chore(release): release version 1.18.0 (minor)

[github-actions]

Release v1.18.0

How to Release

Push the release tag to trigger the release:

git fetch && git tag v1.18.0 origin/release/1.18.0
git push origin v1.18.0

This PR will auto-merge once the tag is pushed.

Important Notes

• All commits in this release should have corresponding cherry-picks in main
• This PR can be closed if the release is not needed.

Changes in This Release

Comparing: v1.17.0...v1.18.0

• fix: filter tools in Ollama streaming when chat mode is enabled (fix: filter tools in Ollama streaming when chat mode is enabled #6118) (8b80d8b)
• workflow: enable docs-update-recipe-ref (workflow: enable docs-update-recipe-ref #6132) (e261e12)
• feat(goose-cli): add feature to disable update (feat(goose-cli): add feature to disable update #5886) (02f56a0)
• Fix keyboard shortcut conflict for Focus Goose Window (Fix keyboard shortcut conflict for Focus Goose Window #5809) (8163134)
• Don't show subagent tool when we're a subagent (Don't show subagent tool when we're a subagent #6125) (3737624)
• Add Scorecard supply-chain security workflow (Add Scorecard supply-chain security workflow #5810) (4f681c7)
• chore(deps): bump node-forge from 1.3.1 to 1.3.2 in /documentation (chore(deps): bump node-forge from 1.3.1 to 1.3.2 in /documentation #5898) (58bd628)
• chore(deps): bump mdast-util-to-hast from 13.2.0 to 13.2.1 in /ui/desktop (chore(deps): bump mdast-util-to-hast from 13.2.0 to 13.2.1 in /ui/desktop #5939) (7c15b3c)
• Don't persist ephemeral extensions when resuming sessions (Don't persist ephemeral extensions when resuming sessions #5974) (8916db9)
• bump bedrock dep versions (bump bedrock dep versions #6090) (0a5b7d7)
• Fix tokenState loading on new sessions (Fix tokenState loading on new sessions #6129) (15aa818)
• docs: add Sugar MCP server to extensions registry (docs: add Sugar MCP server to extensions registry #6077) (036f4f7)
• Add more posthog analytics (privacy aware) (Add more posthog analytics (privacy aware) #6122) (8a91f15)
• Fix YAML serialization for recipes with special characters (Fix YAML serialization for recipes with special characters #5796) (10fc71f)
• perf: Avoid repeated MCP queries during streaming responses (perf: Avoid repeated MCP queries during streaming responses #6138) (ae8ecbe)
• feat: add goose PR reviewer workflow (feat: add goose PR reviewer workflow #6124) (c054cda)
• fix: resolve mcp-hermit cleanup path expansion issue (fix: resolve mcp-hermit cleanup path expansion issue #5953) (8a649dd)
• OpenRouter & Xai streaming (OpenRouter & Xai streaming #5873) (1c820ad)
• feat: Centralize theme management with ThemeContext (feat: Centralize theme management with ThemeContext #6137) (d2358f7)
• Fix compaction loop for small models or large input (Fix compaction loop for small models or large input #5803) (bd00ca2)
• fix: use instructions for system prompt and prompt for user message in subagents (fix: use instructions for system prompt and prompt for user message in subagents #6121) (6d33cbc)
• Add .agents/skills and ~/.config/agent/skills to skills discovery paths (Add .agents/skills and ~/.config/agent/skills to skills discovery paths #6139) (3e37f9c)
• fix : Custom providers with empty API keys show as configured in desktop (fix : Custom providers with empty API keys show as configured in desktop #6105) (9dc9f20)
• fix: display shell output as static text instead of spinner (fix: display shell output as static text instead of spinner #6041) (617e7e0)
• fix: MCP UI not rendering due to CallToolResult structure change (fix: MCP UI not rendering due to CallToolResult structure change #6143) (07de82b)
• More slash commands (More slash commands #5858) (fd9582a)
• fix(providers): fix for gemini-cli on windows to work around cmd's multiline prompt limitations [Windows] Failed to spawn Gemini CLI: "batch file arguments are invalid" #5911 (fix(providers): fix for gemini-cli on windows to work around cmd's multiline prompt limitations #5911 #5966) (34b20ae)
• deps: upgrade agent-client-protocol to 0.9.0 (deps: upgrade agent-client-protocol to 0.9.0 #6109) (062fc07)
• fix: we don't need to warn about tool count when in code mode (fix: we don't need to warn about tool count when in code mode #6149) (b401222)
• fix(google): Fix 400 Bad Request error with Gemini 3 thought signatures (fix(google): Fix 400 Bad Request error with Gemini 3 thought signatures #6035) (fc8a4b4)
• docs: create/edit recipe button (docs: create/edit recipe button #6145) (c1b980f)
• fix: make goose reviewer less bad (fix: make goose reviewer less bad #6154) (9569c1f)
• Update dependencies to help in Fedora packaging (Update dependencies to help in Fedora packaging #5835) (4e11772)
• fix: add conditional configuration for GOOSE_BIN_DIR in PATH (fix: add conditional configuration for GOOSE_BIN_DIR in PATH #5940) (d9b447d)
• docs: skills (docs: skills #6062) (0051b33)
• fix: respect default_enabled value of platform extensions (fix: respect default_enabled value of platform extensions #6159) (61c86a7)
• docs: auto download updates (docs: auto download updates #6163) (92537b7)
• test: add ACP integration test (test: add ACP integration test #6150) (dfd207b)
• docs: blog for code mode MCP (docs: blog for code mode MCP #6126) (f3d2f1d)
• fix: use correct parameter name in read_module handler (fix: use correct parameter name in read_module handler #6148) (f98ef3c)
• Regenerate canonical models when release branch is created. (Regenerate canonical models when release branch is created. #6127) (473f269)
• Integrate pricing with canonical model (Integrate pricing with canonical model #6130) (6a0b8c2)
• chore: manually update version (chore: manually update version #6166) (1b059af)
• revert /reply to previous behavior (replacing session history) when full conversation provided (revert /reply to old behavior when full conversation provided #6058) (d629fec)
• fix: make goose reviewer less sycophantic (fix: make goose reviewer less sycophantic #6171) (ab49ec0)
• Clean PR preview sites from gh-pages branch history (Clean PR preview sites from gh-pages branch history #6161) (7ff3adc)
• Enhanced PostHog Error Tracking with Detailed Messages (Enhanced PostHog Error Tracking with Detailed Messages #6176) (70ac4b4)
• blog: on terminal and mobile (blog: on terminal and mobile #6174) (f232e65)
• feat: update copilot instructions to correct "Goose" to "goose" in code reviews (feat: update copilot instructions to correct "Goose" to "goose" in code reviews #6175) (2578dbe)
• docs: mobile access (docs: mobile access #6180) (7fde963)
• docs: publish MCP elicitation guide (docs: publish MCP elicitation guide #6182) (879fdf7)
• chore: cover code mode with end to end provider tests (chore: cover code mode with end to end provider tests #6183) (d481404)
• fix(code-mode): improve tool signatures for LLM discovery (fix(code-mode): improve tool signatures for LLM discovery #6177) (1ccc579)
• fix(code-mode): use MCP structuredContent for proper JS object access (fix(code-mode): use MCP structuredContent for proper JS object access #6190) (41588e8)
• chore(release): release version 1.18.0 (87af4e4)
• Recipe slash command parsing (Recipe slash command parsing #6173) (4669956)

---

This release PR was generated automatically.

[github-actions]

macOS ARM64 Desktop App (Apple Silicon)

📱 Download macOS Desktop App (arm64, unsigned)

Instructions:
After downloading, unzip the file and drag the goose.app to a location you prefer. The app is unsigned, so to run it run xattr -r -d com.apple.quarantine '/path/to/goose.app' and then open the app

[github-actions]

macOS ARM64 Desktop App (Apple Silicon)

📱 Download macOS Desktop App (arm64, unsigned)

Instructions:
After downloading, unzip the file and drag the goose.app to a location you prefer. The app is unsigned, so to run it run xattr -r -d com.apple.quarantine '/path/to/goose.app' and then open the app

[katzdave]

CI is specifically made about bebe038

The retrigger commit, so we might need to force push this when we're ready.

[github-actions]

macOS ARM64 Desktop App (Apple Silicon)

📱 Download macOS Desktop App (arm64, unsigned)

Instructions:
After downloading, unzip the file and drag the goose.app to a location you prefer. The app is unsigned, so to run it run xattr -r -d com.apple.quarantine '/path/to/goose.app' and then open the app