Release v0.60.0-nightly.20260904.g87a9c71d5

What's Changed

• fix(core): enforce RFC 9207 issuer identification in MCP OAuth flow by @jvargassanchez-dot in #29117
• chore(release): bump version to 0.60.0-nightly.20260901.g0bd1d4397 by @gemini-cli-robot in #29162
• Changelog for v0.58.0 by @gemini-cli-robot in #29161
• fix(cli): isolate temporary directory for macOS Seatbelt sandbox by @jvargassanchez-dot in #29171
• feat(extensions): harden path resolution and boundary validation in extension loader by @diegogodinezr in #29169
• Changelog for v0.59.0-preview.0 by @gemini-cli-robot in #29159
• fix(core): sanitize and remove hardcoded Google CrUX API key in chrome-devtools-mcp by @amelidev in #29158

Full Changelog: v0.59.0-nightly.20260902.g4963a4456...v0.60.0-nightly.20260904.g87a9c71d5

Release v0.59.0-nightly.20260902.g4963a4456

What's Changed

• fix(core): improve destination validation and connection routing in web fetch utilities by @diegogodinezr in #29120

New Contributors

• @diegogodinezr made their first contribution in #29120

Full Changelog: v0.59.0-nightly.20260901.g0bd1d4397...v0.59.0-nightly.20260902.g4963a4456

Release v0.59.0-preview.0

What's Changed

• Changelog for v0.58.0-preview.0 by @gemini-cli-robot in #29082
• chore(release): bump version to 0.59.0-nightly.20260825.g812f7a2bc by @gemini-cli-robot in #29083
• fix(core): prevent SSRF in MCP OAuth metadata discovery and authentication by @josebalius in #29081
• fix(core): enforce fail-closed workspace trust and filter mcpServers in restricted mode by @luisfelipe-alt in #29099

Full Changelog: v0.58.0-preview.0...v0.59.0-preview.0

Release v0.59.0-nightly.20260901.g0bd1d4397

Full Changelog: v0.59.0-nightly.20260831.g0bd1d4397...v0.59.0-nightly.20260901.g0bd1d4397

Release v0.58.0

What's Changed

• Changelog for v0.57.0-preview.0 by @gemini-cli-robot in #28918
• fix(core): ensure consistent symlink evaluation in ignore path handling by @luisfelipe-alt in #28915
• refactor(core): remove eslint-disable and type-asserts from shellExecutionService by @DavidAPierce in #28862
• fix(sandbox): isolate Docker and container runtime sockets and binaries in macOS Seatbelt by @josebalius in #28935
• fix(a2a-server): clear stale cancellation error on new message turns by @amelidev in #28940
• fix(core): declare top-level safety checkers in write policy configuration by @luisfelipe-alt in #28961
• (FIX) history rollback and retry nudge optimizations by @DavidAPierce in #28934

Full Changelog: v0.57.0...v0.58.0

Release v0.59.0-nightly.20260831.g0bd1d4397

Full Changelog: v0.59.0-nightly.20260830.g0bd1d4397...v0.59.0-nightly.20260831.g0bd1d4397

Release v0.59.0-nightly.20260830.g0bd1d4397

Full Changelog: v0.59.0-nightly.20260829.g0bd1d4397...v0.59.0-nightly.20260830.g0bd1d4397

Release v0.59.0-nightly.20260829.g0bd1d4397

What's Changed

• fix(core): enforce fail-closed workspace trust and filter mcpServers in restricted mode by @luisfelipe-alt in #29099

Full Changelog: v0.59.0-nightly.20260828.g3c311beac...v0.59.0-nightly.20260829.g0bd1d4397

Release v0.59.0-nightly.20260828.g3c311beac

Full Changelog: v0.59.0-nightly.20260827.g3c311beac...v0.59.0-nightly.20260828.g3c311beac

Release v0.59.0-nightly.20260827.g3c311beac

What's Changed

• fix(core): prevent SSRF in MCP OAuth metadata discovery and authentication by @josebalius in #29081

Full Changelog: v0.59.0-nightly.20260826.g64b5b79a6...v0.59.0-nightly.20260827.g3c311beac