chore(deps): update docker

[bootc-bot]

This PR contains the following updates:

Package	Update	Change
astral-sh/uv	patch	0.11.17 → 0.11.19
block/goose	minor	v1.36.0 → v1.37.0
jj-vcs/jj	minor	0.41.0 → 0.42.0
rust-nightly	patch	nightly-2026-05-31 → nightly-2026-06-09

---

Release Notes

astral-sh/uv (astral-sh/uv)

v0.11.19

Compare Source

Released on 2026-06-03.

Python

• Add CPython 3.15.0b2 (#​19531)

Enhancements

• Always compute SHA256 for remote distributions (#​19662)
• Add PyEmscripten platform (PEP 783) (#​19629)
• Add Pyodide 2025 target triple (#​19653)

Preview features

• Make preview features for commands have names that aren't ambiguous with the command (#​19645)
• Respect --isolated in uv check (#​19666)

Bug fixes

• Continue tool uninstall after dangling receipts (#​19623)
• Skip Unix-specific installation steps when cross-installing Windows Python distributions (#​19424)

v0.11.18

Compare Source

Released on 2026-06-01.

Performance

• Fix performance regression in unzip of local wheels (#​19637)

Preview

• Add uv check to run ty from uv (#​19605)

Bug fixes

• Update activation scripts with upstream fixes (#​19628)

Other changes

• Bump MSRV to 1.94 (#​19600)

block/goose (block/goose)

v1.37.0

Compare Source

✨ Features

• xAI SuperGrok OAuth subscription provider #​9420
• Replay ACP images on session load #​9496
• Expose raw provider supported models over ACP #​9475
• ACP session system prompt setter #​9478
• Scholar Sidekick MCP extension #​9433
• tui feature flag to gate the TUI command #​9428
• CLI to list skills with token counts #​9326
• Perplexity as a declarative OpenAI-compatible provider #​9324
• Alibaba (Qwen via DashScope) declarative provider #​9443
• Configurable tool output size limit via GOOSE_MAX_TOOL_RESPONSE_SIZE #​9256
• /model slash command to CLI for session model switching #​8747
• Databricks AI Gateway provider #​9274
• Russian language support #​9406
• Turkish desktop locale #​9392
• TUI command on goose-cli #​9385
• Configurable MAX_CODE_BLOCK_LINES via env vars #​9301
• NEAR AI Cloud provider #​9352
• goose://resume session deep link #​9343
• Scaleway provider #​9254
• GOOSE_FAST_MODEL env var support in ModelConfig::with_fast #​9296
• Harbor eval runner #​9138
• Slash commands (built-in, skill, recipe) in ACP server #​9238
• /goal command for agent self-evaluation before finishing #​9069
• Summon subagent instructions #​9325
• Open-plugins generalization + skills #​9112
• PreToolUse denial hooks #​9304
• ACP session list pagination #​9199
• goose review local code review command #​9114
• TUI diff viewer #​9260
• goose://new-session deep link to open fresh chat #​9196
• Atomic Chat as declarative OpenAI-compatible provider #​9210
• GOOSE_OAUTH_CALLBACK_PORT for stable OAuth redirect_uri #​9209
• Proactive OAuth token refresh to avoid re-auth on every session #​8386
• GPT-5.5 added to ChatGPT Codex known models #​9292
• Opt-in to Vercel AI gateway leaderboard #​9259
• ACP pass session cwd param to providers #​9229
• Routstr as a declarative provider #​9175
• FuturMix provider #​8840
• oMLX declarative provider #​9177
• Strip chain-of-thought markers from custom provider output #​8635
• Encrypted Nostr session sharing #​8922
• Simplified Chinese (zh-CN) translation #​8765
• Nushell terminal and completion support #​8628
• Optional --parameters to scheduled recipe #​8741
• GitHub Copilot /responses API #​9043
• Vercel AI Gateway provider #​9144
• Hooks system #​9093
• Projects as backend sources with system prompt injection #​8739
• Linux Vulkan support for local inference #​9038
• ACP streamable HTTP spec compliance #​9034
• Group consecutive tool calls into one summarized chain card #​8995
• Quarterly option for scheduler #​9076

🐛 Bug Fixes

• Forward custom headers through OAuth connect path #​9388
• Scheduled recipe session params #​9553
• Skip OTLP signals when protocol=grpc to avoid background-thread panic #​9512
• Refresh provider list in Switch Models picker #​9408
• Start new chat in current window from recipe param modal #​9422
• Make Azure api-version query param optional #​9221
• Preserve pending env vars in Add Extension form #​9285
• Tolerate missing responses output #​9449
• Build linux x86_64 standard inside manylinux_2_28 for glibc 2.28+ compat #​9415
• Stop the main window growing taller on every launch #​9409
• Desktop chat search session limiting #​9366
• Serialize per-session agent creation to stop duplicate MCP init #​9357
• Forward ACP server context window size to clients #​9455
• Use context limit from /model/info for custom LiteLLM models #​9303
• Preserve thinking content for provider context #​9314
• Mention configurable timeout env vars in Ollama stream stall error #​9246
• Include full recipe parameter details in load/discovery output #​9233
• Remove unused fetch-metadata IPC handler (SSRF) #​9340
• Respect GOOSE_MAX_TURNS in gateway sessions #​9354
• Send empty object instead of null for Anthropic tool_use input #​9355
• Preserve selected branch across project chats #​9010
• Use current_exe() instead of PATH lookup when spawning goose #​9236
• Set TCP_USER_TIMEOUT on streamable HTTP clients #​9207
• Activate custom provider after adding via configure #​9213
• Reduce excessive MISSING_TRANSLATION warnings for fallback locales #​9294
• Eliminate cross-window deep link contamination #​9273
• Improve Telegram gateway error reporting and connection reliability #​9223
• Enable VT processing on Windows Console Host #​9248
• Zero out cost for local providers (ollama, local) #​9219
• Prevent tool-use marker leakage in toolshim output #​8310
• Re-apply canonical limits when delegate overrides model #​9183
• Report cumulative total_tokens in stream-json/json output #​8910
• Refresh GCP metadata server token on expiration #​8929
• Convert quoted numeric config values to numbers if needed #​8844
• Keep SSE reconnect loop alive on long disconnects #​8846
• Apply request_params to outgoing OpenAI API payload #​9151
• Gemini 3.x known_location Global routing and KNOWN_MODELS entries #​9142
• Honor Retry-After on 429 responses #​9161
• Coalesce streaming Thinking deltas + list available tools on not-found #​9162
• Preserve user-set session name for recipe-based chats #​9079
• Enforce exp independently of MAX_TOKEN_AGE_SECONDS in OIDC proxy #​8839
• Improve inline code contrast in light theme #​9058
• Omit max_tokens for OpenAI-compatible requests when unset #​9123
• Set correct mcp-app host capabilities #​9116
• Normalize nullable schemas for Vertex Gemini compatibility #​8930
• Isolate GitHub recipe temp paths #​8878
• Set X-Initiator header on GitHub Copilot requests #​8809
• Honor dynamic_models: false in declarative provider configs #​8795
• Cache trailing message for stable Bedrock prefix across agent turns #​8916
• Case-insensitive model name lookup for context_limit #​8906
• Emit cumulative token usage in stream-json/json complete event #​8870
• Return 400 instead of panicking on invalid CSP header value #​8810
• Coalesce streaming chunks under one ACP message id #​8788
• Reuse goose2 vite server on port conflict #​8722
• Correct WSL2 OS detection by removing PWD-based Windows override #​8869
• Handle Bedrock ReasoningContent blocks gracefully #​8843
• Insert tool pair summaries at chronological position in conversation #​9087
• Enable SQLite foreign key enforcement in session pool #​9121
• Deleted chat session still appears in sidebar list #​8674
• Require extension_name on read_resource #​8989
• Queued message lost when clicking sending now #​9074
• Keep model picker and session config in sync #​9048
• Read prompted file parameters in recipes #​8504
• Accept null tool_call arguments in OpenAI streaming chunks #​9035
• Synchronously reap ACP child to avoid SIGCHLD race #​9023
• Elicitation fixes #​8999
• Persist accumulated cost in session DB to survive reload #​9191
• Check file fallback when keyring has no entry #​9279
• ScheduleModal error message styling #​9278
• Align sidebar hamburger in macOS fullscreen #​9257
• Emit trace_output as span attribute instead of event #​9255
• Replace Venice custom provider with declarative config #​9234
• Use mkdir -p for self-test workspace initialization #​9247
• Show tool name in approval prompt #​9216
• Resolve Azure CLI on Windows by using az.cmd #​9215
• Handle non-interactive terminal in goose configure on Windows #​9214
• Ensure parallel tool image responses don't interleave tool results for Databricks #​9241
• Use plain '> ' prompt instead of goose emoji #​9305
• Stop killing goosed when a window closes #​9302
• Use appInfo instead of clientInfo in MCP Apps init handshake #​9249

🔧 Improvements

• Honor blocking Stop hook decisions #​9468
• Local inference: stricter GGUF requirements, auto detection of tool calling support, fixed thinking output parsing #​9442
• Prefer goose aliases for Databricks v2 inventory #​9430
• Simplify UI customization #​9353
• Build summon instructions per turn #​9329
• Optional api_key configuration for declarative openai-engine providers #​9202
• Flag for login shell PATH #​9313
• Remove popular chat topics from new chat screen #​9307
• Linux musl CLI builds #​9240
• Structured per-provider config block, non-destructive provider switching #​8977
• Flush OTLP traces reliably on exit with configurable timeout #​9228
• Better parsing of pasted HTML as markdown so agents understand #​9190
• Prompt injection mitigation: update pattern-based detection #​9198
• Prompt injection mitigation: update pattern-based detection to reduce FPs #​9350
• Surface resolved Databricks model metadata #​9206
• Unified thinking effort control across all providers #​9242
• Linux desktop Vulkan packages #​9323
• Preserve thinking content for providers that require it #​8857
• Dynamically refresh skill instructions each turn #​9217
• Build non-Vulkan Linux variants using Ubuntu 22.04 #​9211
• Include request URL in provider error messages #​9232
• Worktree-aware directory switcher #​8450
• Chat history search feature to navigation panel #​8448
• Provider-first onboarding #​9039
• Improvements to LM Studio declarative provider #​8973
• Location column in CLI skills table #​8785
• GOOSE_DISABLE_TOOL_CALL_SUMMARY to opt out of per-tool-call summaries #​8947
• Localize hardcoded strings in provider settings UI #​8931
• Move settings into app shell #​9047
• Parallelize provider resolution and eagerly init SQLite pool #​8899
• Deduplicate _goose/providers/list RPC call at startup #​8873
• Skills library redesign #​8868
• TUI spacing/layout improvements #​9243
• Polish sidebar and context panel #​9059
• Polish inline code snippet styling #​9011
• Polish sidebar navigation and project icons #​8896
• Extensions page redesign #​8940
• Mergeable configs + cleanup #​8378
• Consolidate logging setup into shared helper in goose crate #​8817
• Replace lazy_static with std::sync::LazyLock #​8815
• DEFAULT_PROVIDER_TIMEOUT_SECS constant for providers #​8816
• Remove vendored Windows binaries #​9318
• Use native arm64 runners for Linux artifact builds #​9075

📚 Documentation

• Scaleway provider documentation #​9423
• Guide for connecting goose Desktop to a remote goosed server #​9275
• SaladCloud AI Gateway provider documentation #​9253
• Hooks guide #​9288
• Document summon extension requirement for delegate and load tools #​9231
• Blog post for hooks feature #​9227
• Documentation reorganization #​9310
• Tunnel remote access documentation update #​9077
• Orchestrating with goose blog post #​9104
• Blog post on findings with minimax and office QA benchmark #​8984
• Blog post on goose with peekaboo #​8884
• Built-in Local Inference blog post #​8808

jj-vcs/jj (jj-vcs/jj)

v0.42.0

Compare Source

About

jj is a Git-compatible version control system that is both simple and powerful. See
the installation instructions to get started.

Release highlights

• Switched to the mimalloc memory allocator for better multi-threaded
  performance.

Breaking changes

• The following deprecated command options have been removed:

  • jj commit --reset-author/--author
  • jj describe --no-edit/--edit/--reset-author/--author
  • jj git push --allow-new
  • jj metaedit --update-committer-timestamp

• The following deprecated config options have been removed:

  • git.auto-local-bookmark
  • git.push-new-bookmarks

Deprecations

• jj evolog no longer supports legacy commit predecessors recorded in jj <
  0.30.

New features

• Shell completions now surface descriptions for custom aliases,
  revset-aliases, template-aliases, and fileset-aliases. Descriptions are
  extracted from the .doc field of the alias definition if it is a table
  with .doc and .definition properties.

• jj show now accepts multiple revisions, showing all of them one after the
  other, behaving closer to git show.

• jj git fetch now generates evolution history based on change IDs. If change
  IDs are preserved by the remote, local descendant revisions will be rebased
  onto the rewritten parents.

• Added jj util backend name command that prints the commit backend being used
  in the current repo.

• Added edit-invocation-mode config option for diff editors (e.g.
  jj diffedit, jj split). When set to "file-by-file", the editor is
  launched once per changed file, making it possible to use per-file tools like
  vimdiff for editing.

Fixed bugs

• jj git remote add now reports an error instead of panicking when the
  remote name is empty or contains whitespace.
  #​9099

• Color-words diffs are now shown as separate before and after lines when color
  output is disabled, making piped or redirected diffs readable.
  #​5894

• jj bookmark forget no longer prints Forgot N local bookmarks. when no
  local bookmarks were actually forgotten (e.g. when only an untracked remote
  bookmark matched). #​9181.

• The builtin_log_redacted template now also redacts workspace names.

Contributors

Thanks to the people who made this release happen!

• Alex Jaspersen (@​ajaspers)
• Archer (@​archer-321)
• ase (@​adamse)
• Austin Seipp (@​thoughtpolice)
• David Rieber (@​drieber)
• Eyüp Can Akman (@​eyupcanakman)
• Jakub Stasiak (@​jstasiak)
• James Dixon (@​lemonase)
• Joseph Lou (@​josephlou5)
• Laurynas Keturakis (@​laulauland)
• Luna Schwalbe (@​lunagl)
• Martin von Zweigbergk (@​martinvonz)
• Niko Savola (@​nikosavola)
• OlshaMB (@​OlshaMB)
• Sergey Kasmy (@​SergeyKasmy)
• truffle (@​truffle-dev)
• Vincent Ging Ho Yim (@​cenviity)
• Yuya Nishihara (@​yuja)

---

Configuration

📅 Schedule: (in timezone UTC)

• Branch creation
  • "on sunday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.