Skip to content

Bump the npm-dev-dependencies group across 1 directory with 5 updates#13

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-dev-dependencies-c4c08f947d
Open

Bump the npm-dev-dependencies group across 1 directory with 5 updates#13
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-dev-dependencies-c4c08f947d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 13, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the npm-dev-dependencies group with 5 updates in the / directory:

Package From To
@fission-ai/openspec 1.4.1 1.6.0
driver.js 1.4.0 1.6.0
typescript 6.0.3 7.0.2
vite 8.0.16 8.1.4
vitest 4.1.8 4.1.10

Updates @fission-ai/openspec from 1.4.1 to 1.6.0

Release notes

Sourced from @​fission-ai/openspec's releases.

v1.6.0 - OPSX Update, Tool Support

What's New in v1.6.0

This release adds a safer way to revise plans in place, expands tool support, and hardens validation, archiving, and store setup.

New

  • Update planning artifacts - Use /opsx:update to revise an existing change's plan and reconcile related artifacts without crossing into implementation work.
  • Oh My Pi support - Generate native OPSX commands and skills for Oh My Pi projects, with automatic tool detection and the expected .omp layout.
  • TRAE support - Generate .trae/commands/opsx-<id>.md commands for TRAE projects.

Improved

  • Generated skill permissions - Generated skills and Claude commands can pre-approve the OpenSpec CLI, avoiding repeated confirmation prompts while leaving other tools under normal permission controls.
  • Requirement handling - Validation now reads fenced examples, metadata, multi-line descriptions, nested deltas, and normative keywords more consistently across changes and main specs.

Fixed

  • Fresh stores - Newly created stores can be registered and used before empty changes, specs, or archive directories have been committed.
  • Archive safety - Stale MODIFIED requirements stop instead of silently deleting scenarios added by an earlier archive.
  • Resolution and task progress - validate, view, list, and archive checks now agree on change resolution and correctly handle nested specs and task files.
  • Archive failure signaling - Blocked human-mode archive operations now exit non-zero, so scripts and CI no longer interpret validation failures as success.

New Contributors

Full Changelog: Fission-AI/OpenSpec@v1.5.0...v1.6.0

v1.6.0-beta.1

Beta prerelease. Install with npm install -g @fission-ai/openspec@beta.

What's Changed

... (truncated)

Changelog

Sourced from @​fission-ai/openspec's changelog.

1.6.0

Minor Changes

  • #1090 3f0ca3f Thanks @​jjxyxsjr! - ### New Features

    • TRAE command adapter — Added command adapter for Trae IDE, enabling generation of .trae/commands/opsx-<id>.md files for custom slash commands

  • #1340 1552731 Thanks @​TabishB! - ### New Features

    • Oh My Pi support — Generate native OPSX commands and skills for Oh My Pi projects, including tool detection and the expected .omp directory layout.
    • Update planning artifacts in place — Use /opsx:update to revise an existing change's planning artifacts, reconcile related artifacts, and keep implementation work delegated to /opsx:apply.

    Bug Fixes

    • Fresh store registration — Register and use newly created stores before their empty changes, specs, or archive directories have been committed.
    • Safer requirement archiving — Stop stale MODIFIED requirements from silently deleting scenarios that were added by an earlier archive.

Patch Changes

  • #1300 a5bfeda Thanks @​clay-good! - ### Features

    • Auto-approve the OpenSpec CLI in generated skills and commands — every generated SKILL.md (all tools) and every Claude Code /opsx:* slash command now carries allowed-tools: Bash(openspec:*) in its frontmatter, so agents that honor the Agent Skills standard run openspec commands without prompting for approval on each call; tools that don't recognize the field ignore it. Scope is limited to the openspec CLI; because allowed-tools pre-approves rather than restricts, every other tool a skill or command uses stays available under your normal permission settings.

  • #1311 5956a8e Thanks @​danilopopeye! - ### Bug Fixes

    • archive exits non-zero when blocked in human mode — openspec archive <change> -y (and any non---json invocation) no longer returns exit code 0 when validation fails and nothing is archived. The three blocking paths in human mode — delta-spec validation failure, spec rebuild failure, and rebuilt-spec validation failure — now set process.exitCode = 1, matching the existing --json behavior. Previously the command printed "Validation failed" (or "Aborted. No files were changed.") and exited 0, letting scripts and CI believe the archive succeeded. Aligns archive with the same exit-code guarantee already approved for apply instructions (#1250).

  • #1280 a325305 Thanks @​clay-good! - ### Bug Fixes

    • validate resolves changes like status — openspec validate <change> (and --all/--changes and the interactive selector) now resolves a change by directory existence, matching status/instructions, instead of requiring proposal.md. A scaffolded or still-authoring change is validated rather than reported as Unknown item, and a resolved-but-invalid change now exits non-zero. Delta discovery also recurses the nested specs/<area>/<capability>/spec.md layout. (#1182)
    • Task progress reads nested/glob tasks.md — openspec view, list, and the archive incomplete-task gate now resolve task progress through the tracked-tasks artifact's generates glob (the same file-resolution status uses), so a change whose tasks live in nested tasks.md files is classified correctly and can no longer archive while unfinished. (#1202)
    • SHALL/MUST body-keyword hint applies to main specs — A main-spec requirement whose normative keyword sits only in the ### Requirement: header now receives the same targeted "move it to the body line" remediation as a change delta, emitted exactly once. (#1156)

  • #1281 9a0dfb5 Thanks @​clay-good! - ### Bug Fixes

    • Requirement reading fidelity — The requirement reader used by validate <change>, validate <spec>, and archive is now unified into one fence-, metadata-, and multi-line-aware extraction, closing the known divergences between the change-delta path and the main-spec path (the remaining ones are documented in the change's design doc):

      • A SHALL/MUST keyword that wraps onto a later body line is detected instead of dropped (#361).
      • Metadata lines (**ID**:, **Priority**:) before the description are skipped on the spec path, matching the change path (#418). A requirement written entirely as metadata (e.g. **Constraint**: The system MUST ...) keeps that line as its text instead of being emptied.
      • A fenced code block before the prose line no longer becomes the requirement text (#312).
      • A #### Scenario: inside a fenced example no longer counts as a real scenario in validate <change>, matching validate <spec>.
      • SHALL/MUST detection uses one whole-word predicate across all readers, and a requirement with no body text falls back to its header title on both paths.

      Displayed requirement text (e.g. in JSON output and delta descriptions) now reflects the full requirement body rather than only its first line. Archived spec content is unchanged — the archive rebuild reads raw ### Requirement: blocks, not the parsed text.

    • Surface non-canonical delta headers — validate <change> now emits an INFO note when an ## ADDED/## MODIFIED Requirements section contains a level-3 header that is not a canonical ### Requirement: header (one the delta reader silently skips, such as a stray ### Documentation Requirements divider). The note never changes the valid result, including under --strict (#498).

1.5.0

... (truncated)

Commits

Updates driver.js from 1.4.0 to 1.6.0

Release notes

Sourced from driver.js's releases.

1.6.0

Added

  • animationDuration config to control how long the highlight transition takes. (#104)
  • allowScroll config to lock body scroll while a tour is active.
  • onDoneClick hook, fired when the done button on the final step is clicked. (#500)
  • data property on a step for passing arbitrary data, accessible from hooks for custom per-step logic. (#539)

Changed

Fixed

  • Document event listener leak in onDriverClick that left handlers attached after the tour was destroyed. (#452)
  • Dropped the CSS :has() selector for broader browser compatibility. (#586)
  • Positioned highlighted elements and their children (e.g. dropdown menus) no longer get clipped. (#454, #563)
  • removeChild DOMException when re-rendering a popover whose wrapper was already detached from the DOM. (#572)
  • Close button on a single-element highlight() popover did nothing when clicked. It now closes the popover by default, respecting allowClose and any custom onCloseClick. (#444)

1.5.0

  • Add done-btn class to next button (closes #610)
  • Pass final state to onDestroyed hook (closes #553)
  • Keep tour open on arrow-left at step 1 (closes #564)
  • Remove button text-shadow ghost text (closes #605)
  • Fire onNextClick on overlay nextStep (closes #576)
  • Add getNextStep to the driver API (closes #420)
  • Remove unicode characters from buttons
Commits
  • 565757b 1.6.0
  • 98d2c52 Fix close button not working on highlight
  • 0dfcdac Fix positioned highlighted elements get clipped #454 #563
  • 2633c2f Add test harness for multi-driver usage feature
  • 39f3377 Fix broken build and wrong x link
  • 4d9de02 feat: add 'data' property to DriveStep for custom logic support
  • 4637157 Add changelog page and refine docs styling
  • e1b0039 Style footer buttons via class so custom buttons can opt out
  • abc923b Make docs depend on unversioned package
  • 4062ddf Fix document event listener leak in onDriverClick (#452)
  • Additional commits viewable in compare view

Updates typescript from 6.0.3 to 7.0.2

Commits
Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for typescript since your current version.


Updates vite from 8.0.16 to 8.1.4

Release notes

Sourced from vite's releases.

v8.1.4

Please refer to CHANGELOG.md for details.

v8.1.3

Please refer to CHANGELOG.md for details.

v8.1.2

Please refer to CHANGELOG.md for details.

v8.1.1

Please refer to CHANGELOG.md for details.

create-vite@8.1.0

Please refer to CHANGELOG.md for details.

plugin-legacy@8.1.0

Please refer to CHANGELOG.md for details.

v8.1.0

Please refer to CHANGELOG.md for details.

plugin-legacy@8.1.0-beta.0

Please refer to CHANGELOG.md for details.

v8.1.0-beta.0

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

8.1.4 (2026-07-09)

Features

Bug Fixes

  • build: add workaround for building on stackblitz (#22840) (575c32c)
  • build: keep import.meta.url in preload function as-is (#22839) (f1f90ed)
  • deps: update all non-major dependencies (#22865) (d4295a9)
  • deps: update rolldown-related dependencies (#22866) (7cf07e4)
  • html: avoid backtracking in import-only check (#22848) (b5868c0)
  • optimizer: avoid optimizer run for transform request before init (#22852) (72a5e21)
  • ssr: align named export function call stacktrace column with Node (#22829) (173a1b6)
  • strip pure CSS chunk imports when chunkImportMap is enabled (#22841) (648bd04)

Documentation

Miscellaneous Chores

  • deps: update dependency postcss-modules to v9 (#22867) (a9539d6)

Code Refactoring

Tests

Build System

8.1.3 (2026-07-02)

Bug Fixes

8.1.2 (2026-06-30)

Bug Fixes

  • deps: revert es-module-lexer to 2.1.0 (#22827) (0d3bd7c)
  • restore, "fix: resolve pnpm .modules.yaml from workspace root instead of cwd (#22757)" (#22825) (efb98cc)

... (truncated)

Commits

Updates vitest from 4.1.8 to 4.1.10

Release notes

Sourced from vitest's releases.

v4.1.10

   🐞 Bug Fixes

    View changes on GitHub

v4.1.9

🐞 Bug Fixes

View changes on GitHub
Commits
  • db616d2 chore: release v4.1.10 (#10718)
  • bae52b5 fix(vm): fix external module resolve error with deps optimizer query for enco...
  • a7a61e7 chore: release v4.1.9 (#10598)
  • 934b0f5 fix(pool): prevent test run hang on worker crash (#10543) [backport to v4] (#...
  • 7fb2965 fix(browser): wait for orchestrator readiness before resolving browser sessio...
  • a518019 fix: fix importOriginal with optimizer and query import [backport to v4] (#...
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the npm-dev-dependencies group across 1 directory with 5 updates
09b2dab 
Bumps the npm-dev-dependencies group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@fission-ai/openspec](https://github.com/Fission-AI/OpenSpec) | `1.4.1` | `1.6.0` |
| [driver.js](https://github.com/nilbuild/driver.js) | `1.4.0` | `1.6.0` |
| [typescript](https://github.com/microsoft/TypeScript) | `6.0.3` | `7.0.2` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.0.16` | `8.1.4` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.8` | `4.1.10` |



Updates `@fission-ai/openspec` from 1.4.1 to 1.6.0
- [Release notes](https://github.com/Fission-AI/OpenSpec/releases)
- [Changelog](https://github.com/Fission-AI/OpenSpec/blob/main/CHANGELOG.md)
- [Commits](Fission-AI/OpenSpec@v1.4.1...v1.6.0)

Updates `driver.js` from 1.4.0 to 1.6.0
- [Release notes](https://github.com/nilbuild/driver.js/releases)
- [Commits](nilbuild/driver.js@1.4.0...1.6.0)

Updates `typescript` from 6.0.3 to 7.0.2
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Commits](https://github.com/microsoft/TypeScript/commits)

Updates `vite` from 8.0.16 to 8.1.4
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.1.4/packages/vite)

Updates `vitest` from 4.1.8 to 4.1.10
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.10/packages/vitest)

---
updated-dependencies:
- dependency-name: "@fission-ai/openspec"
  dependency-version: 1.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dev-dependencies
- dependency-name: driver.js
  dependency-version: 1.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-dev-dependencies
- dependency-name: typescript
  dependency-version: 7.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm-dev-dependencies
- dependency-name: vite
  dependency-version: 8.1.4
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-dev-dependencies
- dependency-name: vitest
  dependency-version: 4.1.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-dev-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 13, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants