GitHub Release: google-gemini/gemini-cli v0.65.0 (20.10.2026)

What's Changed

• fix(cli): enforce read-only workspace settings in untrusted folders by @jvargassanchez-dot in #29583


• fix(core): avoid duplicate tool response turns when resuming sessions by @diegogodinezr in #29618


• fix(core): prevent deletion of resumed session history on quick exit (#29198) by @villahernandez-coder in #29584


• Changelog for v0.64.0-preview.0 by @gemini-cli-robot in #29656


• Changelog for v0.63.0 by @gemini-cli-robot in #29659


• fix(core): align OAuth callback iss parameter validation with RFC 9207 metadata by @luisfelipe-alt in #29616


• fix(cli): prevent unnecessary terminal clears and scroll resets when expanding with Ctrl+O by @jesussamuel-byte in #29640


• chore(release): bump version to 0.65.0-nightly.20261006.gfb972b2f8 by @gemini-cli-robot in #29657


• fix(ci): add missing loop in unassign-inactive-assignees workflow by @ugorla-dev in #29609


• fix(core): enforce terminal user turn invariant and normalize request contents by @luisfelipe-alt in #29612


• feat(telemetry): support custom OTLP headers in telemetry configuration by @jesussamuel-byte in #29641


• fix(auth): prevent infinite verification and OAuth retry loops by @villahernandez-coder in #29655


• fix(cli): handle JSON parse and response stream errors in fetchJson by @jesussamuel-byte in #29658


• fix(core): preserve line terminators in truncateString by @diegogodinezr in #29673


• fix(vscode-ide-companion): make IdeServer.stop() resolve while MCP sessions are open by @elberthc-byte in #29674


• fix(core): retain ask_user question text in the tool result display by @elberthc-byte in #29677


• fix(core): eliminate false positives on untrusted command flags and compound loops by @DavidAPierce in #29672


• fix(cli): clear cached credentials when re-selecting Google login by @urielefrenvirtusa in #29643


• fix(cli): resolve hang on Enter keypress in interactive mode (#23297) by @elberthc-byte in #29476


• perf(core): optimize ignore filtering and enable subtree pruning (#29077) by @amelidev in #29582


• fix(a2a-server): isolate tool rejection to active call in sequential batches by @jvargassanchez-dot in #29683


• fix(cli): skip eager recursive file reading for @ references by @jvargassanchez-dot in #29617


• fix(cli): keep loading other extensions when one fails the allowlist check by @jesussamuel-byte in #29720


• fix(cli): correct reverse search highlight index for expanding unicode characters by @diegogodinezr in #29699


• fix(core): treat whitespace-only UTF-16 and UTF-32 files as empty by @jesussamuel-byte in #29722


• fix(cli): restore debounced static UI refresh on terminal width changes by @jvargassanchez-dot in #29644


• fix(cli): prevent session poisoning on rapid Ctrl-C interruption by @villahernandez-coder in #29728

Full Changelog: v0.64.0...v0.65.0