Invite a friend, get 1 month of Pro freeHow it works
AgentVera
EN
Download

Gemini CLI changelog

The last 25 stable releases of Gemini CLI, newest first, with the lines that remove, rename or deprecate something pulled out on top. Taken from the GitHub releases every morning.

Latest: 0.66.0 · October 27, 2026 GitHub → About Gemini CLI →

Breaking changes and deprecations

None of these releases removes, renames or deprecates a flag, command or setting.

Latest releases

  1. 0.66.0

    • Update ROADMAP.md to no longer reference outdated 2025 roadmap
    • Changelog for v0.65.0-preview.0
    • chore(release): bump version to 0.66.0-nightly.20261013.g204db94ae
    • Changelog for v0.64.0
    • fix(ui): implement synchronized output and isolate spinner rendering
    • fix(ui): fix debug console height calculation and terminalBuffer flickering
    • fix(cli): prevent right-hand border bleed in scrollable tool containers
    • refactor(core,cli): emit tool call groups from the scheduler and drop the UI lookahead
    • fix(core): format and quote Windows diff command arguments in openDiff
    • fix(cli): round before selecting units in formatDuration
    16 more on GitHub →

  2. 0.65.0

    • fix(cli): enforce read-only workspace settings in untrusted folders
    • fix(core): avoid duplicate tool response turns when resuming sessions
    • fix(core): prevent deletion of resumed session history on quick exit
    • Changelog for v0.64.0-preview.0
    • Changelog for v0.63.0
    • fix(core): align OAuth callback iss parameter validation with RFC 9207 metadata
    • fix(cli): prevent unnecessary terminal clears and scroll resets when expanding with Ctrl+O
    • chore(release): bump version to 0.65.0-nightly.20261006.gfb972b2f8
    • fix(ci): add missing loop in unassign-inactive-assignees workflow
    • fix(core): enforce terminal user turn invariant and normalize request contents
    17 more on GitHub →

  3. 0.64.0

    • refactor(a2a-server): implement V1 to V2 settings migration logic
    • fix(acp): bridge PromptResponse.usage and emit usage_update notifications
    • Changelog for v0.63.0-preview.0
    • fix(cli): propagate resolved folder trust state in headless mode
    • chore(release): bump version to 0.64.0-nightly.20260929.gd75234cae
    • fix(cli): prevent CPU hang and quote swallowing on @ within code
    • fix(core): serialize file tool operations and make writes atomic
    • fix(core): implement append-only delta patching and bounded history windowing in ChatRecordingService
    • fix(cli): persist state atomically and recover from backup on corruption
    • fix(cli): ensure Ctrl+C emergency abort reaches cancellation handler during active operations
    7 more on GitHub →

  4. 0.63.0

    • fix(cli): display retry progress indicator during connection recovery
    • Changelog for v0.61.0-preview.1
    • Changelog for v0.61.0
    • fix(cli): distinguish missing MCP enablement config from malformed JSON
    • fix(cli): restore paused stdin after capability detection
    • fix(core): bound tool output size and optimize memory lifecycle in long-running agent loops
    • fix(core): remove invalid diff.external override
    • chore(release): bump version to 0.63.0-nightly.20260923.gf50ba8608
    • Changelog for v0.62.0-preview.0
    • fix(core): clean up temporary directory when background shell execution exits
    5 more on GitHub →

  5. 0.62.0

    • fix(a2a-server): add early return on unsupported store in tasks metadata endpoint
    • Changelog for v0.61.0-preview.0
    • Changelog for v0.60.0
    • fix(core,acp): format MCP tool call titles as structured signatures and segregate explanations
    • chore(release): bump version to 0.62.0-nightly.20260915.gae28844fb
    • fix(core): retain oauth refresh token on refresh and make credential deletion idempotent
    • fix(ui): guard against negative layout dimensions in border rendering
    • test(integration): deflake run_shell_command and file-system-interactive tests
    • fix(core): improve PTY file descriptor cleanup and execution lifecycle management
    • chore/release: bump version to 0.62.0-nightly.20260918.g9450ade79
    9 more on GitHub →

  6. 0.61.0

    • Changelog for v0.60.0-preview.0
    • chore(release): bump version to 0.61.0-nightly.20260908.gc647533d6
    • Changelog for v0.59.0
    • fix(core): preserve explicit versioned Flash model IDs
    • fix(core): prevent indirect prompt injection via build file modifications and untrusted flags
    • fix(sandbox): harden filesystem boundaries and isolate runtime state
    • fix(core): ensure AgentLoopContext properties are preserved across object spread
    • fix(patch): cherry-pick 62364cb to release/v0.61.0-preview.0-pr-29443 to patch version v0.61.0-preview.0 and create version 0.61.0-preview.1
    Release notes →

  7. 0.60.0

    • fix(core): improve destination validation and connection routing in web fetch utilities
    • fix(core): enforce RFC 9207 issuer identification in MCP OAuth flow
    • chore(release): bump version to 0.60.0-nightly.20260901.g0bd1d4397
    • Changelog for v0.58.0
    • fix(cli): isolate temporary directory for macOS Seatbelt sandbox
    • feat(extensions): harden path resolution and boundary validation in extension loader
    • Changelog for v0.59.0-preview.0
    • fix(core): sanitize and remove hardcoded Google CrUX API key in chrome-devtools-mcp
    • fix(extensions): prompt for consent on environment changes and sanitize runtime-altering environment variables
    • fix(core): enhance workspace path boundary checks and symlink resolution in command safety and file discovery
    4 more on GitHub →

  8. 0.59.0

    • Changelog for v0.58.0-preview.0
    • chore(release): bump version to 0.59.0-nightly.20260825.g812f7a2bc
    • fix(core): prevent SSRF in MCP OAuth metadata discovery and authentication
    • fix(core): enforce fail-closed workspace trust and filter mcpServers in restricted mode
    Release notes →

  9. 0.58.0

    • Changelog for v0.57.0-preview.0
    • fix(core): ensure consistent symlink evaluation in ignore path handling
    • refactor(core): remove eslint-disable and type-asserts from shellExecutionService
    • fix(sandbox): isolate Docker and container runtime sockets and binaries in macOS Seatbelt
    • fix(a2a-server): clear stale cancellation error on new message turns
    • fix(core): declare top-level safety checkers in write policy configuration
    • (FIX) history rollback and retry nudge optimizations
    Release notes →

  10. 0.57.0

    • fix(core): dynamically resolve Cloud Workstations proxy redirect URI for OAuth flows
    • fix(core): resolve swallowed directory mismatch in IDE connections
    • Feat/eval validate
    • feat(evals): add tool call formatter and integrate failure summaries
    • Changelog for v0.55.1
    • test(e2e): stabilize file-system-interactive test on slow runners
    • fix(core): implement context-aware silent retries and availability TTL for capacity errors
    • fix(core): rollback entire multi-turn request on cancellation or abort
    • fix(core): normalize git environment and resolve workspace state mismatch
    • [SSR Agent] Issue Fix (19826): Migrate process.env to vi.stubEnv in a2a-server tests
    14 more on GitHub →

  11. 0.56.0

    Release notes →

  12. 0.55.1

    • fix/verify release npm ci ignore scripts
    • fix(ci): prevent workspace binary shadowing in release verification
    • Feat/tool registry discovery
    • fix(ci): prevent bad NPM releases and promote job crashes
    • Changelog for v0.50.0-preview.1
    • Fix no_proxy test
    • chore(release): bump version to 0.51.0-nightly.20260625.g3fbf93e26
    • Vertex base url update
    • fix(security): enforce case-insensitive sensitive path blocklist and vscode hitl
    • fix(core-tools): resolve defensive path resolution for at-reference files and fix macOS tests
    76 more on GitHub →

  13. 0.54.4

    • fix(patch): cherry-pick 56f9688 to release/v0.54.0-pr-28700 to patch version v0.54.0 and create version 0.54.1
    • chore: bump version to 0.54.2
    • Fix/revert version bump
    Release notes →

  14. 0.54.0

    • Changelog for v0.53.0-preview.0
    • Changelog for v0.52.0
    • chore(release): bump version to 0.54.0-nightly.20260722.gf743ab579
    • fix(caretaker): sanitize and wrap issue title in untrusted_context
    • chore(caretaker): update vitest to v3.2.4 and add package-lock.json files
    • fix(core): rotate session ID on model fallback to prevent stateful API errors
    • feat(caretaker-triage): post comment before auto-closing issues
    • fix(core): enforce HTTPS for GoogleCredentialsAuthProvider to prevent cleartext leakage
    • fix(core): filter out thought parts from getHistoryTurns when context management is disabled
    • fix(a2a-server): normalize CRLF line endings to LF in getProposedContent
    6 more on GitHub →

  15. 0.53.1

    • fix(patch): cherry-pick f47d6c6 to release/v0.53.0-pr-28566 [CONFLICTS]
    Release notes →

  16. 0.53.0

    • fix(core,a2a): group cancelled tool responses and coalesce consecutive roles to prevent 400 Bad Request
    • feat(caretaker-triage): implement LLM triage orchestrator and container build
    • refactor(cli): align macOS permissive Seatbelt profiles with deny-default model
    • fix(core): mitigate infinite ReAct loops and prompt injection loops
    • fix(a2a-server): enforce workspace trust and task isolation to prevent RCE
    • fix(core): sequentially verify cached credentials and restore GOOGLE_APPLICATION_CREDENTIALS fallback
    • feat(evals): add eval coverage report command
    Release notes →

  17. 0.52.0

    • Refactor: exclude transient CI configuration files from workspace context
    • feat(caretaker-triage): add triage worker core foundational modules
    • feat(caretaker-egress): implement octokit github action handler for egress service
    • chore(release): bump version to 0.52.0-nightly.20260707.g27a3da3e8
    • Changelog for v0.51.0-preview.0
    • Changelog for v0.50.0
    • fix(core-tools): bypass LLM correction for JSON and IPYNB files in write_file and replace
    • fix(core): use unambiguous previous intent label in fallback summary
    • feat(caretaker-triage): implement main worker execution loop and egress action publisher
    • fix(privacy): show a clear message when the account has no Code Assist tier
    5 more on GitHub →

  18. 0.51.0

    • Changelog for v0.50.0-preview.1
    • Fix no_proxy test
    • chore(release): bump version to 0.51.0-nightly.20260625.g3fbf93e26
    • Vertex base url update
    • fix(security): enforce case-insensitive sensitive path blocklist and vscode hitl
    • fix(core-tools): resolve defensive path resolution for at-reference files and fix macOS tests
    • feat(caretaker): implement Cloud Run webhook ingestion service
    • fix(core): resolve symbolic link directory escape in memory import processor
    • feat(caretaker): egress cloud run service skeleton
    • fix(sandbox): make ~/.gitconfig read-only in the macOS sandbox
    2 more on GitHub →

  19. 0.50.0

    • fix/verify release npm ci ignore scripts
    • fix(ci): prevent workspace binary shadowing in release verification
    • Feat/tool registry discovery
    • fix(ci): prevent bad NPM releases and promote job crashes
    Release notes →

  20. 0.49.0

    • chore(release): bump version to 0.48.0-nightly.20260609.g3a13b8eeb
    • ci(dependabot): enable cooldown period for npm packages
    • refactor(core): standardize tool output formatting
    • ci: update workflow logging and policy configurations
    • fix(core): Ensure zero-quota limits fail fast to prevent retry loop hang
    • fix(core): handle multi-line escaped quotes in stripShellWrapper
    • fix(cli): prevent path traversal vulnerabilities during skill install…
    • Fix/pending tools and trust overrides
    • ci: use internal environment for scheduled nightly releases
    • feat(core): Support GDC air-gapped Service Identity after auth library update
    14 more on GitHub →

  21. 0.47.0

    • chore(release): bump version to 0.47.0-nightly.20260602.gcfcecebe8
    • Changelog for v0.46.0-preview.0
    • Respect backend definitions for 3.5 flash and Update auto mode to use 3.5 flash when the flag is enabled.
    • fix(policy): add EBUSY fallback and TOML parse recovery
    • Changelog for v0.45.0
    • update the max amount of times the Antigravity transition banner can be displayed.
    • chore: remove experimental text from browser agent docs
    • fix(core): implement atomic update in MCP tool discovery
    • Vertex ai model mapping fix
    • Add documentation and migration commands for Antigravity CLI
    1 more on GitHub →

  22. 0.46.0

    • fix(core): harden PTY resize against native crashes
    • Changelog for v0.45.0-preview.0
    • Changelog for v0.44.0
    • fix(cli): prevent spam loop when preferredEditor is invalid
    • Adding quote
    • Transition to flash GA model when experiment flag is present.
    • chore(ci): add optimized PR size labeler and batch workflows
    • fix(ci): use pull_request_target trigger to grant write access on fork PRs
    • fix(patch): cherry-pick e4315b3 to release/v0.46.0-preview.0-pr-27645 to patch version v0.46.0-preview.0 and create version 0.46.0-preview.1
    • fix(patch): cherry-pick f40498d to release/v0.46.0-preview.1-pr-27676 to patch version v0.46.0-preview.1 and create version 0.46.0-preview.2
    1 more on GitHub →

  23. 0.45.3

    • fix(patch): cherry-pick f08b4af to release/v0.45.2-pr-27749 to patch version v0.45.2 and create version 0.45.3
    Release notes →

  24. 0.45.2

    • fix(patch): cherry-pick f40498d to release/v0.45.1-pr-27676 to patch version v0.45.1 and create version 0.45.2
    Release notes →

  25. 0.45.1

    • fix(patch): cherry-pick 665228e to release/v0.45.0-pr-27570 to patch version v0.45.0 and create version 0.45.1
    Release notes →

Other agents

Claude CodeCodex CLICopilot CLIopencodeHermes AgentQwen CodeKimi CLIGooseMistral VibeCrushAiderCline All agents →

Run Gemini CLI next to the other agents and see when one needs you: AgentVera keeps them in one window on Mac, Windows and Linux, and on your phone.

Bring your agents to one desk.

Download, pick a project, open your first agent. Your installed CLIs are ready to go.

Download for free