What's Changed
- CHOREchore(release): bump version to 0.48.0-nightly.20260609.g3a13b8eeb #27779
- CIci(dependabot): enable cooldown period for npm packages #27743
- CHORErefactor(core): standardize tool output formatting #27772
- CIci: update workflow logging and policy configurations #27853
- FIXfix(core): Ensure zero-quota limits fail fast to prevent retry loop hang #27698
- FIXfix(core): handle multi-line escaped quotes in stripShellWrapper #27467
- FIXfix(cli): prevent path traversal vulnerabilities during skill install… #27767
- Fix/pending tools and trust overrides #27854
- CIci: use internal environment for scheduled nightly releases (#27865) #27939
- FEATfeat(core): Support GDC air-gapped Service Identity after auth library update #27956
- FIXfix(cli): handle tmux false positive background detection #27572
- Add static eval source analyzer #27631
- FIXfix(config): migrate coreTools setting to tools.core #27947
- FIXfix(core-tools): resolve defensive path resolution for at-reference files #27943
- Revert "fix(core-tools): resolve defensive path resolution for at-reference files" #27992
- CHOREchore(release): bump version to 0.49.0-nightly.20260617.g4d3dcdce1 #28003
- Changelog for v0.48.0-preview.0 #27999
- FIXfix(ci): provide fallbacks for package variables in nightly release #28016
- CHOREchore(deps): pin dependencies and enforce 14-day update cooldown #27948
- FIXfix(ci): append trailing slash to registry url in npmrc #28038
- FEATfeat: add eval:inventory CLI command and reporting logic #28009
- FIXfix: resolve workspace publish failures and scheduler event loop starvation #28063
- FIXfix(ci): use wombat dressing room fallback in nightly release to prevent ENEEDAUTH #28104
- Add JSON output for eval inventory #28058
New Contributors
- @sanchezcoraspe made their first contribution in #27467
- @sidhantgoyal-droid made their first contribution in #27956
- @amelidev made their first contribution in #27572
Full Changelog: https://github.com/google-gemini/gemini-cli/compare/v0.47.0...v0.49.0