Latest Google Cloud Platform Updates

• June 23, 2026

  June 23, 2026

  AI Hypercomputer Feature Preview: You can use Gemini in the Google Cloud console as an AI-powered interface to evaluate hardware options, estimate deployment costs, and view recommended configurations for your clusters. Prompting Gemini helps you reach an optimal configuration for your cluster before you create or modify the cluster. For more information, see Design and optimize your cluster with Gemini. Compute Engine Feature Preview: You can use Gemini in the Google Cloud console as an AI-powered interface to evaluate hardware options, estimate deployment costs, and view recommended configurations for your Compute Engine instances. Prompting Gemini helps you reach an optimal configuration for your workload before you create or modify a compute instance. For more information, see Design your compute infrastructure with Gemini. Knowledge Catalog Feature You can control data lineage ingestion for BigQuery and Managed Service for Apache Airflow at the organization, folder, or project level. This feature is available in preview. For more information, see Control data ingestion.

  preview

• June 21, 2026

  June 21, 2026

  Google SecOps Announcement Scheduled Maintenance CloudSQL will undergo a scheduled minor upgrade this Sunday, June 21, 2026. Google SecOps SOAR Announcement Release 6.3.90 is being rolled out to the first phase of regions as listed here. This release contains internal and customer bug fixes. Announcement Scheduled Maintenance CloudSQL will undergo a scheduled minor upgrade.

  general

• June 18, 2026

  June 18, 2026

  API Gateway Change Update to the API Gateway runtime architecture The API Gateway runtime architecture is being updated to improve its integration with Google Cloud Platform and its services. This update does not affect existing API Gateway features. However, be aware of the following differences: Status code changes for gRPC API Gateways Error New status code Previous status code Quota exceeded ResourceExhausted Unavailable Invalid API key InvalidArgument InternalError For 4xx client-side quota failures, API Gateway will now reject requests (fail closed). This applies to both gRPC and OpenAPI API Gateways. If you experience any other differences in behavior due to this update, contact Google Cloud Customer Care. Note: Rollouts of this release to production instances might take up to 4 weeks to complete across all Google Cloud zones. Your instances might not be updated until the rollout is complete. Apigee X Announcement On June 18th, 2026, we began maintenance updates of Apigee instances configured for maintenance windows. If you set a preferred window for maintenance for your instance, and your instance version is below 1-17-0-apigee-9, your instance will be updated to 1-17-0-apigee-9 within the next seven to 21 days. A notification containing the expected date of upgrade will be sent within the next two business days. Note: Instances that meet either of the following two criteria will not be updated: Your instance has a DNS misconfiguration, as described in Known Issue 445936920. Your instance uses an Apigee Java Library that has been removed, as described in Apigee release notes dated October 16, 2025. For more information on participating in scheduled maintenance windows, see Maintenance overview and Manage Apigee instance maintenance windows. Backup and DR Feature Backup vault support for Cloud SQL instances encrypted with customer-managed encryption keys (CMEK) is generally available (GA), providing immutable and indelible storage with enforced retention. For

  preview

• June 16, 2026

  June 16, 2026

  AlloyDB for PostgreSQL Feature AlloyDB integration with Knowledge Catalog is now generally available (GA). This integration provides a unified metadata view to simplify data governance and analysis. It includes near real-time synchronization and expanded metadata details, like primary and foreign keys. For more information, see Integrate AlloyDB with Knowledge Catalog. Apigee hybrid Announcement v1.14.6 On June 16, 2026 we released an updated version of the Apigee hybrid software, v1.14.6. For information on upgrading, see Upgrading Apigee hybrid to version v1.14.6. For information on new installations, see The big picture. Note: This is a patch release: The container images used in patch releases are integrated with the Apigee hybrid Helm charts. Upgrading to a patch via the Helm chart automatically updates the images. No manual image changes are typically needed. For information on container image support in Apigee hybrid releases, see Apigee release process. Security Various security and CVE fixes are included in this release. BigQuery Announcement Table Explorer behavior is moving to the Reference panel. This transition will occur in July 2026 or later. For more information, see Table Explorer. Cloud SQL for PostgreSQL Feature QueryData adds support for parameterized secure views (PSVs) to help secure applications that use natural language queries. For more information, see Secure and control access to application data. This feature is in Preview. Compute Engine Change For resource-based committed use discounts (CUDs), the default value of CUD scope for most Cloud Billing accounts has changed from Project to Billing account. If the CUD scope is set to Billing account, then resource-based CUDs from a commitment are shared across all projects in that account. If the CUD scope is set to Project, then resource-based CUDs from a commitment are available to only the project in which you purchased that commitment. Depending on the Cloud Billing account's creation date

  preview

• June 14, 2026

  June 14, 2026

  Google SecOps SOAR Announcement Release 6.3.89 is being rolled out to the first phase of regions as listed here. This release contains internal and customer bug fixes.

  general

• June 12, 2026

  June 12, 2026

  BigQuery Feature BigQuery AI functions can use ObjectRef values directly as input, without calling the OBJ.GET_ACCESS_URL function. This feature is generally available (GA). Cloud Monitoring Change All agent.googleapis.com/processes metrics are retained for 24 months. For more information, see Data retention. Cloud SQL for PostgreSQL Feature You can now create and query parameterized secure views in Cloud SQL for PostgreSQL. Parameterized secure views let you use PostgreSQL views with more granular access control over your data. While you can issue a GRANT statement to control whether a user can query a PostgreSQL view, a GRANT statement doesn't let you control the data that the view returns based on the user who is making the query. To gain this level of control, use parameterized secure views. You can define parameters such as a user ID or region within the view. When your application queries the view, a user can provide values for these parameters, which customizes the query results. Using parameterized secure views lets you enforce "least privilege" access to help ensure that your users interact only with the data that is relevant and authorized to them. This feature is in Preview. Cloud Service Mesh Security The following images are now rolling out for managed Cloud Service Mesh: Sidecar version 1.21.6-asm.36, is rolling out to the rapid release channel. Sidecar version 1.20.8-asm.86 is rolling out to the regular release channel. Sidecar version 1.19.10-asm.76 is rolling out to the stable release channel. These rollouts will preempt those previously announced on June 3, 2026. These patch releases contain the fix for the vulnerability listed in GCP-2026-035 Security Proxy version csm_mesh_proxy.20260423_RC03 for Gateway API on GKE clusters is rolling out to all Managed Cloud Service Mesh release channels over the next week. Gemini Enterprise Feature Gemini Enterprise mobile app: General availability (GA) for Google Identity users The Gemini Enterprise mobile app

  preview

• June 10, 2026

  June 10, 2026

  Agent Assist Change Agent Assist offers Proactive generative knowledge assist V2 in GA. This version supports rich search context, multiple suggested queries, and granular control over triggering events. BigQuery Feature BigQuery continuous queries now support the following aggregation functions: ARRAY_AGG STRING_AGG Support for these functions is in Preview. Cloud Billing Feature Multi-project access to Cloud Billing cost views available in Preview In Cloud Billing accounts, multi-project access to usage costs lets project owners, solution owners, developers, and other non-billing admins see cost data for all of their authorized projects in a single view in the Cloud Billing console. The multi-project view uses a combination of Cloud Billing account permissions and Google Cloud project permissions that let Cloud Billing administrators and organization administrators jointly control access to project-level cost data. Using project-scoped Cloud Billing account permissions, Cloud Billing administrators can control which solution owners can view aggregated cost data in the Cloud Billing console. Learn more about cost management for project owners. Learn how to set up multi-project access to costs views. Google Kubernetes Engine Deprecated The configuration option to not enroll your cluster in a release channel (known as No channel, formerly as Static) is now deprecated, and will be removed on June 14, 2027. For any clusters not enrolled in a release channel, we recommend that you enroll the cluster before this date. After the removal date, GKE will enroll all remaining clusters in the Stable channel. For more information about this deprecation and how you can achieve the same functionality with release channels, see Clusters not enrolled in a release channel. Google SecOps Marketplace Change Azure Security Center: Version 17.0 Announced deprecation notice. Connector will be deprecated on 30th March 2027. Only critical bug fixes will be considered. For more information

  preview

• June 09, 2026

  June 9, 2026

  Cloud Domains Feature Organization Policy Service custom constraints are generally available for Cloud Domains. For more information, see Use custom organization policies. Cloud Service Mesh Announcement 1.29.4-asm.0 is now available for in-cluster Cloud Service Mesh. You can now download 1.29.4-asm.0 for in-cluster Cloud Service Mesh. It includes the features of Istio 1.29.4 subject to the list of supported features. The following environment variables, labels, and annotations are not supported: PILOT_IGNORE_RESOURCES and PILOT_INCLUDE_RESOURCES RetryIgnorePreviousHosts omit_empty_values PILOT_SPAWN_UPSTREAM_SPAN_FOR_GATEWAY MAX_CONNECTIONS_PER_SOCKET_EVENT_LOOP with the value 1 PILOT_DNS_JITTER_DURATION PILOT_DNS_JITTER_DURATION ENABLE_NATIVE_SIDECARS with the value true PILOT_IP_AUTOALLOCATE_IPV4_PREFIX and PILOT_IP_AUTOALLOCATE_IPV6_PREFIX PILOT_DNS_CARES_UDP_MAX_QUERIES ENABLE_WILDCARD_HOST_SERVICE_ENTRIES_FOR_TLS 'BLOCKED_CIDRS_IN_JWKS_URIS` ENABLE_DEBUG_ENDPOINT_AUTH DISABLE_TRACK_REMAINING_CB_METRICS gateway.istio.io/tls-cipher-suites fileFlushMinSizeKB and fileFlushInterval settings in ProxyConfig topology.istio.io/locality statsCompression ProxyConfig option proxy.istio.io/config annotation for metric compression overrides Istio's experimental feature to enable lazy subset creation of envoy statistics is not supported. The formatter option within the spec.tracing[].customTags field of the Telemetry custom resource (telemetry.istio.io) is unsupported. The istiod_remote_cluster_sync_status Prometheus gauge metric, exposed on the Istiod control plane metrics endpoint (port 15014 /metrics), is not supported. The following are unsupported for proxyless gRPC clients: Configuring the LEAST_REQUEST load balancing policy within the spec.trafficPolicy.loadBalancer.simple field of a DestinationRule custom resource (networking.istio.io) Configuring the http2MaxRequests circuit breaker within the spec.trafficPolicy.connectionPool.http.http2MaxRequests field of a Destin

  security

• June 08, 2026

  June 8, 2026

  Apigee X Announcement On June 8th, 2026, we released an updated version of Apigee (1-17-0-apigee-9). Note: Rollouts of this release began today and may take four or more business days to be completed across all Google Cloud zones. Your instances may not have the features and fixes available until the rollout is complete. Security Bug ID Description 514384893 Security fix for Apigee. Hardened the Script policy to block server-side request forgery (SSRF) to link-local addresses. N/A Security fix for Apigee infrastructure. Fixed Bug ID Description 512850756 Added observability metrics for the OpenTelemetry trace export pipeline, reporting spans exported, export latency, batch size, and dropped spans. 515039499 Fixed an issue where OpenTelemetry trace export over HTTP could fail to authenticate when sent through a forward proxy that requires basic authentication. Apigee hybrid Announcement v1.16.5 On June 8, 2026 we released an updated version of the Apigee hybrid software, v1.16.5. For information on upgrading, see Upgrading Apigee hybrid to version v1.16.5. For information on new installations, see The big picture. Note: This is a patch release: The container images used in patch releases are integrated with the Apigee hybrid Helm charts. Upgrading to a patch via the Helm chart automatically updates the images. No manual image changes are typically needed. For information on container image support in Apigee hybrid releases, see Apigee release process. Security Various security and CVE fixes are included in this release. App Hub Feature App Hub support for resources from Memorystore is now generally available (GA). BigQuery Feature You can analyze data lineage with Gemini Cloud Assist in BigQuery. This feature is in Preview. Feature You can now use Gemini Cloud Assist to schedule queries. This feature is in Preview. Feature You can use the Google-developed, open source Java Database Connectivity (JDBC) driver for BigQuery to connect your Java applications to BigQuery.

  preview

• June 07, 2026

  June 7, 2026

  Google SecOps SOAR Announcement Release 6.3.88 is being rolled out to the first phase of regions as listed here. This release contains internal and customer bug fixes.

  general

• June 05, 2026

  June 5, 2026

  Cloud Data Fusion Feature Cloud Data Fusion version 6.11.1.3 is generally available (GA). Fixed Fixed in Cloud Data Fusion 6.11.1.3: Fixed an issue that caused pipeline preview runs to fail with an InaccessibleObjectException when using certain plugins, such as Cloud SQL for PostgreSQL (CDAP-21212). Fixed an issue causing custom plugins to lose their logging context when running in parallel pipeline branches, ensuring consistent log propagation across both linear and parallel branched pipeline executions (CDAP-21245). Fixed critical security vulnerabilities in CDAP (CDAP-21250). Improved the latency of the List pipelines page (CDAP-21244). Fixed an issue causing intermittent service unavailability after instance upgrades (CDAP-21254). Change Changes in Cloud Data Fusion 6.11.1.3: Introduced a deployStrategy query parameter in the Deploy Application API to skip the re-deployment of an existing pipeline if its configuration hasn't changed (CDAP-21246). Cloud Monitoring Feature Custom dashboards can display trace data. You can view individual spans or aggregated data. This feature is public preview. For more information, see the following: Display trace data (Google Cloud console) Dashboard with trace data (API) Cloud Trace Feature Custom dashboards can display trace data. You can view individual spans or aggregated data. This feature is public preview. For more information, see Display traces on a custom dashboard. Gemini Enterprise Feature Gemini Enterprise: Asana data store (Preview) The Asana data store is available in Public Preview in Gemini Enterprise. You can connect an Asana account to search and read projects, workspaces, teams, and tasks using natural language. You can also perform actions, such as creating projects and tasks, directly from the Gemini Enterprise app. For more information, see Connect Asana. Announcement Gemini Enterprise: Administrator control for Gemini 3.5 Flash As a reminder, effective June 9, 2026, the feature management toggle for Gemin

  preview

• June 03, 2026

  June 3, 2026

  App Engine standard environment Go Feature App Engine supports Direct VPC egress in Preview. Direct VPC egress lets your workloads access VPC network resources as a simpler, more cost-effective alternative to Serverless VPC Access connectors. App Engine standard environment Java Feature App Engine supports Direct VPC egress in Preview. Direct VPC egress lets your workloads access VPC network resources as a simpler, more cost-effective alternative to Serverless VPC Access connectors. App Engine standard environment Node.js Feature App Engine supports Direct VPC egress in Preview. Direct VPC egress lets your workloads access VPC network resources as a simpler, more cost-effective alternative to Serverless VPC Access connectors. App Engine standard environment PHP Feature App Engine supports Direct VPC egress in Preview. Direct VPC egress lets your workloads access VPC network resources as a simpler, more cost-effective alternative to Serverless VPC Access connectors. App Engine standard environment Python Feature App Engine supports Direct VPC egress in Preview. Direct VPC egress lets your workloads access VPC network resources as a simpler, more cost-effective alternative to Serverless VPC Access connectors. App Engine standard environment Ruby Feature App Engine supports Direct VPC egress in Preview. Direct VPC egress lets your workloads access VPC network resources as a simpler, more cost-effective alternative to Serverless VPC Access connectors. BigQuery Feature BigQuery fluid scaling, which provides per-second billing with no minimum duration for autoscaling reservations, is generally available (GA). Cloud Service Mesh Announcement 1.28.7-asm.3 is now available for in-cluster Cloud Service Mesh. For details on upgrading Cloud Service Mesh, see Upgrade Cloud Service Mesh. Cloud Service Mesh 1.28.7-asm.3 uses Envoy v1.36.7-dev. Fixed Patch 1.28.7-asm.3 contains fixes for the following platform CVEs: CVE Proxy Control Plane Distroless CNI Severity CVE-2026-27143 Yes

  preview