fission-ai__openspec

mirror of https://github.com/Fission-AI/OpenSpec.git synced 2026-09-14 20:16:53 +08:00

Files

T

History

Clay Good e4e112d94f chore(deps): declare pnpm overrides only in pnpm-workspace.yaml (#1816 )

The security overrides were declared twice: in pnpm-workspace.yaml, with
the advisory comments explaining each pin, and again under
package.json's pnpm.overrides. The copies are not additive — pnpm 10
uses package.json's block instead of the workspace list when both are
present — and Dependabot rewrites plain-name entries in package.json
whenever it bumps the same package. So a routine bump silently
displaces the pins that patch advisories, and fails the equality test
that guards them (#1812).

Keeps one declaration, in the file that carries the reasoning, and
asserts the mirror stays gone.

Co-authored-by: Claude Opus 5 <noreply@anthropic.com>

2026-09-09 17:47:22 +00:00

cli-e2e

feat(validate): add findings-only bulk reports (#1713 )

2026-09-02 21:07:46 +00:00

commands

fix(guidance): teach the spec-inventory verb to generated guidance (#1700 )

2026-09-09 16:25:02 +00:00

core

fix(archive): preserve blank lines inside code fences (#1798 )

2026-09-09 17:03:39 +00:00

fixtures/tmp-init/openspec

feat: implement Phase 1 E2E testing with cross-platform CI matrix (#80 )