GCP Releases
Google Cloud releases and Terraform Google provider. New features, breaking changes, security advisories and deprecations - each summarised in plain English and updated continuously.
Tracking 829 GCP releases · Updated
- Google Cloud Blog blogaisecurityengineergovernment ·
2026 Public Sector M-Trends Report: Machine Speed Defense Needed
A new report reveals adversaries now operate at machine speed, exemplified by a 22-second hand-off between initial access and ransomware. This necessitates a pivot to machine-speed defense, moving beyond traditional human-speed triage. Google Cloud offers solutions including identity-centric access, AI-powered security operations, and hardened infrastructure to enable continuous verification for public sector resilience.
announcement - Google Cloud release notes securitygcpgaengineergcp-bigquery ·
BigQuery Security Advisory and New Features Announced
A critical security vulnerability allowing unauthorized permission escalation in BigQuery, Dataform, and Colab Enterprise has been addressed. Additionally, the BigQuery Overview page is now generally available, offering guided paths for all skill levels, and incremental data transfers for Salesforce are also GA. These updates impact users of BigQuery and related services, with the security fix being paramount.
security feature - Google Cloud release notes securitygcpengineergcp-bigquery ·
Colab Enterprise Security Vulnerability in BigQuery, Dataform
A critical security vulnerability, GCP-2026-047, has been identified in BigQuery, Dataform, and Colab Enterprise. An authenticated attacker could escalate permissions to achieve cross-tenant repository takeover. Users of these services should consult the security bulletin for details on the vulnerability and its potential impact.
security - Google Cloud release notes securitygcpengineer ·
Developer Connect enhances security for GitLab/Bitbucket connections
Developer Connect now enforces granular permissions for GitLab Enterprise and Bitbucket Data Center connections by checking both the calling principal and the service agent against Secret Manager secrets. This change adheres to the principle of least privilege, enhancing security by ensuring only authorized entities can access sensitive Git provider credentials. The update affects users managing these specific types of repository connections and is detailed in the Developer Connect security bulletin.
security - Google Cloud release notes datasecuritygcpengineergcp-bigquery ·
Dataform Security Vulnerability in BigQuery and Colab Enterprise
A security vulnerability was found in Dataform repositories within BigQuery and Colab Enterprise, allowing authenticated attackers to escalate privileges and take over cross-tenant repositories. This impacts users of Dataform, BigQuery, and Colab Enterprise. Further details are available in the GCP-2026-047 security bulletin.
security - Google Cloud release notes securitygcpengineermedia ·
Google SecOps Publisher Agent v2.7.0 Enhances HA and File Transfer
Google SecOps Publisher Agent has been updated to version 2.7.0, now available in all regions. This release introduces High Availability support for the publisher and enables file upload/download capabilities via playbooks and the SDK for agents on GCOM infrastructure. These enhancements aim to improve operational resilience and workflow flexibility for SecOps users.
feature - Google Cloud release notes securitygcpengineermedia ·
Google SecOps SOAR Feature Publisher Agent v2.7.0 Released
Google SecOps SOAR Feature Publisher Agent version 2.7.0 is now available across all regions. This update provides the latest features for the Security Orchestration, Automation, and Response platform. All users of Google SecOps SOAR can access this new version.
feature - Google Cloud release notes securitygcpengineer ·
Google SecOps SOAR Release 6.3.92
Google SecOps SOAR has released version 6.3.92, now available across all regions. This update signifies a standard release for the security orchestration, automation, and response platform. Users can now access the latest improvements and fixes.
announcement - Google Cloud release notes securityinfragcpsecurity-advisoryengineerenergy ·
Container Optimized OS Updates: Kernel, Docker, Security Fixes, NVIDIA Drivers
This release of Container Optimized OS (COS) includes multiple updates across kernel versions, Docker, and Containerd. Notably, it addresses several security vulnerabilities, including CVE-2026-53359 and KCTF-d82ba05 in the Linux kernel, and adds support for specific NVIDIA GRID driver versions. These updates are primarily targeted at users of COS who rely on containerization and GPU acceleration.
security patch - Google Cloud release notes securitygovernancegcpengineer ·
Security Command Center: Data residency/encryption configurable
Security Command Center now allows modification of data residency and encryption settings for Premium and Standard tiers after initial activation. This change provides greater control over data handling and security configurations for organizations using the service. This update affects all users of Security Command Center, regardless of tier. Further details are available in the provided documentation link.
feature - Google Cloud release notes securitygcpgaengineer ·
Cloud Armor Adds ModSecurity CRS 4.22 Support
Google Cloud Armor now supports ModSecurity Core Rule Set (CRS) 4.22 as a preconfigured rule source. This enhancement improves Web Application Firewall (WAF) capabilities for customers managing security rules. The feature is now Generally Available.
feature - Google Cloud release notes securitygcpengineer ·
Google SecOps Marketplace Updates
The Google SecOps Marketplace has released updates across several components. FileUtilities now supports .7z archives, enhancing data extraction capabilities. Google Threat Intelligence has fixed widget rendering issues by properly escaping HTML script tags. Finally, Google Chronicle improves case and alert synchronization by addressing verification handling for external IDs. These updates primarily impact security operations teams and engineers managing security workflows.
patch - Google Cloud release notes securitygcpsecurity-advisorygcp-bigquery ·
Apigee X Security Vulnerability Affecting BigQuery DAO
A vulnerability in Apigee X's BigQuery Data Access Object allowed authenticated attackers to exfiltrate cross-tenant data. This issue has been patched and affects specific versions on Google Cloud Platform, with Apigee hybrid remaining unaffected. No customer action is required for this security fix.
security - Google Cloud release notes securitygcpengineer ·
Cloud NGFW: Project-level resources and Envoy proxy protection
Cloud NGFW now supports project-level resources for application layer inspection, simplifying management for firewalls, security profiles, and endpoint configurations. Additionally, network firewall policies can now restrict traffic to managed Envoy proxies within proxy-only subnets, enhancing security for internal load balancers. These features are now generally available and benefit security engineers and architects managing cloud network security.
feature - Google Cloud release notes securitygcpgaarchitect ·
Cloud KMS Asymmetric PQC insights chart GA
The Cloud KMS overview dashboard's Asymmetric PQC insights chart is now generally available. This feature helps identify asymmetric keys vulnerable to quantum computing attacks, aiding in modernization planning. The insights are available via the chart and details view for users already managing keys in Cloud KMS.
feature - Google Cloud release notes securityinfragcpsecurity-advisoryengineer ·
Container Optimized OS Updates: Kernel, Docker, and Security Fixes
This release of Container Optimized OS includes updates to the Linux kernel, Docker, and Containerd, alongside numerous package upgrades and critical security vulnerability fixes. These updates are crucial for maintaining system security and stability, affecting all users of the OS. Notably, multiple CVEs are addressed, enhancing the overall security posture of the system.
security patch - Google Cloud release notes securitygcpsecurity-advisoryengineer ·
Cloud SDK Updates Python to Address CVE
The Google Cloud CLI has updated its bundled Python version to 3.14.6 to address CVE-2026-34182 on Windows. This patch ensures improved security for users of the gcloud CLI. Users who run the gcloud CLI on Windows are affected by this security update.
patch - Google Cloud release notes securitygcppreviewengineer ·
Google SecOps adds data RBAC for first-party cases and alerts
Google SecOps has introduced data role-based access control (RBAC) for first-party cases and alerts in public preview, enhancing security and data segregation. This feature automatically inherits SIEM data access scopes to SOAR cases and alerts, ensuring analysts only view authorized data, with dual enforcement for access. Administrators can map SIEM scopes to SOAR environments, improving alert routing and visibility.
feature - Google Cloud release notes securitygcpengineer ·
Google SecOps SOAR Release 6.3.92 Available
Google SecOps SOAR has released version 6.3.92, starting its rollout in select regions. This update primarily addresses internal and customer-reported bugs. The phased regional rollout means availability may vary depending on your location.
announcement - Google Cloud release notes securitygcpengineer ·
Google SecOps SOAR Release 6.3.91 Available
Google SecOps SOAR has released version 6.3.91, which is now available in all regions. This update marks a new minor version for the security orchestration, automation, and response platform. Users can access the latest improvements by updating to this version.
announcement
About GCP release tracking on ReleaseBytes
Google Cloud publishes release notes per product — BigQuery, GKE, Cloud Run, Cloud SQL, Vertex AI and dozens more — which makes platform-wide awareness hard. ReleaseBytes aggregates the official GCP release notes and the Terraform Google provider changelog into a single feed, with a plain-English summary of each update and tags for breaking changes, deprecations and security fixes.
Frequently asked questions
How often are GCP release notes updated on ReleaseBytes? ›
Continuously. ReleaseBytes monitors the official GCP release channels around the clock and publishes a plain-English summary of each announcement shortly after it lands.
What kinds of GCP changes does ReleaseBytes track? ›
New features, enhancements, bug fixes, security advisories, breaking changes, deprecations and end-of-life announcements. Every item is tagged by type so you can filter to just the changes that need action.
How can I get alerts for new GCP releases? ›
Set up a free email or Slack alert filtered to GCP, subscribe to the weekly digest, or follow the RSS feed. Teams can also install the ReleaseBytes GitHub App or connect via MCP.
Where does the GCP release data come from? ›
From the official sources: Google Cloud releases and Terraform Google provider. Every item links back to the original vendor announcement.