chore(release): release version 1.44.0

[github-actions]

Release v1.44.0

Test before Release

1. Approve the workflows for this PR (scroll to bottom) to trigger CI and produce the Desktop bundle for testing.
2. Make sure all check workflows pass.
3. Install the Desktop bundle from the download links (posted as a comment below when it is ready).
4. Complete the goose Release Manual Testing Checklist (posted as a comment below).

How to Release

Push the release tag to trigger the release:

git fetch && git tag v1.44.0 origin/release/1.44.0
git push origin v1.44.0

The tag push will trigger the release build. This PR will be automatically closed.

Cherry-Picks

If you need to include additional fixes, cherry-pick them into the release/1.44.0 branch before tagging.

Important Notes

• All commits in this release should have corresponding cherry-picks in main
• This PR can be closed if the release is not needed.

Changes in This Release

Comparing: v1.43.0...v1.44.0

• fix: updated spin to v0.9.9 as 0.9.8 is yanked (fix: updated spin to v0.9.9 as 0.9.8 is yanked #10445) (2ecb8c0)
• Add GPT-5.6 support (Add GPT-5.6 support #10384) (6e8f710)
• clean up dead-end symlinks (clean up dead-end symlinks #10425) (8632077)
• fix: stop resolving TUI scripts from cwd (fix: stop resolving TUI scripts from cwd #10449) (846c764)
• fix(ui): hide nested config values in Configuration Editor (fix(ui): hide nested config values in Configuration Editor #10390) (879162c)
• ci: add TLS backend matrix job for rustls-tls and native-tls (ci: add TLS backend matrix job for rustls-tls and native-tls #10148) (3f08de4)
• feat(ui): add search filter to provider grid (feat(ui): add search filter to provider grid #10437) (c1eebf0)
• feat(metamodels): Add support for Muse Spark 1.1 via the Meta Models API (feat(metamodels): Add support for Muse Spark 1.1 via the Meta Models API #10432) (f47cebf)
• add build and maven publish for kotlin ffi (add build and maven publish for kotlin ffi #10375) (376a9e5)
• docs: add Code of Conduct (docs: add Code of Conduct #10424) (39681a4)
• ci: drop non-existent goose-server crate from TLS matrix job (ci: drop non-existent goose-server crate from TLS matrix job #10465) (c996276)
• chore(desktop): remove leftover goosed string references (chore(desktop): remove leftover goosed string references #10464) (743609d)
• fix(cli): stop multiline paste auto-submitting line-by-line on Windows ( fix(cli): stop multiline paste auto-submitting line-by-line on Windows #10326) (6ccabb0)
• fix(acp): break self-referential $ref cycles before Code Mode schema (fix(acp): break self-referential $ref cycles before Code Mode schema #10469) (0564b8c)
• fix(desktop): synchronously kill orphaned goose serve backends on GUI… (fix(desktop): synchronously kill orphaned goose serve backends on GUI… #10292) (acd3c13)
• docs: remove stale gooseignore references (docs: remove stale gooseignore references #10359) (daac967)
• fix: reject duplicate recipe parameter keys (fix: reject duplicate recipe parameter keys #10448) (004042a)
• feat(security): chunk command-classifier input with overlapping windows (feat(security): chunk command-classifier input with overlapping windows #10416) (9aa03bf)
• fix(provider): add MiniMax-M3 and missing M2.7 variants to minimax provider (fix(provider): add MiniMax-M3 and missing M2.7 variants to minimax provider #10431) (3d893a3)
• fix: register goose:// scheme handler in Flatpak desktop entry (fix: register goose:// scheme handler in Flatpak desktop entry #10461) (6621ed2)
• docs: document hook deny contract, matcher regex, tool_input keys, and provider config (docs: document hook deny contract, matcher regex, tool_input keys, and provider config #10467) (7d6be4a)
• docs: update environment and config references (docs: update environment and config references #10203) (60d2649)
• fix(acp): preserve one-time permission scope (fix(acp): preserve one-time permission scope #10450) (8b3fa59)
• fix(developer): classify image access capabilities (fix(developer): classify image access capabilities #10451) (0f8ec6a)
• Trim macOS desktop entitlements (Trim macOS desktop entitlements #10490) (3dcf5da)
• fix(config): tighten existing secrets file permissions (fix(config): tighten existing secrets file permissions #10453) (da57416)
• fix(cli): limit provider selector height (fix(cli): limit provider selector height #10420) (e359b35)
• fix: register LiteLLM with refresh_only inventory so model picker lists models (fix: register LiteLLM with refresh_only inventory so model picker lists models #10489) (5f194d6)
• fix: secure large response spill files (fix: secure large response spill files #10482) (e7c3307)
• fix(desktop): scroll chat to the latest reply on session resume (fix(desktop): scroll chat to the latest reply on session resume #10501) (8691970)
• chore: remove unused utoipa ToSchema derives (chore: remove unused utoipa ToSchema derives #10505) (dae5120)
• fix: enable indexmap serde support for musl builds (fix: enable indexmap serde support for musl builds #10507) (b56566a)
• fix: avoid local inference Metal teardown crash (fix: avoid local inference Metal teardown crash #10508) (d9e2fa1)
• fix: isolate prepare tools test state (fix: isolate prepare tools test state #10504) (8419e05)
• chore: consolidate and harden release workflows (chore: consolidate and harden release workflows #10447) (af9f3d2)
• fix: canary build with new release flow (fix: canary build with new release flow #10521) (baa6edc)
• fix(acp): return JSON-RPC errors from dispatch handlers instead of killing the connection (fix(acp): return JSON-RPC errors from dispatch handlers instead of killing the connection #10499) (d6345f7)
• fix: bound scheduled recipe validation (fix: bound scheduled recipe validation #10509) (ae83c0a)
• fix(acp): preserve content audience boundaries (fix(acp): preserve content audience boundaries #10493) (8168cb8)
• fix(auth): protect OAuth token caches (fix(auth): protect OAuth token caches #10516) (01ceb16)
• fix(acp): dispatch Code Mode callbacks on main runtime to prevent hangs (fix(acp): dispatch Code Mode callbacks on main runtime to prevent hangs #10484) (f13ae10)
• fix(acp): forward image content chunks to client during live session (fix(acp): forward image content chunks to client during live session #10485) (d3f170f)
• Restore model interactions viewer (Restore model interactions viewer #10205) (b7c7862)
• Clean up stale documentation audit findings (Clean up stale documentation audit findings #10114) (ceb94b2)
• fix(developer): expose AGENT_SESSION_ID to shell commands (fix(developer): expose AGENT_SESSION_ID to shell commands #10428) (8d5bc5d)
• Add declarative Sakana AI provider for the OpenAI-compatible Fugu API (Add declarative Sakana AI provider for the OpenAI-compatible Fugu API #10357) (248999c)
• chore(deps): bump gradle/actions/setup-gradle from 4.4.3 to 6.2.0 (chore(deps): bump gradle/actions/setup-gradle from 4.4.3 to 6.2.0 #10543) (4b3e41d)
• chore(deps): bump EmbarkStudios/cargo-deny-action from 2.0.20 to 2.1.1 (chore(deps): bump EmbarkStudios/cargo-deny-action from 2.0.20 to 2.1.1 #10542) (2674582)
• chore(deps): bump actions/setup-node from 6 to 7 (chore(deps): bump actions/setup-node from 6 to 7 #10539) (583b093)
• chore(deps): bump actions/setup-java from 5.5.0 to 5.6.0 (chore(deps): bump actions/setup-java from 5.5.0 to 5.6.0 #10540) (1d49e93)
• feat(hooks): pass working_dir to the Stop hook context (feat(hooks): pass working_dir to the Stop hook context #10296) (c55b5fb)
• fix(flatpak): bundle git so hermit can clone its package registry (fix(flatpak): bundle git so hermit can clone its package registry #10511) (a3b92a2)
• chore(deps): bump websocket-driver from 0.7.4 to 0.7.5 in /documentation (chore(deps): bump websocket-driver from 0.7.4 to 0.7.5 in /documentation #10506) (e1ec614)
• fix(summon): preserve fixed subrecipe values (fix(summon): preserve fixed subrecipe values #10452) (ea2baea)
• fix(permissions): scope smart approval by request (fix(permissions): scope smart approval by request #10457) (efc7ccc)
• chore(deps): bump astral-sh/setup-uv from 8.2.0 to 8.3.2 (chore(deps): bump astral-sh/setup-uv from 8.2.0 to 8.3.2 #10541) (59037a0)
• fix(config): require absolute goose path roots (fix(config): require absolute goose path roots #10454) (f438709)
• fix(acp): allow custom model as default for non-local providers (fix(acp): allow custom model as default for non-local providers #10438) (445da5d)
• fix(evals): report cache-aware Harbor costs (fix(evals): report cache-aware Harbor costs #10430) (8e78960)
• fix(providers): rewrite oneOf to anyOf in tool schemas for OpenAI-compatible backends (fix(providers): rewrite oneOf to anyOf in tool schemas for OpenAI-compatible backends #10571) (36cb569)
• fix(session): create inventory tables atomically with schema version (fix(session): create inventory tables atomically with schema version #10586) (d5a8a3f)
• fix(code-mode): preserve recursive schema types with pctx 0.4.1 (fix(code-mode): preserve recursive schema types with pctx 0.4.1 #10572) (7f9bd27)
• refactor(acp): extract tool call handling from server (refactor(acp): extract tool call handling from server #10574) (076da90)
• fix(local-inference): preserve featured model size on delete and backfill missing sizes (fix(local-inference): preserve featured model size on delete and backfill missing sizes #10422) (18740b0)
• fix(apps): confine app file operations (fix(apps): confine app file operations #10481) (65e1e3d)
• fix(permissions): enforce manual approval for code mode (fix(permissions): enforce manual approval for code mode #10528) (b0f4e2a)
• fix(extensions): preserve command arguments through forms (fix(extensions): preserve command arguments through forms #10527) (29af64a)
• chore(release): bump version to 1.44.0 (minor) (chore(release): bump version to 1.44.0 (minor) #10597) (376e2f8)
• chore(release): open release branch for 1.44.0 (93159c9)
• rebuild canonical model db (rebuild canonical model db #10633) (249dbd6)
• Merge commit from fork (f8b5b7b)
• feat: support latest Gemini models (feat: support latest Gemini models #10630) (f0aff99)

---

This release PR was generated automatically.

[github-actions]

goose Release Manual Testing Checklist

Download the release builds from this PR. Once a build is ready, the actions bot will post a comment on this PR
with instructions on how to download and sign.

Use the following script to create a risk assessment and testing plan:

./workflow_recipes/release_risk_check/run.sh 1.44.0

It will generate an analysis report in /tmp/release_report_final.md and perform testing is necessary for high risk pr changes.

Run the goose self-test recipe

goose run --recipe goose-self-test.yaml

Have goose produce a test plan

Open the release candidate desktop app and have goose produce a test plan by pointing it at this PR. Use a prompt like

Look at the notes in PR and the report at /tmp/release_report_final.md and investigate potential risks in this release. After familiarizing yourself with the scope of each change, produce a suggested test plan that I should follow before publishing the release.

goose will produce a plan. Follow this plan to finish testing.

[github-actions]

macOS ARM64 Desktop App (Apple Silicon)

📱 Download macOS Desktop App (arm64, unsigned)

Instructions:

The easiest way is to just run the following script:

./scripts/pre-release.sh

script which will download the latest release (or you can specify the release you need), does the
unzip, xattr to get it out of quarantine and signs it.

If you need to do this manually:

• Download the file
• Unzip
• run xattr -r -d com.apple.quarantine '/path/to/Goose.app'
• optionally run codesign --force --deep --sign - --entitlements ui/desktop/entitlements.plist '/path/to/Goose.app'
• start the app

The signing step is only needed if you do something that uses mac entitlements like speech to text

[github-actions]

macOS ARM64 Desktop App (Apple Silicon)

📱 Download macOS Desktop App (arm64, unsigned)

Instructions:

The easiest way is to just run the following script:

./scripts/pre-release.sh

script which will download the latest release (or you can specify the release you need), does the
unzip, xattr to get it out of quarantine and signs it.

If you need to do this manually:

• Download the file
• Unzip
• run xattr -r -d com.apple.quarantine '/path/to/Goose.app'
• optionally run codesign --force --deep --sign - --entitlements ui/desktop/entitlements.plist '/path/to/Goose.app'
• start the app

The signing step is only needed if you do something that uses mac entitlements like speech to text

[github-actions]

macOS ARM64 Desktop App (Apple Silicon)

📱 Download macOS Desktop App (arm64, unsigned)

Instructions:

The easiest way is to just run the following script:

./scripts/pre-release.sh

script which will download the latest release (or you can specify the release you need), does the
unzip, xattr to get it out of quarantine and signs it.

If you need to do this manually:

• Download the file
• Unzip
• run xattr -r -d com.apple.quarantine '/path/to/Goose.app'
• optionally run codesign --force --deep --sign - --entitlements ui/desktop/entitlements.plist '/path/to/Goose.app'
• start the app

The signing step is only needed if you do something that uses mac entitlements like speech to text

[github-actions]

Release v1.44.0 has been tagged and pushed. Closing this PR (version bump was already merged to main).