commit c1787b478187140e4b4439f3c363d13e3c35c30f
Author: lucascouts <lucascs@protonmail.com>
Date: Wed Sep 30 23:15:13 2026 -0300

add(metadata/{md5-cache/app-admin/awscli2-2.37.7, md5-cache/app-editors/kiro-1.2.4, md5-cache/app-editors/zed-1.24.0_pre20260930, md5-cache/app-editors/zed-bin-1.22.0, md5-cache/app-editors/zed-bin-1.23.1_pre, md5-cache/dev-util/ai-memory-2.5.0, md5-cache/dev-util/ai-memory-bin-2.5.0, md5-cache/dev-util/antigravity-hub-bin-2.19.1.6046815158665216, md5-cache/dev-util/claude-code-2.1.286, md5-cache/dev-util/cline-bin-3.0.67, md5-cache/dev-util/codex-0.159.3, md5-cache/dev-util/codex-bin-0.159.3, md5-cache/dev-util/codex-desktop-bin-26.928.31416, md5-cache/dev-util/copilot-cli-bin-1.0.90, md5-cache/dev-util/glslang-1.4.363.0_p20260930, md5-cache/dev-util/openchamber-bin-2.1.0, md5-cache/dev-util/opencode-bin-1.18.34, md5-cache/media-libs/harfbuzz-14.5.1, md5-cache/net-analyzer/netdata-2.12.0, md5-cache/sci-ml/lemonade-2026.40.0, md5-cache/sci-ml/lemonade-bin-2026.40.0, md5-cache/sys-apps/ai-jail-2.4.0, md5-cache/sys-apps/ai-jail-bin-2.4.0, md5-cache/www-client/brave-browser-1.96.60}), mod(.autoupdate/packages.toml), up(app-admin/awscli2-2.37.6 -> 2.37.7, app-editors/{kiro-1.1.70 -> 1.2.4, zed-1.23.0_pre20260930 -> 1.24.0_pre20260930, zed-bin-1.21.0 -> 1.22.0, zed-bin-1.22.0_pre -> 1.23.1_pre}, dev-util/{ai-memory{,-bin}-2.4.2 -> 2.5.0, codex{,-bin}-0.159.2 -> 0.159.3}, media-libs/harfbuzz-14.5.0 -> 14.5.1, net-analyzer/netdata-2.11.1 -> 2.12.0, sci-ml/lemonade{,-bin}-2026.39.1 -> 2026.40.0, sys-apps/ai-jail{,-bin}-2.2.1 -> 2.4.0, www-client/brave-browser-1.96.59 -> 1.96.60)

commit 5d924b77b594a2823b9506afb1c25c5c8374ed6c
Author: lucascouts <lucascs@protonmail.com>
Date: Wed Sep 30 14:58:31 2026 -0300

add(metadata/{md5-cache/app-editors/vim-9.2.1152, md5-cache/app-editors/zed-1.23.0_pre20260930, md5-cache/dev-db/sqlitebrowser-3.13.99_p20260930, md5-cache/dev-util/cline-bin-3.0.66, md5-cache/dev-util/codex-desktop-bin-26.928.21956, md5-cache/dev-util/spirv-tools-1.4.363.0_p20260930, md5-cache/dev-util/vulkan-tools-1.4.364_p20260930, md5-cache/media-libs/vulkan-layers-1.4.363_p20260930, md5-cache/media-libs/vulkan-loader-1.4.364_p20260930, md5-cache/media-sound/audacity-bin-4.0.1, md5-cache/net-misc/postman-bin-12.30.4, md5-cache/net-vpn/obscura-1.181_p20260930, md5-cache/net-vpn/obscura-bin-1.181, md5-cache/sci-ml/ik_llama-cpp-0_pre20260930, md5-cache/www-client/librewolf-bin-157.0_p1, md5-cache/www-client/opera-136.0.6008.80}), mod(.autoupdate/packages.toml), up(app-editors/{vim-9.2.1125 -> 9.2.1152, zed-1.23.0_pre20260929-r1 -> 1.23.0_pre20260930}, dev-db/sqlitebrowser-3.13.99_p20260929 -> 3.13.99_p20260930, dev-util/{cline-bin-3.0.65 -> 3.0.66, codex-desktop-bin-26.928.20755 -> 26.928.21956, spirv-tools-1.4.363.0_p20260929 -> 1.4.363.0_p20260930, vulkan-tools-1.4.364_p20260925 -> 1.4.364_p20260930}, media-libs/{vulkan-layers-1.4.363_p20260929 -> 1.4.363_p20260930, vulkan-loader-1.4.364_p20260929 -> 1.4.364_p20260930}, media-sound/audacity-bin-4.0.0 -> 4.0.1, net-misc/postman-bin-12.30.3 -> 12.30.4, net-vpn/{obscura-1.180_p20260929 -> 1.181_p20260930, obscura-bin-1.180 -> 1.181}, sci-ml/ik_llama-cpp-0_pre20260929 -> 0_pre20260930, www-client/{librewolf-bin-156.0.1_p1 -> 157.0_p1, opera-136.0.6008.73 -> 136.0.6008.80})

commit 3d54e2b69dec2a49e62250157d6c88f92d6a2b68
Author: lucascouts <lucascs@protonmail.com>
Date: Thu Sep 24 14:24:16 2026 -0300

bump: doctl, devin-desktop-bin, zed, sentry-native, cline-bin, trufflehog, vulkan-layers, ik_llama-cpp, ollama, ollama-bin, opera; add scripts/go-vendor.sh

dev-vcs/trufflehog 3.97.9 changed go.mod (go-osc52, mimetype), so the
reused 3.97.5 vendor tree no longer matched and -mod=vendor would fail.
Regenerate the vendor tarball for 3.97.9 (uploaded to distfiles.obentoo.org)
and point VENDOR_P at it.

scripts/go-vendor.sh checks whether a Go package's hosted vendor tarball
still matches its go.mod (--check exits 1 when stale) and regenerates it
otherwise. The autoupdate applier cannot see this; run it after bumping any
vendor-tarball Go package. Records and CLAUDE.md point to it; the reviewdog
record no longer claims a vendor tarball it does not use.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

commit dbaf7632833390261afc4315f907f5573e3440d0
Author: lucascouts <lucascs@protonmail.com>
Date: Tue Sep 22 10:06:37 2026 -0300

add(metadata/{md5-cache/app-admin/doctl-1.170.0, md5-cache/dev-db/sqlitebrowser-3.13.99_p20260922, md5-cache/dev-python/openai-3.17.0, md5-cache/dev-util/cline-bin-3.0.64, md5-cache/dev-util/kilocode-bin-7.7.7, md5-cache/dev-util/kimi-cli-bin-1.52.0, md5-cache/dev-util/mesa_clc-26.3.0_pre20260922, md5-cache/media-libs/mesa-26.3.0_pre20260922, md5-cache/media-libs/vulkan-layers-1.4.363_p20260922, md5-cache/net-libs/nodejs-26.10.0, md5-cache/net-misc/postman-bin-12.29.1, md5-cache/sci-ml/ik_llama-cpp-0_pre20260922, md5-cache/sci-ml/llama-swap-257, md5-cache/sys-apps/flatpak-1.18.3}), mod(.autoupdate/packages.toml), up(app-admin/doctl-1.169.0 -> 1.170.0, dev-db/sqlitebrowser-3.13.99_p20260921 -> 3.13.99_p20260922, dev-python/openai-3.16.2 -> 3.17.0, dev-util/{cline-bin-3.0.62 -> 3.0.64, kilocode-bin-7.7.6 -> 7.7.7, kimi-cli-bin-1.51.0 -> 1.52.0, mesa_clc-26.3.0_pre20260921 -> 26.3.0_pre20260922}, media-libs/{mesa-26.3.0_pre20260921 -> 26.3.0_pre20260922, vulkan-layers-1.4.363_p20260921 -> 1.4.363_p20260922}, net-libs/nodejs-26.9.0 -> 26.10.0, net-misc/postman-bin-12.28.6 -> 12.29.1, sci-ml/{ik_llama-cpp-0_pre20260921 -> 0_pre20260922, llama-swap-256 -> 257}, sys-apps/flatpak-1.18.2 -> 1.18.3)

commit 7b28e10515a4855fbc6245b00e8250a5560bebf2
Author: lucascouts <lucascs@protonmail.com>
Date: Tue Sep 15 10:28:37 2026 -0300

add(media-gfx/gimp-3.2.6, sys-apps/coreutils-9.12), add(metadata/{md5-cache/app-editors/devin-desktop-bin-3.10.27, md5-cache/app-misc/watchexec-2.7.3, md5-cache/dev-python/uv-bin-0.12.15, md5-cache/dev-util/cline-bin-3.0.62, md5-cache/dev-util/kilocode-bin-7.7.1, md5-cache/media-gfx/blender-5.2.2, md5-cache/media-gfx/blender-bin-5.2.2, md5-cache/media-gfx/gimp-3.2.6, md5-cache/net-misc/postman-bin-12.28.1, md5-cache/sci-ml/ik_llama-cpp-0_pre20260915, md5-cache/sys-apps/coreutils-9.12, md5-cache/sys-apps/pnpm-12.4.2, md5-cache/www-client/opera-135.0.5973.142}), mod(.autoupdate/packages.toml), up(app-editors/devin-desktop-bin-3.10.23 -> 3.10.27, app-misc/watchexec-2.7.2 -> 2.7.3, dev-python/uv-bin-0.12.14 -> 0.12.15, dev-util/{cline-bin-3.0.61 -> 3.0.62, kilocode-bin-7.6.2 -> 7.7.1}, media-gfx/{blender-5.2.1-r1 -> 5.2.2, blender-bin-5.2.1 -> 5.2.2}, net-misc/postman-bin-12.28.0 -> 12.28.1, sci-ml/ik_llama-cpp-0_pre20260914 -> 0_pre20260915, sys-apps/pnpm-12.4.1 -> 12.4.2, www-client/opera-135.0.5973.133 -> 135.0.5973.142)

commit 14e7e5411daf431c0eec96db8bb73423a05287cc
Author: lucascouts <lucascs@protonmail.com>
Date: Thu Sep 10 21:10:27 2026 -0300

add(dev-util/{cline-bin-3.0.61, copilot-cli-bin-1.0.83, goose-bin-1.50.0, kilocode-bin-7.6.2}), add(licenses/github-copilot-cli), add(metadata/md5-cache/dev-util/{cline-bin-3.0.61, copilot-cli-bin-1.0.83, goose-bin-1.50.0, kilocode-bin-7.6.2}), mod(.autoupdate/packages.toml)

Four terminal AI coding agents that neither ::gentoo nor any other overlay
carries. All four are binary-only here for a reason, not for convenience:

copilot-cli github/copilot-cli publishes NO source at all -- the repository
holds only LICENSE.md, README.md, changelog.md and install.sh.
cline the GitHub releases carry only the macOS/Windows desktop app;
the Linux build lives on npm, behind the optionalDependencies
of the "cline" wrapper (@cline/cli-linux-{x64,arm64}).
goose a from-source ebuild is still to come; upstream does publish a
source tarball, so this -bin is one half of the pair.
kilocode likewise.

Two upstream traps are pinned here so a future bump cannot walk into them:

* github/copilot-cli runs TWO trains out of one tag list -- "vX.Y.Z-N" is a
pre-release and only the bare "vX.Y.Z" is stable. On 2026-09-10 the five
newest tags were all pre-releases while stable sat at v1.0.83. Both the
ebuild comment and the autoupdate record probe /releases/latest, which
skips them by definition; the bare-version regex cannot match a "-N" tag,
so it fails loudly instead of shipping a pre-release.

* block/goose is now aaif-goose/goose. The old path answers only through a
GitHub 301 that can be withdrawn without notice, so HOMEPAGE, SRC_URI and
the probe all pin the canonical org.

kilocode-bin bundles bubblewrap 0.11.2 and a sandbox-runtime, hence
LICENSE="MIT Apache-2.0 LGPL-2" rather than upstream's bare MIT. Its bwrap is
left 0755, never setuid: it is static-pie and relies on unprivileged user
namespaces. cline-bin and kilocode-bin need an explicit fperms 0755 because
doins drops the executable bit -- npm marks every file in the cline tarball
executable, and only the ELF needs it back.

licenses/github-copilot-cli is the first entry in a licenses/ directory that
did not exist in this overlay before.

Verified, not assumed: pkgcheck reports 0 findings on each of the four scanned
separately; emerge -pv resolves all four; and each one completed a full
`ebuild ... clean install` without root, after which the installed image was
inspected and every binary executed -- goose 1.50.0, kilo 7.6.2, copilot
"GitHub Copilot CLI 1.0.83", cline 3.0.61, with all /opt/bin symlinks
resolving. That run is what caught the copilot version being a pre-release.

Not verified: no package was actually merged onto the system -- this host has
no sudo -- so ownership of the installed directories is untested.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>