chore(release): 1.1.6-beta.1

Pre-release snapshot combining the CVE-2026-0755 fix (#76) and the Windows
stdin/windowsHide work (#77) for manual testing ahead of 1.1.6. GitHub
pre-release only; not published to npm.

Author: jamubc

CHANGELOG.md

@@ -1,6 +1,7 @@
 # Changelog
 
-## [Unreleased]
+## [1.1.6-beta.1] - 2026-05-30
+_Pre-release for manual testing ahead of 1.1.6. GitHub only — not published to npm._
 - Security fix: OS command-injection / `@file` exfiltration via prompt quoting in `geminiExecutor.ts` (CVE-2026-0755, CWE-78). Fixes #73 (and the literal-quote corruption in #66).
   - Removed the broken double-quote wrapping from both the primary and fallback paths. With `spawn` running `shell: false`, those quotes were passed as literal characters — they provided no protection and corrupted `@file` references. Windows `.cmd` argument quoting is hardened separately (see below).
   - Added `assertSafeFileReferences()`, which rejects any `@file` reference that resolves outside the project working directory (absolute paths, `~` home references, and `../` traversal), closing the arbitrary-file-read exfiltration vector while preserving legitimate in-project `@file` usage.

package.json

@@ -1,6 +1,6 @@
 {
   "name": "gemini-mcp-tool",
-  "version": "1.1.5",
+  "version": "1.1.6-beta.1",
   "description": "MCP server for Gemini CLI integration",
   "type": "module",
   "main": "dist/index.js",