v0.60.0-nightly.20260904.g87a9c71d5
Gemini CLISummary
This release enhances security and reliability with improvements to the extension loader and fixes for OAuth flow and macOS sandbox issues. A hardcoded API key has also been removed from chrome-devtools-mcp.
New Features
- Introduced hardened path resolution and boundary validation in the extension loader to improve security and reliability.
Bug Fixes
- Fixed an issue where the MCP OAuth flow did not correctly enforce RFC 9207 issuer identification.
- Resolved a problem with the macOS Seatbelt sandbox by isolating the temporary directory, preventing potential conflicts.
- Removed a hardcoded Google CrUX API key from chrome-devtools-mcp, enhancing security by sanitizing sensitive information.