 Jasper
|
df147d32d4
|
fix(security): give permission denies precedence (#11477)
|
2026-08-24 18:51:25 +00:00 |
|
|
Jasper
|
6808b4d15b
|
fix(recipes): confine library writes (#11482)
|
2026-08-24 18:50:15 +00:00 |
|
|
Jasper
|
c5b87e92b5
|
fix(desktop): scope app events by extension (#11486)
|
2026-08-24 18:50:02 +00:00 |
|
|
Jasper
|
9a4e043562
|
fix(acp): restrict project updates to visible sessions (#11487)
|
2026-08-24 16:51:22 +00:00 |
|
|
Jasper
|
ce0bc7c567
|
fix(checks): reject symlinked check sources (#11489)
|
2026-08-24 16:51:01 +00:00 |
|
|
Jasper
|
bcde80a63b
|
fix: keep recalled history agent-visible (#11490)
|
2026-08-24 16:50:45 +00:00 |
|
|
Alex Hancock
|
dd469e80b6
|
fix: remove goose tui command (#11484)
|
2026-08-24 14:59:55 +00:00 |
|
|
Matt Van Horn
|
3a65236210
|
fix: honest compaction failure message and fast-fail when no tool responses exist (#10500)
Signed-off-by: Michael Neale <michael.neale@gmail.com>
Co-authored-by: Matt Van Horn <455140+mvanhorn@users.noreply.github.com>
Co-authored-by: Michael Neale <michael.neale@gmail.com>
|
2026-08-24 13:59:33 +00:00 |
|
|
Michael Neale
|
2eb3ab1001
|
docs: correct Telegram gateway setup (#11527)
|
2026-08-24 19:22:58 +10:00 |
|
|
Abhijay Jain
|
3cfe512ad2
|
feat(providers): add TrustedRouter declarative provider (#11422)
Signed-off-by: Abhijay Jain <Abhijay007j@gmail.com>
|
2026-08-24 08:04:25 +00:00 |
|
|
Lifei Zhou
|
3d9200dd3b
|
fix (desktop): fix chat input freeze after opening model picker (#11525)
|
2026-08-24 07:58:22 +00:00 |
|
|
Vincenzo Palazzo
|
bd16fbfbbe
|
feat(providers): add OpenCode Zen gateway as a declarative provider (#10939)
|
2026-08-24 07:38:08 +00:00 |
|
|
Jasper
|
92caef37f8
|
fix(providers): bound non-streaming JSON responses (#11109)
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
|
2026-08-24 05:08:24 +00:00 |
|
|
Jasper
|
c5e5929a64
|
fix(recipe): reject non-object response schemas (#11478)
|
2026-08-23 23:27:17 +00:00 |
|
|
Jasper
|
c0c5353782
|
fix(security): clear custom provider transition secrets (#11467)
|
2026-08-23 23:17:35 +00:00 |
|
|
Jasper
|
1c4a6912f5
|
fix(desktop): pin renderer ACP certificates (#11485)
|
2026-08-23 23:08:45 +00:00 |
|
|
Jasper
|
74393e90bf
|
fix(security): require fresh file parameter input (#11455)
|
2026-08-23 23:05:42 +00:00 |
|
|
Jasper
|
8d844eecbd
|
fix(security): escape OAuth callback content (#11479)
|
2026-08-21 21:23:59 +00:00 |
|
|
Jasper
|
8c1f972772
|
fix(security): sanitize Unicode tags in MCP prompts (#11453)
|
2026-08-21 19:29:21 +00:00 |
|
|
dependabot[bot]
|
c86f6dcf0d
|
chore(deps): bump the cargo-minor-and-patch group with 5 updates (#11463)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Douwe Osinga <douwe.osinga@gmail.com>
|
2026-08-21 15:23:45 -04:00 |
|
|
dependabot[bot]
|
4ac063f664
|
chore(deps): bump symphonia from 0.5.5 to 0.6.1 (#11465)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Douwe Osinga <douwe.osinga@gmail.com>
|
2026-08-21 15:20:09 -04:00 |
|
|
dependabot[bot]
|
37044f956b
|
chore(deps): bump dawidd6/action-download-artifact from 21 to 23 (#11461)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-08-21 14:51:23 -04:00 |
|
|
dependabot[bot]
|
469bea969a
|
chore(deps): bump safemlx-lm from 0.1.5 to 0.4.1 (#11464)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-08-21 14:42:49 -04:00 |
|
|
dependabot[bot]
|
b705aa7ed1
|
chore(deps): bump docker/setup-buildx-action from 4.2.0 to 4.3.0 (#11462)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-08-21 14:42:46 -04:00 |
|
|
dependabot[bot]
|
3de84ddb1b
|
chore(deps): bump gradle/actions/setup-gradle from 6.2.0 to 6.3.0 (#11460)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-08-21 14:42:43 -04:00 |
|
|
dependabot[bot]
|
34c8d709b3
|
chore(deps): bump docker/login-action from 4.5.2 to 4.6.0 (#11459)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-08-21 14:42:40 -04:00 |
|
|
dependabot[bot]
|
4f01e39121
|
chore(deps): bump step-security/harden-runner from 2.20.1 to 2.21.0 (#11458)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-08-21 14:42:38 -04:00 |
|
|
Jasper
|
45b322c1df
|
fix(security): honor plugin enablement for skills (#11439)
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
|
2026-08-21 15:36:31 +00:00 |
|
|
Jasper
|
290f508bfb
|
docs: keep GitHub comments concise (#11447)
Signed-off-by: Jasper Hugo <jasper@jasperhugo.com>
|
2026-08-21 13:36:05 +00:00 |
|
|
Jasper
|
10cd3acd4a
|
fix(claude-code): protect system prompt transport (#11441)
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
|
2026-08-21 13:34:36 +00:00 |
|
|
Jasper
|
7f4eeac7ad
|
fix(ui): bind ACP permissions to request generations (#11415)
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
|
2026-08-21 08:33:51 +00:00 |
|
|
Wolfe-James
|
a5de37814a
|
fix(agents): fail fast when a recipe's structured response can't reach an ACP-bridged provider (#11307)
Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com>
Co-authored-by: Lifei Zhou <lifei@squareup.com>
|
2026-08-21 08:31:40 +00:00 |
|
|
Abhijay Jain
|
4078158c01
|
fix(providers): inform user of clipboard copy and remove copilot auth retry on timeout (#11160)
Signed-off-by: Abhijay Jain <Abhijay007j@gmail.com>
Co-authored-by: Lifei Zhou <lifei@squareup.com>
|
2026-08-21 07:07:11 +00:00 |
|
|
Vincenzo Palazzo
|
384b6ccfd3
|
feat(desktop): select saved recipes when creating a schedule (#10892)
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Co-authored-by: Lifei Zhou <lifei@squareup.com>
|
2026-08-21 05:38:29 +00:00 |
|
|
Douwe Osinga
|
7f8685a6f8
|
More provider test scripts (#10515)
Signed-off-by: Michael Neale <14976+michaelneale@users.noreply.github.com>
Co-authored-by: Douwe M Osinga <douwe@sidewalklabs.com>
Co-authored-by: Michael Neale <14976+michaelneale@users.noreply.github.com>
Co-authored-by: Lifei Zhou <lifei@squareup.com>
|
2026-08-21 05:31:46 +00:00 |
|
|
Lifei Zhou
|
d8cc74fc0e
|
cli: remove recipe secret discovery (#11435)
|
2026-08-21 04:16:12 +00:00 |
|
|
nathansmithopenclaw-alt
|
c274feb016
|
fix(openrouter): escape Gemini tool response ref keys (#11276)
Signed-off-by: nathansmithopenclaw-alt <273889179+nathansmithopenclaw-alt@users.noreply.github.com>
Signed-off-by: Michael Neale <michael.neale@gmail.com>
Co-authored-by: nathansmithopenclaw-alt <273889179+nathansmithopenclaw-alt@users.noreply.github.com>
Co-authored-by: Michael Neale <michael.neale@gmail.com>
|
2026-08-21 03:29:23 +00:00 |
|
|
Jasper
|
d830653309
|
fix(security): honor MCP tool model visibility in Code Mode (#11425)
|
2026-08-21 02:34:38 +00:00 |
|
|
jonathan MERCIER
|
48d480f911
|
fix(providers): estimate cost for Azure Foundry models via inferred catalog pricing (#11264)
Signed-off-by: Michael Neale <michael.neale@gmail.com>
Co-authored-by: Michael Neale <michael.neale@gmail.com>
|
2026-08-21 01:52:41 +00:00 |
|
|
Abhijay Jain
|
8e8b674cf0
|
feat(providers): add Gondola as declarative OpenAI-compatible provider (#11421)
Signed-off-by: Abhijay Jain <Abhijay007j@gmail.com>
|
2026-08-21 01:47:18 +00:00 |
|
|
Steven Pousty
|
f45ccd46f7
|
feat(otel): add request params, response metadata, tool call parity, and agent identification (#11261)
Co-authored-by: Jack Amadeo <jackamadeo@squareup.com>
|
2026-08-21 01:46:22 +00:00 |
|
|
Wolfe-James
|
1f6c7524e1
|
fix(providers): coalesce consecutive Thinking blocks in collect_stream (#11317)
Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com>
|
2026-08-21 01:27:58 +00:00 |
|
|
Tymofii Pidlisnyi
|
d0fc739a4c
|
feat(hooks): add PreToolUseResult event and stable tool_call_id across tool lifecycle (#11120)
Signed-off-by: Tymofii Pidlisnyi <171286556+aeoess@users.noreply.github.com>
Signed-off-by: Douwe Osinga <douwe.osinga@gmail.com>
Co-authored-by: Tymofii Pidlisnyi <171286556+aeoess@users.noreply.github.com>
Co-authored-by: Douwe Osinga <douwe.osinga@gmail.com>
|
2026-08-21 00:38:53 +00:00 |
|
|
Alex Hancock
|
2f5169af35
|
add MCP conformance tests to goose CI (combines #10800 + #10801) (#10940)
Signed-off-by: Jack Amadeo <jackamadeo@squareup.com>
Co-authored-by: Jack Amadeo <jackamadeo@squareup.com>
|
2026-08-20 21:51:53 +00:00 |
|
|
Alex Hancock
|
810bb68fff
|
feat(desktop): sort configured providers to the top of the provider list (#11409)
|
2026-08-20 18:52:42 +00:00 |
|
|
Jasper
|
3479a15c4c
|
fix(cli): refuse symlink diagnostics outputs (#11398)
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
|
2026-08-20 15:59:29 +00:00 |
|
|
Alex Hancock
|
fc6311acb7
|
test(plugins): isolate GOOSE_PATH_ROOT in discovery tests (#11407)
|
2026-08-20 14:59:39 +00:00 |
|
|
Jasper
|
0ed7b02d5f
|
fix(config): serialize secret mutations (#11388)
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
|
2026-08-20 14:03:53 +00:00 |
|
|
Jasper
|
8343c4a16b
|
fix: decouple source file and tool response limits (#11391)
|
2026-08-20 14:03:51 +00:00 |
|
|
dependabot[bot]
|
ba7ffd3efa
|
chore(deps): bump pctx_code_mode from 0.4.1 to 0.5.0 (#11245)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Douwe Osinga <douwe@block.xyz>
Co-authored-by: Douwe Osinga <douwe.osinga@gmail.com>
|
2026-08-20 13:19:20 +00:00 |
|