Gemini CLI's 2026-09-05 nightly lands three separate boundary-enforcement fixes for extensions, workspaces and system config

GitHub·high signalXBlueskyLinkedInCopy link

v0.60.0-nightly.20260905.g85aca163f carries only three PRs, all boundary enforcement: #28863 prompts for consent on extension environment changes and sanitizes runtime-altering environment variables, #29170 tightens workspace path boundary checks and symlink resolution in command safety and file discovery, and #29115 enforces strict permission and ownership checks on system-wide configuration paths. This is the second consecutive nightly whose whole content is security work, after the 09-04 build that removed a hardcoded Google API key from chrome-devtools-mcp.