chore(release): version packages

[openspec-release-bot]

This PR was opened by the Changesets release GitHub action. When you're ready to do a release, you can merge this and the packages will be published to npm automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to main, this PR will be updated.

Releases

@fission-ai/openspec@1.14.3

Patch Changes

• #2101 87a69a2 Thanks @clay-good! - ### Bug Fixes

  • A capability's spec.md may be a symlink to a file elsewhere in the project — list --specs, show, validate and archive no longer refuse openspec/specs/<capability>/spec.md when it links to the file the project keeps somewhere else, such as beside the product documentation it belongs to. A link that resolves outside the project is still refused.

• #2103 e33245d Thanks @surlymochan! - ### Bug Fixes

  • Installing OpenSpec no longer pulls in the unpatched braces package, so a consumer audit does not report GHSA-vfj7-8cjw-p6xm through this package. A generates brace pattern that nests deeply, or expands to more than 1024 paths, is now rejected with a clear message instead of crashing openspec status with a stack overflow or an out-of-memory error.

• #2104 276d015 Thanks @CRYPTONIKAV! - Keep glob artifact paths inside the change directory in the propose, ff-change and continue-change workflows

• #2108 5251f2e Thanks @clay-good! - Stop openspec validate --all hanging on a zero-width TTY. Some hosts hand the
  process a terminal that reports columns === 0 — a pty inherited from a
  pre-commit runner such as lefthook, or script -qec. ora computes how many
  lines to erase as ceil(width / columns), so zero columns makes that count
  Infinity and the clear loop never ends: the command burned a core and wrote
  hundreds of megabytes of cursor escapes without finishing. The spinner is now
  skipped when nothing can be drawn, and validate falls back to its plain output.
  OPEN_SPEC_INTERACTIVE=0 and CI now disable the spinner too, the same way
  --no-interactive already did.

• #2110 c9a8ade Thanks @clay-good! - Preview the built docs site with a first-party static server instead of serve.
  pnpm start in website/ now runs scripts/preview.mjs, a dependency-free
  server that resolves routes in a Next static export (it does not apply
  out/_redirects). This
  drops the serve dev dependency whose transitive tree kept publishing
  advisories (brace-expansion x3, fast-uri, compression) that had to be pinned by
  hand even though none of that code ever reached the published site.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

• Configuration used: Repository: Fission-AI/OpenSpec/.coderabbit.yaml
• Review profile: CHILL
• Plan: Advanced
• Run ID: 8837e6f8-2f46-48e2-a359-60f28517b62a

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[openspec-cloud]

No PR-relevant drift confirmed.

AI-generated · A citation proves the line exists, not that it makes the case — verify before acting.
Checked the 0 requirements selected for this PR at d906cec (256 total).
This is not a full-repository clean result; see the check for coverage and any broader findings.
View results · Click Refresh, then Scan again in the check. Or comment /openspec-cloud.