- Add SHA256 checksum args for amd64 and arm64 Go tarballs
- Verify downloaded Go tarball integrity via `sha256sum -c`
- Remove root-owned `/root/.config/fabric` directory creation
- Create fabric config directory under non-root `appuser` home
- Set proper ownership on `appuser` config directory with `chown`
- Use `slices.Backward` for reverse iteration in copilot response extraction
- Use `slices.Backward` for reverse iteration in gemini TTS extraction
- Add `slices` import to copilot and gemini packages
- Remove manual index-based reverse loop patterns
- Remove redundant comment about copilot response message type
Update the Dockerfile to bring it closer to current container best practices while fixing multiple critical CVEs.
This pins Alpine 3.21 and Go 1.25.9 explicitly, installs the Go toolchain in the builder stage so the image no longer depends on an unavailable upstream golang tag, upgrades setuptools to pick up the CVE-2025-47273 fix, refreshes the yt-dlp installation path, and runs the final image as a non-root user.
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
- Upgrade `anthropic-sdk-go` from v1.27.1 to v1.34.0
- Upgrade `ollama` from v0.18.2 to v0.20.4
- Bump AWS SDK v2 packages to latest patch releases
- Update `go-git/v5` from v5.17.1 to v5.17.2
- Upgrade `go-sqlite3` from v1.14.37 to v1.14.42
- Bump `google.golang.org/api` from v0.272.0 to v0.275.0
- Upgrade `google.golang.org/genai` from v1.51.0 to v1.53.0
- Update OpenTelemetry packages from v1.42.0 to v1.43.0
- Bump `golang.org/x` crypto, net, sys, text, and mod packages
- Upgrade `google.golang.org/grpc` from v1.79.3 to v1.80.0
- Add `--visual` flag for OCR and FFmpeg video data extraction
- Add `--visual-sensitivity` option for FFmpeg scene detection tolerance
- Add `--visual-fps` option for fixed frame-per-second extraction
- Update zsh completions with three new visual flags
- Update bash completions opts list with visual flags
- Add visual flags to bash simple-argument completion case
- Update fish completions with visual flag descriptions
- Move visual flag descriptions to i18n locale system
- Add visual extraction strings to all 11 locale files
- Replace hardcoded English error messages with i18n lookups
- Register visual flags in `flagDescriptionMap` for help system
- Remove inline `description` tags from visual CLI flag structs
- Localize FFmpeg, Tesseract, and yt-dlp error messages
- Add `youtube_visual_frame_cue` translation key across locales
- Add 17 new Codex-related i18n keys across all locale files
- Replace hardcoded English strings in OAuth flow with i18n lookups
- Internationalize Codex error messages in `errors.go`
- Localize token exchange and refresh failure messages
- Translate OAuth callback server responses and browser fallback text
- Add translations for usage limit and request status errors
- Cover DE, EN, ES, FA, FR, IT, JA, PL, PT-BR, PT-PT, ZH locales
- Add `context.Context` parameter to `ListModels` interface method
- Add `context.Context` parameter to `SendStream` interface method
- Thread caller context through `Chatter.Send` instead of using `context.Background()`
- Update all vendor implementations to accept context parameter
- Introduce `publicError` type wrapping Codex provider errors
- Normalize Codex error messages to lowercase for consistency
- Add context-aware `sendStreamUpdate` helper in Codex client
- Remove stale `context.Background()` calls from Anthropic and Azure AI Gateway
- Update all vendor test mocks and stubs with new signatures
- Pass HTTP request context from server handler into `chatter.Send`
- Remove OAuth flow, PKCE, and token refresh from codex.go
- Remove auth transport round-trip retry logic
- Remove unused OAuth types and helper structs
- Remove JWT parsing and token expiry utilities
- Remove error mapping and usage limit detection helpers
- Remove browser-open and version normalization functions
- Add `.maestro/` directory to `.gitignore`
- Add test for `SendStream` HTTP error mapping and channel close
- Clean up unused imports from codex client package
- Bump `anthropic-sdk-go` from v1.23.0 to v1.27.1
- Upgrade AWS SDK Go v2 packages to latest patch versions
- Update `gin-gonic/gin` to v1.12.0 and `go-git` to v5.17.0
- Bump `ollama/ollama` from v0.16.2 to v0.18.2
- Upgrade `google.golang.org/api` to v0.272.0 and `genai` to v1.51.0
- Update OpenTelemetry packages to v1.42.0/v0.67.0
- Bump `golang.org/x` packages to latest minor versions
- Remove deprecated `ModelClaude4Sonnet20250514` and `ModelClaude4Opus20250514` aliases
- Add `go.mongodb.org/mongo-driver/v2` as new indirect dependency
