v1.15.1

Celeste CLI 1.15.1

Important

Security release

This is the first release built with Go 1.26.6. Every earlier release was
built with 1.26.5 or older, which carry seven standard-library vulnerabilities
that govulncheck reports as called by this code:
GO-2026-6090 crypto/tls,
GO-2026-6089 and
GO-2026-5026 net/http,
GO-2026-6218 net/url,
GO-2026-6091 html/template,
GO-2026-6088 encoding/xml,
GO-2026-5972 encoding/asn1.

If you run any earlier version, upgrade. The vulnerable code is compiled into
the binary, so there is no workaround. Check what you are running with:

go version $(which celeste)   # want: go1.26.6
celeste version               # want: 1.15.1 or later

Also in this release

Unattended celeste agent runs now work, or fail loudly. Previously an agent
run outside the TUI denied every mutating tool, then reported success and exited
0 having changed nothing. Pass -auto-approve to run unattended; without it the
runner now refuses to start and names the tools it cannot execute, instead of
burning the whole turn budget. Only read_file, list_files and search_files
are granted by default, so this affected every fresh install.

Installation

Download the appropriate binary for your platform:

Linux (amd64):

wget https://github.com/whykusanagi/celeste-cli/releases/download/v1.15.1/celeste-linux-amd64.tar.gz
tar xzf celeste-linux-amd64.tar.gz
sudo mv celeste-linux-amd64 /usr/local/bin/celeste

macOS (Apple Silicon):

wget https://github.com/whykusanagi/celeste-cli/releases/download/v1.15.1/celeste-darwin-arm64.tar.gz
tar xzf celeste-darwin-arm64.tar.gz
sudo mv celeste-darwin-arm64 /usr/local/bin/celeste

Windows:
Download celeste-windows-amd64.zip and extract to a directory in your PATH.

Verify Installation

celeste --version

Changes

See CHANGELOG.md for details.