☁️ What's New β

Google Cloud Updates(360)

Machine-translated and quality-filtered from the Google Cloud official feed.

Last updated: October 27, 2026 at 07:00 AM
Preview

AlloyDB for PostgreSQL: AI Function Updates

AlloyDB AI functions and improvements are now available in Preview, including the ai.extract function for extracting structured data from unstructured text and the ai.classify function for categorizing text. Parameter names and signatures for AI query engine functions have been updated, and new features such as custom instructions for summary formatting have been added.

AudienceBackend developers building serverless applications on AlloyDB for PostgreSQL
Featuresai.extract function, ai.classify function, updated AI query engine function parameters
RegionsAll regions
General Availability

BigQuery integrates with Google Drive

The Data Engineering Agent now integrates with Google Drive, allowing you to provide Google Sheets files, CSV, or JSONL files as input for your data engineering pipelines. This feature is generally available.

AudienceData engineers using BigQuery
FeaturesGoogle Drive integration, Google Sheets files, CSV files
RegionsAll regions
Preview

Cloud DNS CNAME Chasing Changes

Cloud DNS will follow CNAME chains between public and private zones starting January 5, 2027. Review your CNAME chasing needs and update your configuration to avoid unintended internal IP addresses or resolution errors.

AudienceBackend developers building serverless applications on Cloud DNS
FeaturesCNAME chain following, public and private zone resolution order, ANY query changes
RegionsAll regions
General Availability

Model Armor: General Availability

You can test Model Armor templates in the Google Cloud console by using custom sample prompts to verify which safety and security filters the prompts trigger and how Sensitive Data Protection redacts sensitive data. This feature is now available for general use, allowing you to evaluate template behavior and fine-tune filter configurations.

AudienceDevelopers using Model Armor for sensitive data protection
Featurescustom sample prompts, safety and security filters, Sensitive Data Protection
Regions모든 리전
General Availability

Cloud SDK 591.0.0 Released

Cloud SDK 591.0.0 fixes a known issue where gcloud components update on macOS was stuck, and updates bundled Python to 3.14.9. Additionally, several command groups have been promoted to GA, including Agent Registry, App Engine, and Network Security.

AudienceBackend developers building serverless applications on Google Cloud
FeaturesPromoted Agent Registry, App Engine, and Network Security command groups to GA
RegionsAll regions
Preview

Gemini Enterprise Agent Platform Adds Gemini Robotics ER 2 Preview

Gemini Robotics ER 2 is an embodied reasoning vision-language model built on Gemini 3.5 Flash for robotics applications, including spatial reasoning, agentic code execution, task orchestration, and video understanding. This feature is currently in preview and available in all regions.

AudienceBackend developers building robotics applications
Featuresembodied reasoning, spatial reasoning, agentic code execution
RegionsAll regions
General Availability

Google Cloud VMware Engine GA

Google Cloud VMware Engine is now generally available, allowing you to deploy, configure, and manage VMware Cloud Foundation on dedicated bare-metal Compute Engine instances. Key features include provisioning dedicated bare-metal ESXi nodes with deletion protection and Local SSD storage for vSAN, automating node preparation, and distributing nodes across isolated availability domains for high availability.

AudienceBackend developers building VMware environments on Google Cloud
Featuresprovisioning dedicated bare-metal ESXi nodes, automating node preparation, distributing nodes across isolated availability domains
Regions모든 리전
General Availability

Looker-Excel Connector ODBC Driver 1.0.7 Released

The latest version of the Looker-Excel Connector ODBC driver, version 1.0.7, is now available to download. This update is available in all regions.

AudienceBackend developers using the Looker-Excel Connector ODBC driver
Featuresversion 1.0.7, ODBC driver, Looker-Excel Connector
Regions모든 리전
General Availability

Cloud Load Balancing: Regular expression URL rewrites for route rules

Regular expression URL rewrites for route rules in URL maps are now generally available for Application Load Balancers. You can use regular expression pattern rewrite actions to rewrite URL paths by substituting or removing URL path components before forwarding requests to your backends.

AudienceBackend developers building serverless applications on Google Cloud
FeaturesRegular expression URL rewrites, URL path components, rewrite actions
RegionsAll regions
General Availability

Gemini Enterprise: VPC connectivity and static IP egress

Gemini Enterprise now supports VPC connectivity and static IP egress for custom MCP servers, allowing you to route outbound tool traffic through Agent Gateway and host private MCP servers inside your VPC network. This feature is generally available and supports us-central1 and europe-west1 regions.

AudienceBackend developers building custom MCP servers
FeaturesVPC connectivity, static IP egress, Agent Gateway
Regionsus-central1, europe-west1
General Availability

Model Armor Enforces Data Residency Compliance

Model Armor enforces the constraints/modelarmor.managed.requireTemplateDataResidencyCompliance managed Organization Policy Service constraint by default, preventing data residency non-compliance. This feature is generally available, and administrators can disable the constraint for data residency.

AudienceBackend developers building serverless applications on Google Cloud
Featuresmanaged Organization Policy Service constraint, data residency compliance, template data residency
Regions모든 리전
General Availability

Cloud Database Migration Service: Heterogeneous Conversion Workspaces

You can now create heterogeneous conversion workspaces by importing database schema metadata files from a Cloud Storage bucket without requiring direct network connectivity between Database Migration Service and your source database during the schema conversion phase. This feature supports conversion workspaces for Oracle to Cloud SQL for PostgreSQL, Oracle to AlloyDB for PostgreSQL, SQL Server to Cloud SQL for PostgreSQL, and SQL Server to AlloyDB for PostgreSQL.

AudienceBackend developers building database migration workloads on Cloud Database Migration Service
Featuresheterogeneous conversion workspaces, Cloud Storage bucket, direct network connectivity
Regions모든 리전
General Availability

Apigee X: MCP Tool Argument Routing Change

Apigee X now sends MCP tool arguments to the location declared in the OpenAPI parameter, replacing the previous query-string behavior. To adopt the new routing, deploy a new revision of the MCP proxy. For the full mapping, see Tool argument placement on the backend request.

AudienceBackend developers building serverless applications on Apigee X
FeaturesMCP tool argument routing change, request header support, Cookie header support
RegionsAll regions
General Availability

Oracle Database@Google Cloud remote MCP server GA

The Oracle Database@Google Cloud remote MCP server is now generally available, enabling developers to create and manage Database Connections and run SQL statements with database_connection_executesql. This allows for easy interaction with Oracle Database@Google Cloud resources from LLMs, AI applications, and AI-enabled development platforms.

AudienceBackend developers building AI applications and LLMs
FeaturesDatabase Connections, SQL statements, database_connection_executesql
Regions모든 리전
General Availability

Agent Platform Workbench Security Updates

The Agent Platform Workbench has been updated to the latest packages from upstream dependencies, addressing multiple reported security vulnerabilities in bundled packages. The certifi, pip, and conda ca-certificates have been updated to the latest versions.

AudienceBackend developers building serverless applications
Featuresupdated certifi, pip, and conda ca-certificates
Regions모든 리전
Preview

BigQuery Supports Volume Mounts for Python UDFs

BigQuery now supports volume mounts for Python user-defined functions, allowing direct access to Cloud Storage dependency files from Python UDF code. This feature is currently in Preview, requiring developers to test and adapt their code accordingly.

AudienceBackend developers building data processing pipelines on BigQuery
FeaturesVolume mounts, Cloud Storage, Python user-defined functions
RegionsAll regions
General Availability

Compute Engine Security Fix

A security vulnerability (CVE-2026-85299) about incorrect authorization in Compute Engine has been addressed. For more information, see the GCP-2026-073 security bulletin.

AudienceBackend developers using Compute Engine
FeaturesSecurity patch for CVE-2026-85299, Compute Engine authorization fix, Security update
Regions모든 리전
General Availability

Gemini Enterprise Agent Platform: Control user intent matching

You can now turn user intent matching on or off for semantic governance policies by setting the sgpUserIntentMatching key on the authorization extension metadata. Turning it off reduces protection against indirect prompt injection, and policy evaluation logs report the mode each evaluation used in the sgpUserIntentMatchingMode field.

AudienceBackend developers building serverless applications on Gemini Enterprise Agent Platform
Featuresuser intent matching, semantic governance policies, policy evaluation logs
Regions모든 리전
General Availability

Google Kubernetes Engine Feature The C4D bare metal machine types

The C4D bare metal machine types (c4d-standard-384-metal, c4d-highcpu-384-metal, and c4d-highmem-384-metal) are generally available on GKE. You can create C4D bare metal node pools in Standard clusters that run version 1.36 or later, and use C4D bare metal nodes with cluster autoscaler, node auto-provisioning, and custom ComputeClasses in version 1.37.0-gke.4713000 or later.

AudienceBackend developers building serverless applications on GKE
FeaturesC4D bare metal machine types, cluster autoscaler, node auto-provisioning
Regions모든 리전
General Availability

Knowledge Catalog Supports Looker Data Lineage

Knowledge Catalog now supports data lineage for Looker (Google Cloud core), including views for LookML views and Explores, Looker dashboards, and Conversational Analytics agents. This allows you to control data lineage ingestion at the organization, folder, and project levels, and visualize the end-to-end flow of your data from BigQuery sources.

AudienceData engineers and analysts using Google Cloud
FeaturesData lineage support for Looker, LookML views and Explores, Looker dashboards
Regions모든 리전
General Availability

Looker Data Lineage and MCP Server GA

Looker (Google Cloud core) data lineage is now generally available, providing end-to-end visibility for LookML dashboards and Conversational Analytics agents. Administrators can now manage lineage enablement independently through the Data Lineage API and service-level ingestion controls, and also enable pre-configured integrations from the Application Library or register custom OAuth clients with specific redirect URIs and group-based access controls.

AudienceAdministrators and developers building Looker applications on Google Cloud
FeaturesData lineage API, service-level ingestion controls, OAuth clients
Regions모든 리전
General Availability

Google Distributed Cloud (software only) for bare metal: IPAM garbage collector fix

The 1.34.1000-gke.111 release notes fixed an issue where the Whereabouts IPAM garbage collector prematurely deleted active IP address reservations on secondary networks, causing duplicate IP addresses to be assigned to running Pods. This fix ensures stable IP address assignments for Pods on secondary networks.

AudienceKubernetes administrators and developers
FeaturesIPAM garbage collector fix, stable IP address assignments, secondary network support
Regions모든 리전
General Availability

Google SecOps SOAR 6.3.104 Released

Google SecOps SOAR 6.3.104 is being rolled out to the first phase of regions, including Seoul and Tokyo regions, with internal and customer bug fixes. This release does not introduce any new features or changes.

AudienceBackend developers using Google SecOps SOAR
Regions모든 리전
General Availability

Google SecOps: Resize inline images in Case Wall comments

You can now resize inline images directly in rich-text comments on the Case Wall. To resize an image, switch the comment box to rich-text mode and insert an image either by using the toolbar's image menu or by pasting it into the comment.

AudienceSecurity operations teams using Google SecOps
Featuresinline image resizing, rich-text comments, image menu
Regions모든 리전
General Availability

Agent Platform Workbench Updated

The Agent Platform Workbench has been updated to install the latest packages from upstream dependencies and update certifi, pip, and conda ca-certificates to the latest versions. Additionally, issues with dataset and table search in the BigQuery panel and Jupyter Server terminal configuration have been fixed.

AudienceBackend developers building serverless applications on Google Cloud
FeaturesUpdated certifi, pip, and conda ca-certificates
RegionsAll regions
General Availability

App Engine standard environment PHP security updates

The App Engine standard environment PHP runtime language has received important security updates, including PHP 8.2 and later versions 8.2.35, 8.3.36, 8.4.27, and 8.5.12. Take immediate action by rebuilding and redeploying resources with updated dependencies.

AudienceBackend developers building serverless applications on App Engine
FeaturesPHP 8.2 and later, google-22, google-22-full
RegionsAll regions
General Availability

App Engine standard environment Go security updates

The App Engine standard environment Go runtime language has been updated to include security patches for Go 1.24 and later versions, including 1.24.13, 1.25.14, 1.26.10, and 1.27.3. Take immediate action by rebuilding and redeploying resources with updated dependencies.

AudienceBackend developers building serverless applications on App Engine
FeaturesGo 1.24, Go 1.25, Go 1.26
Regions모든 리전
General Availability

App Engine flexible environment Go security updates

App Engine flexible environment Go has been updated to include security patches for Go 1.24 and later versions, including 1.24.13, 1.25.14, 1.26.10, and 1.27.3. Additionally, the underlying operating system packages for stacks google-22 and google-24 have been updated. Developers should rebuild and redeploy their resources with updated dependencies to ensure security.

AudienceBackend developers building serverless applications on App Engine
FeaturesSecurity patches for Go 1.24 and later, updated operating system packages for stacks google-22 and google-24
Regions모든 리전
General Availability

App Engine flexible environment PHP security updates

The App Engine flexible environment has been updated to include security updates for PHP 8.2 and later, including versions 8.2.35, 8.3.36, 8.4.27, and 8.5.12. Take immediate action by rebuilding and redeploying resources with updated dependencies.

AudienceBackend developers building serverless applications on App Engine
FeaturesPHP 8.2 and later, google-22, google-22-full
Regions모든 리전
General Availability

App Engine flexible environment Java security updates

The Java 17 and later runtimes, as well as the google-22 and google-24 stacks, have been updated with important security patches. Take immediate action by rebuilding and redeploying your resources with updated dependencies.

AudienceBackend developers building Java applications on App Engine
FeaturesJava 17 and later runtimes, google-22 and google-24 stacks, security patches
Regions모든 리전
General Availability

App Engine standard environment Java security updates

The Java 17 and later runtime language has been updated to 17.0.20_101, 21.0.12_101.0.LTS, and 25.0.5_8.0.LTS. Take immediate action by rebuilding and redeploying your resources with updated dependencies.

AudienceBackend developers building Java applications on App Engine
FeaturesJava 17 and later runtime language updates, google-22 and google-24 stack updates
Regions모든 리전

App Engine flexible environment Python

Security The following runtime language contains important security updates: Python 3.10 and later : 3.10.22 , 3.11.17 , 3.12.15 , 3.13.15 , 3.14.6 The following stacks and their underlying operating system packages have also been updated: google-22 , google-22-full google-24 , google-24-full Take immediate protective action by rebuilding and redeploying your resources with updated dependencies. See Security bulletins for Google Cloud for more information.

General Availability

App Engine flexible environment Node.js security updates

The Node.js runtime language has been updated to versions 22.23.4, 24.22.1, and 26.12.1 to address security issues. Take immediate action by rebuilding and redeploying your resources with updated dependencies.

AudienceBackend developers building serverless applications on App Engine
FeaturesNode.js runtime language updates, stack and operating system package updates
Regions모든 리전
General Availability

App Engine standard environment Node.js security updates

Node.js 22 and later runtimes have been updated to 22.23.4, 24.22.1, and 26.12.1 to address security issues. Take immediate action by rebuilding and redeploying resources with updated dependencies.

AudienceBackend developers building serverless applications on App Engine
FeaturesNode.js runtime updates, security patches, dependency updates
Regions모든 리전
General Availability

App Engine flexible environment Ruby security updates

Ruby 3.3 and later runtimes have been updated to 3.3.12, 3.4.11, and 4.0.7 to address security issues. Take immediate action by rebuilding and redeploying resources with updated dependencies.

AudienceBackend developers building serverless applications on App Engine
FeaturesRuby 3.3.12, Ruby 3.4.11, Ruby 4.0.7
Regions모든 리전
General Availability

Cloud Run Security Updates

Cloud Run has updated its runtime languages with important security patches for Go, Node.js, Java, PHP, Python, Ruby, and .NET. Take immediate action by rebuilding and redeploying your resources with updated dependencies.

AudienceBackend developers building serverless applications on Cloud Run
FeaturesSecurity updates for Go, Node.js, Java
RegionsAll regions

Cloud Run functions

Security The following runtime languages contain important security updates: Go 1.24 and later : 1.24.13 , 1.25.14 , 1.26.10 , 1.27.3 Node.js 22 and later : 22.23.4 , 24.22.1 , 26.12.1 Java 17 and later : 17.0.20_101 , 21.0.12_101.0.LTS , 25.0.5_8.0.LTS PHP 8.2 and later : 8.2.35 , 8.3.36 , 8.4.27 , 8.5.12 Python 3.10 and later : 3.10.22 , 3.11.17 , 3.12.15 , 3.13.15 , 3.14.6 Ruby 3.3 and later : 3.3.12 , 3.4.11 , 4.0.7 .NET 6 and later : 6.0.428 , 8.0.415 , 10.0.100 The following stacks and their underlying operating system packages have also been updated: google-22 , google-22-full google-24 , google-24-full Take immediate protective action by rebuilding and redeploying your resources with updated dependencies. See Security bulletins for Google Cloud for more information.

General Availability

App Engine flexible environment .NET security updates

The .NET 6 and later runtimes, as well as the google-22 and google-24 stacks, have been updated with security patches. Take immediate action by rebuilding and redeploying your resources with updated dependencies.

AudienceBackend developers building serverless applications on App Engine
Features.NET 6 and later runtimes, google-22 and google-24 stacks, security patches
Regions모든 리전
General Availability

App Engine standard environment Python security updates

The App Engine standard environment Python runtime language has been updated with important security patches for Python 3.10 and later versions, including 3.10.22, 3.11.17, 3.12.15, 3.13.15, and 3.14.6. Additionally, the underlying operating system packages for stacks google-22 and google-24 have been updated. Take immediate action by rebuilding and redeploying your resources with updated dependencies.

AudienceBackend developers building serverless applications on App Engine
FeaturesPython 3.10 and later security patches, updated stacks google-22 and google-24, updated operating system packages
Regions모든 리전
General Availability

App Engine standard environment Ruby security updates

Ruby 3.3 and later runtimes have been updated to 3.3.12, 3.4.11, and 4.0.7, and stacks and their underlying operating system packages have also been updated to google-22, google-22-full, google-24, and google-24-full. Take immediate action by rebuilding and redeploying resources with updated dependencies.

AudienceBackend developers building serverless applications on App Engine
FeaturesRuby 3.3.12, Ruby 3.4.11, Ruby 4.0.7
Regions모든 리전
General Availability

Google Cloud Buildpacks Security Updates

Security updates are available for various runtime languages, including Go, Node.js, Java, PHP, Python, Ruby, and .NET. Take immediate action by rebuilding and redeploying resources with updated dependencies.

AudienceBackend developers building serverless applications on Google Cloud
FeaturesSecurity updates for Go 1.24 and later, Node.js 22 and later, Java 17 and later
Regions모든 리전
General Availability

Google SecOps SOAR 6.3.103 Released

Google SecOps SOAR Announcement Release 6.3.103 is now available for all regions. This release is now available for use in all regions.

AudienceSecurity operations teams using Google SecOps SOAR
FeaturesRelease 6.3.103, Announcement Release, All regions
Regions모든 리전
General Availability

Google Cloud CCaaS 6.26: Scheduled Callback and Salesforce Integration

Google Cloud CCaaS now supports scheduled callback for IVR overcapacity and integration with Salesforce apps that require Proof Key for Code Exchange (PKCE) and refresh token rotation. Administrators can configure scheduled callback and enable PKCE and refresh token rotation for Salesforce connections.

AudienceAdministrators and developers building contact center applications on Google Cloud
FeaturesScheduled callback for IVR overcapacity, Salesforce integration with PKCE and refresh token rotation
RegionsAll regions
General Availability

Cloud Monitoring Fixed Ops Agent 2.73.0 Patch

Fixed Ops Agent version 2.73.0 includes patches for a Go vulnerability involving system root certificates, CVE-2026-111943. For more information, see Ops Agent 2.73.0 notes.

Regions모든 리전
General Availability

Cloud SQL for MySQL Security Update

Google is updating Cloud SQL's managed components to address a security issue. To apply the fix, update the Cloud SQL Auth Proxy to 2.26.3 or later, the Cloud SQL Proxy Operator to 1.8.4 or later, and the gcloud CLI to 590.0.1, or perform self-service maintenance.

AudienceBackend developers building serverless applications on Google Cloud
FeaturesCloud SQL Auth Proxy version 2.26.3, Cloud SQL Proxy Operator version 1.8.4, gcloud CLI version 590.0.1
RegionsAll regions
General Availability

Google Cloud CCaaS Scheduled Callback and Salesforce Integration

Google Cloud CCaaS now supports scheduled callback for IVR overcapacity and integration with Salesforce apps that require Proof Key for Code Exchange (PKCE) and refresh token rotation. Administrators can configure scheduled callback globally or per queue, and Salesforce settings are turned on automatically for newly created connected apps.

AudienceAdministrators and developers building contact center solutions on Google Cloud CCaaS
FeaturesScheduled callback for IVR overcapacity, Salesforce integration with PKCE and refresh token rotation, and various bug fixes
RegionsAll regions
General Availability

Cloud SQL for PostgreSQL Security Update

Google is updating Cloud SQL's managed components to address GCP-2026-071. To apply the fix, upgrade the Cloud SQL Auth Proxy to 2.26.3 or later, the Cloud SQL Proxy Operator to 1.8.4 or later, and update the host's certificate authority (CA) certificates or the language runtime and operating system CA certificates used with the Cloud SQL Language Connector.

AudienceBackend developers building serverless applications on Google Cloud
FeaturesCloud SQL Auth Proxy version 2.26.3, Cloud SQL Proxy Operator version 1.8.4, certificate authority (CA) certificates update
RegionsAll regions
General Availability

Cloud SQL for SQL Server Security Update

Google is updating Cloud SQL's managed components in response to GCP-2026-071. Users must upgrade the Cloud SQL Auth Proxy to 2.26.3 or later and the Cloud SQL Proxy Operator to 1.8.4 or later, and update the host's certificate authority (CA) certificates or language runtime and operating system CA certificates used with the Cloud SQL Language Connector.

AudienceBackend developers building serverless applications on Cloud SQL
FeaturesCloud SQL Auth Proxy version 2.26.3, Cloud SQL Proxy Operator version 1.8.4, certificate authority (CA) certificate updates
RegionsAll regions
General Availability

Cloud Database Migration Service CA certificate compromise

Eight eMudhra subordinate CA certificates, cross-signed by AAA Certificate Services, are no longer trusted and being revoked. Update the CA certificate in the Database Migration Service source connection profile to continue connecting to the source database.

AudienceDatabase administrators and security teams
FeaturesCA certificate revocation, connection profile updates, security bulletin GCP-2026-071
Regions모든 리전
General Availability

Datastream: Revoked eMudhra CA certificates

Google has revoked eight eMudhra subordinate Certification Authority (CA) certificates due to a security compromise. To continue connecting to a source database, upload the new CA certificate to the Datastream source connection profile.

AudienceBackend developers building serverless applications on Google Cloud
Featuresrevoked CA certificates, updated connection profiles, security bulletin GCP-2026-071
Regions모든 리전
General Availability

Compute Engine: View MIG instance distribution

You can now view how a managed instance group (MIG) distributes its instances across zones and machine types directly from the MIG's Monitoring tab in the Google Cloud console. This feature is available in all regions.

AudienceBackend developers building serverless applications on Google Cloud
Featuresinstance distribution, zones, machine types
Regions모든 리전
General Availability

Data Studio supports BigQuery Graph

Data Studio now supports connecting to BigQuery Graph or querying a graph using a custom SQL query in the BigQuery connector. This allows importing graph measures as metrics for use in reports.

AudienceData analysts using Data Studio
FeaturesBigQuery Graph, custom SQL queries, graph measures as metrics
Regions모든 리전
General Availability

Gemini Enterprise: Single-User Quota Limits

Gemini Enterprise administrators can configure single-user quota limits on the Usage & Spending > Usage page in the Google Cloud console to prevent an individual user from using all of an edition's shared subscription quota pool. This feature is now available for all editions, including Gemini Enterprise Standard, Gemini Enterprise Plus, and Gemini Enterprise Standard Emerging Market.

AudienceGemini Enterprise administrators
Featuressingle-user quota limits, quota multiplier, edition and location
Regions모든 리전
General Availability

Looker 26.22 fixes

Looker 26.22 addresses several issues, including table column options menus and search boxes appearing behind drill dialogs, and custom visualization tiles being truncated in dashboard PDF exports. This release also updates the System Activity query_metrics Explore to accurately record model initialization time and fixes issues in the TypeScript and JavaScript SDKs.

AudienceDevelopers using Looker
Featuresfixed table column options menus and search boxes appearing behind drill dialogs, fixed custom visualization tiles being truncated in dashboard PDF exports, updated System Activity query_metrics Explore to accurately record model initialization time
RegionsAll regions
General Availability

App Engine flexible environment PHP security patch

All supported versions of PHP 8.2 and later are patched. Take immediate protective action by redeploying your resources with updated dependencies to ensure security.

AudienceBackend developers building serverless applications on App Engine
FeaturesPHP 8.2 and later, security patch, dependency updates
Regions모든 리전
General Availability

App Engine standard environment PHP patched for PHP 8.2+ vulnerabilities

All supported versions of PHP 8.2 and later are patched. Take immediate action by redeploying your resources with updated dependencies.

AudienceBackend developers building serverless applications on App Engine
FeaturesPHP 8.2 and later patched
Regions모든 리전
General Availability

Cloud Run functions PHP 8.2 patch

All supported versions of PHP 8.2 and later are patched to address security vulnerabilities. Take immediate action by redeploying your resources with updated dependencies.

AudienceBackend developers building serverless applications on Cloud Run
FeaturesPHP 8.2 patch, security vulnerability fix, redeployment required
Regions모든 리전
General Availability

BigQuery AI Translate Function GA

BigQuery now supports AI.TRANSLATE function for translating text strings between languages, enabling standard Neural Machine Translation (NMT) workloads and Translation LLM (TLLM) capabilities. This update requires no action from developers, as the function is now generally available.

AudienceBackend developers building data pipelines on Google Cloud
FeaturesAI.TRANSLATE function, Neural Machine Translation (NMT), Translation LLM (TLLM)
Regions모든 리전
General Availability

Container Optimized OS Updated with Security Fixes and Runtime Changes

This update includes security fixes for various vulnerabilities in Container Optimized OS, including CVE-2026-111943, CVE-2026-39831, and CVE-2026-46595. Additionally, runtime sysctl changes have been made to increase various limits.

AudienceBackend developers building containerized applications on Google Cloud
FeaturesSecurity fixes for CVE-2026-111943, CVE-2026-39831, CVE-2026-46595
RegionsAll regions
Preview

Cloud Run: Direct VPC Ingress Preview

You can configure Direct VPC ingress for Cloud Run instances. All supported versions of PHP 8.2 and later are patched, requiring redeployment with updated dependencies.

AudienceBackend developers building serverless applications on Cloud Run
FeaturesDirect VPC ingress, PHP 8.2 and later support, redeployment required
RegionsAll regions
General Availability

Firestore DML Operations GA

Data modification language (DML) operations are now generally available in Firestore. This adds support for insert and upsert operations.

AudienceBackend developers building serverless applications on Firestore
Featuresinsert, upsert, DML operations
Regions모든 리전
General Availability

Google Distributed Cloud for bare metal 1.34.1000-gke.111

Google Distributed Cloud for bare metal 1.34.1000-gke.111 now available, running on Kubernetes v1.34.7-gke.200. Upgrades may take 7-14 days to become available via GKE On-Prem API clients.

AudienceBackend developers building serverless applications on Google Cloud
FeaturesImproved BGP load balancing, fixed NodePool controller issues, fixed vulnerabilities
RegionsAll regions
General Availability

Apigee X Security Fixes and Enhancements

Apigee X has been updated to version 1-18-0-apigee-7, which includes security fixes for Apigee and its infrastructure. The update also introduces several enhancements, such as improved handling of leading spaces in VerifyAPIKey policy and fixes for various issues in Semantic Governance and other policies.

AudienceBackend developers building serverless applications on Google Cloud
FeaturesSecurity fixes for Apigee, improved handling of leading spaces in VerifyAPIKey policy, fixes for Semantic Governance and other policies
RegionsAll regions
General Availability

Google Cloud Contact Center as a Service: Bug Fixes

This release addresses issues with call and chat type names, report inclusions, and queue monitoring. Developers should review the updated reports and dashboards for accurate data.

AudienceContact center administrators and developers
FeaturesImproved report inclusions, fixed queue monitoring, and accurate translations
RegionsAll regions
General Availability

Google Distributed Cloud (software only) for VMware 1.34.1000-gke.111

Google Distributed Cloud 1.34.1000-gke.111 is now available for download, running on Kubernetes v1.34.7-gke.200. This release fixes vulnerabilities and an issue with control plane node joining after CA rotation.

AudienceBackend developers building serverless applications on GKE On-Prem API clients
FeaturesKubernetes v1.34.7-gke.200, vulnerability fixes, control plane node joining after CA rotation
RegionsAll regions
General Availability

Google SecOps: Bulk Case Selection

You can now select up to 50 cases at a time in the case queue to perform bulk operations. This includes range selection and selecting all loaded cases.

AudienceSecurity operations teams
FeaturesBulk case selection, range selection, select all loaded cases
Regions모든 리전
General Availability

Model Armor Custom Organization Policies

You can use custom organization policies to enforce required filters, such as responsible AI or prompt injection and jailbreak detection, on new or updated Model Armor Template resources. This ensures compliance with organizational policies.

AudienceBackend developers building and managing Model Armor resources
Featurescustom organization policies, responsible AI, prompt injection and jailbreak detection
Regions모든 리전
Preview

Cloud Billing: SKU attributes and granular usage units in pricing data export

Cloud Billing pricing data export now includes SKU attributes and granular usage units in Preview. This allows for more detailed analysis of usage data, such as tokens.

AudienceBackend developers building serverless applications on Google Cloud
FeaturesSKU attributes, granular usage units, pricing data export to BigQuery
Regions모든 리전
General Availability

Gemini Enterprise Agent Platform updates CodeMender

This release introduces deep scan by default for CodeMender's cm find command, breaking down scan usage by mode, and adds pre-flight health checks with cm health command. Developers should update their CodeMender version to 0.16.0 to utilize these changes.

AudienceBackend developers using CodeMender
FeaturesDeep scan by default, pre-flight health checks, expanded file discovery
RegionsAll regions
General Availability

BigQuery AI CHUNK DOCUMENT Function

The AI.CHUNK_DOCUMENT function splits unstructured documents into semantically coherent text chunks optimized for vector embeddings and Retrieval-Augmented Generation (RAG) workflows. This function is now available for use in BigQuery, enabling developers to improve their text processing capabilities.

AudienceBackend developers building data processing pipelines on BigQuery
Featurestable-valued function, vector embeddings, Retrieval-Augmented Generation (RAG) workflows
Regions모든 리전
General Availability

Looker General Availability

Looker now supports automated cataloging and ingestion of metadata with Knowledge Catalog, including additional granular metadata and new asset types. Data lineage integration remains in Preview.

AudienceBackend developers building data analytics applications on Google Cloud
FeaturesAutomated cataloging, granular metadata, LookML dashboards
Regions모든 리전
General Availability

Google Distributed Cloud for bare metal 1.36.200-gke.118

Google Distributed Cloud for bare metal 1.36.200-gke.118 is now available for download, running on Kubernetes v1.36.4-gke.100. Upgrades may take 7-14 days to become available via GKE On-Prem API clients.

AudienceBackend developers building serverless applications on Google Cloud
FeaturesImproved BGP load balancing, fixed node drain in maintenance mode, fixed vulnerabilities
RegionsAll regions
General Availability

Google Distributed Cloud (software only) for VMware 1.36.200-gke.118

Google Distributed Cloud 1.36.200-gke.118 is now available for download, running on Kubernetes v1.36.4-gke.100. After a release, it takes approximately 7 to 14 days for the version to become available for use with GKE On-Prem API clients.

AudienceBackend developers building serverless applications on GKE On-Prem
FeaturesKubernetes v1.36.4-gke.100, GKE On-Prem API clients, third-party storage vendors
Regions모든 리전
General Availability

App Engine standard environment PHP updates

Patch updates to supported PHP runtimes (8.5.12, 8.4.27, 8.3.36, 8.2.35) are available with deployments from source. PHP workloads have automatically been patched to address core PHP vulnerabilities.

AudienceBackend developers building PHP applications on App Engine
FeaturesPHP runtime updates, automatic patching, vulnerability fixes
Regions모든 리전
General Availability

PHP Runtime Patch Updates

PHP runtime patch updates are available on google-22 and google-24 tags with versions 8.5.12, 8.4.27, 8.3.36, and 8.2.35. Rebuild workloads with updated dependencies to protect against core PHP vulnerabilities.

AudienceBackend developers building serverless applications on Google Cloud
FeaturesPHP runtime patch updates, google-22, google-24 tags
RegionsAll regions
General Availability

Cloud Run PHP Runtime Patch Updates

Cloud Run resources deployed from source code can now use updated PHP runtimes: 8.5.12, 8.4.27, 8.3.36, and 8.2.35. Redeploy your resources with updated dependencies to protect your workloads.

AudienceBackend developers building serverless applications on Cloud Run
FeaturesPHP runtime updates, automatic base image updates, vulnerability patching
Regions모든 리전
General Availability

Cloud Run functions: PHP Runtime Patch Updates

Cloud Run functions now support PHP runtimes patched to 8.5.12, 8.4.27, 8.3.36, and 8.2.35. Functions with automatic base image updates enabled are already patched; redeploy your workloads with updated dependencies if you have disabled automatic updates.

AudienceBackend developers building serverless applications on Cloud Run
FeaturesPHP runtime patch updates, automatic base image updates, redeployment required
RegionsAll regions
Preview

Dataflow Streaming Engine High Availability

Dataflow now supports streaming high availability for Streaming Engine jobs by replicating backend state across multiple zones in a region. When you enable the requires_high_availability service option, your job is protected from single-zone failures.

AudienceBackend developers building serverless applications on Google Cloud
FeaturesStreaming Engine, high availability, backend state replication
Regions모든 리전
General Availability

App Engine flexible environment PHP updates

Patch updates to supported PHP runtimes are available with deployments from source: 8.5.12, 8.4.27, 8.3.36, and 8.2.35. Take immediate action to protect your PHP workloads by redeploying your workloads with updated dependencies.

AudienceBackend developers building serverless applications on App Engine
FeaturesPHP runtime updates, deployment from source, dependency updates
Regions모든 리전
General Availability

Google SecOps Marketplace: New Features and Improvements

Google Threat Intelligence now supports lazy case loading, and the Entities To Ignore parameter has been added to Palo Alto Cortex XDR - Incidents Connector. Google Threat Intelligence also improved private submission handling when retrieving comments.

AudienceSecurity operations teams using Google SecOps Marketplace
Featureslazy case loading, Entities To Ignore parameter, improved private submission handling
RegionsAll regions

Apigee X

Announcement Apigee Emulator Apigee Emulator v2.0.2 On October 21, 2026, we released Apigee Emulator version 2.0.2. This release upgrades the Apigee Emulator runtime to Java 21 (Eclipse Temurin JRE 21) to align local proxy development and policy execution with the production Apigee runtime, while keeping the embedded Apache Cassandra datastore pinned to Java 8. It also addresses 46 security vulnerabilities across Netty, Jackson, Apache Log4j, BouncyCastle, Apache CXF, Eclipse Jetty, and the embedded Cassandra Go standard library health-check binary. The emulator image is available at Artifact Registry . To upgrade, update the emulator version in your Cloud Code for VS Code settings to 2.0.2 . See Manage the Apigee Emulator for details. Feature Apigee Emulator Changed in this release Upgraded the Apigee Emulator runtime JVM to Eclipse Temurin JRE 21 ( 21.0.12.1.0+1-0 , from JRE 11 11.0.31+11 ), adding JVM 21 compatibility flags ( -Djava.security.manager=allow and --add-opens module flags) for JavaCallout , JavaScript (Rhino), and Python (Jython) policies while keeping the embedded Apache Cassandra 4.0.19 datastore pinned to Eclipse Temurin JRE 8. Upgraded Netty to 4.1.137.Final (from 4.1.135.Final ) and updated netty-tcnative-boringssl-static and netty-tcnative-classes to 2.0.81.Final (from 2.0.77.Final ). Upgraded Jackson ( jackson-core , jackson-databind , and jackson-dataformat-yaml ) to 2.21.7 (from 2.18.6 and 2.19.2 ) and jackson-annotations to 2.21 . Upgraded shaded Apache Log4j ( log4j-api and log4j-core ) in ConfigUtil.jar to 2.25.5 (from 2.17.1 and 2.25.4 ). Upgraded BouncyCastle ( bcprov-jdk18on , bcpkix-jdk18on , and bcutil-jdk18on ) to 1.85 (from 1.84 ). Upgraded Apache CXF ( cxf-* ) to 3.6.12 (from 3.5.11 ). Upgraded gRPC to 1.82.3 (from 1.62.2 ), Protobuf ( protobuf-java and protobuf-java-util ) to 4.33.6 (from 3.25.5 ), and Guava to 33.5.0-jre (from 33.4.8-jre ). Removed unused org.eclipse.jetty:jetty-* ( 9.4.58.v20250814 ) and commons-collections:commons-collections ( 3.2.2 ) JARs from the emulator distribution. Refreshed the Cassandra base image to pick up Go standard library 1.27.0 (from 1.25.11 ) in the embedded /opt/apigee/ready health-check binary. Security Apigee Emulator Security This release addresses 46 security vulnerabilities across Netty, the embedded Go standard library, Jackson, Apache Log4j, Eclipse Jetty, BouncyCastle, and Apache CXF: CVE / Advisory Component CVE-2026-75595 Netty ( netty-handler ) CVE-2026-75596 Netty ( netty-handler ) CVE-2026-59901 Netty ( netty-codec ) CVE-2026-55831 Netty ( netty-codec-http ) CVE-2026-55833 Netty ( netty-codec-http ) CVE-2026-56745 Netty ( netty-codec-http ) CVE-2026-56746 Netty ( netty-codec-http ) CVE-2026-59898 Netty ( netty-codec-http ) CVE-2026-59899 Netty ( netty-codec-http ) CVE-2026-59903 Netty ( netty-codec-http ) CVE-2026-59921 Netty ( netty-codec-http ) CVE-2026-56819 Netty ( netty-codec-http2 ) CVE-2026-59900 Netty ( netty-codec-http2 ) CVE-2026-73508 Netty ( netty-codec-dns ) CVE-2026-39821 Go standard library CVE-2026-33818 Go standard library CVE-2026-39822 Go standard library CVE-2026-42505 Go standard library CVE-2026-56853 Go standard library CVE-2026-56858 Go standard library CVE-2026-56859 Go standard library CVE-2026-56860 Go standard library CVE-2026-56862 Go standard library CVE-2026-56864 Go standard library CVE-2026-56865 Go standard library CVE-2026-68494 Jackson ( jackson-core ) CVE-2026-18401 Jackson ( jackson-core ) CVE-2026-54512 Jackson ( jackson-databind ) CVE-2026-54513 Jackson ( jackson-databind ) CVE-2026-54514 Jackson ( jackson-databind ) CVE-2026-54515 Jackson ( jackson-databind ) CVE-2026-59888 Jackson ( jackson-databind ) CVE-2026-59889 Jackson ( jackson-databind ) CVE-2026-77310 Jackson ( jackson-databind ) GHSA-mhm7-754m-9p8w Jackson ( jackson-databind ) CVE-2025-68161 Apache Log4j ( log4j-core ) CVE-2026-34477 Apache Log4j ( log4j-core ) CVE-2026-34480 Apache Log4j ( log4j-core ) CVE-2026-49844 Apache Log4j ( log4j-api ) CVE-2026-10050 Eclipse Jetty ( jetty-security ) CVE-2026-2332 Eclipse Jetty ( jetty-http ) CVE-2024-6763 Eclipse Jetty ( jetty-http ) CVE-2026-6790 Eclipse Jetty ( jetty-server ) CVE-2026-8763 BouncyCastle ( bcprov-jdk18on ) CVE-2026-13506 BouncyCastle ( bcprov-jdk18on ) CVE-2026-50645 Apache CXF ( cxf-core )

General Availability

Apigee Hybrid v1.15.9 Patch Release

Apigee Hybrid v1.15.9 patch release fixes several security vulnerabilities and issues, including a fix for the apigee-ingressgateway forwarding the x-envoy-decorator-operation header to upstream runtime and target backends. This release also updates the apigee-redis container to use the Valkey engine (version 8.1.10).

AudienceBackend developers building serverless applications on Apigee Hybrid
FeaturesSecurity fixes for multiple components, updated apigee-redis container, fix for apigee-ingressgateway forwarding issue
RegionsAll regions
General Availability

Cloud SDK Breaking 590.0.0

Cloud SDK 590.0.0 updates the Google Cloud CLI with breaking changes, including the removal of the gcloud-man-pages component, app-engine-grpc component, and Cloud Build Local Builder component. Additionally, it updates bundled Python on Linux and Windows, and in Alpine-based Docker images, to pyOpenSSL 26.4.0 and cryptography 50.0.1.

AudienceBackend developers building serverless applications on Google Cloud
Featuresgcloud-man-pages removal, app-engine-grpc removal, Cloud Build Local Builder component removal
RegionsAll regions
General Availability

Apigee X Maintenance Update

Apigee X instances will be updated to version 1-18-0-apigee-6 within 7 to 21 days if the instance version is below 1-18-0-apigee-6. A notification containing the expected date of upgrade will be sent within two business days.

AudienceApigee instance administrators
FeaturesMaintenance updates, notification of expected upgrade date
RegionsAll regions
General Availability

Google Kubernetes Engine: Resolve Cloud Storage FUSE CSI driver issue

This update resolves the Cloud Storage FUSE CSI driver issue by providing specific patch versions for 1.36.4 and upgrade paths for 1.36.5 and 1.37.1. Developers can upgrade their cluster control plane to fix the issue for ubuntu_containerd and older cos_containerd node pools.

AudienceBackend developers building containerized applications on Google Kubernetes Engine
Features1.36.5, 1.37.1, 1.36.4
RegionsAll regions
General Availability

Gemini Enterprise: Antigravity Gateway Support

Gemini Enterprise now supports Antigravity Enterprise Gateway, enabling organizations to route model inference requests through a centralized gateway for inspection, auditing, and security enforcement. Gemini 2.5 Pro is discontinued in Canada and Japan, with agents and chat sessions automatically switching to Gemini 3.5 Flash.

AudienceBackend developers building serverless applications on Google Cloud
FeaturesAntigravity Enterprise Gateway, model inference requests, gateway API key
RegionsAll regions
General Availability

Spanner Adds Approximate Aggregate Functions

Spanner now supports approximate aggregate functions for both GoogleSQL and PostgreSQL dialects, enabling faster computation and resource savings on large datasets. This feature is available in all regions.

AudienceBackend developers building data-intensive applications on Google Cloud
Featuresapproximate aggregate functions, GoogleSQL dialect, PostgreSQL dialect
Regions모든 리전
Preview

Cloud Workstations supports automatic failover for boost configurations

Cloud Workstations now supports automatic failover for boost configurations, enabling it to provision a workstation VM using the boost configuration if Compute Engine lacks capacity for the default machine type during startup. This feature is currently in Preview.

AudienceBackend developers building serverless applications on Compute Engine
Featuresautomatic failover, boost configurations, Compute Engine
Regions모든 리전
General Availability

Looker 26.20 Released

The latest versions of Looker in the Regular, Rapid, and No Channel release channels are now deploying Looker 26.20. No action is required for developers, as the latest version is being rolled out.

AudienceBackend developers building data analytics applications on Google Cloud
FeaturesLooker 26.20, Regular channel, Rapid and No Channel channels
Regions모든 리전
General Availability

Managed Service for Apache Airflow: Upgrade Rollbacks

Upgrade rollbacks are available in Managed Airflow (Gen 3) to detect and resolve degraded performance, Airflow bugs, or compatibility issues with DAGs, plugins, or dependencies. This feature is gradually rolling out over several releases, and new Airflow builds and images are available in various regions.

AudienceBackend developers building serverless applications on Google Cloud
FeaturesImproved Airflow worker health checks, New Airflow builds in Managed Airflow (Gen 3), New images in Managed Airflow (Gen 2)
RegionsAll regions
General Availability

Agent Platform Workbench Change M154

This release installs the latest packages from upstream dependencies and fixes dataset and table search in the BigQuery panel, which sometimes failed to return results due to the Datacatalog API being sunsetted in favor of Dataplex API. No actions are required for developers.

Featureslatest packages from upstream dependencies, BigQuery panel fixes, Datacatalog API sunsetted
Regions모든 리전
General Availability

Compute Engine: Graceful Shutdown

You can now enable graceful shutdown on Compute Engine instances to prevent data loss or corruption when stopping or deleting them. This setting gives the guest OS up to six hours to finish running tasks.

AudienceBackend developers building serverless applications on Compute Engine
FeaturesGraceful shutdown, guest OS shutdown time limit, task completion
Regions모든 리전
General Availability

Google Cloud Armor WAF v33-stable Rule Updates

Google Cloud Armor has updated its preconfigured WAF v33-stable rulesets with security fixes and enhancements. This update affects the following rulesets: sqli-v33-stable, xss-v33-stable, lfi-v33-stable, rfi-v33-stable, rce-v33-stable, methodenforcement-v33-stable, scannerdetection-v33-stable, protocolattack-v33-stable, php-v33-stable, sessionfixation-v33-stable, java-v33-stable, and nodejs-v33-stable.

AudienceBackend developers building serverless applications on Google Cloud
FeaturesUpdated WAF v33-stable rulesets, security fixes, and enhancements
RegionsAll regions
General Availability

Dialogflow CX: Disable Voice Processing

You can set the telephony_disable_voice_processing session parameter to true to turn off speech recognition and accept only DTMF input for the rest of the session. This helps in noisy environments, where speech recognition can transcribe background noise as end-user input.

AudienceBackend developers building telephony integrations with Dialogflow CX
Featurestelephony_disable_voice_processing session parameter, DTMF input, noisy environments
Regions모든 리전
Preview

Security Command Center Preview

You can view issues created by Correlated Threats and security graph rules at the folder or project level. This feature is currently in preview and not yet available for general use.

AudienceSecurity teams using Security Command Center
FeaturesCorrelated Threats, security graph rules, Issues page filtering
Regions모든 리전
General Availability

Cloud Tasks Available in Asia-south2 and Northamerica-northeast2

Cloud Tasks is now available in Asia-south2 (Delhi, India) and Northamerica-northeast2 (Toronto, Canada). This change does not require any actions from developers.

AudienceBackend developers building serverless applications on Google Cloud
Featuresavailability in new regions
Regionsasia-south2, northamerica-northeast2
General Availability

Agent Platform Workbench Updated with Latest Packages

The Agent Platform Workbench has been updated with the latest packages from upstream dependencies. This resolves an issue where Jupyter Server terminal configuration could overwrite the Dataproc plugin server extension setting or fail to apply the terminal disable setting on container startup.

AudienceBackend developers using the Agent Platform Workbench
FeaturesUpdated packages, Jupyter Server terminal configuration fix, Dataproc plugin server extension setting fix
RegionsAll regions
General Availability

Cloud Asset Inventory: New Resource Types Available

The Cloud Asset Inventory now supports the following resource types through the ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search APIs. This update adds support for Fault Injection Testing, Firebase Storage, and Privileged Access Manager.

AudienceBackend developers building serverless applications on Google Cloud
FeaturesExportAssets, ListAssets, BatchGetAssetsHistory
RegionsAll regions
General Availability

Google Kubernetes Engine: Provision Z4M nodes

You can now provision GKE nodes from storage-optimized Z4M machine series, suited for large parallel file systems and I/O intensive workloads. This feature is available in GKE versions 1.36.3-gke.1767000 and later, and 1.37.0-gke.4713000 and later.

AudienceBackend developers building containerized applications on Google Kubernetes Engine
FeaturesZ4M machine series, GKE version 1.36.3, GKE version 1.37.0
Regions모든 리전
General Availability

VPC Flow Logs adds metadata and packet drop reasons for Cloud NAT

VPC Flow Logs now includes metadata annotations (connection.nat_ip, connection.nat_port, and nat_gateway_details) and packet drop reasons (NAT_ENDPOINT_INDEPENDENT_CONFLICT, NAT_OUT_OF_CONNECTIONS, and NAT_OUT_OF_PORTS) for Cloud NAT. This change affects Cloud NAT users who rely on VPC Flow Logs for monitoring and troubleshooting.

AudienceCloud NAT users
Featuresmetadata annotations (connection.nat_ip, connection.nat_port, and nat_gateway_details)
RegionsAll regions
General Availability

Cloud Service Mesh Security Patch

Cloud Service Mesh 1.31.1-asm.19 and 1.30.5-asm.11 and 1.29.8-asm.11 and 1.28.10-asm.52 use Envoy v1.39.3 and v1.38.7-dev and v1.37.9-dev and v1.36.10-dev respectively. These releases resolve security vulnerabilities listed in Security Bulletin GCP-2026-069.

AudienceBackend developers building serverless applications on GKE clusters
FeaturesEnvoy v1.39.3, Envoy v1.38.7-dev, Envoy v1.37.9-dev
RegionsAll regions
General Availability

Container Optimized OS updated with security patches

Container Optimized OS has been updated to include security patches for CVE-2026-19445, CVE-2026-5435, CVE-2026-82474, and CVE-2026-99999. Additionally, sysctl changes have been made to increase user limits.

AudienceBackend developers building containerized applications on Google Cloud
FeaturesCVE-2026-19445, CVE-2026-5435, CVE-2026-82474
RegionsAll regions
General Availability

Google Cloud CCaaS 6.22: Transcript separation for chat and campaign-based scheduled callbacks

Google Cloud CCaaS 6.22 introduces transcript separation for chat, allowing separate transcript files for each participant segment, and campaign-based scheduled callbacks, enabling agents to schedule callbacks during outbound campaign calls. Administrators can set campaign settings, and supervisors can track callbacks from the campaign list. This release also addresses 24 issues, including fixes for call deflection, queue management, and reporting.

AudienceContact center administrators and supervisors building and managing contact centers on Google Cloud CCaaS
FeaturesTranscript separation for chat, campaign-based scheduled callbacks, fixes for 24 issues
RegionsAll regions
General Availability

Firestore: Text and Geospatial Search GA

Text search and Geospatial search are now generally available in Firestore, enabling more efficient data retrieval and location-based queries. Developers can now use these features in their applications without any additional setup or configuration.

AudienceBackend developers building serverless applications on Firestore
FeaturesText search, Geospatial search, General Availability
Regions모든 리전
General Availability

AlloyDB for PostgreSQL

AlloyDB for PostgreSQL now supports feature lakehouse federation, enabling direct querying of live BigQuery data without data duplication. This feature is available in all regions, and more information can be found in the Access to real-time data in BigQuery overview and Configure access to real-time data in BigQuery documentation.

AudienceDatabase administrators and developers working with AlloyDB and BigQuery
Featureslakehouse federation, bigquery_fdw extension, direct querying
Regions모든 리전
General Availability

Confidential Space New Image Available

A new Confidential Space image (261000) is now available for use. This update does not require any actions from developers.

AudienceBackend developers using Confidential Space
FeaturesConfidential Space image (261000)
Regions모든 리전
General Availability

Firestore MongoDB Compatibility GA

Text search and Geospatial search are now generally available in Firestore.

AudienceBackend developers building serverless applications on Firestore
FeaturesText search, Geospatial search
Regions모든 리전
General Availability

Gemini Enterprise Agent Platform: Supervised Fine-Tuning for Gemini 3 Models

Supervised fine-tuning for Gemini 3 models is now available in General Availability. This includes support for Gemini 3.5 Flash Lite, Gemini 3.5 Flash, and Gemini 3.1 Flash Lite, as well as customer-managed encryption keys for protecting tuning job resources and tuned models.

AudienceBackend developers building serverless applications on Google Cloud
FeaturesGemini 3.5 Flash Lite support, customer-managed encryption keys (CMEK), model tuning jobs and tuned model serving on us and eu multi-region endpoints
RegionsUS, EU
General Availability

Google SecOps: Reopen closed cases by Source Grouping Identifier

You can now specify whether Google SecOps reopens closed cases when grouping SOAR alerts by Source Grouping Identifier. When enabled, a new alert with a matching source grouping identifier will reopen the case.

AudienceSecurity operations teams using Google SecOps
FeaturesSource Grouping Identifier, SOAR alerts, case reopening
Regions모든 리전
End of Support

Google SecOps SOAR: Deprecation of ListCaseEvents API

The ListCaseEvents API endpoint is deprecated and will be removed on October 12, 2026. Use the ListCaseEvidenceData API endpoint instead. This change affects developers who use the ListCaseEvents API in Google SecOps SOAR.

AudienceDevelopers using Google SecOps SOAR
FeaturesDeprecation of ListCaseEvents API, ListCaseEvidenceData API endpoint, October 12
RegionsAll regions
General Availability

Google SecOps SOAR 6.3.102 Released

Release 6.3.102 of Google SecOps SOAR is now available for all regions. This update does not mention any specific changes, so no further action is required.

AudienceSecurity Operations teams
Regions모든 리전
General Availability

Dialogflow Gemini 3.5 Flash Lite GA

Gemini 3.5 Flash Lite is now generally available. Developers can request quota for Gemini 3 and later models through Generative quotas.

AudienceBackend developers building conversational interfaces with Dialogflow
FeaturesGemini 3.5 Flash Lite, Generative quotas, quota request
Regions모든 리전
General Availability

Gemini Enterprise: Connect to Confluence and Jira

Gemini Enterprise now allows connecting workflows in Workflow Builder to Confluence Data Center and Jira Data Center for data search and automation. This enables integration with third-party apps.

AudienceBackend developers building workflows with Gemini Enterprise
FeaturesWorkflow Builder, Confluence Data Center, Jira Data Center
Regions모든 리전
General Availability

Vertex AI Search: Stable Model Update

The stable model for answer generation in Vertex AI Search has been updated to gemini-3.5-flash/answer_gen/v1 from gemini-2.5-flash/answer_gen/v1. This update affects all regions.

AudienceBackend developers using Vertex AI Search
FeaturesGemini 3.5-flash, Answer generation model version update, All regions
Regions모든 리전
General Availability

BigQuery: Conversational analytics available in North America

Conversational analytics in BigQuery is now available in the Montreal and Toronto regions. This feature is available in all regions without any additional actions required.

AudienceBackend developers building data analytics applications on Google Cloud
FeaturesConversational analytics, Montreal region, Toronto region
Regions모든 리전
General Availability

GKE Standard CPU node pools support in-place upgrades

GKE can now upgrade nodes by updating the existing Compute Engine VM in place, reducing the risk of upgrade failures due to resource unavailability. To enable this type of upgrade, use surge upgrades with the maxUnavailable field set to a value greater than 0.

AudienceBackend developers building containerized applications on Google Kubernetes Engine
Featuresin-place upgrades, maxUnavailable field, surge upgrades
RegionsAll regions
General Availability

Google Cloud Contact Center as a Service: Advanced Reporting Dashboard Updates

Google Cloud Contact Center as a Service has updated its advanced reporting dashboards to improve performance and user experience. This update fixes issues with redundant database queries, inconsistent filter prompts, and missing values, and introduces new features such as clearable filters and standardized actor values.

AudienceContact center administrators and developers using Google Cloud Contact Center as a Service
FeaturesImproved performance, clearable filters, standardized actor values
RegionsAll regions
General Availability

Cloud SQL for PostgreSQL enables Managed Connection Pooling on existing Private Service Connect instances

Cloud SQL for PostgreSQL now supports enabling Managed Connection Pooling on existing Private Service Connect instances, allowing for improved performance and scalability. This change applies to all regions.

AudienceBackend developers building serverless applications on Google Cloud
FeaturesManaged Connection Pooling, Private Service Connect, Cloud SQL for PostgreSQL
Regions모든 리전
General Availability

Apigee Edge for Public Cloud Strict TLS Enforcement

We began releasing Single Sign-On (SSO) updates for Apigee Edge for Public Cloud on October 15, 2026, which fixed an issue where the Portal SSO endpoint inadvertently accepted deprecated TLS 1.1 connections. The endpoint now strictly enforces TLS 1.2+ connections.

AudienceBackend developers building serverless applications on Apigee Edge for Public Cloud
Featuresstrict TLS 1.2+ enforcement, fixed bug 560310696, Single Sign-On (SSO) updates
Regions모든 리전
General Availability

Apigee Integrated Portal: TLS 1.2+ Enforcement

We fixed an issue where the Apigee Integrated Portal's SSO endpoint accepted deprecated TLS 1.1 connections. The endpoint now strictly enforces TLS 1.2+ connections.

AudienceBackend developers using Apigee Integrated Portal
FeaturesTLS 1.2+ enforcement, fixed SSO endpoint, bug fix 560310696
RegionsAll regions
Preview

Compute Engine: Regional Disk Creation via Zonal Boot Disk Cloning

You can create regional disks, including Hyperdisk Balanced High Availability volumes, by cloning a zonal boot disk. This feature is currently in preview and requires careful testing and validation before use in production environments.

AudienceBackend developers building serverless applications on Google Cloud
FeaturesRegional disk creation, Hyperdisk Balanced High Availability volumes, zonal boot disk cloning
Regions모든 리전
General Availability

NetApp Volumes Flex Unified Support

Google Cloud NetApp Volumes now supports the Flex Unified service level with custom performance in the Milan region. This update is available in all regions.

AudienceBackend developers building serverless applications on Google Cloud
FeaturesFlex Unified service level, custom performance, europe-west8 (Milan)
Regions모든 리전
Preview

Security Command Center supports EXTERNALLY_EXPOSED_VM_INSTANCE

Risk Engine attack path simulations now support the EXTERNALLY_EXPOSED_VM_INSTANCE External Exposure finding category, which identifies Compute Engine or Google Kubernetes Engine resources with a direct public IP address. This helps prioritize confirmed internet exposures and provides attack exposure scores.

AudienceSecurity teams and developers using Google Kubernetes Engine and Compute Engine
FeaturesRisk Engine attack path simulations, EXTERNALLY_EXPOSED_VM_INSTANCE External Exposure finding category, attack exposure scores
Regions모든 리전
General Availability

BigQuery: Cross-region table copying and column aliases

You can now copy tables across regions and use column aliases in GoogleSQL to define an alias for an expression in the SELECT clause of a SQL query. Column aliases also streamline the migration of workloads from other data warehouses such as Snowflake and Teradata, by supporting their syntax.

AudienceData analysts and developers working with BigQuery
FeaturesCross-region table copying, column aliases in GoogleSQL, support for Snowflake and Teradata syntax
RegionsAll regions
General Availability

Dataflow supports 4th generation Compute Engine machine series

Dataflow Auto VM Selection now prioritizes 4th generation Compute Engine machine series for improved performance. If 4th generation VMs are unavailable, the service falls back to 2nd generation machine families to ensure job startup without delays.

AudienceBackend developers using Dataflow
Features4th generation Compute Engine machine series, Auto VM Selection, 2nd generation machine families
Regions모든 리전
General Availability

Looker 26.18 Feature Enablement

The Looker 26.18 features have begun to be enabled for Looker (Google Cloud core) instances. This enables developers to use the new features on their instances.

AudienceBackend developers building serverless applications on Google Cloud
FeaturesLooker 26.18 features, Google Cloud core instances
Regions모든 리전
General Availability

Gemini Enterprise: Anthropic models available

Anthropic models, including Claude Opus 5.5 and Claude Sonnet 5.5, are now available in the Gemini Enterprise app. Administrators can enable these models for users in the Feature Management tab, and users can select them in the model selector, with charges applied on a pay-as-you-go basis.

AudienceAdministrators and users of Gemini Enterprise
FeaturesAnthropic models, pay-as-you-go pricing, model selector
RegionsAll regions
General Availability

Apigee X: Fixed MIG Startup Script

The startup script for the managed instance group (MIG) that routes external traffic to Apigee has been updated to persist net.ipv4.ip_forward settings. This change ensures that instances continue to forward traffic after a reboot or OS update.

AudienceBackend developers building serverless applications on Apigee X
FeaturesUpdated startup script, Persistent net.ipv4.ip_forward settings, No changes to iptables NAT rules
Regions모든 리전
General Availability

Apigee Edge for Private Cloud 4.54.00 GA

Apigee Edge for Private Cloud 4.54.00 is a long-term support (LTS) release with 18 months of full support ending April 2028 and 18 months of maintenance ending October 2029. This release replaces Java 8 with Java 17 and Java 21, removes the Classic UI and the apigee-sso component, and updates bundled Cassandra, Postgres, OpenLDAP, ZooKeeper, Qpid Broker-J, Nginx, and Consul versions.

AudienceBackend developers building serverless applications on Apigee Edge for Private Cloud
FeaturesJava 17 and Java 21 support, Classic UI removal, automated pre-flight validation checks
RegionsAll regions
End of Support

Cloud Vision: Deprecates Emotion Label Response

The Cloud Vision API face detection feature will return UNKNOWN for all emotion-related labels. This change affects all regions and requires developers to update their applications to handle the new behavior.

AudienceBackend developers building applications that use the Cloud Vision API face detection feature
FeaturesFACE_DETECTION feature, emotion-related labels, UNKNOWN response
Regions모든 리전
End of Support

Video Intelligence API emotion label response deprecation

The Video Intelligence API will no longer return emotion-related labels, instead returning UNKNOWN for all such labels. This change affects all regions and requires developers to update their applications to handle the new response format.

AudienceDevelopers using the Video Intelligence API
FeaturesEmotion label response removal, UNKNOWN label return, API response format change
Regions모든 리전
End of Support

Application Integration Security Vulnerability

A security vulnerability in AuthConfig validation and integration execution runtime affects Application Integration versions prior to August 27, 2026. Developers should review the GCP-2026-068 security bulletin for more information.

AudienceBackend developers building serverless applications on Google Cloud
FeaturesSecurity patch, AuthConfig validation, integration execution runtime
Regions모든 리전
General Availability

Certificate Manager: Shorter Certificate Lifespans

Google-managed public SSL certificates now rotate more frequently with a 45-day validity period to enhance security posture of load balancers. No manual intervention or configuration changes are required as Certificate Manager automatically manages issuance and renewal.

AudienceBackend developers using Google-managed certificates
FeaturesGoogle Public CA, 45-day certificate validity period, automated certificate issuance and renewal
Regions모든 리전
General Availability

Cloud Load Balancing: Shorter SSL Certificate Validity Period

Google-managed public SSL certificates signed by Public Certificate Authority are transitioning from a 90-day to a 45-day validity period to improve security. This proactive rotation enhances the overall security posture of load balancers, with no manual intervention or configuration changes required.

AudienceBackend developers building load balancers on Google Cloud
Featuresshorter SSL certificate validity period, proactive rotation, automated issuance and renewal
Regions모든 리전
Preview

Cloud Armor Supports Service Rate Limiting

Cloud Armor now supports service rate limiting, enabling developers to limit traffic to their applications. This feature is available in Preview, and developers can find more information in the Cloud Armor documentation.

AudienceBackend developers building serverless applications on Google Cloud
Featuresservice rate limiting, Cloud Armor, Cloud Armor documentation
Regions모든 리전
General Availability

Compute Engine: Targeted Reservations for Future Reservations

You can now specify targeted reservations when reserving capacity using future reservation requests in Compute Engine. This allows you to track and control which Compute Engine instances consume your reserved capacity. For more information, see About future reservation requests .

AudienceBackend developers using Compute Engine for capacity planning and instance management
Featurestargeted reservations, future reservation requests, reserved capacity
Regions모든 리전
General Availability

Google Cloud Managed Service for Apache Kafka: Improved Cloud Storage Sink connector performance

The Cloud Storage Sink connector's performance has been improved with reduced out-of-memory errors, higher maximum throughput, and avoidance of creating a large number of small files. This change is beneficial for developers working with Apache Kafka on Google Cloud.

AudienceDevelopers working with Apache Kafka on Google Cloud
FeaturesReduced out-of-memory errors, Higher maximum throughput, Avoiding creating a large number of small files
Regions모든 리전
General Availability

Dataform Preserves BigQuery Governance Controls

Dataform now automatically preserves BigQuery data policies and data governance tags across executions when the preserveGovernanceControls option is enabled. This feature is generally available.

AudienceData engineers working with BigQuery
FeaturespreserveGovernanceControls option, table configuration, workflow configuration
Regions모든 리전
General Availability

GKE Sandbox: Fixed Pod Stuck Issue

Fixed an issue in GKE Sandbox where Pods using the Cloud Storage FUSE CSI driver could become indefinitely stuck in a Terminating state. To resolve this issue, upgrade your node pools to GKE version 1.37.1-gke.1552000 or later and add the dev.gvisor.fuse.abort-on-teardown: "true" annotation to your Pod or Deployment metadata.

AudienceBackend developers building containerized applications on Google Kubernetes Engine
FeaturesGKE version 1.37.1-gke.1552000, Cloud Storage FUSE CSI driver, dev.gvisor.fuse.abort-on-teardown annotation
Regions모든 리전
General Availability

BigQuery: Publish Conversational Analytics Agent in Gemini Enterprise

You can now publish a BigQuery Conversational Analytics agent in Gemini Enterprise. The AI.AGG function now supports the output_schema argument, which lets you specify the schema of the function output as a comma-separated list of fields.

AudienceBackend developers building serverless applications on Google Cloud
FeaturesPublishing Conversational Analytics agents, AI.AGG function with output_schema argument, schema of function output as comma-separated list of fields
Regions모든 리전
Preview

Secure Web Proxy supports service rate limiting policies

Secure Web Proxy now supports service rate limiting policies to protect external destinations from traffic overloads and manage the costs of your outbound web traffic. You can attach a service rate limiting policy to your Secure Web Proxy gateways, whether they use an authorization policy or a gateway security policy.

AudienceBackend developers building serverless applications on AWS Lambda
Featuresservice rate limiting policies, authorization policies, gateway security policies
Regions모든 리전
General Availability

Gemini Enterprise Agent Platform updated with CodeMender fixes

This release updates CodeMender with SARIF 2.1.0 reporting and model invocation metrics. Bug fixes include resolving an issue with token usage in session logs.

AudienceBackend developers using CodeMender
FeaturesSARIF 2.1.0 reporting, model invocation metrics, bug fixes
RegionsAll regions
General Availability

Apigee Hybrid v1.16.11

Apigee hybrid software has been updated to version v1.16.11, addressing several issues and vulnerabilities. This patch release integrates container images with Apigee hybrid Helm charts, allowing for automatic updates without manual image changes.

AudienceBackend developers building serverless applications on Apigee hybrid
FeaturesImproved security, fixed issues with VerifyJWT policies, SemanticCacheLookup policy
RegionsAll regions
General Availability

Gemini Enterprise: UK Availability

Gemini Enterprise is now available in the United Kingdom with Gemini 3.8 Flash. This includes in-country region with in-region at-rest data residency (DRZ) and machine learning processing (MLP), and is turned on by default in the web app for the UK region.

AudienceAdministrators managing Gemini Enterprise
Featuresin-region at-rest data residency, machine learning processing, UK region support
Regions도쿄 리전
General Availability

Cloud SQL for MySQL Knowledge Catalog Integration Delay

When enabling the Knowledge Catalog integration on a Cloud SQL for MySQL instance created before April 18, 2026, the integration defaults to once a day instead of near real-time. Near real-time updates upon Knowledge Catalog enablement aren't yet available for all existing instances, with a new announcement to be published when this feature becomes available.

AudienceDatabase administrators and developers using Cloud SQL for MySQL
FeaturesKnowledge Catalog integration, near real-time updates, existing instances
RegionsAll regions
General Availability

Cloud SQL for PostgreSQL Knowledge Catalog Integration Delay

When enabling the Knowledge Catalog integration on a Cloud SQL for PostgreSQL instance created before April 18, 2026, it defaults to once a day instead of near real-time. Near real-time updates upon Knowledge Catalog enablement aren't yet available for all existing instances, with a new announcement to be published when this feature becomes available.

AudienceDatabase administrators and engineers managing Cloud SQL for PostgreSQL instances
FeaturesKnowledge Catalog integration, near real-time updates, existing instances
RegionsAll regions
General Availability

Managed Service for Apache Airflow: Maintenance Exclusions

Managed Service for Apache Airflow will set up GKE clusters with maintenance exclusions from November 16, 2026 to December 2, 2026. For more information, see Maintenance exclusions.

AudienceBackend developers using Managed Service for Apache Airflow
FeaturesGKE clusters, maintenance exclusions, November 16
Regions모든 리전
Preview

NetApp Volumes: Active Directory policy connections

Google Cloud NetApp Volumes now supports testing Active Directory policy connections for the Flex Unified service level in Preview. You can use the Google Cloud console to verify policy connections and troubleshoot configuration errors.

AudienceBackend developers building serverless applications on Google Cloud
FeaturesActive Directory policy connections, Flex Unified service level, Preview
Regions모든 리전
Preview

VPC Service Controls Preview

Support for using Workload Identity Federation for GKE in ingress and egress rules is available in Preview. You can specify the following Workload Identity Federation for GKE principals in ingress and egress rules: all GKE pods that use a Kubernetes service account, all GKE pods in a Kubernetes namespace, and all GKE pods in a cluster.

AudienceBackend developers building serverless applications on GKE
FeaturesWorkload Identity Federation for GKE, ingress rules, egress rules
RegionsAll regions
General Availability

Anti Money Laundering AI minor engine update

A new minor engine version (v004.011) for the commercial line of business has been released, extending support for the major engine version without significant changes.

AudienceBackend developers building anti-money laundering systems
Featuresv004.011, aml-commercial.default.v004.011.202610-000, minor engine version update
Regions모든 리전
General Availability

Google SecOps Marketplace: Multiple Security Product Updates

SentinelOneV2 version 52.0 fixed an issue with threat synchronization, while Microsoft Graph Mail Delegated version 26.0 updated the Folder Name parameter for searches. Okta version 18.0 resolved a pagination issue for roles and user groups.

AudienceSecurity engineers and developers using Google SecOps Marketplace
FeaturesImproved threat synchronization, optional Folder Name parameter, pagination issue resolution
RegionsAll regions
General Availability

BigQuery AI.AGG Function GA

The AI.AGG function is now generally available, enabling semantic aggregation of unstructured input data based on natural language instructions. Developers can use this function to improve data analysis and processing capabilities in BigQuery.

AudienceData analysts and developers working with BigQuery
FeaturesSemantic aggregation, Natural language instructions, Unstructured data processing
RegionsAll regions
General Availability

Cloud Billing: Spend Cap Budgets GA

Spend cap budgets are now generally available for a limited set of services, allowing you to automatically pause usage when estimated spend exceeds the budget amount. You can manage spend cap budgets in the Google Cloud console and using the Cloud Billing Budget API, and lift enforced spend caps manually or automatically at the start of the next month.

AudienceBackend developers building serverless applications on Google Cloud
FeaturesSpend cap budgets, Budgets page in the Google Cloud console, Cloud Billing Budget API
RegionsAll regions
General Availability

Cloud SDK Breaking 589.0.0

This release deprecates the Skaffold component in Google Cloud CLI and removes it after January 15, 2027. It also updates bundled Python to install cryptography 46.0.7 and updates Alpine-based Docker images to use a bundled Python.

AudienceBackend developers building serverless applications on Google Cloud
FeaturesDeprecation of Skaffold component, updated bundled Python, updated Alpine-based Docker images
RegionsAll regions
Preview

Gemini Enterprise: AlphaEvolve with Gemini 4 Argon

Gemini 4 Argon is now available in AlphaEvolve for global, US, and EU regions. To use it, specify gemini-4-argon in the models field of generationSettings, with Gemini 3.8 Flash remaining the default model.

AudienceBackend developers using AlphaEvolve
FeaturesGemini 4 Argon, AlphaEvolve, generationSettings
Regions모든 리전
General Availability

Managed Service for Apache Airflow Supports Development Mode and Hibernation

Managed Service for Apache Airflow now supports development mode environments with Airflow 3 for testing and developing DAGs. Hibernation reduces most environment costs to zero.

AudienceBackend developers building serverless applications on Google Cloud
FeaturesDevelopment mode environments, Environment hibernation, Airflow 3 support
Regions모든 리전
General Availability

Gemini Enterprise Agent Platform: Gemini 4 Argon GA

Gemini 4 Argon is a frontier model for deep work in complex tasks across domains, supporting a 1,048,576-token context window and configurable thinking levels. CodeMender now supports Gemini 4 Argon in preview, with Gemini 3.8 Flash remaining the default model.

AudienceBackend developers building serverless applications on Google Cloud
Features1, 048, 576-token context window
RegionsAll regions
Preview

Dataform Preview

Dataform now supports connection to Secure Source Manager repositories via Developer Connect. This feature is currently in preview and not yet available for general use.

AudienceBackend developers building serverless applications on Dataform
FeaturesDeveloper Connect, Secure Source Manager repositories, Preview
Regions모든 리전
General Availability

Compute Engine Regional Views Generally Available

You can query regional views of global Compute Engine project and OS image resources by using the regional read-only projectViews and imageViews endpoints. This helps your workloads stay available during global API disruptions by isolating control-plane read requests to a specific region.

AudienceBackend developers building serverless applications on Compute Engine
Featuresregional read-only projectViews, regional read-only imageViews, regional views for resilient control-plane reads
Regions모든 리전
General Availability

Google Distributed Cloud (software only) for VMware Upgrade

Google Distributed Cloud 1.35.600-gke.141 is now available for download, running on Kubernetes v1.35.8-gke.100. Upgrades may take 7 to 14 days to become available for use with GKE On-Prem API clients.

AudienceBackend developers building on Google Cloud Platform
FeaturesKubernetes v1.35.8-gke.100, GKE On-Prem API clients, third-party storage vendors
RegionsAll regions
General Availability

Cloud SQL for MySQL: Private Service Connect as Default

Private Service Connect is now the default private IP connectivity option when creating a Cloud SQL for MySQL instance in a new Google Cloud project. This allows connecting to instances from multiple Virtual Private Cloud (VPC) networks across different groups, projects, or organizations, with automatic endpoint and DNS record provisioning.

AudienceBackend developers building serverless applications on Google Cloud
FeaturesPrivate Service Connect, private IP connectivity, Virtual Private Cloud (VPC) networks
Regions모든 리전
General Availability

Google Distributed Cloud for bare metal 1.35.600-gke.141 Released

Google Distributed Cloud for bare metal 1.35.600-gke.141 is now available for download, running on Kubernetes v1.35.8-gke.100. Upgrades may take 7-14 days to become available through the GKE On-Prem API clients.

AudienceBackend developers building serverless applications on Google Cloud
FeaturesKubernetes v1.35.8-gke.100, GKE On-Prem API clients, Terraform
RegionsAll regions
General Availability

Cloud SQL for SQL Server: Private Service Connect as Default

Private Service Connect is now the default private IP connectivity option for Cloud SQL for SQL Server instances in new Google Cloud projects, enabling connections from multiple VPC networks across different groups, projects, or organizations. You can still choose to use private services access or both connectivity options when configuring private IP for an instance.

AudienceBackend developers building serverless applications on Google Cloud
FeaturesPrivate Service Connect, private IP connectivity, VPC networks
Regions모든 리전
General Availability

Cloud SQL for PostgreSQL: Private Service Connect Default

Private Service Connect is now the default private IP connectivity option for Cloud SQL for PostgreSQL instances in new Google Cloud projects. This allows connections to instances from multiple Virtual Private Cloud (VPC) networks across different groups, projects, or organizations, with automatic endpoint and DNS record provisioning.

AudienceBackend developers building serverless applications on Google Cloud
FeaturesPrivate Service Connect, Virtual Private Cloud (VPC) networks, automatic endpoint and DNS record provisioning
Regions모든 리전
Preview

Cloud Storage: Object Enrichments in Preview

Cloud Storage now applies Google's pre-trained machine learning models to eligible images and PDF documents in your buckets, attaching metadata as object contexts. You can inspect enrichments on individual objects or query them at scale in BigQuery using Storage Insights datasets.

AudienceBackend developers building serverless applications on Google Cloud
FeaturesObject enrichments, machine learning models, Storage Insights datasets
RegionsAll regions
General Availability

Google Cloud Contact Center as a Service: Multiple Fixes

This release addresses multiple issues in Google Cloud Contact Center as a Service, including fixes for direct access point greeting messages, session metadata, Salesforce lookups, and more. Developers should review the full list of fixes and update their applications accordingly.

AudienceDevelopers building contact center applications on Google Cloud
FeaturesDirect access point greeting message fixes, session metadata corrections, Salesforce lookup improvements
RegionsAll regions
General Availability

Cloud Asset Inventory: Public Resource Types Available

The ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search APIs now support the following resource types. Cloud Service Mesh is also supported.

AudienceBackend developers building serverless applications on Google Cloud
FeaturesExportAssets, ListAssets, BatchGetAssetsHistory
Regions모든 리전
General Availability

Cluster Toolkit v1.106.0 with Flexible Managed Instance Groups and More

This release adds support for flexible managed instance groups on static compute nodes, multiple network interfaces (multi-NIC) for Google Cloud Managed Lustre instances, and parallelism controls for Terraform to accelerate cluster deployment and teardown. Additionally, this release introduces the cloud-build community module to build container images with Cloud Build, adds preflight checks for storage profiles, and cleans up gateways when jobs are cancelled.

AudienceBackend developers building clusters on Google Cloud
FeaturesFlexible managed instance groups, multiple network interfaces for Google Cloud Managed Lustre instances, parallelism controls for Terraform
Regions모든 리전
General Availability

Config Connector 1.159.0 Released

Config Connector version 1.159.0 introduces new features, including support for Cloud Deploy custom target types, Eventarc pipelines, and Live Stream channels. Additionally, it adds support for disaster recovery observed state fields and fixes several bugs, such as false-positive diffs for access entries and reconciliation errors caused by unrecognized enum values.

AudienceBackend developers building serverless applications on Google Cloud
FeaturesCloud Deploy custom target types, Eventarc pipelines, Live Stream channels
RegionsAll regions
General Availability

Agent Platform Workbench Updated

The Agent Platform Workbench has been updated to install the latest packages from upstream dependencies. This update ensures the workbench remains compatible with the latest dependencies.

AudienceBackend developers building serverless applications on AWS Lambda
FeaturesUpdated dependencies, Improved compatibility, Enhanced reliability
Regions모든 리전
Preview

Application Design Center Supports Importing Terraform Configurations

You can now import existing multi-product Google Cloud Terraform configurations into an Application Design Center application template without splitting them into components or publishing them to a catalog first. This allows you to create, assess, and deploy applications directly, or publish the revision to your catalog to reuse it in other templates.

AudienceBackend developers building serverless applications on Google Cloud
FeaturesImporting Terraform configurations, creating and deploying applications directly, publishing revisions to the catalog
Regions모든 리전
General Availability

Google SecOps: SOAR API Migration Deadline Extended

The deadline for migrating SOAR APIs to the Chronicle API has been extended to March 31, 2027. Developers should refer to the SOAR Migration overview for more information.

AudienceBackend developers building security operations tools on Google Cloud
FeaturesExtended migration deadline, SOAR API, Chronicle API
Regions모든 리전
General Availability

Google SecOps SOAR Migration Deadline Extended

The deadline for migrating SOAR APIs to the Chronicle API has been extended from November 30, 2026 to March 31, 2027. Developers should refer to the SOAR Migration overview for more information.

AudienceBackend developers building security operations tools on Google Cloud
FeaturesExtended migration deadline, Chronicle API, SOAR APIs
Regions모든 리전
General Availability

BigQuery Incremental Data Transfers GA

BigQuery Data Transfer Service now supports incremental data transfers for PostgreSQL and ServiceNow. This allows for more efficient data transfer and synchronization.

AudienceData engineers and administrators using BigQuery Data Transfer Service
FeaturesIncremental data transfers for PostgreSQL and ServiceNow, improved data transfer efficiency
RegionsAll regions
General Availability

Cloud Build - Customizable Release Channels

You can now choose the release channel for your build config or private pool. This allows you to control how frequently the underlying versions of Debian and Docker are updated.

AudienceBackend developers building serverless applications on Google Cloud
FeaturesCustomizable release channels, Debian version updates, Docker version updates
Regions모든 리전
General Availability

Cloud Load Balancing: Regular Expression Matchers in URL Maps

Regular expression matchers are now available in host and route rules in URL maps for Application Load Balancers, allowing for more flexible and precise traffic routing rules. This feature supports RE2 syntax for matching on URL Paths, HTTP Headers, and HTTP Query Parameters.

AudienceBackend developers building serverless applications on Google Cloud
FeaturesRegular expression matchers in host and route rules, RE2 syntax support, URL Paths
RegionsAll regions
General Availability

Agent Platform Workbench Update

The Agent Platform Workbench has been updated to install the latest packages from upstream dependencies, resolving an issue where gcloud and gsutil failed to load due to a version mismatch between pyOpenSSL and cryptography. This update ensures compatibility and stability for users.

AudienceBackend developers using the Agent Platform Workbench
FeaturesLatest packages from upstream dependencies, pyOpenSSL and cryptography version mismatch fix, gcloud and gsutil compatibility
RegionsAll regions
Preview

Cloud DNS Outbound Endpoints Preview

Cloud DNS Outbound Endpoints are now available in Preview, enabling direct DNS query forwarding from VPC networks to external and on-premises DNS resolvers using private IP addresses. This feature can be attached to forwarding zones or server policies.

AudienceBackend developers building serverless applications on Cloud DNS
FeaturesOutbound Endpoints, forwarding zones, server policies
Regions모든 리전
General Availability

Google Distributed Cloud for bare metal 1.35.600-gke.140

Google Distributed Cloud for bare metal 1.35.600-gke.140 is now available for download, running on Kubernetes v1.35.8-gke.100. Upgrades may take 7-14 days to become available for installations or upgrades with the GKE On-Prem API clients.

AudienceBackend developers building serverless applications on Google Cloud
FeaturesImproved containerd resilience, fixed vulnerabilities, fixed periodic configuration drift health check
RegionsAll regions
General Availability

Cloud Service Mesh Security Patch

Cloud Service Mesh 1.30.5-asm.8 and 1.29.8-asm.8 resolve security vulnerabilities listed in Security Bulletin GCP-2026-067. These patches contain fixes for multiple platform CVEs.

AudienceBackend developers building serverless applications on Cloud Service Mesh
FeaturesCVE fixes, security patches, Envoy v1.38.7-dev
RegionsAll regions
General Availability

Managed Service for Apache Kafka SLA Expanded

The Service Level Agreement (SLA) for Managed Service for Apache Kafka now covers the Produce API, enhancing reliability and performance. Developers should review the updated SLA for Managed Service for Apache Kafka to ensure compliance.

AudienceDevelopers using Managed Service for Apache Kafka
FeaturesExpanded Service Level Agreement, Produce API coverage
Regions모든 리전
General Availability

Google Distributed Cloud for VMware 1.35.600-gke.140

Google Distributed Cloud 1.35.600-gke.140 is now available for download, running on Kubernetes v1.35.8-gke.100. Upgrades may take 7-14 days to become available for use with GKE On-Prem API clients.

AudienceBackend developers building serverless applications on GKE On-Prem
FeaturesKubernetes v1.35.8-gke.100, support for third-party storage vendors, GKE On-Prem API clients
RegionsAll regions
General Availability

Cloud Run: Budget Spend Caps for Workloads

Cloud Run now supports budget spend caps to pause workloads. This allows developers to set a budget for their Cloud Run workloads and pause them when the budget is reached.

AudienceBackend developers building serverless applications on Cloud Run
FeaturesBudget spend caps, workload pause, serverless applications
RegionsAll regions
Preview

Looker supports Workforce Identity Federation in Preview

Looker now supports Workforce Identity Federation in preview for instances using Looker 26.18 and later. Administrators can select Workforce Identity as the primary authentication method and optionally enable secondary Google OAuth for secure backup access.

AudienceAdministrators managing Looker instances
FeaturesWorkforce Identity Federation, external identity providers, Google OAuth
Regions모든 리전
General Availability

Network Connectivity Center fixes billing issue for producer VPC spokes

The technical issue causing incorrect billing for producer VPC spokes has been fixed. Projects with producer VPC spokes linked to Network Connectivity Center hubs will now reflect hourly usage fees based on Network Connectivity Center pricing.

AudienceBackend developers building serverless applications on Google Cloud
FeaturesFixed billing issue for producer VPC spokes, hourly usage fees, Network Connectivity Center pricing
RegionsAll regions
General Availability

Gemini Enterprise Agent Platform: CodeMender Updates

This release updates CodeMender with improved pull request scans, unified sessions, and guided activation. Developers can now use new flags for deep scans and shell commands, and bug fixes have been applied for repository scans and findings.

AudienceBackend developers using CodeMender
FeaturesImproved pull request scans, unified sessions, guided activation
RegionsAll regions
General Availability

Backup for GKE - Bangkok 리전

Backup for GKE now supports Bangkok 리전. For more information, see Backup for GKE locations.

AudienceBackend developers building serverless applications on GKE
FeaturesBackup for GKE
Regionsasia-southeast3
General Availability

Container Optimized OS: Lustre v2.14.0_p262-r1 and sys-apps/pv v1.12.0

Container Optimized OS now supports Lustre v2.14.0_p262-r1 and sys-apps/pv has been upgraded to v1.12.0. This update does not require any actions from developers.

AudienceBackend developers building containerized applications
FeaturesLustre v2.14.0_p262-r1, sys-apps/pv v1.12.0, CVE-2026-18220 fix
Regions모든 리전
General Availability

Compute Engine: C4N Machine Types GA

The network-optimized C4N machine types with 375 GiB to 12,000 GiB of attached Titanium SSD are now available. This update does not require any actions from developers.

AudienceBackend developers building applications on Compute Engine
FeaturesC4N machine types, Titanium SSD, Local SSD disks
Regions모든 리전
Preview

Firestore with MongoDB compatibility

Firestore with MongoDB compatibility now supports QueryData, which enables building data agents that interact with database data using conversational language. This feature is available in Preview, requiring developers to use QueryData for data interaction.

AudienceBackend developers building serverless applications on Firestore with MongoDB compatibility
FeaturesQueryData support, conversational language support, data agents
RegionsAll regions
General Availability

Application Integration Enforces Security Fixes

Application Integration now enforces security fixes for IAM, run-as service accounts, and iam.serviceAccounts.actAs checks. This requires correct permissions for the test feature and any new integrations.

AudienceBackend developers building serverless applications on Google Cloud
FeaturesIAM security fixes, run-as service accounts, iam.serviceAccounts.actAs checks
Regions모든 리전
General Availability

Google SecOps SIEM: Updated Threat Intelligence Rules

Google SecOps SIEM now uses the GTI_IOC feed for Applied Threat Intelligence curated rules. Custom rules referencing legacy feeds should be updated to use GTI_IOC feed.

AudienceSecurity teams using Google SecOps SIEM
FeaturesGTI_IOC feed, Applied Threat Intelligence curated rules, rollout schedule
Regions모든 리전
General Availability

Managed Service for Apache Spark: Py4J Library Fix

Managed Service for Apache Spark now includes the py4j library in image version 2.1.120. This update fixes a bug that was previously present.

AudienceBackend developers building serverless applications on Google Cloud
Featurespy4j library, image version 2.1.120, bug fix
Regions모든 리전
General Availability

Agent Platform Workbench: Updated dependencies

The Agent Platform Workbench has been updated with the latest packages from upstream dependencies. This resolves issues with gcloud and gsutil failing to load due to a version mismatch between pyOpenSSL and cryptography.

AudienceBackend developers using the Agent Platform Workbench
FeaturesUpdated dependencies, resolved OpenSSL.crypto version mismatch, improved gcloud and gsutil loading
RegionsAll regions
General Availability

Google SecOps SOAR Release 6.3.102

Release 6.3.102 of Google SecOps SOAR is being rolled out to the first phase of regions, containing internal and customer bug fixes. This release does not introduce any new features, but it is recommended to upgrade to the latest version for bug fixes.

AudienceSecurity Operations teams
Regions모든 리전
General Availability

Cloud SQL for MySQL updates default minor version

MySQL 8.0.46 is now the default minor version for Cloud SQL for MySQL 8.0. This change does not require any actions from developers, as the new default version is automatically applied to new instances.

AudienceBackend developers building MySQL databases on Cloud SQL
FeaturesMySQL 8.0.46, minor version support, default minor version
Regions모든 리전
General Availability

Google SecOps SOAR 6.3.101 Released

Google SecOps SOAR 6.3.101 introduces new features and improvements. This release is now available for all regions, and no action is required for developers.

AudienceSecurity operations teams
Featuresnew features, improvements
Regions모든 리전
General Availability

Datastream Supports SQL Server Spatial Data

Datastream now supports replicating SQL Server GEOMETRY and GEOGRAPHY spatial data types. This enables developers to migrate SQL Server spatial data to Datastream, allowing for easier integration with BigQuery.

AudienceBackend developers migrating SQL Server spatial data to Datastream
FeaturesSQL Server GEOMETRY, SQL Server GEOGRAPHY, Datastream unified types
RegionsAll regions
General Availability

Google Cloud Managed Service for Apache Kafka Changes Bootstrap Address Format

The format for bootstrap addresses and broker URLs has changed for new Managed Service for Apache Kafka clusters. To learn how to get a cluster's bootstrap address, see View a Managed Service for Apache Kafka cluster.

AudienceBackend developers using Google Cloud Managed Service for Apache Kafka
Featuresbootstrap address format change, broker URL change
Regions모든 리전
General Availability

Model Armor Enhances Prompt Injection and Jailbreak Protection

Model Armor now includes enhanced prompt injection and jailbreak protection for Workspace data, improving detection accuracy and reducing false positives when screening Workspace content. This capability is available on multi-region endpoints in the US and EU for templates and floor settings configured with filter version v3 or later.

AudienceBackend developers building serverless applications on Workspace
FeaturesEnhanced prompt injection, Jailbreak protection, Filter version v3 or later support
RegionsUS 멀티 리전, EU 멀티 리전
End of Support

Gemini Code Assist Subscription Sale Ending

Gemini Code Assist Standard and Enterprise subscriptions can no longer be purchased starting October 9, 2026. Existing subscriptions will continue to auto-renew through 2026, but auto-renewal will end in 2027.

AudienceBackend developers using Gemini Code Assist
FeaturesGemini Code Assist Standard and Enterprise subscriptions, Antigravity AI developer tools
Regions모든 리전
General Availability

Security Command Center: Configure Pub/Sub and BigQuery Continuous Export

You can configure Pub/Sub and BigQuery continuous export to receive notifications when findings are deleted from Security Command Center due to data retention policies. Use the gcloud CLI, securitycenter REST API, or client libraries to enable finding notifications for Pub/Sub Stream findings to BigQuery for analysis.

AudienceSecurity teams and developers using Security Command Center
FeaturesPub/Sub continuous export, BigQuery continuous export, finding notifications
Regions모든 리전
General Availability

Cloud SQL for MySQL: Knowledge Catalog Integration

Cloud SQL for MySQL instances created before April 18, 2026 now sync schema and metadata updates to Knowledge Catalog in near real-time when Knowledge Catalog integration is enabled. This feature is available for instances running MySQL version 8.0 or later on the new network architecture.

AudienceDatabase administrators managing Cloud SQL for MySQL instances
FeaturesKnowledge Catalog integration, near real-time schema and metadata updates, MySQL version 8.0 or later
RegionsAll regions
General Availability

Cloud SQL for PostgreSQL: Near Real-Time Knowledge Catalog Integration

Cloud SQL for PostgreSQL instances created before April 18, 2026 now sync schema and metadata updates to Knowledge Catalog in near real-time when Knowledge Catalog integration is enabled. To switch to near real-time updates, deactivate and re-enable the integration on instances with once-a-day updates.

AudienceDatabase administrators and developers using Cloud SQL for PostgreSQL
FeaturesKnowledge Catalog integration, near real-time schema and metadata updates, PostgreSQL version 14.0 or later
RegionsAll regions
General AvailabilityPreview

Looker 26.18: Dremio, Quick Starts, Diagnose & Repair, Style Validator, Conversational Analytics, Data Apps, ClickHouse

Looker 26.18 introduces built-in support for the Dremio 26.0+ (Arrow Flight SQL) dialect, enabling automatic feature enablement for Looker instances. Additionally, the AI-Assisted Quick Starts feature, Diagnose & Repair tool, and Style Validator are now available, along with Conversational Analytics, Data Apps, and support for ClickHouse 26+ dialect.

AudienceBackend developers building serverless applications on Google Cloud
FeaturesDremio 26.0+ (Arrow Flight SQL) dialect, AI-Assisted Quick Starts, Diagnose & Repair tool
RegionsAll regions
General Availability

BigQuery Data Engineering Agent in Tokyo

The BigQuery Data Engineering Agent is now available in the Tokyo region and supports the gemini-3.5-flash model. This feature is now available for use in production.

AudienceData engineers working with BigQuery
FeaturesGemini-3.5-flash model support, Data Engineering Agent availability
Regions도쿄 리전
Preview

Secure Web Proxy with Global Access

Secure Web Proxy now supports global access, allowing clients from any Google Cloud region to connect to your proxy. With global access, you can route your outbound traffic through specific regions to meet regulatory compliance or cost requirements.

AudienceBackend developers building serverless applications on Google Cloud
Featuresglobal access, regional routing, centralized network administration
Regions모든 리전
General Availability

Sensitive Data Protection now includes MEDICAL_RECORD_NUMBER findings

Sensitive Data Protection now includes MEDICAL_RECORD_NUMBER findings as type MEDICAL_ID in scan results when InfoType.version is set to legacy and MEDICAL_ID is included in InspectConfig. This change applies to all regions.

AudienceDevelopers using Sensitive Data Protection
FeaturesMEDICAL_RECORD_NUMBER findings, InfoType.version, InspectConfig
RegionsAll regions
General Availability

Access Approval is Generally Available

Access Approval is now generally available, enabling database migration service. This allows developers to migrate databases more efficiently.

AudienceBackend developers building serverless applications
Featuresdatabase migration service, efficient database migration, serverless applications
Regions모든 리전
General Availability

Access Transparency GA

Access Transparency is now generally available. This means you can use it in your production workloads.

AudienceBackend developers building serverless applications on Google Cloud
FeaturesAccess Transparency, Database Migration Service, GA
Regions모든 리전
Preview

Cloud SQL for MySQL supports blue-green deployments

Cloud SQL for MySQL supports blue-green deployments, allowing major version upgrades from MySQL 8.0 to 8.4 and staging hardware or configuration modifications with minimal downtime. You can test application compatibility and performance on a separate staging environment without affecting production traffic.

AudienceBackend developers building serverless applications on Cloud SQL
Featuresblue-green deployments, major version upgrades, staging environment
Regions모든 리전
General Availability

BigQuery Gemini Assistance

BigQuery Studio SQL editor now supports Gemini assistance through an inline action button when selecting text. This feature is now available for all users.

AudienceBackend developers building data analytics applications on BigQuery
FeaturesGemini assistance, inline action button, BigQuery Studio SQL editor
Regions모든 리전
General Availability

Looker 26.20 Security Update

Looker 26.20 updates Custom TopoJSON URL validation to improve security, isolated to Google Maps rendering in preview. This may impact existing dashboards and Looks with custom TopoJSON files enabled. Additionally, several issues have been fixed, including duplicating scheduled plans, table visualizations, and BigQuery JDBC driver parsing.

AudienceLooker developers and administrators
FeaturesImproved Custom TopoJSON URL validation, self-service modeling setup, and BigQuery JDBC driver parsing
RegionsAll regions
General Availability

Memorystore for Redis enables RDB snapshots by default

RDB snapshots are enabled by default when creating an instance using the Google Cloud console. This change provides a baseline level of persistence for your data.

AudienceBackend developers using Google Cloud console
FeaturesRDB snapshots, persistence, Google Cloud console
Regions모든 리전
General Availability

Gemini Enterprise: Enable Anthropic Models

Gemini Enterprise now supports Anthropic Claude Opus 5.5 and Claude Sonnet 5.5 in AI developer tools. Administrators can enable these models directly in the Google Cloud console without a separate Anthropic account or onboarding.

AudienceBackend developers building serverless applications on Google Cloud
FeaturesAnthropic Claude Opus 5.5, Anthropic Claude Sonnet 5.5, Antigravity 2.0
RegionsAll regions
General Availability

Google Cloud CCaaS 6.19 Released

Google Cloud has released version 6.19 of Contact Center as a Service, addressing issues with concurrent chat assignments, call distribution, and agent sign-outs. This update is now available in all regions.

AudienceBackend developers building contact center applications on Google Cloud
Featuresconcurrent chat assignments, call distribution, agent sign-outs
Regions모든 리전
General Availability

Google Kubernetes Engine Version Updates

New GKE versions are available for upgrades and new clusters. GKE upgrades clusters to new minor and patch versions based on specific conditions.

AudienceBackend developers building serverless applications on Google Kubernetes Engine
FeaturesNew GKE versions, version upgrades, auto-upgrade targets
RegionsAll regions
Preview

VPC Service Controls: Automated Remediation Suggestions

Support for automated remediation suggestions is available in the VPC Service Controls violation analyzer. Remediation suggestions analyze access denial events and generate actionable, narrowly scoped configuration changes to resolve perimeter denials and adhere to the principle of least privilege. The remediation engine can automatically propose ingress rules, egress rules, VPC accessible services updates, and existing or new context-aware access levels. For more information, see Resolve access denials with remediation suggestions .

AudienceSecurity engineers and developers using VPC Service Controls
Featuresautomated remediation suggestions, ingress rules, egress rules
RegionsAll regions
General Availability

Compute Engine: Accurate Time Synchronization

You can sync a Compute Engine VM's clock with its host server's clock by using chrony and ptp_kvm to achieve accuracy designed to be within 1 ms. Accurate time synchronization is supported in all standard public Google Cloud regions and zones.

AudienceBackend developers building serverless applications on Google Cloud
Featureschrony, ptp_kvm, accurate time synchronization
Regions모든 리전
General Availability

Google SecOps SIEM: Updated Default Parsers

Google SecOps SIEM has updated its list of supported default parsers, including AIX system, Apache, and AWS Cloudtrail. This update may take one to four days to reflect in your region.

AudienceSecurity information and event management (SIEM) system administrators
FeaturesUpdated default parsers for AIX system, Apache, AWS Cloudtrail
RegionsAll regions
General Availability

Gemini Bug Fixes

Gemini has received various bug fixes and minor product enhancements in VS Code. These changes improve the overall stability and performance of the Gemini service, and developers can continue to use the latest version without any disruptions.

AudienceBackend developers building serverless applications on Gemini
Featuresbug fixes, minor product enhancements
RegionsAll regions
General Availability

Apigee Hybrid v1.14.9 Patch Release

Apigee Hybrid v1.14.9 has been released with several bug fixes and security patches. This patch release includes fixes for issues with VerifyJWT policies, distributed tracing, and HTTP/2 request pseudo-headers. Additionally, security fixes have been applied to various components to address multiple vulnerabilities.

AudienceBackend developers building serverless applications on Apigee Hybrid
FeaturesVerifyJWT policy fixes, distributed tracing improvements, HTTP/2 request pseudo-headers support
RegionsAll regions
General Availability

Gemini Enterprise Agent Platform

This release introduces updates to CodeMender, including consistent finding deduplication and bug fixes. Developers should ensure local session state and logs are saved cleanly when a session is interrupted.

AudienceBackend developers using CodeMender
FeaturesImproved finding deduplication consistency, Bug fixes, Updated streaming error handling
RegionsAll regions
General Availability

Google Kubernetes Engine: GKE Sandbox GA

The microVM sandbox type is now Generally Available with GKE Sandbox in clusters that run version 1.37.0-gke.4713000 and later. GKE microVM sandboxes use Kata Containers and Cloud Hypervisor to provide isolation while maintaining a full Linux kernel.

AudienceBackend developers building containerized applications on Google Kubernetes Engine
FeaturesHardware virtualization, isolation for untrusted workloads, Kata Containers
RegionsAll regions
Preview

BigQuery TimesFM 3.0 Preview

BigQuery offers TimesFM 3.0, a built-in time series forecasting model that implements Google Research's open source TimesFM model. You can use TimesFM 3.0 with AI.FORECAST for multivariate forecasting, AI.EVALUATE for univariate time series evaluation, and AI.DETECT_ANOMALIES for univariate time series anomaly detection.

AudienceData scientists and analysts using BigQuery for time series forecasting
FeaturesMultivariate forecasting, univariate time series evaluation, univariate time series anomaly detection
RegionsAll regions
Preview

Cloud Run Preview SSH Feature

Cloud Run now supports SSH connections to services and instances for secure, interactive shell access. This feature is currently in preview and may change before it is generally available.

AudienceBackend developers building serverless applications on Cloud Run
FeaturesSSH connections, secure shell access, interactive shell
Regions모든 리전
General Availability

Gemini Enterprise: Pay-as-you-go usage above quota enabled

Pay-as-you-go usage above quota is now enabled for Frontline, EDU, and Emerging Market editions of Gemini Enterprise. Users can continue using features at pay-as-you-go rates after reaching their pooled quota limits on an invoiced Cloud Billing account with an active subscription.

AudienceDevelopers and administrators managing Gemini Enterprise licenses
FeaturesPay-as-you-go usage above quota, invoiced Cloud Billing account, pooled quota limits
Regions모든 리전
General Availability

Google Distributed Cloud for VMware 1.36.100-gke.144 Released

Google Distributed Cloud 1.36.100-gke.144 is now available for download, running on Kubernetes v1.36.4-gke.100. This release fixes several issues, including false-positive datastore errors and orphaned machine resources.

AudienceBackend developers building serverless applications on GKE On-Prem API clients
Featuresetcd v3.5.33-0-gke.3, Kubernetes v1.36.4-gke.100, GKE On-Prem API clients
RegionsAll regions
General Availability

Virtual Private Cloud Increases Private Service Connect Endpoint Connections

Service producers can now configure an additional NAT IP address for a Private Service Connect endpoint or backend, allowing service consumers to establish more connections. This change applies to all regions.

AudienceService producers building and managing Virtual Private Cloud services
FeaturesIncreased connections to Private Service Connect endpoints, additional NAT IP address support, service attachment configuration
Regions모든 리전
General Availability

Google Distributed Cloud for bare metal 1.36.100-gke.144

Google Distributed Cloud for bare metal 1.36.100-gke.144 extends the validity period for new certificates generated for GKE Identity Service from 5 years to 10 years and fixes issues related to control plane upgrades, node drain, and API server connection failures. To upgrade, see Upgrade clusters. Note that it takes approximately 7 to 14 days for the version to become available for installations or upgrades with the GKE On-Prem API clients.

AudienceBackend developers building serverless applications on Google Cloud
FeaturesExtended certificate validity period, fixed control plane upgrades, fixed node drain issues
RegionsAll regions
General Availability

Google SecOps Marketplace: Update Google Chronicle

Google Chronicle has updated its alert synchronization logic to support the latest Chronicle API. Existing users must migrate their repository branch and re-export their content after updating.

AudienceSecurity and compliance teams using Google Chronicle
FeaturesUpdated alert synchronization logic, support for latest Chronicle API, migration required for existing users
Regions모든 리전
General Availability

Anti Money Laundering AI: Minor Engine Update

A new minor engine version (v004.005) is released for the commercial line of business, extending support for the major engine version without significant changes.

AudienceFinancial institutions using Anti Money Laundering AI
FeaturesExtended support for major engine version, no significant changes, minor version update
RegionsAll regions
Preview

App Optimize API Preview

The App Optimize API remote MCP server is now in Preview. This means that the service is not yet fully available for production use.

AudienceBackend developers building serverless applications on App Engine
FeaturesPreview of remote MCP server
Regions모든 리전
General Availability

Cloud Monitoring - Bulk registration to App Hub

Cloud Monitoring now supports bulk registration of discovered services and workloads to an App Hub application. This feature is generally available and does not require any actions from developers.

AudienceBackend developers building serverless applications on App Hub
FeaturesBulk registration of discovered services and workloads, App Hub application, General Availability
Regions모든 리전
General Availability

Gemini Nano Banana 2.1 GA

Gemini Nano Banana 2.1 improves multimodal image generation and editing with enhanced visual quality, prompt adherence, and text rendering across 1K, 2K, and 4K resolutions. This update is now available in all regions.

AudienceBackend developers building serverless applications on Gemini Enterprise Agent Platform
Featureshigh-speed multimodal image generation, improved visual quality, prompt adherence
Regions모든 리전
End of Support

Security Command Center Deprecation

The Artifact guard with CI/CD integration is deprecated and will be shut down on October 30, 2026. Developers should plan to migrate to alternative security features before the shutdown date.

AudienceSecurity teams using Security Command Center
Featuresdeprecation of Artifact guard with CI/CD integration
Regions모든 리전
General Availability

Cloud SDK Breaking 588.0.0

Cloud SDK 588.0.0 introduces breaking changes to Cloud Managed Flink, including removal of the Managed Flink Client component from the Google Cloud CLI. Additionally, it adds new commands for Agent Identity and updates Anthos CLI with a newer Go version and library dependencies.

AudienceBackend developers building serverless applications on Google Cloud
FeaturesManaged Flink Client removal, Agent Identity commands, Anthos CLI updates
RegionsAll regions
General Availability

Gemini Enterprise: Control Antigravity feature access

Administrators can control access to Google Antigravity features, including Boost and Teamwork, in Gemini Enterprise. These settings are generally available for administrators.

AudienceAdministrators managing Google Antigravity features in Gemini Enterprise
FeaturesTiered multi-agent hierarchy, Coordinated framework of autonomous subagents, /boost and /teamwork-preview commands
RegionsAll regions
General Availability

AI Hypercomputer: Hyperdisk Pool Support

You can reserve compute resources for creating GPU instances through your account team, including a Hyperdisk pool in the same or subsequent request. This ensures AI and ML workloads have storage resources close to GPU instances.

AudienceBackend developers building AI and ML workloads on AI Hypercomputer
FeaturesHyperdisk pool support, GPU instances, account team reservations
Regions모든 리전
Preview

BigQuery Supports Causal Effect Function

BigQuery now supports the AI.CAUSAL_EFFECT function to quantify the impact of specific interventions on time series data. This feature is currently in preview, and developers should be aware that it may change before general availability.

AudienceData analysts and developers using BigQuery for conversational analytics
FeaturesAI.CAUSAL_EFFECT function, time series data analysis, conversational analytics
RegionsAll regions
General Availability

Compute Engine: Reserve H4D instances with Hyperdisk pool

You can now reserve compute resources for H4D instances through your account team, including a Hyperdisk pool in the same request or a subsequent request. This ensures high performance computing workloads have storage resources close to compute instances.

AudienceBackend developers building high-performance computing workloads on Compute Engine
FeaturesReserve compute resources for H4D instances, include Hyperdisk pool in request, ensure storage resources close to compute instances
Regions모든 리전
General Availability

GKE 1.36: CoreDNS as default engine for kube-dns

Starting with GKE version 1.36, CoreDNS is the default engine for kube-dns. This change may cause issues with Pod IP DNS queries in the <a-b-c-d>.<namespace>.pod.cluster.local format if the specified namespace does not exist.

AudienceBackend developers building containerized applications on Google Kubernetes Engine
FeaturesCoreDNS as default engine for kube-dns, Pod IP DNS queries, Kubernetes DNS specification
RegionsAll regions
General Availability

Container Optimized OS Updates

This update includes various changes to the Container Optimized OS, including updated kernel and Docker versions, support for new NVIDIA drivers, and security fixes. Developers should note that the default cos-gpu-installer version has been updated to v2.7.9 and that the "watchdog_timeout" module parameter has been added to the idpf driver.

AudienceBackend developers building serverless applications on Google Cloud
FeaturesUpdated kernel and Docker versions, support for new NVIDIA drivers, security fixes
RegionsAll regions
General Availability

Identity and Access Management

Feature Revoking active sessions and short-lived credentials for Workforce Identity Federation users (principals) across all clients is generally available. You can revoke workforce user sessions by using the gcloud CLI or the REST API.

AudienceBackend developers building serverless applications on Google Cloud
FeaturesRevoking active sessions, Workforce Identity Federation, gcloud CLI
Regions모든 리전
Preview

Google Cloud CCaaS 6.19 Prerelease Notes

This release addresses issues with concurrent chat assignments, call distribution, supervisor-initiated sign-outs, agent data exposure, and voice call routing. Developers should review the prerelease notes for details on the fixed issues and potential impact on their applications.

AudienceDevelopers building contact center applications on Google Cloud
FeaturesConcurrent chat assignment fixes, call distribution improvements, supervisor-initiated sign-out enhancements
RegionsAll regions
General Availability

Cloud SQL for MySQL: Increased Concurrent Connections

Cloud SQL for MySQL now supports up to 100,000 concurrent connections for Private Service Connect enabled instances created on or after September 30, 2026 with 16 or more vCPUs. This change applies to instances created in all regions.

AudienceBackend developers building serverless applications on Cloud SQL for MySQL
FeaturesPrivate Service Connect, concurrent connections, vCPUs
Regions모든 리전
General Availability

Cloud SQL for PostgreSQL supports up to 129,024 concurrent connections

Cloud SQL for PostgreSQL now supports up to 129,024 concurrent connections for Private Service Connect enabled instances created on or after September 30, 2026 with 16 or more vCPUs. This change applies to instances created on or after the specified date, and developers should ensure their applications are compatible with the updated limit.

AudienceBackend developers building PostgreSQL databases on Cloud SQL
FeaturesPrivate Service Connect, concurrent connections, vCPUs
Regions모든 리전
General Availability

Agent Platform Workbench: Latest Packages Installed

The Agent Platform Workbench now installs the latest packages from upstream dependencies. This change affects all regions.

AudienceBackend developers building serverless applications on Agent Platform Workbench
FeaturesLatest package installation from upstream dependencies, Improved dependency management, Enhanced platform stability
Regions모든 리전
General Availability

Config Connector 1.158.0 Released

Config Connector version 1.158.0 introduces new features and improvements, including support for direct reconciliation, pausing and unpausing actuation, and bug fixes for BigQueryDataset, ComposerEnvironment, and ComputeRouterNAT. Developers can opt-in to direct reconciliation by adding the alpha.cnrm.cloud.google.com/reconciler: direct annotation to the corresponding Config Connector object.

AudienceBackend developers building serverless applications on Google Cloud
FeaturesDirect reconciliation, pausing and unpausing actuation, support for Cloud SQL instances
RegionsAll regions
General Availability

Google SecOps SIEM: Terraform and client libraries for Chronicle API

Terraform providers and client libraries are now available for several Google SecOps features using Chronicle API, enabling programmatic provisioning and management of Google SecOps resources as code. Developers can build custom integrations and automate Google SecOps workflows in their preferred programming languages.

AudienceBackend developers building serverless applications on Google Cloud
FeaturesTerraform providers, client libraries, programmatic provisioning
RegionsAll regions
Preview

Cloud Load Balancing Supports External IPv6 Addresses

Cloud Load Balancing now supports external IPv6 addresses for Standard Tier. This feature is in Preview, and developers should be aware that it may change before General Availability.

AudienceBackend developers building serverless applications on Google Cloud
FeaturesExternal IPv6 address support, Standard Tier, IPv6 subnet ranges
Regions모든 리전
Preview

Compute Engine: External IPv6 Support for Standard Tier

External IPv6 addresses are now supported for Standard Tier in Compute Engine. This change requires no action from developers, as it is a new feature available for use.

AudienceBackend developers building serverless applications on Compute Engine
FeaturesExternal IPv6 addresses, Standard Tier, IPv6 subnet ranges
Regions모든 리전
Preview

Network Service Tiers: External IPv6 addresses supported in Preview

External IPv6 addresses are now supported for Standard Tier in Preview. This change applies to all regions.

AudienceBackend developers building network services
FeaturesExternal IPv6 addresses, Standard Tier, Preview
Regions모든 리전
General Availability

BigQuery Supports Flexible Column Names in Iceberg Tables

Iceberg external tables and Iceberg managed tables now support flexible column names by default. This change allows developers to use the AI.EMBED, AI.SIMILARITY, and AI.GENERATE_EMBEDDING functions with the gemini-embedding-2 model, which supports a mix of text, images, audio, video, and PDF files.

AudienceBackend developers building serverless applications on Google Cloud
FeaturesFlexible column names in Iceberg external tables, Support for AI.EMBED, AI.SIMILARITY
RegionsAll regions
Preview

Virtual Private Cloud: External IPv6 Support for Standard Tier

External IPv6 addresses are now supported for Virtual Private Cloud Standard Tier. This change affects all regions.

AudienceBackend developers using Virtual Private Cloud
FeaturesExternal IPv6 addresses, Standard Tier, IPv6 subnet ranges
Regions모든 리전
General Availability

Gemini Enterprise Agent Platform: CodeMender updates

This release introduces updates to CodeMender with improved hidden file scanning, larger file support, report output for every scan mode, scoped fixes, accurate session token usage, and bug fixes. Existing configurations are automatically upgraded, and new features are available for cm find and cm fix. No actions are required for developers, but they should review the CodeMender documentation for more information.

AudienceBackend developers using CodeMender
FeaturesImproved hidden file scanning, larger file support, report output for every scan mode
RegionsAll regions
General Availability

Guest Environment updated to 20260921.00

Version 20260921.00 of the guest agent introduces a locally bundled extension for managed workload identity certificate refresher and updates the guest telemetry extension to version 1.1, polling every 15 minutes. The extensions manager now ignores install and remove requests from ACS for the core plugin and locally bundled extensions.

AudienceBackend developers building serverless applications on Guest Environment
FeaturesLocally bundled extension for managed workload identity certificate refresher, Guest telemetry extension updated to version 1.1, Extensions manager ignores install and remove requests from ACS
RegionsAll regions
General Availability

Agent Platform Workbench: Updated dependencies

The Agent Platform Workbench now uses the latest packages from upstream dependencies. This change enables the BigQuery JupyterLab plugin independently of the Dataproc plugin, with a new disable-bigquery instance metadata key to control it.

AudienceBackend developers building serverless applications on Google Cloud
Featureslatest packages from upstream dependencies, BigQuery JupyterLab plugin enabled independently, disable-bigquery instance metadata key
Regions모든 리전
General Availability

Confidential Space New Image Available

A new Confidential Space image (260900) is now available for use. This image can be used in all regions.

AudienceCloud engineers and developers
FeaturesConfidential Space image, 260900, all regions
Regions모든 리전
End of Support

Google Kubernetes Engine Identity Service Deprecation

Identity Service for GKE is deprecated in GKE versions 1.36 and earlier, and unavailable in organizations created on or after July 1, 2025. Before upgrading to GKE version 1.37 and later, disable this feature and migrate to Workforce Identity Federation.

AudienceKubernetes administrators and developers
FeaturesGKE version 1.36, GKE version 1.37, Workforce Identity Federation
Regions모든 리전
General Availability

Google SecOps: Terraform and client libraries for Chronicle API

Terraform providers and client libraries are now available for several Google SecOps features using Chronicle API, including Feeds, Parsers, and Rules. This enables developers to manage Google SecOps resources as code and automate workflows in their preferred programming languages.

AudienceBackend developers building custom integrations and automating Google SecOps workflows
FeaturesTerraform providers, client libraries, programmatic provisioning
Regions모든 리전
General Availability

Network Intelligence Packet Drop Analysis

Feature Flow Analyzer displays packet drops, allowing you to analyze packet loss in your traffic flows. For more information, see Display flows in packet drop mode .

AudienceNetwork administrators and engineers managing network traffic flows
Featurespacket drop analysis, traffic flow visualization, network performance monitoring
Regions모든 리전
General Availability

Knowledge Catalog Supports Looker Assets

Knowledge Catalog now supports Looker (Google Cloud core) assets, enabling you to package, govern, and share Looker (Google Cloud core) dashboards, dashboard elements, Looks, Explores, and LookML projects, models, and views in a data product using Google Group mirroring and IAM access controls. This feature is generally available.

AudienceData engineers and analysts using Google Cloud
FeaturesLooker (Google Cloud core) asset support, Google Group mirroring, IAM access controls
Regions모든 리전
General Availability

Managed Service for Apache Spark: Short Template Names for Serverless Sessions

Users can now specify short template names when creating a serverless session in Managed Service for Apache Spark. This change affects users who create serverless sessions with Managed Service for Apache Spark.

AudienceBackend developers building serverless applications on Google Cloud
Featuresshort template names, serverless sessions, Managed Service for Apache Spark
Regions모든 리전
General Availability

Apigee Edge for Public Cloud: Security fixes

Apigee Edge UIs for managing integrated portals and API specs were updated to patch vulnerabilities in underlying libraries and serving components. This update does not change functionality, but some pages may show minor styling differences.

AudienceBackend developers building APIs on Apigee Edge
Featurespatched vulnerabilities, updated UI components, unchanged functionality
Regions모든 리전
General Availability

Google SecOps SOAR Release 6.3.102

Release 6.3.102 is being rolled out to the first phase of regions, including Seoul, Tokyo, and Singapore. This release contains internal and customer bug fixes.

AudienceCloud security operations teams
FeaturesInternal and customer bug fixes
Regions모든 리전
General Availability

Agent Platform Workbench: Security patches and updates

The Agent Platform Workbench has received security patches to remediate Critical and High-severity CVEs in its custom container images. Additionally, the BigQuery JupyterLab plugin is now enabled independently of the Dataproc plugin, with a new instance metadata key to control its behavior.

AudienceBackend developers building serverless applications on Google Cloud
FeaturesSecurity patches, BigQuery JupyterLab plugin updates, instance metadata key changes
RegionsAll regions
General Availability

Google SecOps SOAR 6.3.101 Released

Google SecOps SOAR Announcement Release 6.3.101 is now available for all regions. This update is a general availability release, and no specific actions are required for developers.

AudienceSecurity operations teams using Google SecOps SOAR
Regions모든 리전
General Availability

Sensitive Data Protection: Updated Name Dictionary

A new version of the PERSON_NAME infoType detector is available with an updated name dictionary. You can try the new version by setting InfoType.version to latest in your InspectConfig, and the previous functionality will be available until the new version is promoted to stable in 30 days.

AudienceDevelopers using the PERSON_NAME infoType detector
FeaturesUpdated name dictionary, InfoType.version setting, stable version promotion
RegionsAll regions

BigQuery

Feature The Rust SDK for BigQuery is now generally available (GA). Feature The Data Engineering Agent now supports the gemini-3.7-flash model for the us , eu , and global multi-regional endpoints.

General Availability

Cloud NAT General Availability

Cloud NAT gateways now support IPv6 to IPv4 network address translation for Private NAT. This feature is now available for all users to use in their Private NAT configurations.

AudienceBackend developers building serverless applications on AWS Lambda
FeaturesIPv6 to IPv4 network address translation, Private NAT support, Cloud NAT gateways
Regions모든 리전
Preview

GKE: VPA with HPA for CPU-Optimized Autoscaling

You can use Vertical Pod Autoscaler (VPA) with Horizontal Pod Autoscaler (HPA) to automatically optimize container CPU requests for workloads that scale replicas based on CPU utilization. This feature is available in Public Preview on clusters running GKE version 1.36.3-gke.1630000 or later.

AudienceBackend developers building containerized applications on Google Kubernetes Engine
FeaturesVertical Pod Autoscaler, Horizontal Pod Autoscaler, CPU optimization
RegionsAll regions
General Availability

Network Connectivity Center Supports Poland

Network Connectivity Center now supports site-to-site data transfer in Poland, enabling secure and reliable data exchange between locations. This feature is available in all regions, and developers can leverage it to enhance their network connectivity solutions.

AudienceBackend developers building serverless applications on Google Cloud Platform
Featuressite-to-site data transfer, secure data exchange, reliable network connectivity
Regions모든 리전
General Availability

Apigee X updated

We released an updated version of Apigee (1-18-0-apigee-6) with security fixes for Apigee ingress gateway and Prometheus library, as well as improvements to truststore and JWT policies. Your instances may not have the features and fixes available until the rollout is complete across all Google Cloud zones.

AudienceBackend developers building serverless applications on Google Cloud
FeaturesSecurity fixes for Apigee ingress gateway and Prometheus library, truststore improvements, and JWT policy enhancements
RegionsAll regions
Preview

Gemini Enterprise: Federated Query Mode for Data Cloud Connectors and Knowledge Catalog

Gemini Enterprise now supports federated query mode for Data Cloud connectors, including AlloyDB for PostgreSQL, BigQuery, and Cloud SQL Spanner, using the Model Context Protocol (MCP). This allows users to query operational and analytical data in place without copying or ingesting data into a data store. Additionally, Knowledge Catalog integration is available in Preview, enabling read-only tools to search for data and retrieve technical and business context.

AudienceBackend developers building serverless applications on Cloud SQL Spanner
FeaturesFederated query mode, Model Context Protocol (MCP), Knowledge Catalog integration
RegionsAll regions
General Availability

Google Cloud CCaaS 6.17: Warm Transfer Auto-Resume

Google Cloud CCaaS version 6.17 introduces warm transfer auto-resume, eliminating silence after handoffs. This change applies to warm transfers routed through queues and direct agent transfers, ensuring private conversations between agents.

AudienceContact center administrators and developers using Google Cloud CCaaS
FeaturesWarm transfer auto-resume, Call ended card fix, Virtual Agent Session Variables fix
RegionsAll regions
General Availability

BigQuery: Updated Simba JDBC Driver and Conversational Analytics

An updated version of the Simba JDBC driver for BigQuery is now available. This update enables developers to use BigQuery pipelines for automated metadata enrichment and Knowledge Catalog data quality scorecard integration, improving data quality and pipeline management.

AudienceBackend developers building data pipelines on BigQuery
Featuresautomated metadata enrichment, Knowledge Catalog data quality scorecard integration, semantic metadata generation
Regions모든 리전
General Availability

Dataform: Automated metadata enrichment and Knowledge Catalog integration

Dataform now supports automated metadata enrichment and Knowledge Catalog data quality scorecard integration for Dataform workflows and BigQuery pipelines. This feature is now available for all users, with no actions required.

AudienceData engineers working with BigQuery and Dataform
Featuresautomated metadata enrichment, Knowledge Catalog data quality scorecard integration, Dataform workflows
Regions모든 리전
General Availability

Google Cloud VMware Engine: BYOL License Management

Google Cloud VMware Engine now supports Bring Your Own License (BYOL) license management, allowing you to register and manage portable VMware Cloud Foundation (VCF) license keys in the Google Cloud console across projects associated with your Cloud Billing account. This feature is generally available.

AudienceBackend developers building VMware environments on Google Cloud
FeaturesBYOL license management, VMware Cloud Foundation (VCF) license keys, Google Cloud console
Regions모든 리전
General Availability

Bigtable GA: Data Agent Kit Support

Google Cloud Data Agent Kit now supports browsing Bigtable instances and tables, designing schemas, and running GoogleSQL queries from IDEs or coding agents. This update is available in all regions.

AudienceBackend developers building serverless applications on Google Cloud
FeaturesData Agent Kit support, Bigtable instance browsing, GoogleSQL query execution
Regions모든 리전
General Availability

Pub/Sub: UDF SMT Code Generation

You can use Gemini Enterprise to generate code for user-defined function (UDF) single-message transforms (SMTs). For more information, see Create a UDF SMT.

AudienceBackend developers building serverless applications
FeaturesUDF single-message transforms, Gemini Enterprise, code generation
RegionsAll regions
Preview

Network Intelligence Center: Network Services Monitoring Preview

Network Services Monitoring is now available in Preview, visualizing communication paths and network metrics for Google Kubernetes Engine services and workloads with ambient networking enabled. Feature Cloud Network Insights supports using Google Cloud CLI commands to download Microsoft Azure and Amazon Web Services (AWS) Monitoring Point installation bundles.

AudienceBackend developers building serverless applications on Google Kubernetes Engine
FeaturesNetwork Services Monitoring, Cloud Network Insights, Google Cloud CLI commands
Regions모든 리전
Preview

Cloud Healthcare API FHIR Bulk Export Group POST

The FHIR bulk export Group POST feature is now available in Preview in Cloud Healthcare API v1beta1. This allows developers to invoke the $export operation on a FHIR Group by using the HTTP POST method to supply export parameters in the request body, filtering by up to 1,000 patient references using the patient parameter, _since, and _type.

AudienceBackend developers building healthcare applications on Google Cloud
FeaturesFHIR bulk export, Group POST method, patient parameter filtering
Regions모든 리전
General Availability

Gemini Enterprise: Remove Gemini 2.5 Pro in Canada and Japan

Gemini Enterprise will remove Gemini 2.5 Pro from the app in Canada and Japan in-country regions on October 20, 2026. Administrators can turn Gemini 2.5 Pro on or off for the Gemini Enterprise web app in the global, us, and eu regions.

AudienceAdministrators of Gemini Enterprise
FeaturesGemini 2.5 Pro removal, Gemini 2.5 Pro toggle in web app, existing configurations unaffected
RegionsCanada, Japan
General Availability

Compute Engine: Expanded Hyperdisk Support

Compute Engine now supports multi-writer mode for Hyperdisk Balanced volumes on C3 bare metal instances and for Hyperdisk Balanced, Hyperdisk Extreme, and Hyperdisk Balanced High Availability volumes on C4 instances created after May 1, 2026. This change enables sharing a disk between instances.

AudienceBackend developers building serverless applications on Compute Engine
FeaturesMulti-writer mode for Hyperdisk Balanced volumes, support for Hyperdisk Extreme and Hyperdisk Balanced High Availability volumes on C4 instances, disk sharing between instances
Regions모든 리전
Preview

VPC Service Controls adds Feature Preview stage support for Universal Ledger

VPC Service Controls now supports Feature Preview stage for integration with Universal Ledger. This allows developers to test and validate their applications with the new feature before it is generally available.

AudienceBackend developers building serverless applications on Google Cloud
FeaturesFeature Preview stage support, Universal Ledger integration, support for testing and validation
RegionsAll regions

Apigee API hub

Feature AI performance and Tool performance dashboards in API insights API insights in API hub now includes two dashboards for AI and agent traffic: AI performance reports token usage and model latency for the large language models called through your gateways, with filters for model and provider. Tool performance reports traffic, throughput, payload sizes, and latency for your Model Context Protocol (MCP) tools, with filters for MCP server, deployment, and tool name. For more information, see API insights dashboards .

General Availability

Cloud Tasks: Enhanced Task Management

Cloud Tasks now supports setting retry parameters when creating a task and overriding queue-level retry configuration. Developers can also create batches of tasks and add them to existing queues, or delete batches of tasks from a queue.

AudienceBackend developers building serverless applications
FeaturesSetting retry parameters, overriding queue-level retry configuration, creating batches of tasks
Regions모든 리전
General Availability

Datastream supports partial backfill

Datastream now supports partial backfill for SQL Server, Spanner, Oracle, PostgreSQL, and MySQL sources, allowing you to load specific data subsets using a SQL WHERE clause. This feature is now available for all regions.

AudienceBackend developers building data pipelines
FeaturesPartial backfill support, SQL WHERE clause, data subset loading
Regions모든 리전
End of Support

Legacy Appliance Management Console Deprecation

Support for backing up and restoring workloads via the legacy appliance management console is deprecated. New backups will no longer be supported after September 30, 2027, and standard restores will be supported until March 31, 2028.

AudienceCloud administrators managing workloads via the legacy appliance management console
FeaturesLegacy appliance management console deprecation, End of Support for new backups, End of Standard Restores
Regions모든 리전
General Availability

Cloud Load Balancing: Increased URL Map Size Limit

Google Cloud Load Balancing now has a new quota system governing the configuration size of Application Load Balancers, increasing the individual URL map size limit from 64 KB and 128 KB to 1 MB. This update affects projects enabled for the new quota, which have a new URL map size limit increased to 1 MB for global and regional external and internal Application Load Balancers.

AudienceBackend developers building serverless applications on Google Cloud
FeaturesComplexity-based quota, Scoped measurement, Active consumption
Regions모든 리전
Preview

Eventarc supports Firebase Authentication triggers

Eventarc now supports creating triggers for direct events from Firebase Authentication. This allows developers to build more complex event-driven workflows.

AudienceBackend developers building serverless applications on Google Cloud
FeaturesFirebase Authentication integration, event-driven workflows, trigger creation
Regions모든 리전
General Availability

BigQuery Security Center Now Available in Google Cloud Console

The BigQuery Security center is now available in the Google Cloud console, allowing you to analyze your data security profile and manage row- and column-level security policies. You can now view UPDATE, DELETE, MERGE, and EXPORT execution steps in your query plans.

AudienceBackend developers building data analytics applications on Google Cloud
Featuresrow- and column-level security policies, data governance, policy tags
Regions모든 리전
General Availability

Cloud Monitoring: Application Topology Graph GA

The application topology graph is now available to help understand relationships between applications, services, and workloads, and shows traffic flow and incidents in the context of your applications. This change does not require any actions from developers.

AudienceBackend developers building serverless applications on AWS Lambda
Featuresapplication topology graph, relationships between applications, services
Regions모든 리전
General Availability

Compute Engine: Preemption notice duration for Spot VMs

You can now specify a 120-second preemption notice duration when creating Spot VMs. Update your workload to handle preemption outside of a shutdown script and test preemption to migrate existing Spot VMs workloads.

AudienceBackend developers building serverless applications on Compute Engine
Features120-second preemption notice duration, Spot VMs, workload migration
Regions모든 리전
General Availability

Gemini Enterprise Agent Platform: App Topology API GA

The App Topology API in Gemini Enterprise Agent Platform is now generally available, introducing a new query builder for customizing quick queries and a streamlined single-agent topology experience.

AudienceBackend developers building serverless applications on Gemini Enterprise Agent Platform
FeaturesNew query builder, Custom queries, Streamlined single-agent topology
RegionsAll regions
General Availability

Memorystore for Valkey - General Availability

You can use App Design Center to create Memorystore instances. This feature is now available for use.

AudienceBackend developers building serverless applications on Google Cloud Platform
FeaturesApp Design Center, Memorystore instances, general availability
Regions모든 리전
General Availability

Apigee Hybrid v1.17.1 Adds External Cassandra Support

Apigee hybrid v1.17.1 introduces support for connecting to a Cassandra datastore in a separate Kubernetes cluster, enabling external datastore mode. Developers can now use the Apigee operator's Kubernetes manager role with the core endpoints permission.

AudienceBackend developers building serverless applications on Apigee hybrid
FeaturesExternal Cassandra datastore support, Kubernetes manager role with core endpoints permission, patch release via Helm chart
RegionsAll regions
General Availability

Cloud Storage: Automated Checksumming for Data Integrity

Cloud Storage client libraries now provide automated, end-to-end checksumming by default for object read and write operations to help maintain data integrity from client to storage. This change is applicable to all regions and does not require any actions from developers.

AudienceBackend developers building serverless applications on Google Cloud
Featuresautomated checksumming, end-to-end checksumming, data integrity
Regions모든 리전
General Availability

GKE Automatically Applies Protection Tier Labels

GKE now automatically applies protection tier labels to TPU node pools created from Compute Engine reservations. Depending on your configuration, GKE adds node pool resource labels and Kubernetes node labels.

AudienceBackend developers building serverless applications on Google Kubernetes Engine
FeaturesAutomatically applied protection tier labels, Node pool resource labels, Kubernetes node labels
Regions모든 리전
General Availability

Looker: Enhanced Observability Metrics

Looker now provides enhanced observability metrics, including user engagement and estimated token usage data on the Token usage tab of the Conversational Analytics System Activity dashboard, for Looker instances on version 26.16 or later. This launch also adds a Daily Token Utilization visualization and supports token usage observability for Conversational Analytics data agents published to Gemini Enterprise.

AudienceDevelopers building on Google Cloud
FeaturesEnhanced observability metrics, Daily Token Utilization visualization, token usage observability for Conversational Analytics data agents
RegionsAll regions
General Availability

API Gateway: API Key Authentication for MCP Tools

API key authentication is now supported for the Model Context Protocol (MCP) tools/list method. You can name an API key security scheme in tools-list.security, in addition to a JWT security scheme.

AudienceBackend developers building serverless applications on AWS Lambda
FeaturesAPI key authentication, Model Context Protocol (MCP) tools/list method, JWT security scheme
Regions모든 리전
General Availability

Headless Mobile SDK Now Available

The headless mobile SDK for Android and iOS is now available, allowing you to embed Google Cloud CCaaS capabilities into your mobile app while retaining full control over the UI. This SDK supports calls, chats, and email, and is best suited for organizations that need brand consistency and full control over their mobile app's look and feel.

AudienceBackend developers building mobile applications
Featuresheadless mobile SDK, Android, iOS
RegionsAll regions
General Availability

Google SecOps: Expanded read-only permissions for Chronicle API

Google SecOps has updated the predefined Chronicle API Restricted Data Access Viewer IAM role to include all read-only permissions available in the Chronicle API Viewer role, excluding global data access. Users assigned to this role will have read-only access across Google SecOps features, including SOAR cases and playbooks, investigations, threat collections, findings, security validation, and ingestion resources within their assigned data access scopes.

AudienceSecurity and compliance teams using Google SecOps
FeaturesExpanded read-only permissions, Chronicle API Viewer role, data access scopes
RegionsAll regions
General Availability

Google SecOps Marketplace: New Akeyless Security Integration

Google SecOps Marketplace now integrates with Akeyless Security version 1.0. Vertex AI version 9.0 improves API error message parsing.

AudienceSecurity and compliance teams using Google SecOps Marketplace
FeaturesAkeyless Security integration, API error message parsing, message timezone support
Regions모든 리전
General Availability

Dialogflow CX Security Fix and Gemini Model Deprecation

A server-side fix has been applied to redact and sanitize authentication credentials from conversational API outputs in Dialogflow CX. All generative features, including gemini-2.5-flash and gemini-2.5-flash-lite models, will be deprecated by December 23, 2026, and should be upgraded to newer Gemini models before the deprecation date. BidiStreamingAnalyzeContent API is now generally available.

AudienceDevelopers using Dialogflow CX
FeaturesServer-side authentication credential redaction, Gemini model deprecation, BidiStreamingAnalyzeContent API availability
RegionsAll regions
Preview

Capacity Planner: Feature Preview

Capacity Planner now offers AI-powered assistance through Gemini to help understand and manage resource usage and plan capacity. You can use natural-language prompts to analyze historical usage patterns, forecast capacity needs, simulate growth events, and get answers to your Capacity Planner questions.

AudienceBackend developers building capacity planning tools
FeaturesAI-powered assistance, natural-language prompts, historical usage pattern analysis
Regions모든 리전
General Availability

Managed Service for Apache Spark: End-to-End Encryption for Apache Ranger

Managed Service for Apache Spark now supports end-to-end encryption for Apache Ranger (HTTPS) on port 6182 for SSL-enabled clusters. Direct access should target https://<master-host>:6182 instead of legacy HTTP port 6080, affecting image versions 2.2.88+, 2.3.37+, and 3.0.3+.

AudienceBackend developers building serverless applications on Google Cloud
FeaturesEnd-to-end encryption for Apache Ranger (HTTPS), multizone support, HTTPS port 6182
RegionsAll regions
General Availability

Gemini Enterprise: Default Model Update

Gemini 3.8 Flash is now the default model for AlphaEvolve experiments, replacing Gemini 3.5 Flash. To use a different model, specify it in the models field of generationSettings.

AudienceBackend developers using AlphaEvolve
FeaturesGemini 3.8 Flash, Gemini 3.7 Flash, Gemini 3.5 Flash
RegionsAll regions
General Availability

SAP HANA Hyperdisk Sizing Widget

Google Cloud has introduced a Hyperdisk sizing widget for SAP HANA to help meet size and performance requirements. This widget allows SAP HANA administrators and developers to select an SAP-certified machine type and view up to three tailored disk configurations.

AudienceSAP HANA administrators and developers
FeaturesHyperdisk-based disk configurations, SAP-certified machine type selection, tailored disk configurations
Regions모든 리전
Preview

API Gateway supports streaming for LLM responses

API Gateway now supports streaming requests and responses instead of buffering them, enabling incremental response delivery over HTTP/2, HTTP/1.1 chunked transfer encoding, Server-Sent Events, WebSockets, and gRPC bidirectional streaming. To enable streaming, create a gateway with the --enable-streaming flag, which cannot be changed later.

AudienceBackend developers building serverless applications on AWS
FeaturesHTTP/2, HTTP/1.1 chunked transfer encoding, Server-Sent Events
RegionsAll regions
Preview

BigQuery Preview

You can query the INFORMATION_SCHEMA.FAILOVER_HISTORY view to retrieve a near real-time list of failover events for reservations within an administration project that use managed disaster recovery. This feature is now available in preview.

AudienceBackend developers building disaster recovery systems on Google Cloud
Featuresmanaged disaster recovery, INFORMATION_SCHEMA.FAILOVER_HISTORY view, near real-time failover events
Regions모든 리전
General Availability

Cloud SDK Breaking Changes 587.0.0

Cloud SDK version 587.0.0 introduces breaking changes, including the removal of the gcloud storage buckets anywhere-caches pause command and the deprecated gcloud edge-cloud container vpn-connections command group. Additionally, several other features and commands have been updated or modified.

AudienceBackend developers building serverless applications on Google Cloud
FeaturesRemoved gcloud storage buckets anywhere-caches pause command, Removed deprecated gcloud edge-cloud container vpn-connections command group, Updated gcloud CLI to support Python v3.15
RegionsAll regions
General Availability

Cloud Run: Custom CPU and concurrency scaling

Cloud Run now supports specifying custom target CPU or concurrency utilization using scaling controls. This allows developers to fine-tune their applications for optimal performance.

AudienceBackend developers building serverless applications on Cloud Run
FeaturesCustom CPU utilization, concurrency scaling, scaling controls
RegionsAll regions
General Availability

Network Connectivity Center supports AWS Partner Cross-Cloud Interconnect

Network Connectivity Center now supports Partner Cross-Cloud Interconnect for AWS. Billing for this feature will start 30 days after General Availability, and can be found in Network Connectivity Center pricing.

AudienceBackend developers building serverless applications on AWS Lambda
FeaturesPartner Cross-Cloud Interconnect for AWS, Network Connectivity Center, General Availability
Regions모든 리전
General Availability

Security Command Center

Feature Event Threat Detection integrates with Sensitive Data Protection to enrich findings that affect sensitive resources. For more information, see Sensitive data enrichment .

AudienceBackend developers using Security Command Center
Regions모든 리전
General Availability

Secure Source Manager Service Account Authorization

Secure Source Manager webhooks now support service account authorization, enabling secure and scalable integration with other Google Cloud services. This change requires no action from developers, as it is a feature update that enhances the security and reliability of Secure Source Manager webhooks.

AudienceBackend developers building serverless applications on Google Cloud
Featuresservice account authorization, webhooks, Secure Source Manager
Regions모든 리전
General Availability

Cloud Interconnect: NCC Support for AWS

Network Connectivity Center (NCC) now supports Partner Cross-Cloud Interconnect for AWS, enabling secure and high-performance connectivity between AWS and Google Cloud. This allows developers to easily connect their AWS resources to Google Cloud services.

AudienceBackend developers building serverless applications on AWS Lambda
FeaturesNetwork Connectivity Center (NCC) support, Partner Cross-Cloud Interconnect, AWS integration
Regions모든 리전
General Availability

Cloud SQL for PostgreSQL adds pgAudit extension support

This release supports the pgAudit extension to prevent sensitive information from appearing in log query results. The pgAudit extension is supported on PostgreSQL version R20260712.01_RC31 or later.

AudienceDatabase administrators and developers using Cloud SQL for PostgreSQL
FeaturespgAudit extension, PostgreSQL version R20260712.01_RC31, minor bug fixes
RegionsAll regions
General Availability

Gemini Enterprise Agent Platform: Custom Denial Messages

You can now configure a fixed Denial message on a semantic governance policy to show end users when the policy denies a request. The message can be up to 1,000 characters and is configurable in the Google Cloud console or by setting agentResponseCustomization.denialMessage on the policy resource using the REST API.

AudienceBackend developers building serverless applications on Google Cloud
FeaturesCustom denial messages, policy create or edit page, REST API
Regions모든 리전
General Availability

Looker 26.18 Released

The latest Looker version 26.18 is now available in the Rapid and No Channel release channels. The Regular channel remains on version 26.14.

AudienceBackend developers building data analytics applications on Google Cloud
FeaturesLooker 26.18, Looker 26.14, release channels
Regions모든 리전
General Availability

Compute Engine: CMEK-encrypted snapshots

You can create a standard or archive snapshot of a disk and protect it with a customer-managed encryption key (CMEK), even if the source disk isn't protected with CMEK. This allows using a different CMEK to encrypt the new snapshot.

AudienceBackend developers using Compute Engine
FeaturesCMEK-encrypted snapshots, standard snapshots, archive snapshots
Regions모든 리전
General Availability

Google Cloud Contact Center as a Service fixes multiple issues

This release addresses several issues in Google Cloud Contact Center as a Service, including incorrect call length display, stuck calls on the live dashboard, and missing Virtual Agent Session Variables. The update also includes fixes for agent access, email formatting, and automatic wrap-up timer issues.

AudienceContact center administrators and developers
FeaturesImproved call length display, fixed stuck calls, added Salesforce CRM integration checkbox
RegionsAll regions
General Availability

App Engine flexible environment blocks insecure TLS traffic

App Engine now permanently blocks insecure traffic with TLS version 1.1 and earlier. This change affects appspot.com domains and custom domains, where requests may succeed but be blocked. For more information, see Secure minimum TLS .

AudienceBackend developers building serverless applications on App Engine
FeaturesTLS version 1.1 and earlier blocking, appspot.com domains, custom domains
RegionsAll regions
General Availability

App Engine flexible environment Go blocks insecure TLS traffic

App Engine permanently blocks insecure traffic with TLS version 1.1 and earlier. This change affects appspot.com domains and custom domains, where the connection might succeed but requests are blocked.

AudienceBackend developers building serverless applications on App Engine
FeaturesTLS version 1.1 and earlier blocking, appspot.com domain blocking, custom domain blocking
Regions모든 리전
General Availability

App Engine blocks insecure TLS traffic

App Engine permanently blocks insecure traffic with TLS version 1.1 and earlier. This change affects appspot.com domains and custom domains, where the connection might succeed but requests are blocked.

AudienceBackend developers building serverless applications on App Engine
FeaturesTLS version 1.1 and earlier blocking, appspot.com domain blocking, custom domain request blocking
Regions모든 리전
General Availability

App Engine blocks insecure TLS traffic

App Engine now blocks insecure traffic with TLS version 1.1 and earlier. This change affects appspot.com domains and custom domains, where connections might succeed but requests are blocked.

AudienceBackend developers building serverless applications on App Engine
FeaturesTLS version 1.1 and earlier blocking, appspot.com domain blocking, custom domain request blocking
Regions모든 리전
General Availability

App Engine blocks insecure TLS traffic

App Engine now permanently blocks insecure traffic with TLS version 1.1 and earlier. This change affects appspot.com domains and custom domains, where requests may succeed but be blocked.

AudienceBackend developers building serverless applications on App Engine
FeaturesTLS version 1.1 and earlier blocking, appspot.com domain blocking, custom domain request blocking
Regions모든 리전
General Availability

App Engine blocks insecure traffic with TLS 1.1 and earlier

App Engine permanently blocks insecure traffic with TLS version 1.1 and earlier. This change affects appspot.com domains and custom domains, where the connection might succeed but requests are blocked. For more information, see Secure minimum TLS .

AudienceBackend developers building serverless applications on App Engine
FeaturesTLS version 1.1 and earlier blocking, appspot.com domains, custom domains
Regions모든 리전
Preview

App Engine blocks insecure TLS traffic

App Engine now blocks traffic with TLS version 1.1 and earlier. This change affects appspot.com and custom domains, with more information available in the Secure minimum TLS documentation.

AudienceBackend developers building serverless applications on App Engine
FeaturesTLS version 1.1 and earlier blocking, appspot.com and custom domain impact, Secure minimum TLS documentation
Regions모든 리전
General Availability

App Engine standard environment Node.js blocks insecure TLS traffic

App Engine now permanently blocks insecure traffic with TLS version 1.1 and earlier. This change affects appspot.com domains at the connection level and custom domains, which may still succeed but have requests blocked. For more information, see Secure minimum TLS .

AudienceBackend developers building serverless applications on App Engine
FeaturesTLS version 1.1 and earlier blocking, appspot.com domain connection-level blocking, custom domain request blocking
Regions모든 리전
General Availability

App Engine standard environment Go blocks insecure TLS traffic

App Engine permanently blocks insecure traffic with TLS version 1.1 and earlier. This change affects appspot.com domains and custom domains, where requests are blocked even if the connection succeeds.

AudienceBackend developers building serverless applications on App Engine
FeaturesTLS version 1.1 and earlier blocking, appspot.com domain blocking, custom domain request blocking
Regions모든 리전
General Availability

App Engine blocks insecure TLS traffic

App Engine now blocks traffic with TLS version 1.1 and earlier. This change affects appspot.com and custom domains, with requests being blocked even if the connection succeeds.

AudienceBackend developers building serverless applications on App Engine
FeaturesTLS version 1.1 and earlier blocking, appspot.com and custom domain impact
Regions모든 리전
General Availability

App Engine blocks insecure TLS traffic

App Engine now permanently blocks traffic with TLS version 1.1 and earlier. This change affects appspot.com domains and custom domains, where requests may succeed but be blocked. For more information, see Secure minimum TLS .

AudienceBackend developers building serverless applications on App Engine
FeaturesTLS version 1.1 and earlier blocking, appspot.com domains, custom domains
Regions모든 리전
General Availability

App Engine standard environment Ruby blocks insecure TLS traffic

App Engine permanently blocks insecure traffic with TLS version 1.1 and earlier. This change affects appspot.com domains and custom domains, where requests may succeed but be blocked.

AudienceBackend developers building Ruby applications on App Engine
FeaturesTLS version 1.1 and earlier blocking, appspot.com domain blocking, custom domain request blocking
Regions모든 리전
General Availability

App Engine blocks insecure TLS traffic

App Engine now permanently blocks traffic with TLS version 1.1 and earlier. This change affects appspot.com domains at the connection level and custom domains, which may still succeed but have requests blocked.

AudienceBackend developers building serverless applications on App Engine
FeaturesTLS version 1.1 and earlier blocking, appspot.com domain connection-level blocking, custom domain request blocking
Regions모든 리전
General Availability

App Engine blocks insecure TLS traffic

App Engine now permanently blocks insecure traffic with TLS version 1.1 and earlier. This affects appspot.com domains and custom domains, where the connection might succeed but requests are blocked.

AudienceBackend developers building serverless applications on App Engine
FeaturesTLS 1.1 and earlier, Appspot.com domains, Custom domains
RegionsAll regions
General Availability

Application Integration Security Vulnerability Fixes

Security vulnerabilities were discovered in Application Integration, affecting Email Task and JavaScript Task components. For more information, see the corresponding security bulletins.

AudienceBackend developers using Application Integration
FeaturesSecurity patches for Confused Deputy, Deserialization of Untrusted Data, and Incorrect Authorization vulnerabilities
RegionsAll regions
General Availability

Cloud Logging: Only platform services can write log entries to billing accounts

Cloud Logging now allows only platform services to write log entries to billing accounts. These logs have names with the format billingAccounts/[BILLING_ACCOUNT_ID]/logs/[LOG_ID].

AudienceBackend developers building serverless applications on Google Cloud
Featuressupport for billing account log entries, log entry format, entries.write API
Regions모든 리전
General Availability

Compute Engine: Expose host ID for instance location verification

You can now expose the host ID of a Compute Engine instance to verify its physical location in relation to other compute instances in your Google Cloud organization. This feature is available in all regions.

AudienceBackend developers building serverless applications on Compute Engine
Featuresexpose host ID, compute instance proximity, zone optimization
Regions모든 리전
Preview

Model Armor Preview

Model Armor now supports template-specific exclusion rules to mitigate false-positive detections for prompt injection and jailbreak detection. This feature allows you to configure dictionary and regular expression rules for responsible AI filters.

AudienceBackend developers building AI models
FeaturesTemplate-specific exclusion rules, dictionary rules, regular expression rules
RegionsAll regions
Preview

Cloud Load Balancing Zonal NEG IPv6 Support

Zonal network endpoint groups (NEGs) with GCE_VM_IP and GCE_VM_IP_PORT endpoints now support IPv6-only endpoints referencing IPv6-only or dual-stack Compute Engine VM network interfaces. This feature is available in Preview, requiring developers to check the Zonal network endpoint groups overview for more information.

AudienceBackend developers building serverless applications on Google Cloud Platform
FeaturesIPv6-only endpoints, Zonal network endpoint groups, GCE_VM_IP and GCE_VM_IP_PORT endpoints
Regions모든 리전
End of Support

Cloud Monitoring Legacy Agent End of Support

The legacy Monitoring agent has reached its end of support, with standard maintenance and bug fixes ceased. Migrate to supported alternatives.

AudienceBackend developers using the legacy Monitoring agent
FeaturesLegacy Monitoring agent end of support
Regions모든 리전
General Availability

Dataform Extended Access Options and Authentication

Dataform now supports extended access options and user credentials authentication for running and scheduling workflows. This change is generally available (GA) and does not require any actions from developers.

AudienceBackend developers building data workflows on Dataform
FeaturesExtended access options, user credentials authentication, GA
Regions모든 리전
General Availability

Security Command Center: Enhanced Risk Engine

The Feature Risk Engine now detects and reports reasoning engines that can modify IAM policies and perform lateral movement, enhancing security posture. This update requires no action from developers, as it is a server-side improvement.

AudienceSecurity teams and developers using Security Command Center
Featuresenhanced risk engine, IAM policy modification detection, lateral movement detection
Regions모든 리전
General Availability

BigQuery supports Apache Iceberg managed tables

BigQuery now supports writing output rows from continuous queries directly into Apache Iceberg managed tables. This allows for continuous processing of streaming data from BigQuery and writing it into an open-format lakehouse using an INSERT DML statement.

AudienceData engineers working with BigQuery and Apache Iceberg
FeaturesContinuous query output to Apache Iceberg managed tables, Streaming data processing, Open-format lakehouse support
Regions모든 리전
General Availability

Cloud Asset Inventory: Public Resource Types

The ExportAssets, ListAssets, BatchGetAssetsHistory, QueryAssets, Feed, and Search APIs are now publicly available for the following resource types. This change affects developers using the Agent Identity API.

AudienceBackend developers building serverless applications on Google Cloud
FeaturesExportAssets, ListAssets, BatchGetAssetsHistory
Regions모든 리전
Preview

Cloud NAT Feature Preview

Cloud NAT gateways now support source-based NAT rules for IPv4 addresses in Private NAT. This feature is currently in preview and not yet available for production use.

AudienceBackend developers building serverless applications on Google Cloud
Featuressource-based NAT rules, IPv4 addresses, Private NAT
Regions모든 리전
End of Support

Cloud Service Mesh Deprecation

Cloud Service Mesh support for in-cluster ISTIOD control plane on Google Kubernetes Engine (GKE) is deprecated as of September 28, 2026, and will end on March 1, 2028. After March 1, 2028, in-cluster control plane components on GKE will not receive updates, security patches, or support from Google Cloud.

AudienceBackend developers building serverless applications on Google Kubernetes Engine
FeaturesDeprecation of in-cluster ISTIOD control plane, Transition to managed Cloud Service Mesh, End of support for managed ISTIOD control plane
RegionsAll regions
General Availability

Gemini Enterprise: Granular Access Controls

Gemini Enterprise now supports granular access controls for apps and data stores. Administrators can configure resource-level IAM permissions and custom project-level roles to restrict access to specific apps and data stores.

AudienceAdministrators and developers working with Gemini Enterprise
FeaturesIndependent resource-level permissions, custom project-level roles, data store details and permissions management
RegionsAll regions
Preview

Gemini Enterprise Agent Platform Supports Gemini 3 Models in Preview

Gemini 3 models are now supported by the Interactions API on Gemini Enterprise Agent Platform in Preview. For more information, see the Interactions API overview.

AudienceBackend developers building serverless applications on Gemini Enterprise Agent Platform
FeaturesGemini 3 models, Interactions API, Model Garden
RegionsAll regions
General Availability

Google Kubernetes Engine: Z4D Machine Series Available

The storage-optimized Z4D machine series is available with GKE clusters running 1.36.3-gke.1244000 or later. You can use Z4D machine types in Standard or Autopilot mode. For more information about limitations for this machine series in GKE, see About machine support with GKE clusters .

AudienceBackend developers building containerized applications on Google Kubernetes Engine
FeaturesZ4D machine series, Standard mode, Autopilot mode
Regions모든 리전
General Availability

Agent Platform Workbench: Security Patch Update

The Agent Platform Workbench has been updated to install the latest packages from upstream dependencies, remediating Critical and High-severity CVEs in the Workbench custom container images. This update ensures the security and stability of the Workbench.

AudienceBackend developers building serverless applications on the Agent Platform Workbench
Featureslatest packages from upstream dependencies, Critical and High-severity CVE remediation, Workbench custom container image updates
Regions모든 리전
General Availability

Cloud Product Registry API is now generally available

The Cloud Product Registry API is now generally available, serving as the authoritative source of truth for first-party Google Cloud products. This allows developers to programmatically access the official hierarchy of Product Suites, Logical Products, and Logical Product Variants.

AudienceBackend developers building serverless applications on Google Cloud
Featuresofficial hierarchy of Product Suites, Logical Products, and Logical Product Variants
RegionsAll regions
Preview

Custom URLs for Cloud Run Services

Cloud Run now supports creating custom URLs for services, eliminating the need for DNS configuration and load balancers. This feature is currently in preview.

AudienceBackend developers building serverless applications on Cloud Run
FeaturesCustom URL creation, DNS configuration elimination, load balancer elimination
Regions모든 리전
General Availability

Cloud SQL for PostgreSQL Security Update

The cloudsql.instances.export permission has been removed from Cloud SQL Viewer, Basic Reader, and Basic Viewer (Legacy) roles to improve security. To retain export capabilities, assign the Cloud SQL Editor role or update custom roles to include the cloudsql.instances.export permission.

AudienceCloud SQL administrators
Featuresremoved cloudsql.instances.export permission, updated Cloud SQL roles
Regions모든 리전
General Availability

Cloud SQL for MySQL Security Update

Cloud SQL for MySQL has removed the cloudsql.instances.export permission from Cloud SQL Viewer, Basic Reader, and Basic Viewer (Legacy) roles. To retain export capabilities, assign the Cloud SQL Editor role or update custom roles to include the cloudsql.instances.export permission.

AudienceCloud SQL administrators
FeaturesCloud SQL Viewer, Cloud SQL Editor, cloudsql.instances.export permission
RegionsAll regions
General Availability

Cloud SQL for SQL Server: Removed export permission

The cloudsql.instances.export permission has been removed from Cloud SQL Viewer, Basic Reader, and Basic Viewer (Legacy) roles to improve security. To retain export capabilities, assign the Cloud SQL Editor role or update custom roles to include the cloudsql.instances.export permission.

AudienceCloud SQL administrators
Featurescloudsql.instances.export permission removal, Cloud SQL Viewer, Cloud SQL Editor
RegionsAll regions
General Availability

Container Optimized OS: LTS Refresh and Security Updates

This release includes an LTS Refresh with updated kernel and GPU drivers, as well as security updates for CVE-2026-0864 and CVE-2026-53791-2026-53803. Developers should ensure time sync prior to TLS handshake and update their applications to use the latest NVIDIA drivers and CephFS kernel driver.

AudienceBackend developers building serverless applications on Google Cloud Platform
FeaturesUpdated Linux kernel to v6.18.51, Added support for NVIDIA driver v580.178.04, Added support for loading the CephFS kernel driver
RegionsAll regions
General Availability

Storage Transfer Service Supports Multiple Containers

Storage Transfer Service now supports transferring data from multiple containers within a Microsoft Azure Storage account in a single transfer job. This allows for more efficient data transfer and reduces the number of transfer jobs required.

AudienceBackend developers working with Microsoft Azure Storage accounts
Featuressupport for transferring data from multiple containers, single transfer job, improved data transfer efficiency
Regions모든 리전