Script 'mail_helper' called by obssrc
Hello community,

here is the log from the commit of package goose for openSUSE:Factory checked 
in at 2026-09-07 11:30:12
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/goose (Old)
 and      /work/SRC/openSUSE:Factory/.goose.new.1265 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Package is "goose"

Mon Sep  7 11:30:12 2026 rev:4 rq:1375755 version:1.49.0

Changes:
--------
--- /work/SRC/openSUSE:Factory/goose/goose.changes      2026-08-28 
19:54:21.941622186 +0200
+++ /work/SRC/openSUSE:Factory/.goose.new.1265/goose.changes    2026-09-07 
11:31:59.221585627 +0200
@@ -1,0 +2,27 @@
+Fri Sep  4 07:56:30 UTC 2026 - Martin Pluskal <[email protected]>
+
+- Update to version 1.49.0:
+  * CLI extensions load in the background, so the prompt is usable
+    before every MCP server has finished starting
+  * "goose session" gained --system, matching "goose run"
+  * custom providers can fetch their credential by running a
+    command, so short-lived tokens refresh without a restart
+  * new provider Opper; Databricks discovers Unity Catalog model
+    services; Z.ai default model id fixed, GLM-5.3-flash added
+  * configurable Anthropic prompt-cache TTL (5m or 1h)
+  * context limits resolve centrally through the provider API, and
+    limits stored in old sessions are ignored
+  * MCP OAuth keeps a still-valid access token when the server
+    issued no refresh token
+  * the keyring unlock no longer times out mid-password
+  * hardening: per-turn model tool allowlists, restricted extension
+    tool dispatch, provider secret suffixes no longer exposed,
+    agent listing confined to its source roots, bounded local image
+    reads
+  * see upstream's release notes for the full list
+- Rebase goose-system-libdbus.patch
+- Bump bundled(aws-lc) to 5.7.0: aws-lc-sys moved 0.44.0 -> 0.45.0
+- Re-derive the License tag from the new vendored crate graph (1328
+  crates vendored, 612 linked): the 13 SPDX identifiers are unchanged
+
+-------------------------------------------------------------------

Old:
----
  goose-1.48.0.tar.zst

New:
----
  goose-1.49.0.tar.zst

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Other differences:
------------------
++++++ goose.spec ++++++
--- /var/tmp/diff_new_pack.brQdN4/_old  2026-09-07 11:32:17.089211997 +0200
+++ /var/tmp/diff_new_pack.brQdN4/_new  2026-09-07 11:32:17.091212067 +0200
@@ -18,7 +18,7 @@
 
 %global goose_features 
aws-providers,nostr,otel,rustls-tls,system-keyring,disable-update
 Name:           goose
-Version:        1.48.0
+Version:        1.49.0
 Release:        0
 Summary:        Extensible open source AI agent that automates engineering 
tasks
 # Legal-Review-Notice: goose itself is Apache-2.0, but the shipped binary
@@ -26,7 +26,7 @@
 # whole linked set. Derived on this vendoring with
 # "cargo tree --offline -p goose-cli -e normal --no-default-features
 #  --features %%{goose_features}" over the vendored tree
-# (1324 crates vendored, 612 in the linked graph -- the code-mode and
+# (1328 crates vendored, 612 in the linked graph -- the code-mode and
 # local-inference branches, and with them v8/candle/llama-cpp, are not built,
 # and neither is the cuda branch, so the cudaforge git dependency is unused),
 # then reading "license =" from every 
vendor-crates/<name>-<version>/Cargo.toml.
@@ -75,7 +75,7 @@
 # pkg-config behind a feature/env switch neither sqlx nor bat sets; aws-lc-sys
 # (pulled in by rustls) has no system-library mode at all. Declare them so the
 # bundled CVE surface is visible to the distribution.
-Provides:       bundled(aws-lc) = 5.5.0
+Provides:       bundled(aws-lc) = 5.7.0
 Provides:       bundled(libzstd) = 1.5.7
 Provides:       bundled(oniguruma) = 6.9.10
 Provides:       bundled(sqlite3) = 3.51.3

++++++ _service ++++++
--- /var/tmp/diff_new_pack.brQdN4/_old  2026-09-07 11:32:17.133213539 +0200
+++ /var/tmp/diff_new_pack.brQdN4/_new  2026-09-07 11:32:17.136213644 +0200
@@ -2,7 +2,7 @@
   <service name="obs_scm" mode="manual">
     <param name="url">https://github.com/aaif-goose/goose.git</param>
     <param name="scm">git</param>
-    <param name="revision">v1.48.0</param>
+    <param name="revision">v1.49.0</param>
     <param name="match-tag">*</param>
     <param name="versionformat">@PARENT_TAG@</param>
     <param name="versionrewrite-pattern">v(\d+\.\d+\.\d+)</param>

++++++ goose-1.48.0.tar.zst -> goose-1.49.0.tar.zst ++++++
/work/SRC/openSUSE:Factory/goose/goose-1.48.0.tar.zst 
/work/SRC/openSUSE:Factory/.goose.new.1265/goose-1.49.0.tar.zst differ: char 7, 
line 1

++++++ goose-system-libdbus.patch ++++++
--- /var/tmp/diff_new_pack.brQdN4/_old  2026-09-07 11:32:17.170214836 +0200
+++ /var/tmp/diff_new_pack.brQdN4/_new  2026-09-07 11:32:17.174214977 +0200
@@ -2,7 +2,7 @@
 +++ b/Cargo.toml       2026-08-28 07:59:14.968906717 +0200
 @@ -48,7 +48,7 @@
  indoc = { version = "2", default-features = false }
- iroh = { version = "=1.0.3", default-features = false }
+ iroh = { version = "=1.1.0", default-features = false }
  iroh-relay = { version = "1", default-features = false }
 -keyring = { version = "3.6.3", default-features = false, features = 
["vendored"] }
 +keyring = { version = "3.6.3", default-features = false }

++++++ vendor-crates.tar.zst ++++++
/work/SRC/openSUSE:Factory/goose/vendor-crates.tar.zst 
/work/SRC/openSUSE:Factory/.goose.new.1265/vendor-crates.tar.zst differ: char 
7, line 1

Reply via email to