AlloyDB for PostgreSQL Feature Direct Iceberg access in AlloyDB for PostgreSQL is available for PostgreSQL 18 and later (in Preview). This feature lets you query Apache Iceberg tables in Cloud Storage or Lakehouse runtime catalog and accelerate analytical queries using the AlloyDB columnar engine. For more information, see Access Iceberg data from AlloyDB. Feature Syncing data from BigQuery into A…
Oracle Database@Google Cloud Feature Oracle Database@Google Cloud introduces Database Connections using which you can connect to your Oracle databases and execute SQL statements. For more information, see Create Database Connections and Execute SQL statements. This feature is generally available (GA).
Model Armor Feature Support for template-specific exclusion rules in streaming sanitization (StreamSanitizeUserPrompt and StreamSanitizeModelResponse) is available in Preview. You can use dictionary and regular expression exclusion rules in buffered mode (STREAMING_MODE_BUFFERED) with partial or full matching, and in real-time mode (STREAMING_MODE_REALTIME) with partial matching, to mitigate false…
Google SecOps SOAR Announcement Release 6.3.105 is being rolled out to the first phase of regions as listed here. This release contains internal and customer bug fixes.
Google SecOps Feature Basic Mode search This feature is in public preview. The SIEM Search page now provides two search-execution modes: Basic Mode and Advanced Mode. Basic Mode (the default option) uses a streamlined, fast-path execution pipeline that bypasses secondary enrichment steps during search execution. This approach reduces end-to-end search wait times while preserving full data fidelity…
Backup and DR Feature You can now edit existing backup plans for Cloud SQL instances to update settings such as backup rules and maximum custom on-demand retention periods. To learn more, see Back up Cloud SQL instances to a backup vault. Bigtable Feature You can use Knowledge Catalog to discover authorized views, logical views, and continuous materialized views. This integration lets you search f…
Anti Money Laundering AI Announcement New minor engine version released for the retail line of business within the v004.011 version line (aml-retail.default.v004.011.202610-000). This version extends support for the major engine version and includes no significant changes compared to the previous minor version. Model Armor Feature Model Armor is available in Brazil (southamerica-east1). This regio…
Application Integration Feature Application Integration agent skills Application Integration agent skills are available in the public google/skills repository: application-integration-basics, application-integration-authoring, and application-integration-troubleshooting. AI coding agents that use these skills can help you set up Application Integration; build, publish, and run integrations through…
AlloyDB for PostgreSQL Announcement The following AlloyDB AI functions and improvements are available in Preview: The ai.extract function lets you extract structured data from unstructured text directly within your database queries without needing external extraction pipelines. For more information, see Extract structured data. The ai.classify function lets you categorize unstructured text into pr…
Model Armor Feature Model Armor enforces the constraints/modelarmor.managed.requireTemplateDataResidencyCompliance managed Organization Policy Service constraint by default. When you create or update a template, this constraint prevents you from setting data_residency_compliant to false or clearing the Enforce data residency option unless an Organization Policy Administrator disables the constrain…
Google SecOps SOAR Announcement Release 6.3.104 is being rolled out to the first phase of regions as listed here. This release contains internal and customer bug fixes.
App Engine flexible environment Go Security The following runtime language contains important security updates: Go 1.24 and later: 1.24.13, 1.25.14, 1.26.10, 1.27.3 The following stacks and their underlying operating system packages have also been updated: google-22, google-22-full google-24, google-24-full Take immediate protective action by rebuilding and redeploying your resources with updated…
Cloud Monitoring Fixed Ops Agent version 2.73.0 includes patches for a Go vulnerability involving system root certificates, CVE-2026-111943. For more information, see Ops Agent 2.73.0 notes.
Compute Engine Feature You can view how a managed instance group (MIG) distributes its instances across zones and machine types, directly from the MIG's Monitoring tab in the Google Cloud console. For more information, see Monitor instance distribution in MIGs.
Model Armor Feature You can use custom organization policies to ensure that all new or updated Model Armor Template resources enforce required filters, like responsible AI or prompt injection and jailbreak detection. This feature is generally available (GA). For more information, see Use custom organization policies.
Cloud SDK Breaking 590.0.0 (2026-10-20) Breaking Changes (Google Cloud CLI) Removed the gcloud-man-pages component. Use --help for full command documentation. (App Engine) Removed the app-engine-grpc component from the Google Cloud CLI. (Cloud Build) Removed the Cloud Build Local Builder component (cloud-build-local) from the Google Cloud CLI. Google Cloud CLI Updated bundled Python on Linux and W…
Compute Engine Feature Generally available: To prevent data loss or corruption when you stop or delete a Compute Engine instance, you can enable graceful shutdown. This setting gives the guest OS up to six hours to finish running tasks. For more information, see About graceful shutdown. Google Cloud Armor Security Security fixes and enhancements to Cloud Armor preconfigured WAF v33-stable rulesets…
Google SecOps Feature Specify whether to reopen closed cases when the grouping is by Source Grouping Identifier You can now specify whether Google SecOps reopens closed cases when grouping SOAR alerts by Source Grouping Identifier. When the option is enabled and a new alert is received with a source grouping identifier of a case that was previously closed in Google SecOps, then Google SecOps reope…
Google SecOps SOAR Announcement Release 6.3.102 is now available for all regions.
Dialogflow Feature gemini-3.5-flash-lite has become generally available (GA). See Generative quotas for how to request quota for Gemini 3 and later models. Gemini Enterprise Feature Gemini Enterprise: Connect workflows in Workflow Builder to Confluence Data Center and Jira Data Center You can connect workflows in Workflow Builder to Confluence Data Center and Jira Data Center to search data and au…
Apigee Edge for Public Cloud Announcement On October 15, 2026, we began releasing Single Sign-On (SSO) updates for Apigee Edge for Public Cloud. Fixed Bug ID Component Description 560310696 SSO Fixed an issue where the Portal SSO endpoint inadvertently accepted deprecated TLS 1.1 connections. The endpoint now strictly enforces TLS 1.2+. Apigee Integrated Portal Announcement On October 15, 2026, we…
Application Integration Security An Incorrect Authorization vulnerability in the AuthConfig validation and integration execution runtime in Application Integration versions prior to August 27, 2026. For more information, see the GCP-2026-068 security bulletin. Certificate Manager Change Google-managed public SSL certificates signed by Google Public CA (pki.goog) are gradually transitioning from a…
BigQuery Feature The AI.AGG function is generally available (GA). You can use this function to semantically aggregate unstructured input data based on natural language instructions. Cloud Billing Feature Spend cap budgets are now generally available for a limited set of services For eligible services, you can configure a spend cap budget to automatically pause usage when your estimated spend excee…
Google SecOps Announcement The deadline for the migration of SOAR APIs to the Chronicle API has been extended from November 30, 2026 until March 31, 2027. For more information, refer to SOAR Migration overview Google SecOps SOAR Announcement The deadline for the migration of SOAR APIs to the Chronicle API has been extended from November 30, 2026 until March 31, 2027. For more information, refer to…
Agent Platform Workbench Change 20261011-2230-rc0 Release Change 20261011-2230-rc0 Release Change Installed latest packages from upstream dependencies. Fixed Fixed an issue where gcloud and gsutil failed to load with an AttributeError in OpenSSL.crypto due to a version mismatch between pyOpenSSL and cryptography. Fixed Fixed an issue where gcloud and gsutil failed to load with an AttributeError in…
Cloud SQL for MySQL Change MySQL 8.0.46 is now the default minor version for Cloud SQL for MySQL 8.0. For more information about minor version support in Cloud SQL for MySQL, see MySQL 8.0.
Datastream Feature Datastream now supports replicating SQL Server GEOMETRY and GEOGRAPHY spatial data types. For more information, see the following: Map SQL Server data types to Datastream unified types Data type mappings in BigQuery Google Cloud Managed Service for Apache Kafka Change The format for bootstrap addresses and broker URLs has changed for new Managed Service for Apache Kafka clusters…
Cloud SQL for MySQL Feature Cloud SQL for MySQL supports blue-green deployments (Preview). Blue-green deployments let you update databases—such as performing major version upgrades from MySQL 8.0 to 8.4 and staging hardware or configuration modifications—while minimizing downtime. During a blue-green deployment, Cloud SQL creates a separate staging environment (green) that mirrors your existing pr…
Apigee hybrid Announcement v1.14.9 On October 7, 2026 we released an updated version of the Apigee hybrid software, v1.14.9. For information on upgrading, see Upgrading Apigee hybrid to version v1.14.9. For information on new installations, see The big picture. Note: This is a patch release: The container images used in patch releases are integrated with the Apigee hybrid Helm charts. Upgrading to…
Cloud Monitoring Feature Bulk registration of discovered services and workloads to an App Hub application is generally available (GA). For more information, see Register one or more discovered services or workloads. Gemini Enterprise Agent Platform Feature Gemini Nano Banana 2.1 Gemini Nano Banana 2.1 (gemini-nano-banana-2.1) is available in General Availability (GA). Gemini Nano Banana 2.1 is opt…