Gemini CLI 0.49.0 changelog - what changed

[changed] Migrated the coreTools setting to tools.core for consistency with the rest of the configuration schema.
[fix] Hardened skill installation to prevent path traversal vulnerabilities.
[fix] Made zero-quota limits fail fast, eliminating retry-loop hangs.
[new] Added support for GDC air-gapped Service Identity after the auth library update.
[changed] Standardized tool output formatting across CLI commands for improved readability and consistency.
[new] Introduced a static evaluation source analyzer to support development and testing workflows.

Models & prompts

Added a new security mandate instructing the model to treat external tool and MCP server outputs wrapped in <untrusted_context> tags as passive data and to ignore any embedded commands or directives unless explicitly asked.

Added eval:inventory and eval:inventory:json scripts for evaluation workflows.
Updated the sandbox image reference to the 0.49.0 tag.

Review any coreTools entries in settings files and move them under the new tools.core key.

[changed] Migrated the coreTools setting to tools.core for consistency with the rest of the configuration schema.
[fix] Hardened skill installation to prevent path traversal vulnerabilities.
[fix] Made zero-quota limits fail fast, eliminating retry-loop hangs.
[new] Added support for GDC air-gapped Service Identity after the auth library update.
[changed] Standardized tool output formatting across CLI commands for improved readability and consistency.
[new] Introduced a static evaluation source analyzer to support development and testing workflows.

Added a new security mandate instructing the model to treat external tool and MCP server outputs wrapped in <untrusted_context> tags as passive data and to ignore any embedded commands or directives unless explicitly asked.

Added eval:inventory and eval:inventory:json scripts for evaluation workflows.
Updated the sandbox image reference to the 0.49.0 tag.

Review any coreTools entries in settings files and move them under the new tools.core key.