What's Changed fix(core): ensure AgentLoopContext properties are preserved across object spread by @diegogodinezr in #29335 fix(a2a-server): add early return on unsupported store in tasks metadata endpoint by @jesussamuel-byte in #29334 Changelog for v0.61.0-preview.0 by @gemini-cli-robot in #29344 Changelog for v0.60.0 by @gemini-cli-robot in #29345 fix(core,acp): format MCP tool call titles as s…
What's Changed fix(core): improve destination validation and connection routing in web fetch utilities by @diegogodinezr in #29120 fix(core): enforce RFC 9207 issuer identification in MCP OAuth flow by @jvargassanchez-dot in #29117 chore(release): bump version to 0.60.0-nightly.20260901.g0bd1d4397 by @gemini-cli-robot in #29162 Changelog for v0.58.0 by @gemini-cli-robot in #29161 fix(cli): isolate…
What's Changed Changelog for v0.60.0-preview.0 by @gemini-cli-robot in #29251 chore(release): bump version to 0.61.0-nightly.20260908.gc647533d6 by @gemini-cli-robot in #29254 Changelog for v0.59.0 by @gemini-cli-robot in #29253 fix(core): preserve explicit versioned Flash model IDs by @SandyTao520 in #29252 fix(core): prevent indirect prompt injection via build file modifications and untrusted fl…
Full Changelog: v0.61.0-nightly.20260914.g9c1b0a610...v0.61.0-nightly.20260915.g9c1b0a610
Full Changelog: v0.61.0-nightly.20260913.g9c1b0a610...v0.61.0-nightly.20260914.g9c1b0a610
Full Changelog: v0.61.0-nightly.20260912.g9c1b0a610...v0.61.0-nightly.20260913.g9c1b0a610
What's Changed fix(core): prevent indirect prompt injection via build file modifications and untrusted flags by @villahernandez-coder in #29250 fix(sandbox): harden filesystem boundaries and isolate runtime state by @diegogodinezr in #29214 New Contributors @villahernandez-coder made their first contribution in #29250 Full Changelog: v0.61.0-nightly.20260911.ged2ac40df...v0.61.0-nightly.20260912.g…
Full Changelog: v0.61.0-nightly.20260910.ged2ac40df...v0.61.0-nightly.20260911.ged2ac40df
Full Changelog: v0.61.0-nightly.20260909.ged2ac40df...v0.61.0-nightly.20260910.ged2ac40df
What's Changed fix(core): mitigate NTFS 8.3 short name (SFN) path by @urielefrenvirtusa in #29116 fix(cli): isolate settings directory in sandbox containers by @jvargassanchez-dot in #29216 fix(core): enforce envelope metadata provenance for untrusted tool outputs by @luisfelipe-alt in #29215 Changelog for v0.60.0-preview.0 by @gemini-cli-robot in #29251 chore(release): bump version to 0.61.0-nigh…
What's Changed Changelog for v0.58.0-preview.0 by @gemini-cli-robot in #29082 chore(release): bump version to 0.59.0-nightly.20260825.g812f7a2bc by @gemini-cli-robot in #29083 fix(core): prevent SSRF in MCP OAuth metadata discovery and authentication by @josebalius in #29081 fix(core): enforce fail-closed workspace trust and filter mcpServers in restricted mode by @luisfelipe-alt in #29099 Full Ch…
What's Changed fix(core): improve destination validation and connection routing in web fetch utilities by @diegogodinezr in #29120 fix(core): enforce RFC 9207 issuer identification in MCP OAuth flow by @jvargassanchez-dot in #29117 chore(release): bump version to 0.60.0-nightly.20260901.g0bd1d4397 by @gemini-cli-robot in #29162 Changelog for v0.58.0 by @gemini-cli-robot in #29161 fix(cli): isolate…
Full Changelog: v0.60.0-nightly.20260907.g85aca163f...v0.60.0-nightly.20260908.g85aca163f
Full Changelog: v0.60.0-nightly.20260906.g85aca163f...v0.60.0-nightly.20260907.g85aca163f
Full Changelog: v0.60.0-nightly.20260905.g85aca163f...v0.60.0-nightly.20260906.g85aca163f
What's Changed fix(extensions): prompt for consent on environment changes and sanitize runtime-altering environment variables by @amelidev in #28863 fix(core): enhance workspace path boundary checks and symlink resolution in command safety and file discovery by @jesussamuel-byte in #29170 fix(config): enforce strict permission and ownership checks on system-wide configuration paths by @jesussamuel…
What's Changed fix(core): enforce RFC 9207 issuer identification in MCP OAuth flow by @jvargassanchez-dot in #29117 chore(release): bump version to 0.60.0-nightly.20260901.g0bd1d4397 by @gemini-cli-robot in #29162 Changelog for v0.58.0 by @gemini-cli-robot in #29161 fix(cli): isolate temporary directory for macOS Seatbelt sandbox by @jvargassanchez-dot in #29171 feat(extensions): harden path resol…
What's Changed fix(core): improve destination validation and connection routing in web fetch utilities by @diegogodinezr in #29120 New Contributors @diegogodinezr made their first contribution in #29120 Full Changelog: v0.59.0-nightly.20260901.g0bd1d4397...v0.59.0-nightly.20260902.g4963a4456
What's Changed Changelog for v0.57.0-preview.0 by @gemini-cli-robot in #28918 fix(core): ensure consistent symlink evaluation in ignore path handling by @luisfelipe-alt in #28915 refactor(core): remove eslint-disable and type-asserts from shellExecutionService by @DavidAPierce in #28862 fix(sandbox): isolate Docker and container runtime sockets and binaries in macOS Seatbelt by @josebalius in #289…
What's Changed Changelog for v0.58.0-preview.0 by @gemini-cli-robot in #29082 chore(release): bump version to 0.59.0-nightly.20260825.g812f7a2bc by @gemini-cli-robot in #29083 fix(core): prevent SSRF in MCP OAuth metadata discovery and authentication by @josebalius in #29081 fix(core): enforce fail-closed workspace trust and filter mcpServers in restricted mode by @luisfelipe-alt in #29099 Full Ch…
Full Changelog: v0.59.0-nightly.20260831.g0bd1d4397...v0.59.0-nightly.20260901.g0bd1d4397
Full Changelog: v0.59.0-nightly.20260830.g0bd1d4397...v0.59.0-nightly.20260831.g0bd1d4397
Full Changelog: v0.59.0-nightly.20260829.g0bd1d4397...v0.59.0-nightly.20260830.g0bd1d4397
What's Changed fix(core): enforce fail-closed workspace trust and filter mcpServers in restricted mode by @luisfelipe-alt in #29099 Full Changelog: v0.59.0-nightly.20260828.g3c311beac...v0.59.0-nightly.20260829.g0bd1d4397
Full Changelog: v0.59.0-nightly.20260827.g3c311beac...v0.59.0-nightly.20260828.g3c311beac
What's Changed fix(core): prevent SSRF in MCP OAuth metadata discovery and authentication by @josebalius in #29081 Full Changelog: v0.59.0-nightly.20260826.g64b5b79a6...v0.59.0-nightly.20260827.g3c311beac
What's Changed Changelog for v0.58.0-preview.0 by @gemini-cli-robot in #29082 chore(release): bump version to 0.59.0-nightly.20260825.g812f7a2bc by @gemini-cli-robot in #29083 Full Changelog: v0.56.0-nightly.20260825.g812f7a2bc...v0.59.0-nightly.20260826.g64b5b79a6
What's Changed fix(core): dynamically resolve Cloud Workstations proxy redirect URI for OAuth flows by @amelidev in #28688 fix(core): resolve swallowed directory mismatch in IDE connections by @amelidev in #28729 Feat/eval validate by @ved015 in #28344 feat(evals): add tool call formatter and integrate failure summaries by @ved015 in #28305 Changelog for v0.55.1 by @gemini-cli-robot in #28779 test…
What's Changed Changelog for v0.57.0-preview.0 by @gemini-cli-robot in #28918 fix(core): ensure consistent symlink evaluation in ignore path handling by @luisfelipe-alt in #28915 refactor(core): remove eslint-disable and type-asserts from shellExecutionService by @DavidAPierce in #28862 fix(sandbox): isolate Docker and container runtime sockets and binaries in macOS Seatbelt by @josebalius in #289…
What's Changed fix(a2a-server): clear stale cancellation error on new message turns by @amelidev in #28940 fix(core): declare top-level safety checkers in write policy configuration by @luisfelipe-alt in #28961 (FIX) history rollback and retry nudge optimizations by @DavidAPierce in #28934 Full Changelog: v0.56.0-nightly.20260824.g5411f113c...v0.56.0-nightly.20260825.g812f7a2bc