3.4.0

New Features ✨

• (lib) Expose Agent Plugin resolution to other hosts by @sentry-junior in #201

Bug Fixes 🐛

• (config) Persist multiline wildcard exclusions by @gricha in #206
• (deps) Patch CLI and docs vulnerabilities by @gricha in #204
• (git) Keep cache git commands out of the caller's repository by @jfi in #197
• (mcp) Compare Codex server settings by value by @gricha in #208
• (plugin) Contain the bundled dotagents skill by @gricha in #202
• (trust) Edit arrays without widening trust by @RaphaelFakhri in #210

Internal Changes 🔧

• (warden) Use the built-in security review by @gricha in #203