v1.20.0
GooseSummary
This release introduces significant new capabilities, including ML-based prompt injection detection and HTTP proxy support, alongside streaming support for the Google Gemini provider. Several fixes address issues with custom provider editing, KaTeX rendering, and stability within MCP Apps, ensuring a more robust user experience.
New Features
- Added support for configuring a maximum token limit via an environment variable.
- Enabled retry logic for fetching provider models to improve reliability.
- Added streaming support for the Google Gemini provider.
- Added ML-based prompt injection detection capabilities.
- Added support for changing the working directory and extensions within the same window/session.
- Introduced HTTP proxy support.
- Added Content Security Policy (CSP) support for frameDomains and baseUriDomains for MCP Apps.
Bug Fixes
- Fixed an issue where the provider engine type was not preserved when editing custom providers.
- Improved the output style of Goose review Pull Requests to better match contributor standards.
- Fixed an issue where KaTeX was incorrectly treating underscores as subscripts in plain text.
- Corrected the skills directory path to use ".config/agents" (plural).
- Fixed an issue where extensions were being loaded upfront instead of when the agent starts.
- Ensured platform-specific keyboard shortcuts are correctly displayed in the UI.
- Prevented an infinite loop of tool-input notifications occurring in MCP Apps.
- Updated the MCP Apps _meta.ui.resourceUri to use the nested format.
- Prevented duplicate rendering when a tool returns both mcp-ui and mcp-apps resources.
- Handled special Claude model responses within the GitHub Copilot provider.
- Fixed a ResultsFormat error that occurred when loading old sessions.
- Fixed an issue where invalid call tool results were not being validated or debugged properly.
- Fixed an issue in CI where the openapi-schema-check job was missing dependencies.
- Fixed Google provider logic to treat signed text as regular content during streaming.
Improvements
- Ensured models properly utilize streaming capabilities.
- When changing the provider or model, the existing provider/model configuration is now loaded.
- Allowed the Goose issue solver to react to activation comments.
- Hid advanced recipe options under expandable content for a cleaner interface.
- Updated confidence levels for prompt injection detection to reduce false positive rates.
- Fixed rendering issues related to fonts.
- Sorted keys in canonical models for consistency.
- Adjusted z-index to prevent the search highlighter from appearing over modal overlays.
- Updated MCP Apps tutorial documentation regarding the _meta structure and version prerequisites.
Related Documentation
- https://github.com/block/goose/pull/6333
- https://github.com/block/goose/commit/c90ead254f96d8489b3746d913551b08875c1f3f
- https://github.com/block/goose/pull/6172
- https://github.com/block/goose/pull/6365
- https://github.com/block/goose/pull/6384
- https://github.com/block/goose/pull/6388
- https://github.com/block/goose/pull/6371
- https://github.com/block/goose/pull/6404