Merge branch 'main' into lifei/upgrade-ui-sdk

* main:
  feat(hooks): add Husky git hooks for ui/goose2 (#8577)
  fix: links in chat could not be opened (#8544)
  fix: run setup before dev and dev-debug in goose2 justfile (#8718)
  Manage skills as sources over ACP (#8675)
  handle full node paths in goose2 kill recipe (#8709)
  overhaul provider inventory and agent/model selection (#8652)
  Remove unused import (#8676)
  delete the goose2 migration plan prompt (#8678)
  Add health score badge to README (#8677)
  feat(goose2): voice dictation via direct-ACP pattern (#8609)
  consistently use actions-rust-lang/setup-rust-toolchain (#8671)
  fix(developer): run shell tool under bash/sh regardless of login shell (#8659)
  refactor(providers): extract shared OAuth device-flow helper (#8619)
  Add a goose2 release workflow (#8629)
  chore(deps): bump ncipollo/release-action from 1.20.0 to 1.21.0 (#8664)
  docs: add blog post about Mesh LLM provider option (#8655)
  fix: append /chat/completions for prefixed v1 base URLs (#8521)
  Reset ChatGPT Codex auth during OAuth setup (#8569)
  chore(deps): bump EmbarkStudios/cargo-deny-action from 2.0.15 to 2.0.17 (#8665)
  Add dependabot config for pnpm workspace, cargo, and actions (#8660)

Author: lifeizhou-ap

.github/dependabot.yml

@@ -0,0 +1,33 @@
+version: 2
+updates:
+  # pnpm workspace for the UI (desktop, acp, text, sdk, goose-binary/*, goose2).
+  # Point at the workspace ROOT where pnpm-lock.yaml lives so Dependabot updates
+  # both the child package.json AND ui/pnpm-lock.yaml in one PR.
+  - package-ecosystem: "npm"
+    directory: "/ui"
+    schedule:
+      interval: "weekly"
+    open-pull-requests-limit: 10
+    groups:
+      ui-minor-and-patch:
+        update-types:
+          - "minor"
+          - "patch"
+
+  # Cargo workspace at the repo root.
+  - package-ecosystem: "cargo"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    open-pull-requests-limit: 10
+    groups:
+      cargo-minor-and-patch:
+        update-types:
+          - "minor"
+          - "patch"
+
+  # GitHub Actions used by workflows in .github/workflows.
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"

.github/workflows/bundle-goose2-manual.yml

@@ -0,0 +1,26 @@
+name: "Manual Goose 2 Bundle (Unsigned)"
+
+on:
+  workflow_dispatch:
+    inputs:
+      branch:
+        description: "Branch name to bundle app from"
+        required: true
+        type: string
+      cli-run-id:
+        description: "Run ID of a build-cli workflow to pull the goose binary from (optional, builds from source if empty)"
+        required: false
+        type: string
+        default: ""
+
+jobs:
+  bundle-goose2:
+    uses: ./.github/workflows/bundle-goose2.yml
+    permissions:
+      id-token: write
+      contents: read
+      actions: read
+    with:
+      signing: false
+      ref: ${{ inputs.branch }}
+      cli-run-id: ${{ inputs.cli-run-id }}