chore(deps): update bump-dependencies

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
@anthropic-ai/claude-code	2.1.14 → 2.1.26
@google/gemini-cli	0.25.0 → 0.26.0
opencode-ai	1.1.28 → 1.1.44

---

Release Notes

anthropics/claude-code (@​anthropic-ai/claude-code)

v2.1.26

Compare Source

v2.1.25

Compare Source

• Fixed beta header validation error for gateway users on Bedrock and Vertex, ensuring CLAUDE_CODE_DISABLE_EXPERIMENTAL_BETAS=1 avoids the error

v2.1.23

Compare Source

• Added customizable spinner verbs setting (spinnerVerbs)
• Fixed mTLS and proxy connectivity for users behind corporate proxies or using client certificates
• Fixed per-user temp directory isolation to prevent permission conflicts on shared systems
• Fixed a race condition that could cause 400 errors when prompt caching scope was enabled
• Fixed pending async hooks not being cancelled when headless streaming sessions ended
• Fixed tab completion not updating the input field when accepting a suggestion
• Fixed ripgrep search timeouts silently returning empty results instead of reporting errors
• Improved terminal rendering performance with optimized screen data layout
• Changed Bash commands to show timeout duration alongside elapsed time
• Changed merged pull requests to show a purple status indicator in the prompt footer
• [IDE] Fixed model options displaying incorrect region strings for Bedrock users in headless mode

v2.1.22

Compare Source

• Fixed structured outputs for non-interactive (-p) mode

v2.1.21

Compare Source

• Added support for full-width (zenkaku) number input from Japanese IME in option selection prompts
• Fixed shell completion cache files being truncated on exit
• Fixed API errors when resuming sessions that were interrupted during tool execution
• Fixed auto-compact triggering too early on models with large output token limits
• Fixed task IDs potentially being reused after deletion
• Fixed file search not working in VS Code extension on Windows
• Improved read/search progress indicators to show "Reading…" while in progress and "Read" when complete
• Improved Claude to prefer file operation tools (Read, Edit, Write) over bash equivalents (cat, sed, awk)
• [VSCode] Added automatic Python virtual environment activation, ensuring python and pip commands use the correct interpreter (configurable via claudeCode.usePythonEnvironment setting)
• [VSCode] Fixed message action buttons having incorrect background colors

v2.1.20

Compare Source

• Added arrow key history navigation in vim normal mode when cursor cannot move further
• Added external editor shortcut (Ctrl+G) to the help menu for better discoverability
• Added PR review status indicator to the prompt footer, showing the current branch's PR state (approved, changes requested, pending, or draft) as a colored dot with a clickable link
• Added support for loading CLAUDE.md files from additional directories specified via --add-dir flag (requires setting CLAUDE_CODE_ADDITIONAL_DIRECTORIES_CLAUDE_MD=1)
• Added ability to delete tasks via the TaskUpdate tool
• Fixed session compaction issues that could cause resume to load full history instead of the compact summary
• Fixed agents sometimes ignoring user messages sent while actively working on a task
• Fixed wide character (emoji, CJK) rendering artifacts where trailing columns were not cleared when replaced by narrower characters
• Fixed JSON parsing errors when MCP tool responses contain special Unicode characters
• Fixed up/down arrow keys in multi-line and wrapped text input to prioritize cursor movement over history navigation
• Fixed draft prompt being lost when pressing UP arrow to navigate command history
• Fixed ghost text flickering when typing slash commands mid-input
• Fixed marketplace source removal not properly deleting settings
• Fixed duplicate output in some commands like /context
• Fixed task list sometimes showing outside the main conversation view
• Fixed syntax highlighting for diffs occurring within multiline constructs like Python docstrings
• Fixed crashes when cancelling tool use
• Improved /sandbox command UI to show dependency status with installation instructions when dependencies are missing
• Improved thinking status text with a subtle shimmer animation
• Improved task list to dynamically adjust visible items based on terminal height
• Improved fork conversation hint to show how to resume the original session
• Changed collapsed read/search groups to show present tense ("Reading", "Searching for") while in progress, and past tense ("Read", "Searched for") when complete
• Changed ToolSearch results to appear as a brief notification instead of inline in the conversation
• Changed the /commit-push-pr skill to automatically post PR URLs to Slack channels when configured via MCP tools
• Changed the /copy command to be available to all users
• Changed background agents to prompt for tool permissions before launching
• Changed permission rules like Bash(*) to be accepted and treated as equivalent to Bash
• Changed config backups to be timestamped and rotated (keeping 5 most recent) to prevent data loss

v2.1.19

Compare Source

• Added env var CLAUDE_CODE_ENABLE_TASKS, set to false to keep the old system temporarily
• Added shorthand $0, $1, etc. for accessing individual arguments in custom commands
• Fixed crashes on processors without AVX instruction support
• Fixed dangling Claude Code processes when terminal is closed by catching EIO errors from process.exit() and using SIGKILL as fallback
• Fixed /rename and /tag not updating the correct session when resuming from a different directory (e.g., git worktrees)
• Fixed resuming sessions by custom title not working when run from a different directory
• Fixed pasted text content being lost when using prompt stash (Ctrl+S) and restore
• Fixed agent list displaying "Sonnet (default)" instead of "Inherit (default)" for agents without an explicit model setting
• Fixed backgrounded hook commands not returning early, potentially causing the session to wait on a process that was intentionally backgrounded
• Fixed file write preview omitting empty lines
• Changed skills without additional permissions or hooks to be allowed without requiring approval
• Changed indexed argument syntax from $ARGUMENTS.0 to $ARGUMENTS[0] (bracket syntax)
• [SDK] Added replay of queued_command attachment messages as SDKUserMessageReplay events when replayUserMessages is enabled
• [VSCode] Enabled session forking and rewind functionality for all users

v2.1.18

Compare Source

• Added customizable keyboard shortcuts. Configure keybindings per context, create chord sequences, and personalize your workflow. Run /keybindings to get started. Learn more at https://code.claude.com/docs/en/keybindings

v2.1.17

Compare Source

• Fixed crashes on processors without AVX instruction support

v2.1.16

Compare Source

• Added new task management system, including new capabilities like dependency tracking
• [VSCode] Added native plugin management support
• [VSCode] Added ability for OAuth users to browse and resume remote Claude sessions from the Sessions dialog
• Fixed out-of-memory crashes when resuming sessions with heavy subagent usage
• Fixed an issue where the "context remaining" warning was not hidden after running /compact
• Fixed session titles on the resume screen not respecting the user's language setting
• [IDE] Fixed a race condition on Windows where the Claude Code sidebar view container would not appear on start

v2.1.15

Compare Source

• Added deprecation notification for npm installations - run claude install or see https://docs.anthropic.com/en/docs/claude-code/getting-started for more options
• Improved UI rendering performance with React Compiler
• Fixed the "Context left until auto-compact" warning not disappearing after running /compact
• Fixed MCP stdio server timeout not killing child process, which could cause UI freezes

google-gemini/gemini-cli (@​google/gemini-cli)

v0.26.0

Compare Source

What's Changed

• fix: PDF token estimation (#​16494) by @​korade-krushna in #​16527
• chore(release): bump version to 0.26.0-nightly.20260114.bb6c57414 by @​gemini-cli-robot in #​16604
• docs: clarify F12 to open debug console by @​jackwotherspoon in #​16570
• docs: Remove .md extension from internal links in architecture.md by @​medic-code in #​12899
• Add an experimental setting for extension config by @​chrstnb in #​16506
• feat: add Rewind Confirmation dialog and Rewind Viewer component by @​Adib234 in #​15717
• fix(a2a): Don't throw errors for GeminiEventType Retry and InvalidStream. by @​ehedlund in #​16541
• prefactor: add rootCommands as array so it can be used for policy parsing by @​abhipatel12 in #​16640
• remove unnecessary \x7f key bindings by @​scidomino in #​16646
• docs(skills): use body-file in pr-creator skill for better reliability by @​abhipatel12 in #​16642
• chore(automation): recursive labeling for workstream descendants by @​bdmorgan in #​16609
• feat: introduce 'skill-creator' built-in skill and CJS management tools by @​NTaylorMullen in #​16394
• chore(automation): remove automated PR size and complexity labeler by @​bdmorgan in #​16648
• refactor(skills): replace 'project' with 'workspace' scope by @​NTaylorMullen in #​16380
• Docs: Update release notes for 1/13/2026 by @​jkcinouye in #​16583
• Simplify paste handling by @​scidomino in #​16654
• chore(automation): improve scheduled issue triage discovery and throughput by @​bdmorgan in #​16652
• fix(acp): run exit cleanup when stdin closes by @​codefromthecrypt in #​14953
• feat(scheduler): add types needed for event driven scheduler by @​abhipatel12 in #​16641
• Remove unused rewind key binding by @​scidomino in #​16659
• Remove sequence binding by @​scidomino in #​16664
• feat(cli): undeprecate the --prompt flag by @​alexaustin007 in #​13981
• chore: update dependabot configuration by @​cosmopax in #​13507
• feat(config): add 'auto' alias for default model selection by @​sehoon38 in #​16661
• Enable & disable agents by @​sehoon38 in #​16225
• cleanup: Improve keybindings by @​scidomino in #​16672
• Add timeout for shell-utils to prevent hangs. by @​jacob314 in #​16667
• feat(plan): add experimental plan flag by @​jerop in #​16650
• feat(cli): add security consent prompts for skill installation by @​NTaylorMullen in #​16549
• fix: replace 3 consecutive periods with ellipsis character by @​Vist233 in #​16587
• chore(automation): ensure status/need-triage is applied and never cleared automatically by @​bdmorgan in #​16657
• fix: Handle colons in skill description frontmatter by @​maru0804 in #​16345
• refactor(core): harden skill frontmatter parsing by @​NTaylorMullen in #​16705
• feat(skills): add conflict detection and warnings for skill overrides by @​NTaylorMullen in #​16709
• feat(scheduler): add SchedulerStateManager for reactive tool state by @​abhipatel12 in #​16651
• chore(automation): enforce 'help wanted' label permissions and update guidelines by @​bdmorgan in #​16707
• fix(core): resolve circular dependency via tsconfig paths by @​sehoon38 in #​16730
• chore/release: bump version to 0.26.0-nightly.20260115.6cb3ae4e0 by @​gemini-cli-robot in #​16738
• fix(automation): correct status/need-issue label matching wildcard by @​bdmorgan in #​16727
• fix(automation): prevent label-enforcer loop by ignoring all bots by @​bdmorgan in #​16746
• Add links to supported locations and minor fixes by @​g-samroberts in #​16476
• feat(policy): add source tracking to policy rules by @​allenhutchison in #​16670
• feat(automation): enforce '🔒 maintainer only' and fix bot loop by @​bdmorgan in #​16751
• Make merged settings non-nullable and fix all lints related to that. by @​jacob314 in #​16647
• fix(core): prevent ModelInfo event emission on aborted signal by @​sehoon38 in #​16752
• Replace relative paths to fix website build by @​chrstnb in #​16755
• Restricting to localhost by @​cocosheng-g in #​16548
• fix(cli): add explicit dependency on color-convert by @​sehoon38 in #​16757
• fix(automation): robust label enforcement with permission checks by @​bdmorgan in #​16762
• fix(cli): prevent OOM crash by limiting file search traversal and adding timeout by @​galz10 in #​16696
• fix(cli): safely handle /dev/tty access on macOS by @​korade-krushna in #​16531
• docs: clarify workspace test execution in GEMINI.md by @​mattKorwel in #​16764
• Add support for running available commands prior to MCP servers loading by @​Adib234 in #​15596
• feat(plan): add experimental 'plan' approval mode by @​jerop in #​16753
• feat(scheduler): add functional awaitConfirmation utility by @​abhipatel12 in #​16721
• fix(infra): update maintainer rollup label to 'workstream-rollup' by @​bdmorgan in #​16809
• fix(infra): use GraphQL to detect direct parents in rollup workflow by @​bdmorgan in #​16811
• chore(workflows): rename label-workstream-rollup workflow by @​bdmorgan in #​16818
• skip simple-mcp-server.test.ts by @​scidomino in #​16842
• Steer outer agent to use expert subagents when present by @​gundermanc in #​16763
• Fix race condition by awaiting scheduleToolCalls by @​chrstnb in #​16759
• cleanup: Organize key bindings by @​scidomino in #​16798
• feat(core): Add generalist agent. by @​joshualitt in #​16638
• perf(ui): optimize text buffer and highlighting for large inputs by @​NTaylorMullen in #​16782
• fix(core): fix PTY descriptor shell leak by @​galz10 in #​16773
• feat(plan): enforce strict read-only policy and halt execution on violation by @​jerop in #​16849
• remove need-triage label from bug_report template by @​sehoon38 in #​16864
• fix(core): truncate large telemetry log entries by @​sehoon38 in #​16769
• docs(extensions): add Agent Skills support and mark feature as experimental by @​NTaylorMullen in #​16859
• fix(core): surface warnings for invalid hook event names in configuration (#​16788) by @​sehoon38 in #​16873
• feat(plan): remove read_many_files from approval mode policies by @​jerop in #​16876
• feat(admin): implement admin controls polling and restart prompt by @​skeshive in #​16627
• Remove LRUCache class migrating to mnemoist by @​jacob314 in #​16872
• feat(settings): rename negative settings to positive naming (disable* -> enable*) by @​afarber in #​14142
• refactor(cli): unify shell confirmation dialogs by @​NTaylorMullen in #​16828
• feat(agent): enable agent skills by default by @​NTaylorMullen in #​16736
• refactor(core): foundational truncation refactoring and token estimation optimization by @​NTaylorMullen in #​16824
• fix(hooks): enable /hooks disable to reliably stop single hooks by @​abhipatel12 in #​16804
• Don't commit unless user asks us to. by @​gundermanc in #​16902
• chore: remove a2a-adapter and bump @​a2a-js/sdk to 0.3.8 by @​adamfweidman in #​16800
• fix: Show experiment values in settings UI for compressionThreshold by @​ishaanxgupta in #​16267
• feat(cli): replace relative keyboard shortcuts link with web URL by @​imaliabbas in #​16479
• fix(core): resolve PKCE length issue and stabilize OAuth redirect port by @​sehoon38 in #​16815
• Delete rewind documentation for now by @​Adib234 in #​16932
• Stabilize skill-creator CI and package format by @​NTaylorMullen in #​17001
• Stabilize the git evals by @​gundermanc in #​16989
• fix(core): attempt compression before context overflow check by @​NTaylorMullen in #​16914
• Fix inverted logic. by @​gundermanc in #​17007
• chore(scripts): add duplicate issue closer script and fix lint errors by @​bdmorgan in #​16997
• docs: update README and config guide to reference Gemini 3 by @​JayadityaGit in #​15806
• fix(cli): correct Homebrew installation detection by @​kij in #​14727
• Demote git evals to nightly run. by @​gundermanc in #​17030
• fix(cli): use OSC-52 clipboard copy in Windows Terminal by @​Thomas-Shephard in #​16920
• Fix: Process all parts in response chunks when thought is first by @​pyrytakala in #​13539
• fix(automation): fix jq quoting error in pr-triage.sh by @​Kimsoo0119 in #​16958
• refactor(core): decouple scheduler into orchestration, policy, and confirmation by @​abhipatel12 in #​16895
• feat: add /introspect slash command by @​NTaylorMullen in #​17048
• refactor(cli): centralize tool mapping and decouple legacy scheduler by @​abhipatel12 in #​17044
• fix(ui): ensure rationale renders before tool calls by @​NTaylorMullen in #​17043
• fix(workflows): use author_association for maintainer check by @​bdmorgan in #​17060
• fix return type of fireSessionStartEvent to defaultHookOutput by @​ved015 in #​16833
• feat(cli): add experiment gate for event-driven scheduler by @​abhipatel12 in #​17055
• feat(core): improve shell redirection transparency and security by @​NTaylorMullen in #​16486
• fix(core): deduplicate ModelInfo emission in GeminiClient by @​NTaylorMullen in #​17075
• docs(themes): remove unsupported DiffModified color key by @​jw409 in #​17073
• fix: update currentSequenceModel when modelChanged by @​adamfweidman in #​17051
• feat(core): enhanced anchored iterative context compression with self-verification by @​rmedranollamas in #​15710
• Fix mcp instructions by @​chrstnb in #​16439
• [A2A] Disable checkpointing if git is not installed by @​cocosheng-g in #​16896
• feat(admin): set admin.skills.enabled based on advancedFeaturesEnabled setting by @​skeshive in #​17095
• Test coverage for hook exit code cases by @​gundermanc in #​17041
• Revert "Revert "Update extension examples"" by @​chrstnb in #​16445
• fix(core): Provide compact, actionable errors for agent delegation failures by @​SandyTao520 in #​16493
• fix: migrate BeforeModel and AfterModel hooks to HookSystem by @​ved015 in #​16599
• feat(admin): apply admin settings to gemini skills/mcp/extensions commands by @​skeshive in #​17102
• fix(core): update telemetry token count after session resume by @​psinha40898 in #​15491
• Demote the subagent test to nightly by @​gundermanc in #​17105
• feat(plan): telemetry to track adoption and usage of plan mode by @​Adib234 in #​16863
• feat: Add flash lite utility fallback chain by @​adamfweidman in #​17056
• Fixes Windows crash: "Cannot resize a pty that has already exited" by @​dzammit in #​15757
• feat(core): Add initial eval for generalist agent. by @​joshualitt in #​16856
• feat(core): unify agent enabled and disabled flags by @​SandyTao520 in #​17127
• fix(core): resolve auto model in default strategy by @​sehoon38 in #​17116
• docs: update project context and pr-creator workflow by @​NTaylorMullen in #​17119
• fix(cli): send gemini-cli version as mcp client version by @​dsp in #​13407
• fix(cli): resolve Ctrl+Enter and Ctrl+J newline issues by @​imadraude in #​17021
• Remove missing sidebar item by @​chrstnb in #​17145
• feat(core): Ensure all properties in hooks object are event names. by @​joshualitt in #​16870
• fix(cli): fix newline support broken in previous PR by @​scidomino in #​17159
• Add interactive ValidationDialog for handling 403 VALIDATION_REQUIRED errors. by @​gsquared94 in #​16231
• Add Esc-Esc to clear prompt when it's not empty by @​Adib234 in #​17131
• Avoid spurious warnings about unexpected renders triggered by appEvents and coreEvents. by @​jacob314 in #​17160
• fix(cli): resolve home/end keybinding conflict by @​scidomino in #​17124
• fix(cli): display 'http' type on mcp list by @​pamanta in #​16915
• fix bad fallback logic external editor logic by @​scidomino in #​17166
• Fix bug where System scopes weren't migrated. by @​jacob314 in #​17174
• Fix mcp tool lookup in tool registry by @​werdnum in #​17054
• fix(patch): cherry-pick 61040d0 to release/v0.26.0-preview.0-pr-17247 to patch version v0.26.0-preview.0 and create version 0.26.0-preview.1 by @​gemini-cli-robot in #​17258
• fix(patch): cherry-pick 87a0db2 to release/v0.26.0-preview.1-pr-17308 [CONFLICTS] by @​gemini-cli-robot in #​17317
• fix(patch): cherry-pick addb57c to release/v0.26.0-preview.2-pr-17331 [CONFLICTS] by @​gemini-cli-robot in #​17345
• fix(patch): cherry-pick 12a5490 to release/v0.26.0-preview.3-pr-17395 [CONFLICTS] by @​gemini-cli-robot in #​17424

New Contributors

• @​codefromthecrypt made their first contribution in #​14953
• @​alexaustin007 made their first contribution in #​13981
• @​cosmopax made their first contribution in #​13507
• @​Vist233 made their first contribution in #​16587
• @​imaliabbas made their first contribution in #​16479
• @​kij made their first contribution in #​14727
• @​Thomas-Shephard made their first contribution in #​16920
• @​Kimsoo0119 made their first contribution in #​16958
• @​jw409 made their first contribution in #​17073
• @​dzammit made their first contribution in #​15757
• @​dsp made their first contribution in #​13407
• @​imadraude made their first contribution in #​17021
• @​pamanta made their first contribution in #​16915

Full Changelog: google-gemini/gemini-cli@v0.25.2...v0.26.0

v0.26.0-preview.5

Compare Source

Full Changelog: google-gemini/gemini-cli@v0.26.0-preview.4...v0.26.0-preview.5

v0.26.0-preview.4

Compare Source

What's Changed

• fix(patch): cherry-pick 12a5490 to release/v0.26.0-preview.3-pr-17395 [CONFLICTS] by @​gemini-cli-robot in #​17424

Full Changelog: google-gemini/gemini-cli@v0.26.0-preview.3...v0.26.0-preview.4

v0.26.0-preview.3

Compare Source

What's Changed

• fix(patch): cherry-pick addb57c to release/v0.26.0-preview.2-pr-17331 [CONFLICTS] by @​gemini-cli-robot in #​17345

Full Changelog: google-gemini/gemini-cli@v0.26.0-preview.2...v0.26.0-preview.3

v0.26.0-preview.2

Compare Source

What's Changed

• fix(patch): cherry-pick 87a0db2 to release/v0.26.0-preview.1-pr-17308 [CONFLICTS] by @​gemini-cli-robot in #​17317

Full Changelog: google-gemini/gemini-cli@v0.26.0-preview.1...v0.26.0-preview.2

v0.26.0-preview.1

Compare Source

What's Changed

• fix(patch): cherry-pick 61040d0 to release/v0.26.0-preview.0-pr-17247 to patch version v0.26.0-preview.0 and create version 0.26.0-preview.1 by @​gemini-cli-robot in #​17258

Full Changelog: google-gemini/gemini-cli@v0.26.0-preview.0...v0.26.0-preview.1

v0.26.0-preview.0

Compare Source

What's Changed

• fix: PDF token estimation (#​16494) by @​korade-krushna in #​16527
• chore(release): bump version to 0.26.0-nightly.20260114.bb6c57414 by @​gemini-cli-robot in #​16604
• docs: clarify F12 to open debug console by @​jackwotherspoon in #​16570
• docs: Remove .md extension from internal links in architecture.md by @​medic-code in #​12899
• Add an experimental setting for extension config by @​chrstnb in #​16506
• feat: add Rewind Confirmation dialog and Rewind Viewer component by @​Adib234 in #​15717
• fix(a2a): Don't throw errors for GeminiEventType Retry and InvalidStream. by @​ehedlund in #​16541
• prefactor: add rootCommands as array so it can be used for policy parsing by @​abhipatel12 in #​16640
• remove unnecessary \x7f key bindings by @​scidomino in #​16646
• docs(skills): use body-file in pr-creator skill for better reliability by @​abhipatel12 in #​16642
• chore(automation): recursive labeling for workstream descendants by @​bdmorgan in #​16609
• feat: introduce 'skill-creator' built-in skill and CJS management tools by @​NTaylorMullen in #​16394
• chore(automation): remove automated PR size and complexity labeler by @​bdmorgan in #​16648
• refactor(skills): replace 'project' with 'workspace' scope by @​NTaylorMullen in #​16380
• Docs: Update release notes for 1/13/2026 by @​jkcinouye in #​16583
• Simplify paste handling by @​scidomino in #​16654
• chore(automation): improve scheduled issue triage discovery and throughput by @​bdmorgan in #​16652
• fix(acp): run exit cleanup when stdin closes by @​codefromthecrypt in #​14953
• feat(scheduler): add types needed for event driven scheduler by @​abhipatel12 in #​16641
• Remove unused rewind key binding by @​scidomino in #​16659
• Remove sequence binding by @​scidomino in #​16664
• feat(cli): undeprecate the --prompt flag by @​alexaustin007 in #​13981
• chore: update dependabot configuration by @​cosmopax in #​13507
• feat(config): add 'auto' alias for default model selection by @​sehoon38 in #​16661
• Enable & disable agents by @​sehoon38 in #​16225
• cleanup: Improve keybindings by @​scidomino in #​16672
• Add timeout for shell-utils to prevent hangs. by @​jacob314 in #​16667
• feat(plan): add experimental plan flag by @​jerop in #​16650
• feat(cli): add security consent prompts for skill installation by @​NTaylorMullen in #​16549
• fix: replace 3 consecutive periods with ellipsis character by @​Vist233 in #​16587
• chore(automation): ensure status/need-triage is applied and never cleared automatically by @​bdmorgan in #​16657
• fix: Handle colons in skill description frontmatter by @​maru0804 in #​16345
• refactor(core): harden skill frontmatter parsing by @​NTaylorMullen in #​16705
• feat(skills): add conflict detection and warnings for skill overrides by @​NTaylorMullen in #​16709
• feat(scheduler): add SchedulerStateManager for reactive tool state by @​abhipatel12 in #​16651
• chore(automation): enforce 'help wanted' label permissions and update guidelines by @​bdmorgan in #​16707
• fix(core): resolve circular dependency via tsconfig paths by @​sehoon38 in #​16730
• chore/release: bump version to 0.26.0-nightly.20260115.6cb3ae4e0 by @​gemini-cli-robot in #​16738
• fix(automation): correct status/need-issue label matching wildcard by @​bdmorgan in #​16727
• fix(automation): prevent label-enforcer loop by ignoring all bots by @​bdmorgan in #​16746
• Add links to supported locations and minor fixes by @​g-samroberts in #​16476
• feat(policy): add source tracking to policy rules by @​allenhutchison in #​16670
• feat(automation): enforce '🔒 maintainer only' and fix bot loop by @​bdmorgan in #​16751
• Make merged settings non-nullable and fix all lints related to that. by @​jacob314 in #​16647
• fix(core): prevent ModelInfo event emission on aborted signal by @​sehoon38 in #​16752
• Replace relative paths to fix website build by @​chrstnb in #​16755
• Restricting to localhost by @​cocosheng-g in #​16548
• fix(cli): add explicit dependency on color-convert by @​sehoon38 in #​16757
• fix(automation): robust label enforcement with permission checks by @​bdmorgan in #​16762
• fix(cli): prevent OOM crash by limiting file search traversal and adding timeout by @​galz10 in #​16696
• fix(cli): safely handle /dev/tty access on macOS by [@​korade-krushna](https://redirect.github.com/korade-krushna

---

Configuration

📅 Schedule: Branch creation - Only on Wednesday ( * * * * 3 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.