Release v0.65.0

What's Changed

• fix(cli): enforce read-only workspace settings in untrusted folders by @jvargassanchez-dot in #29583
• fix(core): avoid duplicate tool response turns when resuming sessions by @diegogodinezr in #29618
• fix(core): prevent deletion of resumed session history on quick exit (#29198) by @villahernandez-coder in #29584
• Changelog for v0.64.0-preview.0 by @gemini-cli-robot in #29656
• Changelog for v0.63.0 by @gemini-cli-robot in #29659
• fix(core): align OAuth callback iss parameter validation with RFC 9207 metadata by @luisfelipe-alt in #29616
• fix(cli): prevent unnecessary terminal clears and scroll resets when expanding with Ctrl+O by @jesussamuel-byte in #29640
• chore(release): bump version to 0.65.0-nightly.20261006.gfb972b2f8 by @gemini-cli-robot in #29657
• fix(ci): add missing loop in unassign-inactive-assignees workflow by @ugorla-dev in #29609
• fix(core): enforce terminal user turn invariant and normalize request contents by @luisfelipe-alt in #29612
• feat(telemetry): support custom OTLP headers in telemetry configuration by @jesussamuel-byte in #29641
• fix(auth): prevent infinite verification and OAuth retry loops by @villahernandez-coder in #29655
• fix(cli): handle JSON parse and response stream errors in fetchJson by @jesussamuel-byte in #29658
• fix(core): preserve line terminators in truncateString by @diegogodinezr in #29673
• fix(vscode-ide-companion): make IdeServer.stop() resolve while MCP sessions are open by @elberthc-byte in #29674
• fix(core): retain ask_user question text in the tool result display by @elberthc-byte in #29677
• fix(core): eliminate false positives on untrusted command flags and compound loops by @DavidAPierce in #29672
• fix(cli): clear cached credentials when re-selecting Google login by @urielefrenvirtusa in #29643
• fix(cli): resolve hang on Enter keypress in interactive mode (#23297) by @elberthc-byte in #29476
• perf(core): optimize ignore filtering and enable subtree pruning (#29077) by @amelidev in #29582
• fix(a2a-server): isolate tool rejection to active call in sequential batches by @jvargassanchez-dot in #29683
• fix(cli): skip eager recursive file reading for @ references by @jvargassanchez-dot in #29617
• fix(cli): keep loading other extensions when one fails the allowlist check by @jesussamuel-byte in #29720
• fix(cli): correct reverse search highlight index for expanding unicode characters by @diegogodinezr in #29699
• fix(core): treat whitespace-only UTF-16 and UTF-32 files as empty by @jesussamuel-byte in #29722
• fix(cli): restore debounced static UI refresh on terminal width changes by @jvargassanchez-dot in #29644
• fix(cli): prevent session poisoning on rapid Ctrl-C interruption by @villahernandez-coder in #29728

Full Changelog: v0.64.0...v0.65.0