Commit Graph

5430 Commits

Author SHA1 Message Date
dependabot[bot] 875e4bde02 chore(deps): bump the ui-minor-and-patch group across 1 directory with 53 updates (#11386)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Lifei Zhou <lifei@squareup.com>
2026-08-20 10:05:04 +00:00
Jasper a171a3db83 fix(security): bound call graph traversal (#11193)
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
2026-08-20 09:45:17 +00:00
Lifei Zhou 21adaeb126 fix: pin arrayref to known-good commit (#11389) 2026-08-20 09:34:25 +00:00
Abhijay Jain cd23a1ed40 feat(providers): add SayGM as declarative OpenAI-compatible provider (#11267)
Signed-off-by: Abhijay Jain <Abhijay007j@gmail.com>
Co-authored-by: Lifei Zhou <lifei@squareup.com>
2026-08-20 07:52:23 +00:00
Zach Nelson 69a705fc39 feat(providers): custom provider cost fields drive cost tracking (config-declared pricing fallback) (#11220)
Co-authored-by: Claude Opus 5 <noreply@anthropic.com>
2026-08-20 07:36:28 +00:00
Michael Neale b87a42dd7f fix(deps): repair dangling syn reference in Cargo.lock (#11385)
Signed-off-by: Michael Neale <michael.neale@gmail.com>
2026-08-20 06:37:21 +00:00
Nick Johnson a0464f4f65 fix(flake): add cudaforge hash for git dependency (#10910) 2026-08-20 06:12:56 +00:00
Venky 5a01b1adce feat: auto-focus chat input when user starts typing (#11184) 2026-08-20 02:53:07 +00:00
Jasper 01f5ed7f9b fix(security): fail closed on invalid Codex ACP mode (#11362)
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
2026-08-20 00:24:12 +00:00
iroiro147 bc68049225 fix(mcp): keep stdio extensions alive across worker exits (#10364)
Signed-off-by: iroiro147 <sarthak.singh@juspay.in>
2026-08-20 00:23:18 +00:00
Josh Fialkoff 6cd2664788 feat(ui): collapse scheduled job sessions into accordion in chat history (#11265)
Co-authored-by: Douwe Osinga <douwe.osinga@gmail.com>
2026-08-20 00:20:27 +00:00
Jasper 4de6fe2065 fix: bound retry command diagnostics (#11365)
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
2026-08-19 23:32:58 +00:00
Douwe Osinga c13aa86a74 Disable thinking for tool call labels (#11207) 2026-08-19 23:23:18 +00:00
Jasper 760f4d5855 fix(review): contain REVIEW.md discovery (#11367)
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
2026-08-19 23:10:56 +00:00
Jasper 2f89bec759 fix(acp): preserve tool result audience metadata (#11375) 2026-08-19 23:09:34 +00:00
asiantuntija fe83492090 test(providers): isolate environment-proxy test in its own binary (#11262)
Co-authored-by: tsih <tsih@tsih.fi>
2026-08-19 22:55:40 +00:00
Jasper 0259143260 fix(security): bind Foundry API keys to request origin (#11347)
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
2026-08-19 22:45:10 +00:00
Herley f2e6e9ed05 fix: canonicalize mangled tool names before permission inspection (follow-up to #10230) (#10285) 2026-08-19 22:15:03 +00:00
Vishal Veera Reddy 5e6b79fb96 feat(providers): add Lynkr as a declarative OpenAI-compatible provider (#11372)
Co-authored-by: vishal veerareddy <vishalveera.reddy@servicenow.com>
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
2026-08-19 22:12:24 +00:00
Jasper ba2d868cff fix: sanitize Pi imported output (#10990) 2026-08-19 22:12:10 +00:00
Jasper b7eef328df fix(otel): honor RUST_LOG directives for logs (#11360)
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
2026-08-19 21:53:53 +00:00
Abhijay Jain 6d6abf74a1 feat(skills): add web-search and browser-use built-in skills (#11233)
Signed-off-by: Abhijay Jain <Abhijay007j@gmail.com>
2026-08-19 21:51:24 +00:00
Joel Wirāmu Pauling 6722a195e1 feat(dictation): add model-native audio transcription provider (#10589) 2026-08-19 21:37:10 +00:00
kbennett15 e31f2f4292 feat(aws_bedrock): route OpenAI GPT-5.6 (sol/terra/luna) via Bedrock … (#10502)
Signed-off-by: kbennett15 <75271761+kbennett15@users.noreply.github.com>
2026-08-19 21:32:40 +00:00
Theofanis Petkos c509e2fa34 refactor(goose-local-inference): move mlx deps under macos (#11328) 2026-08-19 21:14:06 +00:00
Discover_it e43f2be9b1 feat(providers): add PleumRouter declarative provider (#10479)
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-08-19 20:54:07 +00:00
Amir Fathi cb9cbec0d5 fix(google): include thinking tokens in usage output_tokens (#10354) 2026-08-19 20:50:55 +00:00
Lifei Zhou b832501b6f preserve extensions when adding MCP servers (#11339) 2026-08-19 20:36:24 +00:00
Jasper 81578789e2 fix(config): preserve platform tool allowlists (#11369)
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
2026-08-19 20:30:15 +00:00
Jasper 0393c6009a fix(security): validate memory categories (#11191)
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
2026-08-19 20:28:02 +00:00
SynthLuvr ba9346cd15 feat(providers): replace Z.ai GLM-5.2 with GLM-5.3 (#11226) 2026-08-19 19:19:44 +00:00
dependabot[bot] b55a28b11b chore(deps): bump nostr from 0.44.7 to 0.45.1 (#11243)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Douwe Osinga <douwe@block.xyz>
Co-authored-by: Douwe Osinga <douwe.osinga@gmail.com>
2026-08-19 17:30:32 +00:00
Jared Manfredi cdc150f87b fix: gate clear_thinking behind an opt-in flag (Z.AI-only) (#10439)
Signed-off-by: Douwe Osinga <douwe.osinga@gmail.com>
Co-authored-by: Jared Manfredi <j.manfredi@draftkings.com>
Co-authored-by: Douwe Osinga <douwe.osinga@gmail.com>
2026-08-19 17:30:05 +00:00
dependabot[bot] 9e4ac726d0 chore(deps): bump rubato from 0.16.2 to 5.0.0 (#11248)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Douwe Osinga <douwe@block.xyz>
Co-authored-by: Douwe Osinga <douwe.osinga@gmail.com>
2026-08-19 17:25:33 +00:00
nuthalapativarun 23c2e2824b fix(summon): give GOOSE_SUBAGENT_PROVIDER/MODEL priority over LLM-injected params (#9650)
Signed-off-by: Varun Nuthalapati <nuthalapativarun@gmail.com>
Signed-off-by: Douwe Osinga <douwe.osinga@gmail.com>
Co-authored-by: Douwe M Osinga <douwe@sidewalklabs.com>
Co-authored-by: Douwe Osinga <douwe.osinga@gmail.com>
2026-08-19 17:24:43 +00:00
Jasper 3406a6d5dd fix: respect ACP audience in bang-shell shortcut (#11150)
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
2026-08-19 17:24:30 +00:00
dependabot[bot] 1f8f57c8fc chore(deps): bump comfy-table from 7.2.2 to 8.0.0 (#11242)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Douwe Osinga <douwe@block.xyz>
Co-authored-by: Douwe Osinga <douwe.osinga@gmail.com>
2026-08-19 17:21:25 +00:00
dependabot[bot] af016f0a80 chore(deps): bump pkcs8 from 0.10.2 to 0.11.0 (#11246)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Jasper Hugo <jasper@jasperhugo.com>
Co-authored-by: Douwe Osinga <douwe.osinga@gmail.com>
2026-08-19 17:19:55 +00:00
dependabot[bot] c5ae024638 chore(deps-dev): bump @eslint/js from 9.39.4 to 10.0.1 in /ui (#10976)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Douwe Osinga <douwe@block.xyz>
Co-authored-by: Douwe Osinga <douwe.osinga@gmail.com>
2026-08-19 17:18:44 +00:00
filip 33fb29402e fix(core): compact with the main session model, not the fast model (#11255) 2026-08-19 17:18:09 +00:00
dependabot[bot] b1de7a5e8a chore(deps): bump zod from 3.25.76 to 4.4.3 in /ui (#10980)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Douwe M Osinga <douwe@sidewalklabs.com>
Co-authored-by: Douwe Osinga <douwe.osinga@gmail.com>
2026-08-19 17:15:11 +00:00
Jasper 180042d7ea fix: make Gemini plugin installs transactional (#11303)
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
2026-08-19 17:04:47 +00:00
Jasper fd9f76d9aa fix(desktop): gate external URL protocols centrally (#11311) 2026-08-19 16:54:21 +00:00
Jasper 0ede20cc5b fix(security): bound recursive mention scans (#11228) 2026-08-19 16:54:17 +00:00
Jasper e9011346c0 fix(hooks): include working directory in stop context (#11112) 2026-08-19 16:54:13 +00:00
Jasper 01859e2387 fix: scan uvx from selectors for malware (#10988) 2026-08-19 16:54:04 +00:00
kursad-k 481cc0ca27 aura dark theme for Goose (#10283)
Co-authored-by: kursad <kursadk@neoplecxus.com>
2026-08-19 16:38:45 +00:00
Jasper 485b932e2f fix(security): avoid predictable editor symlink (#11188)
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
2026-08-19 16:34:13 +00:00
Theofanis Petkos afcc603b35 refactor: share axum-server via workspace.dependencies (#11326) 2026-08-19 16:15:32 +00:00
dependabot[bot] 9373ae0899 chore(deps): bump syn from 2.0.118 to 3.0.3 (#10855)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-19 15:50:30 +00:00