From d5c9a97dc03758649da8a7b9b739c4c73b15910e Mon Sep 17 00:00:00 2001 From: gemini-cli-robot Date: Wed, 5 Aug 2026 18:53:50 -0700 Subject: [PATCH] Changelog for v0.54.0 (#28708) Co-authored-by: gemini-cli-robot <224641728+gemini-cli-robot@users.noreply.github.com> --- docs/changelogs/index.md | 18 ++++++++ docs/changelogs/latest.md | 90 +++++++++++++++++++++++++-------------- 2 files changed, 77 insertions(+), 31 deletions(-) diff --git a/docs/changelogs/index.md b/docs/changelogs/index.md index d4b817f692..5cf907ab49 100644 --- a/docs/changelogs/index.md +++ b/docs/changelogs/index.md @@ -18,6 +18,24 @@ on GitHub. | [Preview](preview.md) | Experimental features ready for early feedback. | | [Stable](latest.md) | Stable, recommended for general use. | +## Announcements: v0.54.0 - 2026-08-06 + +- **PR Automation & Antigravity Agent:** Integrated the Antigravity agent runner + with dual-locking Firestore concurrency controls to secure the PR generator + ([#28434](https://github.com/google-gemini/gemini-cli/pull/28434), + [#28432](https://github.com/google-gemini/gemini-cli/pull/28432) by + @joneba-google). +- **Caretaker Triaging & Security:** Enhanced caretaker triage to post comments + prior to auto-closing issues and sanitized issue titles under untrusted + context ([#28411](https://github.com/google-gemini/gemini-cli/pull/28411), + [#28352](https://github.com/google-gemini/gemini-cli/pull/28352) by @chadd28). +- **Security and Session Robustness:** Prevented cleartext credential leakage by + enforcing HTTPS, rotated session IDs on model fallbacks, and skipped merged + function-response turns in active loops + ([#28517](https://github.com/google-gemini/gemini-cli/pull/28517) by + @amelidev, [#28565](https://github.com/google-gemini/gemini-cli/pull/28565) by + @adamfweidman). + ## Announcements: v0.53.0 - 2026-07-28 - **Caretaker Triage Orchestration:** Implemented an LLM triage orchestrator and diff --git a/docs/changelogs/latest.md b/docs/changelogs/latest.md index e18a580ffd..46c4c74f5a 100644 --- a/docs/changelogs/latest.md +++ b/docs/changelogs/latest.md @@ -1,6 +1,6 @@ -# Latest stable release: v0.53.0 +# Latest stable release: v0.54.0 -Released: July 28, 2026 +Released: August 6, 2026 For most users, our latest stable release is the recommended release. Install the latest stable version with: @@ -11,38 +11,66 @@ npm install -g @google/gemini-cli ## Highlights -- **Caretaker Triage Orchestrator:** Implemented an LLM triage orchestrator and - container build setup to manage automated caretakers. -- **Eval Coverage Reporting:** Introduced a new command for generating - evaluation coverage reports to track agent decision logic and testing. -- **Security and Sandboxing:** Aligned macOS permissive Seatbelt profiles with - the deny-default model, and enforced workspace trust with task isolation in - the A2A server. -- **Robust Conversation Loops:** Coalesced consecutive message roles and grouped - cancelled tool responses to avoid Bad Request errors, and mitigated infinite - ReAct loops and prompt injection vulnerabilities. +- **PR Generation & Antigravity Agent:** Implemented Firestore concurrency + dual-locking mechanisms in the database and introduced the Antigravity agent + runner with comprehensive prompt templates. +- **Caretaker Triaging & Issue Security:** Improved the caretaker triage loop to + post a descriptive comment prior to auto-closing issues, and sanitized issue + titles within an untrusted context to ensure secure processing. +- **Enhanced Authentication & Security:** Enforced strict HTTPS validation for + GoogleCredentialsAuthProvider to block cleartext leakage, and implemented tag + length validation for the file keychain system. +- **Model Fallback & History Filtering:** Resolved stateful API errors by + rotating session IDs on model fallback, optimized conversation history + retrieval by filtering out thought parts when context management is disabled, + and correctly skipped merged function responses when tracking active loops. ## What's Changed -- fix(core,a2a): group cancelled tool responses and coalesce consecutive roles - to prevent 400 Bad Request by @luisfelipe-alt in - [#28407](https://github.com/google-gemini/gemini-cli/pull/28407) -- feat(caretaker-triage): implement LLM triage orchestrator and container build - by @chadd28 in - [#28345](https://github.com/google-gemini/gemini-cli/pull/28345) -- refactor(cli): align macOS permissive Seatbelt profiles with deny-default - model by @ompatel-aiml in - [#28424](https://github.com/google-gemini/gemini-cli/pull/28424) -- fix(core): mitigate infinite ReAct loops and prompt injection loops by - @amelidev in [#28429](https://github.com/google-gemini/gemini-cli/pull/28429) -- fix(a2a-server): enforce workspace trust and task isolation to prevent RCE by +- Changelog for v0.53.0-preview.0 by @gemini-cli-robot in + [#28507](https://github.com/google-gemini/gemini-cli/pull/28507) +- Changelog for v0.52.0 by @gemini-cli-robot in + [#28508](https://github.com/google-gemini/gemini-cli/pull/28508) +- chore(release): bump version to 0.54.0-nightly.20260722.gf743ab579 by + @gemini-cli-robot in + [#28510](https://github.com/google-gemini/gemini-cli/pull/28510) +- fix(caretaker): sanitize and wrap issue title in untrusted_context by @chadd28 + in [#28352](https://github.com/google-gemini/gemini-cli/pull/28352) +- chore(caretaker): update vitest to v3.2.4 and add package-lock.json files by + @chadd28 in [#28409](https://github.com/google-gemini/gemini-cli/pull/28409) +- fix(core): rotate session ID on model fallback to prevent stateful API errors + by @amelidev in + [#28469](https://github.com/google-gemini/gemini-cli/pull/28469) +- feat(caretaker-triage): post comment before auto-closing issues by @chadd28 in + [#28411](https://github.com/google-gemini/gemini-cli/pull/28411) +- fix(core): enforce HTTPS for GoogleCredentialsAuthProvider to prevent + cleartext leakage by @amelidev in + [#28517](https://github.com/google-gemini/gemini-cli/pull/28517) +- fix(core): filter out thought parts from getHistoryTurns when context + management is disabled by @DavidAPierce in + [#28509](https://github.com/google-gemini/gemini-cli/pull/28509) +- fix(a2a-server): normalize CRLF line endings to LF in getProposedContent by @luisfelipe-alt in - [#28470](https://github.com/google-gemini/gemini-cli/pull/28470) -- fix(core): sequentially verify cached credentials and restore - GOOGLE_APPLICATION_CREDENTIALS fallback by @luisfelipe-alt in - [#28472](https://github.com/google-gemini/gemini-cli/pull/28472) -- feat(evals): add eval coverage report command by @ved015 in - [#28169](https://github.com/google-gemini/gemini-cli/pull/28169) + [#28531](https://github.com/google-gemini/gemini-cli/pull/28531) +- fix(core): enforce explicit tag length and validation in file keychain by + @luisfelipe-alt in + [#28523](https://github.com/google-gemini/gemini-cli/pull/28523) +- chore/release: bump version to 0.54.0-nightly.20260728.gbef611950 by + @gemini-cli-robot in + [#28552](https://github.com/google-gemini/gemini-cli/pull/28552) +- feat(pr-generator-db): implement Firestore concurrency dual-locking and test + ingestion utilities by @joneba-google in + [#28432](https://github.com/google-gemini/gemini-cli/pull/28432) +- feat(pr-generator-agent): implement Antigravity agent runner and prompt + templates … by @joneba-google in + [#28434](https://github.com/google-gemini/gemini-cli/pull/28434) +- fix(core): skip merged function-response turns when finding the active loop by + @adamfweidman in + [#28565](https://github.com/google-gemini/gemini-cli/pull/28565) +- fix(patch): cherry-pick f47d6c6 to release/v0.54.0-preview.0-pr-28566 to patch + version v0.54.0-preview.0 and create version 0.54.0-preview.1 by + @gemini-cli-robot in + [#28609](https://github.com/google-gemini/gemini-cli/pull/28609) **Full Changelog**: -https://github.com/google-gemini/gemini-cli/compare/v0.52.0...v0.53.0 +https://github.com/google-gemini/gemini-cli/compare/v0.53.1...v0.54.0