Skip to content

Goose

v1.44.0 Security

This release includes 3 security fixes for security teams reviewing exposed deployments.

✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →
This release patches 3 known CVEs

Topics

acp ai ai-agents mcp

Affected surfaces

auth rbac

Summary

AI summary

Broad release touches 🐛 Bug Fixes, ✨ Features, 🔧 Improvements, and 📚 Documentation.

Full changelog

✨ Features

  • Support for latest Gemini models #10630
  • Pass working_dir to the Stop hook context #10296
  • Declarative Sakana AI provider for OpenAI-compatible Fugu API #10357
  • Model interactions viewer restored #10205
  • Chunk command-classifier input with overlapping windows for security #10416
  • Search filter for provider grid #10437
  • Muse Spark 1.1 support via Meta Models API #10432
  • GPT-5.6 support #10384
  • Reconnect desktop ACP sessions after sleep and connection loss #10411
  • Per-message usage stats UI (tokens, cost, TTFT, tok/s) #10210
  • OllamaCloudProvider with dynamic model discovery and context limits #10264
  • Delete support for custom apps from Apps UI #10127
  • --edit session flag to edit conversation before forking #9799
  • iFlytek Spark and Astron MaaS providers #9837
  • Fireworks AI declarative provider #9990
  • OpenRouter request parameters support #9276
  • French, German, Italian, Portuguese, Indonesian, Malay, Vietnamese, zh-TW desktop locales #10072
  • MiniMax-M3 and missing M2.7 variants #10431

🐛 Bug Fixes

  • Preserve command arguments through extension forms #10527
  • Enforce manual approval for code mode #10528
  • Confine app file operations #10481
  • Preserve featured model size on delete and backfill missing sizes #10422
  • Preserve recursive schema types with pctx 0.4.1 #10572
  • Create inventory tables atomically with schema version #10586
  • Rewrite oneOf to anyOf in tool schemas for OpenAI-compatible backends #10571
  • Allow custom model as default for non-local providers #10438
  • Require absolute goose path roots #10454
  • Scope smart approval by request #10457
  • Preserve fixed subrecipe values #10452
  • Bundle git in Flatpak so hermit can clone its package registry #10511
  • Expose AGENT_SESSION_ID to shell commands #10428
  • Forward image content chunks to client during live session #10485
  • Dispatch Code Mode callbacks on main runtime to prevent hangs #10484
  • Protect OAuth token caches #10516
  • Preserve content audience boundaries #10493
  • Bound scheduled recipe validation #10509
  • Return JSON-RPC errors from dispatch handlers instead of killing connection #10499
  • Isolate prepare tools test state #10504
  • Avoid local inference Metal teardown crash #10508
  • Enable indexmap serde support for musl builds #10507
  • Scroll chat to latest reply on session resume #10501
  • Secure large response spill files #10482
  • Register LiteLLM with refresh_only inventory so model picker lists models #10489
  • Limit provider selector height in CLI #10420
  • Tighten existing secrets file permissions #10453
  • Classify image access capabilities #10451
  • Preserve one-time permission scope #10450
  • Register goose:// scheme handler in Flatpak desktop entry #10461
  • Reject duplicate recipe parameter keys #10448
  • Synchronously kill orphaned goose serve backends on GUI close #10292
  • Break self-referential $ref cycles before Code Mode schema #10469
  • Stop multiline paste auto-submitting line-by-line on Windows #10326
  • Hide nested config values in Configuration Editor #10390
  • Stop resolving TUI scripts from cwd #10449
  • Exclude MCP App tools from Code Mode callbacks #10290
  • Apply default extension timeout to developer shell tool calls #10348
  • Preserve reasoning_content for DeepSeek thinking mode on multi-turn tool calls #10366
  • Make prompt timestamps timezone-explicit #10209
  • Disable compaction during approval #10089
  • Restore pnpm 11 project configuration #10395
  • Treat empty-string finish_reason as non-terminal in streaming #10258
  • Fix Gemini OAuth onboarding #10363
  • Retry empty provider turns instead of stopping silently #10360
  • Guard llama.cpp backend init against SIGILL on x86_64 CPUs without FMA/AVX2 #10105
  • Sanitize responses function call names #10344
  • Pick session mode from the ids the agent actually offers #10320
  • Show manual-setup indicator for extensions without install link #10321
  • Dedupe duplicate signed thinking blocks to fix Anthropic 400 #10083

🔧 Improvements

  • Extract tool call handling from ACP server #10574
  • Report cache-aware Harbor costs #10430
  • Trim macOS desktop entitlements #10490
  • Consolidate and harden release workflows #10447
  • TLS backend matrix job for rustls-tls and native-tls #10148
  • Bound code-mode execution with timeout and cancellation #10214
  • Recover malformed tool calls from GLM/Minimax models instead of rejecting them #10230
  • Group chat sessions by project in nav panel #10212
  • Per-message usage/cost tracking with derived session totals #10172
  • Return effective context limit from /model-info #10165
  • Disable thinking preservation for Groq #10284
  • Clarify terminal color semantics in CLI #10414

📚 Documentation

  • Clean up stale documentation audit findings #10114
  • Update environment and config references #10203
  • Document hook deny contract, matcher regex, tool_input keys, and provider config #10467
  • Remove stale gooseignore references #10359
  • Add Code of Conduct #10424
  • Clarify session --edit context retention #10257

Security Fixes

  • Tighten existing secrets file permissions
  • Protect OAuth token caches
  • Secure large response spill files

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track Goose

Get notified when new releases ship.

Sign up free

About Goose

an open source, extensible AI agent that goes beyond code suggestions - install, execute, edit, and test with any LLM

All releases →

Related context

Beta — feedback welcome: [email protected]