Commit Graph

1781 Commits

Author SHA1 Message Date
Alex Hancock 2f5169af35 add MCP conformance tests to goose CI (combines #10800 + #10801) (#10940)
Signed-off-by: Jack Amadeo <jackamadeo@squareup.com>
Co-authored-by: Jack Amadeo <jackamadeo@squareup.com>
2026-08-20 21:51:53 +00:00
Alex Hancock fc6311acb7 test(plugins): isolate GOOSE_PATH_ROOT in discovery tests (#11407) 2026-08-20 14:59:39 +00:00
Jasper 0ed7b02d5f fix(config): serialize secret mutations (#11388)
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
2026-08-20 14:03:53 +00:00
Jasper 8343c4a16b fix: decouple source file and tool response limits (#11391) 2026-08-20 14:03:51 +00:00
dependabot[bot] ba7ffd3efa chore(deps): bump pctx_code_mode from 0.4.1 to 0.5.0 (#11245)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Douwe Osinga <douwe@block.xyz>
Co-authored-by: Douwe Osinga <douwe.osinga@gmail.com>
2026-08-20 13:19:20 +00:00
Jasper 8648f2d060 fix(security): suppress sensitive OTLP traces (#11381) 2026-08-20 13:16:36 +00:00
Lee-Si-Yoon f70cb64d3f feat(openrouter): forward session_id and add app category header (#10868) 2026-08-20 13:13:33 +00:00
Matt Toohey 3dd0762f96 feat(acp): derive and forward thinking effort from the ACP harness (#10949)
Signed-off-by: Matt Toohey <contact@matttoohey.com>
Co-authored-by: Claude <noreply@anthropic.com>
Co-authored-by: Jasper Hugo <jasper@jasperhugo.com>
2026-08-20 12:50:47 +00:00
Hugues Clouâtre 1e7b2b969d fix(aws_bedrock): replace flat model list with routing table, add Gemma 4 Mantle support (#10297)
Signed-off-by: Hugues Clouâtre <hugues@linux.com>
Co-authored-by: Jack Amadeo <jackamadeo@squareup.com>
2026-08-20 12:45:14 +00:00
Jasper d1d8f45812 fix(security): fail closed on invalid default GCP credentials (#11363)
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
2026-08-20 11:53:02 +00:00
Jasper c250daab3e fix(codex): reject socket-backed MCP extensions (#11304)
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
2026-08-20 11:51:02 +00:00
Jasper ea07f7bb41 fix: pass complete response to stop hooks (#11366)
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
2026-08-20 10:50:45 +00:00
Jasper df899654fe fix: contain and bound skill supporting file reads (#11342)
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
2026-08-20 10:48:51 +00:00
Jasper a171a3db83 fix(security): bound call graph traversal (#11193)
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
2026-08-20 09:45:17 +00:00
Zach Nelson 69a705fc39 feat(providers): custom provider cost fields drive cost tracking (config-declared pricing fallback) (#11220)
Co-authored-by: Claude Opus 5 <noreply@anthropic.com>
2026-08-20 07:36:28 +00:00
Jasper 01f5ed7f9b fix(security): fail closed on invalid Codex ACP mode (#11362)
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
2026-08-20 00:24:12 +00:00
iroiro147 bc68049225 fix(mcp): keep stdio extensions alive across worker exits (#10364)
Signed-off-by: iroiro147 <sarthak.singh@juspay.in>
2026-08-20 00:23:18 +00:00
Jasper 4de6fe2065 fix: bound retry command diagnostics (#11365)
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
2026-08-19 23:32:58 +00:00
Douwe Osinga c13aa86a74 Disable thinking for tool call labels (#11207) 2026-08-19 23:23:18 +00:00
Jasper 760f4d5855 fix(review): contain REVIEW.md discovery (#11367)
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
2026-08-19 23:10:56 +00:00
Jasper 2f89bec759 fix(acp): preserve tool result audience metadata (#11375) 2026-08-19 23:09:34 +00:00
Jasper 0259143260 fix(security): bind Foundry API keys to request origin (#11347)
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
2026-08-19 22:45:10 +00:00
Herley f2e6e9ed05 fix: canonicalize mangled tool names before permission inspection (follow-up to #10230) (#10285) 2026-08-19 22:15:03 +00:00
Jasper ba2d868cff fix: sanitize Pi imported output (#10990) 2026-08-19 22:12:10 +00:00
Jasper b7eef328df fix(otel): honor RUST_LOG directives for logs (#11360)
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
2026-08-19 21:53:53 +00:00
Abhijay Jain 6d6abf74a1 feat(skills): add web-search and browser-use built-in skills (#11233)
Signed-off-by: Abhijay Jain <Abhijay007j@gmail.com>
2026-08-19 21:51:24 +00:00
Joel Wirāmu Pauling 6722a195e1 feat(dictation): add model-native audio transcription provider (#10589) 2026-08-19 21:37:10 +00:00
kbennett15 e31f2f4292 feat(aws_bedrock): route OpenAI GPT-5.6 (sol/terra/luna) via Bedrock … (#10502)
Signed-off-by: kbennett15 <75271761+kbennett15@users.noreply.github.com>
2026-08-19 21:32:40 +00:00
Lifei Zhou b832501b6f preserve extensions when adding MCP servers (#11339) 2026-08-19 20:36:24 +00:00
Jasper 81578789e2 fix(config): preserve platform tool allowlists (#11369)
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
2026-08-19 20:30:15 +00:00
dependabot[bot] b55a28b11b chore(deps): bump nostr from 0.44.7 to 0.45.1 (#11243)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Douwe Osinga <douwe@block.xyz>
Co-authored-by: Douwe Osinga <douwe.osinga@gmail.com>
2026-08-19 17:30:32 +00:00
Jared Manfredi cdc150f87b fix: gate clear_thinking behind an opt-in flag (Z.AI-only) (#10439)
Signed-off-by: Douwe Osinga <douwe.osinga@gmail.com>
Co-authored-by: Jared Manfredi <j.manfredi@draftkings.com>
Co-authored-by: Douwe Osinga <douwe.osinga@gmail.com>
2026-08-19 17:30:05 +00:00
dependabot[bot] 9e4ac726d0 chore(deps): bump rubato from 0.16.2 to 5.0.0 (#11248)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Douwe Osinga <douwe@block.xyz>
Co-authored-by: Douwe Osinga <douwe.osinga@gmail.com>
2026-08-19 17:25:33 +00:00
nuthalapativarun 23c2e2824b fix(summon): give GOOSE_SUBAGENT_PROVIDER/MODEL priority over LLM-injected params (#9650)
Signed-off-by: Varun Nuthalapati <nuthalapativarun@gmail.com>
Signed-off-by: Douwe Osinga <douwe.osinga@gmail.com>
Co-authored-by: Douwe M Osinga <douwe@sidewalklabs.com>
Co-authored-by: Douwe Osinga <douwe.osinga@gmail.com>
2026-08-19 17:24:43 +00:00
Jasper 3406a6d5dd fix: respect ACP audience in bang-shell shortcut (#11150)
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
2026-08-19 17:24:30 +00:00
filip 33fb29402e fix(core): compact with the main session model, not the fast model (#11255) 2026-08-19 17:18:09 +00:00
Jasper 180042d7ea fix: make Gemini plugin installs transactional (#11303)
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
2026-08-19 17:04:47 +00:00
Jasper e9011346c0 fix(hooks): include working directory in stop context (#11112) 2026-08-19 16:54:13 +00:00
Jasper 01859e2387 fix: scan uvx from selectors for malware (#10988) 2026-08-19 16:54:04 +00:00
Theofanis Petkos afcc603b35 refactor: share axum-server via workspace.dependencies (#11326) 2026-08-19 16:15:32 +00:00
Jasper f167ca6908 fix(security): fail closed on malformed app visibility (#11341)
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
2026-08-19 15:34:00 +00:00
Jasper c9d940ec66 fix: redact Telegram tokens from request errors (#11343)
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
2026-08-19 15:33:02 +00:00
Wolfe-James 7ab3750a90 test(recipe): add a regression guard for minijinja's builtins feature (#11319)
Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com>
2026-08-19 15:32:50 +00:00
Michael A. Smith e6b12beb42 fix(acp): bound the handoff memo so long sessions stay resumable (#11204) 2026-08-19 12:50:49 -04:00
Jingyu Zhao 935a37a684 fix(summon): isolate concurrent subagent notifications (#10772)
Signed-off-by: zhaojy <zhaojy01@rd.netase.com>
Co-authored-by: zhaojy <zhaojy01@rd.netase.com>
2026-08-18 12:47:21 -04:00
Yoggy 403fcc84c7 fix: re-enable minijinja builtins so documented recipe filters work (#11310) 2026-08-18 10:36:54 +00:00
filip 7c4ba22191 fix(providers): send explicit thinking disabled to adaptive Claude models (#11177) 2026-08-17 18:32:49 +00:00
dependabot[bot] 92ec780d1c chore(deps): bump ctor from 0.6.3 to 1.0.11 (#11244)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-17 12:35:21 +00:00
Lifei Zhou ac1918f535 acp: pin V1 SDK and narrow acp crate features (#11289) 2026-08-17 11:03:07 +00:00
Lifei Zhou 063694cf76 acp: Migrate session/delete to the standard acp sdk (#11286) 2026-08-17 10:09:56 +00:00