chore(main): release 0.4.0

[release-please]

🤖 I have created a release beep boop

0.4.0 (2025-12-17)

Features

• Add basic poc command functionality to the MCP server (2f533fd)
• Add privacy specific taxonomy (#84) (46b3eb0)
• add tooling for defining the audit scope (1730bbb)
• Use problem statements in the PoC function to allow for more flexible usage (a0449d3)

Bug Fixes

• add experimental tag and securiy prefix to poc prompt (d52c8ca)
• add language that suggests to skip if note doesnt exist (e0f60ea)
• add license header to poc test file (6bc9bf9)
• Add source code location as parmater to our PoC command (it increases success rate and decreases token usage) (07a1e07)
• change errro message to empty string in diff fail (18ecd79)
• finialzie merge into main (bd6d4e5)
• folder location wording in gemini .md (da3ef99)
• folder location wording in gemini .md (32ad411)
• make prompt less error prone by enforcing directory (0ea0b48)
• merge into main (8cbfd3c)
• move selective action prompting to top of gemini md (7ecd59d)
• move whitelist directory to .gemini_security (bac4ab6)
• package lock jsons (7c393ca)
• remove conflicting gemini md wording from unmerged file (6b8fe2b)
• remove irrelevant changes to prompt from this PR (102d64c)
• remove mentions of unused security notes folder from gemini md (1723ce8)
• remove merge remnants (1c87790)
• remove redundant parameter validation, clean up /poc prompting (682488d)
• Update description of audit tool, small fixes (959ae50)
• update run_poc signature to take in a file path instead of source code to run. (847ec4c)
• use isolated-vm library to isolate generated code (7e5ea18)

---

This PR was generated with Release Please. See documentation.

[github-actions]

🤖 Hi @release-please[bot], I've received your request, and I'm working on it now! You can track my progress in the logs for more details.

[github-actions]

📋 Review Summary

This pull request appears to be an automated release generated by release-please. The changes accurately reflect a version bump to 0.4.0 across the relevant project files.

🔍 General Feedback

• The version updates in .release-please-manifest.json, CHANGELOG.md, and gemini-extension.json are consistent and correct.
• A minor typo was found in the CHANGELOG.md and a suggestion has been made to correct it.
• Overall, the changes are as expected for an automated release.

[github-actions]

🟢 Nit: I noticed a typo in the word 'error'.

Suggested change

	* change error message to empty string in diff fail ([18ecd79](https://github.com/gemini-cli-extensions/security/commit/18ecd79bbd90b96765671fe2ea5c21b356143bf2))

[github-actions]

📋 Security Analysis Summary

This pull request appears to be a release automation PR. No source code changes were detected that would require a security review.

🔍 General Feedback

• No security-related issues were found in this pull request.

[release-please]

🤖 Created releases:

• v0.4.0

🌻