gemini-cli v0.65.0 — Release v0.65.0

Gemini CLI 0.65.0 is almost entirely fixes, and the one with the clearest consequences concerns folder trust. When you open Gemini CLI in a folder you have not marked as trusted, it ignores that project's own settings and uses an empty set instead. According to the pull request, that empty set still pointed at the real .gemini/settings.json file and was not marked read-only, so running gemini mcp add or gemini mcp remove at project scope wrote the empty settings back to disk and erased every key already in the file.

The fix marks the substituted workspace settings as read-only while the folder is untrusted, makes any attempt to write to them fail before anything reaches disk, and has the mcp add and remove commands refuse with an error for an untrusted project; user-scope changes still work, and trusting the folder restores normal writing. Elsewhere in the list, judging by the pull request titles, the release aligns OAuth callback validation with RFC 9207, stops verification and OAuth retry loops, fixes duplicated tool responses and lost history when resuming sessions, and adds custom OTLP headers to telemetry configuration.