This release adds 2 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+1 more
Affected surfaces
Summary
AI summaryUpdates chore, auth, and extensions across a mixed release.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Low |
Adds assess idea assessment pipeline extension Adds assess idea assessment pipeline extension Source: llm_adapter@2026-07-17 Confidence: high |
— |
| Feature | Low |
Adds OKF Knowledge Bundle Generator extension to community catalog Adds OKF Knowledge Bundle Generator extension to community catalog Source: llm_adapter@2026-07-17 Confidence: high |
— |
| Dependency | Low |
Bumps github/codeql-action/init from 4.36.2 to 4.37.1 Bumps github/codeql-action/init from 4.36.2 to 4.37.1 Source: llm_adapter@2026-07-17 Confidence: high |
— |
| Bugfix | Medium |
Fixes clean BundlerError surface for malformed bundle download URL Fixes clean BundlerError surface for malformed bundle download URL Source: llm_adapter@2026-07-17 Confidence: high |
— |
| Bugfix | Medium |
Fixes Azure DevOps az‑CLI token acquisition returning None on undecodable output Fixes Azure DevOps az‑CLI token acquisition returning None on undecodable output Source: llm_adapter@2026-07-17 Confidence: low |
— |
| Bugfix | Medium |
Raises PresetValidationError instead of raw ValueError for malformed catalog URL Raises PresetValidationError instead of raw ValueError for malformed catalog URL Source: llm_adapter@2026-07-17 Confidence: low |
— |
Full changelog
Install
uv tool install specify-cli --from git+https://github.com/github/[email protected]
specify init my-project
What's Changed
- chore: bump version to 0.13.0
- fix(auth): Azure DevOps az-CLI token acquisition returns None on undecodable output (#3527)
- feat(extensions): add assess idea assessment pipeline extension (#3568)
- fix(bundle): surface a clean BundlerError on a malformed bundle download URL (#3586)
- Add OKF Knowledge Bundle Generator extension to community catalog (#3585)
- Update Autonomous Run Governance preset to v0.2.2 (#3584)
- docs: update extension guide PyPI upgrade guidance (#3578)
- fix(presets): raise PresetValidationError, not raw ValueError, on malformed catalog URL (#3576)
- chore(deps): bump github/codeql-action/init from 4.36.2 to 4.37.1 (#3571)
- docs: align README hero tagline and subtitle with docs/index.md (#3581)
- chore: release 0.12.18, begin 0.12.19.dev0 development (#3583)
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About spec-kit
All releases →Beta — feedback welcome: [email protected]