What's Changed
- fix(cli): prevent path traversal vulnerabilities during skill install… by @ompatel-aiml in https://github.com/google-gemini/gemini-cli/pull/27767
- Fix/pending tools and trust overrides by @jvargassanchez-dot in https://github.com/google-gemini/gemini-cli/pull/27854
- ci: use internal environment for scheduled nightly releases (#27865) by @rmedranollamas in https://github.com/google-gemini/gemini-cli/pull/27939
- feat(core): Support GDC air-gapped Service Identity after auth library update by @sidhantgoyal-droid in https://github.com/google-gemini/gemini-cli/pull/27956
- fix(cli): handle tmux false positive background detection by @amelidev in https://github.com/google-gemini/gemini-cli/pull/27572
- Add static eval source analyzer by @ved015 in https://github.com/google-gemini/gemini-cli/pull/27631
- fix(config): migrate coreTools setting to tools.core by @galz10 in https://github.com/google-gemini/gemini-cli/pull/27947
- fix(core-tools): resolve defensive path resolution for at-reference files by @luisfelipe-alt in https://github.com/google-gemini/gemini-cli/pull/27943
- Revert "fix(core-tools): resolve defensive path resolution for at-reference files" by @galz10 in https://github.com/google-gemini/gemini-cli/pull/27992
- chore(release): bump version to 0.49.0-nightly.20260617.g4d3dcdce1 by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/28003
- Changelog for v0.48.0-preview.0 by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/27999
- fix(ci): provide fallbacks for package variables in nightly release by @galz10 in https://github.com/google-gemini/gemini-cli/pull/28016
- chore(deps): pin dependencies and enforce 14-day update cooldown by @galz10 in https://github.com/google-gemini/gemini-cli/pull/27948
- fix(ci): append trailing slash to registry url in npmrc by @rmedranollamas in https://github.com/google-gemini/gemini-cli/pull/28038
- feat: add eval:inventory CLI command and reporting logic by @ved015 in https://github.com/google-gemini/gemini-cli/pull/28009
- fix: resolve workspace publish failures and scheduler event loop starvation by @rmedranollamas in https://github.com/google-gemini/gemini-cli/pull/28063
- fix(ci): use wombat dressing room fallback in nightly release to prevent ENEEDAUTH by @rmedranollamas in https://github.com/google-gemini/gemini-cli/pull/28104
- Add JSON output for eval inventory by @ved015 in https://github.com/google-gemini/gemini-cli/pull/28058
- fix/verify release npm ci ignore scripts by @rmedranollamas in https://github.com/google-gemini/gemini-cli/pull/28116
- fix(ci): prevent workspace binary shadowing in release verification by @galz10 in https://github.com/google-gemini/gemini-cli/pull/28132
- Feat/tool registry discovery by @ved015 in https://github.com/google-gemini/gemini-cli/pull/28113
New Contributors
- @sidhantgoyal-droid made their first contribution in https://github.com/google-gemini/gemini-cli/pull/27956
- @amelidev made their first contribution in https://github.com/google-gemini/gemini-cli/pull/27572