Back
AI summary
Written by AI from the official notes. Check them for exact details.Gemini CLI 0.60.0 introduces a new feature and includes multiple bug fixes and improvements.
- New feature for hardening path resolution in extension loader
- Improved destination validation in web fetch utilities
- Enhanced workspace path checks and symlink resolution
- Isolated settings directory in sandbox containers
- Sanitized runtime-altering environment variables prompt
Why it matters: Users of Gemini CLI should update to benefit from improved security and functionality.
Full release notes15 changes
What's Changed
- fix(core): improve destination validation and connection routing in web fetch utilities
- fix(core): enforce RFC 9207 issuer identification in MCP OAuth flow
- chore(release): bump version to 0.60.0-nightly.20260901.g0bd1d4397
- Changelog for v0.58.0
- fix(cli): isolate temporary directory for macOS Seatbelt sandbox
- feat(extensions): harden path resolution and boundary validation in extension loader
- Changelog for v0.59.0-preview.0
- fix(core): sanitize and remove hardcoded Google CrUX API key in chrome-devtools-mcp
- fix(extensions): prompt for consent on environment changes and sanitize runtime-altering environment variables
- fix(core): enhance workspace path boundary checks and symlink resolution in command safety and file discovery
- fix(config): enforce strict permission and ownership checks on system-wide configuration paths
- fix(core): mitigate NTFS 8.3 short name (SFN) path
- fix(cli): isolate settings directory in sandbox containers
- fix(core): enforce envelope metadata provenance for untrusted tool outputs
New Contributors
- @urielefrenvirtusa made their first contribution in https://github.com/google-gemini/gemini-cli/pull/29116
Full Changelog: https://github.com/google-gemini/gemini-cli/compare/v0.59.0...v0.60.0