Skip to content
Unpaid tier and Google One users: Gemini CLI was replaced by Antigravity CLI on June 18th, 2026. To learn more, see our blog post.
Gemini CLI Icon Gemini CLI

Latest stable release: v0.60.0

Released: September 15, 2026

For most users, our latest stable release is the recommended release. Install the latest stable version with:

npm install -g @google/gemini-cli

Highlights

Section titled “Highlights”
  • Extension Consent & Isolation: Introduced explicit prompting for user consent on environment changes requested by extensions, along with sanitization of runtime-altering environment variables to ensure secure execution environments.
  • Sandbox & Directory Hardening: Isolated the settings directory and temporary directories within sandbox containers, including specific path isolation enhancements for the macOS Seatbelt sandbox.
  • Robust Boundary & Path Resolution: Hardened workspace boundary validation, symlink resolution, and NTFS 8.3 short name (SFN) path mitigation across command safety and file discovery utilities.
  • Enhanced API & Connection Security: Implemented strict RFC 9207 issuer identification in the Model Context Protocol (MCP) OAuth flow, along with improved destination validation and connection routing inside web fetch utilities.

What’s Changed

Section titled “What’s Changed”
  • fix(core): improve destination validation and connection routing in web fetch utilities by @diegogodinezr in #29120
  • fix(core): enforce RFC 9207 issuer identification in MCP OAuth flow by @jvargassanchez-dot in #29117
  • chore(release): bump version to 0.60.0-nightly.20260901.g0bd1d4397 by @gemini-cli-robot in #29162
  • Changelog for v0.58.0 by @gemini-cli-robot in #29161
  • fix(cli): isolate temporary directory for macOS Seatbelt sandbox by @jvargassanchez-dot in #29171
  • feat(extensions): harden path resolution and boundary validation in extension loader by @diegogodinezr in #29169
  • Changelog for v0.59.0-preview.0 by @gemini-cli-robot in #29159
  • fix(core): sanitize and remove hardcoded Google CrUX API key in chrome-devtools-mcp by @amelidev in #29158
  • fix(extensions): prompt for consent on environment changes and sanitize runtime-altering environment variables by @amelidev in #28863
  • fix(core): enhance workspace path boundary checks and symlink resolution in command safety and file discovery by @jesussamuel-byte in #29170
  • fix(config): enforce strict permission and ownership checks on system-wide configuration paths by @jesussamuel-byte in #29115
  • fix(core): mitigate NTFS 8.3 short name (SFN) path by @urielefrenvirtusa in #29116
  • fix(cli): isolate settings directory in sandbox containers by @jvargassanchez-dot in #29216
  • fix(core): enforce envelope metadata provenance for untrusted tool outputs by @luisfelipe-alt in #29215

Full Changelog: https://github.com/google-gemini/gemini-cli/compare/v0.59.0…v0.60.0

Last updated: