# gemini-cli v0.60.0-nightly.20260904.g87a9c71d5 — Release v0.60.0-nightly.20260904.g87a9c71d5

- Product: gemini-cli (https://whatsnew.fyi/product/gemini-cli)
- Vendor: gemini-cli
- Date: 2026-09-04
- Version: v0.60.0-nightly.20260904.g87a9c71d5
- Original notes: https://github.com/google-gemini/gemini-cli/releases/tag/v0.60.0-nightly.20260904.g87a9c71d5
- Permalink: https://whatsnew.fyi/product/gemini-cli/releases/v0.60.0-nightly.20260904.g87a9c71d5
- Labels: Pre-release

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

---

- **fixed** — Enforce RFC 9207 issuer identification in MCP OAuth flow
- **fixed** — Isolate temporary directory for macOS Seatbelt sandbox
- **added** — Harden path resolution and boundary validation in extension loader
- **fixed** — Sanitize and remove hardcoded Google CrUX API key in chrome-devtools-mcp

##### What's Changed
* fix(core): enforce RFC 9207 issuer identification in MCP OAuth flow by @jvargassanchez-dot in https://github.com/google-gemini/gemini-cli/pull/29117
* chore(release): bump version to 0.60.0-nightly.20260901.g0bd1d4397 by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/29162
* Changelog for v0.58.0 by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/29161
* fix(cli): isolate temporary directory for macOS Seatbelt sandbox by @jvargassanchez-dot in https://github.com/google-gemini/gemini-cli/pull/29171
* feat(extensions): harden path resolution and boundary validation in extension loader by @diegogodinezr in https://github.com/google-gemini/gemini-cli/pull/29169
* Changelog for v0.59.0-preview.0 by @gemini-cli-robot in https://github.com/google-gemini/gemini-cli/pull/29159
* fix(core): sanitize and remove hardcoded Google CrUX API key in chrome-devtools-mcp by @amelidev in https://github.com/google-gemini/gemini-cli/pull/29158


**Full Changelog**: https://github.com/google-gemini/gemini-cli/compare/v0.59.0-nightly.20260902.g4963a4456...v0.60.0-nightly.20260904.g87a9c71d5