chore(release): bump version to 0.41.0-nightly.20260423.gaa05b4583 by @gemini-cli-robot in #25847

• fix(core): only show list suggestion if the partial input is empty by @cynthialong0-0 in #25821
• feat(cli): secure .env loading and enforce workspace trust in headless mode by @ehedlund in #25814
• fix: fatal hard-crash on loop detection via unhandled AbortError by @hsm207 in #20108
• update package-lock.json by @ehedlund in #25876
• feat(core): enhance shell command validation and add core tools allowlist by @galz10 in #25720
• fix(ui): corrected background color check in user message components by @devr0306 in #25880
• perf(core): fix slow boot by fetching experiments and quota asynchronously by @spencer426 in #25758
• feat(core,cli): add support for Gemma 4 models (experimental) by @Abhijit-2592 in #25604
• update FatalUntrustedWorkspaceError message to include doc link by @ehedlund in #25874
• docs: add Gemini CLI course link to README by @JayadityaGit in #25925
• feat(repo): add gemini-cli-bot metrics and workflows by @gundermanc in #25888
• fix(cli): allow output redirection for cli commands by @spencer426 in #25894
• fix(core): fail closed in YOLO mode when shell parsing fails for restricted rules by @ehedlund in #25935
• fix(cli-ui): revert backspace handling to fix Windows regression by @scidomino in #25941
• feat(voice): implement real-time voice mode with cloud and local backends by @Abhijit-2592 in #24174

Changelog for v0.39.0 by @gemini-cli-robot in #25848

• feat(memory): persist auto-memory scratchpad for skill extraction by @SandyTao520 in #25873
• fix(cli): add missing response key to custom theme text schema by @gaurav0107 in #25822
• fix(cli): provide manual update command when automatic update fails by @cocosheng-g in #26052
• test(cli): add unit tests for restore ACP command (#23402) by @cocosheng-g in #26053
• fix(ui): better error messages for ECONNRESET and ETIMEDOUT by @devr0306 in #26059
• feat(core): wire up the new ContextManager and AgentChatHistory by @joshualitt in #25409
• fix(cli): ensure sandbox proxy cleanup and remove handler leaks by @ehedlund in #26065
• fix(cli): correct alternate buffer warning logic for JetBrains by @Adib234 in #26067
• fix(cli): make MCP ping optional in list command and use configured timeout by @cocosheng-g in #26068
• fix(core): better error message for failed cloudshell-gca auth by @devr0306 in #26079
• feat(cli): provide manual session UUID via command line arg by @cocosheng-g in #26060

Changelog for v0.40.0-preview.2 by @gemini-cli-robot in #25846

• (docs) update sandboxing documentation by @g-samroberts in #25930
• fix(core): enforce parallel task tracker updates by @anj-s in #24477
• Update policy so transient errors are not marked terminal by @DavidAPierce in #26066
• Implement bot that performs time-series metric analysis and suggests repo management improvements by @gundermanc in #25945
• fix(core): handle non-string model flags in resolution by @Adib234 in #26069
• fix(ux): added error message for ENOTDIR by @devr0306 in #26128

Changelog for v0.40.0-preview.3 by @gemini-cli-robot in #25904

• fix(cli): prevent ACP stdout pollution from SessionEnd hooks by @cocosheng-g in #26125
• feat(cli): support boolean and number casting for env vars in settings.json by @cocosheng-g in #26118
• fix(cli): preserve Request headers in DevTools activity logger by @Adib234 in #26078
• fix(patch): cherry-pick 2194da2 to release/v0.41.0-preview.0-pr-26153 to patch version v0.41.0-preview.0 and create version 0.41.0-preview.1 by @gemini-cli-robot in #26269
• fix(patch): cherry-pick 1d72a12 to release/v0.41.0-preview.1-pr-26479 to patch version v0.41.0-preview.1 and create version 0.41.0-preview.2 by @gemini-cli-robot in #26508
• fix(patch): cherry-pick 7cc19c2 to release/v0.41.0-preview.2-pr-26507 to patch version v0.41.0-preview.2 and create version 0.41.0-preview.3 by @gemini-cli-robot in #26530

New Contributors

@hsm207 made their first contribution in #20108, @gaurav0107 made their first contribution in #25822

What's Changed

• fix(cli): prevent automatic updates from switching to less stable channels by @Adib234 in #26132
• chore(release): bump version to 0.42.0-nightly.20260428.g59b2dea0e by @gemini-cli-robot in #26142
• fix(cli): pass node arguments via NODE_OPTIONS during relaunch to support SEA by @cocosheng-g in #26130
• fix(cli): handle DECKPAM keypad Enter sequences in terminal by @Gitanaskhan26 in #26092
• docs(cli): point plan-mode session retention to actual /settings labels by @ifitisit in #25978
• fix(core): add missing oauth fields support in subagent parsing by @abhipatel12 in #26141
• fix(core): disconnect extension-backed MCP clients in stopExtension by @cocosheng-g in #26136
• Update documentation workflows with workspace trust by @g-samroberts in #26150
• refactor(acp): modularize monolithic acpClient into specialized files by @sripasg in #26143
• test: fix failures due to antigravity environment leakage by @adamfweidman in #26162
• fix(core): add explicit empty log guard in A2A pushMessage by @adamfweidman in #26198
• feat(cli): add --delete flag to /exit command for session deletion by @AbdulTawabJuly in #19332
• test(core): add regression test for issue for ToolConfirmationResponse by @Adib234 in #26194
• Add the ability to @ mention the gemini robot. by @gundermanc in #26207
• test(evals): add EvalMetadata JSDoc annotations to older tests by @akh64bit in #26147
• fix(core): reduce default API timeout to 60s and enable retries for undici timeouts by @Adib234 in #26191
• fix(core): distinguish fallback chains and fix maxAttempts for auto vs explicit model selection by @adamfweidman in #26163
• fix(cli): handle InvalidStream event gracefully without throwing by @adamfweidman in #26218
• ci(github-actions): switch to github app token and fix bot self-trigger by @gundermanc in #26223
• Respect logPrompts flag for logging sensitive fields by @lp-peg in #26153
• fix: correct API key validation logic in handleApiKeySubmit by @martin-hsu-test in #25453
• fix(agent): prevent exit_plan_mode from being called via shell by @Abhijit-2592 in #26230
• Fix: Inconsistent Case-Sensitivity in GrepTool by @gemini-cli[bot] in #26235
• docs(core): add automated gemma setup guide by @Samee24 in #26233
• Allow non-https proxy urls to support container environments by @stevemk14ebr in #26234
• fix(bot): productivity and backlog optimizations by @gundermanc in #26236
• refactor(acp): delegate prompt turn processing logic to GeminiClient by @sripasg in #26222
• fix(cli): refine platform-specific undo/redo and smart bubbling for WSL by @cocosheng-g in #26202
• fix: suppress duplicate extension warnings during startup by @cocosheng-g in #26208
• fix(cli): use byte length instead of string length for readStdin size limits by @Adib234 in #26224
• fix(ui): made shell tool header wrap on Ctrl+O by @devr0306 in #26229
• Changelog for v0.41.0-preview.0 by @gemini-cli-robot in #26244
• Skip binary CLI relaunch by @ruomengz in #26261
• fix(cli): do not override GOOGLE_CLOUD_PROJECT in Cloud Shell when using Vertex AI by @jackwotherspoon in #24455
• docs(cli): add skill discovery troubleshooting checklist to tutorial by @pmenic in #26018
• docs(policy-engine): link to tools reference for tool names and args by @Aaxhirrr in #22081
• Fix posting invalid response to a comment by @gundermanc in #26266
• fix(cli): prevent informational logs from polluting json output by @cocosheng-g in #26264
• feat(ui): added microphone and updated placeholder for voice mode by @devr0306 in #26270
• feat(cli): Add 'list' subcommand to '/commands' by @Jwhyee in #22324
• fix(core): ensure tool output cleanup on session deletion for legacy files by @cocosheng-g in #26263
• Docs: Update Agent Skills documentation by @jkcinouye in #22388
• test(acp): add missing coverage for extensions command error paths by @sahilkirad in #25313
• Changelog for v0.40.0 by @gemini-cli-robot in #26245
• fix: report AgentExecutionBlocked in non-interactive programmatic modes by @cocosheng-g in #26262
• feat(extensions): add 'delete' as an alias for /extensions uninstall by @martin-hsu-test in #25660
• fix(core): silently skip GEMINI.md paths that are directories (EISDIR) by @martin-hsu-test in #25662
• fix(ci): checkout PR branch instead of main in bot workflow by @gundermanc in #26289
• fix(cli): use resolved sandbox state for auto-update check by @Adib234 in #26285
• Metrics Integrity & Standardized Reporting (BT-01) by @gemini-cli[bot] in #26240
• Add Star History section to README by @bdmorgan in #26290
• Add Star History section to README by @bdmorgan in #26308
• Remove Star History section from README by @bdmorgan in #26309
• test(evals): add behavioral eval for file creation and write_file tool selection by @akh64bit in #26292
• feat(config): enable Gemma 4 models by default via Gemini API by @Abhijit-2592 in #26307
• fix(cli): insert voice transcription at cursor position instead of ap… by @Zheyuan-Lin in #26287
• fix(ui): fix issue with box edges by @gundermanc in #26148
• fix(cli): respect .env override for GOOGLE_CLOUD_PROJECT by @DavidAPierce in #26288
• fix(ci): robust version checking in release verification by @scidomino in #26337
• fix(cli): enable daemon relaunch in binary and bundle keytar by @ruomengz in #26333
• fix(core): discourage unprompted git add . in prompt snippets by @akh64bit in #26220
• feat(ui): added wave animation for voice mode by @devr0306 in #26284
• fix(cli): prevent Escape from clearing input buffer ( #17083 ) by @cocosheng-g in #26339
• fix(cli): undeprecate --prompt and correct positional query docs by @Adib234 in #26329
• Metrics updates by @gemini-cli [bot] in #26348
• fix(core): remove "System: Please continue." injection on InvalidStream events by @SandyTao520 in #26340
• docs(policy-engine): add tool argument keys reference and shell policy cross-links by @harshpujari in #25292
• fix(cli): resolve Ghostty/raw-mode False Cancellation in oauth flow by @Aarchi-07 in #25026
• fix(core): reset session-scoped state on resumption by @cocosheng-g in #26342
• Fix bulk of remaining issues with generalist profile by @joshualitt in #26073
• fix(core): make subagents aware of active approval modes by @akh64bit in #23608
• fix(acp): resolve agent mode disconnect and improve mode awareness by @sripasg in #26332
• docs(sdk): add JSDoc to exported interfaces in packages/sdk/src/types.ts by @cocosheng-g in #26441
• perf: skip redundant GEMINI.md loading in partialConfig by @cocosheng-g in https://github.c ...

What's Changed

• chore(release): bump version to 0.40.0-nightly.20260414.g5b1f7375a by @gemini-cli-robot in #25420
• Fix(core): retry additional OpenSSL 3.x SSL errors during streaming (#16075) by @rcleveng in #25187
• fix(core): prevent YOLO mode from being downgraded by @galz10 in #25341
• feat: bundle ripgrep binaries into SEA for offline support by @scidomino in #25342
• Changelog for v0.39.0-preview.0 by @gemini-cli-robot in #25417
• feat(test): add large conversation scenario for performance test by @cynthialong0-0 in #25331
• improve(core): require recurrence evidence before extracting skills by @SandyTao520 in #25147
• test(evals): add subagent delegation evaluation tests by @anj-s in #24619
• feat: add github colorblind themes by @Z1xus in #15504
• fix(core): honor GOOGLE_GEMINI_BASE_URL and GOOGLE_VERTEX_BASE_URL by @chrisjcthomas in #25357
• fix(cli): clean up slash command IDE listeners by @jasonmatthewsuhari in #24397
• Changelog for v0.38.0 by @gemini-cli-robot in #25470
• fix(evals): update eval tests for invoke_agent telemetry and project-scoped memory by @SandyTao520 in #25502
• Changelog for v0.38.1 by @gemini-cli-robot in #25476
• feat(core): integrate skill-creator into skill extraction agent by @SandyTao520 in #25421
• feat(cli): provide default post-submit prompt for skill command by @ruomengz in #25327
• feat(core): add tools to list and read MCP resources by @ruomengz in #25395
• fix(evals): add typecheck coverage for evals, integration-tests, and memory-tests by @SandyTao520 in #25480
• Use OSC 777 for terminal notifications by @jackyliuxx in #25300
• fix(extensions): fix bundling for examples by @abhipatel12 in #25542
• fix(cli): reset plan session state on /clear by @jasonmatthewsuhari in #25515
• feat(core): add .mdx support to get-internal-docs tool by @g-samroberts in #25090
• docs(policy): mention that workspace policies are broken by @6112 in #24367
• fix(core): allow explicit write permissions to override governance file protections in sandboxes by @galz10 in #25338
• feat(sandbox): resolve custom seatbelt profiles from $HOME/.gemini first by @mvanhorn in #25427
• Reduce blank lines. by @gundermanc in #25563
• fix(ui): revert preview theme on dialog unmount by @JayadityaGit in #22542
• fix(core): fix ShellExecutionConfig spread and add ProjectRegistry save backoff by @mahimashanware in #25382
• feat(core): Disable topic updates for subagents by @gundermanc in #25567
• feat(core): enable topic update narration by default and promote to general by @gundermanc in #25586
• docs: migrate installation and authentication to mdx with tabbed layouts by @g-samroberts in #25155
• feat(config): split memoryManager flag into autoMemory by @SandyTao520 in #25601
• fix(core): allow Cloud Shell users to use PRO_MODEL_NO_ACCESS experiment by @sehoon38 in #25702
• fix(cli): round slow render latency to avoid opentelemetry float warning by @scidomino in #25709
• docs(tracker): introduce experimental task tracker feature by @anj-s in #24556
• docs(cli): fix inconsistent system.md casing in system prompt docs by @Bodlux in #25414
• feat(cli): add streamlined gemini gemma local model setup by @Samee24 in #25498
• Changelog for v0.38.2 by @gemini-cli-robot in #25593
• Fix: Disallow overriding IDE stdio via workspace .env (RCE) by @M0nd0R in #25022
• feat(test): refactor the memory usage test to use metrics from CLI process instead of test runner by @cynthialong0-0 in #25708
• feat(vertex): add settings for Vertex AI request routing by @gordonhwc in #25513
• Fix/allow for session persistence by @ahsanfarooq210 in #25176
• Allow dots on GEMINI_API_KEY by @DKbyo in #25497
• feat(telemetry): add flag for enabling traces specifically by @spencer426 in #25343
• fix(core): resolve nested plan directory duplication and relative path policies by @mahimashanware in #25138
• feat: detect new files in @ recommendations with watcher based updates by @prassamin in #25256
• fix(cli): use newline in shell command wrapping to avoid breaking heredocs by @cocosheng-g in #25537
• fix(cli): ensure theme dialog labels are rendered for all themes by @JayadityaGit in #24599
• fix(core): disable detached mode in Bun to prevent immediate SIGHUP of child processes by @euxaristia in #22620
• feat: add /new as alias for /clear and refine command description by @ved015 in #17865
• fix(cli): start auto memory in ACP sessions by @jasonmatthewsuhari in #25626
• fix(core): remove duplicate initialize call on agents refreshed by @adamfweidman in #25670
• test(e2e): default integration tests to Flash Preview by @SandyTao520 in #25753
• refactor(memory): replace MemoryManagerAgent with prompt-driven memory editing across four tiers by @SandyTao520 in #25716
• fix(cli): fix "/clear (new)" command by @mini2s in #25801
• fix(core): use dynamic CLI version for IDE client instead of hardcoded '1.0.0' by @thekishandev in #24414
• fix(core): handle line endings in ignore file parsing by @xoma-zver in #23895
• Fix/command injection shell by @Famous077 in #24170
• fix(ui): removed background color for input by @devr0306 in #25339
• fix(devtools): reduce memory usage and defer connection by @SandyTao520 in #24496
• fix(core): support jsonl session logs in memory and summary services by @SandyTao520 in #25816
• fix(release): exclude ripgrep binaries from npm tarballs by @SandyTao520 in #25841
• fix(patch): cherry-pick 048bf6e to release/v0.40.0-preview.3-pr-25941 to patch version v0.40.0-preview.3 and create version 0.40.0-preview.4 by @gemini-cli-robot in #25942
• fix(patch): cherry-pick 54b7586 to release/v0.40.0-preview.4-pr-26066 [CONFLICTS] by @gemini-cli-robot in #26124

What's Changed

• fix(cli): refresh slash command list after /skills reload by @NTaylorMullen in #24454
• Update README.md for links. by @g-samroberts in #22759
• fix(core): ensure complete_task tool calls are recorded in chat history by @abhipatel12 in #24437
• feat(policy): explicitly allow web_fetch in plan mode with ask_user by @Adib234 in #24456
• fix(core): refactor linux sandbox to fix ARG_MAX crashes by @ehedlund in #24286
• feat(config): add experimental.adk.agentSessionNoninteractiveEnabled setting by @adamfweidman in #24439
• Changelog for v0.36.0-preview.8 by @gemini-cli-robot in #24453
• feat(cli): change default loadingPhrases to 'off' to hide tips by @keithguerin in #24342
• fix(cli): ensure agent stops when all declinable tools are cancelled by @NTaylorMullen in #24479
• fix(core): enhance sandbox usability and fix build error by @galz10 in #24460
• Terminal Serializer Optimization by @jacob314 in #24485
• Auto configure memory. by @jacob314 in #24474
• Unused error variables in catch block are not allowed by @alisa-alisa in #24487
• feat(core): add background memory service for skill extraction by @SandyTao520 in #24274
• feat: implement high-signal PR regression check for evaluations by @alisa-alisa in #23937
• Fix shell output display by @jacob314 in #24490
• fix(ui): resolve unwanted vertical spacing around various tool output treatments by @jwhelangoog in #24449
• revert(cli): bring back input box and footer visibility in copy mode by @sehoon38 in #24504
• fix(cli): prevent crash in AnsiOutputText when handling non-array data by @sehoon38 in #24498
• feat(cli): support default values for environment variables by @ruomengz in #24469
• Implement background process monitoring and inspection tools by @cocosheng-g in #23799
• docs(browser-agent): update stale browser agent documentation by @gsquared94 in #24463
• fix: enable browser_agent in integration tests and add localhost fixture tests by @gsquared94 in #24523
• fix(browser): handle computer-use model detection for analyze_screenshot by @gsquared94 in #24502
• feat(core): Land ContextCompressionService by @joshualitt in #24483
• feat(core): scope subagent workspace directories via AsyncLocalStorage by @SandyTao520 in #24445
• Update ink version to 6.6.7 by @jacob314 in #24514
• fix(acp): handle all InvalidStreamError types gracefully in prompt by @sripasg in #24540
• Fix crash when vim editor is not found in PATH on Windows by @Nagajyothi-tammisetti in #22423
• fix(core): move project memory dir under tmp directory by @SandyTao520 in #24542
• Enable 'Other' option for yesno question type by @ruomengz in #24545
• fix(cli): clear stale retry/loading state after cancellation (#21096) by @Aaxhirrr in #21960
• Changelog for v0.37.0-preview.0 by @gemini-cli-robot in #24464
• feat(core): implement context-aware persistent policy approvals by @jerop in #23257
• docs: move agent disabling instructions and update remote agent status by @jackwotherspoon in #24559
• feat(cli): migrate nonInteractiveCli to LegacyAgentSession by @adamfweidman in #22987
• fix(core): unsafe type assertions in Core File System #19712 by @aniketsaurav18 in #19739
• fix(ui): hide model quota in /stats and refactor quota display by @danzaharia1 in #24206
• Changelog for v0.36.0 by @gemini-cli-robot in #24558
• Changelog for v0.37.0-preview.1 by @gemini-cli-robot in #24568
• docs: add missing .md extensions to internal doc links by @ishaan-arora-1 in #24145
• fix(ui): fixed table styling by @devr0306 in #24565
• fix(core): pass includeDirectories to sandbox configuration by @galz10 in #24573
• feat(ui): enable "TerminalBuffer" mode to solve flicker by @jacob314 in #24512
• docs: clarify release coordination by @scidomino in #24575
• fix(core): remove broken PowerShell translation and fix native __write in Windows sandbox by @scidomino in #24571
• Add instructions for how to start react in prod and force react to prod mode by @jacob314 in #24590
• feat(cli): minimalist sandbox status labels by @galz10 in #24582
• Feat/browser agent metrics by @kunal-10-cloud in #24210
• test: fix Windows CI execution and resolve exposed platform failures by @ehedlund in #24476
• feat(core,cli): prioritize summary for topics (#24608) by @Abhijit-2592 in #24609
• show color by @jacob314 in #24613
• feat(cli): enable compact tool output by default (#24509) by @jwhelangoog in #24510
• fix(core): inject skill system instructions into subagent prompts if activated by @abhipatel12 in #24620
• fix(core): improve windows sandbox reliability and fix integration tests by @ehedlund in #24480
• fix(core): ensure sandbox approvals are correctly persisted and matched for proactive expansions by @galz10 in #24577
• feat(cli) Scrollbar for input prompt by @jacob314 in #21992
• Do not run pr-eval workflow when no steering changes detected by @alisa-alisa in #24621
• Fix restoration of topic headers. by @gundermanc in #24650
• feat(core): discourage update topic tool for simple tasks by @Samee24 in #24640
• fix(core): ensure global temp directory is always in sandbox allowed paths by @galz10 in #24638
• fix(core): detect uninitialized lines by @jacob314 in #24646
• docs: update sandboxing documentation and toolSandboxing settings by @galz10 in #24655
• feat(cli): enhance tool confirmation UI and selection layout by @galz10 in #24376
• feat(acp): add support for /about command by @sripasg in #24649
• feat(cli): add role specific metrics to /stats by @cynthialong0-0 in #24659
• split context by @jacob314 in #24623
• fix(cli): remove -S from shebang to fix Windows and BSD execution by @scidomino in #24756
• Fix issue where topic headers can be posted back to back by @gundermanc in #24759
• fix(core): handle partial llm_request in BeforeModel hook override by @krishdef7 in #22326
• fix(ui): improve narration suppression and reduce flicker by @gundermanc in #24635
• fix(ui): fixed auth race condition causing logo to flicker by @devr0306 in #24652
• fix(browser): remove premature browser cleanup after subagent invocation by @gsquared94 in #24753
• Revert "feat(core,cli): prioritize summary for topics (#24608)" by @Abhijit-2592 in #24777
• relax tool sandboxing overrides for plan mode to match defaults. by @DavidAPierce in #24762
• fix(cli): respect global environment variable allowlist by @scidomino in #24767
• fix(cli): ensure skills...

What's Changed

• feat(evals): centralize test agents into test-utils for reuse by @Samee24 in #23616
• revert: chore(config): disable agents by default by @abhipatel12 in #23672
• fix(plan): update telemetry attribute keys and add timestamp by @Adib234 in #23685
• fix(core): prevent premature MCP discovery completion by @jackwotherspoon in #23637
• feat(browser): add maxActionsPerTask for browser agent setting by @cynthialong0-0 in #23216
• fix(core): improve agent loader error formatting for empty paths by @adamfweidman in #23690
• fix(cli): only show updating spinner when auto-update is in progress by @scidomino in #23709
• Refine onboarding metrics to log the duration explicitly and use the tier name. by @yunaseoul in #23678
• chore(tools): add toJSON to tools and invocations to reduce logging verbosity by @alisa-alisa in #22899
• fix(cli): stabilize copy mode to prevent flickering and cursor resets by @mattKorwel in #22584
• fix(test): move flaky ctrl-c-exit test to non-blocking suite by @mattKorwel in #23732
• feat(skills): add ci skill for automated failure replication by @mattKorwel in #23720
• feat(sandbox): implement forbiddenPaths for OS-specific sandbox managers by @ehedlund in #23282
• fix(core): conditionally expose additional_permissions in shell tool by @galz10 in #23729
• refactor(core): standardize OS-specific sandbox tests and extract linux helper methods by @ehedlund in #23715
• format recently added script by @scidomino in #23739
• fix(ui): prevent over-eager slash subcommand completion by @keithguerin in #20136
• Fix dynamic model routing for gemini 3.1 pro to customtools model by @kevinjwang1 in #23641
• feat(core): support inline agentCardJson for remote agents by @adamfweidman in #23743
• fix(cli): skip console log/info in headless mode by @cynthialong0-0 in #22739
• test(core): install bubblewrap on Linux CI for sandbox integration tests by @ehedlund in #23583
• docs(reference): split tools table into category sections by @sheikhlimon in #21516
• fix(browser): detect embedded URLs in query params to prevent allowedDomains bypass by @tony-shi in #23225
• fix(browser): add proxy bypass constraint to domain restriction system prompt by @tony-shi in #23229
• fix(policy): relax write_file argsPattern in plan mode to allow paths without session ID by @Adib234 in #23695
• docs: fix grammar in CONTRIBUTING and numbering in sandbox docs by @splint-disk-8i in #23448
• fix(acp): allow attachments by adding a permission prompt by @sripasg in #23680
• fix(core): thread AbortSignal to chat compression requests (#20405) by @SH20RAJ in #20778
• feat(core): implement Windows sandbox dynamic expansion Phase 1 and 2.1 by @scidomino in #23691
• Add note about root privileges in sandbox docs by @diodesign in #23314
• docs(core): document agent_card_json string literal options for remote agents by @adamfweidman in #23797
• fix(cli): resolve TTY hang on headless environments by unconditionally resuming process.stdin before React Ink launch by @cocosheng-g in #23673
• fix(ui): cleanup estimated string length hacks in composer by @keithguerin in #23694
• feat(browser): dynamically discover read-only tools by @cynthialong0-0 in #23805
• docs: clarify policy requirement for general.plan.directory in settings schema by @jerop in #23784
• Revert "perf(cli): optimize --version startup time (#23671)" by @scidomino in #23812
• don't silence errors from wombat by @scidomino in #23822
• fix(ui): prevent escape key from cancelling requests in shell mode by @PrasannaPal21 in #21245
• Changelog for v0.36.0-preview.0 by @gemini-cli-robot in #23702
• feat(core,ui): Add experiment-gated support for gemini flash 3.1 lite by @chrstnb in #23794
• Changelog for v0.36.0-preview.3 by @gemini-cli-robot in #23827
• new linting check: github-actions-pinning by @alisa-alisa in #23808
• fix(cli): show helpful guidance when no skills are available by @Niralisj in #23785
• fix: Chat logs and errors handle tail tool calls correctly by @googlestrobe in #22460
• Don't try removing a tag from a non-existent release. by @scidomino in #23830
• fix(cli): allow ask question dialog to take full window height by @jacob314 in #23693
• fix(core): strip leading underscores from error types in telemetry by @yunaseoul in #23824
• Changelog for v0.35.0 by @gemini-cli-robot in #23819
• feat(evals): add reliability harvester and 500/503 retry support by @alisa-alisa in #23626
• feat(sandbox): dynamic Linux sandbox expansion and worktree support by @galz10 in #23692
• Merge examples of use into quickstart documentation by @diodesign in #23319
• fix(cli): prioritize primary name matches in slash command search by @sehoon38 in #23850
• Changelog for v0.35.1 by @gemini-cli-robot in #23840
• fix(browser): keep input blocker active across navigations by @kunal-10-cloud in #22562
• feat(core): new skill to look for duplicated code while reviewing PRs by @devr0306 in #23704
• fix(core): replace hardcoded non-interactive ASK_USER denial with explicit policy rules by @ruomengz in #23668
• fix(plan): after exiting plan mode switches model to a flash model by @Adib234 in #23885
• feat(gcp): add development worker infrastructure by @mattKorwel in #23814
• fix(a2a-server): A2A server should execute ask policies in interactive mode by @kschaab in #23831
• feat(core): define TrajectoryProvider interface by @sehoon38 in #23050
• Docs: Update quotas and pricing by @jkcinouye in #23835
• fix(core): allow disabling environment variable redaction by @galz10 in #23927
• feat(cli): enable notifications cross-platform via terminal bell fallback by @genneth in #21618
• feat(sandbox): implement secret visibility lockdown for env files by @DavidAPierce in #23712
• fix(core): remove shell outputChunks buffer caching to prevent memory bloat and sanitize prompt input by @spencer426 in #23751
• feat(core): implement persistent browser session management by @kunal-10-cloud in #21306
• refactor(core): delegate sandbox denial parsing to SandboxManager by @scidomino in #23928
• dep(update) Update Ink version to 6.5.0 by @jacob314 in #23843
• Docs: Update 'docs-writer' skill for relative links by @jkcinouye in #21463
• Changelog for v0.36.0-preview.4 by @gemini-cli-robot in #23935
• fix(acp): Update allow approval policy flow for ACP clients to fix config persistence and compatible with TUI by @sripasg in #23818
• Changelog for v0.35.2 by @gemini-cli-robot in #23960
• ACP integration documents by @g-samroberts in #22254
• fix(core): explicitly se...

What's Changed

• Changelog for v0.33.2 by @gemini-cli-robot in #22730
• feat(core): multi-registry architecture and tool filtering for subagents by @akh64bit in #22712
• Changelog for v0.34.0-preview.4 by @gemini-cli-robot in #22752
• fix(devtools): use theme-aware text colors for console warnings and errors by @SandyTao520 in #22181
• Add support for dynamic model Resolution to ModelConfigService by @kevinjwang1 in #22578
• chore(release): bump version to 0.36.0-nightly.20260317.2f90b4653 by @gemini-cli-robot in #22858
• fix(cli): use active sessionId in useLogger and improve resume robustness by @mattKorwel in #22606
• fix(cli): expand tilde in policy paths from settings.json by @abhipatel12 in #22772
• fix(core): add actionable warnings for terminal fallbacks (#14426) by @spencer426 in #22211
• feat(tracker): integrate task tracker protocol into core system prompt by @anj-s in #22442
• chore: add posttest build hooks and fix missing dependencies by @NTaylorMullen in #22865
• feat(a2a): add agent acknowledgment command and enhance registry discovery by @alisa-alisa in #22389
• fix(cli): automatically add all VSCode workspace folders to Gemini context by @sakshisemalti in #21380
• feat: add 'blocked' status to tasks and todos by @anj-s in #22735
• refactor(cli): remove extra newlines in ShellToolMessage.tsx by @NTaylorMullen in #22868
• fix(cli): lazily load settings in onModelChange to prevent stale closure data loss by @KumarADITHYA123 in #20403
• feat(core): subagent local execution and tool isolation by @akh64bit in #22718
• fix(cli): resolve subagent grouping and UI state persistence by @abhipatel12 in #22252
• refactor(ui): extract SessionBrowser search and navigation components by @abhipatel12 in #22377
• fix: updates Docker image reference for GitHub MCP server by @jhhornn in #22938
• refactor(cli): group subagent trajectory deletion and use native filesystem testing by @abhipatel12 in #22890
• refactor(cli): simplify keypress and mouse providers and update tests by @scidomino in #22853
• Changelog for v0.34.0 by @gemini-cli-robot in #22860
• test(cli): simplify createMockSettings calls by @scidomino in #22952
• feat(ui): format multi-line banner warnings with a bold title by @keithguerin in #22955
• Docs: Remove references to stale Gemini CLI file structure info by @g-samroberts in #22976
• feat(ui): remove write todo list tool from UI tips by @aniruddhaadak80 in #22281
• Fix issue where subagent thoughts are appended. by @gundermanc in #22975
• Feat/browser privacy consent by @kunal-10-cloud in #21119
• fix(core): explicitly map execution context in LocalAgentExecutor by @akh64bit in #22949
• feat(plan): support plan mode in non-interactive mode by @ruomengz in #22670
• feat(core): implement strict macOS sandboxing using Seatbelt allowlist by @ehedlund in #22832
• docs: add additional notes by @abhipatel12 in #23008
• fix(cli): resolve duplicate footer on tool cancel via ESC (#21743) by @ruomengz in #21781
• Changelog for v0.35.0-preview.1 by @gemini-cli-robot in #23012
• fix(ui): fix flickering on small terminal heights by @devr0306 in #21416
• fix(acp): provide more meta in tool_call_update by @Mervap in #22663
• docs: add FAQ entry for checking Gemini CLI version by @surajsahani in #21271
• feat(core): resilient subagent tool rejection with contextual feedback by @abhipatel12 in #22951
• fix(cli): correctly handle auto-update for standalone binaries by @bdmorgan in #23038
• feat(core): add content-utils by @adamfweidman in #22984
• fix: circumvent genai sdk requirement for api key when using gateway auth via ACP by @sripasg in #23042
• fix(core): don't persist browser consent sentinel in non-interactive mode by @jasonmatthewsuhari in #23073
• fix(core): narrow browser agent description to prevent stealing URL tasks from web_fetch by @gsquared94 in #23086
• feat(cli): Partial threading of AgentLoopContext. by @joshualitt in #22978
• fix(browser-agent): enable "Allow all server tools" session policy by @cynthialong0-0 in #22343
• refactor(cli): integrate real config loading into async test utils by @scidomino in #23040
• feat(core): inject memory and JIT context into subagents by @abhipatel12 in #23032
• Fix logging and virtual list. by @jacob314 in #23080
• feat(core): cap JIT context upward traversal at git root by @SandyTao520 in #23074
• Docs: Minor style updates from initial docs audit. by @g-samroberts in #22872
• feat(core): add experimental memory manager agent to replace save_memory tool by @SandyTao520 in #22726
• Changelog for v0.35.0-preview.2 by @gemini-cli-robot in #23142
• Update website issue template for label and title by @g-samroberts in #23036
• fix: upgrade ACP SDK from 0.12 to 0.16.1 by @sripasg in #23132
• Update callouts to work on github. by @g-samroberts in #22245
• feat: ACP: Add token usage metadata to the send method's return value by @sripasg in #23148
• fix(plan): clarify that plan mode policies are combined with normal mode by @ruomengz in #23158
• Add ModelChain support to ModelConfigService and make ModelDialog dynamic by @kevinjwang1 in #22914
• Ensure that copied extensions are writable in the user's local directory by @kevinjwang1 in #23016
• feat(core): implement native Windows sandboxing by @mattKorwel in #21807
• feat(core): add support for admin-forced MCP server installations by @gsquared94 in #23163
• chore(lint): ignore .gemini directory and recursive node_modules by @mattKorwel in #23211
• feat(cli): conditionally exclude ask_user tool in ACP mode by @nmcnamara-eng in #23045
• feat(core): introduce AgentSession and rename stream events to agent events by @mbleigh in #23159
• feat(worktree): add Git worktree support for isolated parallel sessions by @jerop in #22973
• Add support for linking in the extension registry by @kevinjwang1 in #23153
• feat(extensions): add --skip-settings flag to install command by @Ratish1 in #17212
• feat(telemetry): track if session is running in a Git worktree by @jerop in #23265
• refactor(core): use absolute paths in GEMINI.md context markers by @SandyTao520 in #23135
• fix(core): add sanitization to sub agent thoughts and centralize utilities by @devr0306 in #22828
• feat(core): refine User-Agent for VS Code traffic (unified format) by @sehoon38 in #23256
• Fix schema for ModelChains by @kevinjwang1 in #23284
• test(cli): refactor tests for async render utilities by @scidomino in #23252
• feat(core): add security prompt for browse...