fix(workflows): validate non-string step types (#4111)
• Harden community submission workflow output allowlists (#4103)
• chore(deps): bump github/codeql-action (init + analyze) from 4.37.5 to 4.37.6 (#4114)
• Add SpecAssay Check extension to community catalog (#4113)
• fix(integrations): dispatch goose commands via goose run (#2416) (#3781)
• fix(powershell): stop Out-Null swallowing the AVAILABLE_DOCS status lines (#3891)
• fix: remove TOCTOU race in RunState.load (#3839)
• fix: decode the zipped manifest as UTF-8 before parsing (#3958)
• Update Agent Parity Governance preset to v0.4.2 (#4110)
• fix: log progress tracker refresh errors instead of silently swallowing (#3975)
• [extension] Add SpecJudge extension to community catalog (#4079)
• fix(bundler): read the authoritative default_integration field, not only its legacy aliases (#3880)
• fix(auth): treat exact host patterns literally (#4108)
• feat: add Mistral Vibe integration with Claude parity (#4075)
• [extension] Add spec-kit-atlas extension to community catalog (#4105)
• chore: release 0.16.3, begin 0.16.4.dev0 development (#4107)

Install

uv tool install specify-cli --from git+https://github.com/github/spec-kit.git@v0.16.3
specify init my-project

What's Changed

• chore: bump version to 0.16.3
• fix: narrow bare except Exception in VS Code settings merge (#3844)
• feat(presets): list presets in resolution/precedence order (#4086) (#4104)
• Fix: scaffold self-contained namespaced preset commands (#4076) (#4082)
• Update Cross-Platform Governance preset to v0.2.2 (#4080)
• fix(bundler): treat a blank active integration as indeterminate in FR-019 (#3886)
• Integrate Junie with dot-to-hyphen behavior and command formatting (#4073)
• Update A11Y Governance preset to v0.4.3 (#4074)
• Fix Alquimia argument hints after folded descriptions (#4063)
• fix: use bounded read for bundle download HTTP responses (#3764)
• Update iSAQB Architecture Governance preset to v0.2.2 (#4056)
• fix(claude): make argument-hint injection fold-aware for long descriptions (#4045)
• Add SpecKit Grill Me extension to community catalog (#4052)
• Update Architecture Governance preset to v0.5.2 (#4050)
• Remove auto-assign from catalog submission workflow (#4054)
• docs: clarify example spec guidance (#4048)
• Clarify custom checklist ownership and lifecycle (#4028)
• Update Archive Extension to v1.2.2 (#4053)
• Update Security Governance preset to v0.6.2 (#4040)
• docs: clarify maintainer applies submission label during triage (#4041)
• chore: release 0.16.2, begin 0.16.3.dev0 development (#4038)

Install

uv tool install specify-cli --from git+https://github.com/github/spec-kit.git@v0.16.2
specify init my-project

What's Changed

• chore: bump version to 0.16.2
• Add Command Code integration to spec-kit (#4019)
• fix(workflows): strip a resolved condition before the true/false check (#3883)
• fix(workflows): guard a non-string overlay edit 'operation' (#3881)
• fix: bound response read in integration catalog fetch (#3818)
• Fix bug-test Python dependency provisioning (#4030)
• fix(bundle): escape Rich markup in bundle CLI error and status output (#4023)
• fix(presets): skip an unreadable restore source in preset remove (#4020)
• Add Keel Discovery extension to community catalog (#4035)
• fix: show error details in preset catalog config read failure (#3840)
• Update Reconcile Extension to v1.1.0 (#4034)
• Add Model Routing Governance preset to community catalog (#4033)
• fix: use missing_ok=True in integration JSON removal (#3846)
• fix: use missing_ok=True in extension cache clear (#3845)
• fix(extensions): reject duplicate provides.templates/scripts names (#4016)
• feat(presets): resolve constitution templates at command time (#3984)
• [bug-fix] Fix preset-wrap-drops-argument-hint: inherit argument-hint from core template (#3996)
• docs: document installing specify-cli from a custom package index (#4032)
• feat(extensions): accept provides.templates and provides.scripts in manifest (#4012)
• fix(presets): treat an unreadable core template as missing (#3961)
• chore: release 0.16.1, begin 0.16.2.dev0 development (#4014)

Install

uv tool install specify-cli --from git+https://github.com/github/spec-kit.git@v0.16.1
specify init my-project

What's Changed

• chore: bump version to 0.16.1
• fix(integrations): wrap a non-UTF-8 catalog response (#4011)
• fix(events): skip an unreadable command template (#3956)
• fix(bundle): wrap malformed YAML in a local .zip bundle manifest (#4013)
• chore(deps): bump github/codeql-action/analyze from 4.37.3 to 4.37.5 (#4005)
• chore(deps): bump DavidAnson/markdownlint-cli2-action (#4006)
• fix(agent-context): recurse for nested plans in Python mtime fallback (#3757)
• fix: add utf-8 encoding to extension and preset registry file I/O (#3834)
• fix(init): escape user-supplied values in specify init output (#3787)
• fix: bound response read in integration catalog fetch (#3812)
• fix: use missing_ok for temp file cleanup to avoid masking errors (#3803)
• fix(workflows): handle an unreadable run state in workflow status (#3999)
• feat(init): scaffold managed .specify/.gitignore (#4000)
• fix(scripts): stop check-prerequisites text mode crashing on a legacy stdout code page (#3890)
• fix(presets): return None for an unreadable layer in resolve_content (#3959)
• fix(extensions): start fresh on a non-UTF-8 extension registry (#3998)
• Fix init-force-preset-desync: reapply presets/extensions on init --here --force (#3995)
• fix(skills): apply the line-anchored delimiter scan to hermes and kimi (#3739)
• fix(archives): wrap the bare EOFError a truncated tar.gz raises (#3938)
• test(integrations): guard multiline/control-char SKILL.md frontmatter escaping (#3392)
• fix(scripts): stop setup-tasks text mode crashing on a legacy code page (#3892)
• chore: release 0.16.0, begin 0.16.1.dev0 development (#3992)

Install

uv tool install specify-cli --from git+https://github.com/github/spec-kit.git@v0.16.0
specify init my-project

⚠️ Copilot default changed: specify init --integration copilot now installs skills (.github/skills/speckit-*/SKILL.md) by default instead of commands. Use --integration-options="--commands" for the previous behavior; existing command-layout projects are preserved on upgrade.

What's Changed

• chore: bump version to 0.16.0
• fix: keep long frontmatter values on a single line (#3989)
• fix: skip corrupted run state files in list_runs (#3817)
• fix: skip corrupted run state files in list_runs (#3814)
• Add July 2026 newsletter (#3987)
• fix(presets): start fresh on a non-UTF-8 preset registry (#3955)
• docs: clarify agent PR review prioritization (#3985)
• fix(events): preserve a non-UTF-8 config.toml on hook install/teardown (#3963)
• fix(extensions): treat an unreadable staged backup as a conflict (#3962)
• fix(manifests): reject non-string requires.speckit_version (#3980)
• fix(extensions): reject reinstall when a kept config cannot be read (#3960)
• [extension] Update Charter extension to v0.5.1 (#3983)
• fix(events): return None for an unparseable script command (#3957)
• feat(events): context injection for opencode and JSON-envelope agent hooks (#3934)
• Add TDD Extension to community catalog (#3982)
• Update Archive Extension to v1.1.0 (#3981)
• feat(copilot): default integration to skills (#3976)
• fix(events): ignore non-UTF-8 event overrides (#3897)
• fix: cap stdin read at 1 MiB to prevent DoS (#3857)
• fix(workflows): reject mismatched run state IDs (#3899)
• chore: release 0.15.2, begin 0.15.3.dev0 development (#3953)

Install

uv tool install specify-cli --from git+https://github.com/github/spec-kit.git@v0.15.2
specify init my-project

What's Changed

• chore: bump version to 0.15.2
• fix(presets): restore core skills instead of deleting them on preset remove (#3929)
• fix(manifests): reject non-string metadata instead of crashing on it (#3943)
• fix: narrow bare except Exception in invoke separator resolution (#3856)
• fix(workflows): keep the init step's documented ignore_agent_tools default on an explicit null (#3889)
• fix(kimi): preserve non-UTF-8 user skills (#3895)
• fix(presets): tolerate non-UTF-8 legacy commands (#3896)
• feat: allow overriding default init integration via SPECKIT_INTEGRATION_DEFAULT (#3952)
• Add adrkit extension to community catalog (#3947)
• feat(extensions): scaffold config templates on extension add/enable (#2000)
• fix(events): skip non-UTF-8 extension manifests (#3900)
• fix(workflows): fail a gate whose on_reject is not abort/skip/retry (#3888)
• fix(presets): validate required manifest mappings (#3898)
• fix: eliminate TOCTOU race in zip packaging (#3855)
• fix(workflows): fail a fan-in step whose output is not a mapping (#3887)
• fix(workflows): refetch non-UTF-8 catalog caches (#3901)
• fix(bundler): wrap local catalog decode failures (#3902)
• Add --extension flag to specify init for opting into extensions at init time (#3914)
• fix: bound response reads in extension catalog and download (#3775)
• fix(workflows): reject a retry gate whose verdict enum forbids the reset value (#3912)
• chore: release 0.15.1, begin 0.15.2.dev0 development (#3913)

Install

uv tool install specify-cli --from git+https://github.com/github/spec-kit.git@v0.15.1
specify init my-project

What's Changed

• chore: bump version to 0.15.1
• fix: escape Rich markup in workflow resolve output (#3879)
• chore(deps): bump actions/stale from 10.4.0 to 11.0.0 (#3877)
• chore(deps): bump actions/setup-python from 6.3.0 to 7.0.0 (#3876)
• feat: support tar archives for installs (#3874)
• fix: eliminate TOCTOU race in file unlink calls (#3819)
• fix(scripts): tolerate an unusable integration.json in the Python helper (#3785)
• fix(catalogs): validate the port in the shared catalog-URL validator, like its mirrors do (#3804)
• feat(presets): add opt-in constitution-sync preset (#3873)
• fix: reject non-object workflow caches (#3860)
• Harden extension URL download cache against symlink and junction races (#3869)
• fix: escape workflow step metadata (#3863)
• [bug-fix] Fix bundle-update-force-mislead: add refresh() to DefaultPrimitiveInstaller (#3452)
• fix: use chunked read for extension manifest hash (#3841)
• fix: preserve unreadable event config files (#3861)
• fix(scripts): use a .NET Framework-safe trim in the PowerShell init-dir resolver (#3872)
• Add ContextForge MCP extension to community catalog (#3487)
• fix: normalize non-UTF-8 integration manifests (#3862)
• feat: bind gate verdict to workflow input via verdict_input (#3725)
• docs: use absolute image URLs in README for PyPI rendering (#3867)
• chore: release 0.15.0, begin 0.15.1.dev0 development (#3871)

Install

uv tool install specify-cli --from git+https://github.com/github/spec-kit.git@v0.15.0
specify init my-project

What's Changed

• chore: bump version to 0.15.0
• Add yolo to community workflow catalog (#3864)
• fix(workflows): guard the shell step's timeout check against OverflowError (#3865)
• Add Intent Reconciliation extension to community catalog (#3858)
• fix(workflows): validate prompt step 'timeout' like the shell step (#3847)
• fix: add utf-8 encoding to registry file open calls (#3816)
• fix: eliminate TOCTOU race in file unlink calls (#3815)
• test(workflows): name the condition-rejection tests for the real boundary (#3808)
• fix: eliminate TOCTOU race in file unlink calls (#3811)
• fix(presets): escape user-supplied catalog name/URL in add/remove output (#3806)
• fix: add missing utf-8 encoding to registry file open calls (#3810)
• [bug-fix] Fix upgrade-overwrites-copilot-skills: pass force=True to extension skill re-registration after upgrade (#3853)
• fix(integrations): don't abort uninstall when the manifest can't be deleted (#3805)
• test(extensions): update stale manifest validation message assertion (#3859)
• fix(agents): coerce a non-string description in TOML command rendering (#3799)
• fix(workflows): make security requirements sync deterministic (#3832)
• fix(cli): render the literal [suffix] in --tag help and rejection message (#3800)
• fix(integrations): preserve non-UTF-8 VS Code settings (#3833)
• fix(bundler): treat an explicit-null manifest field as missing, not the text "None" (#3798)
• feat: first-class agent-native runtime hooks for integrations (#3704)
• fix(extensions): guard the required manifest sections so one bad extension cannot break extension list (#3797)
• fix(presets): escape installed preset metadata in Rich output (#3826)
• fix(workflows): dispatch prompt steps via the resolved executable (#3793)
• chore: release 0.14.4, begin 0.14.5.dev0 development (#3850)

Install

uv tool install specify-cli --from git+https://github.com/github/spec-kit.git@v0.14.4
specify init my-project

What's Changed

• chore: bump version to 0.14.4
• fix(bundler): degrade non-UTF-8 config reads into BundlerError (#3784)
• fix(workflows): escape the step-progress line so step ids render (and / stops failing the run) (#3783)
• Update Agent Parity Governance preset to v0.4.1 (#3830)
• fix(integrations): reject empty --commands-dir in generic raw_options (#3714)
• fix(presets): guard non-list/non-mapping provides.templates in PresetManifest (#3712)
• fix(auth): resolve az via shutil.which so azure-cli token works on Windows (#3709)
• fix(workflows): reject falsy non-mapping workflow-catalogs.yml top level (#3707)
• fix(integrations): render hyphenated /speckit- for Droid (always-slash agent) (#3688)
• [preset] Update A11Y Governance preset to v0.4.2 (#3828)
• [preset] Update Parallel Autonomous Run Governance to v0.2.4 (#3825)
• fix: correct Optional type annotation for _resolved_dir parameter (#3801)
• fix: add timeout to prompt step subprocess execution (#3768)
• fix: handle tags containing / in GitHub release asset URL resolution (#3767)
• fix(presets): escape catalog metadata in discovery output (#3773)
• Update Autonomous Run Governance preset to v0.3.3 (#3823)
• fix: use bounded read for integration catalog HTTP responses (#3763)
• docs: add Simplified Chinese translation of README (#3740)
• Update Intake Sequencing Governance preset to v0.2.2 (#3809)
• fix(workflows): reject non-string/non-boolean 'condition' in if/while/do-while steps (#3706)
• fix(bundle): escape catalog metadata in discovery output (#3774)
• fix(workflows,extensions): tolerate non-list catalog tags in search/info display (#3770)
• fix: correct nullable resolved directory annotation (#3771)
• fix(presets): tolerate non-string and non-list catalog fields in preset search/info (#3769)
• fix(integrations): escape catalog metadata in discovery output (#3772)
• Update Verify Review Ship extension to v0.4.2 (#3792)
• fix(integrations): preserve native skill invocation prefixes (#3663)
• Update Intake Review Governance preset to v0.2.0 (#3796)
• fix(constitution): stop propagating guidance into templates (#3737) (#3790)
• chore: release 0.14.3, begin 0.14.4.dev0 development (#3795)

Install

uv tool install specify-cli --from git+https://github.com/github/spec-kit.git@v0.14.3
specify init my-project

What's Changed

• chore: bump version to 0.14.3
• Update Intake Authoring Governance preset to v0.3.0 (#3788)
• fix(copilot): honor preset command template overrides (#3592)
• clarify: require real interrogatives, ban topic-label questions (#3745)
• feat: Add Alquimia AI integration (#2734)
• harden: secure extension and preset archive downloads (#3141)
• fix: correct Optional type annotation for context_note parameter (#3765)
• Update AGENTS.md (#2626)
• fix(extensions): tolerate non-string catalog name in display-name lookup (#3747)
• fix(presets): coerce non-string catalog tags before joining (#3743)
• fix: register extensions for the active integration only (#3459)
• fix(extensions): tolerate non-string tags in catalog search (#3746)
• fix(extensions): hyphenate command names in 'extension info' listing (#3744)
• fix(workflows): escape remaining untrusted fields in workflow info (#3731)
• fix(extensions): guard non-numeric catalog downloads in search/info rendering (#3710)
• fix(agent-context): apply default markers when config markers are blank (bash) (#3736)
• fix: escape Rich markup in catalog list output (#3738)
• fix(workflows): guard non-mapping 'workflow:' block in WorkflowDefinition (#3694)
• fix(bundler): reject unsupported schema_version in _merge_config (align readers) (#3711)
• Update Linear Weave extension to v1.0.1 (#3762)
• Add Intake Sequencing Governance preset to community catalog (#3761)
• Update Quality Gates (Enforcement Layer) extension to v0.3.3 (#3760)
• Update Verify Review Ship extension to v0.4.1 (#3759)
• fix(agent-context): discover nested plans in Python port mtime fallback (#3734)
• fix(extensions): make shipped scripts executable after install (#3723)
• docs(assess): clarify the pipeline works on an empty project (#3732)
• chore: release 0.14.2, begin 0.14.3.dev0 development (#3730)

Install

uv tool install specify-cli --from git+https://github.com/github/spec-kit.git@v0.14.2
specify init my-project

What's Changed

• chore: bump version to 0.14.2
• Update Intake Review Governance preset to v0.1.1 (#3729)
• Update Verify Review Ship extension to v0.3.0 (#3728)
• Update Architecture Guard extension to v1.13.1 (#3724)
• docs(upgrade): Claude Code files live in .claude/skills, not .claude/commands (#3708)
• fix(kilocode): install commands under .kilo/commands (#3672)
• fix(auth): normalize whitespace in auth-config env-var/id references at store time (#3691)
• fix(workflows): guard non-mapping 'inputs:' block in engine._resolve_inputs (#3696)
• Update Intake Authoring Governance preset to v0.2.0 (#3721)
• docs: clarify shell-step interpolation safety (#3719)
• [extension] Add Blueprint Index — Living Architecture Map extension to community catalog (#3718)
• fix(github-http): return None on malformed host in resolve_github_release_asset_api_url (#3715)
• fix(integrations): declare PiIntegration multi_install_safe (#3652)
• harden: remove shell parameter from run_command() (#3716)
• chore(deps): bump github/codeql-action/init from 4.37.1 to 4.37.3 (#3699)
• fix: auto-correct conflicting feature prefixes (#1829)
• chore(deps): bump actions/checkout from 6.0.3 to 7.0.1 (#3703)
• chore(deps): bump DavidAnson/markdownlint-cli2-action (#3702)
• chore(deps): bump actions/setup-node from 6.4.0 to 7.0.0 (#3701)
• chore(deps): bump astral-sh/setup-uv from 8.3.2 to 9.0.0 (#3700)
• chore: release 0.14.1, begin 0.14.2.dev0 development (#3698)

Install

uv tool install specify-cli --from git+https://github.com/github/spec-kit.git@v0.14.1
specify init my-project

What's Changed

• chore: bump version to 0.14.1
• Update Agent Parity Governance preset to v0.4.0 (#3697)
• fix(bundler): InstallResult.changed counts uninstalled as a change (#3692)
• [preset] Update Cross-Platform Governance preset to v0.2.1 (#3695)
• Update A11Y Governance preset to v0.4.1 (#3693)
• fix(workflows): escape step-graph brackets in workflow info so the type shows (#3690)
• fix(workflows): filter parser rejects trailing tokens (fullmatch, not match) (#3689)
• Update iSAQB Architecture Governance preset to v0.2.1 (#3687)
• fix(extensions): parse SKILL.md on the --- delimiter line during removal (#3634)
• fix(cli): guard lazy .hostname ValueError in extension/preset add --from (#3651)
• Update Architecture Governance preset to v0.5.1 (#3686)
• fix(bundler): reject a top-level non-mapping bundle-catalogs.yml in _merge_config (#3659)
• Update Security Governance preset to v0.6.1 (#3685)
• fix(integrations): declare OmpIntegration multi_install_safe (#3650)
• feat(git-extension): add configurable Conventional Commit support (#3390) (#3413)
• fix(extensions): hyphenate command names in the Forge post-install listing (#3669)
• fix(bundler): reject falsy non-mapping requires/provides in CatalogEntry.from_dict (#3667)
• fix(bundler): reject falsy non-list bundles/contributed_components in records (#3666)
• Update Intake Authoring Governance preset to v0.1.1 (#3678)
• docs(extensions): clarify agent-context README and add config examples (#3389)
• chore: release 0.14.0, begin 0.14.1.dev0 development (#3677)

Install

uv tool install specify-cli --from git+https://github.com/github/spec-kit.git@v0.14.0
specify init my-project

What's Changed

• chore: bump version to 0.14.0
• docs: add spec-kit-copilot to community friends (#3675)
• fix(integrations): recompute invoke_separator from retained parsed_options (#3664)
• fix(workflows): preserve intra-overlay order for multiple insert_after edits (#3662)
• fix(bundler): reject falsy non-mapping requires/provides in manifest from_dict (#3661)
• fix(bundler): dump_yaml writes literal UTF-8 (allow_unicode=True) (#3660)
• fix(integrations): declare kiro-cli multi-install safe (#3477)
• fix(git-extension): trim trailing whitespace before stripping commit-message quotes (#3673)
• fix(bundler): order bundle members by canonical POSIX arcname (reproducible builds) (#3658)
• fix(integrations): Cline overrides post_process_command_content (correct hook name) (#3657)
• docs(workflows): gate step docstring lists the 'retry' on_reject behaviour (#3656)
• fix: harden bounded reads and redirect validation (#3671)
• fix(packaging): bundle scripts/python into the wheel core_pack (#3665) (#3670)
• fix: bundle scripts/python in wheel so --script py works (#3665) (#3668)
• docs(workflows): init step docstring lists the 'py' script type (#3655)
• fix(integrations): declare LingmaIntegration multi_install_safe (#3654)
• fix: guard constitution command against feature execution (#3646)
• Fix duplicate step numbering in specify command (#3647)
• docs(scripts): document the 'py' script type and sh/ps migration plan (#3284) (#3653)
• harden: bound HTTP reads and enforce strict redirects (#3140)
• chore: release 0.13.4, begin 0.13.5.dev0 development (#3649)

Install

uv tool install specify-cli --from git+https://github.com/github/spec-kit.git@v0.13.4
specify init my-project

What's Changed

• chore: bump version to 0.13.4
• docs(concepts): document the spec-of-specs feature breakdown approach (#3648)
• fix(scripts): git-ext PowerShell emits the '# To persist' SPECIFY_FEATURE hint (parity) (#3632)
• fix(integrations): validate cached catalog shape before returning it (#3627)
• fix(bundler): reject non-list 'catalogs' in bundle-catalogs.yml with a clean error (#3623)
• fix(bundler): guard lazy .hostname ValueError in catalog add_source (#3644)
• Add Intake Authoring Governance preset to community catalog (#3643)
• feat: add Factory Droid CLI integration (#822) (#3587)
• docs(installation): document the 'py' (Python) script type (#3640)
• fix(init): show hyphenated /speckit- in Next Steps for Forge projects (#3642)
• fix(extensions): render hyphenated hook invocations for Forge projects (#3641)
• fix(workflows): workflow add detects local YAML files case-insensitively (#3633)
• fix(workflows): list-literal expression ignores trailing/empty commas (#3631)
• fix(workflows): StepRegistry.add tolerates a corrupted non-dict existing entry (#3630)
• fix(bundler): reject non-mapping 'integration' in a bundle manifest (#3629)
• fix(workflows): command/prompt steps fail cleanly on a non-string integration (#3626)
• docs(core): document the 'py' (Python) --script type in the init option table (#3625)
• fix(workflows): gate prompt uses isdecimal() so a superscript digit doesn't crash (#3624)
• fix(integrations): Cline dispatches hyphenated /speckit- invocations (#3622)
• docs(upgrade): document integration upgrade / extension update as the project-files upgrade path (#3326)
• chore: release 0.13.3, begin 0.13.4.dev0 development (#3645)

Install

uv tool install specify-cli --from git+https://github.com/github/spec-kit.git@v0.13.3
specify init my-project

What's Changed

• chore: bump version to 0.13.3
• fix(integrations): escape Rich markup in --integration-options error messages (#3458)
• docs: document _SPECKIT_COMMAND token for portable cross-command references (#3503)
• [preset] Add Parallel Autonomous Run Governance preset to community catalog (#3614)
• docs(workflows): fix stale FanOutStep docstring claiming sequential-only execution (#3639)
• [bundle] Add SicarioSpec Security & Governance Bundle to community catalog (#3636)
• [preset] Update Autonomous Run Governance preset to v0.3.2 (#3615)
• fix(workflows): validate every redirect hop when fetching workflow/step catalogs (#3637)
• Add pipeline workflow to community catalog (#3338)
• [extension] Add Linear Weave extension to community catalog (#3609)
• docs: clarify hook priority validation semantics (#3594)
• fix(workflows): reject a non-string 'integration'/'model' in command & prompt steps (#3597)
• ci: add dependency audit workflow (#3138)
• Add Intake Review Governance preset to community catalog (#3613)
• fix(workflows): reject non-list input 'enum' instead of crashing (#3601)
• chore: release 0.13.2, begin 0.13.3.dev0 development (#3617)

Install

uv tool install specify-cli --from git+https://github.com/github/spec-kit.git@v0.13.2
specify init my-project

What's Changed

• chore: bump version to 0.13.2
• fix(workflows): reject a non-string 'command' in command-step (#3596)
• fix(workflows): fail gate step loudly on a malformed 'options' (#3595)
• fix(extensions): re-validate catalog URL after redirects (HTTPS parity/security) (#3524)
• Add community bundle submission automation (#3553)
• fix(presets): re-validate catalog URL after redirects (HTTPS parity/security) (#3523)
• feat(scripts): port create-new-feature, setup-plan and setup-tasks to Python (#3386)
• fix(agents): parse frontmatter on the --- delimiter line, not any --- substring (#3590)
• [bug-fix] Fix reinstall-overwrites-kept-config: preserve config on plain reinstall after --keep-config (#3449)
• feat: update Bob integration to skills-based layout for Bob 2.0 (#3415)
• Update OKF Knowledge Bundle Generator to v0.3.0 (#3608)
• Add Test Coverage Drift Control extension to community catalog (#3607)
• chore: align ruff lint scope (#3139)
• feat(workflows): WorkflowResolver standalone (PR 1) (#3557)
• fix(extensions,presets): surface clean error on malformed download URL (#3577)
• chore: release 0.13.1, begin 0.13.2.dev0 development (#3610)

Install

uv tool install specify-cli --from git+https://github.com/github/spec-kit.git@v0.13.1
specify init my-project

What's Changed

• chore: bump version to 0.13.1
• fix(integrations): catch OverflowError on a priority: .inf in add/remove (#3589)
• fix(workflows): reject bool / .inf catalog priority in workflow & step catalog loaders (#3526)
• fix(catalogs): 'priority: .inf' yields a clean validation error instead of crashing (#3525)
• docs(integrations): document the 'integration list --catalog' flag (#3530)
• fix(workflows): fail fan-in loudly on a non-string wait_for entry (#3579)
• fix(workflows): fail fan-out loudly on a truthy non-mapping step template (#3537)
• fix(workflows): reject a non-string prompt in prompt-step validate() (#3582)
• fix(workflows): route 'workflow status --json' errors to stderr (#3520)
• fix(integrations): Forge dispatches hyphenated /speckit- invocations (#3529)
• chore: release 0.13.0, begin 0.13.1.dev0 development (#3588)

Install

uv tool install specify-cli --from git+https://github.com/github/spec-kit.git@v0.13.0
specify init my-project

What's Changed

• chore: bump version to 0.13.0
• fix(auth): Azure DevOps az-CLI token acquisition returns None on undecodable output (#3527)
• feat(extensions): add assess idea assessment pipeline extension (#3568)
• fix(bundle): surface a clean BundlerError on a malformed bundle download URL (#3586)
• Add OKF Knowledge Bundle Generator extension to community catalog (#3585)
• Update Autonomous Run Governance preset to v0.2.2 (#3584)
• docs: update extension guide PyPI upgrade guidance (#3578)
• fix(presets): raise PresetValidationError, not raw ValueError, on malformed catalog URL (#3576)
• chore(deps): bump github/codeql-action/init from 4.36.2 to 4.37.1 (#3571)
• docs: align README hero tagline and subtitle with docs/index.md (#3581)
• chore: release 0.12.18, begin 0.12.19.dev0 development (#3583)

Install

uv tool install specify-cli --from git+https://github.com/github/spec-kit.git@v0.12.18
specify init my-project

What's Changed

• chore: bump version to 0.12.18
• chore(deps): bump actions/setup-dotnet from 5.4.0 to 6.0.0 (#3574)
• chore(deps): bump actions/stale from 10.3.0 to 10.4.0 (#3572)
• chore(deps): bump actions/setup-node from 6.4.0 to 7.0.0 (#3570)
• docs: weave harness/SDLC framing into landing page (#3567)
• docs: reframe SDD positioning, modernize install, and de-duplicate walkthroughs (#3565)
• docs: document extensions.yml hook configuration (#3563)
• docs: refresh landing page ecosystem stats (#3561)
• [extension] Add Dotdog extension to community catalog (#3558)
• Update DocGuard — CDD Enforcement to v0.33.0 (#3559)
• chore: release 0.12.17, begin 0.12.18.dev0 development (#3560)

Install

uv tool install specify-cli --from git+https://github.com/github/spec-kit.git@v0.12.17
specify init my-project

What's Changed

• chore: bump version to 0.12.17
• fix(extensions): resolve __SPECKIT_COMMAND tokens in auto-registered skills (#3544)
• fix(workflows): fail if/switch steps on non-list branch instead of crashing (#3515)
• feat(integrations): add Grok Build skills-based integration (#3535)
• fix(extensions/git): reject negative -Number in create-new-feature-branch.ps1 (#3538)
• test: cover preset constitution seeding through init CLI (#3297)
• fix(integration): preserve ai_skills on use for skills-mode Copilot (#3550) (#3551)
• [extension] Add Figma Starter extension to community catalog (#3547)
• [extension] Add Spec-Kit BDD extension to community catalog (#3548)
• [extension] Update Quality Gates (Enforcement Layer) extension to v0.3.2 (#3542)
• chore: release 0.12.16, begin 0.12.17.dev0 development (#3549)