<!-- Release notes generated using configuration in .github/release.yml at release/v0.25.1-preview.0 -->
## What's Changed
* fix(agents): replace selected remote Hosts without losing bindings by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13430
* test(core): close #12693 post-merge review test and hygiene gaps by @wenshao in https://github.com/QwenLM/qwen-code/pull/13341
* test(integration): make the /hooks dialog E2E witness the rendered dialog (#13425) by @qwen-code-dev-bot in https://github.com/QwenLM/qwen-code/pull/13427
* fix(ci): wait 60s before the E2E build artifact download retry (#13284) by @qwen-code-dev-bot in https://github.com/QwenLM/qwen-code/pull/13292
* fix(ci): fail yamllint and shellcheck lanes loudly on an empty git file list by @qwen-code-dev-bot in https://github.com/QwenLM/qwen-code/pull/12650
* fix(managed-agent): serve SSE subscribers from a Condition instead of pinning carriers (#13388 follow-up) by @wenshao in https://github.com/QwenLM/qwen-code/pull/13402
* test(cli): give the hosted tool-turn requested() waitFor an explicit timeout (#13397) by @qwen-code-dev-bot in https://github.com/QwenLM/qwen-code/pull/13399
* fix(managed-agent): single-flight Hosted Harness attachment creation off the CHM bin monitor by @wenshao in https://github.com/QwenLM/qwen-code/pull/13403
* perf(core): load extension directories in bounded batches by @callmeYe in https://github.com/QwenLM/qwen-code/pull/13379
* fix(cli): keep /context detail MCP rows within the MCP tools row by @Shizoqua in https://github.com/QwenLM/qwen-code/pull/13390
* test(integration): make the utf-bom defaultFileEncoding test deterministic by @Bug-killer-prog in https://github.com/QwenLM/qwen-code/pull/13196
* feat(mobile): restore scoped connections after Activity recreation by @jabrailkhalil in https://github.com/QwenLM/qwen-code/pull/12247
* feat(mobile): improve profile screen accessibility (Phase 2) by @jabrailkhalil in https://github.com/QwenLM/qwen-code/pull/12129
* fix(memory): preserve complete index entries in prompts by @beibeihk in https://github.com/QwenLM/qwen-code/pull/13315
* fix(cli): make vim-mode clipboard paste work on Windows by @Bug-killer-prog in https://github.com/QwenLM/qwen-code/pull/13198
* fix(core): stop memory discovery at Git root by @agammann in https://github.com/QwenLM/qwen-code/pull/13381
* feat(runtime): add experimental Kubernetes CSI runtime and durable worker ACK by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/13289
* feat(managed-agent): H3 background Shell and Monitor runtime by @wenshao in https://github.com/QwenLM/qwen-code/pull/13265
* feat(web-shell): support side tasks in secondary workspaces by @wenshao in https://github.com/QwenLM/qwen-code/pull/13468
* feat(core): defer agent and goal declarations by default by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13033
* fix(core): pin GIT_TERMINAL_PROMPT in the extension git client by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13454
* fix(cli): preserve permissions when replacing settings by @doudouOUC in https://github.com/QwenLM/qwen-code/pull/13293
* feat(managed-agent): Make local Runtime tool outcomes durable (M5b) by @wenshao in https://github.com/QwenLM/qwen-code/pull/13291
* feat(managed-agent): read bounded approval input previews by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13400
* fix(channel-weixin): send iLink headers when minting the login QR code by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13482
* fix(core): recognize llama.cpp context-overflow wording so compaction runs by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13421
* feat(managed-agent): let creators change a bound Session's directory (W2) by @wenshao in https://github.com/QwenLM/qwen-code/pull/13247
* fix(core): recover function-style XML tool calls by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13437
* fix(core): honor memory.agentMaxTurns in the user-scoped memory dream by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13462
* fix(core): stop MCP server rules from authorizing a colliding server by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12531
* docs(managed-agent): Stage H4/H5/H6 slice designs by @wenshao in https://github.com/QwenLM/qwen-code/pull/13499
* feat(managed-agent): admit glob in new hosted-workspace /2 profiles by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13166
* fix(web-shell): managed session UI correctness from the #12692 R2 review by @wenshao in https://github.com/QwenLM/qwen-code/pull/13342
* feat(managed-agent): Stage H5 channel contracts and persistence by @wenshao in https://github.com/QwenLM/qwen-code/pull/13497
* docs(managed-agent): cross-node EventTransport design by @wenshao in https://github.com/QwenLM/qwen-code/pull/13500
* fix(ci): rerun infrastructure-only main CI failures instead of filing (#13510) by @qwen-code-dev-bot in https://github.com/QwenLM/qwen-code/pull/13512
* fix(core): keep nested tool_call arguments open on Responses; name the target in bridged validation errors by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/12901
* docs(managed-agent): repair the R2 review's doc findings on #12692 by @wenshao in https://github.com/QwenLM/qwen-code/pull/13343
* fix(cli): never honor memory agent budgets from workspace scope by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13508
* fix(core): keep an XML tool call quoted in a parameter value inert by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13515
* fix(ci): raise the Hosted verify step ceiling above its failsafe fork timeout (#13503) by @qwen-code-dev-bot in https://github.com/QwenLM/qwen-code/pull/13504
* fix(ci): sweep stale pool residue before sdk-java checkouts by @qwen-code-dev-bot in https://github.com/QwenLM/qwen-code/pull/13507
* fix(managed-agent): check the replay before publishing a domain record by @wenshao in https://github.com/QwenLM/qwen-code/pull/13376
* feat(web-shell): take back a cancelled prompt that produced nothing by @wenshao in https://github.com/QwenLM/qwen-code/pull/13488
* test(managed-agent): pin untested contracts from the #12692 R2 review by @wenshao in https://github.com/QwenLM/qwen-code/pull/13348
* fix(core): key the models.dev catalog under dotted as well as dashed ids by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13299
* fix(mobile): resolve document providers once per selection by @jabrailkhalil in https://github.com/QwenLM/qwen-code/pull/13147
* fix(managed-agent): close the three Critical H0c follow-ups from #13300 by @wenshao in https://github.com/QwenLM/qwen-code/pull/13355
* feat(hosted): show captured inputs in native approval cards by @yiliang114 in https://github.com/QwenLM/qwen-code/pull/13407
* test(integration): let the headless workflow-skill E2E inherit the suite timeout (#13518) by @qwen-code-dev-bot in https://github.com/QwenLM/qwen-code/pull/13520
## New Contributors
* @beibeihk made their first contribution in https://github.com/QwenLM/qwen-code/pull/13315
* @agammann made their first contribution in https://github.com/QwenLM/qwen-code/pull/13381
**Full Changelog**: https://github.com/QwenLM/qwen-code/compare/v0.25.0...v0.25.1-preview.0