{
  "schema": "https://agentsnacks.ai/api/schema.json",
  "schema_version": "1.0",
  "generated": "2026-10-16",
  "publisher": "Agent Snacks",
  "tool": "gemini-cli",
  "items": [
    {
      "id": "daily-2026-10-21-gemini-cli-untrusted-settings",
      "type": "daily",
      "date": "2026-10-21",
      "tool": "gemini-cli",
      "title": "Untrusted folders keep their Gemini CLI settings",
      "summary": "Gemini CLI users, update now: settings in untrusted folders are now read-only. Before, gemini mcp add or gemini mcp remove in a folder you hadn’t trusted could remove all existing keys from that project’s .gemini/settings.json.",
      "spice": 2,
      "source_url": "https://github.com/google-gemini/gemini-cli/releases/tag/v0.65.0",
      "source_urls": [
        "https://github.com/google-gemini/gemini-cli/releases/tag/v0.65.0",
        "https://github.com/google-gemini/gemini-cli/pull/29583"
      ],
      "shipped": "2026-10-21",
      "source_checked": true,
      "verified": true,
      "url": "https://agentsnacks.ai/daily/2026-10-21-gemini-cli-untrusted-settings/",
      "issue": null,
      "backfilled": false,
      "backfill": false,
      "category": null,
      "media": null,
      "teaser": "Gemini CLI users, update now: settings in untrusted folders are now read-only.",
      "also_in": [],
      "share_url": "https://agentsnacks.ai/s/daily-2026-10-21-gemini-cli-untrusted-settings/",
      "published_at": "2026-10-21T07:00:00-04:00",
      "shipped_at": "2026-10-21T07:00:00-04:00"
    },
    {
      "id": "bf-gemini-cli-2026-09-15-0",
      "type": "changelog",
      "date": "2026-10-16",
      "shipped": "2026-09-15",
      "tool": "gemini-cli",
      "title": "Gemini CLI now checks where web fetches go and who signs MCP logins",
      "summary": "Update now: Gemini CLI tightens web-fetch and MCP OAuth checks. Update to 0.60.0 or later: it validates web-fetch destinations and enforces RFC 9207 issuer identification in MCP OAuth.",
      "spice": 2,
      "spice_basis": "auto (release size)",
      "source_url": "https://github.com/google-gemini/gemini-cli/releases/tag/v0.60.0",
      "source_urls": [
        "https://github.com/google-gemini/gemini-cli/releases/tag/v0.60.0"
      ],
      "source_checked": true,
      "verified": true,
      "url": "https://agentsnacks.ai/tools/gemini-cli/#bf-gemini-cli-2026-09-15-0",
      "issue": null,
      "backfill": true,
      "added": "2026-10-16",
      "surface": null,
      "category": null,
      "media": null,
      "teaser": "Update now: Gemini CLI tightens web-fetch and MCP OAuth checks.",
      "also_in": [],
      "share_url": "https://agentsnacks.ai/s/bf-gemini-cli-2026-09-15-0/",
      "published_at": "2026-10-16T07:00:00-04:00",
      "shipped_at": "2026-09-15T07:00:00-04:00"
    },
    {
      "id": "bf-gemini-cli-2026-09-08-1",
      "type": "changelog",
      "date": "2026-10-16",
      "shipped": "2026-09-08",
      "tool": "gemini-cli",
      "title": "Gemini CLI closes a server-side request hole in MCP logins",
      "summary": "Update now: Gemini CLI closes an SSRF hole in MCP OAuth discovery. Update to 0.59.0 or later; it also makes workspace trust fail closed.",
      "spice": 2,
      "spice_basis": "auto (release size)",
      "source_url": "https://github.com/google-gemini/gemini-cli/releases/tag/v0.59.0",
      "source_urls": [
        "https://github.com/google-gemini/gemini-cli/releases/tag/v0.59.0"
      ],
      "source_checked": true,
      "verified": true,
      "url": "https://agentsnacks.ai/tools/gemini-cli/#bf-gemini-cli-2026-09-08-1",
      "issue": null,
      "backfill": true,
      "added": "2026-10-16",
      "surface": null,
      "category": null,
      "media": null,
      "teaser": "Update now: Gemini CLI closes an SSRF hole in MCP OAuth discovery.",
      "also_in": [],
      "share_url": "https://agentsnacks.ai/s/bf-gemini-cli-2026-09-08-1/",
      "published_at": "2026-10-16T07:00:00-04:00",
      "shipped_at": "2026-09-08T07:00:00-04:00"
    },
    {
      "id": "daily-2026-10-13-gemini-cli-headless-trust",
      "type": "daily",
      "date": "2026-10-13",
      "tool": "gemini-cli",
      "title": "Gemini CLI respects folder trust in headless runs",
      "summary": "Update now: Gemini CLI 0.64.0 carries folder trust into headless mode, so scripts and CI follow the same trust rules as a person at the keyboard. File tool writes are also atomic now, and saved state recovers from a backup if it gets corrupted.",
      "spice": 2,
      "source_url": "https://github.com/google-gemini/gemini-cli/releases/tag/v0.64.0",
      "source_urls": [
        "https://github.com/google-gemini/gemini-cli/releases/tag/v0.64.0"
      ],
      "shipped": "2026-10-13",
      "source_checked": true,
      "verified": true,
      "url": "https://agentsnacks.ai/daily/2026-10-13-gemini-cli-headless-trust/",
      "issue": null,
      "backfilled": true,
      "backfill": false,
      "category": null,
      "media": null,
      "teaser": "Update now: Gemini CLI 0.64.0 carries folder trust into headless mode, so scripts and CI follow the same trust rules as a person at the keyboard.",
      "also_in": [],
      "share_url": "https://agentsnacks.ai/s/daily-2026-10-13-gemini-cli-headless-trust/",
      "published_at": "2026-10-13T07:00:00-04:00",
      "shipped_at": "2026-10-13T07:00:00-04:00"
    }
  ]
}