What's Changed

• fix(sandbox): make ~/.gitconfig read-only in the macOS sandbox by @ompatel-aiml in #28221
• fix(core): preserve escape sequences in string literals for modern models by @luisfelipe-alt in #28299

Full Changelog: v0.51.0-nightly.20260706.gf7af4e518...v0.51.0-nightly.20260707.g15a9429b6

Full Changelog: v0.51.0-nightly.20260705.gf7af4e518...v0.51.0-nightly.20260706.gf7af4e518

Full Changelog: v0.51.0-nightly.20260704.gf7af4e518...v0.51.0-nightly.20260705.gf7af4e518

Full Changelog: v0.51.0-nightly.20260703.gf7af4e518...v0.51.0-nightly.20260704.gf7af4e518

What's Changed

• feat(caretaker): egress cloud run service skeleton by @chadd28 in #28167

Full Changelog: v0.51.0-nightly.20260702.gff00dacd9...v0.51.0-nightly.20260703.gf7af4e518

What's Changed

• fix(core): resolve symbolic link directory escape in memory import processor by @luisfelipe-alt in #28233

Full Changelog: v0.51.0-nightly.20260701.g7f00c5fe5...v0.51.0-nightly.20260702.gff00dacd9

What's Changed

• fix(core-tools): resolve defensive path resolution for at-reference files and fix macOS tests by @luisfelipe-alt in #28053
• feat(caretaker): implement Cloud Run webhook ingestion service by @chadd28 in #28015

New Contributors

• @chadd28 made their first contribution in #28015

Full Changelog: v0.51.0-nightly.20260630.gae0a3aa7b...v0.51.0-nightly.20260701.g7f00c5fe5

Full Changelog: v0.51.0-nightly.20260629.gae0a3aa7b...v0.51.0-nightly.20260630.gae0a3aa7b

Full Changelog: v0.51.0-nightly.20260628.gae0a3aa7b...v0.51.0-nightly.20260629.gae0a3aa7b

What's Changed

• fix(security): enforce case-insensitive sensitive path blocklist and vscode hitl by @luisfelipe-alt in #27966

Full Changelog: v0.51.0-nightly.20260626.gb14416447...v0.51.0-nightly.20260628.gae0a3aa7b