chore(deps): update dependency @fission-ai/openspec to v1.14.3 #25

Open
renovate wants to merge 1 commit from renovate-fission-ai-openspec-1.x into main
Collaborator

This PR contains the following updates:

Package Change Age Confidence
@fission-ai/openspec 1.14.2 → 1.14.3 age confidence

Release Notes

Fission-AI/OpenSpec (@​fission-ai/openspec)

v1.14.3

Compare Source

Patch Changes
  • #​2101 87a69a2 Thanks @​clay-good! - ### Bug Fixes

    • Symlinked spec files no longer refused — list --specs, show, validate and archive no longer error out when openspec/specs/<capability>/spec.md is a symlink inside the project. Symlinked layouts are not officially supported. A link that resolves outside the project is still refused.
  • #​2103 e33245d Thanks @​surlymochan! - ### Bug Fixes

    • Installing OpenSpec no longer pulls in the unpatched braces package, so a consumer audit does not report GHSA-vfj7-8cjw-p6xm through this package. A generates brace pattern that nests deeply, or expands to more than 1024 paths, is now rejected with a clear message instead of crashing openspec status with a stack overflow or an out-of-memory error.
  • #​2104 276d015 Thanks @​CRYPTONIKAV! - Keep glob artifact paths inside the change directory in the propose, ff-change and continue-change workflows

  • #​2108 5251f2e Thanks @​clay-good! - Stop openspec validate --all hanging on a zero-width TTY. Some hosts hand the
    process a terminal that reports columns === 0 — a pty inherited from a
    pre-commit runner such as lefthook, or script -qec. ora computes how many
    lines to erase as ceil(width / columns), so zero columns makes that count
    Infinity and the clear loop never ends: the command burned a core and wrote
    hundreds of megabytes of cursor escapes without finishing. The spinner is now
    skipped when nothing can be drawn, and validate falls back to its plain output.
    OPEN_SPEC_INTERACTIVE=0 and CI now disable the spinner too, the same way
    --no-interactive already did.

  • #​2110 c9a8ade Thanks @​clay-good! - Preview the built docs site with a first-party static server instead of serve.
    pnpm start in website/ now runs scripts/preview.mjs, a dependency-free
    server that resolves routes in a Next static export (it does not apply
    out/_redirects). This
    drops the serve dev dependency whose transitive tree kept publishing
    advisories (brace-expansion x3, fast-uri, compression) that had to be pinned by
    hand even though none of that code ever reached the published site.


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [@fission-ai/openspec](https://github.com/Fission-AI/OpenSpec) | `1.14.2` → `1.14.3` | ![age](https://developer.mend.io/api/mc/badges/age/npm/@fission-ai%2fopenspec/1.14.3?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@fission-ai%2fopenspec/1.14.2/1.14.3?slim=true) | --- ### Release Notes <details> <summary>Fission-AI/OpenSpec (@&#8203;fission-ai/openspec)</summary> ### [`v1.14.3`](https://github.com/Fission-AI/OpenSpec/blob/HEAD/CHANGELOG.md#1143) [Compare Source](https://github.com/Fission-AI/OpenSpec/compare/@fission-ai/openspec@1.14.2...@fission-ai/openspec@1.14.3) ##### Patch Changes - [#&#8203;2101](https://github.com/Fission-AI/OpenSpec/pull/2101) [`87a69a2`](https://github.com/Fission-AI/OpenSpec/commit/87a69a2bf8eb3315a8c042d001520eb7766ab580) Thanks [@&#8203;clay-good](https://github.com/clay-good)! - ### Bug Fixes - **Symlinked spec files no longer refused** — `list --specs`, `show`, `validate` and `archive` no longer error out when `openspec/specs/<capability>/spec.md` is a symlink inside the project. Symlinked layouts are not officially supported. A link that resolves outside the project is still refused. - [#&#8203;2103](https://github.com/Fission-AI/OpenSpec/pull/2103) [`e33245d`](https://github.com/Fission-AI/OpenSpec/commit/e33245d22ba6f994596a1747baf17130fe04515d) Thanks [@&#8203;surlymochan](https://github.com/surlymochan)! - ### Bug Fixes - Installing OpenSpec no longer pulls in the unpatched `braces` package, so a consumer audit does not report GHSA-vfj7-8cjw-p6xm through this package. A `generates` brace pattern that nests deeply, or expands to more than 1024 paths, is now rejected with a clear message instead of crashing `openspec status` with a stack overflow or an out-of-memory error. - [#&#8203;2104](https://github.com/Fission-AI/OpenSpec/pull/2104) [`276d015`](https://github.com/Fission-AI/OpenSpec/commit/276d015090965791d8be3d02daf6bfd71de884c3) Thanks [@&#8203;CRYPTONIKAV](https://github.com/CRYPTONIKAV)! - Keep glob artifact paths inside the change directory in the propose, ff-change and continue-change workflows - [#&#8203;2108](https://github.com/Fission-AI/OpenSpec/pull/2108) [`5251f2e`](https://github.com/Fission-AI/OpenSpec/commit/5251f2ef5e9e83eac68dd6950091928c4324b127) Thanks [@&#8203;clay-good](https://github.com/clay-good)! - Stop `openspec validate --all` hanging on a zero-width TTY. Some hosts hand the process a terminal that reports `columns === 0` — a pty inherited from a pre-commit runner such as lefthook, or `script -qec`. ora computes how many lines to erase as `ceil(width / columns)`, so zero columns makes that count `Infinity` and the clear loop never ends: the command burned a core and wrote hundreds of megabytes of cursor escapes without finishing. The spinner is now skipped when nothing can be drawn, and validate falls back to its plain output. `OPEN_SPEC_INTERACTIVE=0` and `CI` now disable the spinner too, the same way `--no-interactive` already did. - [#&#8203;2110](https://github.com/Fission-AI/OpenSpec/pull/2110) [`c9a8ade`](https://github.com/Fission-AI/OpenSpec/commit/c9a8adef5021e9793ed9e104f65834fce0fb16cb) Thanks [@&#8203;clay-good](https://github.com/clay-good)! - Preview the built docs site with a first-party static server instead of `serve`. `pnpm start` in `website/` now runs `scripts/preview.mjs`, a dependency-free server that resolves routes in a Next static export (it does not apply `out/_redirects`). This drops the `serve` dev dependency whose transitive tree kept publishing advisories (brace-expansion x3, fast-uri, compression) that had to be pinned by hand even though none of that code ever reached the published site. </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xNTUuOSIsInVwZGF0ZWRJblZlciI6IjQ0LjE2MS4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->
renovate scheduled this pull request to auto merge when all checks succeed 2026-10-17 02:00:19 +00:00
This pull request can be merged automatically.
You are not authorized to merge this pull request.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin "renovate-fission-ai-openspec-1.x:renovate-fission-ai-openspec-1.x"
git switch "renovate-fission-ai-openspec-1.x"

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch "main"
git merge --no-ff "renovate-fission-ai-openspec-1.x"
git switch "renovate-fission-ai-openspec-1.x"
git rebase "main"
git switch "main"
git merge --ff-only "renovate-fission-ai-openspec-1.x"
git switch "renovate-fission-ai-openspec-1.x"
git rebase "main"
git switch "main"
git merge --no-ff "renovate-fission-ai-openspec-1.x"
git switch "main"
git merge --squash "renovate-fission-ai-openspec-1.x"
git switch "main"
git merge --ff-only "renovate-fission-ai-openspec-1.x"
git switch "main"
git merge "renovate-fission-ai-openspec-1.x"
git push origin "main"
Sign in to join this conversation.
No reviewers
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
foosinn/agentic-env!25
No description provided.