Gemini CLI — August 2026 Releases

5 releases in August 2026.

What's new in Gemini CLI, August 2026

Gemini CLI tightens credential and path security and hardens request handling

Gemini CLI's August 2026 releases were mostly security hardening and reliability fixes, with no new user-facing commands called out in the notes. Five releases shipped, from v0.54.0 to v0.57.0.

On security, v0.54.0 enforces HTTPS for GoogleCredentialsAuthProvider to prevent cleartext credential leakage and rotates the session ID on model fallback to avoid stateful API errors. v0.55.1 adds a case-insensitive sensitive path blocklist and fixes a symbolic link directory escape in the memory import processor. It also adds tool registry discovery. v0.57.0 resolves the Cloud Workstations proxy redirect URI for OAuth flows, fixes a swallowed directory mismatch in IDE connections, rolls back an entire multi-turn request on cancellation or abort, and adds silent retries for capacity errors. v0.54.4 was a patch release, and the v0.56.0 notes contain only a changelog link.

  • HTTPS now enforced for GoogleCredentialsAuthProvider to prevent cleartext credential leakage (v0.54.0)
  • Session ID rotates on model fallback to prevent stateful API errors (v0.54.0)
  • Case-insensitive sensitive path blocklist and a fix for a symlink directory escape in memory import (v0.55.1)
  • Tool registry discovery added (v0.55.1)
  • Cloud Workstations proxy redirect URI resolved dynamically for OAuth flows (v0.57.0)
  • Multi-turn requests roll back fully on cancellation or abort; capacity errors get silent retries (v0.57.0)

Upgrading from v0.53.1? See every change through v0.57.0.

Gemini CLI full changelog