What's Changed

• fix(patch): cherry-pick 765fb67 to release/v0.36.0-preview.5-pr-24055 to patch version v0.36.0-preview.5 and create version 0.36.0-preview.6 by @gemini-cli-robot in #24061

Full Changelog: v0.36.0-preview.5...v0.36.0-preview.6

What's Changed

• fix(patch): cherry-pick 765fb67 to release/v0.35.2-pr-24055 [CONFLICTS] by @gemini-cli-robot in #24063

Full Changelog: v0.35.2...v0.35.3

Full Changelog: v0.36.0-preview.4...v0.36.0-preview.5

Full Changelog: v0.36.0-preview.3...v0.36.0-preview.4

Full Changelog: v0.35.1...v0.35.2

Full Changelog: v0.35.0...v0.35.1

What's Changed

• fix(patch): cherry-pick 055ff92 to release/v0.36.0-preview.0-pr-23672 to patch version v0.36.0-preview.0 and create version 0.36.0-preview.1 by @gemini-cli-robot in #23723

Full Changelog: v0.36.0-preview.0...v0.36.0-preview.3

What's Changed

• Changelog for v0.33.2 by @gemini-cli-robot in #22730
• feat(core): multi-registry architecture and tool filtering for subagents by @akh64bit in #22712
• Changelog for v0.34.0-preview.4 by @gemini-cli-robot in #22752
• fix(devtools): use theme-aware text colors for console warnings and errors by @SandyTao520 in #22181
• Add support for dynamic model Resolution to ModelConfigService by @kevinjwang1 in #22578
• chore(release): bump version to 0.36.0-nightly.20260317.2f90b4653 by @gemini-cli-robot in #22858
• fix(cli): use active sessionId in useLogger and improve resume robustness by @mattKorwel in #22606
• fix(cli): expand tilde in policy paths from settings.json by @abhipatel12 in #22772
• fix(core): add actionable warnings for terminal fallbacks (#14426) by @spencer426 in #22211
• feat(tracker): integrate task tracker protocol into core system prompt by @anj-s in #22442
• chore: add posttest build hooks and fix missing dependencies by @NTaylorMullen in #22865
• feat(a2a): add agent acknowledgment command and enhance registry discovery by @alisa-alisa in #22389
• fix(cli): automatically add all VSCode workspace folders to Gemini context by @sakshisemalti in #21380
• feat: add 'blocked' status to tasks and todos by @anj-s in #22735
• refactor(cli): remove extra newlines in ShellToolMessage.tsx by @NTaylorMullen in #22868
• fix(cli): lazily load settings in onModelChange to prevent stale closure data loss by @KumarADITHYA123 in #20403
• feat(core): subagent local execution and tool isolation by @akh64bit in #22718
• fix(cli): resolve subagent grouping and UI state persistence by @abhipatel12 in #22252
• refactor(ui): extract SessionBrowser search and navigation components by @abhipatel12 in #22377
• fix: updates Docker image reference for GitHub MCP server by @jhhornn in #22938
• refactor(cli): group subagent trajectory deletion and use native filesystem testing by @abhipatel12 in #22890
• refactor(cli): simplify keypress and mouse providers and update tests by @scidomino in #22853
• Changelog for v0.34.0 by @gemini-cli-robot in #22860
• test(cli): simplify createMockSettings calls by @scidomino in #22952
• feat(ui): format multi-line banner warnings with a bold title by @keithguerin in #22955
• Docs: Remove references to stale Gemini CLI file structure info by @g-samroberts in #22976
• feat(ui): remove write todo list tool from UI tips by @aniruddhaadak80 in #22281
• Fix issue where subagent thoughts are appended. by @gundermanc in #22975
• Feat/browser privacy consent by @kunal-10-cloud in #21119
• fix(core): explicitly map execution context in LocalAgentExecutor by @akh64bit in #22949
• feat(plan): support plan mode in non-interactive mode by @ruomengz in #22670
• feat(core): implement strict macOS sandboxing using Seatbelt allowlist by @ehedlund in #22832
• docs: add additional notes by @abhipatel12 in #23008
• fix(cli): resolve duplicate footer on tool cancel via ESC (#21743) by @ruomengz in #21781
• Changelog for v0.35.0-preview.1 by @gemini-cli-robot in #23012
• fix(ui): fix flickering on small terminal heights by @devr0306 in #21416
• fix(acp): provide more meta in tool_call_update by @Mervap in #22663
• docs: add FAQ entry for checking Gemini CLI version by @surajsahani in #21271
• feat(core): resilient subagent tool rejection with contextual feedback by @abhipatel12 in #22951
• fix(cli): correctly handle auto-update for standalone binaries by @bdmorgan in #23038
• feat(core): add content-utils by @adamfweidman in #22984
• fix: circumvent genai sdk requirement for api key when using gateway auth via ACP by @sripasg in #23042
• fix(core): don't persist browser consent sentinel in non-interactive mode by @jasonmatthewsuhari in #23073
• fix(core): narrow browser agent description to prevent stealing URL tasks from web_fetch by @gsquared94 in #23086
• feat(cli): Partial threading of AgentLoopContext. by @joshualitt in #22978
• fix(browser-agent): enable "Allow all server tools" session policy by @cynthialong0-0 in #22343
• refactor(cli): integrate real config loading into async test utils by @scidomino in #23040
• feat(core): inject memory and JIT context into subagents by @abhipatel12 in #23032
• Fix logging and virtual list. by @jacob314 in #23080
• feat(core): cap JIT context upward traversal at git root by @SandyTao520 in #23074
• Docs: Minor style updates from initial docs audit. by @g-samroberts in #22872
• feat(core): add experimental memory manager agent to replace save_memory tool by @SandyTao520 in #22726
• Changelog for v0.35.0-preview.2 by @gemini-cli-robot in #23142
• Update website issue template for label and title by @g-samroberts in #23036
• fix: upgrade ACP SDK from 0.12 to 0.16.1 by @sripasg in #23132
• Update callouts to work on github. by @g-samroberts in #22245
• feat: ACP: Add token usage metadata to the send method's return value by @sripasg in #23148
• fix(plan): clarify that plan mode policies are combined with normal mode by @ruomengz in #23158
• Add ModelChain support to ModelConfigService and make ModelDialog dynamic by @kevinjwang1 in #22914
• Ensure that copied extensions are writable in the user's local directory by @kevinjwang1 in #23016
• feat(core): implement native Windows sandboxing by @mattKorwel in #21807
• feat(core): add support for admin-forced MCP server installations by @gsquared94 in #23163
• chore(lint): ignore .gemini directory and recursive node_modules by @mattKorwel in #23211
• feat(cli): conditionally exclude ask_user tool in ACP mode by @nmcnamara-eng in #23045
• feat(core): introduce AgentSession and rename stream events to agent events by @mbleigh in #23159
• feat(worktree): add Git worktree support for isolated parallel sessions by @jerop in #22973
• Add support for linking in the extension registry by @kevinjwang1 in #23153
• feat(extensions): add --skip-settings flag to install command by @Ratish1 in #17212
• feat(telemetry): track if session is running in a Git worktree by @jerop in #23265
• refactor(core): use absolute paths in GEMINI.md context markers by @SandyTao520 in #23135
• fix(core): add sanitization to sub agent thoughts and centralize utilities by @devr0306 in #22828
• feat(core): refine User-Agent for VS Code traffic (unified format) by @sehoon38 in #23256
• Fix schema for ModelChains by @kevinjwang1 in #23284
• test(cli): refactor tests for async render utilities by @scidomino in #23252
• feat(core): add security prompt for browse...

What's Changed

• feat(cli): customizable keyboard shortcuts by @scidomino in #21945
• feat(core): Thread AgentLoopContext through core. by @joshualitt in #21944
• chore(release): bump version to 0.35.0-nightly.20260311.657f19c1f by @gemini-cli-robot in #21966
• refactor(a2a): remove legacy CoreToolScheduler by @adamfweidman in #21955
• feat(ui): add missing vim mode motions (X, ~, r, f/F/t/T, df/dt and friends) by @aanari in #21932
• Feat/retry fetch notifications by @aishaneeshah in #21813
• fix(core): remove OAuth check from handleFallback and clean up stray file by @sehoon38 in #21962
• feat(cli): support literal character keybindings and extended Kitty protocol keys by @scidomino in #21972
• fix(ui): clamp cursor to last char after all NORMAL mode deletes by @aanari in #21973
• test(core): add missing tests for prompts/utils.ts by @krrishverma1805-web in #19941
• fix(cli): allow scrolling keys in copy mode (Ctrl+S selection mode) by @nsalerni in #19933
• docs(cli): add custom keybinding documentation by @scidomino in #21980
• docs: fix misleading YOLO mode description in defaultApprovalMode by @Gyanranjan-Priyam in #21878
• fix: clean up /clear and /resume by @jackwotherspoon in #22007
• fix(core)#20941: reap orphaned descendant processes on PTY abort by @manavmax in #21124
• fix(core): update language detection to use LSP 3.18 identifiers by @yunaseoul in #21931
• feat(cli): support removing keybindings via '-' prefix by @scidomino in #22042
• feat(policy): add --admin-policy flag for supplemental admin policies by @galz10 in #20360
• merge duplicate imports packages/cli/src subtask1 by @Nixxx19 in #22040
• perf(core): parallelize user quota and experiments fetching in refreshAuth by @sehoon38 in #21648
• Changelog for v0.34.0-preview.0 by @gemini-cli-robot in #21965
• Changelog for v0.33.0 by @gemini-cli-robot in #21967
• fix(core): handle EISDIR in robustRealpath on Windows by @sehoon38 in #21984
• feat(core): include initiationMethod in conversation interaction telemetry by @yunaseoul in #22054
• feat(ui): add vim yank/paste (y/p/P) with unnamed register by @aanari in #22026
• fix(core): enable numerical routing for api key users by @sehoon38 in #21977
• feat(telemetry): implement retry attempt telemetry for network related retries by @aishaneeshah in #22027
• fix(policy): remove unnecessary escapeRegex from pattern builders by @spencer426 in #21921
• fix(core): preserve dynamic tool descriptions on session resume by @sehoon38 in #18835
• chore: allow 'gemini-3.1' in sensitive keyword linter by @scidomino in #22065
• feat(core): support custom base URL via env vars by @junaiddshaukat in #21561
• merge duplicate imports packages/cli/src subtask2 by @Nixxx19 in #22051
• fix(core): silently retry API errors up to 3 times before halting session by @spencer426 in #21989
• feat(core): simplify subagent success UI and improve early termination display by @abhipatel12 in #21917
• merge duplicate imports packages/cli/src subtask3 by @Nixxx19 in #22056
• fix(hooks): fix BeforeAgent/AfterAgent inconsistencies (#18514) by @krishdef7 in #21383
• feat(core): implement SandboxManager interface and config schema by @galz10 in #21774
• docs: document npm deprecation warnings as safe to ignore by @h30s in #20692
• fix: remove status/need-triage from maintainer-only issues by @SandyTao520 in #22044
• fix(core): propagate subagent context to policy engine by @NTaylorMullen in #22086
• fix(cli): resolve skill uninstall failure when skill name is updated by @NTaylorMullen in #22085
• docs(plan): clarify interactive plan editing with Ctrl+X by @Adib234 in #22076
• fix(policy): ensure user policies are loaded when policyPaths is empty by @NTaylorMullen in #22090
• Docs: Add documentation for model steering (experimental). by @jkcinouye in #21154
• Add issue for automated changelogs by @g-samroberts in #21912
• fix(core): secure argsPattern and revert WEB_FETCH_TOOL_NAME escalation by @spencer426 in #22104
• feat(core): differentiate User-Agent for a2a-server and ACP clients by @bdmorgan in #22059
• refactor(core): extract ExecutionLifecycleService for tool backgrounding by @adamfweidman in #21717
• feat: Display pending and confirming tool calls by @sripasg in #22106
• feat(browser): implement input blocker overlay during automation by @kunal-10-cloud in #21132
• fix: register themes on extension load not start by @jackwotherspoon in #22148
• feat(ui): Do not show Ultra users /upgrade hint (#22154) by @sehoon38 in #22156
• chore: remove unnecessary log for themes by @jackwotherspoon in #22165
• fix(core): resolve MCP tool FQN validation, schema export, and wildcards in subagents by @abhipatel12 in #22069
• fix(cli): validate --model argument at startup by @JaisalJain in #21393
• fix(core): handle policy ALLOW for exit_plan_mode by @backnotprop in #21802
• feat(telemetry): add Clearcut instrumentation for AI credits billing events by @gsquared94 in #22153
• feat(core): add google credentials provider for remote agents by @adamfweidman in #21024
• test(cli): add integration test for node deprecation warnings by @Nixxx19 in #20215
• feat(cli): allow safe tools to execute concurrently while agent is busy by @spencer426 in #21988
• feat(core): implement model-driven parallel tool scheduler by @abhipatel12 in #21933
• update vulnerable deps by @scidomino in #22180
• fix(core): fix startup stats to use int values for timestamps and durations by @yunaseoul in #22201
• fix(core): prevent duplicate tool schemas for instantiated tools by @abhipatel12 in #22204
• fix(core): add proxy routing support for remote A2A subagents by @adamfweidman in #22199
• fix(core/ide): add Antigravity CLI fallbacks by @apfine in #22030
• fix(browser): fix duplicate function declaration error in browser agent by @gsquared94 in #22207
• feat(core): implement Stage 1 improvements for webfetch tool by @aishaneeshah in #21313
• Changelog for v0.34.0-preview.1 by @gemini-cli-robot in #22194
• perf(cli): enable code splitting and deferred UI loading by @sehoon38 in #22117
• fix: remove unused img.png from project root by @SandyTao520 in #22222
• docs(local model routing): add docs on how to use Gemma for local model routing by @douglas-reid in #21365
• feat(a2a): enable native gRPC support and protocol routing by @alisa-alisa in #21403
• fix(cli): escape @ symbols on paste to prevent unintended file expansion by @krishdef7 in #21239
• feat(core): add trajectoryId to Con...

What's Changed

• feat(core): set up onboarding telemetry by @yunaseoul in #23118
• Retry evals on API error. by @gundermanc in #23322
• fix(evals): remove tool restrictions and add compile-time guards by @SandyTao520 in #23312
• fix(hooks): support 'ask' decision for BeforeTool hooks by @gundermanc in #21146
• feat(browser): add warning message for session mode 'existing' by @cynthialong0-0 in #23288
• chore(lint): enforce zero warnings and cleanup syntax restrictions by @alisa-alisa in #22902
• fix(cli): add Esc instruction to HooksDialog footer by @abhipatel12 in #23258
• Disallow and suppress misused spread operator. by @gundermanc in #23294
• fix(core): refine CliHelpAgent description for better delegation by @abhipatel12 in #23310
• fix(core): enable global session and persistent approval for web_fetch by @NTaylorMullen in #23295
• fix(plan): add state transition override to prevent plan mode freeze by @Adib234 in #23020
• fix(cli): record skill activation tool calls in chat history by @NTaylorMullen in #23203

Full Changelog: v0.36.0-nightly.20260321.fc03891a1...v0.36.0-nightly.20260323.6055c4707