From 010f3e08aadd049c06e2279bd68c42f39f62dd34 Mon Sep 17 00:00:00 2001 From: Clay Good Date: Wed, 16 Sep 2026 19:28:05 -0500 Subject: [PATCH] chore(changeset): track #1835 security hardening and #1785 nix completions Co-Authored-By: Claude Opus 5 --- .changeset/harden-untrusted-repositories.md | 12 ++++++++++++ .changeset/nix-flake-shell-completions.md | 5 +++++ 2 files changed, 17 insertions(+) create mode 100644 .changeset/harden-untrusted-repositories.md create mode 100644 .changeset/nix-flake-shell-completions.md diff --git a/.changeset/harden-untrusted-repositories.md b/.changeset/harden-untrusted-repositories.md new file mode 100644 index 0000000000..0502cab261 --- /dev/null +++ b/.changeset/harden-untrusted-repositories.md @@ -0,0 +1,12 @@ +--- +'@fission-ai/openspec': patch +--- + +Harden the CLI against repositories you have cloned but not yet read ([#1835](https://github.com/Fission-AI/OpenSpec/pull/1835)). + +- A `config.yaml` value can no longer close the project context block and inject its own directives into the instructions an agent receives. +- A crafted delta or skill file no longer stalls `openspec update` or `openspec archive` with catastrophic regex backtracking. +- A repository's `.npmrc` can no longer point the update check at a cleartext or attacker-controlled registry; a rejected registry now disables the check instead of falling back. +- `openspec update` now notices a generated `SKILL.md` that was edited by hand and restores it, instead of reporting every tool as up to date. +- `DO_NOT_TRACK=true` and other common spellings of an opt-out now turn telemetry off, and nothing is sent until the first-run notice has been shown. +- Shell-completion installs quote directory paths safely, git probes run with bounded time and output, and dependencies are cleared of known advisories. diff --git a/.changeset/nix-flake-shell-completions.md b/.changeset/nix-flake-shell-completions.md new file mode 100644 index 0000000000..3b7ac59f69 --- /dev/null +++ b/.changeset/nix-flake-shell-completions.md @@ -0,0 +1,5 @@ +--- +'@fission-ai/openspec': patch +--- + +Install shell completions with the Nix flake package ([#1785](https://github.com/Fission-AI/OpenSpec/pull/1785)). The package now ships bash, zsh and fish completions in their standard `share/` locations, so Nix users get tab completion without running `openspec completion install` against their home directory.