Gemini CLI 0.61.0 asks for confirmation before editing build files

Google released Gemini CLI 0.61.0, which now requires explicit confirmation before the agent edits build configuration files (package.json, Makefile, pyproject.toml, Bazel BUILD), runs build or test commands after such edits, or executes shell commands with arguments from untrusted content. The sandbox no longer mounts ~/.gemini and blocks access to OAuth credentials and .env files.

• Edits to package.json, Makefile, pyproject.toml and Bazel BUILD need confirmation
• Build and test commands after build-file edits are held for approval
• Shell command arguments are matched against web, MCP and Google Docs content
• Sandbox no longer mounts ~/.gemini and blocks OAuth and .env access