Script 'mail_helper' called by obssrc
Hello community,

here is the log from the commit of package goose for openSUSE:Factory checked 
in at 2026-08-28 19:52:08
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/goose (Old)
 and      /work/SRC/openSUSE:Factory/.goose.new.1265 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Package is "goose"

Fri Aug 28 19:52:08 2026 rev:3 rq:1374254 version:1.48.0

Changes:
--------
--- /work/SRC/openSUSE:Factory/goose/goose.changes      2026-08-24 
12:15:31.133315480 +0200
+++ /work/SRC/openSUSE:Factory/.goose.new.1265/goose.changes    2026-08-28 
19:54:21.941622186 +0200
@@ -1,0 +2,32 @@
+Fri Aug 28 06:04:13 UTC 2026 - Martin Pluskal <[email protected]>
+
+- Update to version 1.48.0:
+  * the "goose tui" command is gone -- upstream removed the tui
+    feature outright
+  * new "/new" slash command starts a fresh session without
+    restarting; --with-extension can name the extension it adds
+  * built-in web-search and browser-use skills
+  * new declarative providers (TrustedRouter, OpenCode Zen, Gondola,
+    SayGM, Lynkr, PleumRouter); Z.ai GLM-5.2 replaced by GLM-5.3
+  * PreToolUse hooks gained an on_failure block and a tool_call_id
+    that stays stable across the tool lifecycle
+  * compaction uses the main session model instead of the fast one
+    and reports its failures honestly
+  * session listing limits before counting messages, so large
+    histories load quickly
+  * hardening: tool/app visibility, skill plugin enablement and
+    invalid GCP or Codex configuration now fail closed; recipe
+    library writes, skill file reads, call-graph traversal and
+    mention scans are bounded
+- Drop the tui feature from the build: it no longer exists in
+  goose-cli
+- Build only the goose and generate_manpages binaries: 1.48.0 adds
+  mcp_conformance_driver, a CI-only harness we neither ship nor need
+- Rebase goose-system-libdbus.patch
+- Drop the wtype and xdotool Recommends: neither string occurs
+  anywhere in the tree, and computercontroller's screen control is
+  macOS-only (it shells out to peekaboo)
+- Re-derive the License tag from the new vendored crate graph (1324
+  crates vendored, 612 linked): the 13 SPDX identifiers are unchanged
+
+-------------------------------------------------------------------

Old:
----
  goose-1.47.0.tar.zst

New:
----
  goose-1.48.0.tar.zst

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Other differences:
------------------
++++++ goose.spec ++++++
--- /var/tmp/diff_new_pack.m8dw96/_old  2026-08-28 19:54:26.100767565 +0200
+++ /var/tmp/diff_new_pack.m8dw96/_new  2026-08-28 19:54:26.106767774 +0200
@@ -16,9 +16,9 @@
 #
 
 
-%global goose_features 
aws-providers,nostr,otel,rustls-tls,system-keyring,tui,disable-update
+%global goose_features 
aws-providers,nostr,otel,rustls-tls,system-keyring,disable-update
 Name:           goose
-Version:        1.47.0
+Version:        1.48.0
 Release:        0
 Summary:        Extensible open source AI agent that automates engineering 
tasks
 # Legal-Review-Notice: goose itself is Apache-2.0, but the shipped binary
@@ -26,7 +26,7 @@
 # whole linked set. Derived on this vendoring with
 # "cargo tree --offline -p goose-cli -e normal --no-default-features
 #  --features %%{goose_features}" over the vendored tree
-# (1216 crates vendored, 607 in the linked graph -- the code-mode and
+# (1324 crates vendored, 612 in the linked graph -- the code-mode and
 # local-inference branches, and with them v8/candle/llama-cpp, are not built,
 # and neither is the cuda branch, so the cudaforge git dependency is unused),
 # then reading "license =" from every 
vendor-crates/<name>-<version>/Cargo.toml.
@@ -35,14 +35,13 @@
 # the graph adds an identifier. The remaining entries are crates with no choice
 # to make: LGPL-3.0-or-later from ansi_colours (pulled in by bat),
 # MPL-2.0 from option-ext (via dirs-sys), Unicode-3.0 from the 20 ICU crates,
-# CC0-1.0 from the five bitcoin_hashes/secp256k1 crates (nostr),
+# CC0-1.0 from the six bitcoin_hashes/secp256k1 crates (nostr),
 # CDLA-Permissive-2.0 from the two webpki-roots, ISC from rustls-webpki,
 # simple_asn1 and untrusted (and from ring, "Apache-2.0 AND ISC"),
 # BSD-3-Clause from subtle/brotli/alloc-no-stdlib/exr/lebe, Zlib from foldhash
 # and zlib-rs, MIT-0 from borrow-or-share, bzip2-1.0.6 from libbz2-rs-sys, and
-# MIT from the 164 MIT-only crates. No crate in the graph carries BSD-2-Clause
-# any more (arrayref left it in 1.47.0); that identifier is now held solely by
-# the bundled leaflet.min.js named below.
+# MIT from the 165 MIT-only crates. No crate in the graph carries BSD-2-Clause;
+# that identifier is held solely by the bundled leaflet.min.js named below.
 # MPL-2.0 section 3.2 and the LGPL-3.0 source requirement
 # are satisfied because the complete vendor-crates.tar.zst ships in the 
src.rpm;
 # the two texts are additionally installed as %%license files.
@@ -69,10 +68,6 @@
 # libdbus-sys (via keyring -> dbus-secret-service) probes for it; the floor is
 # the one its build script passes to pkg-config
 BuildRequires:  pkgconfig(dbus-1) >= 1.6
-# The computer-controller extension shells out to these; goose warns at 
start-up
-# when none of them is present, but works without them.
-Recommends:     wtype
-Recommends:     xdotool
 # Four C libraries are compiled into the binary from crate-bundled sources and
 # cannot be unbundled without patching the feature selection upstream picked:
 # sqlx requests libsqlite3-sys with "bundled", so SQLite is the cc-compiled
@@ -133,7 +128,9 @@
 
 %build
 %limit_build -m 2000
-%{cargo_build} -p goose-cli --bins --no-default-features --features 
%{goose_features}
+# named bins rather than --bins: 1.48.0 added mcp_conformance_driver, a CI-only
+# harness we neither ship nor want to compile
+%{cargo_build} -p goose-cli --bin goose --bin generate_manpages 
--no-default-features --features %{goose_features}
 
 %install
 install -D -m 0755 target/release/%{name} %{buildroot}%{_bindir}/%{name}

++++++ _service ++++++
--- /var/tmp/diff_new_pack.m8dw96/_old  2026-08-28 19:54:26.170770011 +0200
+++ /var/tmp/diff_new_pack.m8dw96/_new  2026-08-28 19:54:26.178770291 +0200
@@ -2,7 +2,7 @@
   <service name="obs_scm" mode="manual">
     <param name="url">https://github.com/aaif-goose/goose.git</param>
     <param name="scm">git</param>
-    <param name="revision">v1.47.0</param>
+    <param name="revision">v1.48.0</param>
     <param name="match-tag">*</param>
     <param name="versionformat">@PARENT_TAG@</param>
     <param name="versionrewrite-pattern">v(\d+\.\d+\.\d+)</param>

++++++ goose-1.47.0.tar.zst -> goose-1.48.0.tar.zst ++++++
/work/SRC/openSUSE:Factory/goose/goose-1.47.0.tar.zst 
/work/SRC/openSUSE:Factory/.goose.new.1265/goose-1.48.0.tar.zst differ: char 8, 
line 1

++++++ goose-system-libdbus.patch ++++++
--- /var/tmp/diff_new_pack.m8dw96/_old  2026-08-28 19:54:26.240772458 +0200
+++ /var/tmp/diff_new_pack.m8dw96/_new  2026-08-28 19:54:26.251772843 +0200
@@ -1,9 +1,9 @@
---- a/Cargo.toml       2026-08-16 17:58:32.265688707 +0200
-+++ b/Cargo.toml       2026-08-16 17:58:32.273689605 +0200
-@@ -45,7 +45,7 @@
- ignore = { version = "0.4.12", default-features = false }
- include_dir = { version = "0.7", default-features = false }
+--- a/Cargo.toml       2026-08-28 07:59:14.964906268 +0200
++++ b/Cargo.toml       2026-08-28 07:59:14.968906717 +0200
+@@ -48,7 +48,7 @@
  indoc = { version = "2", default-features = false }
+ iroh = { version = "=1.0.3", default-features = false }
+ iroh-relay = { version = "1", default-features = false }
 -keyring = { version = "3.6.3", default-features = false, features = 
["vendored"] }
 +keyring = { version = "3.6.3", default-features = false }
  lru = { version = "0.18", default-features = false }

++++++ vendor-crates.tar.zst ++++++
/work/SRC/openSUSE:Factory/goose/vendor-crates.tar.zst 
/work/SRC/openSUSE:Factory/.goose.new.1265/vendor-crates.tar.zst differ: char 
7, line 1

Reply via email to