READY TO POST:
gemini cli just dropped v0.59.0-preview.0, looks like some security fixes around ssrf and workspace trust.
google's gemini cli has a new pre-release, v0.59.0-preview.0. includes a fix to prevent ssrf in oauth metadata discovery.
google-gemini/gemini-cli pre-release: v0.59.0-preview.0 name: Release v0.59.0-preview.0 published: 2026-09-01T20:19:07Z url: https://github.com/google-gemini/gemini-cli/releases/tag/v0.59.0-preview.0 ## What's Changed * Changelog for v0.58.0-preview.0 by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/29082 * chore(release): bump version to 0.59.0-nightly.20260825.g812f7a2bc by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/29083 * fix(core): prevent SSRF in MCP OAuth metadata discovery and authentication by @josebalius in https://github.com/google-gemini/gemini-cli/pull/29081 * fix(core): enforce fail-closed workspace trust and filter mcpServers in restricted mode by @luisfelipe-alt in https://github.com/google-gemini/gemini-cli/pull/29099 **Full Changelog**: https://github.com/google-gemini/gemini-cli/compare/v0.58.0-preview.0...v0.59.0-preview.0
caught by the 20-minute sweep · the live wire · all receipts