chore(aaif): rename a bunch of repository references by jamadeo · Pull Request #8152 · aaif-goose/goose

jamadeo · 2026-03-27T12:00:09Z

Uses aaif-goose as the org placeholder, but we can easily swap this.

github-actions · 2026-03-27T12:03:03Z

🔍 Recipe Security Scan Results

⚠️ Status: SCAN FAILED - Technical issues during scanning

📊 Scan Summary:

Total recipes scanned: 1
Failed scans: 1

📋 Individual Recipe Results:
❓ Recipe 1: UNKNOWN (UNKNOWN risk)

🔗 View detailed scan results in the workflow artifacts.

chatgpt-codex-connector

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 6a0948d4c8

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

chatgpt-codex-connector · 2026-03-27T12:06:38Z

        let tag = if canary { "canary" } else { "stable" };
        let asset = asset_name();
-        let url = format!("https://github.com/block/goose/releases/download/{tag}/{asset}");
+        let url = format!("https://github.com/aaif-goose/goose/releases/download/{tag}/{asset}");


Retain updater fallback to current release repository

The update() download endpoint now hardcodes aaif-goose/goose with no fallback, so goose update will fail with HTTP errors in any staged-migration period where releases are still published under block/goose (or if redirects are unavailable). Because this URL is the only source for the update artifact, users lose the self-update path entirely; keep a temporary fallback to the prior repo until the cutover is fully complete.

Useful? React with 👍 / 👎.

That's okay, we won't do a release of this code without also doing the migration.

chatgpt-codex-connector · 2026-03-27T12:06:39Z

  deny:
    runs-on: ubuntu-latest
-    if: github.repository == 'block/goose'
+    if: github.repository == 'aaif-goose/goose'


Allow workflow guard to run in pre-transfer repository

This repository check now only matches aaif-goose/goose, which causes the job to be skipped outright in pre-transfer environments where the repo is still block/goose. That silently disables cargo-deny enforcement on PR and scheduled runs, removing a dependency/security gate during the migration window; the guard should permit both repo names until migration is finalized.

Useful? React with 👍 / 👎.

That's okay, we should do the repo transfer first and then merge

github-actions · 2026-03-27T12:16:41Z

🔍 Recipe Security Scan Results

⚠️ Status: SCAN FAILED - Technical issues during scanning

📊 Scan Summary:

Total recipes scanned: 1
Failed scans: 1

📋 Individual Recipe Results:
❓ Recipe 1: UNKNOWN (UNKNOWN risk)

🔗 View detailed scan results in the workflow artifacts.

chatgpt-codex-connector

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 139bb73e42

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

chatgpt-codex-connector · 2026-03-27T12:23:57Z

 RATE_LIMIT_PER_SECOND = "2"

-ALLOWED_REPOS = "block/goose,aaif/goose"
+ALLOWED_REPOS = "aaif-goose/goose,aaif/goose"


Keep block/goose in OIDC allowlist during repo cutover

This change drops block/goose from ALLOWED_REPOS, but the proxy validator rejects any JWT whose payload.repository is not in that list (oidc-proxy/src/index.js checks this before forwarding). In any deployment where workflows still mint tokens for block/goose (for example, if config rolls out before the repo transfer is complete), requests to the OIDC proxy will start returning 401 and automation that depends on it (like code-review runs) will fail; keep both repo slugs until migration is finished.

Useful? React with 👍 / 👎.

we'll merge after transfer, this is OK

chatgpt-codex-connector · 2026-03-27T12:23:57Z

        for attempt in range(max_retries):
            try:
-                url = "https://api.github.com/repos/block/goose/stats/contributors"
+                url = "https://api.github.com/repos/aaif-goose/goose/stats/contributors"


Align contributor classification with new aaif-goose source

The script now fetches contributors from aaif-goose/goose, but the internal-user classifier still only recognizes Block org/company signals (BLOCK_ORGS and is_block_employee) and then records those users as block_non_goose. Once contributors come from AAIF-maintained repos, internal contributors not tied to Block will be misclassified as external, which skews the community-stars rankings and downstream award decisions.

Useful? React with 👍 / 👎.

github-actions · 2026-04-07T00:50:21Z

🔍 Recipe Security Scan Results

⚠️ Status: SCAN FAILED - Technical issues during scanning

📊 Scan Summary:

Total recipes scanned: 1
Failed scans: 1

📋 Individual Recipe Results:
❓ Recipe 1: UNKNOWN (UNKNOWN risk)

🔗 View detailed scan results in the workflow artifacts.

Signed-off-by: Michael Neale <michael.neale@gmail.com>

github-actions · 2026-04-07T03:44:40Z

🔍 Recipe Security Scan Results

⚠️ Status: SCAN FAILED - Technical issues during scanning

📊 Scan Summary:

Total recipes scanned: 1
Failed scans: 1

📋 Individual Recipe Results:
❓ Recipe 1: UNKNOWN (UNKNOWN risk)

🔗 View detailed scan results in the workflow artifacts.

- Map SECURITY_SCANNER_ANTHROPIC_API_KEY to OPENAI_API_KEY in scan-recipe.sh (broken since PRs #7387/#7391 renamed the env var in the workflow but never updated the script) - Add contents: write permission to docs deploy job so pr-preview-action can push to gh-pages Signed-off-by: Michael Neale <michael.neale@gmail.com>

github-actions · 2026-04-07T03:48:53Z

🔍 Recipe Security Scan Results

⚠️ Status: SCAN FAILED - Technical issues during scanning

📊 Scan Summary:

Total recipes scanned: 1
Failed scans: 1

📋 Individual Recipe Results:
❓ Recipe 1: UNKNOWN (UNKNOWN risk)

🔗 View detailed scan results in the workflow artifacts.

* origin/main: fix: hide hidden extensions in UI (#8346) refactor: skills as its own platform ext (#8244)

Signed-off-by: Michael Neale <michael.neale@gmail.com>

github-actions · 2026-04-07T03:53:17Z

🔍 Recipe Security Scan Results

⚠️ Status: SCAN FAILED - Technical issues during scanning

📊 Scan Summary:

Total recipes scanned: 1
Failed scans: 1

📋 Individual Recipe Results:
❓ Recipe 1: UNKNOWN (UNKNOWN risk)

🔗 View detailed scan results in the workflow artifacts.

github-actions · 2026-04-07T03:56:14Z

PR Preview Action v1.8.1
🚀 View preview at https://aaif-goose.github.io/goose/pr-preview/pr-8152/
Built to branch `gh-pages` at 2026-04-07 05:23 UTC. Preview will be ready when the GitHub Pages deployment is complete.

The scanner runs goose with GOOSE_PROVIDER=openai and GOOSE_MODEL=gpt-4o, so it needs OPENAI_API_KEY. The workflow was passing SECURITY_SCANNER_ANTHROPIC_API_KEY which the script doesn't recognize. Use the existing OPENAI_API_KEY repo secret directly. Signed-off-by: Michael Neale <michael.neale@gmail.com>

github-actions · 2026-04-07T04:15:32Z

🔍 Recipe Security Scan Results

⚠️ Status: SCAN FAILED - Technical issues during scanning

📊 Scan Summary:

Total recipes scanned: 1
Failed scans: 1

📋 Individual Recipe Results:
❓ Recipe 1: UNKNOWN (UNKNOWN risk)

🔗 View detailed scan results in the workflow artifacts.

* main: fix: use OPENAI_API_KEY secret for recipe security scanner (#8358) feat: configurable extension timeouts via ACP _meta and global default (#8295)

github-actions · 2026-04-07T05:18:43Z

🔍 Recipe Security Scan Results

⚠️ Status: SCAN FAILED - Technical issues during scanning

📊 Scan Summary:

Total recipes scanned: 1
Failed scans: 1

📋 Individual Recipe Results:
❓ Recipe 1: UNKNOWN (UNKNOWN risk)

🔗 View detailed scan results in the workflow artifacts.

The goose CLI binary requires libgomp.so.1 (OpenMP) which is missing from the scanner's Debian container. Signed-off-by: Michael Neale <michael.neale@gmail.com>

github-actions · 2026-04-07T05:23:12Z

🔍 Recipe Security Scan Results

⚠️ Status: SCAN FAILED - Technical issues during scanning

📊 Scan Summary:

Total recipes scanned: 1
Failed scans: 1

📋 Individual Recipe Results:
❓ Recipe 1: UNKNOWN (UNKNOWN risk)

🔗 View detailed scan results in the workflow artifacts.

* origin/main: chore(aaif): rename a bunch of repository references (#8152) fix: use OPENAI_API_KEY secret for recipe security scanner (#8358) feat: configurable extension timeouts via ACP _meta and global default (#8295)

* origin/main: (32 commits) docs: rework homepage and add aaif migration blog post (#8356) chore(aaif): rename a bunch of repository references (#8152) fix: use OPENAI_API_KEY secret for recipe security scanner (#8358) feat: configurable extension timeouts via ACP _meta and global default (#8295) fix: hide hidden extensions in UI (#8346) refactor: skills as its own platform ext (#8244) fix baseUrl (#8347) Fix desktop slash commands (#8341) fix(cli): display platform-correct secrets path in keyring config dialog (#8328) feat(acp): add reusable ACP provider controls (#8314) fix: resolve MDX compilation error in using-goosehints.md (#8332) fix: use v1beta1 API version for Google/MaaS models on GCP Vertex AI (#8278) docs: add MCP Roots guide (#8252) rust acp client for extension methods (#8227) fix: reconsolidate split tool-call messages to follow OpenAI format (#7921) fix: clean up MCP subprocesses after abrupt parent exit (#8242) build: raise default stack reserve to 8 MB (#8234) fix(config): honour GOOSE_DISABLE_KEYRING from config.yaml at startup (#8219) feat: add configurable fast_model for declarative providers (#8194) fix(authentication): Allow connecting to Oauth servers that use protected-resource fallback instead of the WWW-authenticate header (#8148) ...

jamadeo requested review from DOsinga, angiejones and blackgirlbytes as code owners March 27, 2026 12:00

chatgpt-codex-connector Bot reviewed Mar 27, 2026

View reviewed changes

chore(aaif): rename a bunch of repository references

139bb73

jamadeo force-pushed the repo-rename branch from 6a0948d to 139bb73 Compare March 27, 2026 12:13

chatgpt-codex-connector Bot reviewed Mar 27, 2026

View reviewed changes

DOsinga added the needs_human label to set when a robot looks at a PR and can't handle it label Mar 30, 2026

Merge remote-tracking branch 'origin/main' into repo-rename

c9a05f8

jamadeo requested review from alexhancock and michaelneale April 7, 2026 00:57

fix: update insta snapshots for AAIF rename

a5da66e

Signed-off-by: Michael Neale <michael.neale@gmail.com>

michaelneale added 2 commits April 7, 2026 13:50

Merge remote-tracking branch 'origin/main' into repo-rename

6afcfaa

* origin/main: fix: hide hidden extensions in UI (#8346) refactor: skills as its own platform ext (#8244)

fix: add pull-requests write permission for docs preview comment

2c7609f

Signed-off-by: Michael Neale <michael.neale@gmail.com>

michaelneale approved these changes Apr 7, 2026

View reviewed changes

This was referenced Apr 7, 2026

fix: use OPENAI_API_KEY secret for recipe security scanner #8358

Merged

fix: update all block.github.io/goose URLs to new GitHub repository location #8359

Closed

Merge main into repo-rename (security scanner fix)

def3252

* main: fix: use OPENAI_API_KEY secret for recipe security scanner (#8358) feat: configurable extension timeouts via ACP _meta and global default (#8295)

fix: add libgomp1 to recipe scanner Docker image

227af5b

The goose CLI binary requires libgomp.so.1 (OpenMP) which is missing from the scanner's Debian container. Signed-off-by: Michael Neale <michael.neale@gmail.com>

michaelneale merged commit 583acd4 into main Apr 7, 2026
22 of 24 checks passed

michaelneale deleted the repo-rename branch April 7, 2026 05:34

github-actions Bot mentioned this pull request Apr 8, 2026

chore(release): release version 1.30.0 #8261

Closed

Conversation

jamadeo commented Mar 27, 2026

Uh oh!

github-actions Bot commented Mar 27, 2026

Uh oh!

chatgpt-codex-connector Bot left a comment

Choose a reason for hiding this comment

💡 Codex Review

Uh oh!

chatgpt-codex-connector Bot Mar 27, 2026

Choose a reason for hiding this comment

Uh oh!

jamadeo Mar 27, 2026

Choose a reason for hiding this comment

Uh oh!

chatgpt-codex-connector Bot Mar 27, 2026

Choose a reason for hiding this comment

Uh oh!

jamadeo Mar 27, 2026

Choose a reason for hiding this comment

Uh oh!

github-actions Bot commented Mar 27, 2026

Uh oh!

chatgpt-codex-connector Bot left a comment

Choose a reason for hiding this comment

💡 Codex Review

Uh oh!

chatgpt-codex-connector Bot Mar 27, 2026

Choose a reason for hiding this comment

Uh oh!

jamadeo Mar 27, 2026

Choose a reason for hiding this comment

Uh oh!

chatgpt-codex-connector Bot Mar 27, 2026

Choose a reason for hiding this comment

Uh oh!

github-actions Bot commented Apr 7, 2026

Uh oh!

github-actions Bot commented Apr 7, 2026

Uh oh!

github-actions Bot commented Apr 7, 2026

Uh oh!

github-actions Bot commented Apr 7, 2026

Uh oh!

github-actions Bot commented Apr 7, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Built to branch gh-pages at 2026-04-07 05:23 UTC. Preview will be ready when the GitHub Pages deployment is complete.

Uh oh!

github-actions Bot commented Apr 7, 2026

Uh oh!

github-actions Bot commented Apr 7, 2026

Uh oh!

github-actions Bot commented Apr 7, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

github-actions Bot commented Apr 7, 2026 •

edited

Loading

Built to branch `gh-pages` at 2026-04-07 05:23 UTC.
Preview will be ready when the GitHub Pages deployment is complete.