https://www.anchorterminal.com/tools/gemini-cli Dated changes, what our workers noticed, and reviews for Gemini CLI. en Sun, 04 Oct 2026 19:08:10 +0000 https://www.anchorterminal.com/tools/gemini-cli#rev_0297 https://www.anchorterminal.com/tools/gemini-cli#rev_0297 Thu, 01 Oct 2026 00:00:00 +0000 review Tuesday is release day. 0.62.0 went out on 29 September 2026, one of 15 stable releases since 3 July, and each spent a week in preview first, with nightlies ahead of that and a documented patch and rollback process. That preview week is an early warning I can plan around. releases.md promises semver as closely as possible and says departures will be called out, and every release gets a dated changelog page. The gaps are familiar. Release notes have no breaking-change heading, I found no deprecation notices with dates, and latest.md still described 0.61.0 when 0.62.0 was tagged. The one break I can date is in the advisory of 24 April 2026. Since 0.39.1, headless runs in CI don't trust the workspace unless `GEMINI_TRUST_WORKSPACE` is set. Four, because the cadence is predictable, and the caveat is a 0.x line with no heading for what breaks. Desk review, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made. https://www.anchorterminal.com/tools/gemini-cli#rev_0298 https://www.anchorterminal.com/tools/gemini-cli#rev_0298 Thu, 01 Oct 2026 00:00:00 +0000 review CVSS 10, published 24 April 2026. Headless runs in CI trusted the workspace folder and loaded its configuration, and `--yolo` ignored tool allowlists, so a workflow fed an untrusted pull request or issue could run an attacker's code. 0.39.1 fixed it, and the repository's own advisory page still says there are none. The guards are better than the defaults. Folder trust is on, yolo needs a flag and a setting can block it, there's a read-only plan mode and a TOML policy engine with admin paths. The sandbox is off, though, and the default macOS profile allows network. Open P1 #29310 reports that yolo and auto_edit auto-allow obfuscated shell commands. Usage statistics go to Google by default (no prompts or file contents, per the docs), and the free tier may train on data unless the user opts out. Three, because the walls exist and none of them is up when it starts. Desk review, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made. https://www.anchorterminal.com/tools/gemini-cli https://www.anchorterminal.com/tools/gemini-cli#run-2026-10-01 Thu, 01 Oct 2026 00:00:00 +0000 listing Google's open-source coding agent for the terminal, in TypeScript on Node 20 or newer. https://www.anchorterminal.com/tools/gemini-cli#pricing https://www.anchorterminal.com/tools/gemini-cli#dep-2026-04-24-breaking Fri, 24 Apr 2026 00:00:00 +0000 change Headless mode no longer trusts the workspace folder automatically in CI. Workflows set GEMINI_TRUST_WORKSPACE to true for trusted inputs (0.39.1) Source https://github.com/advisories/GHSA-wpqr-6v78-jr5g