Preview release: v0.35.0-preview.2

Released: March 19, 2026

Our preview release includes the latest, new, and experimental features. This release may not be as stable as our latest weekly release.

To install the preview release:

npm install -g @google/gemini-cli@preview

Highlights

Subagents & Architecture Enhancements: Enabled subagents and laid the foundation for subagent tool isolation. Added proxy routing support for remote A2A subagents and integrated SandboxManager to sandbox all process-spawning tools.
CLI & UI Improvements: Introduced customizable keyboard shortcuts and support for literal character keybindings. Added missing vim mode motions and CJK input support. Enabled code splitting and deferred UI loading for improved performance.
Context & Tools Optimization: JIT context loading is now enabled by default with deduplication for project memory. Introduced a model-driven parallel tool scheduler and allowed safe tools to execute concurrently.
Security & Extensions: Implemented cryptographic integrity verification for extension updates and added a disableAlwaysAllow setting to prevent auto-approvals for enhanced security.
Plan Mode & Web Fetch Updates: Added an ‘All the above’ option for multi-select AskUser questions in Plan Mode. Rolled out Stage 1 and Stage 2 security and consistency improvements for the web_fetch tool.

What’s Changed

fix(patch): cherry-pick 4e5dfd0 to release/v0.35.0-preview.1-pr-23074 to patch version v0.35.0-preview.1 and create version 0.35.0-preview.2 by @gemini-cli-robot in #23134
feat(cli): customizable keyboard shortcuts by @scidomino in #21945
feat(core): Thread AgentLoopContext through core. by @joshualitt in #21944
chore(release): bump version to 0.35.0-nightly.20260311.657f19c1f by @gemini-cli-robot in #21966
refactor(a2a): remove legacy CoreToolScheduler by @adamfweidman in #21955
feat(ui): add missing vim mode motions (X, ~, r, f/F/t/T, df/dt and friends) by @aanari in #21932
Feat/retry fetch notifications by @aishaneeshah in #21813
fix(core): remove OAuth check from handleFallback and clean up stray file by @sehoon38 in #21962
feat(cli): support literal character keybindings and extended Kitty protocol keys by @scidomino in #21972
fix(ui): clamp cursor to last char after all NORMAL mode deletes by @aanari in #21973
test(core): add missing tests for prompts/utils.ts by @krrishverma1805-web in #19941
fix(cli): allow scrolling keys in copy mode (Ctrl+S selection mode) by @nsalerni in #19933
docs(cli): add custom keybinding documentation by @scidomino in #21980
docs: fix misleading YOLO mode description in defaultApprovalMode by @Gyanranjan-Priyam in #21878
fix: clean up /clear and /resume by @jackwotherspoon in #22007
fix(core)#20941: reap orphaned descendant processes on PTY abort by @manavmax in #21124
fix(core): update language detection to use LSP 3.18 identifiers by @yunaseoul in #21931
feat(cli): support removing keybindings via ’-’ prefix by @scidomino in #22042
feat(policy): add —admin-policy flag for supplemental admin policies by @galz10 in #20360
merge duplicate imports packages/cli/src subtask1 by @Nixxx19 in #22040
perf(core): parallelize user quota and experiments fetching in refreshAuth by @sehoon38 in #21648
Changelog for v0.34.0-preview.0 by @gemini-cli-robot in #21965
Changelog for v0.33.0 by @gemini-cli-robot in #21967
fix(core): handle EISDIR in robustRealpath on Windows by @sehoon38 in #21984
feat(core): include initiationMethod in conversation interaction telemetry by @yunaseoul in #22054
feat(ui): add vim yank/paste (y/p/P) with unnamed register by @aanari in #22026
fix(core): enable numerical routing for api key users by @sehoon38 in #21977
feat(telemetry): implement retry attempt telemetry for network related retries by @aishaneeshah in #22027
fix(policy): remove unnecessary escapeRegex from pattern builders by @spencer426 in #21921
fix(core): preserve dynamic tool descriptions on session resume by @sehoon38 in #18835
chore: allow ‘gemini-3.1’ in sensitive keyword linter by @scidomino in #22065
feat(core): support custom base URL via env vars by @junaiddshaukat in #21561
merge duplicate imports packages/cli/src subtask2 by @Nixxx19 in #22051
fix(core): silently retry API errors up to 3 times before halting session by @spencer426 in #21989
feat(core): simplify subagent success UI and improve early termination display by @abhipatel12 in #21917
merge duplicate imports packages/cli/src subtask3 by @Nixxx19 in #22056
fix(hooks): fix BeforeAgent/AfterAgent inconsistencies (#18514) by @krishdef7 in #21383
feat(core): implement SandboxManager interface and config schema by @galz10 in #21774
docs: document npm deprecation warnings as safe to ignore by @h30s in #20692
fix: remove status/need-triage from maintainer-only issues by @SandyTao520 in #22044
fix(core): propagate subagent context to policy engine by @NTaylorMullen in #22086
fix(cli): resolve skill uninstall failure when skill name is updated by @NTaylorMullen in #22085
docs(plan): clarify interactive plan editing with Ctrl+X by @Adib234 in #22076
fix(policy): ensure user policies are loaded when policyPaths is empty by @NTaylorMullen in #22090
Docs: Add documentation for model steering (experimental). by @jkcinouye in #21154
Add issue for automated changelogs by @g-samroberts in #21912
fix(core): secure argsPattern and revert WEB_FETCH_TOOL_NAME escalation by @spencer426 in #22104
feat(core): differentiate User-Agent for a2a-server and ACP clients by @bdmorgan in #22059
refactor(core): extract ExecutionLifecycleService for tool backgrounding by @adamfweidman in #21717
feat: Display pending and confirming tool calls by @sripasg in #22106
feat(browser): implement input blocker overlay during automation by @kunal-10-cloud in #21132
fix: register themes on extension load not start by @jackwotherspoon in #22148
feat(ui): Do not show Ultra users /upgrade hint (#22154) by @sehoon38 in #22156
chore: remove unnecessary log for themes by @jackwotherspoon in #22165
fix(core): resolve MCP tool FQN validation, schema export, and wildcards in subagents by @abhipatel12 in #22069
fix(cli): validate —model argument at startup by @JaisalJain in #21393
fix(core): handle policy ALLOW for exit_plan_mode by @backnotprop in #21802
feat(telemetry): add Clearcut instrumentation for AI credits billing events by @gsquared94 in #22153
feat(core): add google credentials provider for remote agents by @adamfweidman in #21024
test(cli): add integration test for node deprecation warnings by @Nixxx19 in #20215
feat(cli): allow safe tools to execute concurrently while agent is busy by @spencer426 in #21988
feat(core): implement model-driven parallel tool scheduler by @abhipatel12 in #21933
update vulnerable deps by @scidomino in #22180
fix(core): fix startup stats to use int values for timestamps and durations by @yunaseoul in #22201
fix(core): prevent duplicate tool schemas for instantiated tools by @abhipatel12 in #22204
fix(core): add proxy routing support for remote A2A subagents by @adamfweidman in #22199
fix(core/ide): add Antigravity CLI fallbacks by @apfine in #22030
fix(browser): fix duplicate function declaration error in browser agent by @gsquared94 in #22207
feat(core): implement Stage 1 improvements for webfetch tool by @aishaneeshah in #21313
Changelog for v0.34.0-preview.1 by @gemini-cli-robot in #22194
perf(cli): enable code splitting and deferred UI loading by @sehoon38 in #22117
fix: remove unused img.png from project root by @SandyTao520 in #22222
docs(local model routing): add docs on how to use Gemma for local model routing by @douglas-reid in #21365
feat(a2a): enable native gRPC support and protocol routing by @alisa-alisa in #21403
fix(cli): escape @ symbols on paste to prevent unintended file expansion by @krishdef7 in #21239
feat(core): add trajectoryId to ConversationOffered telemetry by @yunaseoul in #22214
docs: clarify that tools.core is an allowlist for ALL built-in tools by @hobostay in #18813
docs(plan): document hooks with plan mode by @ruomengz in #22197
Changelog for v0.33.1 by @gemini-cli-robot in #22235
build(ci): fix false positive evals trigger on merge commits by @gundermanc in #22237
fix(core): explicitly pass messageBus to policy engine for MCP tool saves by @abhipatel12 in #22255
feat(core): Fully migrate packages/core to AgentLoopContext. by @joshualitt in #22115
feat(core): increase sub-agent turn and time limits by @bdmorgan in #22196
feat(core): instrument file system tools for JIT context discovery by @SandyTao520 in #22082
refactor(ui): extract pure session browser utilities by @abhipatel12 in #22256
fix(plan): Fix AskUser evals by @Adib234 in #22074
fix(settings): prevent j/k navigation keys from intercepting edit buffer input by @student-ankitpandit in #21865
feat(skills): improve async-pr-review workflow and logging by @mattKorwel in #21790
refactor(cli): consolidate getErrorMessage utility to core by @scidomino in #22190
fix(core): show descriptive error messages when saving settings fails by @afarber in #18095
docs(core): add authentication guide for remote subagents by @adamfweidman in #22178
docs: overhaul subagents documentation and add /agents command by @abhipatel12 in #22345
refactor(ui): extract SessionBrowser static ui components by @abhipatel12 in #22348
test: add Object.create context regression test and tool confirmation integration test by @gsquared94 in #22356
feat(tracker): return TodoList display for tracker tools by @anj-s in #22060
feat(agent): add allowed domain restrictions for browser agent by @cynthialong0-0 in #21775
chore/release: bump version to 0.35.0-nightly.20260313.bb060d7a9 by @gemini-cli-robot in #22251
Move keychain fallback to keychain service by @chrstnb in #22332
feat(core): integrate SandboxManager to sandbox all process-spawning tools by @galz10 in #22231
fix(cli): support CJK input and full Unicode scalar values in terminal protocols by @scidomino in #22353
Promote stable tests. by @gundermanc in #22253
feat(tracker): add tracker policy by @anj-s in #22379
feat(security): add disableAlwaysAllow setting to disable auto-approvals by @galz10 in #21941
Revert “fix(cli): validate —model argument at startup” by @sehoon38 in #22378
fix(mcp): handle equivalent root resource URLs in OAuth validation by @galz10 in #20231
fix(core): use session-specific temp directory for task tracker by @anj-s in #22382
Fix issue where config was undefined. by @gundermanc in #22397
fix(core): deduplicate project memory when JIT context is enabled by @SandyTao520 in #22234
feat(prompts): implement Topic-Action-Summary model for verbosity reduction by @Abhijit-2592 in #21503
fix(core): fix manual deletion of subagent histories by @abhipatel12 in #22407
Add registry var by @kevinjwang1 in #22224
Add ModelDefinitions to ModelConfigService by @kevinjwang1 in #22302
fix(cli): improve command conflict handling for skills by @NTaylorMullen in #21942
fix(core): merge user settings with extension-provided MCP servers by @abhipatel12 in #22484
fix(core): skip discovery for incomplete MCP configs and resolve merge race condition by @abhipatel12 in #22494
fix(automation): harden stale PR closer permissions and maintainer detection by @bdmorgan in #22558
fix(automation): evaluate staleness before checking protected labels by @bdmorgan in #22561
feat(agent): replace the runtime npx for browser agent chrome devtool mcp with pre-built bundle by @cynthialong0-0 in #22213
perf: optimize TrackerService dependency checks by @anj-s in #22384
docs(policy): remove trailing space from commandPrefix examples by @kawasin73 in #22264
fix(a2a-server): resolve unsafe assignment lint errors by @ehedlund in #22661
fix: Adjust ToolGroupMessage filtering to hide Confirming and show Canceled tool calls. by @sripasg in #22230
Disallow Object.create() and reflect. by @gundermanc in #22408
Guard pro model usage by @sehoon38 in #22665
refactor(core): Creates AgentSession abstraction for consolidated agent interface. by @mbleigh in #22270
docs(changelog): remove internal commands from release notes by @jackwotherspoon in #22529
feat: enable subagents by @abhipatel12 in #22386
feat(extensions): implement cryptographic integrity verification for extension updates by @ehedlund in #21772
feat(tracker): polish UI sorting and formatting by @anj-s in #22437
Changelog for v0.34.0-preview.2 by @gemini-cli-robot in #22220
fix(core): fix three JIT context bugs in read_file, read_many_files, and memoryDiscovery by @SandyTao520 in #22679
refactor(core): introduce InjectionService with source-aware injection and backend-native background completions by @adamfweidman in #22544
Linux sandbox bubblewrap by @DavidAPierce in #22680
feat(core): increase thought signature retry resilience by @bdmorgan in #22202
feat(core): implement Stage 2 security and consistency improvements for web_fetch by @aishaneeshah in #22217
refactor(core): replace positional execute params with ExecuteOptions bag by @adamfweidman in #22674
feat(config): enable JIT context loading by default by @SandyTao520 in #22736
fix(config): ensure discoveryMaxDirs is passed to global config during initialization by @kevin-ramdass in #22744
fix(plan): allowlist get_internal_docs in Plan Mode by @Adib234 in #22668
Changelog for v0.34.0-preview.3 by @gemini-cli-robot in #22393
feat(core): add foundation for subagent tool isolation by @akh64bit in #22708
fix(core): handle surrogate pairs in truncateString by @sehoon38 in #22754
fix(cli): override j/k navigation in settings dialog to fix search input conflict by @sehoon38 in #22800
feat(plan): add ‘All the above’ option to multi-select AskUser questions by @Adib234 in #22365
docs: distribute package-specific GEMINI.md context to each package by @SandyTao520 in #22734
fix(cli): clean up stale pasted placeholder metadata after word/line deletions by @Jomak-x in #20375
refactor(core): align JIT memory placement with tiered context model by @SandyTao520 in #22766
Linux sandbox seccomp by @DavidAPierce in #22815

Full Changelog: https://github.com/google-gemini/gemini-cli/compare/v0.34.0-preview.4…v0.35.0-preview.2