v0.55.1
google-gemini/gemini-cliv0.55.1Aug 11, 2026by gemini-cli-robot
AI Summary
This release emphasizes security enhancements, particularly around workspace trust and task isolation to prevent remote code execution, alongside improvements to CI/CD processes. It introduces a tool registry discovery feature and expands the caretaker ecosystem with Cloud Run ingestion services and triage workers.
Key Highlights
- Security: Enforced workspace trust and task isolation to prevent RCE, and case-insensitive sensitive path blocklist.
- New Feature: Tool registry discovery capability.
- Caretaker Expansion: Cloud Run webhook ingestion service and skeleton egress service.
- CI/CD: Prevented workspace binary shadowing and bad NPM releases.
- Stability: Mitigated infinite ReAct and prompt injection loops.
New Features
- Tool registry discovery capability
- Caretaker Cloud Run webhook ingestion service
- Caretaker egress octokit GitHub action handler
- Caretaker triage LLM orchestrator and container build
- Eval coverage report command
Full Release Notes
## What's Changed * fix/verify release npm ci ignore scripts by @rmedranollamas in https://github.com/google-gemini/gemini-cli/pull/28116 * fix(ci): prevent workspace binary shadowing in release verification by @galdawave in https://github.com/google-gemini/gemini-cli/pull/28132 * Feat/tool registry discovery by @ved015 in https://github.com/google-gemini/gemini-cli/pull/28113 * fix(ci): prevent bad NPM releases and promote job crashes by @galdawave in https://github.com/google-gemini/gemini-cli/pull/28147 * Changelog for v0.50.0-preview.1 by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/28150 * Fix no_proxy test by @jerrylin3321 in https://github.com/google-gemini/gemini-cli/pull/28131 * chore(release): bump version to 0.51.0-nightly.20260625.g3fbf93e26 by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/28151 * Vertex base url update by @DavidAPierce in https://github.com/google-gemini/gemini-cli/pull/28145 * fix(security): enforce case-insensitive sensitive path blocklist and vscode hitl by @luisfelipe-alt in https://github.com/google-gemini/gemini-cli/pull/27966 * fix(core-tools): resolve defensive path resolution for at-reference files and fix macOS tests by @luisfelipe-alt in https://github.com/google-gemini/gemini-cli/pull/28053 * feat(caretaker): implement Cloud Run webhook ingestion service by @chadd28 in https://github.com/google-gemini/gemini-cli/pull/28015 * fix(core): resolve symbolic link directory escape in memory import processor by @luisfelipe-alt in https://github.com/google-gemini/gemini-cli/pull/28233 * feat(caretaker): egress cloud run service skeleton by @chadd28 in https://github.com/google-gemini/gemini-cli/pull/28167 * fix(sandbox): make ~/.gitconfig read-only in the macOS sandbox by @ompatel-aiml in https://github.com/google-gemini/gemini-cli/pull/28221 * fix(core): preserve escape sequences in string literals for modern models by @luisfelipe-alt in https://github.com/google-gemini/gemini-cli/pull/28299 * fix(core): strip thoughts from scrubbed history turns and resolve thought leakage by @amelidev in https://github.com/google-gemini/gemini-cli/pull/27971 * Refactor: exclude transient CI configuration files from workspace context by @DavidAPierce in https://github.com/google-gemini/gemini-cli/pull/28216 * feat(caretaker-triage): add triage worker core foundational modules by @chadd28 in https://github.com/google-gemini/gemini-cli/pull/28163 * feat(caretaker-egress): implement octokit github action handler for egress service by @chadd28 in https://github.com/google-gemini/gemini-cli/pull/28303 * chore(release): bump version to 0.52.0-nightly.20260707.g27a3da3e8 by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/28323 * Changelog for v0.51.0-preview.0 by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/28320 * Changelog for v0.50.0 by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/28322 * fix(core-tools): bypass LLM correction for JSON and IPYNB files in write_file and replace by @amelidev in https://github.com/google-gemini/gemini-cli/pull/28223 * fix(core): use unambiguous previous intent label in fallback summary by @amelidev in https://github.com/google-gemini/gemini-cli/pull/28343 * feat(caretaker-triage): implement main worker execution loop and egress action publisher by @chadd28 in https://github.com/google-gemini/gemini-cli/pull/28306 * fix(privacy): show a clear message when the account has no Code Assist tier by @ompatel-aiml in https://github.com/google-gemini/gemini-cli/pull/28304 * fix(core): enrich shared project quota limit errors with setup hint by @amelidev in https://github.com/google-gemini/gemini-cli/pull/28391 * fix(a2a-server): ensure task cancellation aborts execution loop by @luisfelipe-alt in https://github.com/google-gemini/gemini-cli/pull/28316 * fix(core): simplify plan mode write policy to support relative paths by @DavidAPierce in https://github.com/google-gemini/gemini-cli/pull/28398 * feat(core): Bump node google-auth-library version to 10.9.0 by @jerrylin3321 in https://github.com/google-gemini/gemini-cli/pull/28385 * chore/release: bump version to 0.52.0-nightly.20260715.gfa975395b by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/28402 * fix(core,a2a): group cancelled tool responses and coalesce consecutive roles to prevent 400 Bad Request by @luisfelipe-alt in https://github.com/google-gemini/gemini-cli/pull/28407 * feat(caretaker-triage): implement LLM triage orchestrator and container build by @chadd28 in https://github.com/google-gemini/gemini-cli/pull/28345 * refactor(cli): align macOS permissive Seatbelt profiles with deny-default model by @ompatel-aiml in https://github.com/google-gemini/gemini-cli/pull/28424 * fix(core): mitigate infinite ReAct loops and prompt injection loops by @amelidev in https://github.com/google-gemini/gemini-cli/pull/28429 * fix(a2a-server): enforce workspace trust and task isolation to prevent RCE by @luisfelipe-alt in https://github.com/google-gemini/gemini-cli/pull/28470 * fix(core): sequentially verify cached credentials and restore GOOGLE_APPLICATION_CREDENTIALS fallback by @luisfelipe-alt in https://github.com/google-gemini/gemini-cli/pull/28472 * feat(evals): add eval coverage report command by @ved015 in https://github.com/google-gemini/gemini-cli/pull/28169 * Changelog for v0.53.0-preview.0 by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/28507 * Changelog for v0.52.0 by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/28508 * chore(release): bump version to 0.54.0-nightly.20260722.gf743ab579 by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/28510 * fix(caretaker): sanitize and wrap issue title in untrusted_context by @chadd28 in https://github.com/google-gemini/gemini-cli/pull/28352 * chore(caretaker): update vitest to v3.2.4 and add package-lock.json files by @chadd28 in https://github.com/google-gemini/gemini-cli/pull/28409 * fix(core): rotate session ID on model fallback to prevent stateful API errors by @amelidev in https://github.com/google-gemini/gemini-cli/pull/28469 * feat(caretaker-triage): post comment before auto-closing issues by @chadd28 in https://github.com/google-gemini/gemini-cli/pull/28411 * fix(core): enforce HTTPS for GoogleCredentialsAuthProvider to prevent cleartext leakage by @amelidev in https://github.com/google-gemini/gemini-cli/pull/28517 * fix(core): filter out thought parts from getHistoryTurns when context management is disabled by @DavidAPierce in https://github.com/google-gemini/gemini-cli/pull/28509 * fix(a2a-server): normalize CRLF line endings to LF in getProposedContent by @luisfelipe-alt in https://github.com/google-gemini/gemini-cli/pull/28531 * fix(core): enforce explicit tag length and validation in file keychain by @luisfelipe-alt in https://github.com/google-gemini/gemini-cli/pull/28523 * chore/release: bump version to 0.54.0-nightly.20260728.gbef611950 by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/28552 * feat(pr-generator-db): implement Firestore concurrency dual-locking and test ingestion utilities by @joneba-google in https://github.com/google-gemini/gemini-cli/pull/28432 * feat(pr-generator-agent): implement Antigravity agent runner and prompt templates … by @joneba-google in https://github.com/google-gemini/gemini-cli/pull/28434 * fix(core): skip merged function-response turns when finding the active loop by @adamfweidman in https://github.com/google-gemini/gemini-cli/pull/28565 * chore(release): bump version to 0.55.0-nightly.20260728.gd29268d36 by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/28569 * Changelog for v0.54.0-preview.0 by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/28567 * Changelog for v0.53.0 by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/28568 * chore/release: bump version to 0.55.0-nightly.20260729.g3499c84f7 by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/28573 * fix(core): classify capacity exhaustion as terminal to prevent retry hangs by @luisfelipe-alt in https://github.com/google-gemini/gemini-cli/pull/28599 * fix(core,cli): propagate InvalidStreamError details to UI for specific empty response guidance by @DavidAPierce in https://github.com/google-gemini/gemini-cli/pull/28566 * fix(cli): fall back to embedded macOS seatbelt profiles if missing by @amelidev in https://github.com/google-gemini/gemini-cli/pull/28551 * feat(pr-generator-core): add environment config parser, command executor, GitHub R… by @joneba-google in https://github.com/google-gemini/gemini-cli/pull/28435 * feat(pr-generator-orchestrator): implement iterative bug-fixing state machine and container worker entrypoint by @joneba-google in https://github.com/google-gemini/gemini-cli/pull/28433 * feat(pr-generator-infra): configure Cloud Run job, Workflows definition, and Dockerfile by @joneba-google in https://github.com/google-gemini/gemini-cli/pull/28431 * fix(release): handle npm dist-tag deletion failures on registries that forbid it by @DavidAPierce in https://github.com/google-gemini/gemini-cli/pull/28694 * fix(core): stop a new user message fusing into an unanswered tool response by @adamfweidman in https://github.com/google-gemini/gemini-cli/pull/28700 * fix(core,cli): repair /compress session reload and quota-fallback tool response loss by @adamfweidman in https://github.com/google-gemini/gemini-cli/pull/28672 * fix(core): preserve functionCall thoughtSignature when stripping thought parts by @sarbojitrana in https://github.com/google-gemini/gemini-cli/pull/28607 * fix(core): unwrap and parse nested gaxios streaming errors from cause message by @luisfelipe-alt in https://github.com/google-gemini/gemini-cli/pull/28689 * Changelog for v0.55.0-preview.1 by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/28706 * chore(release): bump version to 0.56.0-nightly.20260806.g761f604c1 by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/28707 * Changelog for v0.54.0 by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/28708 * Reclassifying Capacity Exhaustion as Terminal Error by @luisfelipe-alt in https://github.com/google-gemini/gemini-cli/pull/28716 * feat(caretaker): update Firestore schema with error, and pr_number fields by @chadd28 in https://github.com/google-gemini/gemini-cli/pull/28467 * feat(caretaker-triage): prompt hill-climbing & orchestrator updates by @chadd28 in https://github.com/google-gemini/gemini-cli/pull/28524 * feat(caretaker): add triage Cloud Run job workflow by @chadd28 in https://github.com/google-gemini/gemini-cli/pull/28468 * feat(caretaker-evals): add triage evaluation framework and judge runner by @chadd28 in https://github.com/google-gemini/gemini-cli/pull/28530 * feat(caretaker-evals): add local golden issue collection and firestore sync tools by @chadd28 in https://github.com/google-gemini/gemini-cli/pull/28532 * feat(caretaker): publish workable spec event to ready-for-code Pub/Sub topic by @chadd28 in https://github.com/google-gemini/gemini-cli/pull/28588 * feat(caretaker): add GCP deployment script for caretaker agent services by @chadd28 in https://github.com/google-gemini/gemini-cli/pull/28529 * feat(caretaker-evals): add Cloud Run job entrypoint for eval runner by @chadd28 in https://github.com/google-gemini/gemini-cli/pull/28727 * fix(caretaker): clear lock on NEEDS_HUMAN transition by @chadd28 in https://github.com/google-gemini/gemini-cli/pull/28601 * feat(ingestion): add issue comment handling and re-triage workflow by @chadd28 in https://github.com/google-gemini/gemini-cli/pull/28690 * fix(core): refresh MCP OAuth tokens with the stored client ID by @ParthivNaresh in https://github.com/google-gemini/gemini-cli/pull/28481 * fix(core,cli): resolve false model capacity exhaustion and fix core quota lookup model mapping by @DavidAPierce in https://github.com/google-gemini/gemini-cli/pull/28730 * feat(evals): add local report command and developer documentation by @ved015 in https://github.com/google-gemini/gemini-cli/pull/28369 * fix(core): dynamically resolve Cloud Workstations proxy redirect URI for OAuth flows by @amelidev in https://github.com/google-gemini/gemini-cli/pull/28688 ## New Contributors * @jerrylin3321 made their first contribution in https://github.com/google-gemini/gemini-cli/pull/28131 * @chadd28 made their first contribution in https://github.com/google-gemini/gemini-cli/pull/28015 * @joneba-google made their first contribution in https://github.com/google-gemini/gemini-cli/pull/28432 * @sarbojitrana made their first contribution in https://github.com/google-gemini/gemini-cli/pull/28607 * @ParthivNaresh made their first contribution in https://github.com/google-gemini/gemini-cli/pull/28481 **Full Changelog**: https://github.com/google-gemini/gemini-cli/compare/v0.49.0-preview.0...v0.55.1