a2a-server RCE blocked; credential leaks sealed

What's Changed

• fix/verify release npm ci ignore scripts by @rmedranollamas in https://github.com/google-gemini/gemini-cli/pull/28116
• fix(ci): prevent workspace binary shadowing in release verification by @galdawave in https://github.com/google-gemini/gemini-cli/pull/28132
• Feat/tool registry discovery by @ved015 in https://github.com/google-gemini/gemini-cli/pull/28113
• fix(ci): prevent bad NPM releases and promote job crashes by @galdawave in https://github.com/google-gemini/gemini-cli/pull/28147
• Changelog for v0.50.0-preview.1 by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/28150
• Fix no_proxy test by @jerrylin3321 in https://github.com/google-gemini/gemini-cli/pull/28131
• chore(release): bump version to 0.51.0-nightly.20260625.g3fbf93e26 by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/28151
• Vertex base url update by @DavidAPierce in https://github.com/google-gemini/gemini-cli/pull/28145
• fix(security): enforce case-insensitive sensitive path blocklist and vscode hitl by @luisfelipe-alt in https://github.com/google-gemini/gemini-cli/pull/27966
• fix(core-tools): resolve defensive path resolution for at-reference files and fix macOS tests by @luisfelipe-alt in https://github.com/google-gemini/gemini-cli/pull/28053
• feat(caretaker): implement Cloud Run webhook ingestion service by @chadd28 in https://github.com/google-gemini/gemini-cli/pull/28015
• fix(core): resolve symbolic link directory escape in memory import processor by @luisfelipe-alt in https://github.com/google-gemini/gemini-cli/pull/28233
• feat(caretaker): egress cloud run service skeleton by @chadd28 in https://github.com/google-gemini/gemini-cli/pull/28167
• fix(sandbox): make ~/.gitconfig read-only in the macOS sandbox by @ompatel-aiml in https://github.com/google-gemini/gemini-cli/pull/28221
• fix(core): preserve escape sequences in string literals for modern models by @luisfelipe-alt in https://github.com/google-gemini/gemini-cli/pull/28299
• fix(core): strip thoughts from scrubbed history turns and resolve thought leakage by @amelidev in https://github.com/google-gemini/gemini-cli/pull/27971
• Refactor: exclude transient CI configuration files from workspace context by @DavidAPierce in https://github.com/google-gemini/gemini-cli/pull/28216
• feat(caretaker-triage): add triage worker core foundational modules by @chadd28 in https://github.com/google-gemini/gemini-cli/pull/28163
• feat(caretaker-egress): implement octokit github action handler for egress service by @chadd28 in https://github.com/google-gemini/gemini-cli/pull/28303
• chore(release): bump version to 0.52.0-nightly.20260707.g27a3da3e8 by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/28323
• Changelog for v0.51.0-preview.0 by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/28320
• Changelog for v0.50.0 by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/28322
• fix(core-tools): bypass LLM correction for JSON and IPYNB files in write_file and replace by @amelidev in https://github.com/google-gemini/gemini-cli/pull/28223
• fix(core): use unambiguous previous intent label in fallback summary by @amelidev in https://github.com/google-gemini/gemini-cli/pull/28343
• feat(caretaker-triage): implement main worker execution loop and egress action publisher by @chadd28 in https://github.com/google-gemini/gemini-cli/pull/28306
• fix(privacy): show a clear message when the account has no Code Assist tier by @ompatel-aiml in https://github.com/google-gemini/gemini-cli/pull/28304
• fix(core): enrich shared project quota limit errors with setup hint by @amelidev in https://github.com/google-gemini/gemini-cli/pull/28391
• fix(a2a-server): ensure task cancellation aborts execution loop by @luisfelipe-alt in https://github.com/google-gemini/gemini-cli/pull/28316
• fix(core): simplify plan mode write policy to support relative paths by @DavidAPierce in https://github.com/google-gemini/gemini-cli/pull/28398
• feat(core): Bump node google-auth-library version to 10.9.0 by @jerrylin3321 in https://github.com/google-gemini/gemini-cli/pull/28385
• chore/release: bump version to 0.52.0-nightly.20260715.gfa975395b by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/28402
• fix(core,a2a): group cancelled tool responses and coalesce consecutive roles to prevent 400 Bad Request by @luisfelipe-alt in https://github.com/google-gemini/gemini-cli/pull/28407
• feat(caretaker-triage): implement LLM triage orchestrator and container build by @chadd28 in https://github.com/google-gemini/gemini-cli/pull/28345
• refactor(cli): align macOS permissive Seatbelt profiles with deny-default model by @ompatel-aiml in https://github.com/google-gemini/gemini-cli/pull/28424
• fix(core): mitigate infinite ReAct loops and prompt injection loops by @amelidev in https://github.com/google-gemini/gemini-cli/pull/28429
• fix(a2a-server): enforce workspace trust and task isolation to prevent RCE by @luisfelipe-alt in https://github.com/google-gemini/gemini-cli/pull/28470
• fix(core): sequentially verify cached credentials and restore GOOGLE_APPLICATION_CREDENTIALS fallback by @luisfelipe-alt in https://github.com/google-gemini/gemini-cli/pull/28472
• feat(evals): add eval coverage report command by @ved015 in https://github.com/google-gemini/gemini-cli/pull/28169
• Changelog for v0.53.0-preview.0 by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/28507
• Changelog for v0.52.0 by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/28508
• chore(release): bump version to 0.54.0-nightly.20260722.gf743ab579 by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/28510
• fix(caretaker): sanitize and wrap issue title in untrusted_context by @chadd28 in https://github.com/google-gemini/gemini-cli/pull/28352
• chore(caretaker): update vitest to v3.2.4 and add package-lock.json files by @chadd28 in https://github.com/google-gemini/gemini-cli/pull/28409
• fix(core): rotate session ID on model fallback to prevent stateful API errors by @amelidev in https://github.com/google-gemini/gemini-cli/pull/28469
• feat(caretaker-triage): post comment before auto-closing issues by @chadd28 in https://github.com/google-gemini/gemini-cli/pull/28411
• fix(core): enforce HTTPS for GoogleCredentialsAuthProvider to prevent cleartext leakage by @amelidev in https://github.com/google-gemini/gemini-cli/pull/28517
• fix(core): filter out thought parts from getHistoryTurns when context management is disabled by @DavidAPierce in https://github.com/google-gemini/gemini-cli/pull/28509
• fix(a2a-server): normalize CRLF line endings to LF in getProposedContent by @luisfelipe-alt in https://github.com/google-gemini/gemini-cli/pull/28531
• fix(core): enforce explicit tag length and validation in file keychain by @luisfelipe-alt in https://github.com/google-gemini/gemini-cli/pull/28523
• chore/release: bump version to 0.54.0-nightly.20260728.gbef611950 by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/28552
• feat(pr-generator-db): implement Firestore concurrency dual-locking and test ingestion utilities by @joneba-google in https://github.com/google-gemini/gemini-cli/pull/28432
• feat(pr-generator-agent): implement Antigravity agent runner and prompt templates … by @joneba-google in https://github.com/google-gemini/gemini-cli/pull/28434
• fix(core): skip merged function-response turns when finding the active loop by @adamfweidman in https://github.com/google-gemini/gemini-cli/pull/28565
• chore(release): bump version to 0.55.0-nightly.20260728.gd29268d36 by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/28569
• Changelog for v0.54.0-preview.0 by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/28567
• Changelog for v0.53.0 by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/28568
• chore/release: bump version to 0.55.0-nightly.20260729.g3499c84f7 by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/28573
• fix(core): classify capacity exhaustion as terminal to prevent retry hangs by @luisfelipe-alt in https://github.com/google-gemini/gemini-cli/pull/28599
• fix(core,cli): propagate InvalidStreamError details to UI for specific empty response guidance by @DavidAPierce in https://github.com/google-gemini/gemini-cli/pull/28566
• fix(cli): fall back to embedded macOS seatbelt profiles if missing by @amelidev in https://github.com/google-gemini/gemini-cli/pull/28551
• feat(pr-generator-core): add environment config parser, command executor, GitHub R… by @joneba-google in https://github.com/google-gemini/gemini-cli/pull/28435
• feat(pr-generator-orchestrator): implement iterative bug-fixing state machine and container worker entrypoint by @joneba-google in https://github.com/google-gemini/gemini-cli/pull/28433
• feat(pr-generator-infra): configure Cloud Run job, Workflows definition, and Dockerfile by @joneba-google in https://github.com/google-gemini/gemini-cli/pull/28431
• fix(release): handle npm dist-tag deletion failures on registries that forbid it by @DavidAPierce in https://github.com/google-gemini/gemini-cli/pull/28694
• fix(core): stop a new user message fusing into an unanswered tool response by @adamfweidman in https://github.com/google-gemini/gemini-cli/pull/28700
• fix(core,cli): repair /compress session reload and quota-fallback tool response loss by @adamfweidman in https://github.com/google-gemini/gemini-cli/pull/28672
• fix(core): preserve functionCall thoughtSignature when stripping thought parts by @sarbojitrana in https://github.com/google-gemini/gemini-cli/pull/28607
• fix(core): unwrap and parse nested gaxios streaming errors from cause message by @luisfelipe-alt in https://github.com/google-gemini/gemini-cli/pull/28689
• Changelog for v0.55.0-preview.1 by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/28706
• chore(release): bump version to 0.56.0-nightly.20260806.g761f604c1 by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/28707
• Changelog for v0.54.0 by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/28708
• Reclassifying Capacity Exhaustion as Terminal Error by @luisfelipe-alt in https://github.com/google-gemini/gemini-cli/pull/28716
• feat(caretaker): update Firestore schema with error, and pr_number fields by @chadd28 in https://github.com/google-gemini/gemini-cli/pull/28467
• feat(caretaker-triage): prompt hill-climbing & orchestrator updates by @chadd28 in https://github.com/google-gemini/gemini-cli/pull/28524
• feat(caretaker): add triage Cloud Run job workflow by @chadd28 in https://github.com/google-gemini/gemini-cli/pull/28468
• feat(caretaker-evals): add triage evaluation framework and judge runner by @chadd28 in https://github.com/google-gemini/gemini-cli/pull/28530
• feat(caretaker-evals): add local golden issue collection and firestore sync tools by @chadd28 in https://github.com/google-gemini/gemini-cli/pull/28532
• feat(caretaker): publish workable spec event to ready-for-code Pub/Sub topic by @chadd28 in https://github.com/google-gemini/gemini-cli/pull/28588
• feat(caretaker): add GCP deployment script for caretaker agent services by @chadd28 in https://github.com/google-gemini/gemini-cli/pull/28529
• feat(caretaker-evals): add Cloud Run job entrypoint for eval runner by @chadd28 in https://github.com/google-gemini/gemini-cli/pull/28727
• fix(caretaker): clear lock on NEEDS_HUMAN transition by @chadd28 in https://github.com/google-gemini/gemini-cli/pull/28601
• feat(ingestion): add issue comment handling and re-triage workflow by @chadd28 in https://github.com/google-gemini/gemini-cli/pull/28690
• fix(core): refresh MCP OAuth tokens with the stored client ID by @ParthivNaresh in https://github.com/google-gemini/gemini-cli/pull/28481
• fix(core,cli): resolve false model capacity exhaustion and fix core quota lookup model mapping by @DavidAPierce in https://github.com/google-gemini/gemini-cli/pull/28730
• feat(evals): add local report command and developer documentation by @ved015 in https://github.com/google-gemini/gemini-cli/pull/28369
• fix(core): dynamically resolve Cloud Workstations proxy redirect URI for OAuth flows by @amelidev in https://github.com/google-gemini/gemini-cli/pull/28688

New Contributors

• @jerrylin3321 made their first contribution in https://github.com/google-gemini/gemini-cli/pull/28131
• @chadd28 made their first contribution in https://github.com/google-gemini/gemini-cli/pull/28015
• @joneba-google made their first contribution in https://github.com/google-gemini/gemini-cli/pull/28432
• @sarbojitrana made their first contribution in https://github.com/google-gemini/gemini-cli/pull/28607
• @ParthivNaresh made their first contribution in https://github.com/google-gemini/gemini-cli/pull/28481

Full Changelog: https://github.com/google-gemini/gemini-cli/compare/v0.49.0-preview.0...v0.55.1