Evidence record / gemini-cli
A dated record of one change, kept so the writing that cites it can be checked. Compiled from the sources listed below by the research run, not written for reading. The judgment lives in the issues that cite it, below.
2026-10-13-gemini-cli-stable-v0-64-0-relaxes-oauth-iss-requirements-and-normalizes-terminal-turns
Stable v0.64.0 relaxes OAuth iss requirements and normalizes terminal turns. Stable 0.64.0 requires an OAuth callback iss only when discovered metadata declares authorization_response_iss_parameter_supported=true, or an issuer was configured explicitly without discovered metadata. A supplied iss still has to match. The oauth.authorizationResponseIssParameterSupported override can retain strict enforcement. This relaxes 0.60.0’s compatibility break for issuer-publishing servers that omit iss; the PR names Notion. The same cherry-pick normalizes outgoing terminal model turns by adding harness-authored Please continue. user content and Response was lost or interrupted. tool responses where needed after rewinds/aborts/cancellation.
Channel: tagged-release. Half: both. Date: 2026-10-13.
Operator consequence: Test 0.64.0 with MCP OAuth servers affected by the earlier missing-iss refusal. Set the support override true where that response is expected. In transcript/audit readers, distinguish synthetic continuation and missing-response records from user authorization or successful tool execution.
Receipt
- https://github.com/google-gemini/gemini-cli/pull/29616
- https://github.com/google-gemini/gemini-cli/pull/29696
- https://github.com/google-gemini/gemini-cli/blob/v0.64.0/docs/tools/mcp-server.md#L325-L347
- https://github.com/google-gemini/gemini-cli/blob/v0.64.0/packages/core/src/mcp/oauth-provider.ts#L411-L421
- https://github.com/google-gemini/gemini-cli/blob/v0.64.0/packages/core/src/utils/oauth-flow.ts#L268-L300
- https://github.com/google-gemini/gemini-cli/commit/249d51c2631ba1a36b71b0f2c50195abbe4100ce
Finding metadata
Run: 2026-10-13-profile-refresh-2026-09-21_2026-10-13-frontier-v0
Finding ID: 2026-10-13-gemini-cli-stable-v0-64-0-relaxes-oauth-iss-requirements-and-normalizes-terminal-turns
Profile citations
- Gemini CLI / claim / oauth-issuer-compatibility-and-synthetic-turns
- Gemini CLI / posture / accessibility
Source links
Primary links, including exact changelog lines when available.
- merged pr2026-10-13-gemini-cli-stable-v0-64-0-relaxes-oauth-iss-requirements-and-normalizes-terminal-turnsgithub.com/google-gemini/gemini-cli/pull/29616merged pr2026-10-13-gemini-cli-stable-v0-64-0-relaxes-oauth-iss-requirements-and-normalizes-terminal-turnsgithub.com/google-gemini/gemini-cli/pull/29696tagged commit file2026-10-13-gemini-cli-stable-v0-64-0-relaxes-oauth-iss-requirements-and-normalizes-terminal-turnsgoogle-gemini/gemini-cli / docs/tools/mcp-server.md#L325-L347tagged commit file2026-10-13-gemini-cli-stable-v0-64-0-relaxes-oauth-iss-requirements-and-normalizes-terminal-turnsgoogle-gemini/gemini-cli / packages/core/src/mcp/oauth-provider.ts#L411-L421tagged commit file2026-10-13-gemini-cli-stable-v0-64-0-relaxes-oauth-iss-requirements-and-normalizes-terminal-turnsgoogle-gemini/gemini-cli / packages/core/src/utils/oauth-flow.ts#L268-L300commit2026-10-13-gemini-cli-stable-v0-64-0-relaxes-oauth-iss-requirements-and-normalizes-terminal-turnsgithub.com/google-gemini/gemini-cli/commit/249d51c2631ba1a36b71b0f2c50195abbe4100ce
Versioned source: run artifact