PigeonCraft
|
66e395b749
|
Fix MCP sampling for reasoning-first responses (#11092)
Co-authored-by: Douwe Osinga <douwe.osinga@gmail.com>
|
2026-08-26 17:36:07 +00:00 |
|
Alex Hancock
|
2b9cd967e9
|
fix(bedrock): prefer HTTP bearer auth when a bearer token is configured (#11562)
|
2026-08-26 16:11:12 +00:00 |
|
tulsi
|
18c77b7b28
|
feat: title sessions by subject, not workflow step (#11135)
Co-authored-by: Douwe Osinga <douwe.osinga@gmail.com>
|
2026-08-26 16:04:22 +00:00 |
|
Kalvin C
|
b9b671c6c3
|
feat(provider): discover Databricks Unity Catalog model services (#11575)
|
2026-08-26 15:48:55 +00:00 |
|
Jack Amadeo
|
6357f73ea5
|
fix: unify context limit resolution behind provider API (#11213)
Signed-off-by: Jack Amadeo <jackamadeo@squareup.com>
|
2026-08-26 14:34:16 +00:00 |
|
Jasper
|
73b9938d73
|
fix(security): enforce per-turn model tool allowlists (#11426)
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
|
2026-08-26 13:45:12 +00:00 |
|
SynthLuvr
|
9a05f0207c
|
feat(cli): load extensions in the background so the prompt is immediately usable (#10403)
Co-authored-by: Jasper Hugo <jasper@jasperhugo.com>
|
2026-08-26 11:19:05 +00:00 |
|
Jasper
|
0ad009d153
|
fix(security): stop exposing provider secret suffixes (#11476)
|
2026-08-26 11:02:08 +00:00 |
|
Jasper
|
585d481fcd
|
fix(security): restrict code mode callback output (#11471)
|
2026-08-26 11:02:05 +00:00 |
|
Jasper
|
0b87ba5a04
|
fix(security): restrict app management tools (#11470)
|
2026-08-26 11:02:01 +00:00 |
|
Jasper
|
86800d42b8
|
fix(security): preserve session extension identities (#11420)
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
|
2026-08-26 11:01:53 +00:00 |
|
Jasper
|
9843e0ef34
|
fix(developer): bound local image reads (#11419)
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
|
2026-08-26 11:01:48 +00:00 |
|
Jasper
|
9a6127b34b
|
fix(sources): confine agent listing to source roots (#11444)
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
|
2026-08-26 11:01:45 +00:00 |
|
Jack Amadeo
|
724250c424
|
move inference operation into goose-agent (#11294)
Signed-off-by: Jack Amadeo <jackamadeo@squareup.com>
Signed-off-by: Michael Neale <michael.neale@gmail.com>
Co-authored-by: Michael Neale <michael.neale@gmail.com>
|
2026-08-25 17:58:15 +00:00 |
|
Alex Hancock
|
eb188752d2
|
fix(oauth): keep using valid MCP access tokens without a refresh token (#11324)
|
2026-08-25 14:21:44 +00:00 |
|
marquezini
|
b0d5ae6fe5
|
fix(context): deduplicate parallel tool-pair summaries (#11195)
Co-authored-by: Lifei Zhou <lifei@squareup.com>
|
2026-08-25 07:30:43 +00:00 |
|
Michael Neale
|
bcbf3c7723
|
Make roaming an opt-in goose-cli feature (default-off, stays in-tree) (#11516)
Signed-off-by: Michael Neale <michael.neale@gmail.com>
Co-authored-by: Michael Neale <14976+michaelneale@users.noreply.github.com>
Co-authored-by: pstayets <philip@vulturelabs.com>
Co-authored-by: pstayet <philipstayetski2416@gmail.com>
Co-authored-by: Colin Gauvin <colin@gauvin.id>
|
2026-08-25 07:22:46 +00:00 |
|
Jasper
|
f1d32e8dbb
|
fix: exclude Git metadata from project hints (#11148)
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
|
2026-08-25 05:13:05 +00:00 |
|
Jasper
|
520296328f
|
fix(bedrock): sanitize hidden Unicode in tools (#11121)
|
2026-08-25 04:25:17 +00:00 |
|
Kushagra Udai
|
98dd5305b9
|
fix: Avoid sending images to non vision capable models (#11496)
Co-authored-by: Kushagra Udai <your.email@example.com>
|
2026-08-25 02:22:06 +00:00 |
|
Tymofii Pidlisnyi
|
ff5935fa12
|
feat(hooks): add on_failure block for PreToolUse hooks (#11449)
Signed-off-by: Tymofii Pidlisnyi <171286556+aeoess@users.noreply.github.com>
Co-authored-by: Tymofii Pidlisnyi <171286556+aeoess@users.noreply.github.com>
Co-authored-by: Lifei Zhou <lifei@squareup.com>
|
2026-08-25 02:08:37 +00:00 |
|
Lifei Zhou
|
da45bd17b0
|
perf(session): limit sessions before counting messages (#11521)
|
2026-08-25 00:55:23 +00:00 |
|
Abhijay Jain
|
e0494d1d9f
|
fix(shell): reject cmd.exe commands containing newlines (#11537)
Signed-off-by: Abhijay Jain <Abhijay007j@gmail.com>
|
2026-08-25 00:44:49 +00:00 |
|
Jasper
|
2dbec3bf64
|
fix(security): recognize Windows package runners (#11466)
|
2026-08-24 18:52:37 +00:00 |
|
Jasper
|
11269687a8
|
fix(security): fail closed on malformed tool visibility (#11474)
|
2026-08-24 18:51:42 +00:00 |
|
Jasper
|
df147d32d4
|
fix(security): give permission denies precedence (#11477)
|
2026-08-24 18:51:25 +00:00 |
|
Jasper
|
6808b4d15b
|
fix(recipes): confine library writes (#11482)
|
2026-08-24 18:50:15 +00:00 |
|
Jasper
|
9a4e043562
|
fix(acp): restrict project updates to visible sessions (#11487)
|
2026-08-24 16:51:22 +00:00 |
|
Jasper
|
ce0bc7c567
|
fix(checks): reject symlinked check sources (#11489)
|
2026-08-24 16:51:01 +00:00 |
|
Jasper
|
bcde80a63b
|
fix: keep recalled history agent-visible (#11490)
|
2026-08-24 16:50:45 +00:00 |
|
Jasper
|
c5e5929a64
|
fix(recipe): reject non-object response schemas (#11478)
|
2026-08-23 23:27:17 +00:00 |
|
Jasper
|
8d844eecbd
|
fix(security): escape OAuth callback content (#11479)
|
2026-08-21 21:23:59 +00:00 |
|
dependabot[bot]
|
4ac063f664
|
chore(deps): bump symphonia from 0.5.5 to 0.6.1 (#11465)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Douwe Osinga <douwe.osinga@gmail.com>
|
2026-08-21 15:20:09 -04:00 |
|
Jasper
|
45b322c1df
|
fix(security): honor plugin enablement for skills (#11439)
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
|
2026-08-21 15:36:31 +00:00 |
|
Jasper
|
10cd3acd4a
|
fix(claude-code): protect system prompt transport (#11441)
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
|
2026-08-21 13:34:36 +00:00 |
|
Wolfe-James
|
a5de37814a
|
fix(agents): fail fast when a recipe's structured response can't reach an ACP-bridged provider (#11307)
Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com>
Co-authored-by: Lifei Zhou <lifei@squareup.com>
|
2026-08-21 08:31:40 +00:00 |
|
Abhijay Jain
|
4078158c01
|
fix(providers): inform user of clipboard copy and remove copilot auth retry on timeout (#11160)
Signed-off-by: Abhijay Jain <Abhijay007j@gmail.com>
Co-authored-by: Lifei Zhou <lifei@squareup.com>
|
2026-08-21 07:07:11 +00:00 |
|
nathansmithopenclaw-alt
|
c274feb016
|
fix(openrouter): escape Gemini tool response ref keys (#11276)
Signed-off-by: nathansmithopenclaw-alt <273889179+nathansmithopenclaw-alt@users.noreply.github.com>
Signed-off-by: Michael Neale <michael.neale@gmail.com>
Co-authored-by: nathansmithopenclaw-alt <273889179+nathansmithopenclaw-alt@users.noreply.github.com>
Co-authored-by: Michael Neale <michael.neale@gmail.com>
|
2026-08-21 03:29:23 +00:00 |
|
Jasper
|
d830653309
|
fix(security): honor MCP tool model visibility in Code Mode (#11425)
|
2026-08-21 02:34:38 +00:00 |
|
jonathan MERCIER
|
48d480f911
|
fix(providers): estimate cost for Azure Foundry models via inferred catalog pricing (#11264)
Signed-off-by: Michael Neale <michael.neale@gmail.com>
Co-authored-by: Michael Neale <michael.neale@gmail.com>
|
2026-08-21 01:52:41 +00:00 |
|
Abhijay Jain
|
8e8b674cf0
|
feat(providers): add Gondola as declarative OpenAI-compatible provider (#11421)
Signed-off-by: Abhijay Jain <Abhijay007j@gmail.com>
|
2026-08-21 01:47:18 +00:00 |
|
Steven Pousty
|
f45ccd46f7
|
feat(otel): add request params, response metadata, tool call parity, and agent identification (#11261)
Co-authored-by: Jack Amadeo <jackamadeo@squareup.com>
|
2026-08-21 01:46:22 +00:00 |
|
Tymofii Pidlisnyi
|
d0fc739a4c
|
feat(hooks): add PreToolUseResult event and stable tool_call_id across tool lifecycle (#11120)
Signed-off-by: Tymofii Pidlisnyi <171286556+aeoess@users.noreply.github.com>
Signed-off-by: Douwe Osinga <douwe.osinga@gmail.com>
Co-authored-by: Tymofii Pidlisnyi <171286556+aeoess@users.noreply.github.com>
Co-authored-by: Douwe Osinga <douwe.osinga@gmail.com>
|
2026-08-21 00:38:53 +00:00 |
|
Alex Hancock
|
2f5169af35
|
add MCP conformance tests to goose CI (combines #10800 + #10801) (#10940)
Signed-off-by: Jack Amadeo <jackamadeo@squareup.com>
Co-authored-by: Jack Amadeo <jackamadeo@squareup.com>
|
2026-08-20 21:51:53 +00:00 |
|
Alex Hancock
|
fc6311acb7
|
test(plugins): isolate GOOSE_PATH_ROOT in discovery tests (#11407)
|
2026-08-20 14:59:39 +00:00 |
|
Jasper
|
0ed7b02d5f
|
fix(config): serialize secret mutations (#11388)
Signed-off-by: Jasper Hugo <jasper@spiral.xyz>
|
2026-08-20 14:03:53 +00:00 |
|
Jasper
|
8343c4a16b
|
fix: decouple source file and tool response limits (#11391)
|
2026-08-20 14:03:51 +00:00 |
|
dependabot[bot]
|
ba7ffd3efa
|
chore(deps): bump pctx_code_mode from 0.4.1 to 0.5.0 (#11245)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Douwe Osinga <douwe@block.xyz>
Co-authored-by: Douwe Osinga <douwe.osinga@gmail.com>
|
2026-08-20 13:19:20 +00:00 |
|
Jasper
|
8648f2d060
|
fix(security): suppress sensitive OTLP traces (#11381)
|
2026-08-20 13:16:36 +00:00 |
|
Lee-Si-Yoon
|
f70cb64d3f
|
feat(openrouter): forward session_id and add app category header (#10868)
|
2026-08-20 13:13:33 +00:00 |
|