镜像站点 · 本页由第三方 GitHub 只读镜像提供，非 GitHub 官方站点，不接受任何登录或凭据输入。前往 github.com
Skip to content

chore(goose): bump bundled goose-acp to v1.58.1 - #3161

Merged
atishpatel merged 2 commits into
mainfrom
chore/bump-goose-1.58.0
Nov 10, 2026
Merged

chore(goose): bump bundled goose-acp to v1.58.1#3161
atishpatel merged 2 commits into
mainfrom
chore/bump-goose-1.58.0

Conversation

@atishpatel

@atishpatel atishpatel commented Nov 10, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Summary

Bumps the bundled goose-acp from v1.57.0 to v1.58.1, which was released on 2026-11-10 from revision c97af00b. Compared with v1.58.0, v1.58.1 also includes two Goose fixes reported through Buzz:

The fixed files at the tag (compaction.md, oauth.rs) match the merged fixes blob for blob.

Changes:

  • runtime/goose-acp.json: updates the version, revision, the five per-target asset URLs and the SHA-256 values.
  • docs/releases.md: the gh attestation verify command uses the v1.58.1 tag and digest. The notes give the commit delta (28 commits from v1.57.0) and say that upstream #12908 was closed unmerged.
  • src/bundled/goose/goose.ts: comment-only change, so the #12908 note names v1.58.1.

Verification

  • All five archives (macOS arm64/x64, Linux arm64/x64, Windows x64) pass gh attestation verify --repo aaif-goose/goose --signer-workflow aaif-goose/goose/.github/workflows/release.yml --source-ref refs/tags/v1.58.1 --source-digest c97af00bca96442611bb95155c56d6109afa42d6 --cert-oidc-issuer https://github.com/proxy/token.actions.githubusercontent.com/ --deny-self-hosted-runners. Their local shasum -a 256 matches the committed values and GitHub's asset digests.
  • The commit and pre-push hooks pass, including types and related unit tests.
  • These checks ran on the previous v1.58.0 head (642b5a4), where CI was green with 63 passing:
    • vitest run src/bundled/goose: 343 passed.
    • node --test tests/integration/*.test.mjs: 295 passed, 1 failed. The failure is macOS launchers preserve icon, port, explicit config and runner arguments in worktree-icon.test.mjs. It isn't caused by this PR: the fixture's linked checkout lacks scripts/dev-credential-helper.mjs, which scripts/desktop-dev.mjs imports.
  • A local debug bundle (just desktop-bundle) is being built for human testing.

Before shipping

  • docs/releases.md asks for the Buzz Security plugin's protected Goose pin to move to the same revision before this Buzz release ships. That pin isn't in this repo.
  • Runtime checks from the release notes that haven't been done yet: provider sessions, HTTP MCP, steering/cancellation, session history and native Windows/Linux startup.
  • Human testing is pending, including compaction of a long Claude session.

🤖 Generated with Claude Code

atishpatel and others added 2 commits November 9, 2026 16:41
@atishpatel Worker Bee (Opus) @claude
chore(goose): bump bundled goose-acp to v1.58.0
642b5a4 
Pin the upstream v1.58.0 standalone release (revision 7c039ac9). Every
target archive passes gh attestation verify against the release
workflow, tag and source digest. Update the documented verify command
and the #12908 notes to match.

Co-authored-by: Worker Bee (Opus) <4a3bc7fd57a7b2c126e4f3d3462dd16f375242e1c176b4b3f25ca93e3edb6a84@buzz.block.builderlab.xyz>
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Signed-off-by: Atish Patel <atishpatel2012@gmail.com>
@atishpatel Worker Bee (Opus) @claude
chore(goose): move bundled goose-acp pin to v1.58.1
ba98f72 
v1.58.1 (revision c97af00b) adds aaif-goose/goose#13328 (refresh
Databricks OAuth tokens before expiry) and #13340 (reword the
compaction prompt Opus 5.5 refuses as distillation) on top of 1.58.0.
Every target archive passes gh attestation verify against the release
workflow, tag and source digest.

Co-authored-by: Worker Bee (Opus) <4a3bc7fd57a7b2c126e4f3d3462dd16f375242e1c176b4b3f25ca93e3edb6a84@buzz.block.builderlab.xyz>
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Signed-off-by: Atish Patel <atishpatel2012@gmail.com>
@atishpatel atishpatel changed the title chore(goose): bump bundled goose-acp to v1.58.0 chore(goose): bump bundled goose-acp to v1.58.1 Nov 10, 2026
@atishpatel
atishpatel marked this pull request as ready for review November 10, 2026 04:48
@atishpatel
atishpatel requested a review from a team as a code owner November 10, 2026 04:48
ngoodger-block
ngoodger-block approved these changes Nov 10, 2026
View reviewed changes

@ngoodger-block ngoodger-block left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🤖 LGTM. The tag revision and all five asset digests match the manifest. The upstream ACP changes (#12880, #13099) are handled by Buzz's existing session and error paths. Optional follow-up: the 'goose ends the turn either way' comment in agent-sessions.ts is out of date since #13099.

@atishpatel

atishpatel commented Nov 10, 2026

Copy link
Copy Markdown
Contributor Author

🤖 Thanks. Agreed on the comment at agent-sessions.ts:418: since aaif-goose/goose#13099 a failed manual compaction comes back as an error, which the !result.ok branch already returns, so only the comment is stale. I'm leaving it for a follow-up so this approved pin bump doesn't restart CI.

@atishpatel
atishpatel merged commit 157bbb4 into main Nov 10, 2026
123 of 125 checks passed
@atishpatel
atishpatel deleted the chore/bump-goose-1.58.0 branch November 10, 2026 05:19
damienrj added a commit that referenced this pull request Nov 10, 2026
@damienrj
Merge branch 'main' of https://github.com/block/buzz-app into feat/te…
375a160 
…rminal-font-picker

* 'main' of https://github.com/block/buzz-app: (168 commits)
  Unify Membership sharing and live roster updates (#3147)
  fix(activity): show one working cue per agent request (#3166)
  Introduce opt-in first-agent setup (#2804)
  fix(codex): drop the security-review sign-in prompt from harness defaults (#3188)
  feat(releases): publish desktop download manifest (#3154)
  fix(mcp): preserve current attachments across edits (#2937)
  fix(agents): call the Claude and Codex first-run download "the integration" (#3165)
  chore(goose): bump bundled goose-acp to v1.58.1 (#3161)
  Revert "ci: use larger GitHub runners for Rust and browser journeys (#3090)" (#3180)
  Show Goose's unset thinking level as Default, not Off (#3124)
  ci(release): publish stable and beta desktop releases from v tags (#3150)
  fix(messages): end the New messages hold when no repair can sample (#3169)
  fix(search): make Command F search the Bestie conversation (#3084)
  fix(plugins): keep failed update checks on the plugin's Settings row instead of a toast (#3088)
  Show single-agent Stop on the activity bubble (#3140)
  fix: support explicit hosted browser origins (#3149)
  fix: keep Codex tool namespace descriptions bounded (#3128)
  fix(messages): show "New messages" in channels longer than one page (#3071)
  Keep shared agent guidance generic (#3134)
  fix(typing): a thread reply also ends the agent's channel-level typing (#3148)
  ...

Signed-off-by: damienrj <damien@squareup.com>

# Conflicts:
#	src-tauri/Cargo.toml
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@baxen baxen baxen approved these changes
@wpfleger96 wpfleger96 wpfleger96 approved these changes
@ngoodger-block ngoodger-block ngoodger-block approved these changes

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

4 participants

@atishpatel @baxen @wpfleger96 @ngoodger-block