Gemini CLI Updates & Release Notes

chore(release): bump version to 0.45.0-nightly.20260521.g854f811be by @gemini-cli-robot in #27362

fix(cli): prevent Termux relaunch and resize remount loops by @saymanq in #27110

Feat/a2a expose usage metadata by @jvargassanchez-dot in #27288

feat(context): Complete simplification work. by @joshualitt in #27345

fix(core): force update_topic tool to execute sequentially by @jvargassanchez-dot in #27357

Changelog for v0.44.0-preview.0 by @gemini-cli-robot in #27360

Changelog for v0.43.0 by @gemini-cli-robot in #27361

Revert "fix(core): prevent SIGHUP kills in PTY environments" by @bbiggs in #27401

fix(cli): filter internal session context from history during resumption by @rmedranollamas in #27391

Update default auto routing by @DavidAPierce in #27071

fix(core): bypass routing classifiers to prevent orphaned function response errors by @danielweis in #27389

fix(core): suppress PTY resize EBADF errors by @scidomino in #27461

fix(core): prevent blacklist bypass in mcp list by @ompatel-aiml in #27377

fix(cli): ignore unmapped vim normal keys by @MukundaKatta in #27102

fix(patch): cherry-pick bd53951 to release/v0.45.0-preview.0-pr-27496 to patch version v0.45.0-preview.0 and create version 0.45.0-preview.1 by @gemini-cli-robot in #27535

New Contributors:

• @saymanq made their first contribution in #27110
• @jvargassanchez-dot made their first contribution in #27288
• @MukundaKatta made their first contribution in #27102

Full Changelog: v0.44.1...v0.45.0

What's Changed

• chore(release): bump version to 0.44.0-nightly.20260512.g022e8baef by @gemini-cli-robot in #26957
• Changelog for v0.42.0 by @gemini-cli-robot in #26958
• Refactor: Eliminate no-unsafe-return suppressions via strict type validation by @M-DEV-1 in #20668
• Changelog for v0.43.0-preview.0 by @gemini-cli-robot in #26959
• feat(core): change agent registration to first-wins and prioritize project by @adamfweidman in #26953
• feat(cli): merge Auto modes into a single Auto mode by @DavidAPierce in #26714
• fix(core): preserve OAuth refresh tokens during rotation and retrieval by @cocosheng-g in #26924
• fix(cli): allow keychain auth for --list-sessions and non-interactive mode by @cocosheng-g in #26921
• fix(core): handle EISDIR on virtual drives in memory discovery by @cocosheng-g in #26985
• fix(cli): auto-approve shell redirections in AUTO_EDIT mode by @cocosheng-g in #27003
• ci: suppress bot comments during standard triage maintenance by @cocosheng-g in #27006
• fix(core): refresh MCP OAuth token usage after re-auth by @sahilkirad in #26312
• fix(ui): clamped table column widths by @devr0306 in #26991
• fix(core): isolate subagent thread context by @akh64bit in #26449
• chore: add execution permission to scripts/review.sh by @scidomino in #27009
• fix(core): made context files append instead of replace by @devr0306 in #26950
• fix: add system PATH fallback for ripgrep resolution (#26777) by @cocosheng-g in #26868
• chore: clean up launched memory features by @SandyTao520 in #26941
• fix(core): throttle shell text output and bound live UI buffer by @emersonbusson in #26955
• fix(cli): don't crash when an @-mention captures a non-path blob by @Rajeshpatel07 in #25139
• fix(a2a-server): Implement default policy loading for parity with CLI by @kschaab in #27073
• feat(core): add RemoteSessionInvocation by @adamfweidman in #26937
• fix: allow configured MCP servers in non-interactive mode by @cocosheng-g in #27215
• fix(core): add exception handling to migrateFromFileStorage by @devr0306 in #27229
• fix(cli): bundle ink worker-entry.js by @rmedranollamas in #27249
• feat(core): wire AgentSession invocations into agent-tool by @adamfweidman in #26948
• fix(core): prevent path traversal in custome command file injection by @ompatel-aiml in #27234
• fix(core): respect NO_PROXY in global fetch dispatcher by @cocosheng-g in #27216
• fix(core): correctly handle nullable array types in MCP tools by @devr0306 in #27228
• fix(cli): preserve proxy-agent named exports in ESM bundle by @ashishch432 in #27145
• Proposal: deterministic encoding for child-process I/O by @kaluchi in #27247
• feat(cli): add Sublime Text and Emacs Client editors, improve error messages and documentation by @alberti42 in #21090
• Changelog for v0.43.0-preview.1 by @gemini-cli-robot in #27297
• fix(devtools): bundle devtools package to avoid resolution errors by @rmedranollamas in #27250
• fix(cli): integrate PolicyEngine into ACP session to prevent deadlocks (#23507) by @cocosheng-g in #27252
• fix: robust ripgrep path resolution and 1p hermetic execution support by @cocosheng-g in #27253
• refactor: decouple stored session deletion from ChatRecordingService (#22920) by @yuvrajangadsingh in #27039
• fix(core): improve Alpine shell compatibility by @dibyx in #26770
• fix(core): generalize MCP compliance fix for tool results by @cocosheng-g in #27045
• fix(scripts): scrub CI env vars in dev to keep interactive mode by @Hashaam101 in #27159
• fix(core): Added date field for the GCal MCP by @devr0306 in #27251
• fix(core): centralize path validation to prevent crashes from malformed prompts by @cocosheng-g in #27211
• fix(core): prevent SIGHUP kills in PTY environments (WSL2/Kitty/Alacritty) by @ProthamD in #27267
• fix(core): dynamic fallback routing for exhausted quota models by @cocosheng-g in #27067

Full Changelog: v0.44.1...v0.45.0

What's Changed

• feat(core): steer model to use edit tool for surgical edits, fix a typo by @aishaneeshah in #26480
• docs: clarify Auto Memory proposes memory updates and skills by @SandyTao520 in #26527
• fix(core): reject numeric project IDs in GOOGLE_CLOUD_PROJECT (#24695) by @Abhijit-2592 in #26532
• fix(core): remove unsafe type assertion suppressions in error utils by @himanshu748 in #19881
• fix(core): allow redirection in YOLO and AUTO_EDIT modes without sandboxing by @galz10 in #26542
• ci(release): build and attach unsigned macOS binaries to releases by @ruomengz in #26462
• fix(core): Fix chat corruption bug in context manager. by @joshualitt in #26534
• fix(cli): provide JSON output for AgentExecutionStopped in non-interactive mode by @cynthialong0-0 in #26504
• feat(evals): add shell command safety evals by @akh64bit in #26528
• fix(core): handle invalid custom plans directory gracefully by @cynthialong0-0 in #26560
• fix(acp): move tool explanation from thought stream to tool call content by @sripasg in #26554
• fix(a2a-server): Resolve race condition in tool completion waiting by @kschaab in #26568
• fix(cli): randomize sandbox container names by @Kkartik14 in #26014
• fix(core): Fix hysteresis in async context management pipelines. by @joshualitt in #26452
• Tighten private Auto Memory patch allowlist by @SandyTao520 in #26535
• fix(cli): hide read-only settings scopes by @cvan20191 in #26249
• fix(ci): preserve executable bit for mac binaries by @ruomengz in #26600
• fix(cli): improve mcp list UX in untrusted folders by @Adib234 in #26457
• fix(core): prevent silent hang during OAuth auth on headless Linux by @RhysSullivan in #26571
• Changelog for v0.42.0-preview.0 by @gemini-cli-robot in #26537
• ci: fix Argument list too long in triage workflows by @cocosheng-g in #26603
• refactor(cli): migrate core tools to native ToolDisplay property and fix UI rendering by @mbleigh in #25186
• don't wrap args unnecessarily by @scidomino in #26599
• fix(core): preserve system PATH in Git environment to fix ENOENT (#25034) by @cocosheng-g in #26587
• fix(routing): fix resolveClassifierModel argument mismatch in ApprovalModeStrategy by @danielweis in #26658
• docs: add vi mode shortcuts and clarify MCP/custom sandbox setup by @chrisjcthomas in #23853
• fix(ux): fixed issue with transcribed text not showing after releasing space by @devr0306 in #26609
• ci: fix json parsing in scheduled triage workflow by @cocosheng-g in #26656
• fix(cli): hide /memory add subcommand when memoryV2 is enabled by @SandyTao520 in #26605
• fix: prevent false command conflicts when launching from home directory by @Br1an67 in #23069
• fix(core): cache model routing decision in LocalAgentExecutor by @akh64bit in #26548
• Changelog for v0.42.0-preview.2 by @gemini-cli-robot in #26597
• skip broken test by @scidomino in #26705
• feat: export session to file and import via flag by @cocosheng-g in #26514
• Feat: Add Machine Hostname to CLI interface by @M-DEV-1 in #25637
• docs(extensions): refactor releasing guide and add update mechanisms by @ruomengz in #26595
• fix(ci): fix maintainer identification in lifecycle manager by @gundermanc in #26706
• fix(ui): added quotes around session id in resume tip by @devr0306 in #26669
• Changelog for v0.41.0 by @gemini-cli-robot in #26670
• refactor(core): agent session protocol changes by @adamfweidman in #26661
• fix(context): implement loose boundary policy for gc backstop. by @joshualitt in #26594
• fix(core): throw explicit error on dropped tool responses by @aishaneeshah in #26668
• fix: resolve "function response turn must come immediately after function call" error by @danielweis in #26691
• fix(core): resolve parallel tool call streaming ID collision by @aishaneeshah in #26646
• feat(core): add LocalSubagentProtocol behind AgentProtocol by @adamfweidman in #25302
• fix(cli): remove noisy theme registration logs from terminal by @JayadityaGit in #25858
• ci: implement codebase-aware effort level triage by @cocosheng-g in #26666
• feat(acp/core): prefix tool call IDs with tool names to support tool rendering in ACP compliant IDEs. by @sripasg in #26676
• fix(mcp): treat GET 404 as 405 in StreamableHTTPClientTransport by @krishdef7 in #24847
• feat(core): add RemoteSubagentProtocol behind AgentProtocol by @adamfweidman in #25303
• feat(context): Improvements to the snapshotter. by @joshualitt in #26655
• fix(context): Change snapshotter model config. by @joshualitt in #26745
• fix(cli): allow installing extensions from ssh repo by @danielmundi in #26274
• fix(cli): prevent duplicate SessionStart systemMessage render by @dimssu in #25827
• fix(cli/acp): prevent infinite thought loop in ACP mode by disablig nextSpeakerCheck by @sripasg in #26874
• fix(cli): use static tool name in confirmation prompt to avoid parsing errors by @cocosheng-g in #26866
• fix(routing): Refactor tool turn handling for the conversation history in NumericalClassifierStrategy to prevent 400 Bad Request by @danielweis in #26761
• fix(core): handle malformed projects.json in ProjectRegistry by @cocosheng-g in #26885
• fix(ui): added a gutter width to the input prompt width calculation by @devr0306 in #26882
• fix: prevent EISDIR crash when customIgnoreFilePaths contains directories (#19868) by @suhaan-24 in #19898
• revert 6b9b778 by @danielweis in #26893
• Fix/vscode run current file ts by @Neil-N4 in #22894
• Allow Enter to select session while in search mode in /resume by @f-pieri in #21523
• fix(core): ignore .pak and .rpa game archive formats by default by @Eswar809 in #26884
• fix(cli): enable adk non-interactive session by @adamfweidman in #26895
• fix(cli): restore resume for legacy sessions by @KurodaKayn in #26577
• fix: respect explicit model selection after Flash quota exhaustion (#26759) by @cocosheng-g in #26872
• feat(context): Introduce adaptive token calculator to more accurately calculate content sizes. by @joshualitt in #26888
• chore: update checkout action configuration in workflows by @galz10 in #26897
• fix (telemetry): inject quota_project_id to prevent fallback to default oauth client by @TNTCompany in #26698
• Exclude extension context from skill extraction agent by @SandyTao520 in #26879
• Enable NumericalRouter when using dynamic model configs by @kevinjwang1 in #26929
• ci: actively triage missing priority labels and intelligently clean up conflicting labels by @cocosheng-g in #26865
• refactor(core): introduce...

Full Changelog: v0.42.0...v0.43.0

What's Changed

• fix(cli): prevent automatic updates from switching to less stable channels by @Adib234 in #26132
• chore(release): bump version to 0.42.0-nightly.20260428.g59b2dea0e by @gemini-cli-robot in #26142
• fix(cli): pass node arguments via NODE_OPTIONS during relaunch to support SEA by @cocosheng-g in #26130
• fix(cli): handle DECKPAM keypad Enter sequences in terminal by @Gitanaskhan26 in #26092
• docs(cli): point plan-mode session retention to actual /settings labels by @ifitisit in #25978
• fix(core): add missing oauth fields support in subagent parsing by @abhipatel12 in #26141
• fix(core): disconnect extension-backed MCP clients in stopExtension by @cocosheng-g in #26136
• Update documentation workflows with workspace trust by @g-samroberts in #26150
• refactor(acp): modularize monolithic acpClient into specialized files by @sripasg in #26143
• test: fix failures due to antigravity environment leakage by @adamfweidman in #26162
• fix(core): add explicit empty log guard in A2A pushMessage by @adamfweidman in #26198
• feat(cli): add --delete flag to /exit command for session deletion by @AbdulTawabJuly in #19332
• test(core): add regression test for issue for ToolConfirmationResponse by @Adib234 in #26194
• Add the ability to @ mention the gemini robot. by @gundermanc in #26207
• test(evals): add EvalMetadata JSDoc annotations to older tests by @akh64bit in #26147
• fix(core): reduce default API timeout to 60s and enable retries for undici timeouts by @Adib234 in #26191
• fix(core): distinguish fallback chains and fix maxAttempts for auto vs explicit model selection by @adamfweidman in #26163
• fix(cli): handle InvalidStream event gracefully without throwing by @adamfweidman in #26218
• ci(github-actions): switch to github app token and fix bot self-trigger by @gundermanc in #26223
• Respect logPrompts flag for logging sensitive fields by @lp-peg in #26153
• fix: correct API key validation logic in handleApiKeySubmit by @martin-hsu-test in #25453
• fix(agent): prevent exit_plan_mode from being called via shell by @Abhijit-2592 in #26230
• Fix: Inconsistent Case-Sensitivity in GrepTool by @gemini-cli[bot] in #26235
• docs(core): add automated gemma setup guide by @Samee24 in #26233
• Allow non-https proxy urls to support container environments by @stevemk14ebr in #26234
• fix(bot): productivity and backlog optimizations by @gundermanc in #26236
• refactor(acp): delegate prompt turn processing logic to GeminiClient by @sripasg in #26222
• fix(cli): refine platform-specific undo/redo and smart bubbling for WSL by @cocosheng-g in #26202
• fix: suppress duplicate extension warnings during startup by @cocosheng-g in #26208
• fix(cli): use byte length instead of string length for readStdin size limits by @Adib234 in #26224
• fix(ui): made shell tool header wrap on Ctrl+O by @devr0306 in #26229
• fix(core): ensure Vertex AI sets hasAccessToPreviewModels and remove aggressive 404 fallback revocation by @galz10 in #27067

Full Changelog: v0.40.1...v0.42.0

What's Changed

• chore(release): bump version to 0.41.0-nightly.20260423.gaa05b4583 by @gemini-cli-robot in #25847
• fix(core): only show list suggestion if the partial input is empty by @cynthialong0-0 in #25821
• feat(cli): secure .env loading and enforce workspace trust in headless mode by @ehedlund in #25814
• fix: fatal hard-crash on loop detection via unhandled AbortError by @hsm207 in #20108
• update package-lock.json by @ehedlund in #25876
• feat(core): enhance shell command validation and add core tools allowlist by @galz10 in #25720
• fix(ui): corrected background color check in user message components by @devr0306 in #25880
• perf(core): fix slow boot by fetching experiments and quota asynchronously by @spencer426 in #25758
• feat(core,cli): add support for Gemma 4 models (experimental) by @Abhijit-2592 in #25604
• update FatalUntrustedWorkspaceError message to include doc link by @ehedlund in #25874
• docs: add Gemini CLI course link to README by @JayadityaGit in #25925
• feat(repo): add gemini-cli-bot metrics and workflows by @gundermanc in #25888
• fix(cli): allow output redirection for cli commands by @spencer426 in #25894
• test(cli): add unit tests for restore ACP command (#23402) by @cocosheng-g in #26053
• fix(ui): better error messages for ECONNRESET and ETIMEDOUT by @devr0306 in #26059
• feat(core): wire up the new ContextManager and AgentChatHistory by @joshualitt in #25409
• fix(cli): ensure sandbox proxy cleanup and remove handler leaks by @ehedlund in #26065
• fix(cli): correct alternate buffer warning logic for JetBrains by @Adib234 in #26067
• fix(cli): make MCP ping optional in list command and use configured timeout by @cocosheng-g in #26068
• fix(core): better error message for failed cloudshell-gca auth by @devr0306 in #26079
• feat(cli): provide manual session UUID via command line arg by @cocosheng-g in #26060
• Changelog for v0.40.0-preview.2 by @gemini-cli-robot in #25846
• (docs) update sandboxing documentation by @g-samroberts in #25930
• fix(core): enforce parallel task tracker updates by @anj-s in #24477
• Update policy so transient errors are not marked terminal by @DavidAPierce in #26066
• Implement bot that performs time-series metric analysis and suggests repo management improvements by @gundermanc in #25945
• fix(core): handle non-string model flags in resolution by @Adib234 in #26069
• fix(ux): added error message for ENOTDIR by @devr0306 in #26128
• Changelog for v0.40.0-preview.3 by @gemini-cli-robot in #25904
• fix(cli): prevent ACP stdout pollution from SessionEnd hooks by @cocosheng-g in #26125
• feat(cli): support boolean and number casting for env vars in settings.json by @cocosheng-g in #26118
• fix(cli): preserve Request headers in DevTools activity logger by @Adib234 in #26078
• fix(patch): cherry-pick 2194da2 to release/v0.41.0-preview.0-pr-26153 to patch version v0.41.0-preview.0 and create version 0.41.0-preview.1 by @gemini-cli-robot in #26269
• fix(patch): cherry-pick 1d72a12 to release/v0.41.0-preview.1-pr-26479 to patch version v0.41.0-preview.1 and create version 0.41.0-preview.2 by @gemini-cli-robot in #26508
• fix(patch): cherry-pick 7cc19c2 to release/v0.41.0-preview.2-pr-26507 to patch version v0.41.0-preview.2 and create version 0.41.0-preview.3 by @gemini-cli-robot in #26530

New Contributors

• @hsm207 made their first contribution in #20108
• @gaurav0107 made their first contribution in #25822

Full Changelog: v0.39.0...v0.41.0

What's Changed

• chore(release): bump version to 0.40.0-nightly.20260414.g5b1f7375a by @gemini-cli-robot in #25420
• Fix(core): retry additional OpenSSL 3.x SSL errors during streaming (#16075) by @rcleveng in #25187
• fix(core): prevent YOLO mode from being downgraded by @galz10 in #25341
• feat: bundle ripgrep binaries into SEA for offline support by @scidomino in #25342
• Changelog for v0.39.0-preview.0 by @gemini-cli-robot in #25417
• feat(test): add large conversation scenario for performance test by @cynthialong0-0 in #25331
• improve(core): require recurrence evidence before extracting skills by @SandyTao520 in #25147
• test(evals): add subagent delegation evaluation tests by @anj-s in #24619
• feat: add github colorblind themes by @Z1xus in #15504
• fix(core): honor GOOGLE_GEMINI_BASE_URL and GOOGLE_VERTEX_BASE_URL by @chrisjcthomas in #25357
• fix(cli): clean up slash command IDE listeners by @jasonmatthewsuhari in #24397
• Changelog for v0.38.0 by @gemini-cli-robot in #25470
• fix(evals): update eval tests for invoke_agent telemetry and project-scoped memory by @SandyTao520 in #25502
• Changelog for v0.38.1 by @gemini-cli-robot in #25476
• feat(core): integrate skill-creator into skill extraction agent by @SandyTao520 in #25421
• feat(cli): provide default post-submit prompt for skill command by @ruomengz in #25327
• feat(core): add tools to list and read MCP resources by @ruomengz in #25395
• fix(evals): add typecheck coverage for evals, integration-tests, and memory-tests by @SandyTao520 in #25480
• Use OSC 777 for terminal notifications by @jackyliuxx in #25300
• fix(extensions): fix bundling for examples by @abhipatel12 in #25542
• fix(cli): reset plan session state on /clear by @jasonmatthewsuhari in #25515
• feat(core): add .mdx support to get-internal-docs tool by @g-samroberts in #25090
• docs(policy): mention that workspace policies are broken by @6112 in #24367
• fix(core): allow explicit write permissions to override governance file protections in sandboxes by @galz10 in #25338
• feat(sandbox): resolve custom seatbelt profiles from $HOME/.gemini first by @mvanhorn in #25427
• Reduce blank lines. by @gundermanc in #25563
• fix(ui): revert preview theme on dialog unmount by @JayadityaGit in #22542
• fix(core): fix ShellExecutionConfig spread and add ProjectRegistry save backoff by @mahimashanware in #25382
• feat(core): Disable topic updates for subagents by @gundermanc in #25567
• feat(core): enable topic update narration by default and promote to general by @gundermanc in #25586
• docs: migrate installation and authentication to mdx with tabbed layouts by @g-samroberts in #25155
• feat(config): split memoryManager flag into autoMemory by @SandyTao520 in #25601
• fix(core): allow Cloud Shell users to use PRO_MODEL_NO_ACCESS experiment by @sehoon38 in #25702
• fix(cli): round slow render latency to avoid opentelemetry float warning by @scidomino in #25709
• docs(tracker): introduce experimental task tracker feature by @anj-s in #24556

Full Changelog: v0.38.2...v0.40.0

What's Changed

• refactor(plan): simplify policy priorities and consolidate read-only rules by @ruomengz in #24849
• feat(test-utils): add memory usage integration test harness by @sripasg in #24876
• feat(memory): add /memory inbox command for reviewing extracted skills by @SandyTao520 in #24544
• chore(release): bump version to 0.39.0-nightly.20260408.e77b22e63 by @gemini-cli-robot in #24939
• fix(core): ensure robust sandbox cleanup in all process execution paths by @ehedlund in #24763
• chore: update ink version to 6.6.8 by @jacob314 in #24934
• Changelog for v0.38.0-preview.0 by @gemini-cli-robot in #24938
• chore: ignore conductor directory by @JayadityaGit in #22128
• Changelog for v0.37.0 by @gemini-cli-robot in #24940
• feat(plan): require user confirmation for activate_skill in Plan Mode by @ruomengz in #24946
• feat(test-utils): add CPU performance integration test harness by @sripasg in #24951
• fix(cli-ui): enable Ctrl+Backspace for word deletion in Windows Terminal by @dogukanozen in #21447
• test(sdk): add unit tests for GeminiCliSession by @AdamyaSingh7 in #21897
• fix(core): resolve windows symlink bypass and stabilize sandbox integration tests by @ehedlund in #24834
• fix(cli): restore file path display in edit and write tool confirmations by @jwhelangoog in #24974
• feat(core): refine shell tool description display logic by @jwhelangoog in #24903
• fix(core): dynamic session ID injection to resolve resume bugs by @scidomino in #24972
• Update ink version to 6.6.9 by @jacob314 in #24980
• Generalize evals infra to support more types of evals, organization and queuing of named suites by @gundermanc in #24941
• fix(cli): optimize startup with lightweight parent process by @sehoon38 in #24667
• refactor(sandbox): use centralized sandbox paths in macOS Seatbelt implementation by @ehedlund in #24984
• feat(cli): refine tool output formatting for compact mode by @jwhelangoog in #24677
• fix(sdk): skip broken sendStream tests to unblock nightly by @SandyTao520 in #25000
• refactor(core): use centralized path resolution for Linux sandbox by @ehedlund in #24985
• Support ctrl+shift+g by @jacob314 in #25035
• feat(core): refactor subagent tool to unified invoke_subagent tool by @abhipatel12 in #24489
• fix(core): add explicit git identity env vars to prevent sandbox checkpointing error by @mrpmohiburrahman in #19775
• fix: respect hideContextPercentage when FooterConfigDialog is closed without changes by @chernistry in #24773
• fix(cli): suppress unhandled AbortError logs during request cancellation by @euxaristia in #22621
• Automated documentation audit by @g-samroberts in #24567
• feat(cli): implement useAgentStream hook by @mbleigh in #24292
• refactor(plan) Clean default plan toml by @ruomengz in #25037
• refactor(core): remove legacy subagent wrapping tools by @abhipatel12 in #25053
• fix(core): honor retryDelay in RetryInfo for 503 errors by @yunaseoul in #25057
• fix(core): remediate subagent memory leaks using AbortSignal in MessageBus by @abhipatel12 in #25048
• feat(cli): wire up useAgentStream in AppContainer by @mbleigh in #24297
• feat(core): migrate chat recording to JSONL streaming by @spencer426 in #23749
• fix(core): clear 5-minute timeouts in oauth flow to prevent memory leaks by @spencer426 in #24968
• fix(sandbox): centralize async git worktree resolution and enforce read-only security by @ehedlund in #25040
• feat(test): add high-volume shell test and refine perf harness by @sripasg in #24983
• fix(core): silently handle EPERM when listing dir structure by @scidomino in #25066
• Changelog for v0.37.1 by @gemini-cli-robot in #25055
• fix: decode Uint8Array and multi-byte UTF-8 in API error messages by @kimjune01 in #23341
• Automated documentation audit results by @g-samroberts in #22755
• debugging(ui): add optional debugRainbow setting by @jacob314 in #25088
• fix: resolve lifecycle memory leaks by cleaning up listeners and root closures by @spencer426 in #25049
• docs(cli): updates f12 description to be more precise by @JayadityaGit in #15816
• fix(cli): mark /settings as unsafe to run concurrently by @jacob314 in #25061
• fix(core): remove buffer slice to prevent OOM on large output streams by @spencer426 in #25094
• feat(core): persist subagent agentId in tool call records by @abhipatel12 in #25092
• chore(core): increase codebase investigator turn limits to 50 by @abhipatel12 in #25125
• refactor(core): consolidate execute() arguments into ExecuteOptions by @mbleigh in #25101
• feat(core): add Strategic Re-evaluation guidance to system prompt by @aishaneeshah in #25062
• fix(core): preserve shell execution config fields on update by @jasonmatthewsuhari in #25113
• docs: add vi shortcuts and clarify MCP sandbox setup by @chrisjcthomas in #21679
• fix(cli): pass session id to interactive shell executions by @jasonmatthewsuhari in #25114
• fix(cli): resolve text sanitization data loss due to C1 control characters by @euxaristia in #22624
• feat(core): add large memory regression test by @cynthialong0-0 in #25059
• fix(core): resolve PTY exhaustion and orphan MCP subprocess leaks by @spencer426 in #25079
• chore(deps): update vulnerable dependencies via npm audit fix by @scidomino in #25140
• perf(sandbox): optimize Windows sandbox initialization via native ACL application by @ehedlund in #25077
• chore: switch from keytar to @github/keytar by @cocosheng-g in #25143
• fix: improve audio MIME normalization and validation in file reads by @junaiddshaukat in #21636
• docs: Update docs-audit to include changes in PR body by @g-samroberts in #25153
• docs: correct documentation for enforced authentication type by @cocosheng-g in #25142
• fix(cli): exclude update_topic from confirmation queue count by @Abhijit-2592 in #24945
• Memory fix for trace's streamWrapper. by @anthraxmilkshake in #25089
• fix(core): fix quota footer for non-auto models and improve display by @jackwotherspoon in #25121
• docs(contributing): clarify self-assignment policy for issues by @jmr in #23087
• feat(core): add skill patching support with /memory inbox integration by @SandyTao520 in #25148
• Stop suppressing thoughts and text in model response by @gundermanc in #25073
• fix(release): prefix git hash in nightly versions to prevent semver normalization by @SandyTao520 in #25304
• feat(cli): extract QuotaContext and resolve infinite render loop by @Adib234 in #24959
• refactor(core): extract and centralize sandbox path utilities by @ehedlund in https://github.com/goo ...

New Contributors

• @mbleigh, @jmr, and 39 other contributors

Full Changelog: v0.38.1...v0.39.0