Skip to content

chore(deps): update docker - #254

Open
bootc-bot[bot] wants to merge 1 commit into
mainfrom
bootc-renovate/docker
Open

chore(deps): update docker#254
bootc-bot[bot] wants to merge 1 commit into
mainfrom
bootc-renovate/docker

Conversation

@bootc-bot

@bootc-bot bootc-bot Bot commented Sep 6, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Update Change
astral-sh/uv patch 0.12.90.12.11
block/goose minor v1.48.0v1.50.0
jj-vcs/jj minor 0.44.00.45.1
rust-nightly patch nightly-2026-09-01nightly-2026-09-09

Release Notes

astral-sh/uv (astral-sh/uv)

v0.12.11

Compare Source

Released on 2026-09-08.

Preview features
  • Generate missing artifact hashes when exporting pylock.toml files to ensure they conform to PEP 751 (#​20146)
  • Warn when pylock.toml artifact hash tables are empty, which will be rejected in a future uv release (#​21462)
Performance
  • Speed up installs that overwrite existing files by eliminating per-file temporary directories for atomic hard-link, symlink, and reflink replacements (#​21478)
  • Speed up installs that merge copied wheels into existing environments by replacing per-file temporary directories with adjacent temporary files (#​21468)
  • Speed up local wheel installs by replacing the shared ZIP cursor lock with positioned reads (#​21500)
  • Speed up local wheel installs by reusing ZIP readers and buffers across extracted files (#​21499)
  • Avoid transitive dependency checks and unnecessary resolution when uv pip install --no-deps finds the requested packages already installed (#​21523)
Bug fixes
  • Verify source archives against hashes recorded in uv.lock before reading their metadata or running their build backends (#​21223)
  • Verify supplied hashes for registry requirements pinned with === under both --verify-hashes and --require-hashes (#​21543)
  • Apply hashes from public-version pins to matching local versions when no exact local-version hash is provided (#​21544)
  • Support PowerShell virtual environment activation from UNC paths, including WSL paths (#​19159)
  • Trim surrounding whitespace from entries in .python-version and .python-versions files (#​21529)
  • Suppress VIRTUAL_ENV mismatch warnings for uv add --no-sync, uv remove --no-sync, and uv add --frozen (#​21496)
  • Warn and continue when uv python list cannot query an interpreter (#​21498)
Documentation
  • Restore TOML syntax highlighting for exclude-newer examples (#​21534)

v0.12.10

Compare Source

Released on 2026-09-04.

Enhancements
  • Attempt to revoke short-lived PyPI trusted-publishing tokens after uv publish completes, including when publishing fails (#​21423)
Preview features
  • Omit exclude-newer-package settings for packages outside the resolution from uv.lock with the missing-exclude-newer-package-lock preview feature (#​21455)
  • Show terminal dependency cycles in uv tree --invert output (#​21404)
Performance
  • Speed up locking large workspaces with conflicts by excluding unrelated extras and dependency groups from conflict simplification (#​21399)
  • Speed up uv publish by hashing each artifact in a single blocking task and reusing the buffer across reads (#​21389)
Bug fixes
  • Prevent --locked from failing when exclude-newer-package settings differ only for packages outside the resolution (#​21454)
  • Allow uv lock --check to reuse a lockfile when an absolute exclude-newer cutoff is moved later (#​19571)
  • Allow uv lock --check to reuse a lockfile when a package-specific exclude-newer cutoff is disabled (#​21450)
  • Require an explicit --name when uv init would infer a project name reserved for a Python interpreter (#​21395)
  • Write package-specific exclude-newer cutoffs to uv.lock in a deterministic order (#​21453)
block/goose (block/goose)

v1.50.0

Compare Source

✨ Features
  • Support GPT-6 Astra models #​11869
  • Tool calling for goose-agent #​11627
  • Kotlin callers can now configure Databricks AI Gateway path #​11631
🐛 Bug Fixes
  • Require HTTPS for Snowflake connections #​11745
  • Bind CLI session naming to trusted path #​11787
  • Honor content capture opt-out in tracing #​11782
  • Enforce subagent platform guards #​11604
  • Show authoritative tool approval details #​11743
  • Preserve permission revocations across managers #​11383
  • Resolve UI freeze after renaming session #​11759
  • Count durable background turns in summon #​11841
  • Anchor chat-payload breakpoints on the agentic tail #​11429
  • Preserve cwd and child status in node launchers #​11753
🔧 Improvements
  • Prefer latest MCP version #​11827
  • Remove keyring timeout #​11798
  • Publish goose ACP client and acp binary as separate npm packages #​11846
  • Remove managed model registry from local inference #​11789
  • Remove fast model routing #​11469
  • AIML API integration #​11758
📚 Documentation
  • Move ACP reference under GDK section #​11805
  • Generate ACP reference documentation from release schemas #​11770
  • ClawMetry session observability tutorial #​11554

v1.49.0

Compare Source

✨ Features
  • Auto-updater for desktop application #​10614
  • Linux ARM64 desktop release packages #​11518
  • Load extensions in the background so the CLI prompt is immediately usable #​10403
  • Title sessions by subject, not workflow step #​11135
  • Interactive git branch indicator in chat bottom bar #​11290
  • on_failure block for PreToolUse hooks #​11449
  • Web-search and browser-use built-in skills #​11233
  • Model-native audio transcription provider #​10589
  • --with-extension can now name its extension #​11127
  • Auto-focus chat input when user starts typing #​11184
  • Collapse scheduled job sessions into accordion in chat history #​11265
  • Select saved recipes when creating a schedule #​10892
  • Show recent used models in chat footer model picker #​11097
  • PreToolUseResult event and stable tool_call_id across tool lifecycle #​11120
  • Sort configured providers to the top of the provider list #​11409
  • OpenRouter session_id forwarding and app category header #​10868
  • ACP thinking effort derivation and forwarding #​10949
  • GPT-5.6 follow-up support for Codex and Responses API #​10460
  • Pre-registered OAuth clients for streamable_http extensions #​11182
  • OTEL request params, response metadata, tool call parity, and agent identification #​11261
New Providers
  • Opper as a declarative OpenAI-compatible provider #​11589
  • Databricks Unity Catalog model services discovery #​11575
  • TrustedRouter declarative provider #​11422
  • OpenCode Zen gateway as a declarative provider #​10939
  • Gondola as declarative OpenAI-compatible provider #​11421
  • SayGM as declarative OpenAI-compatible provider #​11267
  • Lynkr as declarative OpenAI-compatible provider #​11372
  • PleumRouter declarative provider #​10479
  • Z.ai GLM-5.3 (replacing GLM-5.2) #​11226
  • OpenAI GPT-5.6 (sol/terra/luna) via Bedrock #​10502
  • Custom provider cost fields for cost tracking #​11220
🐛 Bug Fixes
  • Unify context limit resolution behind provider API #​11213
  • Keep using valid MCP access tokens without a refresh token #​11324
  • Provider save no longer overwrites stored config with defaults #​11517
  • Deduplicate parallel tool-pair summaries #​11195
  • Exclude Git metadata from project hints #​11148
  • Honor remote working directory for new chats and allow typed paths #​11322
  • Sanitize hidden Unicode in Bedrock tools #​11121
  • Avoid sending images to non-vision capable models #​11496
  • Reject cmd.exe commands containing newlines #​11537
  • Honest compaction failure message and fast-fail when no tool responses exist #​10500
  • Chat input freeze after opening model picker #​11525
  • Bound non-streaming JSON responses #​11109
  • Reject non-object response schemas in recipes #​11478
  • Coalesce consecutive Thinking blocks in collect_stream #​11317
  • Decouple source file and tool response limits #​11391
  • Discover GGUF repos with non-standard filenames #​11005
  • Flip select menus up when the window clips them #​11495
  • Bedrock prefer HTTP bearer auth when configured #​11562
  • MCP sampling for reasoning-first responses #​11092
  • Keep recalled history agent-visible #​11490
  • Fail closed on invalid default GCP credentials #​11363
  • Bound handoff memo so long sessions stay resumable #​11204
  • Goose unable to work with DeepSeek and Alibaba using OpenAI responses API #​11298
  • Show tool inputs before approval #​10932
  • Deduplicate enabled builtins #​11340
  • Send explicit thinking disabled to adaptive Claude models #​11177
  • Handle error code for context length exceeded #​11283
  • Include required annotations field on replayed output_text items #​11263
  • Isolate concurrent subagent notifications #​10772
  • Validate recipe parameter values #​11234
  • Re-enable minijinja builtins so documented recipe filters work #​11310
Security Fixes
  • Enforce per-turn model tool allowlists #​11426
  • Stop exposing provider secret suffixes #​11476
  • Restrict code mode callback output #​11471
  • Restrict app management tools #​11470
  • Preserve local inference message text #​11452
  • Preserve session extension identities #​11420
  • Bound local image reads in developer extension #​11419
  • Confine agent listing to source roots #​11444
  • Recognize Windows package runners #​11466
  • Fail closed on malformed tool visibility #​11474
  • Give permission denies precedence #​11477
  • Confine recipe library writes #​11482
  • Scope app events by extension #​11486
  • Restrict project updates to visible sessions #​11487
  • Reject symlinked check sources #​11489
  • Honor plugin enablement for skills #​11439
  • Protect system prompt transport in claude-code #​11441
  • Bind ACP permissions to request generations #​11415
  • Honor MCP tool model visibility in Code Mode #​11425
  • Refuse symlink diagnostics outputs #​11398
  • Serialize secret mutations #​11388
  • Suppress sensitive OTLP traces #​11381
  • Bound call graph traversal #​11193
  • Fail closed on invalid Codex ACP mode #​11362
  • Bind Foundry API keys to request origin #​11347
  • Validate memory categories #​11191
  • Bound recursive mention scans #​11228
  • Fail closed on malformed app visibility #​11341
  • Redact Telegram tokens from request errors #​11343
  • Encode session navigation parameters #​11232
  • Redact URLs in provider errors #​11230
  • Confine temporary extraction cleanup #​11125
  • Clear custom provider transition secrets #​11467
  • Pin renderer ACP certificates #​11485
  • Require fresh file parameter input #​11455
  • Escape OAuth callback content #​11479
  • Sanitize Unicode tags in MCP prompts #​11453
🔧 Improvements
  • Improve long chat rendering performance #​11583
  • Limit sessions before counting messages for performance #​11521
  • Enforce locked Cargo dependencies in CI #​11560
  • Move inference operation into goose-agent crate #​11294
  • Make roaming an opt-in goose-cli feature (default-off) #​11516
  • Improve ACP provider setup and unify setup metadata #​11100
  • Create goose-agent crate with unrolled agent loop state machine #​11216
  • Make unrolled loop state machine generic #​11139
  • Compact with main session model, not fast model #​11255
  • Add MCP conformance tests to goose CI #​10940
  • Aura dark theme for Goose #​10283
  • Bedrock routing table with Gemma 4 Mantle support #​10297
  • Gate clear_thinking behind opt-in flag (Z.AI-only) #​10439
  • Include working directory in stop hook context #​11112
  • Keep stdio extensions alive across worker exits #​10364
  • Include thinking tokens in Google usage output_tokens #​10354
  • Give GOOSE_SUBAGENT_PROVIDER/MODEL priority over LLM-injected params #​9650
  • Preserve extensions when adding MCP servers #​11339
  • Preserve platform tool allowlists #​11369
  • Make Gemini plugin installs transactional #​11303
📚 Documentation
  • GDK language param in doc links #​11592
  • Retire Recipe Cookbook security scanner #​11597
  • Require issues before pull requests #​11565
  • GDK API Reference nav item + deep-link anchors #​11564
  • SDK API reference for Rust, Python, and Kotlin #​11251
  • Correct Telegram gateway setup #​11527
  • Keep GitHub comments concise #​11447
jj-vcs/jj (jj-vcs/jj)

v0.45.1

Compare Source

About

jj is a Git-compatible version control system that is both simple and powerful. See
the installation instructions to get started.

Release highlights

This release fixes an error that prevented the new jj-core crate from being
published. See the release notes for v0.45.0 for more changes since v0.44.0.

Fixed bugs
  • Building without Cargo.lock (e.g. cargo install jj-cli) works again
    after all versions of the bisync crate, a transitive dependency of gix,
    were yanked.

  • Signatures on commits in SHA-256 Git repositories are now stored under the
    gpgsig-sha256 header, as Git does, so Git recognizes them as signed and
    jj can read them back.

Contributors

Thanks to the people who made this release happen! This list includes the contributors to v0.45.0.

v0.45.0

Compare Source

About

jj is a Git-compatible version control system that is both simple and powerful. See
the installation instructions to get started.

Release highlights
  • A new jj converge command was added to help automatically resolve divergent
    commits by combining them appropriately.
Breaking changes
  • jj config {edit,set,unset} --user now targets the first loaded user
    configuration file (e.g. ~/.config/jj/config.toml or the first file in
    conf.d/) instead of prompting interactively when multiple files exist.
    Use --file <PATH> to target a specific config file.

  • jj git import in non-colocated repositories no longer imports commits from a
    detached Git HEAD branch.

Deprecations

None

New features
  • The new jj converge command attempts to automatically resolve divergence by
    creating a new commit that replaces the divergent commits. It applies
    heuristics to try to automatically come up with a good solution, and falls
    back to prompting the user if the heuristics are inconclusive. It can also run
    in non-interactive mode, which aborts if prompting would be needed.

  • jj bisect will now mention when it cannot unambiguously find the first bad
    revision due to skips in evaluation.

  • Git HEAD state is now tracked per worktree internally. This prepares
    colocated repositories for support of multiple Git worktrees, where each
    jj workspace can have its own Git HEAD. Existing repositories are migrated
    automatically.

  • jj config {edit,set,unset} now support a --file <PATH> option to
    target a specific configuration file (such as files inside a conf.d/
    directory or loaded via --config-file). This allows precise file targeting
    and avoids interactive prompts when multiple config files exist.

Fixed bugs
  • The default immutable_heads() set
    now includes untracked_remote_tags().

  • jj arrange now scrolls the viewport to keep the selected commit visible
    when the commit stack is taller than the terminal.
    #​9033.

  • The default pager flags now include -K (--quit-on-intr), so pressing
    Ctrl+C in less exits cleanly instead of leaving the terminal in a
    corrupted state (raw mode, visible escape sequences, broken input).

  • A side of a conflict whose contents end with a carriage return no longer loses
    that byte when the materialized conflict is parsed back, such as when a
    conflicted file is snapshotted from the working copy.
    #​9868

  • In colocated workspaces, jj workspace update-stale now correctly resets the
    Git HEAD to the parent of the fresh working-copy commit.
    #​9936

  • jj run no longer runs against the remaining revisions if a process exits
    with a nonzero exit code.

  • Fixed crash in jj log involving hidden revisions and the
    log-graph-prioritize revset.
    #​9975

  • In colocated repos, an external git add after a jj command no longer
    produces a tree with duplicate entries (git fsck: duplicateEntries). jj
    was leaving a stale cache-tree behind in .git/index. Repositories already
    corrupted this way are not repaired by the fix.
    #​9711
    #​8884

Contributors

Thanks to the people who made this release happen!


Configuration

📅 Schedule: (in timezone UTC)

  • Branch creation
    • "on sunday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

@bootc-bot
bootc-bot Bot force-pushed the bootc-renovate/docker branch 5 times, most recently from ba81463 to 8f4507c Compare September 8, 2026 21:21
Signed-off-by: bootc-bot[bot] <225049296+bootc-bot[bot]@users.noreply.github.com>
Signed-off-by: bootc-bot[bot] <225049296+bootc-bot[bot]@users.noreply.github.com>
@bootc-bot
bootc-bot Bot force-pushed the bootc-renovate/docker branch from 8f4507c to 03e7d5f Compare September 9, 2026 02:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants