What's Changed
- build(ci): fix false positive evals trigger on merge commits by @gundermanc in #22237
- fix(core): explicitly pass messageBus to policy engine for MCP tool saves by @abhipatel12 in #22255
- feat(core): Fully migrate packages/core to AgentLoopContext. by @joshualitt in #22115
- feat(core): increase sub-agent turn and time limits by @bdmorgan in #22196
- feat(core): instrument file system tools for JIT context discovery by @SandyTao520 in #22082
- refactor(ui): extract pure session browser utilities by @abhipatel12 in #22256
- fix(plan): Fix AskUser evals by @Adib234 in #22074
- fix(settings): prevent j/k navigation keys from intercepting edit buffer input by @student-ankitpandit in #21865
- feat(skills): improve async-pr-review workflow and logging by @mattKorwel in #21790
- refactor(cli): consolidate getErrorMessage utility to core by @scidomino in #22190
- fix(core): show descriptive error messages when saving settings fails by @afarber in #18095
- docs(core): add authentication guide for remote subagents by @adamfweidman in #22178
- docs: overhaul subagents documentation and add /agents command by @abhipatel12 in #22345
- refactor(ui): extract SessionBrowser static ui components by @abhipatel12 in #22348
- test: add Object.create context regression test and tool confirmation integration test by @gsquared94 in #22356
- feat(tracker): return TodoList display for tracker tools by @anj-s in #22060
- feat(agent): add allowed domain restrictions for browser agent by @cynthialong0-0 in #21775
- chore/release: bump version to 0.35.0-nightly.20260313.bb060d7a9 by @gemini-cli-robot in #22251
- Move keychain fallback to keychain service by @chrstnb in #22332
- feat(core): integrate SandboxManager to sandbox all process-spawning tools by @galz10 in #22231
- fix(cli): support CJK input and full Unicode scalar values in terminal protocols by @scidomino in #22353
- Promote stable tests. by @gundermanc in #22253
- feat(tracker): add tracker policy by @anj-s in #22379
- feat(security): add disableAlwaysAllow setting to disable auto-approvals by @galz10 in #21941
- Revert "fix(cli): validate --model argument at startup" by @sehoon38 in #22378
- fix(mcp): handle equivalent root resource URLs in OAuth validation by @galz10 in #20231
- fix(core): use session-specific temp directory for task tracker by @anj-s in #22382
- Fix issue where config was undefined. by @gundermanc in #22397
- fix(core): deduplicate project memory when JIT context is enabled by @SandyTao520 in #22234
- feat(prompts): implement Topic-Action-Summary model for verbosity reduction by @Abhijit-2592 in #21503
- fix(core): fix manual deletion of subagent histories by @abhipatel12 in #22407
- Add registry var by @kevinjwang1 in #22224
- Add ModelDefinitions to ModelConfigService by @kevinjwang1 in #22302
- fix(cli): improve command conflict handling for skills by @NTaylorMullen in #21942
- fix(core): merge user settings with extension-provided MCP servers by @abhipatel12 in #22484
- fix(core): skip discovery for incomplete MCP configs and resolve merge race condition by @abhipatel12 in #22494
- fix(automation): harden stale PR closer permissions and maintainer detection by @bdmorgan in #22558
- fix(automation): evaluate staleness before checking protected labels by @bdmorgan in #22561
- feat(agent): replace the runtime npx for browser agent chrome devtool mcp with pre-built bundle by @cynthialong0-0 in #22213
- perf: optimize TrackerService dependency checks by @anj-s in #22384
- docs(policy): remove trailing space from commandPrefix examples by @kawasin73 in #22264
- fix(a2a-server): resolve unsafe assignment lint errors by @ehedlund in #22661
- fix: Adjust ToolGroupMessage filtering to hide Confirming and show Canceled tool calls. by @sripasg in #22230
- Disallow Object.create() and reflect. by @gundermanc in #22408
- Guard pro model usage by @sehoon38 in #22665
- refactor(core): Creates AgentSession abstraction for consolidated agent interface. by @mbleigh in #22270
- docs(changelog): remove internal commands from release notes by @jackwotherspoon in #22529
- feat: enable subagents by @abhipatel12 in #22386
- feat(extensions): implement cryptographic integrity verification for extension updates by @ehedlund in #21772
- feat(tracker): polish UI sorting and formatting by @anj-s in #22437
- Changelog for v0.34.0-preview.2 by @gemini-cli-robot in #22220
- fix(core): fix three JIT context bugs in read_file, read_many_files, and memoryDiscovery by @SandyTao520 in #22679
- refactor(core): introduce InjectionService with source-aware injection and backend-native background completions by @adamfweidman in #22544
- Linux sandbox bubblewrap by @DavidAPierce in #22680
- feat(core): increase thought signature retry resilience by @bdmorgan in #22202
- feat(core): implement Stage 2 security and consistency improvements for web_fetch by @aishaneeshah in #22217
- refactor(core): replace positional execute params with ExecuteOptions bag by @adamfweidman in #22674
- feat(config): enable JIT context loading by default by @SandyTao520 in #22736
- fix(config): ensure discoveryMaxDirs is passed to global config during initialization by @kevin-ramdass in #22744
- fix(plan): allowlist get_internal_docs in Plan Mode by @Adib234 in #22668
- Changelog for v0.34.0-preview.3 by @gemini-cli-robot in #22393
- feat(core): add foundation for subagent tool isolation by @akh64bit in #22708
- fix(core): handle surrogate pairs in truncateString by @sehoon38 in #22754
- fix(cli): override j/k navigation in settings dialog to fix search input conflict by @sehoon38 in #22800
- feat(plan): add 'All the above' option to multi-select AskUser questions by @Adib234 in #22365
- docs: distribute package-specific GEMINI.md context to each package by @SandyTao520 in #22734
- fix(cli): clean up stale pasted placeholder metadata after word/line deletions by @Jomak-x in #20375
- refactor(core): align JIT memory placement with tiered context model by @SandyTao520 in #22766
- Linux sandbox seccomp by @DavidAPierce in #22815
- Changelog for v0.33.2 by @gemini-cli-robot in #22730
- feat(core): multi-registry architecture and tool filtering for subagents by @akh64bit in #22712
- Changelog for v0.34.0-preview.4 by @gemini-cli-robot in #22752
- fix(devtools): use theme-aware text colors for console warnings and errors by @SandyTao520 in #22181
- Add support for dynamic model Resolution to ModelConfigService by @kevinjwang1 in #22578
- chore(release): bump version to 0.36.0-nightly.20260317.2f90b4653 by @gemini-cli-robot in #22858
- fix(cli): use active sessionId in useLogger and improve resume robustness by @mattKorwel in #22606
- fix(cli): expand tilde in policy paths from settings.json by @abhipatel12 in #22772
- fix(core): add actionable warnings for terminal fallbacks (#14426) by @spencer426 in #22211
- feat(tracker): integrate task tracker protocol into core system prompt by @anj-s in #22442
- chore: add posttest build hooks and fix missing dependencies by @NTaylorMullen in #22865
- feat(a2a): add agent acknowledgment command and enhance registry discovery by @alisa-alisa in #22389
- fix(cli): automatically add all VSCode workspace folders to Gemini context by @sakshisemalti in #21380
- feat: add 'blocked' status to tasks and todos by @anj-s in #22735
- refactor(cli): remove extra newlines in ShellToolMessage.tsx by @NTaylorMullen in #22868
New Contributors
- @student-ankitpandit made their first contribution in #21865
- @cynthialong0-0 made their first contribution in #21775
- @kawasin73 made their first contribution in #22264
- @Jomak-x made their first contribution in #20375
- @sakshisemalti made their first contribution in #21380
Full Changelog: v0.35.0-nightly.20260314.3038fdce2...v0.36.0-nightly.20260318.e2658ccda