From d4ba927518bf571af34b2029966bf5f6d52009ba Mon Sep 17 00:00:00 2001 From: "Harol A. Reina H." Date: Sun, 20 Sep 2026 09:05:18 -0500 Subject: [PATCH] ci(openspec): pin the OpenSpec CLI to 1.13.1 (verbara-meta/ADR-0022) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Pilot repo for the ADR-0022 rollout: root of the chain, smallest spec tree. The pin moves because a remedy this workspace prescribes does not run. verbara-meta/ADR-0019 carried `retire_capabilities: true` into every repo's openspec/config.yaml; it aborts on any spec whose scenario bullets wrap onto a second line, which is 34 of the ecosystem's 51 living specs, and 1.13.0 is the first release where it works. 1.13.1 additionally stops config.yaml's `context`/`operations.*.guidance` being printed raw into the agent instruction envelope, closes ReDoS in update/archive, and stops a repo .npmrc redirecting the CLI's update check. This repo's tree is green under both pins — `validate --all --strict` reports 13 passed, 0 failed at 1.8.0 and at 1.13.1 alike — so CI is the acceptance test and the revert is this one line. decision_ref: verbara-meta/ADR-0022 --- .github/workflows/ci.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 5ad4747a..47145501 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -422,4 +422,4 @@ jobs: steps: - uses: actions/checkout@v7.0.1 - name: Validate specs and changes (strict) - run: npx -y @fission-ai/openspec@1.8.0 validate --all --strict --no-interactive + run: npx -y @fission-ai/openspec@1.13.1 validate --all --strict --no-interactive