gemini-cli/docs/changelogs/preview.md

Preview release: v0.51.0-preview.0

Released: July 8, 2026

Our preview release includes the latest, new, and experimental features. This release may not be as stable as our latest weekly release.

To install the preview release:

npm install -g @google/gemini-cli@preview

Highlights

• Caretaker Cloud Run Services: Implemented a Cloud Run webhook ingestion service and egress service skeleton to support advanced caretaker features.
• Enhanced Security & Sandbox Hardening: Enforced a case-insensitive sensitive path blocklist and VS Code human-in-the-loop (HITL) checks, resolved a directory escape vulnerability in the memory import processor, and marked ~/.gitconfig as read-only within the macOS sandbox.
• Improved Thought Leakage and Escape Handling: Resolved potential thought leakage by stripping thinking/thought processes from scrubbed history turns, and ensured escape sequences in string literals are correctly preserved for modern models.
• Robust Path & API Updates: Enhanced defensive path resolution for at-reference files, and updated the Vertex AI base URL configuration to support the latest API updates.

What's Changed

• Changelog for v0.50.0-preview.1 by @gemini-cli-robot in #28150
• Fix no_proxy test by @jerrylin3321 in #28131
• chore(release): bump version to 0.51.0-nightly.20260625.g3fbf93e26 by @gemini-cli-robot in #28151
• Vertex base url update by @DavidAPierce in #28145
• fix(security): enforce case-insensitive sensitive path blocklist and vscode hitl by @luisfelipe-alt in #27966
• fix(core-tools): resolve defensive path resolution for at-reference files and fix macOS tests by @luisfelipe-alt in #28053
• feat(caretaker): implement Cloud Run webhook ingestion service by @chadd28 in #28015
• fix(core): resolve symbolic link directory escape in memory import processor by @luisfelipe-alt in #28233
• feat(caretaker): egress cloud run service skeleton by @chadd28 in #28167
• fix(sandbox): make ~/.gitconfig read-only in the macOS sandbox by @ompatel-aiml in #28221
• fix(core): preserve escape sequences in string literals for modern models by @luisfelipe-alt in #28299
• fix(core): strip thoughts from scrubbed history turns and resolve thought leakage by @amelidev in #27971

Full Changelog: https://github.com/google-gemini/gemini-cli/compare/v0.50.0-preview.1...v0.51.0-preview.0