Release Cadence

[ncook-hxgn]

Hi,

My organisation are looking into tools such as Spectral.

I notice that there is development activity - merged PRs and closed issues - but there hasn't been a release for almost a year. Will there be a new release landing soon that we can evaluate?

In particular, I noticed an issue referencing the Sha1-Halud worm, where a transitive dependency may have been affected. Was this resolved?

[TimvdLippe]

This also appears to affect other Spectral-related repositories where updates are not getting through either: stoplightio/vscode-spectral#239 Note that the VS Code extension has an open PR by @erwinkramer to update to the latest version (stoplightio/vscode-spectral#277) but it's not receiving any reviews.

[ncook-hxgn]

It does appear that @spotlight/spectral-cli package on npmjs.org is up to date, fwiw: https://www.npmjs.com/package/@stoplight/spectral-cli

[slegarraga]

For visibility: @stoplight/spectral-cli on npm tracks recent releases, but IDE/extension repos can lag (see vscode-spectral #277). If you're blocked on a specific fix, pinning CLI + rulesets versions or using the Docker image is often faster than waiting on extension publish cycles.