Changelog
Gemini CLI
Google AI assistant for the terminal
Recently checked
Last checked against an official source:
Open official changelog sourceCollection from official sources is limited. Earlier releases may be missing. This page does not claim a complete version history.
Latest Releases (67)
v0.67.0New
November 4, 2026
- •feat(cli): bridge the IDE companion into container sandboxes over exec stdio (#29858)
- •fix(core): prevent duplicate agent loading when workspace is home directory (#27692) (#29847)
- •fix(ide): exclude IDE settings and GEMINI.md files from open file con text (#29848)
- •fix(core): scope untrusted flag checks to external output and remember approved flags (#29833)
- •fix(a2a-server): mount express.json() before A2A SDK route registration (#29850)
- •fix(core): adhere to RFC 9110 token rules when splitting custom headers (#29865)
- •fix(core): respect read-only files and hard links in atomic writeTextFile (#29749)
- •fix(a2a-server,core): preserve extended token usage metadata and align per-turn reporting (#29834)
Show more (4)Show less
- •fix(core): ensure all model turns with function calls receive thought signatures (#29828)
- •fix(cli): handle termination signals and prevent tool execution after cancellation in non-interactive mode (#29849)
- •fix(cli): preserve ${VAR} placeholders during deprecated settings migration (#29867)
- •fix(cli): stop continuation stream processing and auto-nudge after request cancellation (#29868)
v0.66.0
October 27, 2026
- •Update ROADMAP.md to no longer reference outdated 2025 roadmap (#29723)
- •fix(ui): implement synchronized output and isolate spinner rendering (#29725)
- •fix(ui): fix debug console height calculation and terminalBuffer flickering (#29695)
- •fix(cli): prevent right-hand border bleed in scrollable tool containers (#29742)
- •refactor(core,cli): emit tool call groups from the scheduler and drop the UI lookahead (#29736)
- •fix(core): format and quote Windows diff command arguments in openDiff (#29753)
- •fix(cli): round before selecting units in formatDuration (#29766)
- •fix(core): disable interactive credential and SSH prompts in getSafeGitEnv (#29760)
Show more (4)Show less
v0.65.0
October 20, 2026
- •fix(cli): enforce read-only workspace settings in untrusted folders (#29583)
- •fix(core): avoid duplicate tool response turns when resuming sessions (#29618)
- •fix(core): prevent deletion of resumed session history on quick exit (#29198) (#29584)
- •fix(core): align OAuth callback iss parameter validation with RFC 9207 metadata (#29616)
- •fix(cli): prevent unnecessary terminal clears and scroll resets when expanding with Ctrl+O (#29640)
- •fix(ci): add missing loop in unassign-inactive-assignees workflow (#29609)
- •fix(core): enforce terminal user turn invariant and normalize request contents (#29612)
- •
feat(telemetry): support custom OTLP headers in telemetry configuration(#29641)
Show more (4)Show less
- •fix(auth): prevent infinite verification and OAuth retry loops (#29655)
- •fix(cli): handle JSON parse and response stream errors in fetchJson (#29658)
- •fix(core): preserve line terminators in truncateString (#29673)
- •fix(vscode-ide-companion): make IdeServer.stop() resolve while MCP sessions are open (#29674)
v0.64.0
October 13, 2026
- •refactor(a2a-server): implement V1 to V2 settings migration logic (#29450)
- •fix(acp): bridge PromptResponse.usage and emit usage_update notifications (#29389) (#29549)
- •fix(cli): propagate resolved folder trust state in headless mode (#29031) (#29528)
- •fix(cli): prevent CPU hang and quote swallowing on @ within code (#29434) (#29557)
- •fix(core): serialize file tool operations and make writes atomic (#29078) (#29499)
- •fix(core): implement append-only delta patching and bounded history windowing in ChatRecordingService (#29568)
- •fix(cli): persist state atomically and recover from backup on corruption (#29558)
- •fix(cli): ensure Ctrl+C emergency abort reaches cancellation handler during active operations (#29586)
Show more (5)Show less
- •fix(cli): resolve @file:line references and prevent ghost text wrap hang (#29581)
- •fix(ui): ensure Windows ConPTY forwards IME cursor position (#29560)
- •fix(cli): retry directory removal on Windows locking errors during extension updates (#29540)
- •fix(acp): resolve session by exact id and handle listener cleanup on session failure (#29580)
- •fix(cli): preserve scroll position and partition pending height budget (#29520)
v0.63.0
October 6, 2026
- •fix(cli): display retry progress indicator during connection recovery (#28340) (#29468)
- •fix(cli): distinguish missing MCP enablement config from malformed JSON (#29446)
- •fix(cli): restore paused stdin after capability detection (#29487)
- •fix(core): bound tool output size and optimize memory lifecycle in long-running agent loops (#29451)
- •fix(core): remove invalid diff.external override (#29467)
- •fix(core): clean up temporary directory when background shell execution exits (#29437)
- •fix(acp): resolve session before config initialization and avoid same-minute filename collisions (#29463)
- •fix(core): align policy redirection gates, path validation, and workflow parsing (#29506)
Show more (3)Show less
v0.62.0
September 29, 2026
- •fix(a2a-server): add early return on unsupported store in tasks metadata endpoint (#29334)
- •fix(core,acp): format MCP tool call titles as structured signatures and segregate explanations (#29341)
- •fix(core): retain oauth refresh token on refresh and make credential deletion idempotent (#29339)
- •fix(ui): guard against negative layout dimensions in border rendering (#29347)
- •test(integration): deflake run_shell_command and file-system-interactive tests (#29185)
- •fix(core): improve PTY file descriptor cleanup and execution lifecycle management (#29340)
- •fix(core): synchronize ConPTY process exit lifecycle and harden PTY output finalization (#29379)
- •fix(cli): suppress uncaught AbortError logs during request cancellation (#29343)
Show more (3)Show less
v0.61.0
September 24, 2026
- •fix(core): preserve explicit versioned Flash model IDs (#29252)
- •fix(core): prevent indirect prompt injection via build file modifications and untrusted flags (#29250)
- •fix(sandbox): harden filesystem boundaries and isolate runtime state (#29214)
- •fix(core): ensure AgentLoopContext properties are preserved across object spread (#29335)
v0.60.0
September 15, 2026
- •fix(core): improve destination validation and connection routing in web fetch utilities (#29120)
- •fix(core): enforce RFC 9207 issuer identification in MCP OAuth flow (#29117)
- •fix(cli): isolate temporary directory for macOS Seatbelt sandbox (#29171)
- •feat(extensions): harden path resolution and boundary validation in extension loader (#29169)
- •fix(core): sanitize and remove hardcoded Google CrUX API key in chrome-devtools-mcp (#29158)
- •fix(extensions): prompt for consent on environment changes and sanitize runtime-altering environment variables (#28863)
- •fix(core): enhance workspace path boundary checks and symlink resolution in command safety and file discovery (#29170)
- •fix(config): enforce strict permission and ownership checks on system-wide configuration paths (#29115)
v0.58.0
September 1, 2026
- •fix(core): ensure consistent symlink evaluation in ignore path handling (#28915)
- •refactor(core): remove eslint-disable and type-asserts from shellExecutionService (#28862)
- •fix(sandbox): isolate Docker and container runtime sockets and binaries in macOS Seatbelt (#28935)
- •fix(a2a-server): clear stale cancellation error on new message turns (#28940)
- •fix(core): declare top-level safety checkers in write policy configuration (#28961)
- •(FIX) history rollback and retry nudge optimizations (#28934)
v0.57.0
August 25, 2026
- •fix(core): dynamically resolve Cloud Workstations proxy redirect URI for OAuth flows (#28688)
- •fix(core): resolve swallowed directory mismatch in IDE connections (#28729)
- •Feat/eval validate (#28344)
- •feat(evals): add tool call formatter and integrate failure summaries (#28305)
- •test(e2e): stabilize file-system-interactive test on slow runners (#28793)
- •fix(core): implement context-aware silent retries and availability TTL for capacity errors (#28761) (#28790)
- •fix(core): rollback entire multi-turn request on cancellation or abort (#28801)
- •fix(core): normalize git environment and resolve workspace state mismatch (#28792)
Show more (6)Show less
- •[SSR Agent] Issue Fix (19826): Migrate process.env to vi.stubEnv in a2a-server tests (#28811)
- •[SSR Agent] Issue Fix (21911): Add composite flag to packages/cli tsconfig (#28813)
- •[SSR Agent] Issue Fix (26120): Clarify privacy notice wording and selection options (#28820)
- •[SSR Agent] Issue Fix (21919): Fix TypeScript strict-null errors in integration tests (#28814)
- •[SSR Agent] Issue Fix (21477): Prevent indefinite TUI hang by adding execution timeouts (#28812)
- •[SSR Agent] Issue Fix (19239): Update /clear command docs to include context reset (#28847)
v0.55.1
August 11, 2026
- •fix/verify release npm ci ignore scripts (#28116)
- •fix(ci): prevent workspace binary shadowing in release verification (#28132)
- •Feat/tool registry discovery (#28113)
- •fix(ci): prevent bad NPM releases and promote job crashes (#28147)
- •Fix no_proxy test (#28131)
- •Vertex base url update (#28145)
- •fix(security): enforce case-insensitive sensitive path blocklist and vscode hitl (#27966)
- •fix(core-tools): resolve defensive path resolution for at-reference files and fix macOS tests (#28053)
Show more (5)Show less
- •feat(caretaker): implement Cloud Run webhook ingestion service (#28015)
- •fix(core): resolve symbolic link directory escape in memory import processor (#28233)
- •feat(caretaker): egress cloud run service skeleton (#28167)
- •fix(sandbox): make ~/.gitconfig read-only in the macOS sandbox (#28221)
- •fix(core): preserve escape sequences in string literals for modern models (#28299)
v0.54.0
August 6, 2026
- •fix(caretaker): sanitize and wrap issue title in untrusted_context (#28352)
- •chore(caretaker): update vitest to v3.2.4 and add package-lock.json files (#28409)
- •fix(core): rotate session ID on model fallback to prevent stateful API errors (#28469)
- •feat(caretaker-triage): post comment before auto-closing issues (#28411)
- •fix(core): enforce HTTPS for GoogleCredentialsAuthProvider to prevent cleartext leakage (#28517)
- •fix(core): filter out thought parts from getHistoryTurns when context management is disabled (#28509)
- •fix(a2a-server): normalize CRLF line endings to LF in getProposedContent (#28531)
- •fix(core): enforce explicit tag length and validation in file keychain (#28523)
Show more (3)Show less
- •feat(pr-generator-db): implement Firestore concurrency dual-locking and test ingestion utilities (#28432)
- •feat(pr-generator-agent): implement Antigravity agent runner and prompt templates … (#28434)
- •fix(core): skip merged function-response turns when finding the active loop (#28565)
v0.53.0
July 28, 2026
- •fix(core,a2a): group cancelled tool responses and coalesce consecutive roles to prevent 400 Bad Request (#28407)
- •feat(caretaker-triage): implement LLM triage orchestrator and container build (#28345)
- •refactor(cli): align macOS permissive Seatbelt profiles with deny-default model (#28424)
- •fix(core): mitigate infinite ReAct loops and prompt injection loops (#28429)
- •fix(a2a-server): enforce workspace trust and task isolation to prevent RCE (#28470)
- •fix(core): sequentially verify cached credentials and restore GOOGLE_APPLICATION_CREDENTIALS fallback (#28472)
- •feat(evals): add eval coverage report command (#28169)
v0.52.0
July 22, 2026
- •Refactor: exclude transient CI configuration files from workspace context (#28216)
- •feat(caretaker-triage): add triage worker core foundational modules (#28163)
- •feat(caretaker-egress): implement octokit github action handler for egress service (#28303)
- •fix(core-tools): bypass LLM correction for JSON and IPYNB files in write_file and replace (#28223)
- •fix(core): use unambiguous previous intent label in fallback summary (#28343)
- •feat(caretaker-triage): implement main worker execution loop and egress action publisher (#28306)
- •fix(privacy): show a clear message when the account has no Code Assist tier (#28304)
- •fix(core): enrich shared project quota limit errors with setup hint (#28391)
v0.51.0
July 16, 2026
- •Fix no_proxy test (#28131)
- •Vertex base url update (#28145)
- •fix(security): enforce case-insensitive sensitive path blocklist and vscode hitl (#27966)
- •fix(core-tools): resolve defensive path resolution for at-reference files and fix macOS tests (#28053)
- •feat(caretaker): implement Cloud Run webhook ingestion service (#28015)
- •fix(core): resolve symbolic link directory escape in memory import processor (#28233)
- •feat(caretaker): egress cloud run service skeleton (#28167)
- •fix(sandbox): make ~/.gitconfig read-only in the macOS sandbox (#28221)
v0.49.0
June 25, 2026
- •refactor(core): standardize tool output formatting (#27772)
- •ci: update workflow logging and policy configurations (#27853)
- •fix(core): Ensure zero-quota limits fail fast to prevent retry loop hang (#27698)
- •fix(core): handle multi-line escaped quotes in stripShellWrapper (#27467)
- •fix(cli): prevent path traversal vulnerabilities during skill install… (#27767)
- •Fix/pending tools and trust overrides (#27854)
- •ci: use internal environment for scheduled nightly releases (#27865) (#27939)
- •feat(core): Support GDC air-gapped Service Identity after auth library update (#27956)
Show more (5)Show less
- •fix(cli): handle tmux false positive background detection (#27572)
- •Add static eval source analyzer (#27631)
- •fix(config): migrate coreTools setting to tools.core (#27947)
- •fix(core-tools): resolve defensive path resolution for at-reference files (#27943)
- •Revert "fix(core-tools): resolve defensive path resolution for at-reference files" (#27992)
v0.47.0
June 18, 2026
- •Respect backend definitions for 3.5 flash and Update auto mode to use 3.5 flash when the flag is enabled. (#27645)
- •fix(policy): add EBUSY fallback and TOML parse recovery (#19919) (#21541)
- •update the max amount of times the Antigravity transition banner can be displayed. (#27676)
- •chore: remove experimental text from browser agent docs (#27746)
- •fix(core): implement atomic update in MCP tool discovery (#27619)
- •Vertex ai model mapping fix (#27749)
- •Add documentation and migration commands for Antigravity CLI (#27765)
- •Avoid persisting empty resume sessions (#27770)
v0.46.0
June 10, 2026
- •fix(core): harden PTY resize against native crashes (#27496)
- •fix(cli): prevent spam loop when preferredEditor is invalid (#25324)
- •Adding quote (#27571)
- •Transition to flash GA model when experiment flag is present. (#27570)
- •chore(ci): add optimized PR size labeler and batch workflows (#27616)
- •fix(ci): use pull_request_target trigger to grant write access on fork PRs (#27637)
v0.45.0
June 3, 2026
- •fix(cli): prevent Termux relaunch and resize remount loops (#27110)
- •Feat/a2a expose usage metadata (#27288)
- •feat(context): Complete simplification work. (#27345)
- •fix(core): force update_topic tool to execute sequentially (#27357)
- •Revert "fix(core): prevent SIGHUP kills in PTY environments" (#27401)
- •fix(cli): filter internal session context from history during resumption (#27391)
- •Update default auto routing (#27071)
- •fix(core): bypass routing classifiers to prevent orphaned function response errors (#27389)
v0.44.0
May 27, 2026
- •Refactor: Eliminate
no-unsafe-returnsuppressions via strict type validation (#20668) - •feat(core): change agent registration to first-wins and prioritize project (#26953)
- •feat(cli): merge Auto modes into a single Auto mode (#26714)
- •fix(core): preserve OAuth refresh tokens during rotation and retrieval (#26924)
- •fix(cli): allow keychain auth for --list-sessions and non-interactive mode (#26921)
- •fix(core): handle EISDIR on virtual drives in memory discovery (#26985)
- •fix(cli): auto-approve shell redirections in AUTO_EDIT mode (#27003)
- •ci: suppress bot comments during standard triage maintenance (#27006)
v0.43.0
May 22, 2026
- •feat(core): steer model to use edit tool for surgical edits, fix a typo (#26480)
- •docs: clarify Auto Memory proposes memory updates and skills (#26527)
- •fix(core): reject numeric project IDs in GOOGLE_CLOUD_PROJECT (#24695) (#26532)
- •fix(core): remove unsafe type assertion suppressions in error utils (#19881)
- •fix(core): allow redirection in YOLO and AUTO_EDIT modes without sandboxing (#26542)
- •ci(release): build and attach unsigned macOS binaries to releases (#26462)
- •fix(core): Fix chat corruption bug in context manager. (#26534)
- •fix(cli): provide JSON output for AgentExecutionStopped in non-interactive mode (#26504)
Show more (7)Show less
- •feat(evals): add shell command safety evals (#26528)
- •fix(core): handle invalid custom plans directory gracefully (#26560)
- •fix(acp): move tool explanation from thought stream to tool call content (#26554)
- •fix(a2a-server): Resolve race condition in tool completion waiting (#26568)
- •fix(cli): randomize sandbox container names (#26014)
- •fix(core): Fix hysteresis in async context management pipelines. (#26452)
- •Tighten private Auto Memory patch allowlist (#26535)
Showing 30 of 67