Release v0.49.0-nightly.20260625.gd845bc5d4

What's Changed

• fix(cli): prevent path traversal vulnerabilities during skill install… by @ompatel-aiml in #27767
• Fix/pending tools and trust overrides by @jvargassanchez-dot in #27854
• ci: use internal environment for scheduled nightly releases (#27865) by @rmedranollamas in #27939
• feat(core): Support GDC air-gapped Service Identity after auth library update by @sidhantgoyal-droid in #27956
• fix(cli): handle tmux false positive background detection by @amelidev in #27572
• Add static eval source analyzer by @ved015 in #27631
• fix(config): migrate coreTools setting to tools.core by @galz10 in #27947
• fix(core-tools): resolve defensive path resolution for at-reference files by @luisfelipe-alt in #27943
• Revert "fix(core-tools): resolve defensive path resolution for at-reference files" by @galz10 in #27992
• chore(release): bump version to 0.49.0-nightly.20260617.g4d3dcdce1 by @gemini-cli-robot in #28003
• Changelog for v0.48.0-preview.0 by @gemini-cli-robot in #27999
• fix(ci): provide fallbacks for package variables in nightly release by @galz10 in #28016
• chore(deps): pin dependencies and enforce 14-day update cooldown by @galz10 in #27948
• fix(ci): append trailing slash to registry url in npmrc by @rmedranollamas in #28038
• feat: add eval:inventory CLI command and reporting logic by @ved015 in #28009
• fix: resolve workspace publish failures and scheduler event loop starvation by @rmedranollamas in #28063
• fix(ci): use wombat dressing room fallback in nightly release to prevent ENEEDAUTH by @rmedranollamas in #28104
• Add JSON output for eval inventory by @ved015 in #28058
• fix/verify release npm ci ignore scripts by @rmedranollamas in #28116
• fix(ci): prevent workspace binary shadowing in release verification by @galz10 in #28132
• Feat/tool registry discovery by @ved015 in #28113

New Contributors

• @sidhantgoyal-droid made their first contribution in #27956
• @amelidev made their first contribution in #27572

Full Changelog: v0.48.0-nightly.20260613.g9e5599c32...v0.49.0-nightly.20260625.gd845bc5d4