Marsel Safin 2b5e175440 fix(bundler): validate catalog URLs in catalog add (HTTPS-only, require host) (#3367) ...

* fix(bundler): validate catalog URLs in `catalog add` (HTTPS-only, require host)

add_source persisted remote catalog URLs without the HTTPS/host checks
that specify_cli.catalogs (#3210) and the bundler adapters (#3333)
enforce, and an unclosed IPv6 bracket escaped as a raw ValueError.
Mirror the catalogs.py validation for http(s) schemes and wrap urlparse
so malformed input raises BundlerError.

Fixes #3366

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* docs: correct config filename and validation reference in comment

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

---------

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

2026-07-07 11:01:46 -05:00

..

contract

fix: resolve GitHub release asset API URL for private repo bundle downloads (#3136)

2026-07-01 16:30:20 -05:00

extensions

Support namespaced git feature branch templates (#3293)

2026-07-06 15:41:58 -05:00

hooks

fix: wire after_tasks and after_implement hook events into command templates (#1702)

2026-03-04 08:16:31 -06:00

integration

fix(bundler): resolve catalog search at highest-precedence source before filtering (#3331)

2026-07-06 16:42:45 -05:00

integrations

test: reduce registry manifest test repetition (#3146)

2026-07-06 17:50:33 -05:00

unit

fix(bundler): validate catalog URLs in catalog add (HTTPS-only, require host) (#3367)

2026-07-07 11:01:46 -05:00

__init__.py

Add modular extension system (#1551)

2026-02-10 14:27:20 -06:00

auth_helpers.py

feat: Config-driven opt-in authentication registry with multi-platform support (#2393)

2026-05-07 12:51:20 -05:00

bundler_helpers.py

feat: add specify bundle command (#3070)

2026-06-19 17:07:20 -05:00

conftest.py

feat(cli): honor SPECIFY_INIT_DIR in the specify CLI project resolver (#3186)

2026-07-01 15:55:18 -05:00

http_helpers.py

feat(cli): implement specify self upgrade (#2475)

2026-06-03 12:04:54 -05:00

self_upgrade_helpers.py

feat(cli): implement specify self upgrade (#2475)

2026-06-03 12:04:54 -05:00

test_agent_config_consistency.py

chore: retire Roo Code integration — extension shut down (#3167) (#3212)

2026-06-30 10:24:04 -05:00

test_authentication.py

fix(extensions,presets,workflows): resolve private GHES release assets via /api/v3 (#3157)

2026-06-25 10:44:30 -05:00

test_branch_numbering.py

feat: make git extension opt-in and remove --no-git at v0.10.0 (#2873)

2026-06-09 06:13:07 -05:00

test_check_prerequisites_paths_only.py

fix: fall back to feature dir basename for empty CURRENT_BRANCH (#3026) (#3229)

2026-07-01 13:50:53 -05:00

test_check_prerequisites_python_parity.py

feat(scripts): add Python check-prerequisites PoC (#3302)

2026-07-06 17:54:31 -05:00

test_check_tool.py

feat: add support for rovodev (#2539)

2026-06-04 11:34:05 -05:00

test_cli_version.py

feat: add version feature reporting (#2548)

2026-05-14 12:52:14 -05:00

test_commands_package.py

feat(cli): add py script type & Python interpreter resolution (#3278) (#3285)

2026-07-01 16:34:46 -05:00

test_console_imports.py

chore(tests): fix ruff lint violations in tests/ (#2827)

2026-06-03 16:02:26 -05:00

test_extension_registration.py

fix(cli): harden extension registration and discovery workflows (#2499)

2026-05-13 12:02:01 -05:00

test_extension_skills.py

fix extension-local script path rewriting (#3364)

2026-07-07 10:51:50 -05:00

test_extension_update_hardening.py

refactor: move extension command handlers to extensions/_commands.py (PR-7/8) (#3014)

2026-06-22 13:40:57 -05:00

test_extensions.py

fix extension-local script path rewriting (#3364)

2026-07-07 10:51:50 -05:00

test_github_http.py

fix(extensions,presets,workflows): resolve private GHES release assets via /api/v3 (#3157)

2026-06-25 10:44:30 -05:00

test_github_workflows.py

ci: pin actions to commit SHAs and add shellcheck (#3126)

2026-06-24 15:08:16 -05:00

test_init_dir_cli.py

feat(cli): honor SPECIFY_INIT_DIR in the specify CLI project resolver (#3186)

2026-07-01 15:55:18 -05:00

test_init_dir.py

feat(scripts): add SPECIFY_INIT_DIR to target a member project from the repo root (#2892)

2026-06-19 12:05:42 -05:00

test_live_transient_windows.py

fix: disable Rich Live transient mode on Windows to prevent PS 5.1 hang (#2938)

2026-06-17 06:48:42 -05:00

test_merge.py

feat(cli): polite deep merge for settings.json and support JSONC (#1874)

2026-03-17 09:51:13 -05:00

test_presets.py

fix: allow prerelease spec-kit versions in compatibility checks (#2695)

2026-06-30 09:41:57 -05:00

test_ps1_encoding.py

fix: PS 5.1 compat — replace non-ASCII chars in shipped PowerShell scripts (#2709)

2026-05-26 13:18:34 -05:00

test_registrar_path_traversal.py

Harden command registration path handling (#3088)

2026-06-22 10:25:29 -05:00

test_self_upgrade_detection.py

feat(cli): implement specify self upgrade (#2475)

2026-06-03 12:04:54 -05:00

test_self_upgrade_execution.py

feat(cli): implement specify self upgrade (#2475)

2026-06-03 12:04:54 -05:00

test_self_upgrade_guidance.py

feat(cli): implement specify self upgrade (#2475)

2026-06-03 12:04:54 -05:00

test_self_upgrade_verification.py

feat(cli): implement specify self upgrade (#2475)

2026-06-03 12:04:54 -05:00

test_setup_plan_feature_json.py

fix(tests): don't run PowerShell tests via WSL-interop powershell.exe (#2971)

2026-06-16 17:36:24 -05:00

test_setup_plan_no_overwrite.py

fix(scripts): route 'Plan template not found' per --json in setup-plan.ps1 (parity with bash) (#3241)

2026-06-29 16:37:40 -05:00

test_setup_tasks.py

fix(scripts): count subdirectory-only dirs as non-empty in PowerShell (parity with bash) (#3137)

2026-06-29 14:38:39 -05:00

test_shared_infra_integrity.py

feat(extensions): verify catalog archive sha256 before install (#3080)

2026-06-24 14:52:24 -05:00

test_timestamp_branches.py

fix(scripts): warn when spec template is missing in create-new-feature.ps1 (parity with bash) (#3230)

2026-06-29 14:46:35 -05:00

test_upgrade.py

feat(cli): implement specify self upgrade (#2475)

2026-06-03 12:04:54 -05:00

test_utils_assets_imports.py

feat: make git extension opt-in and remove --no-git at v0.10.0 (#2873)

2026-06-09 06:13:07 -05:00

test_utils.py

harden: reject shell=True in run_command (#3132)

2026-06-24 13:05:21 -05:00

test_version_imports.py

chore(tests): fix ruff lint violations in tests/ (#2827)

2026-06-03 16:02:26 -05:00

test_workflow_run_without_project.py

feat(cli): honor SPECIFY_INIT_DIR in the specify CLI project resolver (#3186)

2026-07-01 15:55:18 -05:00

test_workflows.py

fix(workflows): match gate reject option case-insensitively (#3335)

2026-07-06 16:48:33 -05:00