Gemini CLI Version Tracker: Environment Variables, Models & Features#

Published July 14, 2026 by Alex Sorokoletov

We analyze Google's Gemini CLI releases to document the environment variables, model IDs, and feature surface of each build. Because Gemini CLI is fully open source, every finding is grounded in the published source at the release tag and the official release notes.

Tracking the other agents too? See the Claude Code Version Tracker, Codex CLI Version Tracker, OpenCode Version Tracker, and Amp Version Tracker.

Version History#

v0.63.0 — October 6, 2026#

GEMINI_CLI_AUTH_OVERRIDE · headless plan execution · auth loop fix · connection-retry progress · path-safety

v0.63.0 ships no new models and reads as reliability work. Plans run to completion in non-interactive mode, suiting scripted and CI use, and an auth fix ends the infinite login loop caused by credential-file contention, a headless keyring, and dropped supervisor state. The one new variable, GEMINI_CLI_AUTH_OVERRIDE, carries the chosen auth type across the CLI's self-relaunch so the selection is not lost. Connection recovery now shows retry progress, long-running agent loops bound tool output, the release aligns policy redirection gates and path validation, and it removes a diff.external override the notes flag as invalid.

v0.62.0 — September 29, 2026#

Gemini 3.8 Flash · 3.5 Flash Lite · OAuth token retention · Windows ConPTY fixes · safer TUI borders

v0.62.0 adds the Gemini 3.8 Flash and 3.5 Flash Lite models and pairs them with a round of reliability fixes. The headline fix keeps you signed in: a token refresh that returns a partial payload no longer wipes the stored credential's refresh token, and credential deletion is now idempotent. The rest is cross-platform hardening weighted toward Windows, including ConPTY process-exit synchronization, PTY file-descriptor cleanup, terminal buffer memory management, and correctly formatted Windows diagnostic paths. The TUI border renderer now guards against negative and non-finite widths instead of throwing, ACP mode emits the tool_call before the permission request, MCP tool-call titles render as structured signatures, and the VS Code companion preserves terminal focus when a diff tab closes.

v0.61.0 — September 26, 2026#

GEMINI_RESTRICTED_MODE · GOOGLE_CLOUD_WORKSTATIONS · MCP OAuth hardening

The eight stable releases from v0.53.1 to v0.61.0 concentrate on security. Restricted mode makes workspace trust fail closed and filters MCP servers out of untrusted workspaces, Cloud Workstations OAuth support lands, and the MCP OAuth path adds SSRF blocking and RFC 9207 issuer identification. Sandbox isolation (Docker sockets, per-container temp and settings dirs) and extension guards (loader path validation, env-var consent) tighten throughout, while no new production model IDs appear. Weekly stable cadence held, and part of the window went to Google's own caretaker triage and issue-fixing automation rather than the shipped CLI.

v0.53.1 — August 4, 2026#

sandbox + RCE hardening · JSON-safe edits · coreTools→tools.core

The v0.47.0 to v0.53.1 range is a consolidation window: no new env vars, model IDs, or feature flags, with the gemini-3.1 and 3.5 families already present at the baseline. Google spent six stable releases on the security boundary instead, moving macOS Seatbelt profiles to deny-default, making ~/.gitconfig read-only in the sandbox, fixing path-traversal on skill install and a symlink escape in the memory importer, and preventing RCE in the agent-to-agent server. Edit reliability improved (write_file and replace now skip LLM correction for JSON and IPYNB), coreTools migrated to tools.core, and a new caretaker-agent Cloud Run triage service appeared in tools/ outside the shipped CLI. Weekly stable cadence held.

v0.47.0 — July 14, 2026#

288 env vars · 39 model IDs · baseline snapshot

The first tracked Gemini CLI build. 288 environment-variable literals (about 160 of them telemetry attribute keys), 39 model-ID strings from the 1.5 to 3.5 families, 25 experimental flags, a built-in model router, and four auth backends. The surface every later post diffs against.