Changelog
Gemini CLI
Googles KI-Assistent für das Terminal
Aktuell geprüft
Zuletzt aus offizieller Quelle geprüft:
Offizielle Changelog-Quelle öffnenDie Erfassung aus offiziellen Quellen ist begrenzt. Ältere Releases können fehlen. Diese Seite beansprucht keine vollständige Versionshistorie.
Versionshinweise ohne deutsche Übersetzung stehen im englischen Original.
Neueste Releases (67)
v0.67.0Neu
4. November 2026
- •feat(cli): bridge the IDE companion into container sandboxes over exec stdio (#29858)
- •fix(core): prevent duplicate agent loading when workspace is home directory (#27692) (#29847)
- •fix(ide): exclude IDE settings and GEMINI.md files from open file con text (#29848)
- •fix(core): scope untrusted flag checks to external output and remember approved flags (#29833)
- •fix(a2a-server): mount express.json() before A2A SDK route registration (#29850)
- •fix(core): adhere to RFC 9110 token rules when splitting custom headers (#29865)
- •fix(core): respect read-only files and hard links in atomic writeTextFile (#29749)
- •fix(a2a-server,core): preserve extended token usage metadata and align per-turn reporting (#29834)
Mehr anzeigen (4)Weniger anzeigen
- •fix(core): ensure all model turns with function calls receive thought signatures (#29828)
- •fix(cli): handle termination signals and prevent tool execution after cancellation in non-interactive mode (#29849)
- •fix(cli): preserve ${VAR} placeholders during deprecated settings migration (#29867)
- •fix(cli): stop continuation stream processing and auto-nudge after request cancellation (#29868)
v0.66.0
27. Oktober 2026
- •Update ROADMAP.md to no longer reference outdated 2025 roadmap (#29723)
- •fix(ui): implement synchronized output and isolate spinner rendering (#29725)
- •fix(ui): fix debug console height calculation and terminalBuffer flickering (#29695)
- •fix(cli): prevent right-hand border bleed in scrollable tool containers (#29742)
- •refactor(core,cli): emit tool call groups from the scheduler and drop the UI lookahead (#29736)
- •fix(core): format and quote Windows diff command arguments in openDiff (#29753)
- •fix(cli): round before selecting units in formatDuration (#29766)
- •fix(core): disable interactive credential and SSH prompts in getSafeGitEnv (#29760)
Mehr anzeigen (4)Weniger anzeigen
v0.65.0
20. Oktober 2026
- •fix(cli): enforce read-only workspace settings in untrusted folders (#29583)
- •fix(core): avoid duplicate tool response turns when resuming sessions (#29618)
- •fix(core): prevent deletion of resumed session history on quick exit (#29198) (#29584)
- •fix(core): align OAuth callback iss parameter validation with RFC 9207 metadata (#29616)
- •fix(cli): prevent unnecessary terminal clears and scroll resets when expanding with Ctrl+O (#29640)
- •fix(ci): add missing loop in unassign-inactive-assignees workflow (#29609)
- •fix(core): enforce terminal user turn invariant and normalize request contents (#29612)
- •
feat(telemetry): support custom OTLP headers in telemetry configuration(#29641)
Mehr anzeigen (4)Weniger anzeigen
- •fix(auth): prevent infinite verification and OAuth retry loops (#29655)
- •fix(cli): handle JSON parse and response stream errors in fetchJson (#29658)
- •fix(core): preserve line terminators in truncateString (#29673)
- •fix(vscode-ide-companion): make IdeServer.stop() resolve while MCP sessions are open (#29674)
v0.64.0
13. Oktober 2026
- •refactor(a2a-server): implement V1 to V2 settings migration logic (#29450)
- •fix(acp): bridge PromptResponse.usage and emit usage_update notifications (#29389) (#29549)
- •fix(cli): propagate resolved folder trust state in headless mode (#29031) (#29528)
- •fix(cli): prevent CPU hang and quote swallowing on @ within code (#29434) (#29557)
- •fix(core): serialize file tool operations and make writes atomic (#29078) (#29499)
- •fix(core): implement append-only delta patching and bounded history windowing in ChatRecordingService (#29568)
- •fix(cli): persist state atomically and recover from backup on corruption (#29558)
- •fix(cli): ensure Ctrl+C emergency abort reaches cancellation handler during active operations (#29586)
Mehr anzeigen (5)Weniger anzeigen
- •fix(cli): resolve @file:line references and prevent ghost text wrap hang (#29581)
- •fix(ui): ensure Windows ConPTY forwards IME cursor position (#29560)
- •fix(cli): retry directory removal on Windows locking errors during extension updates (#29540)
- •fix(acp): resolve session by exact id and handle listener cleanup on session failure (#29580)
- •fix(cli): preserve scroll position and partition pending height budget (#29520)
v0.63.0
6. Oktober 2026
- •fix(cli): display retry progress indicator during connection recovery (#28340) (#29468)
- •fix(cli): distinguish missing MCP enablement config from malformed JSON (#29446)
- •fix(cli): restore paused stdin after capability detection (#29487)
- •fix(core): bound tool output size and optimize memory lifecycle in long-running agent loops (#29451)
- •fix(core): remove invalid diff.external override (#29467)
- •fix(core): clean up temporary directory when background shell execution exits (#29437)
- •fix(acp): resolve session before config initialization and avoid same-minute filename collisions (#29463)
- •fix(core): align policy redirection gates, path validation, and workflow parsing (#29506)
Mehr anzeigen (3)Weniger anzeigen
v0.62.0
29. September 2026
- •fix(a2a-server): add early return on unsupported store in tasks metadata endpoint (#29334)
- •fix(core,acp): format MCP tool call titles as structured signatures and segregate explanations (#29341)
- •fix(core): retain oauth refresh token on refresh and make credential deletion idempotent (#29339)
- •fix(ui): guard against negative layout dimensions in border rendering (#29347)
- •test(integration): deflake run_shell_command and file-system-interactive tests (#29185)
- •fix(core): improve PTY file descriptor cleanup and execution lifecycle management (#29340)
- •fix(core): synchronize ConPTY process exit lifecycle and harden PTY output finalization (#29379)
- •fix(cli): suppress uncaught AbortError logs during request cancellation (#29343)
Mehr anzeigen (3)Weniger anzeigen
v0.61.0
24. September 2026
- •fix(core): preserve explicit versioned Flash model IDs (#29252)
- •fix(core): prevent indirect prompt injection via build file modifications and untrusted flags (#29250)
- •fix(sandbox): harden filesystem boundaries and isolate runtime state (#29214)
- •fix(core): ensure AgentLoopContext properties are preserved across object spread (#29335)
v0.60.0
15. September 2026
- •fix(core): improve destination validation and connection routing in web fetch utilities (#29120)
- •fix(core): enforce RFC 9207 issuer identification in MCP OAuth flow (#29117)
- •fix(cli): isolate temporary directory for macOS Seatbelt sandbox (#29171)
- •feat(extensions): harden path resolution and boundary validation in extension loader (#29169)
- •fix(core): sanitize and remove hardcoded Google CrUX API key in chrome-devtools-mcp (#29158)
- •fix(extensions): prompt for consent on environment changes and sanitize runtime-altering environment variables (#28863)
- •fix(core): enhance workspace path boundary checks and symlink resolution in command safety and file discovery (#29170)
- •fix(config): enforce strict permission and ownership checks on system-wide configuration paths (#29115)
Mehr anzeigen (4)Weniger anzeigen
v0.58.0
1. September 2026
- •fix(core): ensure consistent symlink evaluation in ignore path handling (#28915)
- •refactor(core): remove eslint-disable and type-asserts from shellExecutionService (#28862)
- •fix(sandbox): isolate Docker and container runtime sockets and binaries in macOS Seatbelt (#28935)
- •fix(a2a-server): clear stale cancellation error on new message turns (#28940)
- •fix(core): declare top-level safety checkers in write policy configuration (#28961)
- •(FIX) history rollback and retry nudge optimizations (#28934)
v0.57.0
25. August 2026
- •fix(core): dynamically resolve Cloud Workstations proxy redirect URI for OAuth flows (#28688)
- •fix(core): resolve swallowed directory mismatch in IDE connections (#28729)
- •Feat/eval validate (#28344)
- •feat(evals): add tool call formatter and integrate failure summaries (#28305)
- •test(e2e): stabilize file-system-interactive test on slow runners (#28793)
- •fix(core): implement context-aware silent retries and availability TTL for capacity errors (#28761) (#28790)
- •fix(core): rollback entire multi-turn request on cancellation or abort (#28801)
- •fix(core): normalize git environment and resolve workspace state mismatch (#28792)
Mehr anzeigen (6)Weniger anzeigen
- •[SSR Agent] Issue Fix (19826): Migrate process.env to vi.stubEnv in a2a-server tests (#28811)
- •[SSR Agent] Issue Fix (21911): Add composite flag to packages/cli tsconfig (#28813)
- •[SSR Agent] Issue Fix (26120): Clarify privacy notice wording and selection options (#28820)
- •[SSR Agent] Issue Fix (21919): Fix TypeScript strict-null errors in integration tests (#28814)
- •[SSR Agent] Issue Fix (21477): Prevent indefinite TUI hang by adding execution timeouts (#28812)
- •[SSR Agent] Issue Fix (19239): Update /clear command docs to include context reset (#28847)
v0.55.1
11. August 2026
- •fix/verify release npm ci ignore scripts (#28116)
- •fix(ci): prevent workspace binary shadowing in release verification (#28132)
- •Feat/tool registry discovery (#28113)
- •fix(ci): prevent bad NPM releases and promote job crashes (#28147)
- •Fix no_proxy test (#28131)
- •Vertex base url update (#28145)
- •fix(security): enforce case-insensitive sensitive path blocklist and vscode hitl (#27966)
- •fix(core-tools): resolve defensive path resolution for at-reference files and fix macOS tests (#28053)
Mehr anzeigen (5)Weniger anzeigen
- •feat(caretaker): implement Cloud Run webhook ingestion service (#28015)
- •fix(core): resolve symbolic link directory escape in memory import processor (#28233)
- •feat(caretaker): egress cloud run service skeleton (#28167)
- •fix(sandbox): make ~/.gitconfig read-only in the macOS sandbox (#28221)
- •fix(core): preserve escape sequences in string literals for modern models (#28299)
v0.54.0
6. August 2026
- •fix(caretaker): sanitize and wrap issue title in untrusted_context (#28352)
- •chore(caretaker): update vitest to v3.2.4 and add package-lock.json files (#28409)
- •fix(core): rotate session ID on model fallback to prevent stateful API errors (#28469)
- •feat(caretaker-triage): post comment before auto-closing issues (#28411)
- •fix(core): enforce HTTPS for GoogleCredentialsAuthProvider to prevent cleartext leakage (#28517)
- •fix(core): filter out thought parts from getHistoryTurns when context management is disabled (#28509)
- •fix(a2a-server): normalize CRLF line endings to LF in getProposedContent (#28531)
- •fix(core): enforce explicit tag length and validation in file keychain (#28523)
Mehr anzeigen (3)Weniger anzeigen
- •feat(pr-generator-db): implement Firestore concurrency dual-locking and test ingestion utilities (#28432)
- •feat(pr-generator-agent): implement Antigravity agent runner and prompt templates … (#28434)
- •fix(core): skip merged function-response turns when finding the active loop (#28565)
v0.53.0
28. Juli 2026
- •fix(core,a2a): group cancelled tool responses and coalesce consecutive roles to prevent 400 Bad Request (#28407)
- •feat(caretaker-triage): implement LLM triage orchestrator and container build (#28345)
- •refactor(cli): align macOS permissive Seatbelt profiles with deny-default model (#28424)
- •fix(core): mitigate infinite ReAct loops and prompt injection loops (#28429)
- •fix(a2a-server): enforce workspace trust and task isolation to prevent RCE (#28470)
- •fix(core): sequentially verify cached credentials and restore GOOGLE_APPLICATION_CREDENTIALS fallback (#28472)
- •feat(evals): add eval coverage report command (#28169)
v0.52.0
22. Juli 2026
- •Refactor: exclude transient CI configuration files from workspace context (#28216)
- •feat(caretaker-triage): add triage worker core foundational modules (#28163)
- •feat(caretaker-egress): implement octokit github action handler for egress service (#28303)
- •fix(core-tools): bypass LLM correction for JSON and IPYNB files in write_file and replace (#28223)
- •fix(core): use unambiguous previous intent label in fallback summary (#28343)
- •feat(caretaker-triage): implement main worker execution loop and egress action publisher (#28306)
- •fix(privacy): show a clear message when the account has no Code Assist tier (#28304)
- •fix(core): enrich shared project quota limit errors with setup hint (#28391)
v0.51.0
16. Juli 2026
- •Fix no_proxy test (#28131)
- •Vertex base url update (#28145)
- •fix(security): enforce case-insensitive sensitive path blocklist and vscode hitl (#27966)
- •fix(core-tools): resolve defensive path resolution for at-reference files and fix macOS tests (#28053)
- •feat(caretaker): implement Cloud Run webhook ingestion service (#28015)
- •fix(core): resolve symbolic link directory escape in memory import processor (#28233)
- •feat(caretaker): egress cloud run service skeleton (#28167)
- •fix(sandbox): make ~/.gitconfig read-only in the macOS sandbox (#28221)
v0.49.0
25. Juni 2026
- •refactor(core): standardize tool output formatting (#27772)
- •ci: update workflow logging and policy configurations (#27853)
- •fix(core): Ensure zero-quota limits fail fast to prevent retry loop hang (#27698)
- •fix(core): handle multi-line escaped quotes in stripShellWrapper (#27467)
- •fix(cli): prevent path traversal vulnerabilities during skill install… (#27767)
- •Fix/pending tools and trust overrides (#27854)
- •ci: use internal environment for scheduled nightly releases (#27865) (#27939)
- •feat(core): Support GDC air-gapped Service Identity after auth library update (#27956)
Mehr anzeigen (5)Weniger anzeigen
- •fix(cli): handle tmux false positive background detection (#27572)
- •Add static eval source analyzer (#27631)
- •fix(config): migrate coreTools setting to tools.core (#27947)
- •fix(core-tools): resolve defensive path resolution for at-reference files (#27943)
- •Revert "fix(core-tools): resolve defensive path resolution for at-reference files" (#27992)
v0.47.0
18. Juni 2026
- •Respect backend definitions for 3.5 flash and Update auto mode to use 3.5 flash when the flag is enabled. (#27645)
- •fix(policy): add EBUSY fallback and TOML parse recovery (#19919) (#21541)
- •update the max amount of times the Antigravity transition banner can be displayed. (#27676)
- •chore: remove experimental text from browser agent docs (#27746)
- •fix(core): implement atomic update in MCP tool discovery (#27619)
- •Vertex ai model mapping fix (#27749)
- •Add documentation and migration commands for Antigravity CLI (#27765)
- •Avoid persisting empty resume sessions (#27770)
v0.46.0
10. Juni 2026
- •fix(core): harden PTY resize against native crashes (#27496)
- •fix(cli): prevent spam loop when preferredEditor is invalid (#25324)
- •Adding quote (#27571)
- •Transition to flash GA model when experiment flag is present. (#27570)
- •chore(ci): add optimized PR size labeler and batch workflows (#27616)
- •fix(ci): use pull_request_target trigger to grant write access on fork PRs (#27637)
v0.45.0
3. Juni 2026
- •fix(cli): prevent Termux relaunch and resize remount loops (#27110)
- •Feat/a2a expose usage metadata (#27288)
- •feat(context): Complete simplification work. (#27345)
- •fix(core): force update_topic tool to execute sequentially (#27357)
- •Revert "fix(core): prevent SIGHUP kills in PTY environments" (#27401)
- •fix(cli): filter internal session context from history during resumption (#27391)
- •Update default auto routing (#27071)
- •fix(core): bypass routing classifiers to prevent orphaned function response errors (#27389)
v0.44.0
27. Mai 2026
- •Refactor: Eliminate
no-unsafe-returnsuppressions via strict type validation (#20668) - •feat(core): change agent registration to first-wins and prioritize project (#26953)
- •feat(cli): merge Auto modes into a single Auto mode (#26714)
- •fix(core): preserve OAuth refresh tokens during rotation and retrieval (#26924)
- •fix(cli): allow keychain auth for --list-sessions and non-interactive mode (#26921)
- •fix(core): handle EISDIR on virtual drives in memory discovery (#26985)
- •fix(cli): auto-approve shell redirections in AUTO_EDIT mode (#27003)
- •ci: suppress bot comments during standard triage maintenance (#27006)
v0.43.0
22. Mai 2026
- •feat(core): steer model to use edit tool for surgical edits, fix a typo (#26480)
- •docs: clarify Auto Memory proposes memory updates and skills (#26527)
- •fix(core): reject numeric project IDs in GOOGLE_CLOUD_PROJECT (#24695) (#26532)
- •fix(core): remove unsafe type assertion suppressions in error utils (#19881)
- •fix(core): allow redirection in YOLO and AUTO_EDIT modes without sandboxing (#26542)
- •ci(release): build and attach unsigned macOS binaries to releases (#26462)
- •fix(core): Fix chat corruption bug in context manager. (#26534)
- •fix(cli): provide JSON output for AgentExecutionStopped in non-interactive mode (#26504)
Mehr anzeigen (7)Weniger anzeigen
- •feat(evals): add shell command safety evals (#26528)
- •fix(core): handle invalid custom plans directory gracefully (#26560)
- •fix(acp): move tool explanation from thought stream to tool call content (#26554)
- •fix(a2a-server): Resolve race condition in tool completion waiting (#26568)
- •fix(cli): randomize sandbox container names (#26014)
- •fix(core): Fix hysteresis in async context management pipelines. (#26452)
- •Tighten private Auto Memory patch allowlist (#26535)
Zeige 30 von 67