GCP Releases
Google Cloud releases and Terraform Google provider. New features, breaking changes, security advisories and deprecations - each summarised in plain English and updated continuously.
Tracking 832 GCP releases · Updated
- Google Cloud release notes securitygcpengineer ·
Bare Metal Solution adds Privileged Access Manager for LUN eviction
Google Cloud's Bare Metal Solution now supports Privileged Access Manager (PAM) for the critical LUN eviction operation. This enhancement provides temporary elevated access, allowing users to safely and permanently delete storage resources. The feature is available now and requires configuration within PAM.
feature - Google Cloud release notes securitygcpengineer ·
Application Integration Security Bulletins Page Launched
Google Cloud has introduced a dedicated Security Bulletins page for Application Integration. This new resource aims to keep users informed about security updates, vulnerabilities, and remediation steps relevant to the service. All users of Application Integration should familiarize themselves with this page for timely security information.
security - Google Cloud release notes securitygcpsecurity-advisoryengineer ·
Apigee Emulator v2.0.1: Security Hotfix for Netty and Go Libraries
Apigee Emulator v2.0.1, released June 24, 2026, is a security-only hotfix addressing 10 vulnerabilities in the Netty networking library and the embedded Cassandra Go standard library. This update provides a drop-in replacement for v2.0.0 with no functional, API, or configuration changes, affecting users of the Apigee Emulator. The updated image is available via Google Artifact Registry, and users can upgrade by updating their VS Code Cloud Code settings.
security feature announcement - Google Cloud release notes securitygcpengineer ·
Confidential Space container support for graceful shutdown
Confidential Space has released a new image, 260600, which adds support for gracefully shutting down container workloads when power button events occur. This enhancement ensures more robust container management within Confidential Space environments. This update is available now for users of Confidential Space.
announcement - Google Cloud release notes securitygcpengineer ·
Cloud Build security update for GitLab/Bitbucket connections
Cloud Build now enforces stricter permissions checks for GitLab Enterprise and Bitbucket Data Center connections to enhance security. Previously, only the service agent's permissions were checked; now, both the calling principal and the service agent must have access to the necessary Secret Manager secrets. This change, which adheres to the principle of least privilege, affects users managing these specific Git repository connections.
security - Google Cloud release notes securitygcpgaarchitect ·
VPC Service Controls GA for Conversational Analytics API
VPC Service Controls now offers general availability for the Conversational Analytics API. This enhances data security and compliance for organizations using this API. The feature is now production-ready for all users.
feature - Google Cloud release notes securitygcpgaengineer ·
Identity-Aware Proxy supports Agent Gateway egress
Identity-Aware Proxy (IAP) now supports agent-to-anywhere egress for Agent Gateway, a feature that has reached general availability. This enables enhanced security for agent-initiated connections. Developers and security architects using Agent Gateway can now leverage IAP for securing egress traffic.
feature - Google Cloud release notes securitygcpsecurity-advisoryengineer ·
Container Optimized OS Releases Include Security Fixes and Minor Updates
Several recent Container Optimized OS releases have been published, bringing minor updates and significant security patches. These updates include upgraded packages like logrotate, oslogin, and GPU installers, alongside critical fixes for CVEs affecting containerd and glibc. The changes primarily impact users running workloads on Google Cloud's Container Optimized OS.
security patch announcement - Google Cloud release notes securitygcpsecurity-advisoryengineer ·
Container Optimized OS Updates Address Multiple Security Vulnerabilities
This release of Container Optimized OS (COS) incorporates numerous security fixes for Docker, containerd, and the Linux kernel, including multiple CVEs. These updates are critical for maintaining system integrity and protecting against known vulnerabilities. All users of COS are advised to update to benefit from these security enhancements.
security patch - Google Cloud release notes securitycompliancegcpengineergcp-bigquerygcp-cloud-storage ·
Data Studio Pro Security and Compliance Enhancements
Data Studio Pro now offers security and compliance features including customer-managed encryption keys (CMEK), customer-managed storage for uploads and extracts, and data residency controls. These capabilities help organizations meet their security and compliance requirements by allowing greater control over data protection and location. These features are exclusively available within Data Studio Pro.
feature - Google Cloud release notes securitygcpsecurity-advisoryengineer ·
Cloud Service Mesh Security Patch Releases
Multiple versions of Cloud Service Mesh (1.29.5-asm.3, 1.28.9-asm.2, 1.27.9-asm.8, and managed sidecar versions 1.21.6-asm.38, 1.20.8-asm.88, 1.19.10-asm.78) have been released with fixes for security vulnerabilities, including CVE-2026-34182 and CVE-2026-45447. These updates address critical security issues and are available for in-cluster and managed deployments. Users are advised to upgrade to the latest versions to incorporate these security patches.
security patch - Google Cloud release notes securitygcppreviewengineer ·
Agent Identity API now in Preview, replacing IAM Connectors API
Google Cloud's Agent Identity API ( agentidentity.googleapis.com ) is now available in Preview, superseding the legacy IAM Connectors API. This change streamlines the management of auth providers and agent identities. During the preview, both APIs will function concurrently, and existing configurations are mirrored to the new V2 resource hierarchy for a seamless migration of policies and applications without downtime.
feature - Google Cloud release notes securitygcpdeprecationengineer ·
Google SecOps SOAR: siemAlertId Field Reservation
Effective July 5, 2026, Google SecOps SOAR will reserve the `siemAlertId` field exclusively for internal Chronicle SIEM alert IDs, overwriting any custom data. This change impacts all ingestion methods and requires users to migrate custom `siemAlertId` fields immediately to prevent data loss. Engineers and architects using SOAR for alert ingestion should update their configurations before the deadline.
breaking - Google Cloud release notes securitygcpdeprecationengineer ·
Google SecOps reserves siemAlertId field
Google SecOps will reserve the siemAlertId field for internal Chronicle SIEM alert IDs starting July 5, 2026. This change affects all ingestion methods and will overwrite any custom data in that field, potentially causing data loss. Users currently utilizing a custom siemAlertId field must migrate to a different field name to avoid issues.
breaking - Google Cloud release notes securitynetworkinggcpsecurity-advisoryengineer ·
Apigee X: Security patches and TLS 1.3 upgrade
Apigee X has released an updated version (1-17-0-apigee-10) containing numerous security patches for its ingress gateway and an upgrade of the default outbound TLS protocol to TLS 1.3. These changes aim to enhance security and compliance by addressing multiple CVEs and improving TLS configuration. The release includes fixes for certificate creation issues and introduces a new proxyProtocol.mode property for HAProxy compatibility. Rollout is ongoing and may take several business days to complete across all Google Cloud zones.
security patch announcement - Google Cloud release notes securitygcpgaengineergcp-cloud-sql ·
Cloud SQL for PostgreSQL: CMEK Support for Enhanced Backups GA
Customer-managed encryption key (CMEK) support for enhanced backups in Cloud SQL for PostgreSQL is now generally available. This enhances data protection by allowing CMEK-enabled instances to be protected with Google Cloud Backup and DR Service. This update is relevant for users managing sensitive data in Cloud SQL for PostgreSQL.
feature - Google Cloud release notes securitygcpengineer ·
Google SecOps SOAR 6.3.90 Release
Google SecOps SOAR version 6.3.90 is rolling out to initial regions, bringing internal and customer bug fixes. This release aims to improve the platform's stability and performance. The update is currently in its first phase of regional deployment.
announcement - Google Cloud release notes securitygcpengineer ·
Google SecOps: Cloud SQL Scheduled Maintenance
Cloud SQL instances will undergo a scheduled minor upgrade on Sunday, June 21, 2026. This maintenance is part of Google SecOps' ongoing efforts to ensure the reliability and security of its services. All users of Cloud SQL are advised to be aware of this upcoming maintenance window.
announcement - Google Cloud release notes securitygcpengineer ·
Google SecOps SOAR Release 6.3.89 Available
Google SecOps SOAR has released version 6.3.89, now available in all regions. This update provides new capabilities and improvements to the security orchestration, automation, and response platform. Users can access the new version immediately.
announcement - Google Cloud release notes securitygovernanceawsgcpgaengineergcp-cloud-sql ·
Cloud SQL backup vaults support CMEK for immutable storage
Cloud SQL instances encrypted with customer-managed encryption keys (CMEK) now have backup vault support, enabling immutable and indelible storage with enforced retention. This GA feature enhances data protection and compliance for sensitive workloads. It applies to users managing Cloud SQL instances with CMEK.
feature
About GCP release tracking on ReleaseBytes
Google Cloud publishes release notes per product — BigQuery, GKE, Cloud Run, Cloud SQL, Vertex AI and dozens more — which makes platform-wide awareness hard. ReleaseBytes aggregates the official GCP release notes and the Terraform Google provider changelog into a single feed, with a plain-English summary of each update and tags for breaking changes, deprecations and security fixes.
Frequently asked questions
How often are GCP release notes updated on ReleaseBytes? ›
Continuously. ReleaseBytes monitors the official GCP release channels around the clock and publishes a plain-English summary of each announcement shortly after it lands.
What kinds of GCP changes does ReleaseBytes track? ›
New features, enhancements, bug fixes, security advisories, breaking changes, deprecations and end-of-life announcements. Every item is tagged by type so you can filter to just the changes that need action.
How can I get alerts for new GCP releases? ›
Set up a free email or Slack alert filtered to GCP, subscribe to the weekly digest, or follow the RSS feed. Teams can also install the ReleaseBytes GitHub App or connect via MCP.
Where does the GCP release data come from? ›
From the official sources: Google Cloud releases and Terraform Google provider. Every item links back to the original vendor announcement.