v1.38.0

Features

• live: forward safety_settings from generate_content_config to the Live API (#6641) (99c1aa3)

Bug Fixes

• avoid shell execution in ReadFileTool ranged reads and keep local environment file access in workspace (#6597) (c680728)
• deps: exclude nltk 3.10.1, which breaks venvs living inside the working directory (v1) (#6607) (f25bb90)
• eval: handle failed inference results without invocations (cherry-pick) (#6565) (4555273)
• live: transfer to the target agent regardless of function response order (#6608) (302885b)
• Port tool confirmation security and re-validation fixes to v1 (#6575) (4783364)