gemini-cli

Telemetry configuration now supports custom OTLP headers. Also fixed infinite verification and OAuth retry loops, and enforced the terminal user turn invariant with normalized request contents.

Read-only workspace settings are now enforced in untrusted folders, and resumed sessions no longer delete history on quick exit or produce duplicate tool response turns. Also aligned OAuth callback iss parameter validation with RFC 9207 metadata.

Fixed an infinite auth loop caused by file contention, headless keyring, and supervisor state drops, and bounded tool output size with an optimized memory lifecycle in long-running agent loops. Also fixed a retry progress indicator during connection recovery, missing MCP enablement config being confused with malformed JSON, and temporary directories left behind by background shell execution.

An @ within code no longer triggers a CPU hang or quote swallowing, and file tool operations are serialized with atomic writes. Also persists CLI state atomically with backup recovery on corruption, ensures Ctrl+C emergency abort reaches the cancellation handler, and resolves @file:line references.

Full Changelog: https://github.com/google-gemini/gemini-cli/compare/v0.64.0-nightly.20261005.gfb972b2f8...v0.64.0-nightly.20261006.gfb972b2f8

Full Changelog: https://github.com/google-gemini/gemini-cli/compare/v0.64.0-nightly.20261003.gfb972b2f8...v0.64.0-nightly.20261005.gfb972b2f8

Enter and Spacebar now reliably confirm selection list options in the CLI.

CLI state is now persisted atomically and recovered from a backup on corruption, and directory removal during extension updates retries on Windows locking errors. Ctrl+C emergency abort now reaches the cancellation handler during active operations, plus fixes for @file:line references, IME cursor forwarding under Windows ConPTY, and chat history memory growth.

Fixed a CLI CPU hang and quote swallowing triggered by @ within code, and file tool operations in core are now serialized with atomic writes.

Autonomous plan execution now works in non-interactive mode, and truncation is disabled when maxChars is zero or less in formatTruncatedToolOutput. Also fixes headless folder trust propagation, bridges ACP PromptResponse.usage into usage_update notifications, and adds V1 to V2 settings migration logic.

Credential handling now retains the OAuth refresh token across refreshes and makes credential deletion idempotent, and support for Gemini 3.8 Flash and 3.5 Flash Lite models is added. Also improved PTY file descriptor cleanup, ConPTY process exit synchronization, terminal buffer memory management, and MCP tool call title formatting.

Fixed an infinite authentication loop caused by file contention, headless keyring issues, and supervisor state drops. Tool output size is now bounded with an optimized memory lifecycle in long-running agent loops, and temporary directories are cleaned up when background shell execution exits.

Fixed an infinite auth loop caused by file contention, headless keyring issues, and supervisor state drops.

Full Changelog: https://github.com/google-gemini/gemini-cli/compare/v0.63.0-nightly.20260926.g2fe7c2d3f...v0.63.0-nightly.20260928.g2fe7c2d3f

Fixed a temporary directory leak when background shell execution exits, and ACP now resolves the session before config initialization while avoiding same-minute filename collisions. Also removed an invalid diff.external override and aligned policy redirection gates, path validation, and workflow parsing.

Tool output size is now bounded and the memory lifecycle optimized in long-running agent loops, and paused stdin is restored after capability detection. Also distinguishes missing MCP enablement config from malformed JSON.

The CLI now displays a retry progress indicator while recovering from a dropped connection, and the VS Code integration test skips when the integration test client is not present.

Fixes an indirect prompt injection vector via build file modifications and untrusted flags, and hardens sandbox filesystem boundaries and runtime state isolation. Also preserves explicit versioned Flash model IDs and AgentLoopContext properties across object spread.

OAuth refresh tokens are now retained on refresh and credential deletion is idempotent, and terminal buffer memory management was improved with Windows diagnostic path formatting. Also adds Gemini flash model support and assorted PTY, ACP, and border-rendering fixes.

What's Changed

• fix(patch): cherry-pick 62364cb to release/v0.61.0-preview.0-pr-29443 to patch version v0.61.0-preview.0 and create version 0.61.0-preview.1 by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/29455