This release adds 2 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+1 more
Summary
AI summaryUpdates workflows, chore, and fix across a mixed release.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Low |
Aligns workflow CLI commands with extension command surface. Aligns workflow CLI commands with extension command surface. Source: llm_adapter@2026-07-14 Confidence: high |
— |
| Feature | Low |
Adds Multi-Repo Branch Sync extension to community catalog. Adds Multi-Repo Branch Sync extension to community catalog. Source: llm_adapter@2026-07-14 Confidence: high |
— |
| Dependency | Low |
Updates DocGuard — CDD Enforcement extension to version 0.32.0. Updates DocGuard — CDD Enforcement extension to version 0.32.0. Source: llm_adapter@2026-07-14 Confidence: high |
— |
| Dependency | Low |
Updates Autonomous Run Governance preset to version 0.1.4. Updates Autonomous Run Governance preset to version 0.1.4. Source: llm_adapter@2026-07-14 Confidence: high |
— |
| Bugfix | Medium |
Fixes ValueError raised on malformed catalog URL; now raises catalog error. Fixes ValueError raised on malformed catalog URL; now raises catalog error. Source: llm_adapter@2026-07-14 Confidence: high |
— |
| Bugfix | Medium |
Safely evaluates 'in'/'not in' when right operand is non-iterable. Safely evaluates 'in'/'not in' when right operand is non-iterable. Source: llm_adapter@2026-07-14 Confidence: high |
— |
| Bugfix | Medium |
Prevents environment‑variable configuration leakage across colliding extension IDs. Prevents environment‑variable configuration leakage across colliding extension IDs. Source: llm_adapter@2026-07-14 Confidence: high |
— |
| Bugfix | Medium |
Escapes control characters in goose recipe YAML renderer. Escapes control characters in goose recipe YAML renderer. Source: llm_adapter@2026-07-14 Confidence: high |
— |
| Bugfix | Low |
Adds trailing newline to init-options.json output. Adds trailing newline to init-options.json output. Source: llm_adapter@2026-07-14 Confidence: high |
— |
| Other | Low |
Bumps version to 0.12.15 and begins 0.12.15.dev0 development cycle. Bumps version to 0.12.15 and begins 0.12.15.dev0 development cycle. Source: llm_adapter@2026-07-14 Confidence: low |
— |
Full changelog
Install
uv tool install specify-cli --from git+https://github.com/github/[email protected]
specify init my-project
What's Changed
- chore: bump version to 0.12.15
- Update Autonomous Run Governance preset to v0.1.4 (#3511)
- fix(workflows): raise catalog error, not raw ValueError, on a malformed catalog URL (#3484)
- fix(workflows): evaluate 'in'/'not in' safely on a non-iterable right operand (#3447) (#3468)
- fix: add trailing newline to init-options.json output (#3509)
- feat(workflows): align workflow CLI with extension command surface (#3419)
- fix(extensions): stop env-var config leaking across prefix-colliding extension IDs (#3497)
- fix(integrations): escape control characters in goose recipe YAML renderer (#3384)
- [extension] Update DocGuard — CDD Enforcement extension to v0.32.0 (#3489)
- [extension] Add Multi-Repo Branch Sync extension to community catalog (#3411)
- chore: release 0.12.14, begin 0.12.15.dev0 development (#3506)
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About spec-kit
All releases →Beta — feedback welcome: [email protected]