Commit Graph

5447 Commits

Author SHA1 Message Date
dependabot[bot] 9e4ac726d0 chore(deps): bump rubato from 0.16.2 to 5.0.0 (#11248)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Douwe Osinga <douwe@block.xyz>
Co-authored-by: Douwe Osinga <douwe.osinga@gmail.com>
2026-08-19 17:25:33 +00:00
nuthalapativarun 23c2e2824b fix(summon): give GOOSE_SUBAGENT_PROVIDER/MODEL priority over LLM-injected params (#9650)
Signed-off-by: Varun Nuthalapati <nuthalapativarun@gmail.com>
Signed-off-by: Douwe Osinga <douwe.osinga@gmail.com>
Co-authored-by: Douwe M Osinga <douwe@sidewalklabs.com>
Co-authored-by: Douwe Osinga <douwe.osinga@gmail.com>
2026-08-19 17:24:43 +00:00
Jasper 3406a6d5dd fix: respect ACP audience in bang-shell shortcut (#11150)
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
2026-08-19 17:24:30 +00:00
dependabot[bot] 1f8f57c8fc chore(deps): bump comfy-table from 7.2.2 to 8.0.0 (#11242)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Douwe Osinga <douwe@block.xyz>
Co-authored-by: Douwe Osinga <douwe.osinga@gmail.com>
2026-08-19 17:21:25 +00:00
dependabot[bot] af016f0a80 chore(deps): bump pkcs8 from 0.10.2 to 0.11.0 (#11246)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Jasper Hugo <jasper@jasperhugo.com>
Co-authored-by: Douwe Osinga <douwe.osinga@gmail.com>
2026-08-19 17:19:55 +00:00
dependabot[bot] c5ae024638 chore(deps-dev): bump @eslint/js from 9.39.4 to 10.0.1 in /ui (#10976)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Douwe Osinga <douwe@block.xyz>
Co-authored-by: Douwe Osinga <douwe.osinga@gmail.com>
2026-08-19 17:18:44 +00:00
filip 33fb29402e fix(core): compact with the main session model, not the fast model (#11255) 2026-08-19 17:18:09 +00:00
dependabot[bot] b1de7a5e8a chore(deps): bump zod from 3.25.76 to 4.4.3 in /ui (#10980)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Douwe M Osinga <douwe@sidewalklabs.com>
Co-authored-by: Douwe Osinga <douwe.osinga@gmail.com>
2026-08-19 17:15:11 +00:00
Jasper 180042d7ea fix: make Gemini plugin installs transactional (#11303)
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
2026-08-19 17:04:47 +00:00
Jasper fd9f76d9aa fix(desktop): gate external URL protocols centrally (#11311) 2026-08-19 16:54:21 +00:00
Jasper 0ede20cc5b fix(security): bound recursive mention scans (#11228) 2026-08-19 16:54:17 +00:00
Jasper e9011346c0 fix(hooks): include working directory in stop context (#11112) 2026-08-19 16:54:13 +00:00
Jasper 01859e2387 fix: scan uvx from selectors for malware (#10988) 2026-08-19 16:54:04 +00:00
kursad-k 481cc0ca27 aura dark theme for Goose (#10283)
Co-authored-by: kursad <kursadk@neoplecxus.com>
2026-08-19 16:38:45 +00:00
Jasper 485b932e2f fix(security): avoid predictable editor symlink (#11188)
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
2026-08-19 16:34:13 +00:00
Theofanis Petkos afcc603b35 refactor: share axum-server via workspace.dependencies (#11326) 2026-08-19 16:15:32 +00:00
dependabot[bot] 9373ae0899 chore(deps): bump syn from 2.0.118 to 3.0.3 (#10855)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-19 15:50:30 +00:00
Jasper f167ca6908 fix(security): fail closed on malformed app visibility (#11341)
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
2026-08-19 15:34:00 +00:00
Jasper c9d940ec66 fix: redact Telegram tokens from request errors (#11343)
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
2026-08-19 15:33:02 +00:00
Wolfe-James 7ab3750a90 test(recipe): add a regression guard for minijinja's builtins feature (#11319)
Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com>
2026-08-19 15:32:50 +00:00
Jasper 89fb81e4e0 fix(desktop): stop stale microphone test streams (#11309) 2026-08-19 15:31:55 +00:00
Jasper 01695e8bd9 fix(security): encode session navigation parameters (#11232) 2026-08-19 15:31:50 +00:00
Jasper 35bd51338c fix(security): redact URLs in provider errors (#11230) 2026-08-19 15:31:46 +00:00
Michael A. Smith e6b12beb42 fix(acp): bound the handoff memo so long sessions stay resumable (#11204) 2026-08-19 12:50:49 -04:00
2:5030/1559 f3c3563c66 Bug fix: Goose unable to work with DeepSeek and Alibaba using OpenAI responses API. (#11298)
Co-authored-by: Kirill Frolov <k.frolov+1@samsung.com>
2026-08-19 13:56:50 +00:00
Jasper 607a77cfb1 fix: show tool inputs before approval (#10932) 2026-08-19 11:10:31 -04:00
Lifei Zhou 9df520d507 fix(cli): deduplicate enabled builtins (#11340) 2026-08-19 10:58:20 +00:00
tic-top 9f941fbfc5 feat(cli): let --with-extension name its extension (#11127)
Signed-off-by: kirp@umich.edu <kirp@umich.edu>
Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>
Co-authored-by: Douwe M Osinga <douwe@sidewalklabs.com>
2026-08-19 00:17:58 +00:00
Jasper 3fac8f23cf fix(recipes): confine temporary extraction cleanup (#11125)
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
2026-08-18 19:21:00 +00:00
github-actions[bot] cfd2ef12ee chore(release): bump version to 1.47.0 (minor) (#11300)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-08-18 19:04:15 +00:00
Abhijay Jain c962612bc4 feat(desktop): add interactive git branch indicator to chat bottom bar (#11290)
Signed-off-by: Abhijay Jain <Abhijay007j@gmail.com>
Signed-off-by: Douwe Osinga <douwe.osinga@gmail.com>
Co-authored-by: Douwe Osinga <douwe.osinga@gmail.com>
2026-08-18 17:18:59 +00:00
Jingyu Zhao 935a37a684 fix(summon): isolate concurrent subagent notifications (#10772)
Signed-off-by: zhaojy <zhaojy01@rd.netase.com>
Co-authored-by: zhaojy <zhaojy01@rd.netase.com>
2026-08-18 12:47:21 -04:00
Jasper 13d32695a0 fix(security): validate recipe parameter values (#11234) 2026-08-18 13:32:03 +00:00
Yoggy 403fcc84c7 fix: re-enable minijinja builtins so documented recipe filters work (#11310) 2026-08-18 10:36:54 +00:00
filip 7c4ba22191 fix(providers): send explicit thinking disabled to adaptive Claude models (#11177) 2026-08-17 18:32:49 +00:00
dependabot[bot] 4f3bb7505a chore(deps): bump the cargo-minor-and-patch group across 1 directory with 44 updates (#11295)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Jasper Hugo <jasper@jasperhugo.com>
2026-08-17 18:17:31 +00:00
dependabot[bot] 92c0fe902a chore(deps): bump github/codeql-action from 4.37.3 to 4.37.6 (#11240)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-17 12:41:11 +00:00
dependabot[bot] 5ef1ca52f3 chore(deps): bump dorny/paths-filter from 4.0.2 to 4.0.3 (#11239)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-17 12:41:03 +00:00
dependabot[bot] 507a3efc1c chore(deps): bump Swatinem/rust-cache from 2.9.1 to 2.9.2 (#11238)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-17 12:40:55 +00:00
dependabot[bot] c177fee2e5 chore(deps): bump actions/attest-build-provenance from 4.1.1 to 4.2.2 (#11237)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-17 12:40:46 +00:00
dependabot[bot] 2c8a2260d9 chore(deps): bump step-security/harden-runner from 2.20.0 to 2.20.1 (#11236)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-17 12:40:38 +00:00
dependabot[bot] aab3322054 chore(deps): bump serial_test from 3.5.0 to 4.0.1 (#11249)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-17 12:38:32 +00:00
dependabot[bot] 92ec780d1c chore(deps): bump ctor from 0.6.3 to 1.0.11 (#11244)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-17 12:35:21 +00:00
Lifei Zhou ac1918f535 acp: pin V1 SDK and narrow acp crate features (#11289) 2026-08-17 11:03:07 +00:00
Lifei Zhou 063694cf76 acp: Migrate session/delete to the standard acp sdk (#11286) 2026-08-17 10:09:56 +00:00
Lifei Zhou 85aac19404 fix (providers): handle error code for context length exceeded (#11283) 2026-08-17 07:56:02 +00:00
jonathan MERCIER 9915ba7eb7 fix(providers): include required annotations field on replayed output_text items (#11263)
Co-authored-by: Lifei Zhou <lifei@squareup.com>
2026-08-17 04:54:33 +00:00
Andrew 3810898a74 feat(mcp): support pre-registered OAuth clients for streamable_http extensions (#11182)
Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
Co-authored-by: OpenAI Codex <codex@openai.com>
2026-08-14 15:57:03 -04:00
Douwe Osinga 4bb968fadb Improve ACP provider setup and unify setup metadata (#11100)
Signed-off-by: Douwe M Osinga <douwe@sidewalklabs.com>
Signed-off-by: Douwe Osinga <douwe.osinga@gmail.com>
Co-authored-by: Douwe M Osinga <douwe@sidewalklabs.com>
2026-08-14 16:25:20 +00:00
Douwe Osinga 618bd37009 fix: reject context commands for context-owning providers (#11094)
Co-authored-by: Douwe M Osinga <douwe@sidewalklabs.com>
2026-08-14 16:24:21 +00:00