Gemini CLI 0.51.0: path-traversal and thought-leakage fixes, Vertex base URL update
Stable release weighted toward security and correctness: case-insensitive sensitive-path blocklist, a symlink directory-escape fix in the memory import processor, and a read-only ~/.gitconfig in the macOS sandbox. Also fixes model thoughts leaking into scrubbed history and updates the Vertex base URL.
PUBLISHED2026-07-16
OBSERVED2026-08-11
AGE26d
SOURCES1
- security: case-insensitive sensitive path blocklist and VS Code human-in-the-loop enforcement (#27966)
- core: symbolic-link directory escape resolved in the memory import processor (#28233)
- core-tools: defensive path resolution for at-reference files (#28053)
- sandbox:
~/.gitconfigmade read-only in the macOS sandbox (#28221) - core: thoughts stripped from scrubbed history turns, fixing thought leakage (#27971)
- core: escape sequences preserved in string literals for modern models (#28299)
- Vertex base URL updated (#28145); no_proxy test fix (#28131)
- caretaker: Cloud Run webhook ingestion service and egress service skeleton (#28015, #28167)
COMMUNITY
No curated reactions recorded for this event. Facts and takes are kept in separate layers — community context is added by hand, never blended into the record above.