v1.58.2

What's Changed

• fix(sdk): forward stored OAuth2 MCP credentials to ACP agents by @all-hands-bot in #6029
• fix(terminal): stop waiting on a running command once the terminal is closed by @VascoSch92 in #6140
• ci(version-bump): bump enterprise dev compose agent-server image with the SDK pins by @VascoSch92 in #6128
• fix(security): pin Debian snapshot to 20261021 so system ca-certificates distrusts emSign G3 by @neubig in #6167
• fix(security): update locked Zod to 4.6.7 by @smolpaws in #6202
• chore(deps): enforce seven-day third-party release-age policy by @smolpaws in #6141
• fix(security): ship Node.js fixed for CVE-2026-111497 (Brotli) in agent-server images by @ElanHasson in #6200
• Release v1.58.2 by @all-hands-bot in #6210

New Contributors

• @ElanHasson made their first contribution in #6200

Full Changelog: v1.58.1...v1.58.2