Tools we follow

Gemini CLI

Google’s open-source Gemini helper for the terminal. Full changelog →

Recent updates we covered

Gemini CLI · Oct 13, 2026 · Snack Pack #1 · 🌶️🌶️🌶️Act now

Gemini CLI now checks folder trust in headless runs too

Update now: Gemini CLI tightens folder trust in headless mode. Update to 0.64.0 or later: folder-trust now carries into headless mode, and untrusted folders get read-only workspace settings next.

Source: Gemini CLI v0.64.0 release notes

Everything we covered, by ship date

Dailies, Snack Pack items and Backfilled changelog entries from this tool’s own notes (spice auto-rated when backfilled).

Daily · Oct 21, 2026 · 🌶️🌶️Worth a look

Untrusted folders keep their Gemini CLI settings

Gemini CLI users, update now: settings in untrusted folders are now read-only. Before, gemini mcp add or gemini mcp remove in a folder you hadn’t trusted could remove all existing keys from that project’s .gemini/settings.json.

Source: Gemini CLI v0.65.0 release notes

Changelog · Sep 15, 2026 · Backfilled · 🌶️🌶️Worth a look

Gemini CLI now checks where web fetches go and who signs MCP logins

Update now: Gemini CLI tightens web-fetch and MCP OAuth checks. Update to 0.60.0 or later: it validates web-fetch destinations and enforces RFC 9207 issuer identification in MCP OAuth.

Source: Gemini CLI v0.60.0 release notes

Changelog · Sep 8, 2026 · Backfilled · 🌶️🌶️Worth a look

Gemini CLI closes a server-side request hole in MCP logins

Update now: Gemini CLI closes an SSRF hole in MCP OAuth discovery. Update to 0.59.0 or later; it also makes workspace trust fail closed.

Source: Gemini CLI v0.59.0 release notes

← all tools