READY TO POST:
gemini cli just dropped a new nightly build, v0.60.0, with some important security fixes for oauth and api keys. stay safe out there!
developers using gemini cli on macos might want to check out the latest nightly (v0.60.0) which includes a fix for temporary directories and sandbox isolation.
google-gemini/gemini-cli pre-release: v0.60.0-nightly.20260904.g87a9c71d5 name: Release v0.60.0-nightly.20260904.g87a9c71d5 published: 2026-09-04T01:40:22Z url: https://github.com/google-gemini/gemini-cli/releases/tag/v0.60.0-nightly.20260904.g87a9c71d5 ## What's Changed * fix(core): enforce RFC 9207 issuer identification in MCP OAuth flow by @jvargassanchez-dot in https://github.com/google-gemini/gemini-cli/pull/29117 * chore(release): bump version to 0.60.0-nightly.20260901.g0bd1d4397 by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/29162 * Changelog for v0.58.0 by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/29161 * fix(cli): isolate temporary directory for macOS Seatbelt sandbox by @jvargassanchez-dot in https://github.com/google-gemini/gemini-cli/pull/29171 * feat(extensions): harden path resolution and boundary validation in extension loader by @diegogodinezr in https://github.com/google-gemini/gemini-cli/pull/29169 * Changelog for v0.59.0-preview.0 by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/29159 * fix(core): sanitize and remove hardcoded Google CrUX API key in chrome-devtools-mcp by @amelidev in https://github.com/google-gemini/gemini-cli/pull/29158 **Full Changelog**: https://github.com/google-gemini/gemini-cli/compare/v0.59.0-nightly.20260902.g4963a4456...v0.60.0-nightly.20260904.g87a9c71d5
caught by the 20-minute sweep · the live wire · all receipts