Noor ul ain cb7c36c95b fix: reject host-less catalog URLs in base and preset validators (#3209) (#3227) ...

`CatalogStackBase._validate_catalog_url` (inherited by `IntegrationCatalog`)
and `PresetCatalog._validate_catalog_url` checked `parsed.netloc`, which is
truthy for host-less URLs like `https://:8080` (port only) or `https://user@`
(userinfo only). Such URLs slipped past validation despite the error message
promising "a valid URL with a host", then failed later with a confusing fetch
error.

Switch both validators to `parsed.hostname` (None for those inputs), matching
the workflow, step, and bundler catalog validators that already do this.

Add regression tests covering port-only and userinfo-only URLs for both
validators.

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-30 07:18:39 -05:00

..

authentication

fix(extensions,presets,workflows): resolve private GHES release assets via /api/v3 (#3157)

2026-06-25 10:44:30 -05:00

bundler

feat: add specify bundle command (#3070)

2026-06-19 17:07:20 -05:00

commands

fix(bundle): send command errors to stderr so --json stdout stays parseable (#3235)

2026-06-29 15:46:56 -05:00

extensions

fix(extensions): apply GHES auth and resolve release assets for extension add --from (#3217)

2026-06-29 11:31:10 -05:00

integrations

fix(goose): repoint install_url and docs to goose-docs.ai (#3171) (#3215)

2026-06-29 16:43:06 -05:00

presets

fix: reject host-less catalog URLs in base and preset validators (#3209) (#3227)

2026-06-30 07:18:39 -05:00

workflows

fix(workflows): gate validate() must not crash on non-string options (#3233)

2026-06-29 15:07:50 -05:00

__init__.py

feat: make agent-context extension a full opt-in (#3097)

2026-06-29 15:27:26 -05:00

_agent_config.py

feat!: remove legacy --ai, --ai-commands-dir, and --ai-skills flags (0.10.0) (#2872)

2026-06-05 14:56:28 -05:00

_assets.py

refactor: extract _assets.py and _utils.py from __init__.py (PR-2/8) (#2543)

2026-05-13 11:20:36 -05:00

_console.py

fix(bundle): send command errors to stderr so --json stdout stays parseable (#3235)

2026-06-29 15:46:56 -05:00

_github_http.py

fix(extensions,presets,workflows): resolve private GHES release assets via /api/v3 (#3157)

2026-06-25 10:44:30 -05:00

_init_options.py

fix: recover active skills registration for extensions (#2803)

2026-06-04 09:53:31 -05:00

_invocation_style.py

feat: add ZCode (Z.AI) integration (#3063)

2026-06-22 12:14:18 -05:00

_utils.py

harden: reject shell=True in run_command (#3132)

2026-06-24 13:05:21 -05:00

_version.py

feat(cli): implement specify self upgrade (#2475)

2026-06-03 12:04:54 -05:00

agents.py

feat: make agent-context extension a full opt-in (#3097)

2026-06-29 15:27:26 -05:00

catalogs.py

fix: reject host-less catalog URLs in base and preset validators (#3209) (#3227)

2026-06-30 07:18:39 -05:00

integration_runtime.py

Support controlled multi-install for safe AI agent integrations (#2389)

2026-05-01 11:54:41 -05:00

integration_scaffold.py

feat: make agent-context extension a full opt-in (#3097)

2026-06-29 15:27:26 -05:00

integration_state.py

feat(integration): add status reporting (#2674)

2026-06-09 07:20:43 -05:00

integration_status.py

feat(integration): add status reporting (#2674)

2026-06-09 07:20:43 -05:00

shared_infra.py

feat(extensions): verify catalog archive sha256 before install (#3080)

2026-06-24 14:52:24 -05:00