All pull requests

Pull requests

• fix(auth): prevent current-directory Azure CLI execution

  triage-must-have
  #5185·mnriem opened Oct 29, 2026Collaborator·2 of 5 tasks·

  ·
  9

• fix: reject symlinked extension registry storage

  triage-must-have
  #5184·mnriem opened Oct 29, 2026Collaborator·3 of 5 tasks·

  ·
  13

• fix(workflows): require consent before loading custom steps

  triage-must-have
  #5182·mnriem opened Oct 29, 2026Collaborator·4 of 5 tasks·

  ·
  7

• feat(workflows): add opt-in strict shell execution

  triage-nice-to-have
  #5181·mnriem opened Oct 29, 2026Collaborator·3 of 5 tasks·

  ·
  6

• fix: reject symlinked preset registry paths

  triage-must-have
  #5180·mnriem opened Oct 29, 2026Collaborator·4 of 5 tasks·

  ·
  5

• fix: bound tar.gz metadata decompression

  triage-must-have
  #5179·mnriem opened Oct 29, 2026Collaborator·2 of 5 tasks·

  ·
  10

• fix: contain persisted feature paths and protect plan creation

  triage-must-have
  #5178·mnriem opened Oct 29, 2026Collaborator·3 of 5 tasks·

  ·
  10

• fix: reject symlinked integration state

  triage-must-have
  #5176·mnriem opened Oct 29, 2026Collaborator·3 of 5 tasks·

  ·
  12

• fix: isolate self-upgrade installer lookup from project paths

  triage-must-have
  #5175·mnriem opened Oct 29, 2026Collaborator·2 of 5 tasks·

  ·
  22

• fix: prevent current-directory Docker executable discovery

  triage-must-have
  #5173·mnriem opened Oct 29, 2026Collaborator·3 of 5 tasks·

  ·
  20

• feat(workflows): parse workflow expressions with a Lark LALR grammar

  author-awaitingtriage-nice-to-have
  #5171·markuswondrak opened Oct 29, 2026Contributor·3 of 5 tasks·

  ·
  1

  5

• fix(cline): keep .md extension on speckit.* file names in command bodies

  author-awaitingtriage-must-have
  #5168·kevin9327 opened Oct 28, 2026Contributor·

  ·
  1

  7

• docs(extensions): name the runtime local override file

  author-awaitingtriage-must-have
  #5159·gavenren opened Oct 28, 2026Contributor·1 task done·

  ·
  1

  8

• docs(git): clarify auto-commit default fallback

  author-awaitingtriage-nice-to-have
  #5158·gavenren opened Oct 28, 2026Contributor·1 task done·

  ·
  1

  16

• fix(workflows): give URL-installed workflow.yml project file mode

  author-awaitingtriage-can-wait
  #5150·Octopus-98 opened Oct 28, 2026·1 of 5 tasks·

  ·
  1

  4

• fix(cli): don't self-upgrade uv tool installs on Windows

  author-awaitingtriage-must-have
  #5149·jaeminbird opened Oct 28, 2026·3 of 5 tasks·

  ·
  1

  14

• fix(extensions): reject aliases that resolve to installed skill names

  author-awaitingtriage-must-have
  #5134·chelsealong opened Oct 26, 2026Contributor·6 tasks done·

  ·
  1

  1

• fix: preserve option-like feature descriptions

  triage-can-wait
  #5124·WOLIKIMCHENG opened Oct 26, 2026Contributor·1 task done·

  ·
  1

• fix(workflows): append catalog sources after implicit priorities

  author-awaitingtriage-must-have
  #5123·JRHU0048 opened Oct 26, 2026·4 of 5 tasks·

  ·
  1

  3

• fix(extensions): preserve skills mode on update

  author-awaitingtriage-must-have
  #5120·mikamikasuki opened Oct 25, 2026·

  ·
  1

  7

• feat(copilot): add --no-model-invocation integration option

  author-awaitingtriage-nice-to-have
  #5118·echarrod opened Oct 25, 2026Contributor·1 of 2 tasks·

  ·
  8

• feat(codex): add --no-model-invocation integration option

  author-awaitingtriage-nice-to-have
  #5117·echarrod opened Oct 25, 2026Contributor·1 of 2 tasks·

  ·
  9

• feat(droid): add --no-model-invocation integration option

  author-awaitingtriage-nice-to-have
  #5116·echarrod opened Oct 25, 2026Contributor·1 of 2 tasks·

  ·
  7

• fix(presets): reconcile command files after priority changes

  author-awaitingtriage-must-have
  #5113·mikamikasuki opened Oct 25, 2026·1 task done·

  ·
  1

  5

• fix(5076): escape Rich markup in workflow output

  author-awaitingtriage-must-have
  #5112·mikamikasuki opened Oct 25, 2026·

  ·
  1

  3