Gemini CLI Version Tracker: Environment Variables, Models & Features#

Published July 14, 2026 by Alex Sorokoletov

We analyze Google's Gemini CLI releases to document the environment variables, model IDs, and feature surface of each build. Because Gemini CLI is fully open source, every finding is grounded in the published source at the release tag and the official release notes.

Tracking the other agents too? See the Claude Code Version Tracker, Codex CLI Version Tracker, OpenCode Version Tracker, and Amp Version Tracker.

Version History#

v0.65.0 — October 20, 2026#

GEMINI_TELEMETRY_OTLP_HEADERS · resume-safe sessions · no auth loops · read-only untrusted folders · faster ignore filtering

v0.65.0 is a reliability cut over v0.64.0. The one net-new configuration variable, GEMINI_TELEMETRY_OTLP_HEADERS, adds custom OTLP headers on telemetry export, alongside the existing endpoint and protocol variables. The fixes concentrate on two paths that can end a run on their own: a resumed session that duplicated tool turns or deleted its history on a quick exit, and an auth flow stuck in a verification or OAuth retry loop. The rest covers read-only workspace settings in untrusted folders, fewer command-trust false positives, an interactive prompt that hung on Enter, extensions that keep loading past an allowlist failure, and optimized ignore filtering with subtree pruning.

v0.64.0 — October 13, 2026#

atomic file writes · state recovery from backup · reliable Ctrl+C · ACP usage updates · headless folder trust · Windows fixes

v0.64.0 follows v0.63.0 with a release that spends its entire weekly cut on durability. File tool operations are serialized and writes made atomic, session state is persisted atomically and recovered from a backup when found corrupted, and the chat recording service moves to append-only delta patching. Ctrl+C now reaches the cancellation handler during an active operation, typing @ inside code no longer hangs, and selection lists confirm reliably. ACP clients receive token-usage updates and exact session resolution, headless runs keep their folder-trust decision, and two Windows fixes narrow the platform gap. No new models or environment variables shipped; the only net-new configuration is a pair of undocumented experimental keys for skills and extension management.

v0.63.0 — October 6, 2026#

GEMINI_CLI_AUTH_OVERRIDE · headless plan execution · auth loop fix · connection-retry progress · path-safety

v0.63.0 ships no new models and reads as reliability work. Plans run to completion in non-interactive mode, suiting scripted and CI use, and an auth fix ends the infinite login loop caused by credential-file contention, a headless keyring, and dropped supervisor state. The one new variable, GEMINI_CLI_AUTH_OVERRIDE, carries the chosen auth type across the CLI's self-relaunch so the selection is not lost. Connection recovery now shows retry progress, long-running agent loops bound tool output, the release aligns policy redirection gates and path validation, and it removes a diff.external override the notes flag as invalid.

v0.62.0 — September 29, 2026#

Gemini 3.8 Flash · 3.5 Flash Lite · OAuth token retention · Windows ConPTY fixes · safer TUI borders

v0.62.0 adds the Gemini 3.8 Flash and 3.5 Flash Lite models and pairs them with a round of reliability fixes. The headline fix keeps you signed in: a token refresh that returns a partial payload no longer wipes the stored credential's refresh token, and credential deletion is now idempotent. The rest is cross-platform hardening weighted toward Windows, including ConPTY process-exit synchronization, PTY file-descriptor cleanup, terminal buffer memory management, and correctly formatted Windows diagnostic paths. The TUI border renderer now guards against negative and non-finite widths instead of throwing, ACP mode emits the tool_call before the permission request, MCP tool-call titles render as structured signatures, and the VS Code companion preserves terminal focus when a diff tab closes.

v0.61.0 — September 26, 2026#

GEMINI_RESTRICTED_MODE · GOOGLE_CLOUD_WORKSTATIONS · MCP OAuth hardening

The eight stable releases from v0.53.1 to v0.61.0 concentrate on security. Restricted mode makes workspace trust fail closed and filters MCP servers out of untrusted workspaces, Cloud Workstations OAuth support lands, and the MCP OAuth path adds SSRF blocking and RFC 9207 issuer identification. Sandbox isolation (Docker sockets, per-container temp and settings dirs) and extension guards (loader path validation, env-var consent) tighten throughout, while no new production model IDs appear. Weekly stable cadence held, and part of the window went to Google's own caretaker triage and issue-fixing automation rather than the shipped CLI.

v0.53.1 — August 4, 2026#

sandbox + RCE hardening · JSON-safe edits · coreTools→tools.core

The v0.47.0 to v0.53.1 range is a consolidation window: no new env vars, model IDs, or feature flags, with the gemini-3.1 and 3.5 families already present at the baseline. Google spent six stable releases on the security boundary instead, moving macOS Seatbelt profiles to deny-default, making ~/.gitconfig read-only in the sandbox, fixing path-traversal on skill install and a symlink escape in the memory importer, and preventing RCE in the agent-to-agent server. Edit reliability improved (write_file and replace now skip LLM correction for JSON and IPYNB), coreTools migrated to tools.core, and a new caretaker-agent Cloud Run triage service appeared in tools/ outside the shipped CLI. Weekly stable cadence held.

v0.47.0 — July 14, 2026#

288 env vars · 39 model IDs · baseline snapshot

The first tracked Gemini CLI build. 288 environment-variable literals (about 160 of them telemetry attribute keys), 39 model-ID strings from the 1.5 to 3.5 families, 25 experimental flags, a built-in model router, and four auth backends. The surface every later post diffs against.