Gemini CLI’s stable channel moved to v0.61.0 on 2026-09-23 (npm @google/[email protected]), bringing indirect prompt-injection defenses, hardened sandbox filesystem boundaries and isolated runtime state, AgentLoopContext preservation across object spreads, and correct handling of explicit versioned Flash model IDs.

Key Takeaways

  • ✓Install stable with npm install -g @google/gemini-cli (now 0.61.0); preview/nightly remain separate tags
  • ✓Blocks indirect prompt injection via build-file edits and untrusted flags (#29250)
  • ✓Hardens sandbox filesystem boundaries and isolates runtime state (#29214)
  • ✓Preserves AgentLoopContext fields across object spreads (#29335)
  • ✓Keeps explicit versioned Flash model IDs intact during routing (#29252)
Gemini CLI stable hits v0.61.0: hardened sandbox boundaries and indirect prompt-injection defenses
🖼️Official Media
Click to view high-res
⚡

Key Decision Metrics at a Glance

TL;DR Verdict
🏆 Benchmark RankRank
See how it ranks on the leaderboard
Full Leaderboard→
💰 Cost & PlansCompare
API & Subscription
Compare Plans↗
🛠️ Ecosystem & IDERules
Gemini CLI · Google · sandbox
Setup IDE Rules↗
🧭

Turn your technical choice into a development budget

Compare 40 dev plans & simulate token costs vs $20/mo subscriptions

⚔️ Compare Model→💰 Compare plans & limits↗
🔗

Project Links & Resources

Direct Access
Direct access to official project resources and documentation
📖
Gemini CLI latest stable changelog (v0.61.0)
geminicli.com/docs/changelogs/latest/
↗
🐙
GitHub Release v0.61.0
github.com/google-gemini/gemini-cli/releases/tag/v0.61.0
↗
🐙
Compare v0.60.0…v0.61.0
github.com/google-gemini/gemini-cli/compare/v0.60.0...v0.61.0
↗
📖
npm @google/gemini-cli
www.npmjs.com/package/@google/gemini-cli
↗
🚀
Gemini CLI home
geminicli.com/
↗
🐙
#29250
github.com/google-gemini/gemini-cli/pull/29250
↗
🐙
#29214
github.com/google-gemini/gemini-cli/pull/29214
↗
🐙
#29335
github.com/google-gemini/gemini-cli/pull/29335
↗
🐙
#29252
github.com/google-gemini/gemini-cli/pull/29252
↗
🔬

In-Depth Technical Analysis

Core Background & Industry Pain Points

CLI coding agents that can edit build files amplify indirect prompt-injection risk. After consumer traffic moved to Antigravity CLI, enterprise/API users still ride Gemini CLI’s stable channel—now v0.61.0 (2026-09-23).

Architecture Highlights & Internals

Stable absorbs defenses against build-file/untrusted-flag injection, harder sandbox FS boundaries with isolated runtime state, AgentLoopContext preservation across spreads, and intact versioned Flash model IDs. Diff: v0.60.0…v0.61.0.

Benchmarks & Measured Numbers

No new public coding-bench scores in the stable notes. Verified: GitHub v0.61.0 at 2026-09-23T23:59:15Z; npm latest = 0.61.0; docs title “Latest stable release: v0.61.0”.

Developer Getting Started

npm install -g @google/gemini-cli for stable; use @preview/nightly for experiments. Re-test sandbox write scope and versioned Flash routing after upgrade. Sources: changelog and GitHub release.

Action HubReady to adopt this in production?

Benchmark side-by-side against alternatives, or calculate monthly token cost vs subscription break-even.

⚔️ Launch VS Compare→💳 View Plans↗
Up NextAntigravity CLI 1.3.5: Auto mode auto-approves safe edits and commands, reviews sandbox escapes via a separate agent, and adds /compact
Read Now→