Gemini CLI v0.57.0 (stable, 2026-08-25T18:37Z) includes packages/a2a-server — an Agent2Agent protocol server — in its release tag, and the package is published to npm as @google/gemini-cli-a2a-server@0.57.0. The release notes merge a wave of '[SSR Agent]' fixes touching a2a-server tests, TUI execution timeouts, subagent gating and handoff regressions, indicating active maintenance rather than an abandoned experiment. Gemini CLI 0.60.0 later promotes MCP OAuth, path-boundary, environment-consent, tool-output-provenance and sandbox-isolation fixes to stable. There is still no official announcement, documentation page, or usage guidance for the A2A server from Google.
Gemini CLI 0.66 hardens private MCP and Git execution
2026-08-26Verified announcementWATCH
Gemini CLI 0.66 adds opt-in OAuth support for MCP servers on private networks and disables interactive credential or SSH prompts during Git operations in safe mode. It also hardens SKILL.md parsing, preserves user Git configuration and fixes streamed HTTP decoding.
Official · Release notesgoogle-gemini/gemini-cli · releases / tag / v0.62.0Official · Release notesgoogle-gemini/gemini-cli · releases / tag / v0.63.0
Imported from the existing research archive. Migration preserves the recorded judgment and is not a fresh verification.
What this means for you
For teams connecting agents to private MCP services, the release adds a usable authentication path while reducing the chance that unattended Git commands hang on hidden prompts. Because the controls are opt-in and environment-specific, they need local verification.
Evidence & related material
Gemini CLI 0.62.0 stable fixes OAuth refresh tokens, PTY/ConPTY lifecycle and ACP permission-event ordering.
Gemini CLI 0.63.0 hardens long-run memory, authentication recovery and non-interactive plan execution.
Gemini CLI 0.64.0 brings atomic writes, state backup recovery, cancellation and ACP/A2A lifecycle improvements to stable.
0.65.0 stable enforces read-only workspace settings in untrusted folders, prevents duplicate tool-response turns on resume and preserves resumed-session history on quick exit.
Gemini CLI 0.66 adds private-network MCP OAuth and safer Git execution.
Subsequent changes
Gemini CLI 0.62.0 fixes OAuth, terminal and ACP permission lifecycles
Gemini CLI 0.63.0 hardens long-run memory, authentication recovery and non-interactive plan execution.
Gemini CLI 0.64.0 hardens file, session-state and cancellation lifecycles.
Gemini CLI 0.65.0 hardens untrusted folders and session recovery
Gemini CLI 0.66 adds private-network MCP OAuth and safer Git execution
Technical details & scores
| Release | v0.57.0 stable published 2026-08-25T18:37:14Z; packages/a2a-server present in the v0.57.0 tag tree (verified via git tree API) |
|---|---|
| Npm | @google/gemini-cli-a2a-server@0.57.0 published; package scoped under @google |
| Release Notes | multiple '[SSR Agent]' fixes merged into v0.57.0: a2a-server test migration, TUI execution timeouts, subagent gating when agents mode disabled, sub-agent handoff token regression, cli_help markdown formatting |
| Package Contents | a2a-server/src includes agent executor/task modules, command registry, extensions; development-extension-rfc.md present |
| Status | shipped-but-undocumented: no official announcement, docs, or usage telemetry as of 2026-08-28 |
| Related Kb | upgrade of the 2026-08-19 early indication (a2a-server main-branch only) to a stable-line artifact; evidence item for trend coding-agents-multi-agent-runtimes |
| Latest Stable | 0.66.0 |
| Published At | 2026-10-27T20:26:28Z |
| V0 66 0 | Opt-in private-network MCP OAuth, non-interactive safe Git credentials and SSH, hardened SKILL.md parsing, preserved Git configuration, streamed HTTP decoding fix |
Technical impact 4
Engineering value 3
Adoption signal 2
Maturity 2
Verification cost 2
Risk 3
Historical update notes
· 0.58.0 stable (9/1T20:51Z): macOS Seatbelt sandbox now isolates Docker and container-runtime sockets and binaries (sandbox hardening); a2a-server fix — stale cancellation error cleared on new message turns (a2a-server continues in the stable release line); consistent symlink evaluation in ignore-path handling; top-level safety checkers declared in write-policy configuration; history rollback and retry-nudge fixes. a2a-server documentation still absent (watch item). 0.59.0-preview.0 published 9/1T20:19Z
· No new stable in window (latest remains 0.58.0, 9/1). Nightlies: 0.59.0-nightly (9/2): web-fetch destination validation + connection routing fix; 0.60.0-nightly (9/4) security cluster — RFC 9207 issuer identification enforced in the MCP OAuth flow, macOS Seatbelt temp-dir isolation, extension-loader path-boundary hardening, hardcoded Google CrUX API key removed from chrome-devtools-mcp. a2a-server docs watch: packages/a2a-server now carries a README.md, but it is a 171-byte 'experimental and under active development' stub — still no usage/setup documentation. Stays TRIAL
· Gemini CLI 0.61.0 stable hardens build-file prompt-injection and filesystem/runtime isolation; A2A remains undocumented and WATCH