## What's Changed
* build(ci): fix false positive evals trigger on merge commits by @gundermanc in https://github.com/google-gemini/gemini-cli/pull/22237
* fix(core): explicitly pass messageBus to policy engine for MCP tool saves by @abhipatel12 in https://github.com/google-gemini/gemini-cli/pull/22255
* feat(core): Fully migrate packages/core to AgentLoopContext. by @joshualitt in https://github.com/google-gemini/gemini-cli/pull/22115
* feat(core): increase sub-agent turn and time limits by @bdmorgan in https://github.com/google-gemini/gemini-cli/pull/22196
* feat(core): instrument file system tools for JIT context discovery by @SandyTao520 in https://github.com/google-gemini/gemini-cli/pull/22082
* refactor(ui): extract pure session browser utilities by @abhipatel12 in https://github.com/google-gemini/gemini-cli/pull/22256
* fix(plan): Fix AskUser evals by @Adib234 in https://github.com/google-gemini/gemini-cli/pull/22074
* fix(settings): prevent j/k navigation keys from intercepting edit buffer input by @student-ankitpandit in https://github.com/google-gemini/gemini-cli/pull/21865
* feat(skills): improve async-pr-review workflow and logging by @mattKorwel in https://github.com/google-gemini/gemini-cli/pull/21790
* refactor(cli): consolidate getErrorMessage utility to core by @scidomino in https://github.com/google-gemini/gemini-cli/pull/22190
* fix(core): show descriptive error messages when saving settings fails by @afarber in https://github.com/google-gemini/gemini-cli/pull/18095
* docs(core): add authentication guide for remote subagents by @adamfweidman in https://github.com/google-gemini/gemini-cli/pull/22178
* docs: overhaul subagents documentation and add /agents command by @abhipatel12 in https://github.com/google-gemini/gemini-cli/pull/22345
* refactor(ui): extract SessionBrowser static ui components by @abhipatel12 in https://github.com/google-gemini/gemini-cli/pull/22348
* test: add Object.create context regression test and tool confirmation integration test by @gsquared94 in https://github.com/google-gemini/gemini-cli/pull/22356
* feat(tracker): return TodoList display for tracker tools by @anj-s in https://github.com/google-gemini/gemini-cli/pull/22060
* feat(agent): add allowed domain restrictions for browser agent by @cynthialong0-0 in https://github.com/google-gemini/gemini-cli/pull/21775
* chore/release: bump version to 0.35.0-nightly.20260313.bb060d7a9 by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/22251
* Move keychain fallback to keychain service by @chrstnb in https://github.com/google-gemini/gemini-cli/pull/22332
* feat(core): integrate SandboxManager to sandbox all process-spawning tools by @galz10 in https://github.com/google-gemini/gemini-cli/pull/22231
* fix(cli): support CJK input and full Unicode scalar values in terminal protocols by @scidomino in https://github.com/google-gemini/gemini-cli/pull/22353
* Promote stable tests. by @gundermanc in https://github.com/google-gemini/gemini-cli/pull/22253
* feat(tracker): add tracker policy by @anj-s in https://github.com/google-gemini/gemini-cli/pull/22379
* feat(security): add disableAlwaysAllow setting to disable auto-approvals by @galz10 in https://github.com/google-gemini/gemini-cli/pull/21941
* Revert "fix(cli): validate --model argument at startup" by @sehoon38 in https://github.com/google-gemini/gemini-cli/pull/22378
* fix(mcp): handle equivalent root resource URLs in OAuth validation by @galz10 in https://github.com/google-gemini/gemini-cli/pull/20231
* fix(core): use session-specific temp directory for task tracker by @anj-s in https://github.com/google-gemini/gemini-cli/pull/22382
* Fix issue where config was undefined. by @gundermanc in https://github.com/google-gemini/gemini-cli/pull/22397
* fix(core): deduplicate project memory when JIT context is enabled by @SandyTao520 in https://github.com/google-gemini/gemini-cli/pull/22234
* feat(prompts): implement Topic-Action-Summary model for verbosity reduction by @Abhijit-2592 in https://github.com/google-gemini/gemini-cli/pull/21503
* fix(core): fix manual deletion of subagent histories by @abhipatel12 in https://github.com/google-gemini/gemini-cli/pull/22407
* Add registry var by @kevinjwang1 in https://github.com/google-gemini/gemini-cli/pull/22224
* Add ModelDefinitions to ModelConfigService by @kevinjwang1 in https://github.com/google-gemini/gemini-cli/pull/22302
* fix(cli): improve command conflict handling for skills by @NTaylorMullen in https://github.com/google-gemini/gemini-cli/pull/21942
* fix(core): merge user settings with extension-provided MCP servers by @abhipatel12 in https://github.com/google-gemini/gemini-cli/pull/22484
* fix(core): skip discovery for incomplete MCP configs and resolve merge race condition by @abhipatel12 in https://github.com/google-gemini/gemini-cli/pull/22494
* fix(automation): harden stale PR closer permissions and maintainer detection by @bdmorgan in https://github.com/google-gemini/gemini-cli/pull/22558
* fix(automation): evaluate staleness before checking protected labels by @bdmorgan in https://github.com/google-gemini/gemini-cli/pull/22561
* feat(agent): replace the runtime npx for browser agent chrome devtool mcp with pre-built bundle by @cynthialong0-0 in https://github.com/google-gemini/gemini-cli/pull/22213
* perf: optimize TrackerService dependency checks by @anj-s in https://github.com/google-gemini/gemini-cli/pull/22384
* docs(policy): remove trailing space from commandPrefix examples by @kawasin73 in https://github.com/google-gemini/gemini-cli/pull/22264
* fix(a2a-server): resolve unsafe assignment lint errors by @ehedlund in https://github.com/google-gemini/gemini-cli/pull/22661
* fix: Adjust ToolGroupMessage filtering to hide Confirming and show Canceled tool calls. by @sripasg in https://github.com/google-gemini/gemini-cli/pull/22230
* Disallow Object.create() and reflect. by @gundermanc in https://github.com/google-gemini/gemini-cli/pull/22408
* Guard pro model usage by @sehoon38 in https://github.com/google-gemini/gemini-cli/pull/22665
* refactor(core): Creates AgentSession abstraction for consolidated agent interface. by @mbleigh in https://github.com/google-gemini/gemini-cli/pull/22270
* docs(changelog): remove internal commands from release notes by @jackwotherspoon in https://github.com/google-gemini/gemini-cli/pull/22529
* feat: enable subagents by @abhipatel12 in https://github.com/google-gemini/gemini-cli/pull/22386
* feat(extensions): implement cryptographic integrity verification for extension updates by @ehedlund in https://github.com/google-gemini/gemini-cli/pull/21772
* feat(tracker): polish UI sorting and formatting by @anj-s in https://github.com/google-gemini/gemini-cli/pull/22437
* Changelog for v0.34.0-preview.2 by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/22220
* fix(core): fix three JIT context bugs in read_file, read_many_files, and memoryDiscovery by @SandyTao520 in https://github.com/google-gemini/gemini-cli/pull/22679
* refactor(core): introduce InjectionService with source-aware injection and backend-native background completions by @adamfweidman in https://github.com/google-gemini/gemini-cli/pull/22544
* Linux sandbox bubblewrap by @DavidAPierce in https://github.com/google-gemini/gemini-cli/pull/22680
* feat(core): increase thought signature retry resilience by @bdmorgan in https://github.com/google-gemini/gemini-cli/pull/22202
* feat(core): implement Stage 2 security and consistency improvements for web_fetch by @aishaneeshah in https://github.com/google-gemini/gemini-cli/pull/22217
* refactor(core): replace positional execute params with ExecuteOptions bag by @adamfweidman in https://github.com/google-gemini/gemini-cli/pull/22674
* feat(config): enable JIT context loading by default by @SandyTao520 in https://github.com/google-gemini/gemini-cli/pull/22736
* fix(config): ensure discoveryMaxDirs is passed to global config during initialization by @kevin-ramdass in https://github.com/google-gemini/gemini-cli/pull/22744
* fix(plan): allowlist get_internal_docs in Plan Mode by @Adib234 in https://github.com/google-gemini/gemini-cli/pull/22668
* Changelog for v0.34.0-preview.3 by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/22393
* feat(core): add foundation for subagent tool isolation by @akh64bit in https://github.com/google-gemini/gemini-cli/pull/22708
* fix(core): handle surrogate pairs in truncateString by @sehoon38 in https://github.com/google-gemini/gemini-cli/pull/22754
* fix(cli): override j/k navigation in settings dialog to fix search input conflict by @sehoon38 in https://github.com/google-gemini/gemini-cli/pull/22800
* feat(plan): add 'All the above' option to multi-select AskUser questions by @Adib234 in https://github.com/google-gemini/gemini-cli/pull/22365
* docs: distribute package-specific GEMINI.md context to each package by @SandyTao520 in https://github.com/google-gemini/gemini-cli/pull/22734
* fix(cli): clean up stale pasted placeholder metadata after word/line deletions by @Jomak-x in https://github.com/google-gemini/gemini-cli/pull/20375
* refactor(core): align JIT memory placement with tiered context model by @SandyTao520 in https://github.com/google-gemini/gemini-cli/pull/22766
* Linux sandbox seccomp by @DavidAPierce in https://github.com/google-gemini/gemini-cli/pull/22815
* Changelog for v0.33.2 by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/22730
* feat(core): multi-registry architecture and tool filtering for subagents by @akh64bit in https://github.com/google-gemini/gemini-cli/pull/22712
* Changelog for v0.34.0-preview.4 by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/22752
* fix(devtools): use theme-aware text colors for console warnings and errors by @SandyTao520 in https://github.com/google-gemini/gemini-cli/pull/22181
* Add support for dynamic model Resolution to ModelConfigService by @kevinjwang1 in https://github.com/google-gemini/gemini-cli/pull/22578
* chore(release): bump version to 0.36.0-nightly.20260317.2f90b4653 by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/22858
* fix(cli): use active sessionId in useLogger and improve resume robustness by @mattKorwel in https://github.com/google-gemini/gemini-cli/pull/22606
* fix(cli): expand tilde in policy paths from settings.json by @abhipatel12 in https://github.com/google-gemini/gemini-cli/pull/22772
* fix(core): add actionable warnings for terminal fallbacks (#14426) by @spencer426 in https://github.com/google-gemini/gemini-cli/pull/22211
* feat(tracker): integrate task tracker protocol into core system prompt by @anj-s in https://github.com/google-gemini/gemini-cli/pull/22442
* chore: add posttest build hooks and fix missing dependencies by @NTaylorMullen in https://github.com/google-gemini/gemini-cli/pull/22865
* feat(a2a): add agent acknowledgment command and enhance registry discovery by @alisa-alisa in https://github.com/google-gemini/gemini-cli/pull/22389
* fix(cli): automatically add all VSCode workspace folders to Gemini context by @sakshisemalti in https://github.com/google-gemini/gemini-cli/pull/21380
* feat: add 'blocked' status to tasks and todos by @anj-s in https://github.com/google-gemini/gemini-cli/pull/22735
* refactor(cli): remove extra newlines in ShellToolMessage.tsx by @NTaylorMullen in https://github.com/google-gemini/gemini-cli/pull/22868
## New Contributors
* @student-ankitpandit made their first contribution in https://github.com/google-gemini/gemini-cli/pull/21865
* @cynthialong0-0 made their first contribution in https://github.com/google-gemini/gemini-cli/pull/21775
* @kawasin73 made their first contribution in https://github.com/google-gemini/gemini-cli/pull/22264
* @Jomak-x made their first contribution in https://github.com/google-gemini/gemini-cli/pull/20375
* @sakshisemalti made their first contribution in https://github.com/google-gemini/gemini-cli/pull/21380
**Full Changelog**: https://github.com/google-gemini/gemini-cli/compare/v0.35.0-nightly.20260314.3038fdce2...v0.36.0-nightly.20260318.e2658ccda