Everything Google Cloud Shipped This Week, Ranked

The week in one paragraph

A mid-sized week with two things in it that have dates attached, which is unusual and is where to start. App Engine begins forcing TLS 1.2 and later, and the opt-out closes at the end of this month. Cloud Hub's App Topology API moves to usage-based billing on 15 September. Everything else is additive: flexible committed use discounts finally reach the G2 and G4 GPU families, Cloud SQL for MySQL 9.7 goes GA, Security Command Center's Vulnerability Assessment goes GA, and Sensitive Data Protection learns to recognise Anthropic, Gemini and OpenAI API keys everywhere. Volume was concentrated on Tuesday, which alone carried 82 of the week's 176 notes.

Cost and commitments

Flexible CUDs now cover G2 and G4. Compute flexible committed use discounts became generally available for the G2 and G4 GPU accelerator-optimized machine series. This is the week's most consequential item for anyone with steady GPU spend: flexible CUDs commit to an hourly spend rather than to a specific machine shape, so a workload that moves between GPU types keeps the discount. Until now the GPU families were the gap in that story.

Cloud Hub App Topology moves to usage-based billing on 15 September. A daily free data allotment is included. The change is small in absolute terms and easy to miss entirely, which is exactly why it belongs at the top rather than in a footnote.

Carbon Footprint changed its methodology. Google is now using Granular Certificates purchased from the marketplace to match energy consumption. If you report cloud emissions to anyone, the numbers underneath your report moved this week.

Security and identity

Sensitive Data Protection now detects LLM API keys in all regions. The ANTHROPIC_API_KEY, GEMINI_API_KEY and OPENAI_API_KEY infoType detectors are available everywhere. This is the cheapest win in the week: model API keys have been leaking into logs, prompts and source repositories for two years, and there is now a built-in detector for them rather than a custom regex somebody has to maintain.

Security Command Center: Vulnerability Assessment for Google Cloud went GA, and its integration with Application Design Center for application lifecycle security assessments went GA alongside it. AI Protection also gained data residency in Saudi Arabia across all Security Command Center tiers.

VPC Service Controls got a recommender, in Preview. It suggests optimisations to existing service perimeters. Perimeters are the control on Google Cloud that is most often misconfigured into either uselessness or an outage, and until now there was no tooling that would tell you which one yours was closer to.

IAM added Organization Policy custom constraints for Agent Identity resources, giving field-level control over agent identities — governance arriving alongside the agent tooling rather than a year behind it. Separately, the console workflow for creating workforce identity pool providers changed: the provider is now created before you finish configuring it, which affects anyone with a written runbook for that screen.

Data and analytics

Cloud SQL for MySQL 9.7 is generally available. The one item this week that most estates will eventually have to act on, and the one with the longest tail of testing behind it.

Bigtable added parameterized views, which filter data ranges for logical views based on application context and are explicitly positioned as mitigating SQL injection — a notable framing for a NoSQL store that now speaks enough SQL to have the problem. It also added a CLUSTER_ATTRIBUTE() filter to confine continuous materialized view processing to specific clusters.

Memorystore for Valkey made migration from self-managed Redis and Valkey on Google Cloud generally available, and added basic token authentication in Preview.

Firestore and Firestore in Datastore mode reached asia-southeast3 (Bangkok), and Spanner made dynamic channel pooling GA in the Go and Java clients, which removes a class of gRPC channel performance problem people used to solve by hand. Dataform workflows and BigQuery pipelines gained automated metadata enrichment.

Compute, containers and runtimes

App Engine's TLS change is the deadline item. Starting this month App Engine opts applications into TLS 1.2 and later, across both standard and flexible environments and every runtime — the same note was published six times, once per runtime. Opt-out closes at the end of August.

The Cloud Run functions upgrade tool went GA, for moving 1st gen functions to Cloud Run functions. If you still run 1st gen, the supported path off it is now a supported tool rather than a manual rewrite.

Cloud Run picked up NVIDIA L4 GPU driver 580.x.x for services, jobs and worker pools. Cloud Workstations gained Compute Engine suspend and resume in Preview, so a workstation can suspend at its idle timeout instead of shutting down — faster resume, and the state survives. GKE shipped its 2026-R33 version updates across channels, and Google Distributed Cloud released 1.35.400-gke.81 for both VMware and bare metal.

AI and agents

Gemini 3.7 Flash reached general availability in the global, us and eu regions, in both Gemini Enterprise and the Agent Platform. It is not yet in the Gemini Enterprise mobile app, which Google called out explicitly. Vertex AI Search can now generate Agent Search answers with Gemini 3.5 Flash.

Gemini Enterprise had the busiest week of any product here: custom skills you can create, upload and share; a GitHub connector with data federation at GA; spend limits and overage management for invoiced billing accounts; CSV export of user data; and the AlphaEvolve HPC solution for distributed containerised workloads. Apigee API hub added gcloud commands to configure and deploy MCP servers, and Cloud Trace now generates spans automatically for tools/call operations on several remote MCP servers — observability for agent tool calls arriving as a platform feature.

Networking and operations

Connectivity Tests can now use a Cloud Run job as a source endpoint, closing a real gap: testing reachability *from* serverless compute previously meant inferring it. Eventarc triggers for Cloud Run destinations can now specify a single delivery attempt with no retries, which matters for any handler that is not idempotent. Cloud Trace generates exemplars for SQL-backed custom dashboard charts, and Error Reporting now accepts Rust stack traces via std::backtrace with RUST_BACKTRACE=1.

The routine remainder

Of the week's 169 distinct changes, 89 were routine version and image notes that are listed here as a group rather than individually, because itemising them would bury everything above:

• 65 Container-Optimized OS image notes — CVE fixes and package bumps across image families. Relevant if you pin COS images; otherwise they arrive on their own.
• 12 GKE version-update notes — the 2026-R33 rollout across Rapid, Regular and Stable channels.
• 12 Google SecOps Marketplace integration updates — version bumps to CrowdStrike Falcon, Microsoft Graph Mail, Microsoft 365 Defender, Cisco Umbrella, Active Directory and others. Several add real actions rather than fixes; Microsoft Graph Mail gained Block Domain, Block Sender and inbox-rule management.

What I would act on

1. Check whether anything you run on App Engine still needs TLS below 1.2, this month. The opt-out closes at the end of August. This is the only item in the week where inaction has a deadline and a failure mode.
2. Find out whether you call the Cloud Hub App Topology API. Billing changes on 15 September. A daily free allotment covers light use, but polling it on a schedule is now metered.
3. If you have steady G2 or G4 GPU spend, re-run the commitment maths. Flexible CUDs on those families are new this week, and flexible commitments survive a change of machine shape in a way resource-based ones do not.
4. Turn on the LLM API key detectors in Sensitive Data Protection. Three new infoTypes, available in every region, covering the credential most likely to be sitting in a log or a prompt right now. This is an afternoon's work with a disproportionate payoff.
5. If you still run 1st gen Cloud Functions, try the upgrade tool now that it is GA. Not urgent this week, but the path is now supported and the tooling will not get better by waiting.

Complete inventory — all 226 notes

How this inventory reconciles

Google Cloud published 226 notes across 69 products and 5 days in this window, read from 4 feeds. Every one of them is accounted for below, in exactly one place:

Repeating runs, rolled up

• Container Optimized OS (48 notes) — Security48 notes, across 3 releases (cos-117-18613-675-48, cos-121-18867-528-58, cos-dev-138-20035-0-0). They fix 28 distinct CVEs. A CVE is patched once per release, so the note count is higher than the CVE count — these are separate notes, not duplicates, and are counted as such: CVE-2026-58055, CVE-2026-64227, CVE-2026-64279, CVE-2026-64286, CVE-2026-64287, CVE-2026-64319, CVE-2026-64352, CVE-2026-64375, CVE-2026-64401, CVE-2026-64413, CVE-2026-64416, CVE-2026-64474, CVE-2026-64476, CVE-2026-64508, CVE-2026-64530, CVE-2026-64532, CVE-2026-64533, CVE-2026-64534, CVE-2026-64535, CVE-2026-64538, CVE-2026-64542, CVE-2026-64545, CVE-2026-64546, CVE-2026-64548, CVE-2026-64552, CVE-2026-64554, CVE-2026-64555, CVE-2026-64556.
• Google Kubernetes Engine (12 notes) — Change12 notes. 4 distinct texts, each repeated once per release and counted individually:
  • (2026-R33) Version updates GKE cluster versions have been updated. New versions available for upgrades and new clusters. The following versions are now availabl…
  • (2026-R33) Version updates Note : Your clusters might not have these versions available. Rollouts are already in progress when we publish the release notes, and…
  • (2026-R34) Version updates GKE cluster versions have been updated. New versions available for upgrades and new clusters. The following versions are now availabl…
  • (2026-R34) Version updates Note : Your clusters might not have these versions available. Rollouts are already in progress when we publish the release notes, and…

One change, published under several products

• FeatureTo improve security, starting in August 2026, App Engine opts your application into TLS version 1.2 and later. You can opt out until the end of August 2026. Sta…Published under 14 products: App Engine flexible environment .NET, App Engine flexible environment Go, App Engine flexible environment Java, App Engine flexible environment Node.js, App Engine flexible environment PHP, App Engine flexible environment Python, App Engine flexible environment Ruby, App Engine flexible environment custom runtimes, App Engine standard environment Go, App Engine standard environment Java, App Engine standard environment Node.js, App Engine standard environment PHP, App Engine standard environment Python, App Engine standard environment Ruby.
• AnnouncementScheduled Maintenance SOAR database and infrastructure maintenance is scheduled to take place during the standard maintenance window on Sunday, August 16. Durin…Published under 2 products: Google SecOps, Google SecOps SOAR.
• FeatureAgent Identity is generally available (GA) .Published under 2 products: Access Approval, Access Transparency.
• Feature[Spotlight Feature] Analyze feed activity with Cloud Logging This feature is in public preview. To use this feature, your Google SecOps instance must be configu…Published under 2 products: Google SecOps, Google SecOps SIEM.
• FeatureDatastream is generally available (GA) .Published under 2 products: Access Approval, Access Transparency.
• FeatureThe Cloud SQL remote MCP server now supports specialized endpoint URLs (toolsets) for /readonly , /instance_manage , and /query_execution . Specialized toolset…Published under 2 products: Cloud SQL for MySQL, Cloud SQL for PostgreSQL.
• FeatureYou can now use the create_instance tool in the Cloud SQL remote MCP server to provision free trial instances for testing and development by setting the free_tr…Published under 2 products: Cloud SQL for MySQL, Cloud SQL for PostgreSQL.
• FeatureWhen executing SQL queries using the execute_sql or execute_sql_readonly tool, setting the sql_commenter_enabled parameter to true automatically appends sqlcomm…Published under 2 products: Cloud SQL for MySQL, Cloud SQL for PostgreSQL.

Everything else, by product

Apigee API hub — 1

• FeatureConfigure and deploy MCP servers with gcloud CLI You can use the gcloud apihub locations configure-and-deploy-server command to configure and deploy API hub Mod…Wed 12 Aug

Apigee X — 4

• AnnouncementOn August 13th, 2026, we began maintenance updates of Apigee instances configured for maintenance windows . If you set a preferred window for maintenance for yo…Thu 13 Aug
• AnnouncementOn August 13th, 2026, we released an updated version of Apigee (1-18-0-apigee-3). Note: Rollouts of this release began today and may take four or more business…Thu 13 Aug
• FixedBug ID Description 532147587 To fix forward proxy support. 537657987 Fixed a bug where watcher failed to reconcile all routes if an environment was not found in…Thu 13 Aug
• SecurityBug ID Description 535928300 Security fix for Apigee. Fixed a security issue in JWT refresh token revocation handling. 539515020 Security fix for Apigee. Fixed…Thu 13 Aug

Apigee hybrid — 3

• Announcementv1.16.9 On August 11, 2026 we released an updated version of the Apigee hybrid software, v1.16.9. For information on upgrading, see Upgrading Apigee hybrid to v…Tue 11 Aug · v1.16.9
• FixedFixed in this release Bug ID Description 514973778 Fixed an issue where the SanitizeUserPrompt and SanitizeModelResponse policies failed to tolerate unknown fie…Tue 11 Aug · v1.16.9
• SecurityVarious security and CVE fixes are included in this release.Tue 11 Aug · v1.16.9

Backup and DR — 1

• FeatureYou can now configure scheduled, application-consistent backups and point-in-time recovery (PITR) workflows for self-managed databases (including IBM Db2, SAP H…Thu 13 Aug

BigQuery — 4

• FeatureBigQuery now supports the gemini-3.1-flash-lite and gemini-3.5-flash GA models, which are available for the us , eu , and global multi-regional endpoints. You c…Mon 10 Aug
• FeatureQuery templates for data clean rooms are generally available (GA). Query templates allow data clean room owners and publishers to share predefined queries witho…Tue 11 Aug
• AnnouncementTable Explorer behavior has moved to the Reference panel. Table Explorer has been deprecated. For more information, see "Use the Reference panel" in Run a query…Wed 12 Aug
• FeatureBigQuery pipelines now support automated metadata enrichment, allowing you to define semantic metadata directly in SQLX configurations for synchronization with…Thu 13 Aug

Bigtable — 3

• LibrariesGo 1.52.0 (2026-08-03) Features bigtable: Add AFE picker (Simple / LeastInFlight / LeastLatency) ( #20204 ) ( bcbf714 ) bigtable: Add ClientConfig.DisableSessio…Mon 10 Aug
• FeatureYou can use parameterized views in Bigtable to dynamically filter data ranges for logical views based on application context and mitigate SQL injection risks. T…Wed 12 Aug
• FeatureYou can use the CLUSTER_ATTRIBUTE() filter to restrict continuous materialized view processing to specific clusters. This function lets you isolate views within…Wed 12 Aug

Carbon Footprint — 1

• AnnouncementAs detailed in our 2026 Environmental Report (p. 22) , Google is now using Granular Certificates purchased from the marketplace to strategically match more of o…Fri 14 Aug

Cloud Hub — 1

• AnnouncementStarting September 15, 2026, the App Topology API transitions to a usage-based billing model that includes a daily free data usage allotment. For more informati…Mon 10 Aug

Cloud Logging — 1

• AnnouncementThe Telemetry API for logs ingestion is generally available (GA) . You can ingest OTLP logs into Cloud Logging by using an OpenTelemetry Collector, an OTLP expo…Fri 14 Aug

Cloud Run — 1

• FeatureCloud Run NVIDIA L4 GPU driver version 580.x.x is available for services , jobs , and worker pools .Tue 11 Aug

Cloud Run functions — 1

• FeatureThe Cloud Run functions upgrade tool is in General Availability . Use this tool to upgrade 1st gen functions to Cloud Run functions.Mon 10 Aug

Cloud SQL for MySQL — 1

• FeatureCloud SQL for MySQL 9.7 is generally available ( GA ). For more information about the differences between MySQL 9.7 and previous versions, review the MySQL 9.7…Thu 13 Aug · Flag

Cloud SQL for SQL Server — 2

• FeatureYou can now use the update_user tool in the Cloud SQL remote MCP server to update passwords for Cloud SQL for SQL Server database users. For more information, s…Tue 11 Aug
• FeatureThe Cloud SQL remote MCP server now supports specialized endpoint URLs (toolsets) for /readonly and /instance_manage . Specialized toolset URLs let you restrict…Tue 11 Aug

Cloud Trace — 2

• FeatureThe following remote MCP servers automatically generate a trace span for tools/call operations. These spans can help you understand the behavior of your agentic…Wed 12 Aug
• FeatureGoogle Cloud Observability automatically generates trace exemplars for charts on custom dashboards that display the result of a SQL query when the query runs ag…Wed 12 Aug

Cloud Workstations — 1

• FeatureCloud Workstations supports Compute Engine suspend and resume in Preview. You can configure workstation VMs to suspend when they reach their idle timeouts, refe…Wed 12 Aug

Cluster Toolkit — 1

• FeatureCluster Toolkit v1.100.0 is available. This release adds the --gke-namespace flag to enable namespace-aware operations, enables sauth by default in the Slurm mo…Thu 13 Aug

Compute Engine — 4

• FeatureGenerally available : Compute flexible committed use discounts (CUDs) are available for G2 and G4 GPU accelerator-optimized machine series. The supported resour…Tue 11 Aug
• SecurityA vulnerability (CVE-2026-6726) in the Trusted Computing Group's TPM 2.0 reference implementation code was discovered and is being addressed. For more informati…Tue 11 Aug
• FeatureGenerally available : The U4 Ultra Low Latency (ULL) network-optimized machine family is generally available with allowlist for ULL Solution customers. Designed…Wed 12 Aug
• FeatureGenerally available : You can use zonal and global extension policies in VM Extension Manager to automatically install and manage extensions, such as the Ops Ag…Fri 14 Aug

Confidential Space — 1

• AnnouncementA new Confidential Space image (260701) is available.Mon 10 Aug

Confidential VM — 1

• SecurityA vulnerability affecting Intel TDX firmware was discovered and is being addressed. For more information, see the GCP-2026-053 security bulletin .Tue 11 Aug

Container Optimized OS — 17

• Changecos-beta-133-19999-0-28 Kernel Docker Containerd GPU Drivers COS-6.18.39 v29.4.3 v2.3.2 See ListTue 11 Aug · cos-beta-133-19999-0-28
• Changecos-129-19506-299-116 Kernel Docker Containerd GPU Drivers COS-6.12.94 v27.5.1 v2.2.6 See ListTue 11 Aug · cos-129-19506-299-116
• Changecos-dev-138-20035-0-0 Kernel Docker Containerd GPU Drivers COS-6.18.41 v29.4.3 v2.3.2 See ListTue 11 Aug · cos-dev-138-20035-0-0
• ChangeRuntime sysctl changes: Changed: net.ipv4.udp_mem: 188034 250714 376068 -> 188034 250715 376068Tue 11 Aug · cos-dev-138-20035-0-0
• Changecos-121-18867-528-58 Kernel Docker Containerd GPU Drivers COS-6.6.143 v27.5.1 v2.0.10 See ListTue 11 Aug · cos-121-18867-528-58
• Changecos-117-18613-675-48 Kernel Docker Containerd GPU Drivers COS-6.6.143 v24.0.9 v1.7.34 See ListTue 11 Aug · cos-117-18613-675-48
• FeatureAdded support for installing the Vast 4.5.8 NFS client drivers with cos-dkms.Tue 11 Aug · cos-dev-138-20035-0-0
• FeatureAdded support for installing the Vast 4.5.8 NFS client drivers with cos-dkms.Tue 11 Aug · cos-dev-138-20035-0-0
• FixedAdded kernel patch to reduce bcache garbage collection sleep interval to prevent I/O stalls.Tue 11 Aug · cos-dev-138-20035-0-0
• FixedAdded kernel patch to reduce bcache garbage collection sleep interval to prevent I/O stalls.Tue 11 Aug · cos-dev-138-20035-0-0
• FixedFixed CVE-2026-33186 in google-guest-agent.Tue 11 Aug · cos-dev-138-20035-0-0
• FixedAdded kernel patch to reduce bcache garbage collection sleep interval to prevent I/O stalls.Tue 11 Aug · cos-dev-138-20035-0-0
• FixedMask nfttables-restore.service to address time to ssh regression.Tue 11 Aug · cos-dev-138-20035-0-0
• FixedMask nfttables-restore.service to address time to ssh regression.Tue 11 Aug · cos-dev-138-20035-0-0
• FixedUpdated app-admin/node-problem-detector to v0.8.25.Tue 11 Aug · cos-dev-138-20035-0-0
• FixedUpdate dev-lang/go to 1.25.12.Tue 11 Aug · cos-121-18867-528-58
• FixedUpdate dev-lang/go to 1.25.12.Tue 11 Aug · cos-117-18613-675-48

Cortex Framework — 4

• AnnouncementRelease 7.0.2Tue 11 Aug · Release
• FixedResolved security vulnerabilities in transitive dependencies by updating the following corresponding direct dependencies: google-auth , google-cloud-bigquery ,…Tue 11 Aug · Release
• AnnouncementRelease 7.0.3Fri 14 Aug · Release
• FixedResolved an issue where SapBdcProductBuilder incorrectly enforced SAP-versioned sections (ecc, s4, common) in table_settings .Fri 14 Aug · Release

Data Studio — 7

• AnnouncementThe following features are rolling out over the next week.Thu 13 Aug
• FeatureFullscreen charts You can view individual charts in fullscreen mode. Click the fullscreen button in the chart header to expand the chart. This feature is not av…Thu 13 Aug
• FeatureRotate components You can rotate text boxes, images, and shapes in Data Studio. Report creators can rotate these components on a non-responsive canvas and can r…Thu 13 Aug
• FeatureCenter labels on stacked bar charts You can position labels in the center of stacked bar charts. If insufficient space is available to center the label within t…Thu 13 Aug
• FeatureSearch for settings You can search for settings in the Setup and Style tabs of the properties panel .Thu 13 Aug
• FeatureCopy chart as image You can copy a chart as a PNG image to your clipboard.Thu 13 Aug
• FeatureBubble chart border color You can modify the border color of bubbles in bubble charts.Thu 13 Aug

Dataform — 1

• FeatureDataform workflows and BigQuery pipelines now support automated metadata enrichment for BigQuery tables and views, allowing you to define semantic metadata dire…Thu 13 Aug

Developer Connect — 2

• AnnouncementDeveloper Connect insights is now generally available .Fri 14 Aug
• FeatureVPC Service Controls support for Developer Connect is generally available . For instructions on using this feature, see Using VPC Service Controls .Fri 14 Aug

Error Reporting — 1

• AnnouncementError Reporting can report stack traces collected from Rust applications using std::backtrace . To enable, set the RUST_BACKTRACE=1 environment variable and mak…Thu 13 Aug

Eventarc — 1

• ChangeWhen configuring Eventarc triggers for Cloud Run destinations (including Cloud Run functions), you can specify a single delivery attempt with no retries. For mo…Mon 10 Aug

Firestore — 1

• FeatureFirestore now supports the asia-southeast3 Bangkok region. For a full list of supported locations, see Locations .Tue 11 Aug

Firestore in Datastore mode — 1

• FeatureFirestore in Datastore mode (Datastore) now supports the asia-southeast3 Bangkok region. For a full list of supported locations, see Locations .Tue 11 Aug

Gemini — 1

• OtherBug fixes in VS Code Various bug fixes and minor product enhancements.Mon 10 Aug · Bug

Gemini Enterprise — 9

• FeatureGemini Enterprise: Export user data to a CSV file Gemini Enterprise administrators can export user data to a comma-separated values (CSV) file to sort, filter,…Mon 10 Aug
• FeatureGemini Enterprise: New data stores and support for new actions (Public Preview) The following data stores are available in Public Preview in Gemini Enterprise:…Tue 11 Aug
• FeatureGemini Enterprise: Manage overages, spend limits, and costs for invoiced Cloud Billing accounts If your project has an invoiced Cloud Billing account and at lea…Tue 11 Aug
• FeatureGemini Enterprise: GitHub connector with data federation The GitHub connector with data federation is generally available (GA) in Gemini Enterprise. The connect…Wed 12 Aug
• FeatureGemini Enterprise: AlphaEvolve HPC solution The AlphaEvolve HPC solution provides a distributed, containerized infrastructure for running large-scale evolutiona…Wed 12 Aug
• AnnouncementGemini Enterprise: Gemini 3.7 Flash availability in mobile app Gemini 3.7 Flash is not available in the Gemini Enterprise mobile app. A new release note will be…Thu 13 Aug
• FeatureGemini Enterprise: Create, upload, and share custom skills Skills are reusable custom instructions that help the Gemini Enterprise assistant perform specific ta…Thu 13 Aug
• FeatureGemini Enterprise: Use Gemini 3.7 Flash Gemini 3.7 Flash is generally available (GA) in the global , us , and eu regions. To make Gemini 3.7 Flash available to…Thu 13 Aug
• FeatureGemini Enterprise: Gemini 3.7 Flash available in the mobile app Gemini 3.7 Flash is generally available (GA) in the Gemini Enterprise mobile app. Mobile app use…Fri 14 Aug

Gemini Enterprise Agent Platform — 3

• FeatureCodeMender CLI: Sandbox enabled by default This release updates the CodeMender CLI default behavior: Sandbox enabled by default : The CLI now runs commands insi…Wed 12 Aug
• FeatureGemini 3.7 Flash is generally available Gemini 3.7 Flash is now generally available (GA) and available for production use. This model is our first model to enab…Thu 13 Aug
• FeatureAgent Runtime: ADK telemetry metrics Agents deployed to Agent Runtime with Agent Development Kit (ADK) 2.6.0 or later can emit gen_ai application metrics that f…Thu 13 Aug

Google Cloud Contact Center as a Service — 1

• AnnouncementGoogle Cloud CCaaS 6.0 We've released version 6.0 of Google Cloud CCaaS. Version 6.0 updates internal Google Cloud CCaaS infrastructure. It contains no customer…Mon 10 Aug

Google Distributed Cloud (software only) for VMware — 2

• AnnouncementGoogle Distributed Cloud (software only) for VMware 1.35.400-gke.81 is now available for download. To upgrade, see Upgrade clusters . Google Distributed Cloud 1…Tue 11 Aug
• FixedThe following issues were fixed in 1.35.400-gke.81: Link to Vulnerability fixes for the list of security vulnerabilities addressed in this release. Fixed an iss…Tue 11 Aug

Google Distributed Cloud (software only) for bare metal — 2

• AnnouncementGoogle Distributed Cloud (software only) for bare metal 1.35.400-gke.81 is now available for download. To upgrade, see Upgrade clusters . Google Distributed Clo…Tue 11 Aug
• FixedThe following issues were fixed in 1.35.400-gke.81: Link to Vulnerability fixes for the list of security vulnerabilities addressed in this release.Tue 11 Aug

Google Kubernetes Engine — 12

• Extended channelNote : Your clusters might not have these versions available. Rollouts are already in progress when we publish the release notes, and can take multiple days to…Wed 12 Aug
• No channel (deprecated)Note : Your clusters might not have these versions available. Rollouts are already in progress when we publish the release notes, and can take multiple days to…Wed 12 Aug
• Rapid channelNote : Your clusters might not have these versions available. Rollouts are already in progress when we publish the release notes, and can take multiple days to…Wed 12 Aug
• Regular channelNote : Your clusters might not have these versions available. Rollouts are already in progress when we publish the release notes, and can take multiple days to…Wed 12 Aug
• Security(2026-R33) Security updates This release includes new GKE versions that use updated Container-Optimized OS images. These updated images are cumulative, incorpor…Wed 12 Aug
• Stable channelNote : Your clusters might not have these versions available. Rollouts are already in progress when we publish the release notes, and can take multiple days to…Wed 12 Aug
• Extended channelNote : Your clusters might not have these versions available. Rollouts are already in progress when we publish the release notes, and can take multiple days to…Fri 14 Aug
• No channel (deprecated)Note : Your clusters might not have these versions available. Rollouts are already in progress when we publish the release notes, and can take multiple days to…Fri 14 Aug
• Rapid channelNote : Your clusters might not have these versions available. Rollouts are already in progress when we publish the release notes, and can take multiple days to…Fri 14 Aug
• Regular channelNote : Your clusters might not have these versions available. Rollouts are already in progress when we publish the release notes, and can take multiple days to…Fri 14 Aug
• Security(2026-R34) Security updates This release includes new GKE versions that use updated Container-Optimized OS images. These updated images are cumulative, incorpor…Fri 14 Aug
• Stable channelNote : Your clusters might not have these versions available. Rollouts are already in progress when we publish the release notes, and can take multiple days to…Fri 14 Aug

Google SecOps — 1

• Feature[Spotlight Feature] Monitor your data latency with the Health Hub This feature is in public preview. The Health Hub now includes two new tables to track the ing…Fri 14 Aug

Google SecOps Marketplace — 12

• ChangeActive Directory : Version 45.0 Fixed an issue in the following action where entity properties were incorrectly reset on update: Enrich EntitiesWed 12 Aug
• ChangeAWS WAF : Version 14.0 Updated integration dependencies.Wed 12 Aug
• ChangeCisco Umbrella : Version 21.0 Fixed an issue in the following action where entity attachment failed due to a bytes object serialization error: Get Domain Securi…Wed 12 Aug
• ChangeCrowdStrike Falcon : Version 81.0 Added the ability to use device IDs as input parameters in the following actions: Hide Hosts Contain Endpoint Download File Ex…Wed 12 Aug
• ChangeEnrichment Fixed an issue in the following action where unsupported entity types were selected during enrichment: WhoisWed 12 Aug
• ChangeGitSync Fixed an issue in the following action where the Include Playbook Blocks parameter was ignored when a folder allowlist was used: Push PlaybookWed 12 Aug
• ChangeMicrosoft 365 Defender : Version 30.0 Added support for GCC High tenants by dynamically constructing API token scopes and adding a configurable API Root paramet…Wed 12 Aug
• ChangeMicrosoft Graph Mail : Version 45.0 Fixed an issue in the following action where an unhandled exception occurred when a user mailbox was not found: Get Mailbox…Wed 12 Aug
• ChangeMicrosoft Graph Mail Delegated : Version 22.0 Fixed an issue in the following action where an unhandled exception occurred when a user mailbox was not found: Ge…Wed 12 Aug
• FeatureCyberArk Credential Provider : Version 5.0 The following new job has been added: Sync Integration Credentials JobWed 12 Aug
• FeatureMicrosoft Graph Mail : Version 45.0 The following new actions have been added: Block Domain Block Sender Delete Inbox Rules List Rules Remove Block Domain Remov…Wed 12 Aug
• FeatureMicrosoft Graph Mail Delegated : Version 22.0 The following new actions have been added: Block Domain Block Sender Delete Inbox Rules List Rules Remove Block Do…Wed 12 Aug

Identity and Access Management — 3

• ChangeThe workflow for creating workforce identity pool providers in the Google Cloud console changed. After submitting the initial provider configuration, the consol…Wed 12 Aug
• FeatureYou can use custom constraints with Organization Policy to provide more granular control over specific fields for Agent Identity resources, such as agentidentit…Fri 14 Aug
• FeatureAgent Identity VPC Service Controls (VPC Service Controls) integration is generally available . You can add the Agent Identity API ( agentidentity.googleapis.co…Fri 14 Aug

Managed Service for Apache Airflow — 4

• Change(Managed Airflow Gen 3) Adjusted the formula used to calculate the number of Airflow web server workers based on allocated CPU and memory resources. This update…Mon 10 Aug
• Change(Airflow 3.2.2 and 2.11.1) The [api]rbac_bindings Airflow configuration option is blocked and it isn't possible to override its value.Mon 10 Aug
• ChangeNew Airflow builds are available in Managed Airflow (Gen 3): composer-3-airflow-3.2.2-build.2 composer-3-airflow-3.1.8-build.4 composer-3-airflow-2.11.1-build.1…Mon 10 Aug
• ChangeNew images are available in Managed Airflow (Gen 2): composer-2.17.10-airflow-2.11.1 (default) composer-2.17.10-airflow-2.10.5Mon 10 Aug

Managed Service for Apache Spark — 2

• FixedManaged Service for Apache Spark (formerly Dataproc on Compute Engine): A critical bug related to Conda channels has been fixed in-place in image versions 1.4.8…Mon 10 Aug
• AnnouncementNew Managed Service for Apache Spark (formerly Google Cloud Serverless for Apache Spark) subminor runtime versions : 1.2.86 2.2.86 2.3.39 Key updates in these r…Wed 12 Aug

Memorystore for Valkey — 2

• FeatureYou can use the Google Cloud console to secure access to your instances by using basic token-based authentication . This feature is available in Preview .Mon 10 Aug
• FeatureYou can migrate workloads from self-managed Redis and Valkey instances running on Google Cloud to Memorystore for Valkey. This feature is Generally Available .Thu 13 Aug

Network Intelligence Center — 1

• FeatureConnectivity Tests supports using a Cloud Run job as a source endpoint for connectivity testing. For more information, see Test from a Cloud Run job to a destin…Wed 12 Aug

Policy Controller — 1

• ChangePolicy Controller version 1.24.1 is now available.Fri 14 Aug

Secret Manager — 1

• FixedParameter Manager enforces the location organization policy ( constraints/gcp.resourceLocations ) on resources in the global location. If your organization poli…Wed 12 Aug

Security Command Center — 3

• FeatureThe integration of Security Command Center with Application Design Center for application lifecycle security assessments is generally available ( GA ). Design-t…Mon 10 Aug
• FeatureVulnerability Assessment for Google Cloud is available in General Availability .Mon 10 Aug
• FeatureAI Protection supports data residency in the Kingdom of Saudi Arabia (KSA) for all Security Command Center service tiers. For more information, see Planning for…Thu 13 Aug

Security bulletin — 2

• GCP-2026-053Published: 2026-08-11 Description Description Severity Notes Google is aware of several security vulnerabilities affecting Intel® Trust Domain Extensions (TDX)…Tue 11 Aug
• GCP-2026-054Published: 2026-08-11 Description Description Severity Notes A vulnerability (CVE-2026-6726, also known as TCGVRT0010) has been identified in the Trusted Comput…Tue 11 Aug

Sensitive Data Protection — 1

• FeatureThe ANTHROPIC_API_KEY , GEMINI_API_KEY , and OPENAI_API_KEY infoType detectors are available in all regions. For more information about all built-in infoTypes,…Thu 13 Aug

Spanner — 2

• FeatureDynamic channel pooling (DCP) for gRPC channels in the Spanner Go and Java client libraries is generally available ( GA ). DCP prevents performance issues from…Mon 10 Aug
• FeatureFor DML statements, Spanner now enforces the 80,000 mutation limit (including indexes) per statement rather than cumulatively across the transaction. This allow…Tue 11 Aug

VPC Service Controls — 3

• FeatureVPC Service Controls feature (Status: Preview ): Support for optimizing service perimeters using the VPC Service Controls recommender is available. The recommen…Thu 13 Aug
• FeatureGenerally available (GA) support for the following integrations: Agent Identity API Agent Identity Credentials APIFri 14 Aug
• FeatureGeneral availability support for the following integration: Developer Connect insightsFri 14 Aug

Vertex AI Search — 1

• FeatureAgent Search: Gemini 3.5 Flash answer generation You can generate answers with the Gemini 3.5 Flash model. For more information, see Answer generation model ver…Thu 13 Aug

Official Google Cloud references

• Google Cloud release notes (all products)
• Compute Engine release notes
• Cloud SQL for MySQL release notes
• Cloud Run release notes
• Google Kubernetes Engine release notes
• Security Command Center release notes
• Sensitive Data Protection release notes
• VPC Service Controls release notes
• IAM release notes
• Bigtable release notes
• Firestore release notes
• Memorystore for Valkey release notes
• Network Intelligence Center release notes