@google/gemini-cli 0.67.0-preview.0 → 0.68.0-preview.0

package/bundle/{cleanup-QXMGRCCJ.js → cleanup-CCR2EOHA.js}

@@ -12,8 +12,8 @@ import {
   runSyncCleanup,
   setupSignalHandlers,
   setupTtyCheck
-} from "./chunk-FYX6LSG6.js";
-import "./chunk-HWPQINPO.js";
+} from "./chunk-WEP47ZZU.js";
+import "./chunk-L57AYV6U.js";
 import "./chunk-664ZODQF.js";
 import "./chunk-IUUIT4SU.js";
 import "./chunk-L6PII3GR.js";

package/bundle/{cleanup-R3QZGL6L.js → cleanup-OQV2G5Y3.js}

@@ -12,8 +12,8 @@ import {
   runSyncCleanup,
   setupSignalHandlers,
   setupTtyCheck
-} from "./chunk-THOV46FY.js";
-import "./chunk-5FYAQBC3.js";
+} from "./chunk-RD2EMHV2.js";
+import "./chunk-RCF66HCI.js";
 import "./chunk-664ZODQF.js";
 import "./chunk-IUUIT4SU.js";
 import "./chunk-L6PII3GR.js";

package/bundle/{cleanup-S6DWGSDA.js → cleanup-T24OFMOA.js}

@@ -12,8 +12,8 @@ import {
   runSyncCleanup,
   setupSignalHandlers,
   setupTtyCheck
-} from "./chunk-GI2BMP6K.js";
-import "./chunk-EAO5GUJT.js";
+} from "./chunk-OZOUOK43.js";
+import "./chunk-ZZOOHVBL.js";
 import "./chunk-664ZODQF.js";
 import "./chunk-IUUIT4SU.js";
 import "./chunk-L6PII3GR.js";

package/bundle/{core-NQRYED5S.js → core-NQRKBS47.js}

@@ -962,6 +962,7 @@ import {
   mcpServerRequiresOAuth,
   moveInboxSkill,
   normalizeCommand,
+  normalizeEscapedNewlines,
   normalizePath,
   normalizeSecurityPath,
   normalizeSpace,
@@ -1141,7 +1142,7 @@ import {
   wrapWithSynchronizedOutput,
   writeToStderr,
   writeToStdout
-} from "./chunk-EAO5GUJT.js";
+} from "./chunk-RCF66HCI.js";
 import "./chunk-664ZODQF.js";
 import {
   SpanStatusCode,
@@ -2114,6 +2115,7 @@ export {
   mcpServerRequiresOAuth,
   moveInboxSkill,
   normalizeCommand,
+  normalizeEscapedNewlines,
   normalizePath,
   normalizeSecurityPath,
   normalizeSpace,

package/bundle/{dist-XT4ZXTSC.js → core-UIPNZ5VU.js}

@@ -962,6 +962,7 @@ import {
   mcpServerRequiresOAuth,
   moveInboxSkill,
   normalizeCommand,
+  normalizeEscapedNewlines,
   normalizePath,
   normalizeSecurityPath,
   normalizeSpace,
@@ -1141,7 +1142,7 @@ import {
   wrapWithSynchronizedOutput,
   writeToStderr,
   writeToStdout
-} from "./chunk-5FYAQBC3.js";
+} from "./chunk-ZZOOHVBL.js";
 import "./chunk-664ZODQF.js";
 import {
   SpanStatusCode,
@@ -2114,6 +2115,7 @@ export {
   mcpServerRequiresOAuth,
   moveInboxSkill,
   normalizeCommand,
+  normalizeEscapedNewlines,
   normalizePath,
   normalizeSecurityPath,
   normalizeSpace,

package/bundle/{devtoolsService-GPRO4RRU.js → devtoolsService-3G5ZA3JV.js}

@@ -2,7 +2,7 @@ const require = (await import('node:module')).createRequire(import.meta.url); co
 import {
   coreEvents,
   debugLogger
-} from "./chunk-HWPQINPO.js";
+} from "./chunk-ZZOOHVBL.js";
 import "./chunk-664ZODQF.js";
 import "./chunk-IUUIT4SU.js";
 import "./chunk-L6PII3GR.js";
@@ -4387,7 +4387,7 @@ async function toggleDevToolsPanel(config, isOpen, toggle, setOpen) {
     return;
   }
   try {
-    const { openBrowserSecurely, shouldLaunchBrowser } = await import("./core-3N7UGMI2.js");
+    const { openBrowserSecurely, shouldLaunchBrowser } = await import("./core-UIPNZ5VU.js");
     const url = await startDevToolsServer(config);
     if (shouldLaunchBrowser()) {
       try {

package/bundle/{devtoolsService-WR3IFLZC.js → devtoolsService-EWNQDTC7.js}

@@ -2,7 +2,7 @@ const require = (await import('node:module')).createRequire(import.meta.url); co
 import {
   coreEvents,
   debugLogger
-} from "./chunk-EAO5GUJT.js";
+} from "./chunk-RCF66HCI.js";
 import "./chunk-664ZODQF.js";
 import "./chunk-IUUIT4SU.js";
 import "./chunk-L6PII3GR.js";
@@ -4387,7 +4387,7 @@ async function toggleDevToolsPanel(config, isOpen, toggle, setOpen) {
     return;
   }
   try {
-    const { openBrowserSecurely, shouldLaunchBrowser } = await import("./core-NQRYED5S.js");
+    const { openBrowserSecurely, shouldLaunchBrowser } = await import("./core-NQRKBS47.js");
     const url = await startDevToolsServer(config);
     if (shouldLaunchBrowser()) {
       try {

package/bundle/{devtoolsService-ALST4BXH.js → devtoolsService-V3OEHE5V.js}

@@ -3,7 +3,7 @@ import {
   CoreEvent,
   coreEvents,
   debugLogger
-} from "./chunk-5FYAQBC3.js";
+} from "./chunk-L57AYV6U.js";
 import "./chunk-664ZODQF.js";
 import "./chunk-IUUIT4SU.js";
 import "./chunk-L6PII3GR.js";
@@ -4388,7 +4388,7 @@ async function toggleDevToolsPanel(config, isOpen, toggle, setOpen) {
     return;
   }
   try {
-    const { openBrowserSecurely, shouldLaunchBrowser } = await import("./dist-XT4ZXTSC.js");
+    const { openBrowserSecurely, shouldLaunchBrowser } = await import("./dist-OYZDNSTI.js");
     const url = await startDevToolsServer(config);
     if (shouldLaunchBrowser()) {
       try {

package/bundle/{core-3N7UGMI2.js → dist-OYZDNSTI.js}

@@ -962,6 +962,7 @@ import {
   mcpServerRequiresOAuth,
   moveInboxSkill,
   normalizeCommand,
+  normalizeEscapedNewlines,
   normalizePath,
   normalizeSecurityPath,
   normalizeSpace,
@@ -1141,7 +1142,7 @@ import {
   wrapWithSynchronizedOutput,
   writeToStderr,
   writeToStdout
-} from "./chunk-HWPQINPO.js";
+} from "./chunk-L57AYV6U.js";
 import "./chunk-664ZODQF.js";
 import {
   SpanStatusCode,
@@ -2114,6 +2115,7 @@ export {
   mcpServerRequiresOAuth,
   moveInboxSkill,
   normalizeCommand,
+  normalizeEscapedNewlines,
   normalizePath,
   normalizeSecurityPath,
   normalizeSpace,

package/bundle/docs/changelogs/index.md

@@ -18,6 +18,30 @@ on GitHub.
 | [Preview](preview.md) | Experimental features ready for early feedback. |
 | [Stable](latest.md)   | Stable, recommended for general use.            |
 
+## Announcements: v0.66.0 - 2026-10-27
+
+- **Terminal UI Rendering & Flicker Prevention:** Implemented synchronized
+  output mode and isolated spinner rendering, eliminated buffer flickering, and
+  preserved terminal scrollback during viewport refreshes
+  ([#29725](https://github.com/google-gemini/gemini-cli/pull/29725) by
+  @diegogodinezr,
+  [#29695](https://github.com/google-gemini/gemini-cli/pull/29695) by
+  @ugorla-dev).
+- **Tool Scheduling & Process Lifecycle:** Emitted tool call groups directly
+  from the scheduler and forwarded process termination signals from bootstrap
+  parent to child processes
+  ([#29736](https://github.com/google-gemini/gemini-cli/pull/29736) by
+  @jesussamuel-byte,
+  [#29790](https://github.com/google-gemini/gemini-cli/pull/29790) by
+  @villahernandez-coder).
+- **Environment & MCP OAuth Security:** Supported opt-in private network
+  endpoints for MCP OAuth flows and preserved user-level git configuration while
+  suppressing interactive prompts
+  ([#29844](https://github.com/google-gemini/gemini-cli/pull/29844) by
+  @luisfelipe-alt,
+  [#29832](https://github.com/google-gemini/gemini-cli/pull/29832) by
+  @jesussamuel-byte).
+
 ## Announcements: v0.65.0 - 2026-10-20
 
 - **Custom Telemetry Headers:** Added support for configuring custom OTLP

package/bundle/docs/changelogs/latest.md

@@ -1,6 +1,6 @@
-# Latest stable release: v0.65.0
+# Latest stable release: v0.66.0
 
-Released: October 20, 2026
+Released: October 27, 2026
 
 For most users, our latest stable release is the recommended release. Install
 the latest stable version with:
@@ -11,103 +11,96 @@ npm install -g @google/gemini-cli
 
 ## Highlights
 
-- **Custom Telemetry Headers:** Added support for configuring custom OTLP
-  headers in telemetry settings, enabling authentication and header
-  customization for OpenTelemetry collectors.
-- **File System Performance & Traversal:** Optimized ignore pattern filtering
-  with subtree pruning to accelerate directory scanning, deferred recursive file
-  reads for `@<directory>` references, and improved empty file handling across
-  multi-byte encodings.
-- **Session Resilience & State Integrity:** Prevented session poisoning during
-  rapid Ctrl+C interruptions, preserved resumed session history on quick exits,
-  and eliminated duplicate tool response turns upon resuming sessions.
-- **Authentication & Workspace Security:** Enforced read-only workspace settings
-  in untrusted folders, aligned OAuth callback parameter validation with RFC
-  9207 metadata, and resolved infinite authentication retry loops.
-- **Terminal UI & Interactive Stability:** Resolved interactive mode hangs on
-  Enter keypresses, prevented unnecessary terminal clears and scroll resets when
-  expanding output with Ctrl+O, and restored debounced static UI refreshes on
-  terminal width changes.
+- **Terminal UI & Display Rendering:** Implemented synchronized terminal output
+  mode, isolated spinner rendering, and preserved scrollback buffers across
+  viewport refreshes while eliminating buffer flickering and border bleed in
+  scrollable tool containers.
+- **Execution Scheduling & Process Lifecycle:** Refactored the core scheduler to
+  emit tool call groups directly and eliminated UI lookahead, while ensuring
+  process termination signals forward reliably from bootstrap wrappers to child
+  processes.
+- **Git & Shell Environment Robustness:** Preserved user-level `~/.gitconfig`
+  settings in shell and git environments, suppressed interactive SSH and
+  credential prompts to avoid execution hangs, and improved Windows diff
+  argument quoting.
+- **Security & Configuration Management:** Added opt-in support for private
+  network endpoints during MCP OAuth flows, eliminated false positives in
+  authentication error detection, resolved settings placeholders after loading
+  `.env` files, and added `keys` array support for custom keybindings.
 
 ## What's Changed
 
-- fix(cli): enforce read-only workspace settings in untrusted folders by
-  @jvargassanchez-dot in
-  [#29583](https://github.com/google-gemini/gemini-cli/pull/29583)
-- fix(core): avoid duplicate tool response turns when resuming sessions by
-  @diegogodinezr in
-  [#29618](https://github.com/google-gemini/gemini-cli/pull/29618)
-- fix(core): prevent deletion of resumed session history on quick exit (#29198)
-  by @villahernandez-coder in
-  [#29584](https://github.com/google-gemini/gemini-cli/pull/29584)
-- Changelog for v0.64.0-preview.0 by @gemini-cli-robot in
-  [#29656](https://github.com/google-gemini/gemini-cli/pull/29656)
-- Changelog for v0.63.0 by @gemini-cli-robot in
-  [#29659](https://github.com/google-gemini/gemini-cli/pull/29659)
-- fix(core): align OAuth callback iss parameter validation with RFC 9207
-  metadata by @luisfelipe-alt in
-  [#29616](https://github.com/google-gemini/gemini-cli/pull/29616)
-- fix(cli): prevent unnecessary terminal clears and scroll resets when expanding
-  with Ctrl+O by @jesussamuel-byte in
-  [#29640](https://github.com/google-gemini/gemini-cli/pull/29640)
-- chore(release): bump version to 0.65.0-nightly.20261006.gfb972b2f8 by
+- Update ROADMAP.md to no longer reference outdated 2025 roadmap by
+  @DavidAPierce in
+  [#29723](https://github.com/google-gemini/gemini-cli/pull/29723)
+- Changelog for v0.65.0-preview.0 by @gemini-cli-robot in
+  [#29739](https://github.com/google-gemini/gemini-cli/pull/29739)
+- chore(release): bump version to 0.66.0-nightly.20261013.g204db94ae by
   @gemini-cli-robot in
-  [#29657](https://github.com/google-gemini/gemini-cli/pull/29657)
-- fix(ci): add missing loop in unassign-inactive-assignees workflow by
+  [#29740](https://github.com/google-gemini/gemini-cli/pull/29740)
+- Changelog for v0.64.0 by @gemini-cli-robot in
+  [#29741](https://github.com/google-gemini/gemini-cli/pull/29741)
+- fix(ui): implement synchronized output and isolate spinner rendering by
+  @diegogodinezr in
+  [#29725](https://github.com/google-gemini/gemini-cli/pull/29725)
+- fix(ui): fix debug console height calculation and terminalBuffer flickering by
   @ugorla-dev in
-  [#29609](https://github.com/google-gemini/gemini-cli/pull/29609)
-- fix(core): enforce terminal user turn invariant and normalize request contents
-  by @luisfelipe-alt in
-  [#29612](https://github.com/google-gemini/gemini-cli/pull/29612)
-- `feat(telemetry): support custom OTLP headers in telemetry configuration` by
-  @jesussamuel-byte in
-  [#29641](https://github.com/google-gemini/gemini-cli/pull/29641)
-- fix(auth): prevent infinite verification and OAuth retry loops by
+  [#29695](https://github.com/google-gemini/gemini-cli/pull/29695)
+- fix(cli): prevent right-hand border bleed in scrollable tool containers by
   @villahernandez-coder in
-  [#29655](https://github.com/google-gemini/gemini-cli/pull/29655)
-- fix(cli): handle JSON parse and response stream errors in fetchJson by
-  @jesussamuel-byte in
-  [#29658](https://github.com/google-gemini/gemini-cli/pull/29658)
-- fix(core): preserve line terminators in truncateString by @diegogodinezr in
-  [#29673](https://github.com/google-gemini/gemini-cli/pull/29673)
-- fix(vscode-ide-companion): make IdeServer.stop() resolve while MCP sessions
-  are open by @elberthc-byte in
-  [#29674](https://github.com/google-gemini/gemini-cli/pull/29674)
-- fix(core): retain ask_user question text in the tool result display by
-  @elberthc-byte in
-  [#29677](https://github.com/google-gemini/gemini-cli/pull/29677)
-- fix(core): eliminate false positives on untrusted command flags and compound
-  loops by @DavidAPierce in
-  [#29672](https://github.com/google-gemini/gemini-cli/pull/29672)
-- fix(cli): clear cached credentials when re-selecting Google login by
-  @urielefrenvirtusa in
-  [#29643](https://github.com/google-gemini/gemini-cli/pull/29643)
-- fix(cli): resolve hang on Enter keypress in interactive mode (#23297) by
+  [#29742](https://github.com/google-gemini/gemini-cli/pull/29742)
+- refactor(core,cli): emit tool call groups from the scheduler and drop the UI
+  lookahead by @jesussamuel-byte in
+  [#29736](https://github.com/google-gemini/gemini-cli/pull/29736)
+- fix(core): format and quote Windows diff command arguments in openDiff by
+  @jvargassanchez-dot in
+  [#29753](https://github.com/google-gemini/gemini-cli/pull/29753)
+- fix(cli): round before selecting units in formatDuration by @diegogodinezr in
+  [#29766](https://github.com/google-gemini/gemini-cli/pull/29766)
+- fix(core): disable interactive credential and SSH prompts in getSafeGitEnv by
+  @villahernandez-coder in
+  [#29760](https://github.com/google-gemini/gemini-cli/pull/29760)
+- fix(cli): resolve settings placeholders after loading .env files by
   @elberthc-byte in
-  [#29476](https://github.com/google-gemini/gemini-cli/pull/29476)
-- perf(core): optimize ignore filtering and enable subtree pruning (#29077) by
-  @amelidev in [#29582](https://github.com/google-gemini/gemini-cli/pull/29582)
-- fix(a2a-server): isolate tool rejection to active call in sequential batches
-  by @jvargassanchez-dot in
-  [#29683](https://github.com/google-gemini/gemini-cli/pull/29683)
-- fix(cli): skip eager recursive file reading for @<directory> references by
+  [#29750](https://github.com/google-gemini/gemini-cli/pull/29750)
+- fix(core): harden SKILL.md frontmatter parsing for single-line descriptions by
+  @jesussamuel-byte in
+  [#29769](https://github.com/google-gemini/gemini-cli/pull/29769)
+- Add Banner about Gemini CLI not being optimized for Gemini 4 by @srithreepo in
+  [#29774](https://github.com/google-gemini/gemini-cli/pull/29774)
+- Update README to remove obsolete content by @srithreepo in
+  [#29775](https://github.com/google-gemini/gemini-cli/pull/29775)
+- fix(ci): remove unsupported members permission in unassign-inactive-assignees
+  workflow by @ugorla-dev in
+  [#29770](https://github.com/google-gemini/gemini-cli/pull/29770)
+- fix(cli): reset slash-command conflict dedupe when conflicts reappear by
   @jvargassanchez-dot in
-  [#29617](https://github.com/google-gemini/gemini-cli/pull/29617)
-- fix(cli): keep loading other extensions when one fails the allowlist check by
+  [#29768](https://github.com/google-gemini/gemini-cli/pull/29768)
+- fix(cli): verify active binary update to prevent PATH shadowing false success
+  by @urielefrenvirtusa in
+  [#29757](https://github.com/google-gemini/gemini-cli/pull/29757)
+- fix(cli): support 'keys' array in keybindings.json by @urielefrenvirtusa in
+  [#29773](https://github.com/google-gemini/gemini-cli/pull/29773)
+- fix(cli): forward termination signals from bootstrap parent to child process
+  by @villahernandez-coder in
+  [#29790](https://github.com/google-gemini/gemini-cli/pull/29790)
+- fix(ui): preserve terminal scrollback during viewport refreshes by
+  @diegogodinezr in
+  [#29792](https://github.com/google-gemini/gemini-cli/pull/29792)
+- fix(cli): decode streamed Node HTTP activity chunks with StringDecoder by
   @jesussamuel-byte in
-  [#29720](https://github.com/google-gemini/gemini-cli/pull/29720)
-- fix(cli): correct reverse search highlight index for expanding unicode
-  characters by @diegogodinezr in
-  [#29699](https://github.com/google-gemini/gemini-cli/pull/29699)
-- fix(core): treat whitespace-only UTF-16 and UTF-32 files as empty by
+  [#29827](https://github.com/google-gemini/gemini-cli/pull/29827)
+- chore: migrate gsutil usage to gcloud storage by @gurusai-voleti in
+  [#29839](https://github.com/google-gemini/gemini-cli/pull/29839)
+- fix(core): preserve user-level ~/.gitconfig in shell and git environments by
   @jesussamuel-byte in
-  [#29722](https://github.com/google-gemini/gemini-cli/pull/29722)
-- fix(cli): restore debounced static UI refresh on terminal width changes by
-  @jvargassanchez-dot in
-  [#29644](https://github.com/google-gemini/gemini-cli/pull/29644)
-- fix(cli): prevent session poisoning on rapid Ctrl-C interruption by
-  @villahernandez-coder in
-  [#29728](https://github.com/google-gemini/gemini-cli/pull/29728)
+  [#29832](https://github.com/google-gemini/gemini-cli/pull/29832)
+- fix(core): prevent false positive matches in isAuthenticationError by
+  @urielefrenvirtusa in
+  [#29835](https://github.com/google-gemini/gemini-cli/pull/29835)
+- fix(core): support opt-in private network endpoints for MCP OAuth flows by
+  @luisfelipe-alt in
+  [#29844](https://github.com/google-gemini/gemini-cli/pull/29844)
 
 **Full Changelog**:
-https://github.com/google-gemini/gemini-cli/compare/v0.64.0...v0.65.0
+https://github.com/google-gemini/gemini-cli/compare/v0.65.0...v0.66.0

package/bundle/docs/changelogs/preview.md

@@ -1,6 +1,6 @@
-# Preview release: v0.66.0-preview.0
+# Preview release: v0.67.0-preview.0
 
-Released: October 20, 2026
+Released: October 27, 2026
 
 Our preview release includes the latest, new, and experimental features. This
 release may not be as stable as our [latest weekly release](latest.md).
@@ -13,99 +13,101 @@ npm install -g @google/gemini-cli@preview
 
 ## Highlights
 
-- **Terminal UI & Output Synchronization**: Implemented synchronized terminal
-  output and isolated spinner rendering to prevent flickering, preserved
-  terminal scrollback during viewport refreshes, corrected debug console height
-  calculations, and eliminated right-hand border bleed in scrollable tool
-  containers.
-- **Tool Execution & Scheduler Architecture**: Refactored the tool execution
-  flow to emit tool call groups directly from the scheduler, removing UI
-  lookahead logic and simplifying execution scheduling.
-- **Shell & Git Environment Integrity**: Preserved user-level `~/.gitconfig`
-  settings across shell and Git environments, disabled interactive credential
-  and SSH prompts to prevent hangs in automated environments, and forwarded
-  termination signals from bootstrap parent processes.
-- **Configuration & Keybindings Flexibility**: Added support for a `keys` array
-  in `keybindings.json`, ensured settings placeholders resolve correctly after
-  loading `.env` files, and improved CLI self-update verification against PATH
-  shadowing.
-- **Networking & MCP Security**: Supported opt-in private network endpoints for
-  MCP OAuth flows and prevented false positive matches in authentication error
-  handling.
+- **Model Discovery Command & Flag**: Added a new `models` command and
+  `--list-models` flag for model discovery directly from the CLI.
+- **Container Sandbox IDE Bridging**: Bridged the IDE companion into container
+  sandboxes over exec stdio to improve IDE integration in containerized
+  environments.
+- **Cancellation & Signal Resilience**: Improved termination signal and
+  cancellation handling by stopping continuation stream processing, halting
+  auto-nudges, and preventing subsequent tool execution in non-interactive mode.
+- **Terminal Rendering & Unicode Support**: Refined character width calculation
+  for terminals rendering ambiguous-width characters and corrected display width
+  for Thai and Lao SARA AM scripts.
+- **Filesystem & Security Safeguards**: Hardened atomic file writing to respect
+  read-only files and hard links, resolved relative file paths against the
+  active IDE workspace root, scoped untrusted flag checks to external output,
+  and included MCP server and tool metadata in permission requests.
 
 ## What's Changed
 
-- Update ROADMAP.md to no longer reference outdated 2025 roadmap by
-  @DavidAPierce in
-  [#29723](https://github.com/google-gemini/gemini-cli/pull/29723)
-- Changelog for v0.65.0-preview.0 by @gemini-cli-robot in
-  [#29739](https://github.com/google-gemini/gemini-cli/pull/29739)
-- chore(release): bump version to 0.66.0-nightly.20261013.g204db94ae by
+- Changelog for v0.65.0 by @gemini-cli-robot in
+  [#29853](https://github.com/google-gemini/gemini-cli/pull/29853)
+- chore(release): bump version to 0.67.0-nightly.20261020.gb041de017 by
   @gemini-cli-robot in
-  [#29740](https://github.com/google-gemini/gemini-cli/pull/29740)
-- Changelog for v0.64.0 by @gemini-cli-robot in
-  [#29741](https://github.com/google-gemini/gemini-cli/pull/29741)
-- fix(ui): implement synchronized output and isolate spinner rendering by
-  @diegogodinezr in
-  [#29725](https://github.com/google-gemini/gemini-cli/pull/29725)
-- fix(ui): fix debug console height calculation and terminalBuffer flickering by
-  @ugorla-dev in
-  [#29695](https://github.com/google-gemini/gemini-cli/pull/29695)
-- fix(cli): prevent right-hand border bleed in scrollable tool containers by
-  @villahernandez-coder in
-  [#29742](https://github.com/google-gemini/gemini-cli/pull/29742)
-- refactor(core,cli): emit tool call groups from the scheduler and drop the UI
-  lookahead by @jesussamuel-byte in
-  [#29736](https://github.com/google-gemini/gemini-cli/pull/29736)
-- fix(core): format and quote Windows diff command arguments in openDiff by
-  @jvargassanchez-dot in
-  [#29753](https://github.com/google-gemini/gemini-cli/pull/29753)
-- fix(cli): round before selecting units in formatDuration by @diegogodinezr in
-  [#29766](https://github.com/google-gemini/gemini-cli/pull/29766)
-- fix(core): disable interactive credential and SSH prompts in getSafeGitEnv by
+  [#29854](https://github.com/google-gemini/gemini-cli/pull/29854)
+- Changelog for v0.66.0-preview.0 by @gemini-cli-robot in
+  [#29852](https://github.com/google-gemini/gemini-cli/pull/29852)
+- feat(cli): bridge the IDE companion into container sandboxes over exec stdio
+  by @elberthc-byte in
+  [#29858](https://github.com/google-gemini/gemini-cli/pull/29858)
+- fix(core): prevent duplicate agent loading when workspace is home directory
+  (#27692) by @urielefrenvirtusa in
+  [#29847](https://github.com/google-gemini/gemini-cli/pull/29847)
+- fix(ide): exclude IDE settings and GEMINI.md files from open file con text by
   @villahernandez-coder in
-  [#29760](https://github.com/google-gemini/gemini-cli/pull/29760)
-- fix(cli): resolve settings placeholders after loading .env files by
-  @elberthc-byte in
-  [#29750](https://github.com/google-gemini/gemini-cli/pull/29750)
-- fix(core): harden SKILL.md frontmatter parsing for single-line descriptions by
+  [#29848](https://github.com/google-gemini/gemini-cli/pull/29848)
+- fix(core): scope untrusted flag checks to external output and remember
+  approved flags by @luisfelipe-alt in
+  [#29833](https://github.com/google-gemini/gemini-cli/pull/29833)
+- fix(a2a-server): mount express.json() before A2A SDK route registration by
   @jesussamuel-byte in
-  [#29769](https://github.com/google-gemini/gemini-cli/pull/29769)
-- Add Banner about Gemini CLI not being optimized for Gemini 4 by @srithreepo in
-  [#29774](https://github.com/google-gemini/gemini-cli/pull/29774)
-- Update README to remove obsolete content by @srithreepo in
-  [#29775](https://github.com/google-gemini/gemini-cli/pull/29775)
-- fix(ci): remove unsupported members permission in unassign-inactive-assignees
-  workflow by @ugorla-dev in
-  [#29770](https://github.com/google-gemini/gemini-cli/pull/29770)
-- fix(cli): reset slash-command conflict dedupe when conflicts reappear by
-  @jvargassanchez-dot in
-  [#29768](https://github.com/google-gemini/gemini-cli/pull/29768)
-- fix(cli): verify active binary update to prevent PATH shadowing false success
-  by @urielefrenvirtusa in
-  [#29757](https://github.com/google-gemini/gemini-cli/pull/29757)
-- fix(cli): support 'keys' array in keybindings.json by @urielefrenvirtusa in
-  [#29773](https://github.com/google-gemini/gemini-cli/pull/29773)
-- fix(cli): forward termination signals from bootstrap parent to child process
-  by @villahernandez-coder in
-  [#29790](https://github.com/google-gemini/gemini-cli/pull/29790)
-- fix(ui): preserve terminal scrollback during viewport refreshes by
+  [#29850](https://github.com/google-gemini/gemini-cli/pull/29850)
+- fix(core): adhere to RFC 9110 token rules when splitting custom headers by
   @diegogodinezr in
-  [#29792](https://github.com/google-gemini/gemini-cli/pull/29792)
-- fix(cli): decode streamed Node HTTP activity chunks with StringDecoder by
-  @jesussamuel-byte in
-  [#29827](https://github.com/google-gemini/gemini-cli/pull/29827)
-- chore: migrate gsutil usage to gcloud storage by @gurusai-voleti in
-  [#29839](https://github.com/google-gemini/gemini-cli/pull/29839)
-- fix(core): preserve user-level ~/.gitconfig in shell and git environments by
+  [#29865](https://github.com/google-gemini/gemini-cli/pull/29865)
+- fix(core): respect read-only files and hard links in atomic writeTextFile by
+  @elberthc-byte in
+  [#29749](https://github.com/google-gemini/gemini-cli/pull/29749)
+- fix(a2a-server,core): preserve extended token usage metadata and align
+  per-turn reporting by @jvargassanchez-dot in
+  [#29834](https://github.com/google-gemini/gemini-cli/pull/29834)
+- fix(core): ensure all model turns with function calls receive thought
+  signatures by @amelidev in
+  [#29828](https://github.com/google-gemini/gemini-cli/pull/29828)
+- fix(cli): handle termination signals and prevent tool execution after
+  cancellation in non-interactive mode by @urielefrenvirtusa in
+  [#29849](https://github.com/google-gemini/gemini-cli/pull/29849)
+- fix(cli): preserve ${VAR} placeholders during deprecated settings migration by
+  @villahernandez-coder in
+  [#29867](https://github.com/google-gemini/gemini-cli/pull/29867)
+- fix(cli): stop continuation stream processing and auto-nudge after request
+  cancellation by @jesussamuel-byte in
+  [#29868](https://github.com/google-gemini/gemini-cli/pull/29868)
+- fix(cli): correct Thai and Lao SARA AM display width by @elberthc-byte in
+  [#29883](https://github.com/google-gemini/gemini-cli/pull/29883)
+- fix(core): resolve relative file paths against active IDE workspace root by
+  @villahernandez-coder in
+  [#29838](https://github.com/google-gemini/gemini-cli/pull/29838)
+- feat(cli): add models command and --list-models flag for model discovery by
+  @urielefrenvirtusa in
+  [#29880](https://github.com/google-gemini/gemini-cli/pull/29880)
+- fix(cli): convert Claude hook timeout from seconds to milliseconds during
+  migration by @villahernandez-coder in
+  [#29899](https://github.com/google-gemini/gemini-cli/pull/29899)
+- fix(core): classify project spending cap errors as terminal quota errors by
   @jesussamuel-byte in
-  [#29832](https://github.com/google-gemini/gemini-cli/pull/29832)
-- fix(core): prevent false positive matches in isAuthenticationError by
+  [#29961](https://github.com/google-gemini/gemini-cli/pull/29961)
+- fix(acp): include MCP server and tool metadata in permission requests by
+  @duvanka-prasad in
+  [#29910](https://github.com/google-gemini/gemini-cli/pull/29910)
+- fix(cli): prevent parent command name insertion on /chat list autocomplete by
   @urielefrenvirtusa in
-  [#29835](https://github.com/google-gemini/gemini-cli/pull/29835)
-- fix(core): support opt-in private network endpoints for MCP OAuth flows by
-  @luisfelipe-alt in
-  [#29844](https://github.com/google-gemini/gemini-cli/pull/29844)
+  [#29967](https://github.com/google-gemini/gemini-cli/pull/29967)
+- fix(cli): validate finite numbers in numeric settings editor by @diegogodinezr
+  in [#29968](https://github.com/google-gemini/gemini-cli/pull/29968)
+- fix(core): allow trusted system paths on Android (Termux) for ripgrep
+  resolution (#21836) by @amelidev in
+  [#29884](https://github.com/google-gemini/gemini-cli/pull/29884)
+- fix(core): normalize CRLF line endings before diffing in getDiffContextSnippet
+  by @jesussamuel-byte in
+  [#29966](https://github.com/google-gemini/gemini-cli/pull/29966)
+- fix(cli): handle terminals that render ambiguous-width characters as wide by
+  @elberthc-byte in
+  [#29905](https://github.com/google-gemini/gemini-cli/pull/29905)
+- fix(cli): prevent duplicate history and double telemetry in confirm_action
+  flow by @duvanka-prasad in
+  [#29974](https://github.com/google-gemini/gemini-cli/pull/29974)
 
 **Full Changelog**:
-https://github.com/google-gemini/gemini-cli/compare/v0.65.0-preview.0...v0.66.0-preview.0
+https://github.com/google-gemini/gemini-cli/compare/v0.66.0-preview.0...v0.67.0-preview.0

package/bundle/docs/cli/sandbox.md

@@ -415,8 +415,14 @@ $env:SANDBOX_FLAGS="--flag1 --flag2=value"
 
 ### Linux UID/GID handling
 
-The sandbox automatically handles user permissions on Linux. Override these
-permissions with:
+Gemini CLI automatically handles user permissions in container sandboxes on
+Linux. When the sandbox runs as your host UID/GID (the default on supported
+Linux distributions) and you use rootless Podman, Gemini CLI also passes
+`--userns=keep-id`. This keeps files that the sandbox creates in mounted
+directories owned by your host user. To use a different user namespace mode, add
+your own `--userns` option to `SANDBOX_FLAGS`.
+
+Override the default Linux UID/GID mapping behavior with:
 
 **macOS/Linux**