chore(deps): bump @google/gemini-cli from 0.47.0 to 0.49.0

[dependabot]

Bumps @google/gemini-cli from 0.47.0 to 0.49.0.

Release notes

Sourced from @​google/gemini-cli's releases.

Release v0.49.0

What's Changed

• chore(release): bump version to 0.48.0-nightly.20260609.g3a13b8eeb by @​gemini-cli-robot in google-gemini/gemini-cli#27779
• ci(dependabot): enable cooldown period for npm packages by @​ruomengz in google-gemini/gemini-cli#27743
• refactor(core): standardize tool output formatting by @​galz10 in google-gemini/gemini-cli#27772
• ci: update workflow logging and policy configurations by @​galz10 in google-gemini/gemini-cli#27853
• fix(core): Ensure zero-quota limits fail fast to prevent retry loop hang by @​luisfelipe-alt in google-gemini/gemini-cli#27698
• fix(core): handle multi-line escaped quotes in stripShellWrapper by @​sanchezcoraspe in google-gemini/gemini-cli#27467
• fix(cli): prevent path traversal vulnerabilities during skill install… by @​ompatel-aiml in google-gemini/gemini-cli#27767
• Fix/pending tools and trust overrides by @​jvargassanchez-dot in google-gemini/gemini-cli#27854
• ci: use internal environment for scheduled nightly releases (#27865) by @​rmedranollamas in google-gemini/gemini-cli#27939
• feat(core): Support GDC air-gapped Service Identity after auth library update by @​sidhantgoyal-droid in google-gemini/gemini-cli#27956
• fix(cli): handle tmux false positive background detection by @​amelidev in google-gemini/gemini-cli#27572
• Add static eval source analyzer by @​ved015 in google-gemini/gemini-cli#27631
• fix(config): migrate coreTools setting to tools.core by @​galz10 in google-gemini/gemini-cli#27947
• fix(core-tools): resolve defensive path resolution for at-reference files by @​luisfelipe-alt in google-gemini/gemini-cli#27943
• Revert "fix(core-tools): resolve defensive path resolution for at-reference files" by @​galz10 in google-gemini/gemini-cli#27992
• chore(release): bump version to 0.49.0-nightly.20260617.g4d3dcdce1 by @​gemini-cli-robot in google-gemini/gemini-cli#28003
• Changelog for v0.48.0-preview.0 by @​gemini-cli-robot in google-gemini/gemini-cli#27999
• fix(ci): provide fallbacks for package variables in nightly release by @​galz10 in google-gemini/gemini-cli#28016
• chore(deps): pin dependencies and enforce 14-day update cooldown by @​galz10 in google-gemini/gemini-cli#27948
• fix(ci): append trailing slash to registry url in npmrc by @​rmedranollamas in google-gemini/gemini-cli#28038
• feat: add eval:inventory CLI command and reporting logic by @​ved015 in google-gemini/gemini-cli#28009
• fix: resolve workspace publish failures and scheduler event loop starvation by @​rmedranollamas in google-gemini/gemini-cli#28063
• fix(ci): use wombat dressing room fallback in nightly release to prevent ENEEDAUTH by @​rmedranollamas in google-gemini/gemini-cli#28104
• Add JSON output for eval inventory by @​ved015 in google-gemini/gemini-cli#28058

New Contributors

• @​sanchezcoraspe made their first contribution in google-gemini/gemini-cli#27467
• @​sidhantgoyal-droid made their first contribution in google-gemini/gemini-cli#27956
• @​amelidev made their first contribution in google-gemini/gemini-cli#27572

Full Changelog: google-gemini/gemini-cli@v0.47.0...v0.49.0

Release v0.49.0-nightly.20260625.gd845bc5d4

What's Changed

• fix(cli): prevent path traversal vulnerabilities during skill install… by @​ompatel-aiml in google-gemini/gemini-cli#27767
• Fix/pending tools and trust overrides by @​jvargassanchez-dot in google-gemini/gemini-cli#27854
• ci: use internal environment for scheduled nightly releases (#27865) by @​rmedranollamas in google-gemini/gemini-cli#27939
• feat(core): Support GDC air-gapped Service Identity after auth library update by @​sidhantgoyal-droid in google-gemini/gemini-cli#27956
• fix(cli): handle tmux false positive background detection by @​amelidev in google-gemini/gemini-cli#27572
• Add static eval source analyzer by @​ved015 in google-gemini/gemini-cli#27631
• fix(config): migrate coreTools setting to tools.core by @​galz10 in google-gemini/gemini-cli#27947
• fix(core-tools): resolve defensive path resolution for at-reference files by @​luisfelipe-alt in google-gemini/gemini-cli#27943
• Revert "fix(core-tools): resolve defensive path resolution for at-reference files" by @​galz10 in google-gemini/gemini-cli#27992
• chore(release): bump version to 0.49.0-nightly.20260617.g4d3dcdce1 by @​gemini-cli-robot in google-gemini/gemini-cli#28003
• Changelog for v0.48.0-preview.0 by @​gemini-cli-robot in google-gemini/gemini-cli#27999
• fix(ci): provide fallbacks for package variables in nightly release by @​galz10 in google-gemini/gemini-cli#28016
• chore(deps): pin dependencies and enforce 14-day update cooldown by @​galz10 in google-gemini/gemini-cli#27948
• fix(ci): append trailing slash to registry url in npmrc by @​rmedranollamas in google-gemini/gemini-cli#28038

... (truncated)

Commits

• 5d402f8 chore(release): v0.49.0
• 6e0bd68 Add JSON output for eval inventory (#28058)
• d3ef6ac fix(ci): use wombat dressing room fallback in nightly release to prevent ENEE...
• be7ba2c fix: resolve workspace publish failures and scheduler event loop starvation (...
• c22137e feat: add eval:inventory CLI command and reporting logic (#28009)
• 6613e12 fix(ci): append trailing slash to registry url in npmrc (#28038)
• 93844df chore(deps): pin dependencies and enforce 14-day update cooldown (#27948)
• c427d18 fix(ci): provide fallbacks for package variables in nightly release (#28016)
• d5e25b9 Changelog for v0.48.0-preview.0 (#27999)
• 7ef3b4e chore(release): bump version to 0.49.0-nightly.20260617.g4d3dcdce1 (#28003)
• Additional commits viewable in compare view