ci: pin openspec via devDependency

Adds @fission-ai/openspec ^1.3.1 as a root devDependency so local and CI
run the same lockfile-pinned version, and dependabot can bump it. CI now
runs `pnpm openspec validate --all --strict` instead of npx.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
This commit is contained in:
Ullrich Schäfer 2026-05-08 02:36:53 +02:00
parent 5b6fecf416
commit 9cf6398a76
No known key found for this signature in database
GPG key ID: A32FF691A0F752D9
3 changed files with 549 additions and 2 deletions

View file

@ -50,10 +50,13 @@ jobs:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v6
- uses: pnpm/action-setup@v6
- uses: actions/setup-node@v6
with:
node-version: 24
- run: npx -y @fission-ai/openspec@1.2.0 validate --all --strict --no-interactive
cache: pnpm
- run: pnpm install --frozen-lockfile
- run: pnpm openspec validate --all --strict --no-interactive
typecheck:
name: Typecheck