File size: 3,556 Bytes
7a1ad33 | 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 | # Latest stable release: v0.60.0
Released: September 15, 2026
For most users, our latest stable release is the recommended release. Install
the latest stable version with:
```
npm install -g @google/gemini-cli
```
## Highlights
- **Extension Consent & Isolation:** Introduced explicit prompting for user
consent on environment changes requested by extensions, along with
sanitization of runtime-altering environment variables to ensure secure
execution environments.
- **Sandbox & Directory Hardening:** Isolated the settings directory and
temporary directories within sandbox containers, including specific path
isolation enhancements for the macOS Seatbelt sandbox.
- **Robust Boundary & Path Resolution:** Hardened workspace boundary validation,
symlink resolution, and NTFS 8.3 short name (SFN) path mitigation across
command safety and file discovery utilities.
- **Enhanced API & Connection Security:** Implemented strict RFC 9207 issuer
identification in the Model Context Protocol (MCP) OAuth flow, along with
improved destination validation and connection routing inside web fetch
utilities.
## What's Changed
- fix(core): improve destination validation and connection routing in web fetch
utilities by @diegogodinezr in
[#29120](https://github.com/google-gemini/gemini-cli/pull/29120)
- fix(core): enforce RFC 9207 issuer identification in MCP OAuth flow by
@jvargassanchez-dot in
[#29117](https://github.com/google-gemini/gemini-cli/pull/29117)
- chore(release): bump version to 0.60.0-nightly.20260901.g0bd1d4397 by
@gemini-cli-robot in
[#29162](https://github.com/google-gemini/gemini-cli/pull/29162)
- Changelog for v0.58.0 by @gemini-cli-robot in
[#29161](https://github.com/google-gemini/gemini-cli/pull/29161)
- fix(cli): isolate temporary directory for macOS Seatbelt sandbox by
@jvargassanchez-dot in
[#29171](https://github.com/google-gemini/gemini-cli/pull/29171)
- feat(extensions): harden path resolution and boundary validation in extension
loader by @diegogodinezr in
[#29169](https://github.com/google-gemini/gemini-cli/pull/29169)
- Changelog for v0.59.0-preview.0 by @gemini-cli-robot in
[#29159](https://github.com/google-gemini/gemini-cli/pull/29159)
- fix(core): sanitize and remove hardcoded Google CrUX API key in
chrome-devtools-mcp by @amelidev in
[#29158](https://github.com/google-gemini/gemini-cli/pull/29158)
- fix(extensions): prompt for consent on environment changes and sanitize
runtime-altering environment variables by @amelidev in
[#28863](https://github.com/google-gemini/gemini-cli/pull/28863)
- fix(core): enhance workspace path boundary checks and symlink resolution in
command safety and file discovery by @jesussamuel-byte in
[#29170](https://github.com/google-gemini/gemini-cli/pull/29170)
- fix(config): enforce strict permission and ownership checks on system-wide
configuration paths by @jesussamuel-byte in
[#29115](https://github.com/google-gemini/gemini-cli/pull/29115)
- fix(core): mitigate NTFS 8.3 short name (SFN) path by @urielefrenvirtusa in
[#29116](https://github.com/google-gemini/gemini-cli/pull/29116)
- fix(cli): isolate settings directory in sandbox containers by
@jvargassanchez-dot in
[#29216](https://github.com/google-gemini/gemini-cli/pull/29216)
- fix(core): enforce envelope metadata provenance for untrusted tool outputs by
@luisfelipe-alt in
[#29215](https://github.com/google-gemini/gemini-cli/pull/29215)
**Full Changelog**:
https://github.com/google-gemini/gemini-cli/compare/v0.59.0...v0.60.0
|