Changelog for v0.59.0 (#29253)

Co-authored-by: gemini-cli-robot <224641728+gemini-cli-robot@users.noreply.github.com>

docs/changelogs/index.md

@@ -18,6 +18,18 @@ on GitHub.
 | [Preview](preview.md) | Experimental features ready for early feedback. |
 | [Stable](latest.md)   | Stable, recommended for general use.            |
 
+## Announcements: v0.59.0 - 2026-09-08
+
+- **MCP OAuth SSRF Mitigation:** Prevented Server-Side Request Forgery (SSRF)
+  during Model Context Protocol (MCP) OAuth metadata discovery and
+  authentication
+  ([#29081](https://github.com/google-gemini/gemini-cli/pull/29081) by
+  @josebalius).
+- **Fail-Closed Workspace Trust:** Enforced a secure, fail-closed workspace
+  trust policy and filtered available `mcpServers` when operating in restricted
+  mode ([#29099](https://github.com/google-gemini/gemini-cli/pull/29099) by
+  @luisfelipe-alt).
+
 ## Announcements: v0.58.0 - 2026-09-01
 
 - **Core Security & Path Handling:** Enforced consistent symlink evaluation in

docs/changelogs/latest.md

@@ -1,6 +1,6 @@
-# Latest stable release: v0.58.0
+# Latest stable release: v0.59.0
 
-Released: September 1, 2026
+Released: September 8, 2026
 
 For most users, our latest stable release is the recommended release. Install
 the latest stable version with:
@@ -11,38 +11,28 @@ npm install -g @google/gemini-cli
 
 ## Highlights
 
-- **Sandbox Security Isolation:** Isolated Docker and container runtime sockets
-  and binaries in macOS Seatbelt to restrict unauthorized container execution
-  access.
-- **Ignore Path Symlink Evaluation:** Enforced consistent symlink evaluation in
-  ignore path handling to prevent path bypass.
-- **Policy Configuration & Safety:** Declared top-level safety checkers in write
-  policy configuration for comprehensive safety validation.
-- **History Rollback & Retry Nudge:** Optimized history rollback mechanics and
-  retry nudge flows for more robust conversational recovery.
-- **Agent-to-Agent Stability:** Resolved stale cancellation errors on new
-  message turns in the Agent-to-Agent server to improve turn recovery.
+- **SSRF Prevention in MCP OAuth:** Prevented Server-Side Request Forgery (SSRF)
+  in Model Context Protocol (MCP) OAuth metadata discovery and authentication to
+  secure remote integrations.
+- **Fail-Closed Workspace Trust:** Enforced a fail-closed workspace trust model
+  to ensure security by default when accessing untrusted workspaces.
+- **Restricted Mode MCP Filtering:** Filtered available Model Context Protocol
+  (MCP) servers under restricted execution modes to minimize potential attack
+  surfaces.
 
 ## What's Changed
 
-- Changelog for v0.57.0-preview.0 by @gemini-cli-robot in
-  [#28918](https://github.com/google-gemini/gemini-cli/pull/28918)
-- fix(core): ensure consistent symlink evaluation in ignore path handling by
-  @luisfelipe-alt in
-  [#28915](https://github.com/google-gemini/gemini-cli/pull/28915)
-- refactor(core): remove eslint-disable and type-asserts from
-  shellExecutionService by @DavidAPierce in
-  [#28862](https://github.com/google-gemini/gemini-cli/pull/28862)
-- fix(sandbox): isolate Docker and container runtime sockets and binaries in
-  macOS Seatbelt by @josebalius in
-  [#28935](https://github.com/google-gemini/gemini-cli/pull/28935)
-- fix(a2a-server): clear stale cancellation error on new message turns by
-  @amelidev in [#28940](https://github.com/google-gemini/gemini-cli/pull/28940)
-- fix(core): declare top-level safety checkers in write policy configuration by
-  @luisfelipe-alt in
-  [#28961](https://github.com/google-gemini/gemini-cli/pull/28961)
-- (FIX) history rollback and retry nudge optimizations by @DavidAPierce in
-  [#28934](https://github.com/google-gemini/gemini-cli/pull/28934)
+- Changelog for v0.58.0-preview.0 by @gemini-cli-robot in
+  [#29082](https://github.com/google-gemini/gemini-cli/pull/29082)
+- chore(release): bump version to 0.59.0-nightly.20260825.g812f7a2bc by
+  @gemini-cli-robot in
+  [#29083](https://github.com/google-gemini/gemini-cli/pull/29083)
+- fix(core): prevent SSRF in MCP OAuth metadata discovery and authentication by
+  @josebalius in
+  [#29081](https://github.com/google-gemini/gemini-cli/pull/29081)
+- fix(core): enforce fail-closed workspace trust and filter mcpServers in
+  restricted mode by @luisfelipe-alt in
+  [#29099](https://github.com/google-gemini/gemini-cli/pull/29099)
 
 **Full Changelog**:
-https://github.com/google-gemini/gemini-cli/compare/v0.57.0...v0.58.0
+https://github.com/google-gemini/gemini-cli/compare/v0.58.0...v0.59.0