Quratulain-bilalandGitHub f71cfafa71 fix: bound response read in integration catalog fetch (#3812) ...

* fix: bound response read in integration catalog fetch

* fix: address review - update FakeResponse for bounded reads and add regression test

- Update FakeResponse.read() to accept size parameter for bounded reads
- Add test_fetch_rejects_oversized_catalog_response regression test
- Verifies _fetch_single_catalog uses MAX_JSON_METADATA_BYTES

Fixes #3812

* fix: resolve lint errors and update FakeResponse to support bounded reads

- Remove duplicate imports of MAX_JSON_METADATA_BYTES and read_response_limited
- Update FakeResponse.read() to accept size argument for read_response_limited
- Add offset tracking for proper bounded read behavior

Refs: #3812

2026-08-06 10:21:02 -05:00

..

contract

feat(presets): add opt-in constitution-sync preset (#3873)

2026-07-30 13:36:13 -05:00

extensions

fix: use missing_ok for temp file cleanup to avoid masking errors (#3803)

2026-08-06 09:58:19 -05:00

hooks

chore: add pre-commit config and fix trailing whitespace/end-of-file (#3430)

2026-07-10 11:47:36 -05:00

integration

feat: allow overriding default init integration via SPECKIT_INTEGRATION_DEFAULT (#3952)

2026-08-03 12:20:49 -05:00

integrations

fix: bound response read in integration catalog fetch (#3812)

2026-08-06 10:21:02 -05:00

unit

fix: eliminate TOCTOU race in zip packaging (#3855)

2026-07-31 12:05:47 -05:00

workflows

fix: escape Rich markup in workflow resolve output (#3879)

2026-07-31 08:36:44 -05:00

__init__.py

…

auth_helpers.py

…

bundler_helpers.py

feat: add specify bundle command (#3070)

2026-06-19 17:07:20 -05:00

conftest.py

feat(cli): honor SPECIFY_INIT_DIR in the specify CLI project resolver (#3186)

2026-07-01 15:55:18 -05:00

http_helpers.py

harden: bound HTTP reads and enforce strict redirects (#3140)

2026-07-22 11:08:32 -05:00

parity_helpers.py

feat(scripts): port create-new-feature, setup-plan and setup-tasks to Python (#3386)

2026-07-21 11:40:15 -05:00

self_upgrade_helpers.py

harden: bound HTTP reads and enforce strict redirects (#3140)

2026-07-22 11:08:32 -05:00

test_agent_config_consistency.py

fix: correct nullable resolved directory annotation (#3771)

2026-07-28 11:23:02 -05:00

test_authentication.py

fix(auth): resolve az via shutil.which so azure-cli token works on Windows (#3709)

2026-07-28 17:21:42 -05:00

test_branch_numbering.py

feat: make git extension opt-in and remove --no-git at v0.10.0 (#2873)

2026-06-09 06:13:07 -05:00

test_check_prerequisites_paths_only.py

fix: fall back to feature dir basename for empty CURRENT_BRANCH (#3026) (#3229)

2026-07-01 13:50:53 -05:00

test_check_prerequisites_python_parity.py

fix(scripts): stop check-prerequisites text mode crashing on a legacy stdout code page (#3890)

2026-08-06 08:17:36 -05:00

test_check_tool.py

feat: add support for rovodev (#2539)

2026-06-04 11:34:05 -05:00

test_cli_version.py

…

test_command_template_py_scripts.py

feat(scripts): port create-new-feature, setup-plan and setup-tasks to Python (#3386)

2026-07-21 11:40:15 -05:00

test_commands_package.py

feat: allow overriding default init integration via SPECKIT_INTEGRATION_DEFAULT (#3952)

2026-08-03 12:20:49 -05:00

test_console_imports.py

chore(tests): fix ruff lint violations in tests/ (#2827)

2026-06-03 16:02:26 -05:00

test_create_new_feature_python_parity.py

fix: auto-correct conflicting feature prefixes (#1829)

2026-07-24 09:13:53 -05:00

test_download_security.py

fix(archives): wrap the bare EOFError a truncated tar.gz raises (#3938)

2026-08-05 10:57:51 -05:00

test_extension_add_path_traversal.py

Harden extension URL download cache against symlink and junction races (#3869)

2026-07-30 11:59:50 -05:00

test_extension_registration.py

chore: add pre-commit config and fix trailing whitespace/end-of-file (#3430)

2026-07-10 11:47:36 -05:00

test_extension_skills.py

feat(copilot): default integration to skills (#3976)

2026-08-04 06:15:40 -05:00

test_extension_update_hardening.py

harden: secure extension and preset archive downloads (#3141)

2026-07-28 07:52:07 -05:00

test_extensions.py

fix(extensions): start fresh on a non-UTF-8 extension registry (#3998)

2026-08-06 08:15:40 -05:00

test_github_http.py

fix: handle tags containing / in GitHub release asset URL resolution (#3767)

2026-07-28 15:45:38 -05:00

test_github_workflows.py

Add community bundle submission automation (#3553)

2026-07-21 18:28:40 +01:00

test_init_dir_cli.py

feat(cli): honor SPECIFY_INIT_DIR in the specify CLI project resolver (#3186)

2026-07-01 15:55:18 -05:00

test_init_dir.py

fix(scripts): use a .NET Framework-safe trim in the PowerShell init-dir resolver (#3872)

2026-07-30 07:51:38 -05:00

test_live_transient_windows.py

fix: disable Rich Live transient mode on Windows to prevent PS 5.1 hang (#2938)

2026-06-17 06:48:42 -05:00

test_merge.py

chore: add pre-commit config and fix trailing whitespace/end-of-file (#3430)

2026-07-10 11:47:36 -05:00

test_post_process.py

fix: narrow bare except Exception in invoke separator resolution (#3856)

2026-08-03 13:49:37 -05:00

test_presets.py

fix(presets): return None for an unreadable layer in resolve_content (#3959)

2026-08-06 08:16:08 -05:00

test_ps1_encoding.py

…

test_registrar_path_traversal.py

harden: secure extension and preset archive downloads (#3141)

2026-07-28 07:52:07 -05:00

test_security_workflow.py

fix(workflows): make security requirements sync deterministic (#3832)

2026-07-29 08:56:18 -05:00

test_self_upgrade_detection.py

harden: bound HTTP reads and enforce strict redirects (#3140)

2026-07-22 11:08:32 -05:00

test_self_upgrade_execution.py

harden: bound HTTP reads and enforce strict redirects (#3140)

2026-07-22 11:08:32 -05:00

test_self_upgrade_guidance.py

fix: harden bounded reads and redirect validation (#3671)

2026-07-22 15:18:10 -05:00

test_self_upgrade_verification.py

fix(cli): render the literal [suffix] in --tag help and rejection message (#3800)

2026-07-29 08:54:10 -05:00

test_setup_plan_feature_json.py

fix(scripts): fall through to grep/sed when python3 is a broken stub in feature.json parser (#3312)

2026-07-08 07:45:01 -05:00

test_setup_plan_no_overwrite.py

fix(scripts): route 'Plan template not found' per --json in setup-plan.ps1 (parity with bash) (#3241)

2026-06-29 16:37:40 -05:00

test_setup_plan_python_parity.py

feat(scripts): port create-new-feature, setup-plan and setup-tasks to Python (#3386)

2026-07-21 11:40:15 -05:00

test_setup_tasks_python_parity.py

fix(scripts): stop setup-tasks text mode crashing on a legacy code page (#3892)

2026-08-05 08:44:43 -05:00

test_setup_tasks.py

fix(integrations): preserve native skill invocation prefixes (#3663)

2026-07-28 15:48:40 +01:00

test_shared_infra_gitignore.py

feat(init): scaffold managed .specify/.gitignore (#4000)

2026-08-06 09:08:09 -05:00

test_shared_infra_integrity.py

feat(extensions): verify catalog archive sha256 before install (#3080)

2026-06-24 14:52:24 -05:00

test_skill_placeholder_py.py

feat(scripts): port create-new-feature, setup-plan and setup-tasks to Python (#3386)

2026-07-21 11:40:15 -05:00

test_specify_template_numbering.py

Fix duplicate step numbering in specify command (#3647)

2026-07-22 18:06:59 +01:00

test_timestamp_branches.py

fix: auto-correct conflicting feature prefixes (#1829)

2026-07-24 09:13:53 -05:00

test_upgrade.py

fix: harden bounded reads and redirect validation (#3671)

2026-07-22 15:18:10 -05:00

test_utils_assets_imports.py

feat: make git extension opt-in and remove --no-git at v0.10.0 (#2873)

2026-06-09 06:13:07 -05:00

test_utils.py

harden: remove shell parameter from run_command() (#3716)

2026-07-24 09:46:36 -05:00

test_version_imports.py

chore(tests): fix ruff lint violations in tests/ (#2827)

2026-06-03 16:02:26 -05:00

test_workflow_run_without_project.py

fix(workflows): route run/resume errors to stderr under --json (#3352)

2026-07-07 14:52:36 -05:00

test_workflows.py

fix(workflows): handle an unreadable run state in workflow status (#3999)

2026-08-06 09:12:45 -05:00