spec-kit

v0.10.2 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 1mo Developer Productivity

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

This release patches 1 known CVE

Topics

ai copilot development engineering prd spec

+1 more

spec-driven

Summary

AI summary

Updates chore, extensions, and presets across a mixed release.

Changes in this release

Type	Severity	Summary	CVE
Security	High	Harden preset URL installs against unsafe redirects Harden preset URL installs against unsafe redirects Source: llm_adapter@2026-06-11 Confidence: high	—
Feature
Feature	Medium	Add category and effect as first-class fields in extension schema Add category and effect as first-class fields in extension schema Source: llm_adapter@2026-06-11 Confidence: high	—
Feature	Low	Add Research Harness extension to community catalog Add Research Harness extension to community catalog Source: llm_adapter@2026-06-11 Confidence: high	—
Feature	Low	Add Coding Standards Drift Control extension to community catalog Add Coding Standards Drift Control extension to community catalog Source: llm_adapter@2026-06-11 Confidence: high	—
Feature	Low	Add Spec Trace extension to community catalog Add Spec Trace extension to community catalog Source: llm_adapter@2026-06-11 Confidence: high	—
Feature	Low	Add Jira Integration (Sync Engine) extension to catalog Add Jira Integration (Sync Engine) extension to catalog Source: llm_adapter@2026-06-11 Confidence: high	—
Dependency	Low	Update multi-model-review extension to v0.1.1 Update multi-model-review extension to v0.1.1 Source: llm_adapter@2026-06-11 Confidence: high	—
Bugfix	Medium	Preserve argument-hint in extension Claude SKILL.md during processing Preserve argument-hint in extension Claude SKILL.md during processing Source: llm_adapter@2026-06-11 Confidence: high	—
Bugfix	Medium	Skip recovered files during refresh_managed overwrite check Skip recovered files during refresh_managed overwrite check Source: llm_adapter@2026-06-11 Confidence: high	—

Full changelog

Install

uv tool install specify-cli --from git+https://github.com/github/[email protected]
specify init my-project

What's Changed

chore: bump version to 0.10.2
Add Research Harness extension to community catalog (#2935)
Add Coding Standards Drift Control extension to community catalog (#2934)
Add Spec Trace extension to community catalog (#2527)
fix(extensions): preserve argument-hint in extension Claude SKILL.md (#2916)
fix(presets): harden preset URL installs against unsafe redirects (#2911)
fix: skip recovered files during refresh_managed overwrite check (#2918) (#2919)
Update multi-model-review extension to v0.1.1 (#2900)
feat: add category and effect as first-class fields in extension schema (#2899)
chore(catalog): add Jira Integration (Sync Engine) extension (#2895)
chore: release 0.10.1, begin 0.10.2.dev0 development (#2910)