| # Latest stable release: v0.60.0 |
|
|
| Released: September 15, 2026 |
|
|
| For most users, our latest stable release is the recommended release. Install |
| the latest stable version with: |
|
|
| ``` |
| npm install -g @google/gemini-cli |
| ``` |
|
|
| ## Highlights |
|
|
| - **Extension Consent & Isolation:** Introduced explicit prompting for user |
| consent on environment changes requested by extensions, along with |
| sanitization of runtime-altering environment variables to ensure secure |
| execution environments. |
| - **Sandbox & Directory Hardening:** Isolated the settings directory and |
| temporary directories within sandbox containers, including specific path |
| isolation enhancements for the macOS Seatbelt sandbox. |
| - **Robust Boundary & Path Resolution:** Hardened workspace boundary validation, |
| symlink resolution, and NTFS 8.3 short name (SFN) path mitigation across |
| command safety and file discovery utilities. |
| - **Enhanced API & Connection Security:** Implemented strict RFC 9207 issuer |
| identification in the Model Context Protocol (MCP) OAuth flow, along with |
| improved destination validation and connection routing inside web fetch |
| utilities. |
|
|
| ## What's Changed |
|
|
| - fix(core): improve destination validation and connection routing in web fetch |
| utilities by @diegogodinezr in |
| [#29120](https://github.com/google-gemini/gemini-cli/pull/29120) |
| - fix(core): enforce RFC 9207 issuer identification in MCP OAuth flow by |
| @jvargassanchez-dot in |
| [#29117](https://github.com/google-gemini/gemini-cli/pull/29117) |
| - chore(release): bump version to 0.60.0-nightly.20260901.g0bd1d4397 by |
| @gemini-cli-robot in |
| [#29162](https://github.com/google-gemini/gemini-cli/pull/29162) |
| - Changelog for v0.58.0 by @gemini-cli-robot in |
| [#29161](https://github.com/google-gemini/gemini-cli/pull/29161) |
| - fix(cli): isolate temporary directory for macOS Seatbelt sandbox by |
| @jvargassanchez-dot in |
| [#29171](https://github.com/google-gemini/gemini-cli/pull/29171) |
| - feat(extensions): harden path resolution and boundary validation in extension |
| loader by @diegogodinezr in |
| [#29169](https://github.com/google-gemini/gemini-cli/pull/29169) |
| - Changelog for v0.59.0-preview.0 by @gemini-cli-robot in |
| [#29159](https://github.com/google-gemini/gemini-cli/pull/29159) |
| - fix(core): sanitize and remove hardcoded Google CrUX API key in |
| chrome-devtools-mcp by @amelidev in |
| [#29158](https://github.com/google-gemini/gemini-cli/pull/29158) |
| - fix(extensions): prompt for consent on environment changes and sanitize |
| runtime-altering environment variables by @amelidev in |
| [#28863](https://github.com/google-gemini/gemini-cli/pull/28863) |
| - fix(core): enhance workspace path boundary checks and symlink resolution in |
| command safety and file discovery by @jesussamuel-byte in |
| [#29170](https://github.com/google-gemini/gemini-cli/pull/29170) |
| - fix(config): enforce strict permission and ownership checks on system-wide |
| configuration paths by @jesussamuel-byte in |
| [#29115](https://github.com/google-gemini/gemini-cli/pull/29115) |
| - fix(core): mitigate NTFS 8.3 short name (SFN) path by @urielefrenvirtusa in |
| [#29116](https://github.com/google-gemini/gemini-cli/pull/29116) |
| - fix(cli): isolate settings directory in sandbox containers by |
| @jvargassanchez-dot in |
| [#29216](https://github.com/google-gemini/gemini-cli/pull/29216) |
| - fix(core): enforce envelope metadata provenance for untrusted tool outputs by |
| @luisfelipe-alt in |
| [#29215](https://github.com/google-gemini/gemini-cli/pull/29215) |
|
|
| **Full Changelog**: |
| https://github.com/google-gemini/gemini-cli/compare/v0.59.0...v0.60.0 |
|
|
