v0.40.0

Bug Fixes

• Fixed SSL errors during streaming by retrying additional OpenSSL 3.x errors.
• Prevented YOLO mode from being downgraded.
• Fixed core logic to honor GOOGLE_GEMINI_BASE_URL and GOOGLE_VERTEX_BASE_URL environment variables.
• Cleaned up slash command IDE listeners.
• Fixed bundling issues for extensions examples.
• Fixed CLI behavior to reset plan session state upon using `/clear`.
• Allowed explicit write permissions to override governance file protections in sandboxes.
• Fixed ShellExecutionConfig spread and added ProjectRegistry save backoff.
• Fixed an issue where Cloud Shell users could not use the PRO_MODEL_NO_ACCESS experiment.
• Fixed slow render latency rounding to avoid opentelemetry float warnings.
• Fixed a security issue by disallowing overriding IDE stdio via workspace .env.
• Fixed core logic to resolve nested plan directory duplication and relative path policies.
• Fixed CLI behavior to use newline in shell command wrapping, preventing breakage of heredocs.
• Fixed CLI behavior to ensure theme dialog labels are rendered correctly for all themes.
• Fixed core logic to disable detached mode in Bun, preventing immediate SIGHUP of child processes.
• Fixed CLI behavior to start auto memory in ACP sessions.
• Fixed core logic by removing duplicate initialize calls on refreshed agents.
• Fixed core logic to handle line endings correctly during ignore file parsing.
• Fixed a command injection vulnerability in the shell.
• Fixed UI by removing the background color for the input field.
• Fixed core logic by using the dynamic CLI version for the IDE client instead of a hardcoded value.