v0.59.0

google-gemini/gemini-cliv0.59.0Sep 8, 2026by gemini-cli-robot

Upgrading?

AI Summary

This release focuses on security hardening and workspace trust enforcement. It addresses Server-Side Request Forgery (SSRF) vulnerabilities in MCP OAuth and introduces stricter controls for workspace trust and MCP server filtering.

Key Highlights

  • Prevent SSRF in MCP OAuth metadata discovery and authentication
  • Enforce fail-closed workspace trust
  • Filter MCP servers in restricted mode
  • Version bump to 0.59.0

Full Release Notes

## What's Changed
* Changelog for v0.58.0-preview.0 by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/29082
* chore(release): bump version to 0.59.0-nightly.20260825.g812f7a2bc by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/29083
* fix(core): prevent SSRF in MCP OAuth metadata discovery and authentication by @josebalius in https://github.com/google-gemini/gemini-cli/pull/29081
* fix(core): enforce fail-closed workspace trust and filter mcpServers in restricted mode by @luisfelipe-alt in https://github.com/google-gemini/gemini-cli/pull/29099


**Full Changelog**: https://github.com/google-gemini/gemini-cli/compare/v0.58.0...v0.59.0

Related Repositories