v0.15.1
Spec Kit - 0.15.1
Added 3
- support tar archives for installs
- add opt-in constitution-sync preset
- bind gate verdict to workflow input via verdict_input
Fixed 11
- escape Rich markup in workflow resolve output
- eliminate TOCTOU race in file unlink calls
- tolerate an unusable integration.json in the Python helper
- validate the port in the shared catalog-URL validator, like its mirrors do
- reject non-object workflow caches
- harden extension URL download cache against symlink and junction races
- escape workflow step metadata
- use chunked read for extension manifest hash
- preserve unreadable event config files
- use a .NET Framework-safe trim in the PowerShell init-dir resolver
- normalize non-UTF-8 integration manifests
Install
uv tool install specify-cli --from git+https://github.com/github/spec-kit.git@v0.15.1
specify init my-project
What's Changed
- chore: bump version to 0.15.1
- fix: escape Rich markup in
workflow resolveoutput (#3879) - chore(deps): bump actions/stale from 10.4.0 to 11.0.0 (#3877)
- chore(deps): bump actions/setup-python from 6.3.0 to 7.0.0 (#3876)
- feat: support tar archives for installs (#3874)
- fix: eliminate TOCTOU race in file unlink calls (#3819)
- fix(scripts): tolerate an unusable integration.json in the Python helper (#3785)
- fix(catalogs): validate the port in the shared catalog-URL validator, like its mirrors do (#3804)
- feat(presets): add opt-in constitution-sync preset (#3873)
- fix: reject non-object workflow caches (#3860)
- Harden extension URL download cache against symlink and junction races (#3869)
- fix: escape workflow step metadata (#3863)
- [bug-fix] Fix bundle-update-force-mislead: add refresh() to DefaultPrimitiveInstaller (#3452)
- fix: use chunked read for extension manifest hash (#3841)
- fix: preserve unreadable event config files (#3861)
- fix(scripts): use a .NET Framework-safe trim in the PowerShell init-dir resolver (#3872)
- Add ContextForge MCP extension to community catalog (#3487)
- fix: normalize non-UTF-8 integration manifests (#3862)
- feat: bind gate verdict to workflow input via verdict_input (#3725)
- docs: use absolute image URLs in README for PyPI rendering (#3867)
- chore: release 0.15.0, begin 0.15.1.dev0 development (#3871)