What's Changed
This release syncs GitHub releases with the already-published PyPI package for specfact-cli 0.47.11.
Fixed
- Bundle install CI stability: avoid brittle Click stdout capture in the already-present bundle dependency regression and apply module-registry review annotations for callback type enforcement and isolated test state.
- Module install CI stability: refresh loaded SpecFact module consoles before direct module-registry invocations so stale Rich streams from earlier tests do not close Click's captured stdout in Python 3.11 full-suite runs.
- PR gate remediation: split Independent Static Analysis onto a dedicated checked-in SAST profile, keep clean-code review separate from security SAST, fix marketplace install output capture across Python CI jobs, and make the module pre-commit verifier compatible with macOS's default Bash.
- PR hardening follow-up: address PR review annotations and failing CI by pinning orchestrator actions to immutable SHAs, preserving precise coverage threshold comparisons, making Semgrep SAST result parsing fail closed, and normalizing versioned dependency constraints before dedupe.
- Stale flat command references: update runtime error suggestions and tooling references from removed flat commands to the canonical grouped commands.
Added
- llms.txt freshness test: add a unit test that re-runs the command overview generator in check mode so stale generated command references fail the test suite even when the path-scoped pre-commit gate is bypassed.
Target commit: 7f7daff60c4353914e52ce1d39293c56399f6c5a