@google/gemini-cli 0.62.0-preview.0 → 0.63.0-nightly.20260926.g2fe7c2d3f

package/bundle/docs/changelogs/index.md

@@ -18,6 +18,22 @@ on GitHub.
 | [Preview](preview.md) | Experimental features ready for early feedback. |
 | [Stable](latest.md)   | Stable, recommended for general use.            |
 
+## Announcements: v0.61.0 - 2026-09-23
+
+- **Core Security Hardening:** Prevented indirect prompt injection
+  vulnerabilities via build file modifications and untrusted flags, while
+  hardening filesystem boundaries and isolating runtime state
+  ([#29250](https://github.com/google-gemini/gemini-cli/pull/29250) by
+  @villahernandez-coder,
+  [#29214](https://github.com/google-gemini/gemini-cli/pull/29214) by
+  @diegogodinezr).
+- **Agent Loop and Model Stability:** Ensured AgentLoopContext state
+  preservation across spread operations and preserved explicit versioned Flash
+  model IDs ([#29335](https://github.com/google-gemini/gemini-cli/pull/29335) by
+  @diegogodinezr,
+  [#29252](https://github.com/google-gemini/gemini-cli/pull/29252) by
+  @SandyTao520).
+
 ## Announcements: v0.60.0 - 2026-09-15
 
 - **Extension & Tool Safety Hardening:** Prompt for user consent on environment

package/bundle/docs/changelogs/latest.md

@@ -1,6 +1,6 @@
-# Latest stable release: v0.60.0
+# Latest stable release: v0.61.0
 
-Released: September 15, 2026
+Released: September 23, 2026
 
 For most users, our latest stable release is the recommended release. Install
 the latest stable version with:
@@ -11,62 +11,41 @@ npm install -g @google/gemini-cli
 
 ## Highlights
 
-- **Extension Consent & Isolation:** Introduced explicit prompting for user
-  consent on environment changes requested by extensions, along with
-  sanitization of runtime-altering environment variables to ensure secure
-  execution environments.
-- **Sandbox & Directory Hardening:** Isolated the settings directory and
-  temporary directories within sandbox containers, including specific path
-  isolation enhancements for the macOS Seatbelt sandbox.
-- **Robust Boundary & Path Resolution:** Hardened workspace boundary validation,
-  symlink resolution, and NTFS 8.3 short name (SFN) path mitigation across
-  command safety and file discovery utilities.
-- **Enhanced API & Connection Security:** Implemented strict RFC 9207 issuer
-  identification in the Model Context Protocol (MCP) OAuth flow, along with
-  improved destination validation and connection routing inside web fetch
-  utilities.
+- **Prompt Injection Defense:** Enhanced security by preventing indirect prompt
+  injection attacks through build file modifications and untrusted command
+  flags.
+- **Sandbox & State Hardening:** Hardened filesystem boundaries and isolated
+  internal runtime state to ensure more secure execution environments.
+- **Agent Loop Robustness:** Guaranteed that internal state properties within
+  `AgentLoopContext` are fully preserved during object spread operations,
+  improving agent reliability.
+- **Versioned Model Preserves:** Ensured explicit versioned Flash model IDs are
+  correctly preserved and used directly during routing and execution.
 
 ## What's Changed
 
-- fix(core): improve destination validation and connection routing in web fetch
-  utilities by @diegogodinezr in
-  [#29120](https://github.com/google-gemini/gemini-cli/pull/29120)
-- fix(core): enforce RFC 9207 issuer identification in MCP OAuth flow by
-  @jvargassanchez-dot in
-  [#29117](https://github.com/google-gemini/gemini-cli/pull/29117)
-- chore(release): bump version to 0.60.0-nightly.20260901.g0bd1d4397 by
+- Changelog for v0.60.0-preview.0 by @gemini-cli-robot in
+  [#29251](https://github.com/google-gemini/gemini-cli/pull/29251)
+- chore(release): bump version to 0.61.0-nightly.20260908.gc647533d6 by
   @gemini-cli-robot in
-  [#29162](https://github.com/google-gemini/gemini-cli/pull/29162)
-- Changelog for v0.58.0 by @gemini-cli-robot in
-  [#29161](https://github.com/google-gemini/gemini-cli/pull/29161)
-- fix(cli): isolate temporary directory for macOS Seatbelt sandbox by
-  @jvargassanchez-dot in
-  [#29171](https://github.com/google-gemini/gemini-cli/pull/29171)
-- feat(extensions): harden path resolution and boundary validation in extension
-  loader by @diegogodinezr in
-  [#29169](https://github.com/google-gemini/gemini-cli/pull/29169)
-- Changelog for v0.59.0-preview.0 by @gemini-cli-robot in
-  [#29159](https://github.com/google-gemini/gemini-cli/pull/29159)
-- fix(core): sanitize and remove hardcoded Google CrUX API key in
-  chrome-devtools-mcp by @amelidev in
-  [#29158](https://github.com/google-gemini/gemini-cli/pull/29158)
-- fix(extensions): prompt for consent on environment changes and sanitize
-  runtime-altering environment variables by @amelidev in
-  [#28863](https://github.com/google-gemini/gemini-cli/pull/28863)
-- fix(core): enhance workspace path boundary checks and symlink resolution in
-  command safety and file discovery by @jesussamuel-byte in
-  [#29170](https://github.com/google-gemini/gemini-cli/pull/29170)
-- fix(config): enforce strict permission and ownership checks on system-wide
-  configuration paths by @jesussamuel-byte in
-  [#29115](https://github.com/google-gemini/gemini-cli/pull/29115)
-- fix(core): mitigate NTFS 8.3 short name (SFN) path by @urielefrenvirtusa in
-  [#29116](https://github.com/google-gemini/gemini-cli/pull/29116)
-- fix(cli): isolate settings directory in sandbox containers by
-  @jvargassanchez-dot in
-  [#29216](https://github.com/google-gemini/gemini-cli/pull/29216)
-- fix(core): enforce envelope metadata provenance for untrusted tool outputs by
-  @luisfelipe-alt in
-  [#29215](https://github.com/google-gemini/gemini-cli/pull/29215)
+  [#29254](https://github.com/google-gemini/gemini-cli/pull/29254)
+- Changelog for v0.59.0 by @gemini-cli-robot in
+  [#29253](https://github.com/google-gemini/gemini-cli/pull/29253)
+- fix(core): preserve explicit versioned Flash model IDs by @SandyTao520 in
+  [#29252](https://github.com/google-gemini/gemini-cli/pull/29252)
+- fix(core): prevent indirect prompt injection via build file modifications and
+  untrusted flags by @villahernandez-coder in
+  [#29250](https://github.com/google-gemini/gemini-cli/pull/29250)
+- fix(sandbox): harden filesystem boundaries and isolate runtime state by
+  @diegogodinezr in
+  [#29214](https://github.com/google-gemini/gemini-cli/pull/29214)
+- fix(core): ensure AgentLoopContext properties are preserved across object
+  spread by @diegogodinezr in
+  [#29335](https://github.com/google-gemini/gemini-cli/pull/29335)
+- fix(patch): cherry-pick 62364cb to release/v0.61.0-preview.0-pr-29443 to patch
+  version v0.61.0-preview.0 and create version 0.61.0-preview.1 by
+  @gemini-cli-robot in
+  [#29455](https://github.com/google-gemini/gemini-cli/pull/29455)
 
 **Full Changelog**:
-https://github.com/google-gemini/gemini-cli/compare/v0.59.0...v0.60.0
+https://github.com/google-gemini/gemini-cli/compare/v0.60.0...v0.61.0

package/bundle/docs/changelogs/preview.md

@@ -1,6 +1,6 @@
-# Preview release: v0.61.0-preview.0
+# Preview release: v0.62.0-preview.0
 
-Released: September 15, 2026
+Released: September 23, 2026
 
 Our preview release includes the latest, new, and experimental features. This
 release may not be as stable as our [latest weekly release](latest.md).
@@ -13,37 +13,73 @@ npm install -g @google/gemini-cli@preview
 
 ## Highlights
 
-- **Sandbox Isolation**: Enhanced filesystem boundaries and isolated runtime
-  state within the sandbox environments to restrict untrusted execution.
-- **Prompt Injection Defense**: Prevented potential indirect prompt injection
-  vulnerabilities related to build file modifications and untrusted command
-  flags.
-- **Flash Model ID Preservation**: Fixed core logic to properly preserve
-  explicit, versioned Flash model IDs without overriding them.
-- **Agent Loop Reliability**: Resolved an issue where crucial `AgentLoopContext`
-  properties were discarded during object spread, stabilizing the main agent
-  loop.
+- **New Model Support**: Added support for Gemini 3.8 Flash and 3.5 Flash Lite
+  models, expanding the selection of available models.
+- **MCP Tool Call Formatting**: Improved Model Context Protocol (ACP/MCP)
+  interactions by formatting tool call titles as structured signatures and
+  separating explanations.
+- **PTY & Process Lifecycle Hardening**: Hardened Pseudo-Terminal (PTY)
+  execution, improving file descriptor cleanup, exit synchronization on ConPTY,
+  and finalization of terminal output.
+- **Memory & Reliability Refinements**: Refined terminal buffer memory
+  management, preserved OAuth refresh tokens during credential refresh, and
+  added layout dimension guarding in the UI border rendering.
 
 ## What's Changed
 
-- Changelog for v0.60.0-preview.0 by @gemini-cli-robot in
-  [#29251](https://github.com/google-gemini/gemini-cli/pull/29251)
-- chore(release): bump version to 0.61.0-nightly.20260908.gc647533d6 by
+- fix(a2a-server): add early return on unsupported store in tasks metadata
+  endpoint by @jesussamuel-byte in
+  [#29334](https://github.com/google-gemini/gemini-cli/pull/29334)
+- Changelog for v0.61.0-preview.0 by @gemini-cli-robot in
+  [#29344](https://github.com/google-gemini/gemini-cli/pull/29344)
+- Changelog for v0.60.0 by @gemini-cli-robot in
+  [#29345](https://github.com/google-gemini/gemini-cli/pull/29345)
+- fix(core,acp): format MCP tool call titles as structured signatures and
+  segregate explanations by @jvargassanchez-dot in
+  [#29341](https://github.com/google-gemini/gemini-cli/pull/29341)
+- chore(release): bump version to 0.62.0-nightly.20260915.gae28844fb by
   @gemini-cli-robot in
-  [#29254](https://github.com/google-gemini/gemini-cli/pull/29254)
-- Changelog for v0.59.0 by @gemini-cli-robot in
-  [#29253](https://github.com/google-gemini/gemini-cli/pull/29253)
-- fix(core): preserve explicit versioned Flash model IDs by @SandyTao520 in
-  [#29252](https://github.com/google-gemini/gemini-cli/pull/29252)
-- fix(core): prevent indirect prompt injection via build file modifications and
-  untrusted flags by @villahernandez-coder in
-  [#29250](https://github.com/google-gemini/gemini-cli/pull/29250)
-- fix(sandbox): harden filesystem boundaries and isolate runtime state by
+  [#29346](https://github.com/google-gemini/gemini-cli/pull/29346)
+- fix(core): retain oauth refresh token on refresh and make credential deletion
+  idempotent by @villahernandez-coder in
+  [#29339](https://github.com/google-gemini/gemini-cli/pull/29339)
+- fix(ui): guard against negative layout dimensions in border rendering by
   @diegogodinezr in
-  [#29214](https://github.com/google-gemini/gemini-cli/pull/29214)
-- fix(core): ensure AgentLoopContext properties are preserved across object
-  spread by @diegogodinezr in
-  [#29335](https://github.com/google-gemini/gemini-cli/pull/29335)
+  [#29347](https://github.com/google-gemini/gemini-cli/pull/29347)
+- test(integration): deflake run_shell_command and file-system-interactive tests
+  by @DavidAPierce in
+  [#29185](https://github.com/google-gemini/gemini-cli/pull/29185)
+- fix(core): improve PTY file descriptor cleanup and execution lifecycle
+  management by @jesussamuel-byte in
+  [#29340](https://github.com/google-gemini/gemini-cli/pull/29340)
+- chore/release: bump version to 0.62.0-nightly.20260918.g9450ade79 by
+  @gemini-cli-robot in
+  [#29383](https://github.com/google-gemini/gemini-cli/pull/29383)
+- fix(core): synchronize ConPTY process exit lifecycle and harden PTY output
+  finalization by @jvargassanchez-dot in
+  [#29379](https://github.com/google-gemini/gemini-cli/pull/29379)
+- fix(cli): suppress uncaught AbortError logs during request cancellation by
+  @urielefrenvirtusa in
+  [#29343](https://github.com/google-gemini/gemini-cli/pull/29343)
+- fix(core,cli): improve terminal buffer memory management and format Windows
+  diagnostic paths by @jesussamuel-byte in
+  [#29380](https://github.com/google-gemini/gemini-cli/pull/29380)
+- fix(vscode-ide-companion): preserve terminal focus when closing diff tabs by
+  @amelidev in [#29378](https://github.com/google-gemini/gemini-cli/pull/29378)
+- fix(core): update auth error documentation link to valid anchor and add
+  fallback (#26140) by @villahernandez-coder in
+  [#29377](https://github.com/google-gemini/gemini-cli/pull/29377)
+- fix(core): normalize proxy-agent esbuild interop for environment proxy
+  resolution by @diegogodinezr in
+  [#29401](https://github.com/google-gemini/gemini-cli/pull/29401)
+- fix(cli): emit tool_call update prior to request_permission in ACP mode by
+  @urielefrenvirtusa in
+  [#29439](https://github.com/google-gemini/gemini-cli/pull/29439)
+- Feat/gemini 3.8 flash 3.5 flash lite by @DavidAPierce in
+  [#29443](https://github.com/google-gemini/gemini-cli/pull/29443)
+- Check for vsc integration test presence when attempting to run. by
+  @DavidAPierce in
+  [#29462](https://github.com/google-gemini/gemini-cli/pull/29462)
 
 **Full Changelog**:
-https://github.com/google-gemini/gemini-cli/compare/v0.60.0-preview.0...v0.61.0-preview.0
+https://github.com/google-gemini/gemini-cli/compare/v0.61.0-preview.1...v0.62.0-preview.0

package/bundle/{gemini-H6C5T6NZ.js → gemini-3326ZSFC.js}

@@ -2,7 +2,7 @@ const require = (await import('node:module')).createRequire(import.meta.url); co
 import {
   startCommand,
   startServer
-} from "./chunk-DSHGGNYE.js";
+} from "./chunk-DQIFLHPX.js";
 import {
   BuiltinCommandLoader,
   CommandService,
@@ -46,11 +46,11 @@ import {
   updateExtension,
   validateAuthMethod,
   validateContextFilePath
-} from "./chunk-UDX2JG4X.js";
+} from "./chunk-UGKG4OIB.js";
 import {
   exitCli,
   require_source
-} from "./chunk-ZNLZV6KB.js";
+} from "./chunk-GCXBFYJK.js";
 import {
   appEvents
 } from "./chunk-5PS3AYFU.js";
@@ -88,11 +88,11 @@ import {
   resolveGemmaConfig,
   saveModelChange,
   stripAnsi
-} from "./chunk-7P7I4GYC.js";
+} from "./chunk-2HPN5QAH.js";
 import {
   RELAUNCH_EXIT_CODE
-} from "./chunk-UVWRONOW.js";
-import "./chunk-UCTTKDYX.js";
+} from "./chunk-QO5HKIZU.js";
+import "./chunk-JBO7A25S.js";
 import {
   cleanupCheckpoints,
   registerCleanup,
@@ -101,7 +101,7 @@ import {
   runExitCleanup,
   runSyncCleanup,
   setupSignalHandlers
-} from "./chunk-FX7H3YXM.js";
+} from "./chunk-JRB2XGR5.js";
 import {
   ASK_USER_TOOL_NAME,
   ApprovalMode,
@@ -255,7 +255,7 @@ import {
   updatePolicy,
   writeToStderr,
   writeToStdout
-} from "./chunk-7LRWECUM.js";
+} from "./chunk-R2KYUMIM.js";
 import "./chunk-664ZODQF.js";
 import "./chunk-IUUIT4SU.js";
 import "./chunk-L6PII3GR.js";
@@ -7855,7 +7855,7 @@ async function loadSandboxConfig(settings, argv) {
   }
   const command2 = getSandboxCommand(sandboxValue);
   const packageJson = await getPackageJson(__dirname3);
-  const image = process.env["GEMINI_SANDBOX_IMAGE"] ?? "us-docker.pkg.dev/gemini-code-dev/gemini-cli/sandbox:0.62.0-preview.0" ?? customImage ?? packageJson?.config?.sandboxImageUri;
+  const image = process.env["GEMINI_SANDBOX_IMAGE"] ?? "us-docker.pkg.dev/gemini-code-dev/gemini-cli/sandbox:0.63.0-nightly.20260926.g2fe7c2d3f" ?? customImage ?? packageJson?.config?.sandboxImageUri;
   const isNative = command2 === "windows-native" || command2 === "sandbox-exec" || command2 === "lxc";
   return command2 && (image || isNative) ? { enabled: true, allowedPaths, networkAccess, command: command2, image } : void 0;
 }
@@ -11526,7 +11526,7 @@ async function runNonInteractive({
       }
     });
     if (process.env["GEMINI_CLI_ACTIVITY_LOG_TARGET"]) {
-      const { setupInitialActivityLogger } = await import("./devtoolsService-WDMSDVS7.js");
+      const { setupInitialActivityLogger } = await import("./devtoolsService-3DTEOSCQ.js");
       setupInitialActivityLogger(config);
     }
     const { stdout: workingStdout } = createWorkingStdio();
@@ -12036,7 +12036,7 @@ async function runNonInteractive2(params) {
       }
     });
     if (process.env["GEMINI_CLI_ACTIVITY_LOG_TARGET"]) {
-      const { setupInitialActivityLogger } = await import("./devtoolsService-WDMSDVS7.js");
+      const { setupInitialActivityLogger } = await import("./devtoolsService-3DTEOSCQ.js");
       setupInitialActivityLogger(config);
     }
     const { stdout: workingStdout } = createWorkingStdio();
@@ -16421,7 +16421,7 @@ var AcpSessionManager = class {
     startupProfiler.flush(config);
     startAutoMemoryIfEnabled(config);
     const geminiClient = config.getGeminiClient();
-    const chat = await geminiClient.startChat();
+    const chat = geminiClient.isInitialized?.() ? geminiClient.getChat() : await geminiClient.startChat();
     const session = new Session(
       sessionId,
       chat,
@@ -16451,17 +16451,20 @@ var AcpSessionManager = class {
     return response;
   }
   async loadSession({ sessionId, cwd, mcpServers }, authDetails) {
-    const config = await this.initializeSessionConfig(
+    const config = await this.prepareSessionConfig(
       sessionId,
       cwd,
       mcpServers,
       authDetails
     );
+    await config.storage?.initialize?.();
     const sessionSelector = new SessionSelector(config.storage);
     const { sessionData, sessionPath } = await sessionSelector.resolveSession(sessionId);
+    await config.initialize();
+    startupProfiler.flush(config);
+    startAutoMemoryIfEnabled(config);
     const clientHistory = convertSessionToClientHistory(sessionData.messages);
     const geminiClient = config.getGeminiClient();
-    await geminiClient.initialize();
     await geminiClient.resumeChat(clientHistory, {
       conversation: sessionData,
       filePath: sessionPath
@@ -16498,7 +16501,7 @@ var AcpSessionManager = class {
     };
     return response;
   }
-  async initializeSessionConfig(sessionId, cwd, mcpServers, authDetails) {
+  async prepareSessionConfig(sessionId, cwd, mcpServers, authDetails) {
     const selectedAuthType = this.settings.merged.security.auth.selectedType || (authDetails.baseUrl || process.env["GOOGLE_GEMINI_BASE_URL"] ? AuthType.GATEWAY : void 0);
     if (!selectedAuthType) {
       throw RequestError.authRequired();
@@ -16525,9 +16528,6 @@ var AcpSessionManager = class {
       );
       config.setFileSystemService(acpFileSystemService);
     }
-    await config.initialize();
-    startupProfiler.flush(config);
-    startAutoMemoryIfEnabled(config);
     return config;
   }
   async newSessionConfig(sessionId, cwd, mcpServers, loadedSettings) {
@@ -17347,7 +17347,7 @@ async function resolveSessionId(resumeArg, sessionIdArg, sessionFileArg) {
   }
 }
 async function startInteractiveUI(config, settings, startupWarnings, workspaceRoot = process.cwd(), resumedSessionData, initializationResult) {
-  const { startInteractiveUI: doStartUI } = await import("./interactiveCli-TLTKI2C4.js");
+  const { startInteractiveUI: doStartUI } = await import("./interactiveCli-MHB4B6S7.js");
   await doStartUI(
     config,
     settings,
@@ -17556,7 +17556,7 @@ ${finalArgs[promptIndex + 1]}`;
     await config.storage.initialize();
     adminControlsListner.setConfig(config);
     if (config.isInteractive() && settings.merged.general.devtools) {
-      const { setupInitialActivityLogger } = await import("./devtoolsService-WDMSDVS7.js");
+      const { setupInitialActivityLogger } = await import("./devtoolsService-3DTEOSCQ.js");
       setupInitialActivityLogger(config);
     }
     registerTelemetryConfig(config);
@@ -17615,7 +17615,7 @@ ${finalArgs[promptIndex + 1]}`;
     const initAppHandle = startupProfiler.start("initialize_app");
     const initializationResult = await initializeApp(config, settings);
     initAppHandle?.end();
-    import("./liteRtServerManager-T2GG72NW.js").then(({ LiteRtServerManager }) => {
+    import("./liteRtServerManager-5LUGQWRF.js").then(({ LiteRtServerManager }) => {
       const mergedGemma = settings.merged.experimental?.gemmaModelRouter;
       if (!mergedGemma) return;
       const userGemma = settings.forScope("User" /* User */).settings.experimental?.gemmaModelRouter;