Release v0.65.0 · StarHOT

What's Changed

fix(cli): enforce read-only workspace settings in untrusted folders by @jvargassanchez-dot in #29583
fix(core): avoid duplicate tool response turns when resuming sessions by @diegogodinezr in #29618
fix(core): prevent deletion of resumed session history on quick exit (#29198) by @villahernandez-coder in #29584
Changelog for v0.64.0-preview.0 by @gemini-cli-robot in #29656
Changelog for v0.63.0 by @gemini-cli-robot in #29659
fix(core): align OAuth callback iss parameter validation with RFC 9207 metadata by @luisfelipe-alt in #29616
fix(cli): prevent unnecessary terminal clears and scroll resets when expanding with Ctrl+O by @jesussamuel-byte in #29640
chore(release): bump version to 0.65.0-nightly.20261006.gfb972b2f8 by @gemini-cli-robot in #29657
fix(ci): add missing loop in unassign-inactive-assignees workflow by @ugorla-dev in #29609
fix(core): enforce terminal user turn invariant and normalize request contents by @luisfelipe-alt in #29612
feat(telemetry): support custom OTLP headers in telemetry configuration by @jesussamuel-byte in #29641
fix(auth): prevent infinite verification and OAuth retry loops by @villahernandez-coder in #29655
fix(cli): handle JSON parse and response stream errors in fetchJson by @jesussamuel-byte in #29658
fix(core): preserve line terminators in truncateString by @diegogodinezr in #29673
fix(vscode-ide-companion): make IdeServer.stop() resolve while MCP sessions are open by @elberthc-byte in #29674
fix(core): retain ask_user question text in the tool result display by @elberthc-byte in #29677
fix(core): eliminate false positives on untrusted command flags and compound loops by @DavidAPierce in #29672
fix(cli): clear cached credentials when re-selecting Google login by @urielefrenvirtusa in #29643
fix(cli): resolve hang on Enter keypress in interactive mode (#23297) by @elberthc-byte in #29476
perf(core): optimize ignore filtering and enable subtree pruning (#29077) by @amelidev in #29582
fix(a2a-server): isolate tool rejection to active call in sequential batches by @jvargassanchez-dot in #29683
fix(cli): skip eager recursive file reading for @ references by @jvargassanchez-dot in #29617
fix(cli): keep loading other extensions when one fails the allowlist check by @jesussamuel-byte in #29720
fix(cli): correct reverse search highlight index for expanding unicode characters by @diegogodinezr in #29699
fix(core): treat whitespace-only UTF-16 and UTF-32 files as empty by @jesussamuel-byte in #29722
fix(cli): restore debounced static UI refresh on terminal width changes by @jvargassanchez-dot in #29644
fix(cli): prevent session poisoning on rapid Ctrl-C interruption by @villahernandez-coder in #29728

Full Changelog: v0.64.0...v0.65.0