精选85Gemini CLI(GitHub Releases)AI 编程与模型
Gemini CLI v0.53.0:修复A2A RCE与ReAct循环
Release v0.53.0
推荐理由
Gemini CLI 用户请注意:此版本修复了 A2A 服务器中的 RCE 漏洞,并缓解了 ReAct 循环与提示注入问题,建议尽快升级以保障安全。
What's Changed
- fix(core,a2a): group cancelled tool responses and coalesce consecutive roles to prevent 400 Bad Request by @luisfelipe-alt in #28407
- feat(caretaker-triage): implement LLM triage orchestrator and container build by @chadd28 in #28345
- refactor(cli): align macOS permissive Seatbelt profiles with deny-default model by @ompatel-aiml in #28424
- fix(core): mitigate infinite ReAct loops and prompt injection loops by @amelidev in #28429
- fix(a2a-server): enforce workspace trust and task isolation to prevent RCE by @luisfelipe-alt in #28470
- fix(core): sequentially verify cached credentials and restore GOOGLE_APPLICATION_CREDENTIALS fallback by @luisfelipe-alt in #28472
- feat(evals): add eval coverage report command by @ved015 in #28169
Full Changelog: v0.52.0...v0.53.0
更进一步:量化金融体系
看懂新闻只是起点——沿量化金融路径,把它变成能交付的工程能力