GCM 3.0.2

Security Fixes:

• Binaries now use the .NET Runtime 10.0.14 which has fixes for CVE-2026-111497 regarding Brotli HTTP decompression.

Note

Analysis of GCM shows that Brotli HTTP compression is not enabled by default across any version, so there is no real-world impact.

Changes:

• Dependency updates (#2483)
• Documentation updates for AI agents (#2469)
• Official release pipeline signing fixes, and update to use the new Mac pool (#2467, #2468)
• Fix for Linux SecretService credential MIME type (#2475)
• Allow headless use of Linux SecretService (#2474)