Gemini CLI v0.60.0

Extension & Tool Safety Hardening: Prompt for user consent on environment changes and sanitize runtime-altering environment variables, while enforcing envelope metadata provenance for untrusted tool outputs ( #28863 by @amelidev, #29215 by @luisfelipe-alt).

Sandbox Directory Isolation: Isolated settings and temporary directories inside sandbox containers, including the macOS Seatbelt sandbox ( #29171 , #29216 by @jvargassanchez-dot).