GitHub Release: google-gemini/gemini-cli v0.60.0 (15.09.2026)

$ git clone https://github.com/google-gemini/gemini-cli.git Clone

What's Changed

• fix(core): improve destination validation and connection routing in web fetch utilities by


• fix(core): enforce RFC 9207 issuer identification in MCP OAuth flow by


• chore(release): bump version to 0.60.0-nightly.20260901.g0bd1d4397 by


• Changelog for v0.58.0 by


• fix(cli): isolate temporary directory for macOS Seatbelt sandbox by


• feat(extensions): harden path resolution and boundary validation in extension loader by


• Changelog for v0.59.0-preview.0 by


• fix(core): sanitize and remove hardcoded Google CrUX API key in chrome-devtools-mcp by


• fix(extensions): prompt for consent on environment changes and sanitize runtime-altering environment variables by


• fix(core): enhance workspace path boundary checks and symlink resolution in command safety and file discovery by


• fix(config): enforce strict permission and ownership checks on system-wide configuration paths by


• fix(core): mitigate NTFS 8.3 short name (SFN) path by


• fix(cli): isolate settings directory in sandbox containers by


• fix(core): enforce envelope metadata provenance for untrusted tool outputs by

New Contributors

Full Changelog: v0.59.0...v0.60.0