## What's Changed
* fix(core): prevent indirect prompt injection via build file modifications and untrusted flags by @villahernandez-coder in https://github.com/google-gemini/gemini-cli/pull/29250
* fix(sandbox): harden filesystem boundaries and isolate runtime state by @diegogodinezr in https://github.com/google-gemini/gemini-cli/pull/29214
## New Contributors
* @villahernandez-coder made their first contribution in https://github.com/google-gemini/gemini-cli/pull/29250
**Full Changelog**: https://github.com/google-gemini/gemini-cli/compare/v0.61.0-nightly.20260911.ged2ac40df...v0.61.0-nightly.20260912.g9c1b0a610