Gemini CLI v0.48.0-preview.0 hardens security against path traversal and skill installation exploits

What's Changed

• chore(release): bump version to 0.48.0-nightly.20260609.g3a13b8eeb by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/27779
• ci(dependabot): enable cooldown period for npm packages by @ruomengz in https://github.com/google-gemini/gemini-cli/pull/27743
• refactor(core): standardize tool output formatting by @galz10 in https://github.com/google-gemini/gemini-cli/pull/27772
• ci: update workflow logging and policy configurations by @galz10 in https://github.com/google-gemini/gemini-cli/pull/27853
• fix(core): Ensure zero-quota limits fail fast to prevent retry loop hang by @luisfelipe-alt in https://github.com/google-gemini/gemini-cli/pull/27698
• fix(core): handle multi-line escaped quotes in stripShellWrapper by @sanchezcoraspe in https://github.com/google-gemini/gemini-cli/pull/27467
• fix(cli): prevent path traversal vulnerabilities during skill install… by @ompatel-aiml in https://github.com/google-gemini/gemini-cli/pull/27767
• Fix/pending tools and trust overrides by @jvargassanchez-dot in https://github.com/google-gemini/gemini-cli/pull/27854
• ci: use internal environment for scheduled nightly releases (#27865) by @rmedranollamas in https://github.com/google-gemini/gemini-cli/pull/27939
• feat(core): Support GDC air-gapped Service Identity after auth library update by @sidhantgoyal-droid in https://github.com/google-gemini/gemini-cli/pull/27956
• fix(cli): handle tmux false positive background detection by @amelidev in https://github.com/google-gemini/gemini-cli/pull/27572
• Add static eval source analyzer by @ved015 in https://github.com/google-gemini/gemini-cli/pull/27631
• fix(config): migrate coreTools setting to tools.core by @galz10 in https://github.com/google-gemini/gemini-cli/pull/27947
• fix(core-tools): resolve defensive path resolution for at-reference files by @luisfelipe-alt in https://github.com/google-gemini/gemini-cli/pull/27943
• Revert "fix(core-tools): resolve defensive path resolution for at-reference files" by @galz10 in https://github.com/google-gemini/gemini-cli/pull/27992

New Contributors

• @sanchezcoraspe made their first contribution in https://github.com/google-gemini/gemini-cli/pull/27467
• @sidhantgoyal-droid made their first contribution in https://github.com/google-gemini/gemini-cli/pull/27956
• @amelidev made their first contribution in https://github.com/google-gemini/gemini-cli/pull/27572

Full Changelog: https://github.com/google-gemini/gemini-cli/compare/v0.47.0-preview.0...v0.48.0-preview.0