# changelog

author: Douglas Kosovic <doug@uq.edu.au> - 1.20.20-5
changelog:
  - Add README.Fedora for Fedora or README.EPEL for EPEL
  - Use (go-l2tp or xl2tpd) dependency for Fedora 43 to handle upgrades
    from earlier Fedora versions that had xl2tpd installed.


author: Douglas Kosovic <doug@uq.edu.au> - 1.52.0-1
changelog:
  - Updated to 1.52.0 release
    Verify file permissions for private connections to prevent unprivileged
    user from using other user's certs (CVE-2025-9615)
  - Ensure NetworkManager dependency has CVE-2025-9615 update.
  - Correct sed example in generated README.Fedora and README.EPEL files.


author: Douglas Kosovic <doug@uq.edu.au> - 1.52.2-1
changelog:
  - Updated to 1.52.2 release which has experimental IPv6 support.
  - Update CVE-2025-9615 related Requires and BuildRequires.
  - Fix typos found by codespell.


author: Bradley G Smith <bradley.g.smith@gmail.com> - 2.2.5-1
changelog:
  - Update to release v2.2.5
  - Resolves: rhbz#2464270
  - Resolves CVE-2026-50195
  - Resolves CVE-2026-53488
  - Resolves CVE-2026-53492
  - Resolves CVE-2026-53489
  - Resolves CVE-2026-47262


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2437^20260630.5223a47630df-1
changelog:
  - Update to version 2437
  - Correct and improve License expressions and license text file handling
  - Deal with upstream vendoring of a header from the Rust cxx crate
  - Invoke ninja via the %ninja_build macro


author: Rodolfo Olivieri <rolivier@redhat.com> - 1.36.0-1
changelog:
  - Update to version 1.36.0
  - goose review local code review command
  - /goal command for agent self-evaluation before finishing
  - Hooks system for PreToolUse denial and extensibility
  - Slash commands (built-in, skill, recipe) in ACP server
  - Open-plugins generalization and skills
  - Summon subagent instructions
  - Unified thinking effort control across all providers
  - NEAR AI Cloud provider
  - Scaleway provider
  - Vercel AI Gateway provider
  - Atomic Chat declarative OpenAI-compatible provider
  - Routstr declarative provider
  - FuturMix provider
  - oMLX declarative provider
  - Harbor eval runner
  - MAX_CODE_BLOCK_LINES configurable via env vars
  - Honor GOOSE_FAST_MODEL env var in ModelConfig
  - GPT-5.5 in known models
  - Paginate ACP session list
  - Pass session cwd param to ACP providers
  - Opt-in to Vercel AI gateway leaderboard
  - GOOSE_OAUTH_CALLBACK_PORT for stable OAuth redirect_uri
  - Proactive OAuth token refresh to avoid re-auth on every session
  - Strip chain-of-thought markers from custom provider output
  - Nushell terminal and completion support
  - Optional --parameters flag for scheduled recipes
  - Quarterly option for scheduler
  - GitHub Copilot /responses API support
  - Projects as backend sources with system prompt injection
  - Linux musl CLI builds
  - GOOSE_DISABLE_TOOL_CALL_SUMMARY env var
  - Tolerate missing responses output
  - Serialize per-session agent creation to stop duplicate MCP init
  - Respect GOOSE_MAX_TURNS in gateway sessions
  - Send empty object instead of null for Anthropic tool_use input
  - Preserve thinking content for provider context
  - Mention configurable timeout env vars in Ollama stream stall error
  - Include full recipe parameter details in load/discovery output
  - Use context limit from /model/info for LiteLLM custom models
  - Plain > prompt instead of goose emoji in CLI
  - Emit trace_output as span attribute instead of event
  - Check file fallback when keyring has no entry
  - Use current_exe() instead of PATH lookup when spawning goose
  - Set TCP_USER_TIMEOUT on streamable HTTP clients
  - Activate custom provider after adding via configure
  - Flush OTLP traces reliably on exit with configurable timeout
  - Reduce excessive MISSING_TRANSLATION warnings for fallback locales
  - Improve Telegram gateway error reporting and connection reliability
  - Zero out cost for local providers (ollama, local)
  - Persist accumulated cost in session DB to survive reload
  - Prevent tool-use marker leakage in toolshim output
  - Re-apply canonical limits when delegate overrides model
  - Report cumulative total_tokens in stream-json/json output
  - Refresh GCP metadata server token on expiration
  - Apply request_params to outgoing OpenAI API payload
  - Gemini 3.x known_location Global routing entries
  - Coalesce streaming Thinking deltas and list available tools on not-found
  - Honor Retry-After on 429 responses
  - Preserve user-set session name for recipe-based chats
  - Enforce exp independently of MAX_TOKEN_AGE_SECONDS in OIDC proxy
  - Omit max_tokens for OpenAI-compatible requests when unset
  - Set correct MCP-app host capabilities
  - Normalize nullable schemas for Vertex Gemini compatibility
  - Isolate GitHub recipe temp paths
  - Set X-Initiator header on GitHub Copilot requests
  - Honor dynamic_models: false in declarative provider configs
  - Cache trailing message for stable prefix across Bedrock agent turns
  - Case-insensitive model name lookup for context_limit
  - Handle Bedrock ReasoningContent blocks gracefully
  - Ensure parallel tool image responses don't interleave on Databricks
  - Insert tool pair summaries at chronological position in conversation
  - Enable SQLite foreign key enforcement in session pool
  - Accept null tool_call arguments in OpenAI streaming chunks
  - Synchronously reap ACP child to avoid SIGCHLD race
  - Elicitation fixes
  - Return 400 instead of panicking on invalid CSP header value
  - Keep SSE reconnect loop alive on long disconnects
  - Convert quoted numeric config values to numbers if needed
  - Use appInfo instead of clientInfo in MCP Apps init handshake
  - Use mkdir -p for self-test workspace initialization
  - Exclude preprompt from session title generation
  - Prevent login-shell PATH probe from suspending goose on startup
  - Handle non-interactive terminal in goose configure
  - Use python3 in developer extension instructions
  - Build summon instructions per turn
  - Protocol cleanup
  - Dependency hygiene
  - Prompt injection mitigation: update pattern-based detection to reduce FPs
  - Surface resolved Databricks model metadata
  - Include request URL in provider error messages
  - Flag for login shell PATH
  - Structured per-provider config block, non-destructive provider switching
  - Preserve thinking content for providers that require it
  - Dynamically refresh skill instructions each turn
  - Show tool name in approval prompt
  - Location column in CLI skills table
  - Consolidate logging setup into shared helper
  - Support optional api_key configuration for declarative openai-engine providers
  - Recipe discovery and execution in ACP server
  - Group consecutive tool calls into one summarized chain card
  - Replace artifact heuristics and regexes with protocol messages
  - Improvements to LM Studio declarative provider
  - Parallelize provider resolution and eagerly init SQLite pool
  - ACP streamable HTTP spec compliance
  - Refresh onboarding when provider catalog loads
  - Redesign extensions configuration
  - Redesign skills library backend
  - Mergeable configs cleanup


author: Sam Doran <sdoran@redhat.com> - 1.38.0-1
changelog:
  - Update to version 1.38.0
  - Canonical thinking modes across providers
  - Surface Anthropic stream refusals as visible errors
  - ACP secret key support at goose serve endpoint
  - Unified OTLP logging schema for cross-tool detection
  - Opt-in ACP last message snippets for sessions
  - Custom ACP method to get session info
  - Steering messages with ACP
  - ACP list sessions with keyword and type filter
  - ACP thinking effort config option
  - Image read tool
  - ACP methods for config extensions
  - Custom notifications only when ACP client specifies capability
  - Session import functionality
  - Replay ACP images on session load
  - Raw provider supported models over ACP
  - ACP session system prompt setter
  - Perplexity as declarative OpenAI-compatible provider
  - Alibaba (Qwen via DashScope) declarative provider
  - Configurable tool output size limit via GOOSE_MAX_TOOL_RESPONSE_SIZE
  - /model slash command in CLI for session model switching
  - Databricks AI Gateway provider
  - Expose built-in skills through sources list ACP calls
  - Replace raw config and secret methods in ACP
  - Support Google model inventory refresh
  - Correctly map ollama_cloud to canonical provider and update max tokens
  - Incorrect max tokens values for Groq provider
  - Classify Bedrock ValidationException as ExecutionError
  - Page through all Databricks AI Gateway v2 endpoints when listing models
  - Preserve unparseable extension entries during config refresh
  - Forward ACP server context window size to clients
  - Skip OTLP signals when protocol=grpc to avoid background-thread panic
  - Make Azure api-version query param optional
  - Stricter GGUF requirements, auto detection of tool calling support, fixed thinking output parsing
  - Remove unused fetch-metadata IPC handler (SSRF)
  - Replace Venice custom provider with declarative config
  - Coalesce streaming chunks under one message id in ACP
  - Require extension_name on read_resource
  - Seed provider handoff history in ACP
  - Handle ACP requests concurrently
  - Mark stream decode errors retryable
  - Create goose-providers crate with canonical models and types
  - ACP session setup refactor
  - LRU cache for token counting
  - Replace review subprocess timeout with turn limits
  - Honor blocking Stop hook decisions
  - Forward custom headers through OAuth connect path
  - Prefer goose aliases for Databricks v2 inventory
  - Mount ACP in goosed server for iterative migration
  - Remove threads layer, use sessions directly for ACP
  - Install plugins to ~/.agents/plugins
  - Switch to official new rust-sdk for ACP
  - Install plugins support
  - Deduplicate _goose/providers/list RPC call at startup
  - Translate ACP host capabilities into MCP initialization
  - Prompt injection mitigation enabled by default for internal users
  - Re-adjust pattern-based detection confidence scores
  - Add directionality to egress logging
  - Scheduled recipe session params
  - Unscheduling a recipe should not delete them
  - Read prompted file parameters in recipes


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.9.21-1
changelog:
  - Update to 1.9.21
  - Security fix: CVE-2026-41054 — privilege escalation via command socket
  - Fix semaphore error handling (SEM_FAILED vs NULL)
  - Fix /dev/shm permissions (use 01777 with sticky bit)


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.9.23-1
changelog:
  - Update to 1.9.23
  - Security: use O_EXCL with sem_open to prevent semaphore pre-planting attacks
  - Security: fix OOB memory access in safein()/safeout() on socket errors
  - Security: reject command socket connections from different user namespaces
  - Security: use O_NOFOLLOW for PID file to prevent symlink attacks
  - Harden: open random device with O_CLOEXEC, restrict semaphore to 0600
  - Fix stale semaphore recovery after SIGKILL
  - Fix compilation when NO_COMMAND_MODE is defined


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.9.23-2
changelog:
  - Add SELinux policy module to allow semaphore creation in /dev/shm
  - Add rpminspect.yaml to waive pre-existing annocheck false positive


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.9.23-3
changelog:
  - Fix rpminspect.yaml: use annocheck failure_severity instead of inspections toggle
    (annocheck is a security inspection and cannot be disabled via inspections section)


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.9.24-1
changelog:
  - Update to 1.9.24
  - Disable command mode in long-running service (--no-command flag)
  - Enable PrivateNetwork=true in systemd service
  - Remove SELinux policy module (no longer needed without command mode)


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.9.25-1
changelog:
  - Update to 1.9.25
  - Fix initramfs switch-root failure caused by --no-command (BZ#2491739)
  - Add haveged-initramfs.service for use inside the initramfs


author: Dominik 'Rathann' Mierzejewski <dominik@greysector.net> - 2.104.1-1
changelog:
  - update to 2.104.1 (resolves rhbz#2463822)
  - exclude uv_test.go, which requires an Artifactory instance


author: Paul Howarth <paul@city-fan.org> - 1.19-1
changelog:
  - Update to 1.19
    - New maintainer
    - This release resolves CVE-2011-3599
    - Added a statement to recommend against using DSA
    - Fixed a few long standing bugs
    - The build process is moved to Dist::Zilla
  - Switch source URL from cpan.metacpan.org to www.cpan.org


author: Paul Howarth <paul@city-fan.org> - 1.20-1
changelog:
  - Update to 1.20
    - This module is now marked as deprecated: Crypt-DSA-GMP is a possible
      replacement
    - Improve the call to IPC::Open3::open3
    - Replace two arg open (CVE-2026-8704)
    - Replace rand() (CVE-2026-8700)
    - Add a security policy
    - Add use warnings
    - Typo fix (CPAN RT#86424)
  - Use existing dependency Crypt::URandom rather than Crypt::SysRandom to
    generate seed in Crypt::DSA::KeyChain; both modules use getrandom() as
    the backend on Linux, and Crypt::SysRandom is currently not available
    in EPEL


author: Paul Howarth <paul@city-fan.org> - 1.21-1
changelog:
  - Update to 1.21
    - Fixed key material reuse for multiple signing events (CVE-2026-12205,
      CWE-323)
      - sign() reused the DSA nonce k across signatures (r and k^-1 were cached
        on the key and not regenerated), allowing private-key recovery from two
        signatures over different messages
      - Now generates a fresh nonce per signature
      - Keys used to sign more than once with an affected version should be
        considered compromised


author: Paul Howarth <paul@city-fan.org> - 1.22-1
changelog:
  - Update to 1.22
    - Hardening: Use a fresh, independent CSPRNG witness every round
    - Security fix: Modulo bias in key generation (CVE-2026-14570); an attack
      with hundreds of signatures could lead to full private-key compromise;
      keys should be considered compromised and new keys should be generated


author: Paul Howarth <paul@city-fan.org> - 1.02-8
changelog:
  - Use relative symlinks rather than absolute symlinks in test (GH#51)
  - Use %{make_build} and %{make_install}


author: Paul Howarth <paul@city-fan.org> - 1.03-1
changelog:
  - Update to 1.03 (rhbz#2492167)
    - Fix tests to work with newer Archive::Tar (GH#51)
    - Check link errors and warnings while extracting an archive


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 6.40.02-1
changelog:
  - Update to 6.40.02
  - Rename the jupyroot and distrdf packages to reflect that they are
    now submodules of the main pyyhon package
  - New subpackages: root-package graf3d-glad, root-package net-curl,
    root-package tmva-sofie-parser-python, root-package tree-ml,
    root-package histv7util
  - Dropped patches: 2
  - New patches: 7


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.8.0-1
changelog:
  - Update to 3.8.0 (close RHBZ#2492139)
  - Run tests with pytest, as upstream is gradually adopting it


author: David Trudgian <dtrudg@sylabs.io> - 4.4.2-1
changelog:
  - Upgrade to 4.4.2 upstream version.
  - Fix rhbz#2452368
  - Fix rhbz#2453084
  - Fix rhbz#2455643
  - Fix rhbz#2458928
  - Fix CVE-2026-47215


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.1.2-1
changelog:
  - Update to 1.1.2 upstream release
  - Resolves: rhbz#2494057
  - Update License and SourceLicense fields


