Gemini CLI v0.51.0: security hardening — path traversal fix, thought leakage prevention, case-insensitive path blocklists

What's new

• Case-insensitive path blocklist: sensitive-path blocklists were bypassable by changing letter case; now enforced case-insensitively
• Symbolic link escape fix: fixed vulnerability allowing escape from the allowed directory via symlinks
• Thought leakage prevention: model thoughts are stripped from session history scrubbing — previously they could leak into scrubbed session context
• ~/.gitconfig read-only in macOS sandbox: prevents unauthorized git configuration changes
• Nightly v0.52.0 (July 18): LLM triage orchestrator, enhanced deny-default macOS sandbox, infinite ReAct loop mitigation, and prompt injection hardening

Why it matters

These fixes close real path traversal and prompt injection attack vectors in a terminal AI agent with local file system access — a high-risk combination.

How to try it

gemini update — version 0.51.0 is the stable channel, v0.52.0 is nightly.