chore(release): release version 1.27.0 (minor)#7611
Conversation
goose Release Manual Testing ChecklistVersion: 1.27.0Make a copy of this document for each version and check off as steps are verified. Provider Testing
Starting ConversationsTest various ways to start a conversation:
RecipesCreate Recipe from Session
Use Existing Recipe
Recipe Management
Recipe from File
recipe:
title: test recipe again
description: testing recipe again
instructions: The value of test_param is {{test_param}}
prompt: What is the value of test_param?
parameters:
- key: test_param
input_type: string
requirement: required
description: Enter value for test_param
ExtensionsManual Extension Addition
Playwright Extension
Extension with Environment Variables
Speech-to-Text (Local Model)
Settings
Follow-up IssuesLink any GitHub issues filed during testing: Tested by: _____ |
macOS ARM64 Desktop App (Apple Silicon)📱 Download macOS Desktop App (arm64, unsigned) Instructions: The easiest way is to just run the following script:
script which will download the latest release (or you can specify the release you need), does the If you need to do this manually:
The signing step is only needed if you do something that uses mac entitlements like speech to text |
macOS ARM64 Desktop App (Apple Silicon)📱 Download macOS Desktop App (arm64, unsigned) Instructions: The easiest way is to just run the following script:
script which will download the latest release (or you can specify the release you need), does the If you need to do this manually:
The signing step is only needed if you do something that uses mac entitlements like speech to text |
macOS ARM64 Desktop App (Apple Silicon)📱 Download macOS Desktop App (arm64, unsigned) Instructions: The easiest way is to just run the following script:
script which will download the latest release (or you can specify the release you need), does the If you need to do this manually:
The signing step is only needed if you do something that uses mac entitlements like speech to text |
macOS ARM64 Desktop App (Apple Silicon)📱 Download macOS Desktop App (arm64, unsigned) Instructions: The easiest way is to just run the following script:
script which will download the latest release (or you can specify the release you need), does the If you need to do this manually:
The signing step is only needed if you do something that uses mac entitlements like speech to text |
macOS ARM64 Desktop App (Apple Silicon)📱 Download macOS Desktop App (arm64, unsigned) Instructions: The easiest way is to just run the following script:
script which will download the latest release (or you can specify the release you need), does the If you need to do this manually:
The signing step is only needed if you do something that uses mac entitlements like speech to text |
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 9fbd3c4439
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
| `;; Protect sandbox config from the sandboxed process`, | ||
| `(deny file-write* (subpath "${h}/.config/goose/sandbox"))`, | ||
| `(deny file-write* (literal "${h}/.config/goose/config.yaml"))`, | ||
| ]; |
There was a problem hiding this comment.
Reintroduce config.yaml write deny in sandbox profile
Removing the config.yaml deny rule means the macOS seatbelt profile now runs with (allow default) and no explicit write block for ~/.config/goose/config.yaml, so any sandboxed shell/file operation can persistently modify Goose configuration. In practice, a prompt-influenced command can now alter provider/extension settings for future sessions, which breaks the previous boundary that sandboxed execution could not tamper with host agent config.
Useful? React with 👍 / 👎.
macOS ARM64 Desktop App (Apple Silicon)📱 Download macOS Desktop App (arm64, unsigned) Instructions: The easiest way is to just run the following script:
script which will download the latest release (or you can specify the release you need), does the If you need to do this manually:
The signing step is only needed if you do something that uses mac entitlements like speech to text |
…e-issue * origin/main: Fix max turns configuration (#7612) feat: add base path field to custom provider configuration (#7614) fix: compare extension configs before skipping add_extension (#7650) chore(release): release version 1.27.0 (minor) (#7611) feat: better private channel detection, bot version debugging (#7680) chore(deps): bump svgo from 3.3.2 to 3.3.3 in /documentation (#7667) fix: only add viewable channels to bot context (#7678) chore: added a recipe to help identify high risk change prs for testing (#7651) fix: make sure platform binary exists (#7676)
* origin/main: (29 commits) Update to rmcp 1.1.0 (#7619) Fix max turns configuration (#7612) feat: add base path field to custom provider configuration (#7614) fix: compare extension configs before skipping add_extension (#7650) chore(release): release version 1.27.0 (minor) (#7611) feat: better private channel detection, bot version debugging (#7680) chore(deps): bump svgo from 3.3.2 to 3.3.3 in /documentation (#7667) fix: only add viewable channels to bot context (#7678) chore: added a recipe to help identify high risk change prs for testing (#7651) fix: make sure platform binary exists (#7676) fix(shell): replace global static output buffer with per-instance TempDir (#7632) opt: remove timestamped config file backup (#7618) chore(deps): bump @hono/node-server from 1.19.9 to 1.19.10 in /ui/desktop (#7662) chore(deps): bump hono from 4.12.3 to 4.12.5 in /evals/open-model-gym/mcp-harness (#7661) chore(deps): bump hono from 4.12.2 to 4.12.5 in /ui/desktop (#7660) fix: resolve parameters in initial message with autosubmit (#7659) fix: this should not be blocked (#7656) Relax the assertion for the model list ACP test (#7653) fix: add analyzer extension in recipe to maintain backwards compatibility (#7652) docs: add GOOSE_INPUT_LIMIT environment variable documentation (#7299) ...
* origin/main: (40 commits) fix: make TLS configurable in goosed agent via GOOSE_TLS env var (#7686) Update to rmcp 1.1.0 (#7619) Fix max turns configuration (#7612) feat: add base path field to custom provider configuration (#7614) fix: compare extension configs before skipping add_extension (#7650) chore(release): release version 1.27.0 (minor) (#7611) feat: better private channel detection, bot version debugging (#7680) chore(deps): bump svgo from 3.3.2 to 3.3.3 in /documentation (#7667) fix: only add viewable channels to bot context (#7678) chore: added a recipe to help identify high risk change prs for testing (#7651) fix: make sure platform binary exists (#7676) fix(shell): replace global static output buffer with per-instance TempDir (#7632) opt: remove timestamped config file backup (#7618) chore(deps): bump @hono/node-server from 1.19.9 to 1.19.10 in /ui/desktop (#7662) chore(deps): bump hono from 4.12.3 to 4.12.5 in /evals/open-model-gym/mcp-harness (#7661) chore(deps): bump hono from 4.12.2 to 4.12.5 in /ui/desktop (#7660) fix: resolve parameters in initial message with autosubmit (#7659) fix: this should not be blocked (#7656) Relax the assertion for the model list ACP test (#7653) fix: add analyzer extension in recipe to maintain backwards compatibility (#7652) ...
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: Jack Amadeo <jackamadeo@block.xyz> Co-authored-by: Lifei Zhou <lifei@squareup.com> Co-authored-by: Michael Neale <michael.neale@gmail.com>
* origin/main: (59 commits) fix: restore smart-approve mode (#7690) fix: make TLS configurable in goosed agent via GOOSE_TLS env var (#7686) Update to rmcp 1.1.0 (#7619) Fix max turns configuration (#7612) feat: add base path field to custom provider configuration (#7614) fix: compare extension configs before skipping add_extension (#7650) chore(release): release version 1.27.0 (minor) (#7611) feat: better private channel detection, bot version debugging (#7680) chore(deps): bump svgo from 3.3.2 to 3.3.3 in /documentation (#7667) fix: only add viewable channels to bot context (#7678) chore: added a recipe to help identify high risk change prs for testing (#7651) fix: make sure platform binary exists (#7676) fix(shell): replace global static output buffer with per-instance TempDir (#7632) opt: remove timestamped config file backup (#7618) chore(deps): bump @hono/node-server from 1.19.9 to 1.19.10 in /ui/desktop (#7662) chore(deps): bump hono from 4.12.3 to 4.12.5 in /evals/open-model-gym/mcp-harness (#7661) chore(deps): bump hono from 4.12.2 to 4.12.5 in /ui/desktop (#7660) fix: resolve parameters in initial message with autosubmit (#7659) fix: this should not be blocked (#7656) Relax the assertion for the model list ACP test (#7653) ...
Release v1.27.0
How to Release
Push the release tag to trigger the release:
git fetch && git tag v1.27.0 origin/release/1.27.0 git push origin v1.27.0This PR will auto-merge once the tag is pushed.
Important Notes
mainChanges in This Release
Comparing:
v1.26.0...v1.27.0This release PR was generated automatically.