3/17/25, 8:52 AM Google Cloud release notes | Documentation

Google Cloud release notes

The following release notes cover the most recent changes over the last 60 days. For a comprehensive list of product-specific release
notes, see the individual product release note pages (/release-notes/all).

You can also see and filter all release notes in the Google Cloud console (https://console.cloud.google.com/release-notes) or you can
programmatically access release notes in BigQuery
(https://console.cloud.google.com/bigquery?p=bigquery-public-data&d=google_cloud_release_notes&t=release_notes&page=table).

To get the latest product updates delivered to you, add the URL of this page to your feed reader
(https://wikipedia.org/wiki/Comparison_of_feed_aggregators), or add the feed URL (https://cloud.google.com/feeds/gcp-release-notes.xml) directly.

March 11, 2025

Bigtable

FEATURE You can use Cloud KMS Autokey to automate the creation and use of customer-managed encryption keys (CMEK)
(https://cloud.google.com/bigtable/docs/cmek) in Bigtable clusters. This feature is generally available (GA)
(https://cloud.google.com/products#product-launch-stages).

FEATURE Data lineage (https://cloud.google.com/dataplex/docs/about-data-lineage) for Dataflow jobs is generally available (GA)
(https://cloud.google.com/products#product-launch-stages) in the Bigtable Beam connector (BigtableIO) and the Bigtable
HBase Beam connector (CloudBigtableIO). For more information, see Tracking lineage
(https://github.com/googleapis/java-bigtable-hbase/tree/v2.15.0/bigtable-dataflow-parent/bigtable-beam-import#tracking-lineage).

Cloud Logging

https://cloud.google.com/release-notes 1/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

CHANGE The API to create and manage Log Scopes is now Generally Available (GA). You can create and manage log scopes by
using the Cloud Console, the Google Cloud CLI, and Terraform. For more information, see Create and manage log scopes
(https://cloud.google.com/logging/docs/log-scope/create-and-manage).

Cloud Run

FEATURE A new region is now available for Cloud Run GPUs

(https://cloud.google.com/run/docs/configuring/services/gpu#supported-regions): europe-west1.

Generative AI on Vertex AI

CHANGE Gemini 2.0 Flash Tuning

Gemini 2.0 Flash fine-tuning is now generally available (GA (https://cloud.google.com/products#product-launch-stages)).

Added support for tuning function calling (https://cloud.google.com/vertex-ai/generative-ai/docs/models/tune-function-calling).

Google SecOps

FEATURE URL indicators are now available for matching as part of Applied Threat Intelligence. For more information about Applied
Threat Intelligence, see Applied Threat Intelligence overview (https://cloud.google.com/chronicle/docs/detection).

Google SecOps SIEM

FEATURE URL indicators are now available for matching as part of Applied Threat Intelligence. For more information about Applied
Threat Intelligence, see Applied Threat Intelligence overview (https://cloud.google.com/chronicle/docs/detection).

Network Connectivity Center

FEATURE VPC spoke updates for IPv6 subnet exchange is available in public preview
(https://cloud.google.com/products#product-launch-stages).

https://cloud.google.com/release-notes 2/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

You can update, or propose updates to, an existing VPC spoke to enable or disable the exchange of IPv6 subnet ranges.
For information about updating spokes, see Update whether a VPC spoke exports IPv6 subnet ranges
(https://cloud.google.com/network-connectivity/docs/network-connectivity-center/how-to/working-with-hubs-spokes#update-spoke-ipv6).
For information about accepting proposed updates to spokes, see Review proposed spokes
(https://cloud.google.com/network-connectivity/docs/network-connectivity-center/how-to/vpc-review-proposed-spokes).
Network Security Integration

FEATURE Network Security Integration (https://cloud.google.com/network-security-integration/docs/nsi-overview), including the Out-of-band

integration, is available in General Availability.

Use out-of-band integration service to analyze your workloads' network traffic at scale. For more information, see Out-of-
band integration overview (https://cloud.google.com/network-security-integration/docs/out-of-band/out-of-band-integration-overview).

Retail API

FEATURE Vertex AI Search for commerce: Conversational commerce

Conversational commerce uses LLM and conversational product filtering to provide users with a real-time, ongoing
conversational experience. The conversational product filtering feature functions as part of the Guided Search package,
helping narrow down search queries sooner by presenting users with either relevant products, follow-up questions, or both.

Conversational commerce is in private preview. For more information, see Conversational commerce
(https://cloud.google.com/retail/docs/conversational-search) and Conversational product filtering
(https://cloud.google.com/retail/docs/conversational-filtering).

March 10, 2025

https://cloud.google.com/release-notes 3/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Batch

FEATURE Cancelling jobs (https://cloud.google.com/batch/docs/cancel-job) is generally available (GA

(https://cloud.google.com/products#product-launch-stages)).

BigQuery

ANNOUNCEMENT Analytics Hub egress controls (https://cloud.google.com/bigquery/docs/analytics-hub-introduction#data_egress) and data clean

room (https://cloud.google.com/bigquery/docs/data-clean-rooms#subscriber_workflows) subscriptions are now available in all
BigQuery editions (https://cloud.google.com/bigquery/docs/editions-intro#analysis_features) and on-demand pricing.

Bigtable

LIBRARIES A weekly digest of client library updates from across the Cloud SDK (https://cloud.google.com/sdk).

Java
(#java)

Changes for google-cloud-bigtable (https://github.com/googleapis/java-bigtable)

2.54.0 (https://github.com/googleapis/java-bigtable/compare/v2.53.0...v2.54.0) (2025-02-28)

Features

The next release from the main branch is 2.54.0 (#2498 (https://github.com/googleapis/java-bigtable/issues/2498))
(f967ded (https://github.com/googleapis/java-bigtable/commit/f967deda8b68091dcc417b6c51f451abd36696f1))

Dependencies

https://cloud.google.com/release-notes 4/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Update shared dependencies (#2493 (https://github.com/googleapis/java-bigtable/issues/2493)) (e1d09e7

(https://github.com/googleapis/java-bigtable/commit/e1d09e7d03365d844e957d043e21d71948f98d04))

Cloud SQL for MySQL

FEATURE Cloud SQL for MySQL introduces a set of improvements that adjust MySQL configurations dynamically based on workload
demands and underlying infrastructure to optimize write performance and reduce latency. By default these improvements
are enabled for all new Cloud SQL Enterprise Plus edition instances (https://cloud.google.com/sql/docs/mysql/editions-intro)
that you create or that you upgrade to from Cloud SQL Enterprise edition. Existing Cloud SQL Enterprise Plus instances
that are updated with maintenance version [MySQL_version].R20250304.00_01 will also enable these improvements
automatically.

For more information about these improvements, see Configure database flags
(https://cloud.google.com/sql/docs/mysql/flags#tips-optimized-write).

Compute Engine

FEATURE Generally available: Compute flexible committed use discounts (CUDs) are available for Local SSD disks that you attach to
instances of eligible machine types. Flexible CUDs add flexibility to your Compute Engine spending capabilities by
eliminating the need to restrict your commitments to a single project, region, or machine series.

For more information, see Compute flexible CUDs

(https://cloud.google.com/compute/docs/instances/committed-use-discounts-overview#spend_based).

FEATURE Generally available: Configure the host error detection time, which is the the maximum amount of time Compute Engine
waits to restart or terminate an instance after detecting that the instance is unresponsive. For more information, see Set
VM host maintenance policy (https://cloud.google.com/compute/docs/instances/setting-vm-host-options).

Dataproc

https://cloud.google.com/release-notes 5/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

ANNOUNCEMENT New Dataproc on Compute Engine subminor image versions

(https://cloud.google.com/dataproc/docs/concepts/versioning/dataproc-version-clusters#supported_dataproc_versions):

2.0.135-debian10, 2.0.135-rocky8, 2.0.135-ubuntu18

2.1.83-debian11, 2.1.83-rocky8, 2.1.83-ubuntu20, 2.1.83-ubuntu20-arm

2.2.49-debian12, 2.2.49-rocky9, 2.2.49-ubuntu22

Dialogflow

CHANGE Dialogflow CX (Conversational Agents): The Conversational Agents console has moved to a new location
(https://conversational-agents.cloud.google.com).

FEATURE Dialogflow CX (Conversational Agents): You can now use the console search feature to search for all resources, including
playbooks, examples, and tools.

FEATURE Dialogflow CX (Conversational Agents): Playbooks now support the following new features:

Two different playbook types (https://cloud.google.com/dialogflow/cx/docs/concept/playbook#types): Task playbooks and

routine playbooks.

Connector tools (https://cloud.google.com/dialogflow/cx/docs/concept/playbook/tool#connector).

Conditional actions (https://cloud.google.com/dialogflow/cx/docs/concept/playbook/conditional-actions).

DTMF (https://cloud.google.com/dialogflow/cx/docs/concept/playbook/playbook-settings).

FEATURE Dialogflow CX (Conversational Agents): You can now use the Conversational Agents console to manage languages
(https://cloud.google.com/dialogflow/cx/docs/concept/agent-settings#flow-language).

https://cloud.google.com/release-notes 6/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

FEATURE Dialogflow CX (Conversational Agents) data store handlers: New model gemini-2.0-flash-001 is now available to data
store handlers (https://cloud.google.com/dialogflow/cx/docs/concept/data-store/settings#model-selection) as a Preview feature.
This launch is limited to the following regions: global, us, us-central1, us-east1, us-west1, europe-west1, europe-
west4.

FEATURE Dialogflow CX (Conversational Agents): Text-to-speech used by Dialogflow now supports new Chirp 3 HD
(https://cloud.google.com/text-to-speech/docs/voice-types#chirp3_hd_voices) voices.

FEATURE Dialogflow CX (Conversational Agents): Git export/restore (https://cloud.google.com/dialogflow/cx/docs/concept/github) now

supports additional Git providers and Google Secrets for token storage.

Google SecOps

CHANGE The following rule has been removed from its associated rule pack in Curated Detections due to high alert volume across
the Google SecOps customer base:

Serverless Threats

Potential Cryptomining Payload running in Cloud Run Service or Cloud Run Job

Google SecOps SIEM

CHANGE The following rule has been removed from its associated rule pack in Curated Detections due to high alert volume across
the Google SecOps customer base:

Serverless Threats

Potential Cryptomining Payload running in Cloud Run Service or Cloud Run Job

Spanner

https://cloud.google.com/release-notes 7/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

FEATURE Tiered storage is Generally Available in Spanner. Tiered storage is a fully-managed feature that lets you store your data
across solid-state drives (SSD) or hard disk drives (HDD). Using tiered storage lets you take advantage of both SSD
storage, which supports the high performance of active data, and HDD storage, which supports infrequent data access at a
lower cost. For more information, see Tiered storage (https://cloud.google.com/spanner/docs/tiered-storage).

March 09, 2025

Google SecOps

ANNOUNCEMENT The session timeout duration is being extended from 3 hours to 8 hours. After 8 hours of activity, you are automatically
logged out and required to sign in again. To prevent data loss, we recommend that you manually log out in advance if you
anticipate being away from the platform for an extended period of time. This feature will be gradually rolled out starting
March 17, 2025.

Google SecOps SIEM

ANNOUNCEMENT The session timeout duration is being extended from 3 hours to 8 hours. After 8 hours of activity, you are automatically
logged out and required to sign in again. To prevent data loss, we recommend that you manually log out in advance if you
anticipate being away from the platform for an extended period of time. This feature will be gradually rolled out starting
March 17, 2025.

Google SecOps SOAR

ANNOUNCEMENT Release 6.3.37 (https://cloud.google.com/chronicle/docs/soar/release-notes#March_02_2025) is now in General Availability.

March 08, 2025

https://cloud.google.com/release-notes 8/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Google SecOps

FEATURE Map users in the platform for Google Cloud Identity customers

Administrators can now provision and map new users into the platform by adding them to groups in bulk using their email
addresses. This streamlines user management and access control for organizations using Google Cloud Identity.

For more information, see Map users with email groups to the platform
(https://cloud.google.com/chronicle/docs/soar/admin-tasks/user-secops/map-users-in-the-secops-platform-first-party).

Google SecOps SOAR

ANNOUNCEMENT Release 6.3.38 is currently in Preview. This release contains internal and customer bug fixes.

March 07, 2025

Apigee Advanced API Security

ANNOUNCEMENT On March 7, 2025 we released an updated version of Apigee Advanced API Security.

FEATURE Availability of data obfuscation support with Advanced API Security

With this release, data obfuscation can be used with Advanced API Security.

For usage information, see Obfuscate user data for Apigee API Analytics
(https://cloud.google.com/apigee/docs/api-platform/analytics/obfuscate-user-data-for-analytics) and Data obfuscation with
Advanced API Security (https://cloud.google.com/apigee/docs/api-security#data-obfuscation-with-advanced-api-security).

Contact Center AI Insights

https://cloud.google.com/release-notes 9/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

FEATURE You can integrate Agent Assist summarization generators with Conversational Insights. Summarization
(https://cloud.google.com/contact-center/insights/docs/summarization) uses existing LLM generators to automatically
summarize conversations. You can then export those summaries along with your other Insights data.

Google Cloud Architecture Center

CHANGE Infrastructure for a RAG-capable generative AI application using Vertex AI and Vector Search
(https://cloud.google.com/architecture/gen-ai-rag-vertex-ai-vector-search): Added information about the Terraform configuration
sample to deploy (https://cloud.google.com/architecture/gen-ai-rag-vertex-ai-vector-search#deployment) the architecture.

Google Kubernetes Engine

FEATURE GKE now allows you to enable logging of Horizontal Pod Autoscaler decisions starting from GKE version 1.31.5-
gke.1090000 or later, or version 1.32.1-gke.1260000 or later. These logs include atomic recommendations
(https://cloud.google.com/kubernetes-engine/docs/how-to/view-horizontalpodautoscaling-events#atomic_recommendation) (based on
individual metrics) and final recommendations
(https://cloud.google.com/kubernetes-engine/docs/how-to/view-horizontalpodautoscaling-events#final_recommendation) (consolidated
HPA decisions). The logs are stored in Cloud Logging and offer insights into the decision-making process of the Horizontal
Pod Autoscaler.

FEATURE You can now monitor startup latency (https://cloud.google.com/kubernetes-engine/docs/how-to/monitor-startup-latency-metrics) of

Kubernetes workloads and nodes using the new Startup Latency dashboard available in the Observability tab on the
Deployment details and Cluster details pages in the GKE Console. The dashboard is useful for tracking, troubleshooting
and optimizing startup latency of your GKE workloads.

Virtual Private Cloud

FEATURE The following features of internal ranges are available in Preview:

https://cloud.google.com/release-notes 10/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Reserving internal ranges with IPv6 addresses

Creating immutable internal ranges (ranges that can't be updated, except for the description)

Editable descriptions

For more information, see Internal ranges overview (https://cloud.google.com/vpc/docs/internal-ranges).

FEATURE You can exclude IP address ranges from internal range automatic IP address allocation. This feature is available in
Preview. For more information, see Reserve internal ranges
(https://cloud.google.com/vpc/docs/create-use-internal-ranges#create-internal-ranges).

FEATURE You can create internal ranges that overlap with routes and subnets. This feature is available in General Availability. For
more information, see Internal ranges overview (https://cloud.google.com/vpc/docs/internal-ranges).

March 06, 2025

Anthos Config Management

FIXED Fixed an issue where ConfigManagement uninstall could get stuck when Policy Controller was enabled via
ConfigManagement. This was caused by Policy Controller finalizers not being properly removed during the uninstallation
process.

BigQuery

FEATURE BigQuery Data Transfer Service now supports custom reports for Google Ads
(https://cloud.google.com/bigquery/docs/google-ads-transfer#custom_reports). You can use Google Ads Query Language (GAQL)
queries in your transfer configuration to ingest custom Google Ads reports and fields beyond those available in the

https://cloud.google.com/release-notes 11/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

standard reports and fields (https://cloud.google.com/bigquery/docs/google-ads-transformation). This feature is now generally

available (https://cloud.google.com/products#product-launch-stages) (GA).
Cloud Router

FEATURE Cloud Router support for BGP route policies is now generally available
(https://cloud.google.com/products#product-launch-stages). For more information, see BGP route policies overview
(https://cloud.google.com/network-connectivity/docs/router/concepts/bgp-route-policies-overview).

Cloud Run

FEATURE The following new region is now available: europe-north2.

Container Registry

DEPRECATED The schedule for the Container Registry shutdown has changed. After March 18, 2025, writing images to Container
Registry is unavailable. After May 20, 2025, reading images from Container Registry is unavailable. For more information
about the shutdown, see Container Registry deprecation
(https://cloud.google.com/container-registry/docs/deprecations/container-registry-deprecation).

Looker Studio

ANNOUNCEMENT Partner connection launch update

The following partner connectors have been added to the Looker Studio Connector Gallery
(https://lookerstudio.google.com/data):

Google AdSense
(https://lookerstudio.google.com/c/datasources/create?
connectorId=AKfycbytZ8cOs8U5ERzWLxDBMGDFIKm9_qZuEst5zw250BxLhYwWi3PQDCuYTwEe-cl5lAY)
by Kentaro Shiomi SOURCES: GOOGLE_ADSENSE

https://cloud.google.com/release-notes 12/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

PostgreSQL
(https://lookerstudio.google.com/c/datasources/create?
connectorId=AKfycbxl1patK5LYBUyxaufdHuSzttckBFbHb8CSmtivt3Gnf1ceDdBo1UCQOkyrpdSH5yNc)
by Windsor.ai SOURCES: POSTGRESQL

Redshift
(https://lookerstudio.google.com/c/datasources/create?
connectorId=AKfycbxSxDk4YbaD22QTjDnytMdMN16AK1dGCMOxupvzGlKw_skDqMsf-ytJ7py6cAo4dO9I)
by Windsor.ai SOURCES: AMAZON_REDSHIFT

MongoDB
(https://lookerstudio.google.com/c/datasources/create?
connectorId=AKfycbzTe58p51C0DTdU1Zf5HtSu6HyrepJkaRbsDkejk8h24RCDP2ivKC5VJv_DdCb211vGaQ)
by Windsor.ai SOURCES: MONGODB

Snowflake
(https://lookerstudio.google.com/c/datasources/create?connectorId=AKfycbwkA1OuH5M5zaTTexJ8e0--cTwfBHm1ga_Y0rVtw4-
LdSjaSSc61FhkzA3odlVoTATw)
by Windsor.ai SOURCES: SNOWFLAKE

-META
(https://lookerstudio.google.com/c/datasources/create?connectorId=AKfycbwT8efc-SbgTTA-AmyghP8aM-
bUvxeSZtDrPiHKvNqPVdn8EztLt_yddn21NOacSOJP)
by SOURCES: FACEBOOK_ADS

Drip
(https://lookerstudio.google.com/c/datasources/create?
connectorId=AKfycbyDgp75njN2WJY1wF1kjfopwZ5vNY7LlguUlkpLIMKahN5PJc-Ks7M6F-p80KqeT_EvlA)
by Jivrus Technologies SOURCES: DRIP

https://cloud.google.com/release-notes 13/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Really Simple Systems

(https://lookerstudio.google.com/c/datasources/create?connectorId=AKfycbww8qs7bOJY8_3V28eZvbcV-
S_kS140EDNESGgrxK1GZPxB2rxW_J_lQrC2eqRPQZU)
by Jivrus Technologies SOURCES: REALLY_SIMPLE_SYSTEMS

Survey Sparrow
(https://lookerstudio.google.com/c/datasources/create?connectorId=AKfycbxvvN7kgPUCF9DNHB-nnRXSawlKh-
nRWZBWhDZbUioS10L8T5WcQluNVdKSnS1aT8F3)
by Windsor.ai SOURCES: SURVEYSPARROW

TikTok Insights
(https://lookerstudio.google.com/c/datasources/create?
connectorId=AKfycbyACEVyxgQFaOcsk0KZP4Ec15maeBKIuwdpzFocPNDd3N2BSSc7HBUNPa2Y5Eil09_WcA)
by Porter Metrics SOURCES: TIKTOK

Walmart US
(https://lookerstudio.google.com/c/datasources/create?connectorId=AKfycbwJsVXS0nGpSaimMd0h15-
FrI565AXy8pqoICl3EUenlnbvWA-FpAOHH0FAOE-_EM5FMQ)
by Windsor.ai SOURCES: WALMART

Threads Insights
(https://lookerstudio.google.com/c/datasources/create?connectorId=AKfycbx9Kuh-
yTWPndJp_tYR45jtiUgj_lPGarXz149jynqqTfLMGtYLW1T1G86-tavXdCxg)
by Supermetrics SOURCES: THREADS

Active Campaign
(https://lookerstudio.google.com/c/datasources/create?
connectorId=AKfycbxuWVIMi0CKEtNKHVSwtGKr5sIED7Q_ZG083LEoKgrOaSDAFnVRyTIDQiRnjy84hRUKGA)
by Power My Analytics SOURCES: ACTIVECAMPAIGN

https://cloud.google.com/release-notes 14/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Odoo CRM AppiWorks

(https://lookerstudio.google.com/c/datasources/create?connectorId=AKfycbzEW-
khdC2QXKdvBnkxH1v6imrejRqUJL8B_ACWNXZudDJ13NCwLY_rL2-fyRavGIqO)
by Jivrus Technologies SOURCES: ODOO-CRM
Security Command Center

CHANGE The AWS connector has changed to enable additional use cases and requires the collection of AWS organization and
organizational unit (OU) data. This change may require you to take additional action. For details about the change, see the
AWS connector changelog (https://cloud.google.com/security-command-center/docs/connector-aws-changelog).

Text-to-Speech

CHANGE Chirp 3: HD voices now supports 8 new speakers in 31 new locales: ar-XA, bn-IN, cmn-CN, de-DE, en-AU, en-GB, en-IN, en-
US, es-ES, es-US, fr-CA, fr-FR, gu-IN, hi-IN, id-ID, it-IT, ja-JP, kn-IN, ko-KR, ml-IN, mr-IN, nl-NL, pl-PL, pt-BR, ru-RU, sw-KE, ta-IN,
te-IN, th-TH, tr-TR, and vi-VN.

March 05, 2025

Apigee UI

ANNOUNCEMENT On March 5, 2025, we released an updated version of the Apigee UI.

https://cloud.google.com/release-notes 15/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

FIXED
Bug ID Description

368686537Resolved issue causing delay when loading API product pages in the Apigee UI in Cloud console.

Members of Apigee organizations with large number of API proxies experienced long load times when accessing the API
product create or API product edit pages in the Apigee UI in Cloud console.

Cloud Composer

FEATURE You can now specify an order in which Airflow searches for secrets
(https://cloud.google.com/composer/docs/composer-3/configure-secret-manager#configure-backend) by overriding the
[secrets]backends_order Airflow configuration option.

FIXED Fixed an issue in Cloud Composer REST API that allowed some environment.patch operations to succeed when multiple
update masks that aren't related to each other were passed in a request. Now operations with such masks fail with an
error.

CHANGE New Airflow builds (https://cloud.google.com/composer/docs/composer-versions#images-composer-3) are available in Cloud

Composer 3:

composer-3-airflow-2.10.2-build.10 (default)

composer-3-airflow-2.9.3-build.17

CHANGE New images (https://cloud.google.com/composer/docs/composer-versions#images-composer-2) are available in Cloud Composer

2:

composer-2.11.4-airflow-2.10.2 (default)

composer-2.11.4-airflow-2.9.3

https://cloud.google.com/release-notes 16/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

DEPRECATED Cloud Composer versions 2.6.2 and 2.6.3 have reached their end of support period
(https://cloud.google.com/composer/docs/composer-versioning-overview#version-deprecation-and-support).

Container Optimized OS

CHANGE cos-beta-121-18867-0-24

Kernel Docker ContainerdGPU Drivers

(https://cloud.goo
os/docs/how-to/ru

COS-6.6.74 v25.0.7v2.0.2 See List

(https://cos.googlesource.com/third_party/kernel/+/bc67b314e6581abe448ef9194130530bf0872262) (https://storage.g
tools/18867.0.24/

ANNOUNCEMENT
Updates to Major Packages:
CHANGE Upgraded app-admin/google-osconfig-agent to v20250121.00-r1.

CHANGE Upgraded app-containers/cri-tools to v1.31.1-r1.

CHANGE Upgraded app-containers/docker to v25.0.7.

CHANGE Upgraded app-containers/runc to v1.2.4-r1.

CHANGE Upgraded net-misc/openssh to v9.9_p1.

CHANGE Upgraded app-admin/fluent-bit to v3.2.5-r1.

https://cloud.google.com/release-notes 17/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

CHANGE Upgraded app-containers/containerd to v2.0.2-r1.

CHANGE Upgraded app-emulation/cloud-init to v24.4.1-r1.

CHANGE Upgraded app-admin/google-guest-agent to v20250204.02-r1.

CHANGE Upgraded app-admin/oslogin to 20241216.00-r1.

CHANGE Upgraded app-containers/cni-plugins to v1.6.2-r1.

ANNOUNCEMENT
New Features and Changes in the Linux Kernel:
BREAKING Removed the capability to change the kernel's preemption model on the kernel command line.

CHANGE Added support for nftables flow offload and the flowtable infrastructure.

ANNOUNCEMENT
New Features and Changes in the Image:
BREAKING Removed support for R550, R560, and R565 Nvidia drivers.

CHANGE Updates to Minor Packages:

CHANGE Removed dev-libs/confuse.

CHANGE Removed sys-libs/libsepol.

CHANGE Removed dev-go/protobuf.

CHANGE Removed chromeos-base/chromeos-ec-headers.

https://cloud.google.com/release-notes 18/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

CHANGE Removed sys-libs/libselinux.

CHANGE Removed dev-go/protobuf-legacy-api.

CHANGE Removed sys-libs/gdbm.

CHANGE Removed dev-go/appengine.

CHANGE Removed dev-python/more-itertools.

CHANGE Removed dev-python/typing-extensions.

CHANGE Removed dev-python/webcolors.

CHANGE Removed dev-python/ordered-set.

CHANGE Removed dev-python/platformdirs.

CHANGE Removed dev-python/trove-classifiers.

CHANGE Removed dev-python/tomli.

CHANGE Removed dev-python/jaraco-context.

CHANGE Removed dev-python/autocommand.

CHANGE Removed dev-python/zipp.

CHANGE Removed dev-python/zope-interface.

CHANGE Removed dev-python/wheel.

https://cloud.google.com/release-notes 19/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

CHANGE Removed dev-python/jaraco-functools.

CHANGE Removed dev-python/importlib_resources.

CHANGE Removed dev-python/pydantic.

Google Cloud Architecture Center

CHANGE Infrastructure for a RAG-capable generative AI application using Vertex AI and Vector Search
(https://cloud.google.com/architecture/gen-ai-rag-vertex-ai-vector-search): Updated the data processing component in the
reference architecture to use a Cloud Run function in place of a Cloud Run job.

Google Distributed Cloud (software only) for VMware

SECURITY The Envoy project recently announced several new security vulnerabilities (CVE-2024-53269
(https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-53269), CVE-2024-53270
(https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-53270), and CVE-2024-53271
(https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-53271)) that could allow an attacker to crash Envoy.

For more details, see the GCP-2025-009 security bulletin

(https://cloud.google.com/kubernetes-engine/security-bulletins#gcp-2025-009).

Google Distributed Cloud (software only) for bare metal

SECURITY Security bulletin

The Envoy project recently announced several new security vulnerabilities (CVE-2024-53269
(https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-53269), CVE-2024-53270

https://cloud.google.com/release-notes 20/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

(https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-53270), and CVE-2024-53271

(https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-53271)) that could allow an attacker to crash Envoy.

For more details, see the GCP-2025-009 security bulletin

(https://cloud.google.com/kubernetes-engine/security-bulletins#gcp-2025-009).
Google Kubernetes Engine

CHANGE (2025-R09) Version updates

GKE cluster versions have been updated.

New versions available for upgrades and new clusters.

The following Kubernetes versions are now available for new clusters and for opt-in control plane upgrades and node
upgrades for existing clusters. For more information on versioning and upgrades, see GKE versioning and support
(https://cloud.google.com/kubernetes-engine/versioning) and Upgrades (https://cloud.google.com/kubernetes-engine/upgrades).

Rapid channelRegular channel… Stable channel… Extended channel… No channel (#no-channel)

(#rapid-channel)

star Note: Your clusters might not have these versions available. Rollouts are already in progress when we publish the release notes, and
can take multiple days to complete across all Google Cloud zones.

The following versions are now available in the Rapid channel:

1.29.14-gke.1086000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12914)

https://cloud.google.com/release-notes 21/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

1.30.10-gke.1102000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v13010)

1.31.6-gke.1099000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1316)

1.32.2-gke.1297000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#v1322)

The following versions are no longer available in the Rapid channel:

1.29.14-gke.1020000

1.30.10-gke.1042000

1.31.6-gke.1027000

SECURITY The Envoy project recently announced several new security vulnerabilities (CVE-2024-53269, CVE-2024-53270, and CVE-
2024-53271) that could allow an attacker to crash Envoy.

For more details, see the GCP-2025-009 security bulletin

(https://cloud.google.com/kubernetes-engine/security-bulletins#gcp-2025-009).

CHANGE (2025-R09) Version updates

star Note: Your clusters might not have these versions available. Rollouts are already in progress when we publish the release notes, and can
take multiple days to complete across all Google Cloud zones.

The following versions are now available in the Rapid channel:

https://cloud.google.com/release-notes 22/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

1.29.14-gke.1086000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12914)

1.30.10-gke.1102000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v13010)

1.31.6-gke.1099000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1316)

1.32.2-gke.1297000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#v1322)

The following versions are no longer available in the Rapid channel:

1.29.14-gke.1020000

1.30.10-gke.1042000

1.31.6-gke.1027000

CHANGE (2025-R09) Version updates

star Note: Your clusters might not have these versions available. Rollouts are already in progress when we publish the release notes, and can
take multiple days to complete across all Google Cloud zones.

Version 1.31.5-gke.1233000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1315) is now the default version
for cluster creation in the Regular channel.

The following versions are now available in the Regular channel:

https://cloud.google.com/release-notes 23/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

1.29.14-gke.1018000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12914)

1.30.10-gke.1022000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v13010)

1.31.6-gke.1020000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1316)

The following versions are no longer available in the Regular channel:

1.29.13-gke.1109000

1.30.9-gke.1127000

1.31.5-gke.1169000

Auto-upgrade targets are now available for the following minor versions:

Control planes and nodes with auto-upgrade enabled in the Regular channel will be upgraded from version 1.28
to version 1.29.13-gke.1169000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12913) with this release.

Control planes and nodes with auto-upgrade enabled in the Regular channel will be upgraded from version 1.29
to version 1.30.9-gke.1201000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1309) with this release.

The following patch-only version auto-upgrade targets are now available for clusters with maintenance exclusions
(https://cloud.google.com/kubernetes-engine/docs/concepts/maintenance-windows-and-exclusions#exclusions) or other factors
preventing minor version upgrades:

Control planes and nodes with auto-upgrade enabled in the Regular channel will be upgraded from version 1.29
to version 1.29.13-gke.1169000

https://cloud.google.com/release-notes 24/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12913) with this release.

Control planes and nodes with auto-upgrade enabled in the Regular channel will be upgraded from version 1.30
to version 1.30.9-gke.1201000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1309) with this release.

Control planes and nodes with auto-upgrade enabled in the Regular channel will be upgraded from version 1.31
to version 1.31.5-gke.1233000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1315) with this release.

CHANGE (2025-R09) Version updates

star Note: Your clusters might not have these versions available. Rollouts are already in progress when we publish the release notes, and can
take multiple days to complete across all Google Cloud zones.

Version 1.30.9-gke.1046000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1309) is now the default version
for cluster creation in the Stable channel.

The following versions are now available in the Stable channel:

1.30.9-gke.1127000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1309)

1.31.5-gke.1169000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1315)

1.32.1-gke.1357001 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#v1321)

The following versions are no longer available in the Stable channel:

1.29.13-gke.1006000

https://cloud.google.com/release-notes 25/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

1.30.9-gke.1009000

1.31.5-gke.1023000

Auto-upgrade targets are now available for the following minor versions:

Control planes and nodes with auto-upgrade enabled in the Stable channel will be upgraded from version 1.28
to version 1.29.13-gke.1038000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12913) with this release.

Control planes and nodes with auto-upgrade enabled in the Stable channel will be upgraded from version 1.29
to version 1.30.9-gke.1046000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1309) with this release.

The following patch-only version auto-upgrade targets are now available for clusters with maintenance exclusions
(https://cloud.google.com/kubernetes-engine/docs/concepts/maintenance-windows-and-exclusions#exclusions) or other factors
preventing minor version upgrades:

Control planes and nodes with auto-upgrade enabled in the Stable channel will be upgraded from version 1.29
to version 1.29.13-gke.1038000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12913) with this release.

Control planes and nodes with auto-upgrade enabled in the Stable channel will be upgraded from version 1.30
to version 1.30.9-gke.1046000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1309) with this release.

Control planes and nodes with auto-upgrade enabled in the Stable channel will be upgraded from version 1.31
to version 1.31.5-gke.1068000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1315) with this release.

https://cloud.google.com/release-notes 26/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Control planes and nodes with auto-upgrade enabled in the Stable channel will be upgraded from version 1.32
to version 1.32.1-gke.1357001
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#v1321) with this release.

CHANGE (2025-R09) Version updates

star Note: Your clusters might not have these versions available. Rollouts are already in progress when we publish the release notes, and can
take multiple days to complete across all Google Cloud zones.

Version 1.31.5-gke.1233000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1315) is now the default version
for cluster creation in the Extended channel.

The following versions are now available in the Extended channel:

1.27.16-gke.2489000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.27.md#v12716)

1.28.15-gke.1844000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.28.md#v12815)

1.28.15-gke.1897000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.28.md#v12815)

1.29.14-gke.1018000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12914)

1.30.10-gke.1022000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v13010)

https://cloud.google.com/release-notes 27/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

1.31.6-gke.1020000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1316)

The following versions are no longer available in the Extended channel:

1.27.16-gke.2477000

1.28.15-gke.1641000

1.28.15-gke.1881000

1.29.13-gke.1109000

1.30.9-gke.1127000

1.31.5-gke.1169000

The following patch-only version auto-upgrade targets are now available for clusters with maintenance exclusions
(https://cloud.google.com/kubernetes-engine/docs/concepts/maintenance-windows-and-exclusions#exclusions) or other factors
preventing minor version upgrades:

Control planes and nodes with auto-upgrade enabled in the Extended channel will be upgraded from version
1.28 to version 1.28.15-gke.1781000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.28.md#v12815) with this release.

Control planes and nodes with auto-upgrade enabled in the Extended channel will be upgraded from version
1.29 to version 1.29.13-gke.1169000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12913) with this release.

Control planes and nodes with auto-upgrade enabled in the Extended channel will be upgraded from version
1.30 to version 1.30.9-gke.1201000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1309) with this release.

https://cloud.google.com/release-notes 28/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Control planes and nodes with auto-upgrade enabled in the Extended channel will be upgraded from version
1.31 to version 1.31.5-gke.1233000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1315) with this release.

CHANGE (2025-R09) Version updates

star Note: Your clusters might not have these versions available. Rollouts are already in progress when we publish the release notes, and can
take multiple days to complete across all Google Cloud zones.

Version 1.31.5-gke.1233000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1315) is now the default version
for cluster creation.

The following versions are now available:

1.29.14-gke.1086000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12914)

1.30.10-gke.1102000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v13010)

1.31.6-gke.1099000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1316)

1.32.2-gke.1297000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#v1322)

The following node versions are now available:

1.27.16-gke.2489000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.27.md#v12716)

https://cloud.google.com/release-notes 29/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

1.28.15-gke.1897000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.28.md#v12815)

1.29.14-gke.1086000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12914)

1.30.10-gke.1102000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v13010)

1.31.6-gke.1099000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1316)

1.32.2-gke.1297000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#v1322)

The following versions are no longer available:

1.29.13-gke.1006000

1.29.13-gke.1109000

1.29.14-gke.1020000

1.30.8-gke.1261000

1.30.10-gke.1042000

1.31.5-gke.1023000

1.31.6-gke.1027000

Auto-upgrade targets are now available for the following minor versions:

Control planes and nodes with auto-upgrade enabled will be upgraded from version 1.28 to version 1.29.13-
gke.1169000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12913) with
this release.

https://cloud.google.com/release-notes 30/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Control planes and nodes with auto-upgrade enabled will be upgraded from version 1.29 to version 1.30.9-
gke.1046000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1309) with
this release.

The following patch-only version auto-upgrade targets are now available for clusters with maintenance exclusions
(https://cloud.google.com/kubernetes-engine/docs/concepts/maintenance-windows-and-exclusions#exclusions) or other factors
preventing minor version upgrades:

Control planes and nodes with auto-upgrade enabled will be upgraded from version 1.29 to version 1.29.13-
gke.1169000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12913) with
this release.

Control planes and nodes with auto-upgrade enabled will be upgraded from version 1.30 to version 1.30.9-
gke.1046000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1309) with
this release.

Control planes and nodes with auto-upgrade enabled will be upgraded from version 1.31 to version 1.31.5-
gke.1233000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1315) with
this release.
Google SecOps

CHANGE Gemini documentation summaries

You can use Gemini to answer questions about Google SecOps based on the documentation. Enter a prompt in the Gemini
pane to request information about any aspect of how to use Google SecOps. Gemini generates a summary based on
relevant documentation. This feature is in public preview.

For more information, see Gemini documentation summaries (https://cloud.google.com/chronicle/docs/secops/gemini-docs).

Google SecOps SIEM

https://cloud.google.com/release-notes 31/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

CHANGE Gemini documentation summaries

You can use Gemini to answer questions about Google SecOps based on the documentation. Enter a prompt in the Gemini
pane to request information about any aspect of how to use Google SecOps. Gemini generates a summary based on
relevant documentation. This feature is in public preview.

For more information, see Gemini documentation summaries (https://cloud.google.com/chronicle/docs/secops/gemini-docs).

Google SecOps SOAR

ANNOUNCEMENT The phased rollout to regions as described here (https://cloud.google.com/chronicle/docs/soar/release-notes#March_03_2025) is

postponed to Sunday, March 16th, 2025.

Memorystore for Redis Cluster

FEATURE Memorystore for Redis Cluster supports storing and querying vector data. This feature is now Generally Available (GA)
(https://cloud.google.com/products#product-launch-stages). For more information, see About Vector Search
(https://cloud.google.com/memorystore/docs/cluster/about-vector-search).

SAP on Google Cloud

ANNOUNCEMENT Google Cloud's Agent for SAP version 3.7

Version 3.7 of Google Cloud's Agent for SAP is generally available (GA). This version introduces the following:

Support for the disk snapshot based backup and recovery of SAP HANA scale-out systems, except those with the
host auto-failover solution.

Enhancements for Backint based backup and recovery of SAP HANA.

Enhancements for evaluating Pacemaker configurations by using Workload Manager.

https://cloud.google.com/release-notes 32/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Support for showing annotations for SAP events in Cloud Monitoring and predefined observability dashboards.

Support to validate the Google Cloud setup for using the agent features.

Automatic polling of agent configuration, negating the need to restart the agent after you change its configuration.

For more information, see What's new with Google Cloud's Agent for SAP
(https://cloud.google.com/solutions/sap/docs/agent-for-sap/whats-new).

March 04, 2025

AlloyDB for PostgreSQL

FEATURE AlloyDB for PostgreSQL is now available in the following region: europe-north2 (Stockholm). For more information, see
AlloyDB Locations. (https://cloud.google.com/alloydb/docs/locations)

Artifact Registry

FEATURE Artifact Registry is available in the europe-north2 region (Stockholm). For more information, see Global locations
(https://cloud.google.com/about/locations).

BigQuery

CHANGE BigQuery is now available in the Stockholm (europe-north2) region (https://cloud.google.com/bigquery/docs/locations#regions).

Bigtable

FEATURE Bigtable is available in the europe-north2 (Stockholm) region. For more information, see Bigtable locations
(https://cloud.google.com/bigtable/docs/locations).

https://cloud.google.com/release-notes 33/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Cloud Build

CHANGE Cloud Build is now available in the northamerica-south1 region.

For more information, see Cloud Build locations (https://cloud.google.com/build/docs/locations).

Cloud Composer

FEATURE Cloud Composer 3 supports Customer Managed Encryption Keys (CMEK)

(https://cloud.google.com/composer/docs/composer-3/configure-cmek-encryption).

Cloud Interconnect

FEATURE Dedicated Cloud Interconnect support is available in the following colocation facilities:

Stockholm, Sweden

For more information, see the Locations table

(https://cloud.google.com/network-connectivity/docs/interconnect/concepts/choosing-colocation-facilities#locations-table) and Global
Locations (https://cloud.google.com/about/locations).

Cloud Key Management Service

FEATURE Cloud KMS is available in the following region:

europe-north2

For more information, see Cloud KMS locations (https://cloud.google.com/kms/docs/locations).

Cloud Run

https://cloud.google.com/release-notes 34/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

FEATURE The following new region is now available: northamerica-south1.

Cloud SQL for MySQL

FEATURE Cloud SQL Enterprise edition (https://cloud.google.com/sql/docs/mysql/instance-settings) now supports the europe-north2
(Stockholm) region.

FEATURE Cloud SQL for MySQL now supports minor version 8.0.41. To upgrade your existing instance to the new version, see
Upgrade the database minor version (https://cloud.google.com/sql/docs/mysql/upgrade-minor-db-version).

Cloud SQL for PostgreSQL

FEATURE Cloud SQL Enterprise edition (https://cloud.google.com/sql/docs/postgres/instance-settings) now supports the europe-north2
(Stockholm) region.

Cloud SQL for SQL Server

FEATURE Cloud SQL Enterprise edition (https://cloud.google.com/sql/docs/sqlserver/instance-settings) now supports the europe-north2
(Stockholm) region.

Cloud Storage

FEATURE Cloud Storage now offers support in the Stockholm, Sweden (europe-north2) region. To learn more about supported
locations, see Cloud Storage bucket locations (https://cloud.google.com/storage/docs/locations).

Cloud VPN

FEATURE Cloud VPN is now available in region (https://cloud.google.com/compute/docs/regions-zones/#available) europe-north2

(Stockholm, Sweden). For more information, see Global locations (https://cloud.google.com/about/locations).

Pricing is available on the Cloud VPN pricing page (https://cloud.google.com/network-connectivity/docs/vpn/pricing).

https://cloud.google.com/release-notes 35/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Compute Engine

FEATURE Generally available: Stockholm, Sweden, Europe (europe-north2-a,b,c) has launched with N4, C3D highmem, C4
highmem, and E2 (https://cloud.google.com/compute/docs/general-purpose-machines) machine types available in all three zones.
For more information, see Cloud locations (https://cloud.google.com/about/locations) and VM instance pricing
(https://cloud.google.com/compute/vm-instance-pricing).

Cortex Framework

ANNOUNCEMENT
Release 6.2
FEATURE New Data Sources

Marketing: Cross Media & Product Connected Insights (https://cloud.google.com/cortex/docs/marketing-cross-media).

Understand the effectiveness of marketing campaigns running across media platforms such as Google Ads,
YouTube (with DV360), Meta, and TikTok for product and product category sales performance with the power of
Gemini Flash 2.0. Access the Looker Block for Cross Media
(https://cloud.google.com/cortex/docs/looker-block-cross-media) with sample dashboards for further analytics.

Cortex Common Dimensions (https://cloud.google.com/cortex/docs/optional-step-common-dimensions): Newly added utility

views and tables created within the Data Foundation to enable advanced use cases across different data sources,
such as Cross Media & Product Connected Insights. Currently Country, Product Hierarchy and Currency Conversion
are available.

CHANGE Minor refactoring for Data Mesh configuration specs code, which are now moved to the /src/common/py_libs
directory.

FIXED SAP CDC Deployer now provides detailed error messages on failure.

https://cloud.google.com/release-notes 36/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

SAP Reporting - Fixing abundant join condition in PurchaseDocuments_Flow view.

For all DAGs, BigQuery execution now happens in the same location as the dataset.

1-click deployer usability fixes for CM360 and SFMC bucket names.

DEPRECATED The following standalone accelerators and samples are removed from Cortex Framework:

Demand Sensing

AppLayer

CATGAP

SAP ML Model samples

Dataflow

FEATURE Dataflow is now available in Stockholm (europe-north2).

Dataproc

FEATURE Dataproc is now available in the europe-north2 region (https://cloud.google.com/about/locations) (Stockholm, Sweden).

Firestore

FEATURE Firestore now supports the europe-north2 Stockholm region.

For a full list of supported locations, see Locations (https://cloud.google.com/firestore/docs/locations).

Firestore in Datastore mode

FEATURE Firestore in Datastore mode now supports the europe-north2 Stockholm region.

https://cloud.google.com/release-notes 37/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

For a full list of supported locations, see Locations (https://cloud.google.com/datastore/docs/locations).

Generative AI on Vertex AI

ANNOUNCEMENT Vertex AI Agent Engine

Vertex AI Agent Engine (https://cloud.google.com/vertex-ai/generative-ai/docs/agent-engine/overview) is now generally available

(GA) (https://cloud.google.com/products?e=13802955&hl=en#product-launch-stages).

Billing for Vertex AI Agent Engine starts on March 4, 2025. We recommend that you delete unused resources to avoid
incurring unwanted costs. For more information, see Pricing
(https://cloud.google.com/vertex-ai/generative-ai/docs/agent-engine/overview#pricing).

CHANGE LangChain on Vertex AI has been renamed to Vertex AI Agent Engine

(https://cloud.google.com/vertex-ai/generative-ai/docs/agent-engine/overview).

Google Kubernetes Engine

FEATURE The europe-north2 (https://cloud.google.com/compute/docs/regions-zones) region in Stockholm, Sweden is now available. For
more information, see the Global Locations (https://cloud.google.com/about/locations).

FEATURE The europe-north2 (https://cloud.google.com/compute/docs/regions-zones) region in Stockholm, Sweden is now available. For
more information, see the Global Locations (https://cloud.google.com/about/locations).

Memorystore for Memcached

FEATURE Memorystore is available in the europe-north2 (Stockholm) region. For more information, see Regions and zones
(https://cloud.google.com/memorystore/docs/memcached/regions).

Memorystore for Redis

https://cloud.google.com/release-notes 38/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

FEATURE Memorystore is available in the europe-north2 (Stockholm) region. For more information, see Regions and zones
(https://cloud.google.com/memorystore/docs/redis/regions).

Memorystore for Redis Cluster

FEATURE Memorystore is available in the europe-north2 (Stockholm) region. For more information, see Memorystore for Redis
Cluster locations (https://cloud.google.com/memorystore/docs/cluster/locations).

Oracle Database@Google Cloud

FEATURE You can now start, stop, and restart your Autonomous Databases
(https://cloud.google.com/oracle/database/docs/start-stop-databases) through the Google Cloud console. This feature is
generally available (GA) (https://cloud.google.com/products#product-launch-stages).

Pub/Sub

FEATURE Pub/Sub is now available in the europe-north2 region (Stockholm, Sweden, Europe). For more information, see Cloud
locations
(https://cloud.google.com/about/locations?
_gl=1*lhbyi0*_ga*MTg1NTEwMDE4Ny4xNzQxMDE5MTkz*_ga_4LYFWVHBEB*MTc0MTAyNjM2MC4yLjEuMTc0MTAyNjY5OC4wLjAuMA..)
.

Sensitive Data Protection

FEATURE Sensitive Data Protection is available in the europe-north2 region. For more information, see Sensitive Data Protection
locations (https://cloud.google.com/sensitive-data-protection/docs/locations).

Spanner

https://cloud.google.com/release-notes 39/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

FEATURE You can create Spanner regional instance configurations

(https://cloud.google.com/spanner/docs/instance-configurations#available-configurations-regional) in Stockholm, Sweden (europe-
north2). For more information, see Google Cloud locations (https://cloud.google.com/about/locations) and Spanner pricing
(https://cloud.google.com/spanner/pricing).

FEATURE A new multi-region instance configuration

(https://cloud.google.com/spanner/docs/instance-configurations#available-configurations-multi-region) is now available in Europe -
eur7 (Milan/Frankfurt/Turin).

Virtual Private Cloud

FEATURE For auto mode VPC networks, added a new subnet 10.226.0.0/20 for the Stockholm europe-north2 region. For more
information, see Global Locations (https://cloud.google.com/about/locations) and Auto mode IP ranges
(https://cloud.google.com/vpc/docs/subnets#ip-ranges).

March 03, 2025

App Engine flexible environment Go

FEATURE Go 1.23 (https://cloud.google.com/appengine/docs/flexible/go/runtime) is now generally available

(https://cloud.google.com/products/#product-launch-stages).

App Engine standard environment Go

FEATURE Go 1.23 (https://cloud.google.com/appengine/docs/standard/go/runtime) is now generally available

(https://cloud.google.com/products/#product-launch-stages).

https://cloud.google.com/release-notes 40/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

FEATURE App Engine now sets the automatic scaling maximum instances default for standard environment deployments to 20. This
change doesn't impact existing apps. To override the default, specify a new max_instances
(https://cloud.google.com/appengine/docs/standard/reference/app-yaml#scaling_elements) value in your app.yaml file, and deploy
a new version or redeploy over an existing version.

App Engine standard environment Java

FEATURE App Engine now sets the automatic scaling maximum instances default for standard environment deployments to 20. This
change doesn't impact existing apps. To override the default, specify a new max_instances
(https://cloud.google.com/appengine/docs/standard/reference/app-yaml#scaling_elements) value in your app.yaml file, and deploy
a new version or redeploy over an existing version.

App Engine standard environment Node.js

FEATURE App Engine now sets the automatic scaling maximum instances default for standard environment deployments to 20. This
change doesn't impact existing apps. To override the default, specify a new max_instances
(https://cloud.google.com/appengine/docs/standard/reference/app-yaml#scaling_elements) value in your app.yaml file, and deploy
a new version or redeploy over an existing version.

App Engine standard environment PHP

FEATURE App Engine now sets the automatic scaling maximum instances default for standard environment deployments to 20. This
change doesn't impact existing apps. To override the default, specify a new max_instances
(https://cloud.google.com/appengine/docs/standard/reference/app-yaml#scaling_elements) value in your app.yaml file, and deploy
a new version or redeploy over an existing version.

App Engine standard environment Python

https://cloud.google.com/release-notes 41/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

FEATURE App Engine now sets the automatic scaling maximum instances default for standard environment deployments to 20. This
change doesn't impact existing apps. To override the default, specify a new max_instances
(https://cloud.google.com/appengine/docs/standard/reference/app-yaml#scaling_elements) value in your app.yaml file, and deploy
a new version or redeploy over an existing version.

App Engine standard environment Ruby

FEATURE App Engine now sets the automatic scaling maximum instances default for standard environment deployments to 20. This
change doesn't impact existing apps. To override the default, specify a new max_instances
(https://cloud.google.com/appengine/docs/standard/reference/app-yaml#scaling_elements) value in your app.yaml file, and deploy
a new version or redeploy over an existing version.

BigQuery

LIBRARIES A weekly digest of client library updates from across the Cloud SDK (https://cloud.google.com/sdk).

JavaPython (#python)
(#java)

Changes for google-cloud-bigquery (https://github.com/googleapis/java-bigquery)

2.48.1 (https://github.com/googleapis/java-bigquery/compare/v2.48.0...v2.48.1) (2025-02-26)

Dependencies

Update actions/upload-artifact action to v4.6.1 (#3691 (https://github.com/googleapis/java-bigquery/issues/3691))

(9c0edea (https://github.com/googleapis/java-bigquery/commit/9c0edea7c00b3ffbe6b6a404e4161f768acb34f2))

Update dependency com.google.api.grpc:proto-google-cloud-bigqueryconnection-v1 to v2.60.0 (#3680

(https://github.com/googleapis/java-bigquery/issues/3680)) (6d9a40d

https://cloud.google.com/release-notes 42/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

(https://github.com/googleapis/java-bigquery/commit/6d9a40d55a6bbcbff7df39723d33f0af2b24f66e))

Update dependency com.google.apis:google-api-services-bigquery to v2-rev20250216-2.0.0 (#3688

(https://github.com/googleapis/java-bigquery/issues/3688)) (e3beb6f
(https://github.com/googleapis/java-bigquery/commit/e3beb6ffe433db8ad4087d0f27a8f0d23e7c9322))

Update dependency com.google.cloud:google-cloud-datacatalog-bom to v1.64.0 (#3681

(https://github.com/googleapis/java-bigquery/issues/3681)) (9e4e261
(https://github.com/googleapis/java-bigquery/commit/9e4e26116226d17cc42ae030eed284bd6674b74b))

Update dependency com.google.cloud:sdk-platform-java-config to v3.44.0 (#3694

(https://github.com/googleapis/java-bigquery/issues/3694)) (f69fbd3
(https://github.com/googleapis/java-bigquery/commit/f69fbd371f18da6ddc43d4f32f532e684026fe16))

Update dependency com.google.oauth-client:google-oauth-client-java6 to v1.38.0 (#3685

(https://github.com/googleapis/java-bigquery/issues/3685)) (53bd7af
(https://github.com/googleapis/java-bigquery/commit/53bd7af47783674a3accbadb1172edbcf628ab2b))

Update dependency com.google.oauth-client:google-oauth-client-jetty to v1.38.0 (#3686

(https://github.com/googleapis/java-bigquery/issues/3686)) (d71b2a3
(https://github.com/googleapis/java-bigquery/commit/d71b2a34a728fb6ee1c88cdc895b87959e230b7a))

Update ossf/scorecard-action action to v2.4.1 (#3690 (https://github.com/googleapis/java-bigquery/issues/3690))

(cdb61fe (https://github.com/googleapis/java-bigquery/commit/cdb61febcb1a64f6ddd3c0e3c29fa7995f1d3fa5))

FEATURE You can create a SQL user-defined aggregate function

(https://cloud.google.com/bigquery/docs/user-defined-aggregates#create-sql-udaf) by using the CREATE AGGREGATE FUNCTION
statement (https://cloud.google.com/bigquery/docs/reference/standard-sql/data-definition-language#sql-create-udaf-function). This
feature is generally available (https://cloud.google.com/products#product-launch-stages) (GA).

https://cloud.google.com/release-notes 43/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

FEATURE Gemini in BigQuery can help you complete Python code

(https://cloud.google.com/bigquery/docs/write-sql-gemini#complete_python_code) with contextually appropriate recommendations
that are based on content in the query editor. This feature is now generally available
(https://cloud.google.com/products#product-launch-stages) (GA).

Bigtable

LIBRARIES A weekly digest of client library updates from across the Cloud SDK (https://cloud.google.com/sdk).

JavaPython (#python)
(#java)

Changes for google-cloud-bigtable (https://github.com/googleapis/java-bigtable)

2.53.0 (https://github.com/googleapis/java-bigtable/compare/v2.52.0...v2.53.0) (2025-02-21)

Features

Skip large rows (#2482 (https://github.com/googleapis/java-bigtable/issues/2482)) (cd7f82e

(https://github.com/googleapis/java-bigtable/commit/cd7f82e4b66dc3c34262c73b26afc2fdfd1deed7))

Certificate Authority Service

FEATURE Certificate Authority Service is now available in the following region:

europe-north2 (Stockholm)

For more information, see Certificate Authority Service locations

(https://cloud.google.com/certificate-authority-service/docs/locations).

https://cloud.google.com/release-notes 44/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Cloud Logging

LIBRARIES A weekly digest of client library updates from across the Cloud SDK (https://cloud.google.com/sdk).

Java
(#java)

Changes for google-cloud-logging (https://github.com/googleapis/java-logging)

3.21.4 (https://github.com/googleapis/java-logging/compare/v3.21.3...v3.21.4) (2025-02-26)

Bug Fixes

deps: Update the Java code generator (gapic-generator-java) to 2.54.0 (67fa9fb

(https://github.com/googleapis/java-logging/commit/67fa9fbbc48dd8df9c176ba0bb3d1acf6b975bfc))

Dependencies

Update dependency com.google.cloud:sdk-platform-java-config to v3.44.0 (#1768

(https://github.com/googleapis/java-logging/issues/1768)) (a69e699
(https://github.com/googleapis/java-logging/commit/a69e6990e5cc7ab920382599510bb14f29a12d7d))

Update googleapis/sdk-platform-java action to v2.54.0 (#1762

(https://github.com/googleapis/java-logging/issues/1762)) (d50a8d2
(https://github.com/googleapis/java-logging/commit/d50a8d2fbef588138b4d47cbd3440d7217d690b0))

Cloud Run

FEATURE Support for the Go 1.23 runtime (https://cloud.google.com/run/docs/runtime-support#go) is now in general availability (GA).

https://cloud.google.com/release-notes 45/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Cloud Run functions

FEATURE Cloud Run functions now supports the Go 1.23 runtime

(https://cloud.google.com/functions/docs/concepts/execution-environment#go) at the General Availability release level
(https://cloud.google.com/products/?e=48754805&hl=en#product-launch-stages).

Cloud SQL for PostgreSQL

FEATURE The rollout of the following minor versions, extension versions, and plugin versions is complete:

Minor versions

12.21 is upgraded to 12.22.

13.18 is upgraded to 13.20.

14.15 is upgraded to 14.17.

15.10 is upgraded to 15.12

16.6 is upgraded to 16.8.

17.2 is upgraded to 17.4.

Extensions and plugins

PostGIS is upgraded from 3.4.3 to 3.4.4.

To use these versions of the extensions, update your instance to [PostgreSQL version].R20250112.01_14.

If you use a maintenance window, then the updates to the minor, extension, and plugin versions happen according to the
timeframe that you set in the window. Otherwise, the updates occur within the next few weeks.

https://cloud.google.com/release-notes 46/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

For more information on checking your maintenance version, see Self-service maintenance
(https://cloud.google.com/sql/docs/postgres/self-service-maintenance). To find your maintenance window or to manage
maintenance updates, see Find and set maintenance windows
(https://cloud.google.com/sql/docs/postgres/set-maintenance-window).
Cloud Storage

LIBRARIES A weekly digest of client library updates from across the Cloud SDK (https://cloud.google.com/sdk).

JavaPython (#python)
(#java)

Changes for google-cloud-storage (https://github.com/googleapis/java-storage)

2.49.0 (https://github.com/googleapis/java-storage/compare/v2.48.2...v2.49.0) (2025-02-26)

Features

Add new Options to allow per method header values (#2941

(https://github.com/googleapis/java-storage/issues/2941)) (297802d
(https://github.com/googleapis/java-storage/commit/297802d1715e3289dd720fba851c563004b8c5f2))

transfer-manager: Add ParallelUploadConfig.Builder#setUploadBlobInfoFactory (#2936

(https://github.com/googleapis/java-storage/issues/2936)) (86e9ae8
(https://github.com/googleapis/java-storage/commit/86e9ae80772aa202d0b6563b8dd37722d8b5e0e0)), closes #2638
(https://github.com/googleapis/java-storage/issues/2638)

Bug Fixes

https://cloud.google.com/release-notes 47/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Categorize a WatchdogTimeoutException as retriable for grpc ReadObject (#2954

(https://github.com/googleapis/java-storage/issues/2954)) (b53bd53
(https://github.com/googleapis/java-storage/commit/b53bd53c26984b3e850355ced608b511688b74d1))

deps: Update the Java code generator (gapic-generator-java) to 2.53.0 (9946d6b

(https://github.com/googleapis/java-storage/commit/9946d6bdc7ec8398bf1bd1df63f272df1351539e))

Update grpc based Storage to defer project id validation (#2930

(https://github.com/googleapis/java-storage/issues/2930)) (cc03784
(https://github.com/googleapis/java-storage/commit/cc037848be7d21cb827c97d7f71618f1bfae941d))

Update kms key handling when opening a resumable upload to clear the value in the json to be null rather than
empty string (#2939 (https://github.com/googleapis/java-storage/issues/2939)) (43553de
(https://github.com/googleapis/java-storage/commit/43553dedce33093e751143fadb372024d975706c))

Dependencies

Update sdk-platform-java dependencies (#2957 (https://github.com/googleapis/java-storage/issues/2957))

(40cfda6 (https://github.com/googleapis/java-storage/commit/40cfda62d4bff72a857d0269eaa7c0225f216650))

Documentation

Add note about HNS support to moveBlob (#2929 (https://github.com/googleapis/java-storage/issues/2929))

(c461546 (https://github.com/googleapis/java-storage/commit/c461546bfd016b21eb99f8e25604ee3fd001c9c6))
Container Optimized OS

CHANGE cos-113-18244-291-53

https://cloud.google.com/release-notes 48/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Kernel Docker ContainerdGPU Drivers

(https://cloud.goog
os/docs/how-to/ru

COS-6.1.123 v24.0.9v1.7.24 See List

(https://cos.googlesource.com/third_party/kernel/+/5303e06cb782ad8c7fc5ccf4e2cf228ab1373e60) (https://storage.go
tools/18244.291.53

FEATURE Updated cos-gpu-installer to v2.4.8: Add the -skip-nvidia-smi flag to disable the execution of nvidia-smi verification during
gpu driver installation.

FIXED Upgraded moby/buildkit to v0.12.5. This fixes CVE-2024-23653 in app-containers/docker v24.0.9.

FIXED Upgraded sys-apps/which to v2.23.

FIXED Upgraded sys-apps/diffutils to v3.11-r1.

FIXED Upgraded net-misc/socat to v1.8.0.3.

SECURITY Fixed KCTF-638ba50 in the Linux kernel.

SECURITY Fixed CVE-2025-21690 in the Linux kernel.

CHANGE cos-109-17800-436-48

Kernel Docker ContainerdGPU Drivers

(https://cloud.goog
os/docs/how-to/ru

https://cloud.google.com/release-notes 49/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

COS-6.1.124 v24.0.9v1.7.24 See List

(https://cos.googlesource.com/third_party/kernel/+/8fd68e02310ed038999ccf777b4a4ea1c4cfc22d) (https://storage.go
tools/17800.436.48

FEATURE Updated cos-gpu-installer to v2.4.8: Add the -skip-nvidia-smi flag to disable the execution of nvidia-smi verification during
gpu driver installation.

FIXED Upgraded sys-apps/diffutils to v3.11-r1.

SECURITY Upgraded moby/buildkit to v0.12.5. This fixes CVE-2024-23653 in app-containers/docker v24.0.9.

SECURITY Fixed CVE-2025-21690 in the Linux kernel.

CHANGE cos-105-17412-535-63

Kernel Docker ContainerdGPU Drivers

(https://cloud.goo
os/docs/how-to/ru

COS-5.15.173 v23.0.3v1.7.23 See List

(https://cos.googlesource.com/third_party/kernel/+/2ad73a401e5c064c3b927f74acbec3ac1b03b7ed) (https://storage.g
tools/17412.535.6

FIXED Upgraded sys-apps/diffutils to v3.11-r1.

FIXED Upgraded sys-apps/which to v2.23.

SECURITY Fixed CVE-2025-21690 in the Linux kernel.

https://cloud.google.com/release-notes 50/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

CHANGE cos-117-18613-164-49

Kernel Docker ContainerdGPU Drivers

(https://cloud.goog
os/docs/how-to/run

COS-6.6.72 v24.0.9v1.7.24 See List

(https://cos.googlesource.com/third_party/kernel/+/87fa3d045f71769f70ac5cefcb27d34a8b6b1680) (https://storage.go
tools/18613.164.49

FIXED Upgraded moby/buildkit to v0.12.5. This fixes CVE-2024-23653 in app-containers/docker v24.0.9.

SECURITY Fixed CVE-2025-21690 in the Linux kernel.

Dataproc

ANNOUNCEMENT New Dataproc Serverless for Spark runtime versions

(https://cloud.google.com/dataproc-serverless/docs/concepts/versions/dataproc-serverless-versions):

1.1.94

1.2.38

2.2.38

Google SecOps

ANNOUNCEMENT The Custom Fields (https://cloud.google.com/chronicle/docs/secops/release-notes#February_22_2025) feature is now in General

Availability.

Google SecOps SOAR

https://cloud.google.com/release-notes 51/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

ANNOUNCEMENT Beginning on Sunday, March 9, 2025, we will initiate a phased rollout of releases.

The first stage will be rolled out in the following regions on Sunday, March 9, 2025:

Japan

India

Australia

Canada

Germany

Switzerland

The second stage will be rolled out in the remaining regions on Sunday, March 16, 2025:

Singapore

Qatar

Saudi Arabia

Israel

UK (London)

Italy

EU (multi-region)

US (multi-region)

https://cloud.google.com/release-notes 52/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

If you're unsure of your assigned region, contact your Google SecOps representative.
Oracle Database@Google Cloud

FEATURE You can now choose an Exadata Infrastructure instance from a project other than your default current project while
creating a VM cluster (https://cloud.google.com/oracle/database/docs/create-clusters). This feature is in Public Preview
(https://cloud.google.com/products#product-launch-stages).

Policy Controller

CHANGE Policy Controller version 1.20.1 is now available.

Pub/Sub

FEATURE You can now ingest streaming data into Pub/Sub by using an import topic, from the following external sources:

Azure Event Hubs (https://cloud.google.com/pubsub/docs/create-azure-event-hub-import-topic)

Amazon Managed Streaming for Apache Kafka (MSK)

(https://cloud.google.com/pubsub/docs/create-amazon-msk-import-topic)

Confluent Cloud (https://cloud.google.com/pubsub/docs/create-confluent-cloud-import-topic)

LIBRARIES A weekly digest of client library updates from across the Cloud SDK (https://cloud.google.com/sdk).

Java
(#java)

Changes for google-cloud-pubsub (https://github.com/googleapis/java-pubsub)

1.137.1 (https://github.com/googleapis/java-pubsub/compare/v1.137.0...v1.137.1) (2025-02-26)

https://cloud.google.com/release-notes 53/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Bug Fixes

deps: Update the Java code generator (gapic-generator-java) to 2.54.0 (ccf670f

(https://github.com/googleapis/java-pubsub/commit/ccf670f9dc755770d40b9d1bf2c870c0452aa39e))

Dependencies

Update dependency com.google.cloud:google-cloud-bigquery to v2.48.0 (#2343

(https://github.com/googleapis/java-pubsub/issues/2343)) (3bbd7e1
(https://github.com/googleapis/java-pubsub/commit/3bbd7e1e812a7a00cfff36a0c1d8a5212d4e134a))

Update dependency com.google.cloud:google-cloud-core to v2.52.0 (#2348

(https://github.com/googleapis/java-pubsub/issues/2348)) (f0977b4
(https://github.com/googleapis/java-pubsub/commit/f0977b40479823ce5b7e90f864261f11115610ca))

Update dependency com.google.cloud:sdk-platform-java-config to v3.44.0 (#2349

(https://github.com/googleapis/java-pubsub/issues/2349)) (90ed10b
(https://github.com/googleapis/java-pubsub/commit/90ed10b474f7a59286365d8a6ad676d9a4f4113b))

Update googleapis/sdk-platform-java action to v2.54.0 (#2347

(https://github.com/googleapis/java-pubsub/issues/2347)) (ac8db2d
(https://github.com/googleapis/java-pubsub/commit/ac8db2dda6cd5f0bdf689052bb37cb2eaab08c46))

Secret Manager

FEATURE Secret Manager is now available in the following region:

europe-north2 (Stockholm)

For more information, see Secret Manager locations (https://cloud.google.com/secret-manager/docs/locations).

https://cloud.google.com/release-notes 54/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Security Command Center

FEATURE You can use Virtual Machine Threat Detection to scan your Amazon Elastic Compute Cloud (EC2) VM disks for malware.
To enable this feature, see Enable VM Threat Detection for AWS
(https://cloud.google.com/security-command-center/docs/enable-vmtd-aws). This feature is in Preview
(https://cloud.google.com/products#product-launch-stages).

March 02, 2025

Google SecOps SOAR

ANNOUNCEMENT Release 6.3.37 is currently in Preview. This release contains internal and customer bug fixes.

March 01, 2025

Apigee hybrid

ANNOUNCEMENT
hybrid v1.12.4
On March 1, 2025 we released an updated version of the Apigee hybrid software, 1.12.4.

This release enhances the security posture within the JavaCallout

(https://cloud.google.com/apigee/docs/api-platform/reference/policies/java-callout-policy) and PythonScript
(https://cloud.google.com/apigee/docs/api-platform/reference/policies/python-script-policy) policies. This release does not include
any new features or general bug fixes.

https://cloud.google.com/release-notes 55/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

For information on upgrading, see Upgrading Apigee hybrid to version 1.12

(https://cloud.google.com/apigee/docs/hybrid/v1.12/upgrade).

For information on new installations, see The big picture (https://cloud.google.com/apigee/docs/hybrid/v1.12/big-picture).

For recommended actions after upgrading, see Validate policies after upgrade to 1.12.4
(https://cloud.google.com/apigee/docs/hybrid/v1.12/upgrade#recommended-actions-upgrade-1124).

FIXED
Bug ID Description

390258745, Any left over Cassandra snapshots are automatically removed. This fixes known issue 388608440
388608440 (https://cloud.google.com/apigee/docs/release/known-issues#388608440).

SECURITY Stricter class instantiation checks included in this release.

JavaCallout policy now includes additional security during Java class instantiation. The enhanced security measure
prevents the deployment of policies that directly or indirectly attempt actions that require permissions that are not
allowed.

In most cases, existing policies will continue to function as expected without any issues. However, there is a possibility
that policies relying on third-party libraries, or those with custom code that indirectly triggers operations requiring elevated
permissions, could be affected.

To test your installation, follow the procedure in Validate policies after upgrade to 1.12.4
(https://cloud.google.com/apigee/docs/hybrid/v1.12/upgrade#recommended-actions-upgrade-1124) to validate policy behavior.

https://cloud.google.com/release-notes 56/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Bug ID Description

391923260 Security fixes for apigee-watcher.

This addresses the following vulnerabilities:

CVE-2024-24789 (https://nvd.nist.gov/vuln/detail/CVE-2024-24789)

CVE-2024-45337 (https://nvd.nist.gov/vuln/detail/CVE-2024-45337)

CVE-2024-45338 (https://nvd.nist.gov/vuln/detail/CVE-2024-45338)

CVE-2024-24790 (https://nvd.nist.gov/vuln/detail/CVE-2024-24790)

CVE-2022-23635 (https://nvd.nist.gov/vuln/detail/CVE-2022-23635)

CVE-2022-31045 (https://nvd.nist.gov/vuln/detail/CVE-2022-31045)

CVE-2021-39156 (https://nvd.nist.gov/vuln/detail/CVE-2021-39156)

CVE-2021-39155 (https://nvd.nist.gov/vuln/detail/CVE-2021-39155)

CVE-2019-14993 (https://nvd.nist.gov/vuln/detail/CVE-2019-14993)

385394193, 383850393, Security fixes for apigee-cassandra-backup-utility, apigee-cassandra-client, and apigee-

383778273 hybrid-cassandra.
This addresses the following vulnerabilities:

CVE-2024-0727 (https://nvd.nist.gov/vuln/detail/CVE-2024-0727)

CVE-2023-5678 (https://nvd.nist.gov/vuln/detail/CVE-2023-5678)

CVE-2022-3715 (https://nvd.nist.gov/vuln/detail/CVE-2022-3715)

382967738 Fixed a vulnerability in PythonScript policy.

365178914 Security fixes for apigee-cassandra-backup-utility and apigee-hybrid-cassandra.

This addresses the following vulnerability:

https://cloud.google.com/release-notes 57/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Bug ID Description

CVE-2023-37920 (https://nvd.nist.gov/vuln/detail/CVE-2023-37920)

N/A Security fixes for apigee-fluent-bit.

This addresses the following vulnerability:

CVE-2024-10979 (https://nvd.nist.gov/vuln/detail/CVE-2024-10979)

N/A Security fixes for apigee-kube-rbac-proxy.

This addresses the following vulnerabilities:

CVE-2024-24790 (https://nvd.nist.gov/vuln/detail/CVE-2024-24790)

CVE-2019-9192 (https://nvd.nist.gov/vuln/detail/CVE-2019-9192)

CVE-2019-1010023 (https://nvd.nist.gov/vuln/detail/CVE-2019-1010023)

CVE-2019-1010022 (https://nvd.nist.gov/vuln/detail/CVE-2019-1010022)

CVE-2018-20796 (https://nvd.nist.gov/vuln/detail/CVE-2018-20796)

N/A Security fixes for apigee-fluent-bit.

This addresses the following vulnerability:

CVE-2024-10979 (https://nvd.nist.gov/vuln/detail/CVE-2024-10979)

N/A Security fixes for apigee-kube-rbac-proxy.

This addresses the following vulnerabilities:

CVE-2024-24790 (https://nvd.nist.gov/vuln/detail/CVE-2024-24790)

CVE-2019-9192 (https://nvd.nist.gov/vuln/detail/CVE-2019-9192)

CVE-2019-1010023 (https://nvd.nist.gov/vuln/detail/CVE-2019-1010023)

https://cloud.google.com/release-notes 58/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Bug ID Description

CVE-2019-1010022 (https://nvd.nist.gov/vuln/detail/CVE-2019-1010022)

CVE-2018-20796 (https://nvd.nist.gov/vuln/detail/CVE-2018-20796)

N/A Security fixes for apigee-mint-task-scheduler.

This addresses the following vulnerability:

CVE-2024-47535 (https://nvd.nist.gov/vuln/detail/CVE-2024-47535)

N/A Security fixes for apigee-open-telemetry-collector.

This addresses the following vulnerability:

CVE-2024-36129 (https://nvd.nist.gov/vuln/detail/CVE-2024-36129)

N/A Security fixes for apigee-udca.

This addresses the following vulnerability:

CVE-2024-24790 (https://nvd.nist.gov/vuln/detail/CVE-2024-24790)

ANNOUNCEMENT
hybrid v1.13.3
On March 1, 2025 we released an updated version of the Apigee hybrid software, 1.13.3.

This release enhances the security posture within the JavaCallout

(https://cloud.google.com/apigee/docs/api-platform/reference/policies/java-callout-policy) and PythonScript
(https://cloud.google.com/apigee/docs/api-platform/reference/policies/python-script-policy) policies. This release does not include
any new features or general bug fixes.

For information on upgrading, see Upgrading Apigee hybrid to version 1.13

(https://cloud.google.com/apigee/docs/hybrid/v1.13/upgrade).

https://cloud.google.com/release-notes 59/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

For information on new installations, see The big picture (https://cloud.google.com/apigee/docs/hybrid/v1.13/big-picture).

For recommended actions after upgrading, see Validate policies after upgrade to 1.13.3
(https://cloud.google.com/apigee/docs/hybrid/v1.13/upgrade#recommended-actions-upgrade-1133).

FIXED
Bug ID Description

396886110 Fixed a bug where the HPA max replicas could be lower than min.

391861216 Restore for GCP and HYBRID Cloud Providers no longer affects system keyspaces. This fixes Known Issue 391861216
(https://cloud.google.com/apigee/docs/release/known-issues#391861216).

390258745, Any left over Cassandra snapshots are automatically removed. This fixes known issue 388608440
388608440 (https://cloud.google.com/apigee/docs/release/known-issues#388608440).

390019667 Fixed bug where the daemonsets had an invalid pod disruption budget which prevented downscaling.

383441226 Added the following metrics configuration properties:

metrics.adapter.resources.limits.cpu
(https://cloud.google.com/apigee/docs/hybrid/v1.13/config-prop-ref#metrics-adapter-resources-limits-cpu)

metrics.adapter.resources.limits.memory
(https://cloud.google.com/apigee/docs/hybrid/v1.13/config-prop-ref#metrics-adapter-resources-limits-memory)

metrics.adapter.resources.requests.cpu
(https://cloud.google.com/apigee/docs/hybrid/v1.13/config-prop-ref#metrics-adapter-resources-requests-cpu)

metrics.adapter.resources.requests.memory
(https://cloud.google.com/apigee/docs/hybrid/v1.13/config-prop-ref#metrics-adapter-resources-requests-memory)

metrics.prometheus.resources.limits.cpu
(https://cloud.google.com/apigee/docs/hybrid/v1.13/config-prop-ref#metrics-prometheus-resources-limits-cpu)

https://cloud.google.com/release-notes 60/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Bug ID Description

metrics.prometheus.resources.limits.memory
(https://cloud.google.com/apigee/docs/hybrid/v1.13/config-prop-ref#metrics-prometheus-resources-limits-memory)

metrics.prometheus.resources.requests.cpu
(https://cloud.google.com/apigee/docs/hybrid/v1.13/config-prop-ref#metrics-prometheus-resources-requests-cpu)

metrics.prometheus.resources.requests.memory
(https://cloud.google.com/apigee/docs/hybrid/v1.13/config-prop-ref#metrics-prometheus-resources-requests-
memory)

SECURITY Stricter class instantiation checks included in this release.

JavaCallout policy now includes additional security during Java class instantiation. The enhanced security measure
prevents the deployment of policies that directly or indirectly attempt actions that require permissions that are not
allowed.

In most cases, existing policies will continue to function as expected without any issues. However, there is a possibility
that policies relying on third-party libraries, or those with custom code that indirectly triggers operations requiring elevated
permissions, could be affected.

To test your installation, follow the procedure in Validate policies after upgrade to 1.13.3
(https://cloud.google.com/apigee/docs/hybrid/v1.13/upgrade#recommended-actions-upgrade-1133) to validate policy behavior.

Bug ID Description

Bug ID Description

https://cloud.google.com/release-notes 61/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Bug ID Description

385394193, 383850393, Security fixes for apigee-cassandra-backup-utility, apigee-cassandra-client, and apigee-

383778273 hybrid-cassandra.
This addresses the following vulnerabilities:

CVE-2024-0727 (https://nvd.nist.gov/vuln/detail/CVE-2024-0727)

CVE-2023-5678 (https://nvd.nist.gov/vuln/detail/CVE-2023-5678)

CVE-2022-3715 (https://nvd.nist.gov/vuln/detail/CVE-2022-3715)

382967738 Fixed a vulnerability in PythonScript policy.

N/A Security fixes for apigee-envoy.

This addresses the following vulnerability:

CVE-2019-1010024 (https://nvd.nist.gov/vuln/detail/CVE-2019-1010024)

N/A Security fixes for apigee-fluent-bit.

This addresses the following vulnerability:

CVE-2024-10979 (https://nvd.nist.gov/vuln/detail/CVE-2024-10979)

N/A Security fixes for apigee-mint-task-scheduler.

This addresses the following vulnerabilities:

CVE-2025-24970 (https://nvd.nist.gov/vuln/detail/CVE-2025-24970)

CVE-2024-47535 (https://nvd.nist.gov/vuln/detail/CVE-2024-47535)

N/A Security fixes for apigee-open-telemetry-collector.

This addresses the following vulnerability:

CVE-2024-45338 (https://nvd.nist.gov/vuln/detail/CVE-2024-45338)

https://cloud.google.com/release-notes 62/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Bug ID Description

392174215 Security fixes for apigee-operator.

This addresses the following vulnerabilities:

CVE-2024-45337 (https://nvd.nist.gov/vuln/detail/CVE-2024-45337)

CVE-2024-45338 (https://nvd.nist.gov/vuln/detail/CVE-2024-45338)

N/A Security fixes for apigee-redis.

This addresses the following vulnerabilities:

CVE-2022-24834 (https://nvd.nist.gov/vuln/detail/CVE-2022-24834)

CVE-2022-24735 (https://nvd.nist.gov/vuln/detail/CVE-2022-24735)

391786033 Security fixes for apigee-watcher.

This addresses the following vulnerability:

CVE-2024-45338 (https://nvd.nist.gov/vuln/detail/CVE-2024-45338)

N/A Security fixes for livenessprobe.

This addresses the following vulnerability:

CVE-2023-45288 (https://nvd.nist.gov/vuln/detail/CVE-2023-45288)

ANNOUNCEMENT
hybrid v1.14.1
On March 1, 2025 we released an updated version of the Apigee hybrid software, 1.14.1.

This release enhances the security posture within the JavaCallout

(https://cloud.google.com/apigee/docs/api-platform/reference/policies/java-callout-policy) and PythonScript

https://cloud.google.com/release-notes 63/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

(https://cloud.google.com/apigee/docs/api-platform/reference/policies/python-script-policy) policies. This release does not include

any new features or general bug fixes.

For information on upgrading, see Upgrading Apigee hybrid to version 1.14

(https://cloud.google.com/apigee/docs/hybrid/v1.14/upgrade).

For information on new installations, see The big picture (https://cloud.google.com/apigee/docs/hybrid/v1.14/big-picture).

For recommended actions after upgrading, see Validate policies after upgrade to 1.14.1
(https://cloud.google.com/apigee/docs/hybrid/v1.14/upgrade#recommended-actions-upgrade-1141).

FIXED
Bug ID Description

396886110Fixed a bug where the HPA max replicas could be lower than min.

392547038Add Helm chart template checks for non-existent environments and virtualhosts.

391861216Restore for GCP and HYBRID Cloud Providers no longer affects system keyspaces. This fixes Known Issue 391861216
(https://cloud.google.com/apigee/docs/release/known-issues#391861216).

390019667Fixed bug where the daemonsets had an invalid pod disruption budget which prevented downscaling.

383441226Added the following metrics configuration properties:

metrics.adapter.resources.limits.cpu
(https://cloud.google.com/apigee/docs/hybrid/v1.14/config-prop-ref#metrics-adapter-resources-limits-cpu)

metrics.adapter.resources.limits.memory
(https://cloud.google.com/apigee/docs/hybrid/v1.14/config-prop-ref#metrics-adapter-resources-limits-memory)

metrics.adapter.resources.requests.cpu
(https://cloud.google.com/apigee/docs/hybrid/v1.14/config-prop-ref#metrics-adapter-resources-requests-cpu)

https://cloud.google.com/release-notes 64/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Bug ID Description

metrics.adapter.resources.requests.memory
(https://cloud.google.com/apigee/docs/hybrid/v1.14/config-prop-ref#metrics-adapter-resources-requests-memory)

metrics.prometheus.resources.limits.cpu
(https://cloud.google.com/apigee/docs/hybrid/v1.14/config-prop-ref#metrics-prometheus-resources-limits-cpu)

metrics.prometheus.resources.limits.memory
(https://cloud.google.com/apigee/docs/hybrid/v1.14/config-prop-ref#metrics-prometheus-resources-limits-memory)

metrics.prometheus.resources.requests.cpu
(https://cloud.google.com/apigee/docs/hybrid/v1.14/config-prop-ref#metrics-prometheus-resources-requests-cpu)

metrics.prometheus.resources.requests.memory
(https://cloud.google.com/apigee/docs/hybrid/v1.14/config-prop-ref#metrics-prometheus-resources-requests-memory)

SECURITY Stricter class instantiation checks included in this release.

JavaCallout policy now includes additional security during Java class instantiation. The enhanced security measure
prevents the deployment of policies that directly or indirectly attempt actions that require permissions that are not
allowed.

In most cases, existing policies will continue to function as expected without any issues. However, there is a possibility
that policies relying on third-party libraries, or those with custom code that indirectly triggers operations requiring elevated
permissions, could be affected.

To test your installation, follow the procedure in Validate policies after upgrade to 1.14.1
(https://cloud.google.com/apigee/docs/hybrid/v1.14/upgrade#recommended-actions-upgrade-1141) to validate policy behavior.

https://cloud.google.com/release-notes 65/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Bug ID Description

385394193, 383850393, Security fixes for apigee-cassandra-backup-utility, apigee-cassandra-client, and apigee-

383778273 hybrid-cassandra.
This addresses the following vulnerabilities:

CVE-2024-0727 (https://nvd.nist.gov/vuln/detail/CVE-2024-0727)

CVE-2023-5678 (https://nvd.nist.gov/vuln/detail/CVE-2023-5678)

CVE-2022-3715 (https://nvd.nist.gov/vuln/detail/CVE-2022-3715)

383113773, 382967738 Fixed a vulnerability in PythonScript policy.

365178914 Security fixes for apigee-cassandra-backup-utility and apigee-hybrid-cassandra.

This addresses the following vulnerability:

CVE-2023-37920 (https://nvd.nist.gov/vuln/detail/CVE-2023-37920)

N/A Security fixes for apigee-asm-istiod.

This addresses the following vulnerability:

CVE-2024-45338 (https://nvd.nist.gov/vuln/detail/CVE-2024-45338)

N/A Security fixes for apigee-hybrid-cassandra.

This addresses the following vulnerability:

CVE-2023-37920 (https://nvd.nist.gov/vuln/detail/CVE-2023-37920)

N/A Security fixes for apigee-mint-task-scheduler.

This addresses the following vulnerabilities:

CVE-2025-24970 (https://nvd.nist.gov/vuln/detail/CVE-2025-24970)

CVE-2024-47535 (https://nvd.nist.gov/vuln/detail/CVE-2024-47535)

https://cloud.google.com/release-notes 66/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Bug ID Description

N/A Security fixes for apigee-open-telemetry-collector.

This addresses the following vulnerability:

CVE-2024-45338 (https://nvd.nist.gov/vuln/detail/CVE-2024-45338)

392174215 Security fixes for apigee-operator.

This addresses the following vulnerabilities:

CVE-2024-45337 (https://nvd.nist.gov/vuln/detail/CVE-2024-45337)

CVE-2024-45338 (https://nvd.nist.gov/vuln/detail/CVE-2024-45338)

N/A Security fixes for apigee-prometheus-adapter.

This addresses the following vulnerabilities:

CVE-2024-45338 (https://nvd.nist.gov/vuln/detail/CVE-2024-45338)

CVE-2024-45337 (https://nvd.nist.gov/vuln/detail/CVE-2024-45337)

391786033 Security fixes for apigee-watcher.

This addresses the following vulnerability:

CVE-2024-45338 (https://nvd.nist.gov/vuln/detail/CVE-2024-45338)

Dataproc

ANNOUNCEMENT New Dataproc on Compute Engine subminor image versions

(https://cloud.google.com/dataproc/docs/concepts/versioning/dataproc-version-clusters#supported_dataproc_versions):

2.0.134-debian10, 2.0.134-rocky8, 2.0.134-ubuntu18

2.1.82-debian11, 2.1.82-rocky8, 2.1.82-ubuntu20, 2.1.82-ubuntu20-arm

https://cloud.google.com/release-notes 67/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

2.2.48-debian12, 2.2.48-rocky9, 2.2.48-ubuntu22

CHANGE Dataproc on Compute Engine: Explicitly disabled sha1, md5 algorithms for use with kex and kex-gss sshd features.

Google SecOps SOAR

ANNOUNCEMENT Release 6.3.36 (https://cloud.google.com/chronicle/docs/soar/release-notes#February_22_2025) is now in General Availability.

February 28, 2025

Apigee X

ANNOUNCEMENT On February 28, 2025, we released an updated version of Apigee (1-14-0-apigee-8).

star Note: Rollouts of this release to production instances will begin within two business days and may take four or more business days to
complete across all Google Cloud zones. Your instances may not have the features and fixes available until the rollout is complete.

SECURITY
Bug ID Description

382883585 Fixed a vulnerability in the JavaCallout policy.

N/A Updates to security infrastructure and libraries.

Artifact Registry

FEATURE Artifact Registry is now enabled for use with Cloud KMS Autokey.

https://cloud.google.com/release-notes 68/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Using keys generated by Autokey can help you consistently align with industry standards and recommended practices for
data security, including the HSM protection level, separation of duties, key rotation, location, and key specificity. Keys
requested using Autokey function identically to other Cloud HSM keys with the same settings.

For more information, see Enabling customer-managed encryption keys (https://cloud.google.com/artifact-registry/docs/cmek).

To learn more about Cloud KMS Autokey, see Autokey overview (https://cloud.google.com/kms/docs/autokey-overview).
Assured Workloads

FEATURE The IL4 (https://cloud.google.com/assured-workloads/docs/control-packages#il4) and IL5

(https://cloud.google.com/assured-workloads/docs/control-packages#il5) control packages now supports the following products.
See Supported products by control package (https://cloud.google.com/assured-workloads/docs/supported-products) for more
information:

Artifact Registry

Cloud Composer

Cloud Run

Cloud Tasks

Spanner

Cloud Asset Inventory

FEATURE The following resource types are now publicly available through the ExportAssets
(https://cloud.google.com/asset-inventory/docs/reference/rest/v1/TopLevel/exportAssets), ListAssets
(https://cloud.google.com/asset-inventory/docs/listing-assets), BatchGetAssetsHistory
(https://cloud.google.com/asset-inventory/docs/reference/rest/v1/TopLevel/batchGetAssetsHistory), QueryAssets
(https://cloud.google.com/asset-inventory/docs/reference/rest/v1/TopLevel/queryAssets), Feed

https://cloud.google.com/release-notes 69/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

(https://cloud.google.com/asset-inventory/docs/reference/rest/v1/feeds), and Search (SearchAllResources

(https://cloud.google.com/asset-inventory/docs/reference/rest/v1/TopLevel/searchAllResources), SearchAllIamPolicies
(https://cloud.google.com/asset-inventory/docs/reference/rest/v1/TopLevel/searchAllIamPolicies)).

Vertex AI

aiplatform.googleapis.com/FeatureGroup
(https://cloud.google.com/vertex-ai/docs/reference/rest/v1/projects.locations.featureGroups)

aiplatform.googleapis.com/NotebookRuntimeTemplate
(https://cloud.google.com/vertex-ai/docs/reference/rest/v1/projects.locations.featureOnlineStores)

Assured Workloads

accessapproval.googleapis.com/AccessApprovalSettings
(https://cloud.google.com/assured-workloads/access-approval/docs/reference/rest/v1/AccessApprovalSettings)
Config Connector

ANNOUNCEMENT Config Connector version 1.129.2 is now available.

FEATURE New Beta resources (direct reconciler)

ManagedKafkaCluster
(https://cloud.google.com/config-connector/docs/reference/resource-docs/managedkafka/managedkafkacluster)

ApigeeInstance (https://cloud.google.com/apigee/docs/api-platform/system-administration/instances)

CHANGE Reconciliation Improvements

https://cloud.google.com/release-notes 70/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

SQLInstance
(https://github.com/GoogleCloudPlatform/k8s-config-
connector/tree/master/pkg/test/resourcefixture/testdata/basic/sql/v1beta1/sqlinstance)

All SQLInstance types are now reconciled using the new direct controller instead of the legacy Terraform-based
controller. The previous "opt-in" annotation (document reference
(https://github.com/GoogleCloudPlatform/k8s-config-connector/blob/master/docs/features/optin.md)) no longer applies.
Users no longer need to apply the "opt-in" annotation to SQLInstance resources to enable the direct controller.
Regardless of the presence (or absence) of an opt-in annotation on SQLInstance resources, the direct
reconciler will be used.

This change enables all SQLInstance resources to switch from edition ENTERPRISE to ENTERPRISE_PLUS and
fixes the bug that prevented SQL Instance upgrade
(https://github.com/GoogleCloudPlatform/k8s-config-connector/issues/2907).

CHANGE New Alpha resources (direct reconciler)

ManagedKafkaTopic

ApigeeInstanceAttachment

ApigeeEnvgroupAttachment

ApigeeEndpointAttachment

Google Kubernetes Engine

FEATURE New recommendations of NODE_SA_MISSING_PERMISSIONS subtype are added to the portfolio of GKE Recommendations
(https://cloud.google.com/kubernetes-engine/docs/how-to/optimize-with-recommenders). Use the new recommendations to identify
clusters (https://cloud.google.com/kubernetes-engine/docs/troubleshooting/logging#identify-fix-permissions-logs-in-all-clusters) with
node service accounts missing IAM permissions that are critical for normal cluster operations.

https://cloud.google.com/release-notes 71/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

If your organization has a policy to disable automatic role grants to default service accounts
(https://cloud.google.com/resource-manager/docs/organization-policy/restricting-service-
accounts#disable_service_account_default_grants)
, the created default GKE node service account
(https://cloud.google.com/kubernetes-engine/docs/how-to/service-accounts#default-gke-service-agent) will not get the necessary
permissions. Missing critical permissions can degrade your essential cluster operations, such as logging and monitoring.
Google SecOps

CHANGE Google SecOps has updated the list of supported default parsers. Parsers are updated gradually, so it might take one to
four days before you see the changes reflected in your region.

The following supported default parsers have changed. Each parser is listed by product name and log_type value, if
applicable. This list now includes both released default parsers and pending parser updates.

1Password Audit Events (ONEPASSWORD_AUDIT_EVENTS)

AIX system (AIX_SYSTEM)

Akamai DataStream 2 (AKAMAI_DATASTREAM_2)

Alveo Risk Data Management (ALVEO_RDM)

Amazon API Gateway (AWS_API_GATEWAY)

Apache Tomcat (TOMCAT)

Appian Cloud (APPIAN_CLOUD)

Arcsight CEF (ARCSIGHT_CEF)

Asset Panda (ASSET_PANDA)

https://cloud.google.com/release-notes 72/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Aware Audit (AWARE_AUDIT)

Aware Signals (AWARE_SIGNALS)

AWS Cloudtrail (AWS_CLOUDTRAIL)

AWS CloudWatch (AWS_CLOUDWATCH)

AWS ECS Metrics (AWS_ECS_METRICS)

AWS Elastic Load Balancer (AWS_ELB)

AWS GuardDuty (GUARDDUTY)

AWS Inspector (AWS_INSPECTOR)

AWS Lambda Function (AWS_LAMBDA_FUNCTION)

AWS RDS (AWS_RDS)

AWS Redshift (AWS_REDSHIFT)

AWS Route 53 DNS (AWS_ROUTE_53)

AWS Security Hub (AWS_SECURITY_HUB)

AWS VPC Flow (AWS_VPC_FLOW)

AWS WAF (AWS_WAF)

Azure AD Directory Audit (AZURE_AD_AUDIT)

Azure AD Organizational Context (AZURE_AD_CONTEXT)

Azure Application Gateway (AZURE_GATEWAY)

https://cloud.google.com/release-notes 73/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Azure Firewall (AZURE_FIREWALL)

Azure Key Vault logging (AZURE_KEYVAULT_AUDIT)

Barracuda CloudGen Firewall (BARRACUDA_CLOUDGEN_FIREWALL)

Barracuda WAF (BARRACUDA_WAF)

BeyondTrust BeyondInsight (BEYONDTRUST_BEYONDINSIGHT)

Blue Coat Proxy (BLUECOAT_WEBPROXY)

Broadcom Support Portal Audit Logs (BROADCOM_SUPPORT_PORTAL)

Cato Networks (CATO_NETWORKS)

Cequence Bot Defense (CEQUENCE_BOT_DEFENSE)

Check Point (CHECKPOINT_FIREWALL)

ChromeOS XDR (CHROMEOS_XDR)

Cisco Email Security (CISCO_EMAIL_SECURITY)

Cisco EStreamer (CISCO_ESTREAMER)

Cisco Firepower NGFW (CISCO_FIREPOWER_FIREWALL)

Cisco FireSIGHT Management Center (CISCO_FIRESIGHT)

Cisco Internetwork Operating System (CISCO_IOS)

Cisco IronPort (CISCO_IRONPORT)

Cisco ISE (CISCO_ISE)

https://cloud.google.com/release-notes 74/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Cisco NX-OS (CISCO_NX_OS)

Cisco Switch (CISCO_SWITCH)

Cisco Umbrella Cloud Firewall (UMBRELLA_FIREWALL)

Cisco vManage SD-WAN (CISCO_SDWAN)

Cisco VPN (CISCO_VPN)

Citrix Netscaler (CITRIX_NETSCALER)

Citrix Storefront (CITRIX_STOREFRONT)

Claroty Xdome (CLAROTY_XDOME)

Cloud Audit Logs (N/A)

Cloud Data Loss Prevention (N/A)

Cloudflare Network Analytics (CLOUDFLARE_NETWORK_ANALYTICS)

Cloudflare WAF (CLOUDFLARE_WAF)

Cloudflare Warp (CLOUDFLARE_WARP)

CommVault (COMMVAULT)

CrowdStrike Detection Monitoring (CS_DETECTS)

CrowdStrike Falcon (CS_EDR)

CrowdStrike Falcon Stream (CS_STREAM)

Crowdstrike Identity Protection Services (CS_IDP)

https://cloud.google.com/release-notes 75/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

CrushFTP (CRUSHFTP)

Custom Application Access Logs (CUSTOM_APPLICATION_ACCESS)

CyberArk Privileged Access Manager (PAM) (CYBERARK_PAM)

Cybereason EDR (CYBEREASON_EDR)

Cyolo Secure Remote Access for OT (CYOLO_OT)

Datadog (DATADOG)

Delinea Secret Server (DELINEA_SECRET_SERVER)

Dell CyberSense (DELL_CYBERSENSE)

Digicert (DIGICERT)

Edgio WAF (EDGIO_WAF)

Elastic Packet Beats (ELASTIC_PACKETBEATS)

F5 ASM (F5_ASM)

F5 DNS (F5_DNS)

Forcepoint DLP (FORCEPOINT_DLP)

Forcepoint NGFW (FORCEPOINT_FIREWALL)

Forgerock OpenIdM (FORGEROCK_OPENIDM)

FortiGate (FORTINET_FIREWALL)

Fortinet FortiAnalyzer (FORTINET_FORTIANALYZER)

https://cloud.google.com/release-notes 76/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Fortinet Fortimanager (FORTINET_FORTIMANAGER)

Fortinet Web Application Firewall (FORTINET_FORTIWEB)

GitHub (GITHUB)

Gitlab (GITLAB)

Harness IO (HARNESS_IO)

Hashicorp Vault (HASHICORP)

Hillstone Firewall (HILLSTONE_NGFW)

Huawei Switches (HUAWEI_SWITCH)

IBM Guardium (GUARDIUM)

Imperva Database (IMPERVA_DB)

Intel Endpoint Management Assistant (INTEL_EMA)

JAMF Security Cloud (JAMF_SECURITY_CLOUD)

JFrog Artifactory (JFROG_ARTIFACTORY)

JumpCloud Directory Insights (JUMPCLOUD_DIRECTORY_INSIGHTS)

Juniper (JUNIPER_FIREWALL)

Kaspersky AV (KASPERSKY_AV)

Kaspersky Endpoint (KASPERSKY_ENDPOINT)

Kolide Endpoint Security (KOLIDE)

https://cloud.google.com/release-notes 77/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Kubernetes Audit (KUBERNETES_AUDIT)

Layer7 SiteMinder (SITEMINDER_SSO)

Linux Auditing System (AuditD) (AUDITD)

Looker Audit (LOOKER_AUDIT)

ManageEngine ADAudit Plus (ADAUDIT_PLUS)

ManageEngine ADManager Plus (ADMANAGER_PLUS)

McAfee Web Gateway (MCAFEE_WEBPROXY)

Metabase (METABASE)

Microsoft AD FS (ADFS)

Microsoft Azure Activity (AZURE_ACTIVITY)

Microsoft Azure NSG Flow (AZURE_NSG_FLOW)

Microsoft CyberX (CYBERX)

Microsoft Defender for Endpoint (MICROSOFT_DEFENDER_ENDPOINT)

Microsoft Defender for Identity (MICROSOFT_DEFENDER_IDENTITY)

Microsoft Defender for Office 365 (MICROSOFT_DEFENDER_MAIL)

Microsoft IIS (IIS)

Microsoft PowerShell (POWERSHELL)

Microsoft Sentinel (MICROSOFT_SENTINEL)

https://cloud.google.com/release-notes 78/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Microsoft System Center Endpoint Protection (MICROSOFT_SCEP)

Mikrotik Router (MIKROTIK_ROUTER)

Mimecast (MIMECAST_MAIL)

MISP Threat Intelligence (MISP_IOC)

NetIQ eDirectory (NETIQ_EDIRECTORY)

Netskope V2 (NETSKOPE_ALERT_V2)

Nozomi Networks Scada Guardian (NOZOMI_GUARDIAN)

Office 365 (OFFICE_365)

Okta (OKTA)

Okta User Context (OKTA_USER_CONTEXT)

One Identity Identity Manager (ONE_IDENTITY_IDENTITY_MANAGER)

Oort Security Tool (OORT)

Open Cybersecurity Schema Framework (OCSF) (OCSF)

Open LDAP (OPENLDAP)

Opnsense (OPNSENSE)

Ops Genie (OPS_GENIE)

Oracle (ORACLE_DB)

Oracle Cloud Guard (OCI_CLOUDGUARD)

https://cloud.google.com/release-notes 79/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Oracle Cloud Infrastructure Audit Logs (OCI_AUDIT)

Orca Cloud Security Platform (ORCA)

Palo Alto Cortex XDR Alerts (CORTEX_XDR)

Palo Alto Networks Firewall (PAN_FIREWALL)

Palo Alto Panorama (PAN_PANORAMA)

Palo Alto Prisma Access (PAN_CASB)

Palo Alto Prisma Cloud Alert payload (PAN_PRISMA_CA)

Pharos (PHAROS)

Privacy-I (PRIVACY_I)

Proofpoint On Demand (PROOFPOINT_ON_DEMAND)

Proofpoint Tap Alerts (PROOFPOINT_MAIL)

Proofpoint Threat Response (PROOFPOINT_TRAP)

Radware Web Application Firewall (RADWARE_FIREWALL)

ReviveSec (REVIVESEC)

Rubrik (RUBRIK)

Salesforce (SALESFORCE)

Sangfor Proxy (SANGFOR_PROXY)

Security Command Center Posture Violation (GCP_SECURITYCENTER_POSTURE_VIOLATION)

https://cloud.google.com/release-notes 80/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Security Command Center Threat (N/A)

Security Command Center Toxic Combination (GCP_SECURITYCENTER_TOXIC_COMBINATION)

ServiceNow CMDB (SERVICENOW_CMDB)

Snare System Diagnostic Logs (SNARE_SOLUTIONS)

Snipe-IT (SNIPE_IT)

Snyk Group level audit/issues logs (SNYK_ISSUES)

SonicWall (SONIC_FIREWALL)

Sophos Central (SOPHOS_CENTRAL)

Swimlane Platform (SWIMLANE)

Symantec DLP (SYMANTEC_DLP)

Symantec Event export (SYMANTEC_EVENT_EXPORT)

Symantec Web Security Service (SYMANTEC_WSS)

Tanium Question (TANIUM_QUESTION)

Tanium Threat Response (TANIUM_THREAT_RESPONSE)

Teleport Access Plane (TELEPORT_ACCESS_PLANE)

Tenable Active Directory Security (TENABLE_ADS)

Tenable CSPM (TENABLE_CSPM)

tenable.io (TENABLE_IO)

https://cloud.google.com/release-notes 81/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Terraform Enterprise Audit (TERRAFORM_ENTERPRISE)

Thinkst Canary (THINKST_CANARY)

ThreatX WAF (THREATX_WAF)

Trend Micro Email Security Advanced (TRENDMICRO_EMAIL_SECURITY)

Trend Micro Vision One (TRENDMICRO_VISION_ONE)

TrendMicro Apex Central (TRENDMICRO_APEX_CENTRAL)

TXOne Stellar (TRENDMICRO_STELLAR)

UKG (UKG)

Unix system (NIX_SYSTEM)

UPX AntiDDoS (UPX_ANTIDDOS)

VanDyke SFTP (VANDYKE_SFTP)

Varonis (VARONIS)

Vectra Alerts (VECTRA_ALERTS)

Vectra Stream (VECTRA_STREAM)

VMware AirWatch (AIRWATCH)

Vmware Avinetworks iWAF (VMWARE_AVINETWORKS_IWAF)

VMware ESXi (VMWARE_ESX)

VMware Horizon (VMWARE_HORIZON)

https://cloud.google.com/release-notes 82/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Watchguard EDR (WATCHGUARD_EDR)

Windows Defender AV (WINDOWS_DEFENDER_AV)

Windows DHCP (WINDOWS_DHCP)

Windows DNS (WINDOWS_DNS)

Windows Event (WINEVTLOG)

Windows Event (XML) (WINEVTLOG_XML)

Windows Sysmon (WINDOWS_SYSMON)

Workday Audit Logs (WORKDAY_AUDIT)

Workday User Activity (WORKDAY_USER_ACTIVITY)

WPEngine (WPENGINE)

Zimperium (ZIMPERIUM)

Zscaler (ZSCALER_WEBPROXY)

ZScaler DNS (ZSCALER_DNS)

Zscaler Internet Access Audit Logs (ZSCALER_INTERNET_ACCESS)

ZScaler NGFW (ZSCALER_FIREWALL)

The following log types were added without a default parser. Each parser is listed by product name and log_type value, if
applicable.

Autodesk Cad Cam (AUTODESK_CAD_CAM)

https://cloud.google.com/release-notes 83/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Azure Risk Events (AZURE_RISK_EVENTS)

Azure Risky Users (AZURE_RISKY_USERS)

Azure Service Principal Logins (AZURE_SERVICE_PRINCIPAL_LOGINS)

Belden Switch (BELDEN_SWITCH)

Blue Voyant (BLUE_VOYANT)

Cisco NetFlow (CISCO_NETFLOW)

Citrix Receiver (CSG_CITRIX_RX)

Clavistier Firewall (CLAVISTER_FIREWALL)

ClickHouse (CLICKHOUSE)

Cloudflare Pageshield (CLOUDFLARE_PAGESHIELD)

CrowdStrike DLP (CROWDSTRIKE_DLP)

Crowdstrike Recon (TI) (CROWDSTRIKE_RECON)

Cynerio Healthcare NDR (CYNERIO_NDR_H)

Exterro FTK Central (EXTERRO_FTK_CENTRAL)

Fortra Vulnerability Management (FORTRA_VM)

GCP Cloud Asset Inventory (GCP_CLOUD_ASSET_INVENTORY)

Health ISAC (H_ISAC)

HP Router (HP_ROUTER)

https://cloud.google.com/release-notes 84/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Huawei Wireless (HUAWEI_WIRELESS)

IBM Sense (IBM_SENSE)

IIJ_LanScope (IIJ_LANSCOPE)

Joblogic (JOBLOGIC)

OneIdentity Safeguard (ONEIDENTITY_SAFEGUARD)

OpenText Cordy (OPENTEXT_CORDY)

Pave (PAVE)

Proofpoint Identity Threat Platform (PROOFPOINT_IDENTITY_THREAT_PLATFORM)

Rapid Identity (RAPID_IDENTITY)

Raven DB (RAVEN_DB)

SolidServer (SOLIDSERVER)

Spacelift (SPACELIFT)

Trend Micro Vision One Activity (TRENDMICRO_VISION_ONE_ACTIVITY)

Trend Micro Vision One Container Vulnerabilities (TRENDMICRO_VISION_ONE_CONTAINER_VULNERABILITIES)

Trend Micro Vision One Detections (TRENDMICRO_VISION_ONE_DETECTIONS)

Vectra XDR (VECTRA_XDR)

Vicarious VRX Events (VICARIUS_VRX_EVENTS)

WireGuard VPN Logs (WIREGUARD_VPN)

https://cloud.google.com/release-notes 85/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Zero Networks (ZERO_NETWORKS)

Zoho Assist (ZOHO_ASSIST)

For a list of supported log types and details about default parser changes, see Supported log types and default parsers
(https://cloud.google.com/chronicle/docs/ingestion/parser-list/supported-default-parsers).
Google SecOps SIEM

CHANGE Google SecOps has updated the list of supported default parsers. Parsers are updated gradually, so it might take one to
four days before you see the changes reflected in your region.

The following supported default parsers have changed. Each parser is listed by product name and log_type value, if
applicable. This list now includes both released default parsers and pending parser updates.

1Password Audit Events (ONEPASSWORD_AUDIT_EVENTS)

AIX system (AIX_SYSTEM)

Akamai DataStream 2 (AKAMAI_DATASTREAM_2)

Alveo Risk Data Management (ALVEO_RDM)

Amazon API Gateway (AWS_API_GATEWAY)

Apache Tomcat (TOMCAT)

Appian Cloud (APPIAN_CLOUD)

Arcsight CEF (ARCSIGHT_CEF)

Asset Panda (ASSET_PANDA)

Aware Audit (AWARE_AUDIT)

https://cloud.google.com/release-notes 86/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Aware Signals (AWARE_SIGNALS)

AWS Cloudtrail (AWS_CLOUDTRAIL)

AWS CloudWatch (AWS_CLOUDWATCH)

AWS ECS Metrics (AWS_ECS_METRICS)

AWS Elastic Load Balancer (AWS_ELB)

AWS GuardDuty (GUARDDUTY)

AWS Inspector (AWS_INSPECTOR)

AWS Lambda Function (AWS_LAMBDA_FUNCTION)

AWS RDS (AWS_RDS)

AWS Redshift (AWS_REDSHIFT)

AWS Route 53 DNS (AWS_ROUTE_53)

AWS Security Hub (AWS_SECURITY_HUB)

AWS VPC Flow (AWS_VPC_FLOW)

AWS WAF (AWS_WAF)

Azure AD Directory Audit (AZURE_AD_AUDIT)

Azure AD Organizational Context (AZURE_AD_CONTEXT)

Azure Application Gateway (AZURE_GATEWAY)

Azure Firewall (AZURE_FIREWALL)

https://cloud.google.com/release-notes 87/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Azure Key Vault logging (AZURE_KEYVAULT_AUDIT)

Barracuda CloudGen Firewall (BARRACUDA_CLOUDGEN_FIREWALL)

Barracuda WAF (BARRACUDA_WAF)

BeyondTrust BeyondInsight (BEYONDTRUST_BEYONDINSIGHT)

Blue Coat Proxy (BLUECOAT_WEBPROXY)

Broadcom Support Portal Audit Logs (BROADCOM_SUPPORT_PORTAL)

Cato Networks (CATO_NETWORKS)

Cequence Bot Defense (CEQUENCE_BOT_DEFENSE)

Check Point (CHECKPOINT_FIREWALL)

ChromeOS XDR (CHROMEOS_XDR)

Cisco Email Security (CISCO_EMAIL_SECURITY)

Cisco EStreamer (CISCO_ESTREAMER)

Cisco Firepower NGFW (CISCO_FIREPOWER_FIREWALL)

Cisco FireSIGHT Management Center (CISCO_FIRESIGHT)

Cisco Internetwork Operating System (CISCO_IOS)

Cisco IronPort (CISCO_IRONPORT)

Cisco ISE (CISCO_ISE)

Cisco NX-OS (CISCO_NX_OS)

https://cloud.google.com/release-notes 88/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Cisco Switch (CISCO_SWITCH)

Cisco Umbrella Cloud Firewall (UMBRELLA_FIREWALL)

Cisco vManage SD-WAN (CISCO_SDWAN)

Cisco VPN (CISCO_VPN)

Citrix Netscaler (CITRIX_NETSCALER)

Citrix Storefront (CITRIX_STOREFRONT)

Claroty Xdome (CLAROTY_XDOME)

Cloud Audit Logs (N/A)

Cloud Data Loss Prevention (N/A)

Cloudflare Network Analytics (CLOUDFLARE_NETWORK_ANALYTICS)

Cloudflare WAF (CLOUDFLARE_WAF)

Cloudflare Warp (CLOUDFLARE_WARP)

CommVault (COMMVAULT)

CrowdStrike Detection Monitoring (CS_DETECTS)

CrowdStrike Falcon (CS_EDR)

CrowdStrike Falcon Stream (CS_STREAM)

Crowdstrike Identity Protection Services (CS_IDP)

CrushFTP (CRUSHFTP)

https://cloud.google.com/release-notes 89/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Custom Application Access Logs (CUSTOM_APPLICATION_ACCESS)

CyberArk Privileged Access Manager (PAM) (CYBERARK_PAM)

Cybereason EDR (CYBEREASON_EDR)

Cyolo Secure Remote Access for OT (CYOLO_OT)

Datadog (DATADOG)

Delinea Secret Server (DELINEA_SECRET_SERVER)

Dell CyberSense (DELL_CYBERSENSE)

Digicert (DIGICERT)

Edgio WAF (EDGIO_WAF)

Elastic Packet Beats (ELASTIC_PACKETBEATS)

F5 ASM (F5_ASM)

F5 DNS (F5_DNS)

Forcepoint DLP (FORCEPOINT_DLP)

Forcepoint NGFW (FORCEPOINT_FIREWALL)

Forgerock OpenIdM (FORGEROCK_OPENIDM)

FortiGate (FORTINET_FIREWALL)

Fortinet FortiAnalyzer (FORTINET_FORTIANALYZER)

Fortinet Fortimanager (FORTINET_FORTIMANAGER)

https://cloud.google.com/release-notes 90/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Fortinet Web Application Firewall (FORTINET_FORTIWEB)

GitHub (GITHUB)

Gitlab (GITLAB)

Harness IO (HARNESS_IO)

Hashicorp Vault (HASHICORP)

Hillstone Firewall (HILLSTONE_NGFW)

Huawei Switches (HUAWEI_SWITCH)

IBM Guardium (GUARDIUM)

Imperva Database (IMPERVA_DB)

Intel Endpoint Management Assistant (INTEL_EMA)

JAMF Security Cloud (JAMF_SECURITY_CLOUD)

JFrog Artifactory (JFROG_ARTIFACTORY)

JumpCloud Directory Insights (JUMPCLOUD_DIRECTORY_INSIGHTS)

Juniper (JUNIPER_FIREWALL)

Kaspersky AV (KASPERSKY_AV)

Kaspersky Endpoint (KASPERSKY_ENDPOINT)

Kolide Endpoint Security (KOLIDE)

Kubernetes Audit (KUBERNETES_AUDIT)

https://cloud.google.com/release-notes 91/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Layer7 SiteMinder (SITEMINDER_SSO)

Linux Auditing System (AuditD) (AUDITD)

Looker Audit (LOOKER_AUDIT)

ManageEngine ADAudit Plus (ADAUDIT_PLUS)

ManageEngine ADManager Plus (ADMANAGER_PLUS)

McAfee Web Gateway (MCAFEE_WEBPROXY)

Metabase (METABASE)

Microsoft AD FS (ADFS)

Microsoft Azure Activity (AZURE_ACTIVITY)

Microsoft Azure NSG Flow (AZURE_NSG_FLOW)

Microsoft CyberX (CYBERX)

Microsoft Defender for Endpoint (MICROSOFT_DEFENDER_ENDPOINT)

Microsoft Defender for Identity (MICROSOFT_DEFENDER_IDENTITY)

Microsoft Defender for Office 365 (MICROSOFT_DEFENDER_MAIL)

Microsoft IIS (IIS)

Microsoft PowerShell (POWERSHELL)

Microsoft Sentinel (MICROSOFT_SENTINEL)

Microsoft System Center Endpoint Protection (MICROSOFT_SCEP)

https://cloud.google.com/release-notes 92/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Mikrotik Router (MIKROTIK_ROUTER)

Mimecast (MIMECAST_MAIL)

MISP Threat Intelligence (MISP_IOC)

NetIQ eDirectory (NETIQ_EDIRECTORY)

Netskope V2 (NETSKOPE_ALERT_V2)

Nozomi Networks Scada Guardian (NOZOMI_GUARDIAN)

Office 365 (OFFICE_365)

Okta (OKTA)

Okta User Context (OKTA_USER_CONTEXT)

One Identity Identity Manager (ONE_IDENTITY_IDENTITY_MANAGER)

Oort Security Tool (OORT)

Open Cybersecurity Schema Framework (OCSF) (OCSF)

Open LDAP (OPENLDAP)

Opnsense (OPNSENSE)

Ops Genie (OPS_GENIE)

Oracle (ORACLE_DB)

Oracle Cloud Guard (OCI_CLOUDGUARD)

Oracle Cloud Infrastructure Audit Logs (OCI_AUDIT)

https://cloud.google.com/release-notes 93/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Orca Cloud Security Platform (ORCA)

Palo Alto Cortex XDR Alerts (CORTEX_XDR)

Palo Alto Networks Firewall (PAN_FIREWALL)

Palo Alto Panorama (PAN_PANORAMA)

Palo Alto Prisma Access (PAN_CASB)

Palo Alto Prisma Cloud Alert payload (PAN_PRISMA_CA)

Pharos (PHAROS)

Privacy-I (PRIVACY_I)

Proofpoint On Demand (PROOFPOINT_ON_DEMAND)

Proofpoint Tap Alerts (PROOFPOINT_MAIL)

Proofpoint Threat Response (PROOFPOINT_TRAP)

Radware Web Application Firewall (RADWARE_FIREWALL)

ReviveSec (REVIVESEC)

Rubrik (RUBRIK)

Salesforce (SALESFORCE)

Sangfor Proxy (SANGFOR_PROXY)

Security Command Center Posture Violation (GCP_SECURITYCENTER_POSTURE_VIOLATION)

Security Command Center Threat (N/A)

https://cloud.google.com/release-notes 94/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Security Command Center Toxic Combination (GCP_SECURITYCENTER_TOXIC_COMBINATION)

ServiceNow CMDB (SERVICENOW_CMDB)

Snare System Diagnostic Logs (SNARE_SOLUTIONS)

Snipe-IT (SNIPE_IT)

Snyk Group level audit/issues logs (SNYK_ISSUES)

SonicWall (SONIC_FIREWALL)

Sophos Central (SOPHOS_CENTRAL)

Swimlane Platform (SWIMLANE)

Symantec DLP (SYMANTEC_DLP)

Symantec Event export (SYMANTEC_EVENT_EXPORT)

Symantec Web Security Service (SYMANTEC_WSS)

Tanium Question (TANIUM_QUESTION)

Tanium Threat Response (TANIUM_THREAT_RESPONSE)

Teleport Access Plane (TELEPORT_ACCESS_PLANE)

Tenable Active Directory Security (TENABLE_ADS)

Tenable CSPM (TENABLE_CSPM)

tenable.io (TENABLE_IO)

Terraform Enterprise Audit (TERRAFORM_ENTERPRISE)

https://cloud.google.com/release-notes 95/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Thinkst Canary (THINKST_CANARY)

ThreatX WAF (THREATX_WAF)

Trend Micro Email Security Advanced (TRENDMICRO_EMAIL_SECURITY)

Trend Micro Vision One (TRENDMICRO_VISION_ONE)

TrendMicro Apex Central (TRENDMICRO_APEX_CENTRAL)

TXOne Stellar (TRENDMICRO_STELLAR)

UKG (UKG)

Unix system (NIX_SYSTEM)

UPX AntiDDoS (UPX_ANTIDDOS)

VanDyke SFTP (VANDYKE_SFTP)

Varonis (VARONIS)

Vectra Alerts (VECTRA_ALERTS)

Vectra Stream (VECTRA_STREAM)

VMware AirWatch (AIRWATCH)

Vmware Avinetworks iWAF (VMWARE_AVINETWORKS_IWAF)

VMware ESXi (VMWARE_ESX)

VMware Horizon (VMWARE_HORIZON)

Watchguard EDR (WATCHGUARD_EDR)

https://cloud.google.com/release-notes 96/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Windows Defender AV (WINDOWS_DEFENDER_AV)

Windows DHCP (WINDOWS_DHCP)

Windows DNS (WINDOWS_DNS)

Windows Event (WINEVTLOG)

Windows Event (XML) (WINEVTLOG_XML)

Windows Sysmon (WINDOWS_SYSMON)

Workday Audit Logs (WORKDAY_AUDIT)

Workday User Activity (WORKDAY_USER_ACTIVITY)

WPEngine (WPENGINE)

Zimperium (ZIMPERIUM)

Zscaler (ZSCALER_WEBPROXY)

ZScaler DNS (ZSCALER_DNS)

Zscaler Internet Access Audit Logs (ZSCALER_INTERNET_ACCESS)

ZScaler NGFW (ZSCALER_FIREWALL)

The following log types were added without a default parser. Each parser is listed by product name and log_type value, if
applicable.

Autodesk Cad Cam (AUTODESK_CAD_CAM)

Azure Risk Events (AZURE_RISK_EVENTS)

https://cloud.google.com/release-notes 97/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Azure Risky Users (AZURE_RISKY_USERS)

Azure Service Principal Logins (AZURE_SERVICE_PRINCIPAL_LOGINS)

Belden Switch (BELDEN_SWITCH)

Blue Voyant (BLUE_VOYANT)

Cisco NetFlow (CISCO_NETFLOW)

Citrix Receiver (CSG_CITRIX_RX)

Clavistier Firewall (CLAVISTER_FIREWALL)

ClickHouse (CLICKHOUSE)

Cloudflare Pageshield (CLOUDFLARE_PAGESHIELD)

CrowdStrike DLP (CROWDSTRIKE_DLP)

Crowdstrike Recon (TI) (CROWDSTRIKE_RECON)

Cynerio Healthcare NDR (CYNERIO_NDR_H)

Exterro FTK Central (EXTERRO_FTK_CENTRAL)

Fortra Vulnerability Management (FORTRA_VM)

GCP Cloud Asset Inventory (GCP_CLOUD_ASSET_INVENTORY)

Health ISAC (H_ISAC)

HP Router (HP_ROUTER)

Huawei Wireless (HUAWEI_WIRELESS)

https://cloud.google.com/release-notes 98/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

IBM Sense (IBM_SENSE)

IIJ_LanScope (IIJ_LANSCOPE)

Joblogic (JOBLOGIC)

OneIdentity Safeguard (ONEIDENTITY_SAFEGUARD)

OpenText Cordy (OPENTEXT_CORDY)

Pave (PAVE)

Proofpoint Identity Threat Platform (PROOFPOINT_IDENTITY_THREAT_PLATFORM)

Rapid Identity (RAPID_IDENTITY)

Raven DB (RAVEN_DB)

SolidServer (SOLIDSERVER)

Spacelift (SPACELIFT)

Trend Micro Vision One Activity (TRENDMICRO_VISION_ONE_ACTIVITY)

Trend Micro Vision One Container Vulnerabilities (TRENDMICRO_VISION_ONE_CONTAINER_VULNERABILITIES)

Trend Micro Vision One Detections (TRENDMICRO_VISION_ONE_DETECTIONS)

Vectra XDR (VECTRA_XDR)

Vicarious VRX Events (VICARIUS_VRX_EVENTS)

WireGuard VPN Logs (WIREGUARD_VPN)

Zero Networks (ZERO_NETWORKS)

https://cloud.google.com/release-notes 99/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Zoho Assist (ZOHO_ASSIST)

For a list of supported log types and details about default parser changes, see Supported log types and default parsers
(https://cloud.google.com/chronicle/docs/ingestion/parser-list/supported-default-parsers).
Secret Manager

FEATURE Parameter Manager, currently in Preview (https://cloud.google.com/products#product-launch-stages), now offers a console for
storing, accessing, and managing the lifecycle of your workload parameters. For more information, see the Parameter
Manager documentation (https://cloud.google.com/secret-manager/parameter-manager/docs/create-parameter).

Security Command Center

FEATURE Event Threat Detection (https://cloud.google.com/security-command-center/docs/concepts-event-threat-detection-overview), a built-in

service of Security Command Center, has released new detectors. The following detectors, which are available in Preview
with the Enterprise and Premium tiers of Security Command Center, allow users to manage threats to their Google Cloud
Backup and Disaster Recovery assets in Security Command Center:

BACKUP_DELETE_VAULT

BACKUP_DELETE_VAULT_BACKUP

BACKUP_DELETE_BACKUP_PLAN_ASSOCIATION

In addition, we updated the existing BACKUP_REMOVE_PLAN detector to support findings on Google Cloud Backup and
Disaster Recovery assets that are managed in the Google Cloud console. This detector will dynamically generate finding
descriptions based on the finding source.

Spanner

https://cloud.google.com/release-notes 100/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

FEATURE Full-text search (https://cloud.google.com/spanner/docs/full-text-search) is now generally available for PostgreSQL-dialect

databases.

LIBRARIES A monthly digest of client library updates from across the Cloud SDK (https://cloud.google.com/sdk).

GoJava (#java)Node.js (#node.js)Python (#python)

(#go)

Changes for spanner/admin/database/apiv1

(https://github.com/googleapis/google-cloud-go/tree/main/spanner/admin/database/apiv1)

1.74.0 (https://github.com/googleapis/google-cloud-go/compare/spanner/v1.73.0...spanner/v1.74.0) (2025-01-24)

Features

spanner/admin/instance: Exposing FreeInstanceAvailability in InstanceConfig (4254053

(https://github.com/googleapis/google-cloud-go/commit/42540530e44e5f331e66e0777c4aabf449f5fd90))

spanner/admin/instance: Exposing FreeInstanceMetadata in Instance configuration (to define the metadata

related to FREE instance type) (4254053
(https://github.com/googleapis/google-cloud-go/commit/42540530e44e5f331e66e0777c4aabf449f5fd90))

spanner/admin/instance: Exposing InstanceType in Instance configuration (to define PROVISIONED or FREE

spanner instance) (4254053
(https://github.com/googleapis/google-cloud-go/commit/42540530e44e5f331e66e0777c4aabf449f5fd90))

spanner/admin/instance: Exposing QuorumType in InstanceConfig (4254053

(https://github.com/googleapis/google-cloud-go/commit/42540530e44e5f331e66e0777c4aabf449f5fd90))

https://cloud.google.com/release-notes 101/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

spanner/admin/instance: Exposing storage_limit_per_processing_unit in InstanceConfig (4254053

(https://github.com/googleapis/google-cloud-go/commit/42540530e44e5f331e66e0777c4aabf449f5fd90))

spanner: Add the last statement option to ExecuteSqlRequest and ExecuteBatchDmlRequest (8dedb87
(https://github.com/googleapis/google-cloud-go/commit/8dedb878c070cc1e92d62bb9b32358425e3ceffb))

spanner: Add UUID in Spanner TypeCode enum (46fc993

(https://github.com/googleapis/google-cloud-go/commit/46fc993a3195203a230e2831bee456baaa9f7b1c))

spanner: Implement generation and propagation of "x-goog-spanner-request-id" Header (#11048

(https://github.com/googleapis/google-cloud-go/issues/11048)) (10960c1
(https://github.com/googleapis/google-cloud-go/commit/10960c162660d183c70837762c8f71aeb6c6e1eb))

Bug Fixes

spanner/spansql: PROTO BUNDLE and protobuf type parsing fixes (#11279

(https://github.com/googleapis/google-cloud-go/issues/11279)) (b1ca714
(https://github.com/googleapis/google-cloud-go/commit/b1ca71449eeeda9ff19a57a3a759e17005692d06))

spanner/test/opentelemetry/test: Update golang.org/x/net to v0.33.0 (e9b0b69

(https://github.com/googleapis/google-cloud-go/commit/e9b0b69644ea5b276cacff0a707e8a5e87efafc9))

spanner: ReadWriteStmtBasedTransaction would not remember options for retries (#11443

(https://github.com/googleapis/google-cloud-go/issues/11443)) (7d8f0c5
(https://github.com/googleapis/google-cloud-go/commit/7d8f0c556b43265a8cf7715509892ac136d3da4b))

spanner: Support setting monitoring host via env and override any endpoint override from spanner options
with default one (#11141 (https://github.com/googleapis/google-cloud-go/issues/11141)) (3d61545
(https://github.com/googleapis/google-cloud-go/commit/3d6154588da598092e5cffe6c1c5770998037fe1))

https://cloud.google.com/release-notes 102/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

spanner: Update golang.org/x/net to v0.33.0 (e9b0b69

(https://github.com/googleapis/google-cloud-go/commit/e9b0b69644ea5b276cacff0a707e8a5e87efafc9))

Documentation

spanner/admin/database: Fix typo timzeone -> timezone (a694e11

(https://github.com/googleapis/google-cloud-go/commit/a694e1152fc75307da6ca8dcfff26cae9189f29c))

spanner/admin/instance: A comment for enum DefaultBackupScheduleType is changed (4254053

(https://github.com/googleapis/google-cloud-go/commit/42540530e44e5f331e66e0777c4aabf449f5fd90))

spanner/admin/instance: A comment for enum value AUTOMATIC in enum DefaultBackupScheduleType is

changed (4254053
(https://github.com/googleapis/google-cloud-go/commit/42540530e44e5f331e66e0777c4aabf449f5fd90))

spanner/admin/instance: A comment for enum value GOOGLE_MANAGED in enum Type is changed (4254053
(https://github.com/googleapis/google-cloud-go/commit/42540530e44e5f331e66e0777c4aabf449f5fd90))

spanner/admin/instance: A comment for enum value NONE in enum DefaultBackupScheduleType is changed

(4254053 (https://github.com/googleapis/google-cloud-go/commit/42540530e44e5f331e66e0777c4aabf449f5fd90))

spanner/admin/instance: A comment for enum value USER_MANAGED in enum Type is changed (4254053
(https://github.com/googleapis/google-cloud-go/commit/42540530e44e5f331e66e0777c4aabf449f5fd90))

spanner/admin/instance: A comment for field base_config in message

.google.spanner.admin.instance.v1.InstanceConfig is changed (4254053
(https://github.com/googleapis/google-cloud-go/commit/42540530e44e5f331e66e0777c4aabf449f5fd90))

spanner/admin/instance: A comment for field default_backup_schedule_type in message

.google.spanner.admin.instance.v1.Instance is changed (4254053

https://cloud.google.com/release-notes 103/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

(https://github.com/googleapis/google-cloud-go/commit/42540530e44e5f331e66e0777c4aabf449f5fd90))

spanner/admin/instance: A comment for field filter in message

.google.spanner.admin.instance.v1.ListInstanceConfigOperationsRequest is changed (4254053
(https://github.com/googleapis/google-cloud-go/commit/42540530e44e5f331e66e0777c4aabf449f5fd90))

spanner/admin/instance: A comment for field filter in message

.google.spanner.admin.instance.v1.ListInstancePartitionOperationsRequest is changed (4254053
(https://github.com/googleapis/google-cloud-go/commit/42540530e44e5f331e66e0777c4aabf449f5fd90))

spanner/admin/instance: A comment for field instance_config in message

.google.spanner.admin.instance.v1.CreateInstanceConfigRequest is changed (4254053
(https://github.com/googleapis/google-cloud-go/commit/42540530e44e5f331e66e0777c4aabf449f5fd90))

spanner/admin/instance: A comment for field instance_partition_deadline in message

.google.spanner.admin.instance.v1.ListInstancePartitionOperationsRequest is changed (4254053
(https://github.com/googleapis/google-cloud-go/commit/42540530e44e5f331e66e0777c4aabf449f5fd90))

spanner/admin/instance: A comment for field location in message

.google.spanner.admin.instance.v1.ReplicaInfo is changed (4254053
(https://github.com/googleapis/google-cloud-go/commit/42540530e44e5f331e66e0777c4aabf449f5fd90))

spanner/admin/instance: A comment for field node_count in message

.google.spanner.admin.instance.v1.Instance is changed (4254053
(https://github.com/googleapis/google-cloud-go/commit/42540530e44e5f331e66e0777c4aabf449f5fd90))

spanner/admin/instance: A comment for field node_count in message

.google.spanner.admin.instance.v1.InstancePartition is changed (4254053
(https://github.com/googleapis/google-cloud-go/commit/42540530e44e5f331e66e0777c4aabf449f5fd90))

https://cloud.google.com/release-notes 104/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

spanner/admin/instance: A comment for field operations in message

.google.spanner.admin.instance.v1.ListInstanceConfigOperationsResponse is changed (4254053
(https://github.com/googleapis/google-cloud-go/commit/42540530e44e5f331e66e0777c4aabf449f5fd90))

spanner/admin/instance: A comment for field operations in message

.google.spanner.admin.instance.v1.ListInstancePartitionOperationsResponse is changed
(4254053 (https://github.com/googleapis/google-cloud-go/commit/42540530e44e5f331e66e0777c4aabf449f5fd90))

spanner/admin/instance: A comment for field optional_replicas in message

.google.spanner.admin.instance.v1.InstanceConfig is changed (4254053
(https://github.com/googleapis/google-cloud-go/commit/42540530e44e5f331e66e0777c4aabf449f5fd90))

spanner/admin/instance: A comment for field parent in message

.google.spanner.admin.instance.v1.ListInstancePartitionsRequest is changed (4254053
(https://github.com/googleapis/google-cloud-go/commit/42540530e44e5f331e66e0777c4aabf449f5fd90))

spanner/admin/instance: A comment for field processing_units in message

.google.spanner.admin.instance.v1.Instance is changed (4254053
(https://github.com/googleapis/google-cloud-go/commit/42540530e44e5f331e66e0777c4aabf449f5fd90))

spanner/admin/instance: A comment for field processing_units in message

.google.spanner.admin.instance.v1.InstancePartition is changed (4254053
(https://github.com/googleapis/google-cloud-go/commit/42540530e44e5f331e66e0777c4aabf449f5fd90))

spanner/admin/instance: A comment for field referencing_backups in message

.google.spanner.admin.instance.v1.InstancePartition is changed (4254053
(https://github.com/googleapis/google-cloud-go/commit/42540530e44e5f331e66e0777c4aabf449f5fd90))

spanner/admin/instance: A comment for field replicas in message

.google.spanner.admin.instance.v1.InstanceConfig is changed (4254053

https://cloud.google.com/release-notes 105/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

(https://github.com/googleapis/google-cloud-go/commit/42540530e44e5f331e66e0777c4aabf449f5fd90))

spanner/admin/instance: A comment for field storage_utilization_percent in message

.google.spanner.admin.instance.v1.AutoscalingConfig is changed (4254053
(https://github.com/googleapis/google-cloud-go/commit/42540530e44e5f331e66e0777c4aabf449f5fd90))

spanner/admin/instance: A comment for field unreachable in message

.google.spanner.admin.instance.v1.ListInstancePartitionsResponse is changed (4254053
(https://github.com/googleapis/google-cloud-go/commit/42540530e44e5f331e66e0777c4aabf449f5fd90))

spanner/admin/instance: A comment for message CreateInstanceConfigRequest is changed (4254053

(https://github.com/googleapis/google-cloud-go/commit/42540530e44e5f331e66e0777c4aabf449f5fd90))

spanner/admin/instance: A comment for message DeleteInstanceConfigRequest is changed (4254053

(https://github.com/googleapis/google-cloud-go/commit/42540530e44e5f331e66e0777c4aabf449f5fd90))

spanner/admin/instance: A comment for message UpdateInstanceConfigRequest is changed (4254053

(https://github.com/googleapis/google-cloud-go/commit/42540530e44e5f331e66e0777c4aabf449f5fd90))

spanner/admin/instance: A comment for method CreateInstance in service InstanceAdmin is changed

(4254053 (https://github.com/googleapis/google-cloud-go/commit/42540530e44e5f331e66e0777c4aabf449f5fd90))

spanner/admin/instance: A comment for method CreateInstanceConfig in service InstanceAdmin is

changed (4254053
(https://github.com/googleapis/google-cloud-go/commit/42540530e44e5f331e66e0777c4aabf449f5fd90))

spanner/admin/instance: A comment for method CreateInstancePartition in service InstanceAdmin is

changed (4254053
(https://github.com/googleapis/google-cloud-go/commit/42540530e44e5f331e66e0777c4aabf449f5fd90))

https://cloud.google.com/release-notes 106/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

spanner/admin/instance: A comment for method ListInstanceConfigOperations in service

InstanceAdmin is changed (4254053
(https://github.com/googleapis/google-cloud-go/commit/42540530e44e5f331e66e0777c4aabf449f5fd90))

spanner/admin/instance: A comment for method ListInstanceConfigs in service InstanceAdmin is

changed (4254053
(https://github.com/googleapis/google-cloud-go/commit/42540530e44e5f331e66e0777c4aabf449f5fd90))

spanner/admin/instance: A comment for method ListInstancePartitionOperations in service

InstanceAdmin is changed (4254053
(https://github.com/googleapis/google-cloud-go/commit/42540530e44e5f331e66e0777c4aabf449f5fd90))

spanner/admin/instance: A comment for method MoveInstance in service InstanceAdmin is changed

(4254053 (https://github.com/googleapis/google-cloud-go/commit/42540530e44e5f331e66e0777c4aabf449f5fd90))

spanner/admin/instance: A comment for method UpdateInstance in service InstanceAdmin is changed

(4254053 (https://github.com/googleapis/google-cloud-go/commit/42540530e44e5f331e66e0777c4aabf449f5fd90))

spanner/admin/instance: A comment for method UpdateInstanceConfig in service InstanceAdmin is

changed (4254053
(https://github.com/googleapis/google-cloud-go/commit/42540530e44e5f331e66e0777c4aabf449f5fd90))

spanner/admin/instance: A comment for method UpdateInstancePartition in service InstanceAdmin is

changed (4254053
(https://github.com/googleapis/google-cloud-go/commit/42540530e44e5f331e66e0777c4aabf449f5fd90))

1.75.0 (https://github.com/googleapis/google-cloud-go/compare/spanner/v1.74.0...spanner/v1.75.0) (2025-02-02)

Features

https://cloud.google.com/release-notes 107/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

spanner/admin/database: Add AddSplitPoints API (59fe58a

(https://github.com/googleapis/google-cloud-go/commit/59fe58aba61abf69bfb7549c0a03b21bdb4b8b2f))

Bug Fixes

spanner: Inject "x-goog-spanner-request-id" into outgoing client context (#11544

(https://github.com/googleapis/google-cloud-go/issues/11544)) (a8f16ef
(https://github.com/googleapis/google-cloud-go/commit/a8f16ef102068ad793b4aa8c6cf8c8f0ca0c2d03)), refs #11543
(https://github.com/googleapis/google-cloud-go/issues/11543)

1.76.0 (https://github.com/googleapis/google-cloud-go/compare/spanner/v1.75.0...spanner/v1.76.0) (2025-02-20)

DO NOT USE This version is retracted due to https://github.com/googleapis/google-cloud-go/issues/11630, use

version >=v1.76.1

Features

spanner/admin/database: Add instance partitions field in backup proto (c6a6dc7

(https://github.com/googleapis/google-cloud-go/commit/c6a6dc7c6e63740ec25fc1eb34990f4550a6a1f3))

spanner: Support multiplexed session for read-write transactions & partition ops (#11615
(https://github.com/googleapis/google-cloud-go/issues/11615)) (4b40201
(https://github.com/googleapis/google-cloud-go/commit/4b40201c5cfa223f3e5c039e18a72d74168f7ae9))

Performance Improvements

https://cloud.google.com/release-notes 108/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

spanner: Grab debug stack outside of lock (#11587 (https://github.com/googleapis/google-cloud-go/issues/11587))

(0ee82ff (https://github.com/googleapis/google-cloud-go/commit/0ee82ff4ff385bc632b5cc9630e7e6c4e25a438c))

1.76.1 (https://github.com/googleapis/google-cloud-go/compare/spanner/v1.76.0...spanner/v1.76.1) (2025-02-21)

Bug Fixes

spanner: Multiplexed_session_previous_transaction_id is not supported in the request for a non multiplexed

session (#11626 (https://github.com/googleapis/google-cloud-go/issues/11626)) (a940bef
(https://github.com/googleapis/google-cloud-go/commit/a940befed09ba7ff0de12c720036bc93fee7e8c7))

Vertex AI Agent Builder

FEATURE Vertex AI Search: Document-relevance scores for search results (GA)

You can ask to have a relevance score returned for each search result associated with a query. The returned score can be
used to do post-search ranking or filtering of the results. This feature is available for search apps associated with
structured and unstructured data stores.

This feature is Generally available (GA). For more information, see Get document-relevance score with search results
(https://cloud.google.com/generative-ai-app-builder/docs/preview-search-results#relevance-scores).

Virtual Private Cloud

FEATURE Accessing supported global Google APIs (https://cloud.google.com/vpc/docs/private-service-connect-backends#global-google-apis)

through Private Service Connect backends is available in General Availability.

Workflows

https://cloud.google.com/release-notes 109/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

FEATURE Support to create and manage tags (https://cloud.google.com/workflows/docs/create-manage-tags) is available. You can use
tags to group workflows and other resources for reporting, auditing, and access control.

February 27, 2025

AlloyDB for PostgreSQL

FEATURE AlloyDB's cross-region replication supports up to five secondary regions. You can use additional secondary regions to
further harden disaster recovery response, or to serve geographically distributed workloads. For more information, see
Cross-region replication overview (https://cloud.google.com/alloydb/docs/cross-region-replication/about-cross-region-replication) and
Work with cross-region replication (https://cloud.google.com/alloydb/docs/cross-region-replication/work-with-cross-region-replication)
.

Apigee UI

ANNOUNCEMENT On February 27, 2025, we released an updated version of the Apigee Proxy Debug tool.

star Note: Rollouts of this release to production instances will begin within two business days and may take four or more business days to
complete across all Google Cloud zones. Your instances may not have the features and fixes available until the rollout is complete.

FEATURE Overview

This release introduces a redesigned debugging experience for API proxies in the Apigee UI, which is available in Google
Cloud console.

https://cloud.google.com/release-notes 110/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

This new feature, Debug Sequence View (v2) (https://cloud.google.com/apigee/docs/api-platform/debug/trace), addresses user
feedback and aims to streamline the process of identifying and resolving issues in your API proxies.

We believe that Debug Sequence View will significantly improve the API proxy debugging experience. We encourage you to
try it out and provide your valuable feedback as we continue to refine and enhance this feature!

Key highlights

Intuitive horizontal layout:

The new Debug Sequence View (v2) features a horizontal sequence diagram, mirroring the familiar layout of the
classic Apigee Console UI, making it easier to understand the flow of your API proxy transactions at a glance.

Enhanced clarity:
The horizontal visualization, coupled with improved grouping of events, provides a clearer picture of policy execution,
highlighting errors and their context within the transaction flow.

Streamlined workflow:
Debug Sequence View (v2) is designed to reduce the need for disruptive pop-ups and sifting through events, offering
a smoother and more focused debugging experience. Reimagined icons help quickly understand a transaction at a
glance.

Feature parity:
Debug Sequence View (v2) is designed for users already familiar with debugging in Apigee Classic UI to quickly be
proficient.

Search:
You can now search for a specific string in the sequence diagram and details pane.

Improved API status display:

The API status display in the transaction list has been improved for increased readability.

https://cloud.google.com/release-notes 111/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Consolidated FlowInfo events:

FlowInfo events are now grouped together in the sequence diagram.

Target URL displayed:

Displayed target URL on "Request Sent" node when relevant
Cloud Composer

FEATURE Database retention policy (https://cloud.google.com/composer/docs/composer-3/configure-db-retention) is available in Cloud

Composer 3. You can use this feature to automatically delete older records from the Airflow database, which helps to
maintain the Airflow database's size.

Cloud Load Balancing

FEATURE In typical HTTPS communication, neither the load balancer nor the backend verify each other's identity, assuming that they
are within a secure perimeter and can be trusted. However, when perimeter security needs reinforcement or
communication extends beyond the perimeter, backend mTLS becomes essential. Backend mTLS ensures secure
communication by requiring both the load balancer and the backend to mutually verify their identities.

With backend authenticated TLS, the load balancer verifies the backend server's certificate by checking its chain of trust,
thereby confirming the backend's identity. Conversely, with backend mTLS, the backend server verifies the client certificate
presented by the load balancer. Together, these mechanisms enable backend mTLS, ensuring that both parties validate
each other's identity.

Backend mTLS complements frontend mTLS, which is already generally available (GA).

For details, see the following:

Backend mTLS overview (https://cloud.google.com/load-balancing/docs/backend-authenticated-tls-backend-mtls)

Set up backend authenticated TLS (https://cloud.google.com/load-balancing/docs/backend-authenticated-tls-setup)

https://cloud.google.com/release-notes 112/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Set up backend mTLS (https://cloud.google.com/load-balancing/docs/backend-mtls-setup)

This capability is in Preview for global external Application Load Balancers.

Cloud Monitoring

FEATURE On your custom dashboards, you can reduce the load time of the dashboard by using group widgets. The tab-group widget
displays one member of a collection, and it provides tabs on the toolbar to let you select which member to display:

Organize dashboard widgets (https://cloud.google.com/monitoring/dashboards/text-and-grouping#organize_widgets)

describes grouping widgets and provides configuration information for the different types.

Dashboard with a SingleViewGroup widget

(https://cloud.google.com/monitoring/dashboards/api-examples#dashboard_with_svgroup) describes which API fields to use
to configure a tab-group widget.

Colab Enterprise

FEATURE You can use Terraform resources to schedule notebook runs, and to manage runtimes and runtime templates. To learn
more, see the following:

Schedule a notebook run (https://cloud.google.com/colab/docs/schedule-notebook-run#run_notebook_once-terraform)

Create a runtime (https://cloud.google.com/colab/docs/create-runtime#colab-create-runtime-terraform)

Create a runtime template

(https://cloud.google.com/colab/docs/create-runtime-template#colab-create-runtime-template-terraform)

Datastream

FEATURE Datastream now supports Salesforce as a source. The feature is in Preview.

https://cloud.google.com/release-notes 113/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

For more information, see the Datastream documentation (https://cloud.google.com/datastream/docs/sources-salesforce).

Google Cloud Contact Center as a Service

ANNOUNCEMENT Patch 3.31.36

This patch does the following:

Fixes an issue where the chat adapter was not appearing in the agent desktop when an incoming chat was received.

Fixes an issue where agents in Unavailable or Wrap up status were not receiving incoming contacts and were put into
Unresponsive status.

Fixes a security vulnerability.

Google Distributed Cloud (software only) for VMware

ANNOUNCEMENT Google Distributed Cloud (software only) for VMware 1.29.1100-gke.82 is now available for download
(https://cloud.google.com/anthos/clusters/docs/on-prem/latest/downloads). To upgrade, see Upgrade a cluster or a node pool
(https://cloud.google.com/anthos/clusters/docs/on-prem/latest/how-to/upgrading). Google Distributed Cloud 1.29.1100-gke.82
runs on Kubernetes v1.29.13-gke.500.

If you are using a third-party storage vendor, check the GDC Ready storage partners
(https://cloud.google.com/anthos/docs/resources/partner-storage) document to make sure the storage vendor has already
passed the qualification for this release.

After a release, it takes approximately 7 to 14 days for the version to become available for use with GKE On-Prem API
clients (https://cloud.google.com/kubernetes-engine/distributed-cloud/vmware/docs/how-to/cluster-lifecycle-management-tools): the
Google Cloud console, the gcloud CLI, and Terraform.

https://cloud.google.com/release-notes 114/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

FIXED The 1.29.1100-gke.82 release includes many vulnerability fixes. For a list of all vulnerabilities fixed in this release, see
Vulnerability fixes (https://cloud.google.com/kubernetes-engine/distributed-cloud/vmware/docs/vulnerabilities).

Google Distributed Cloud (software only) for bare metal

ANNOUNCEMENT
Release 1.30.600-gke.69
Google Distributed Cloud for bare metal 1.30.600-gke.69 is now available for download
(https://cloud.google.com/kubernetes-engine/distributed-cloud/bare-metal/docs/downloads). To upgrade, see Upgrade clusters
(https://cloud.google.com/kubernetes-engine/distributed-cloud/bare-metal/docs/how-to/upgrade). Google Distributed Cloud for bare
metal 1.30.600-gke.69 runs on Kubernetes v1.30.9-gke.100.

After a release, it takes approximately 7 to 14 days for the version to become available for installations or upgrades with
the GKE On-Prem API clients
(https://cloud.google.com/kubernetes-engine/distributed-cloud/bare-metal/docs/installing/cluster-lifecycle-management-tools): the
Google Cloud console, the gcloud CLI, and Terraform.

If you use a third-party storage vendor, check the Ready storage partners
(https://cloud.google.com/anthos/docs/resources/partner-storage) document to make sure the storage vendor has already
passed the qualification for this release of Google Distributed Cloud for bare metal.

CHANGE The following functional change was made in 1.30.600-gke.69:

Cluster deletion now deletes worker node pools prior to deleting any control plane node pools.

FIXED The following issues are fixed in 1.30.600-gke.69:

https://cloud.google.com/release-notes 115/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Fixed an issue
(https://cloud.google.com/kubernetes-engine/distributed-cloud/bare-metal/docs/troubleshooting/known-issues#control-plane-
upgrade-failure-due-to-missing-super-admin.conf-file)
where node upgrades failed due to missing super-admin.conf file.

Fixed an issue
(https://cloud.google.com/kubernetes-engine/distributed-cloud/bare-metal/docs/troubleshooting/known-issues#immutable-field-
error-when-updating-user-clusters-with-bmctl-version-1.30.x)
where bmctl update clustercommand fails for user clusters that were created with
thecloudOperationsServiceAccountKeyPath setting in the header section of the cluster configuration file.

FIXED The 1.30.600-gke.69 release includes many vulnerability fixes. For a list of all vulnerabilities fixed in this release, see
Vulnerability fixes (https://cloud.google.com/kubernetes-engine/distributed-cloud/bare-metal/docs/vulnerabilities).

ISSUE For information about the latest known issues, see Google Distributed Cloud for bare metal known issues
(https://cloud.google.com/kubernetes-engine/distributed-cloud/bare-metal/docs/troubleshooting/known-issues) in the Troubleshooting
section.

ANNOUNCEMENT
Release 1.30.500-gke.127
Google Distributed Cloud for bare metal 1.30.500-gke.127 is now available for download
(https://cloud.google.com/kubernetes-engine/distributed-cloud/bare-metal/docs/downloads). To upgrade, see Upgrade clusters
(https://cloud.google.com/kubernetes-engine/distributed-cloud/bare-metal/docs/how-to/upgrade). Google Distributed Cloud for bare
metal 1.30.500-gke.127 runs on Kubernetes 1.30.

After a release, it takes approximately 7 to 14 days for the version to become available for installations or upgrades with
the GKE On-Prem API clients

https://cloud.google.com/release-notes 116/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

(https://cloud.google.com/kubernetes-engine/distributed-cloud/bare-metal/docs/installing/cluster-lifecycle-management-tools): the
Google Cloud console, the gcloud CLI, and Terraform.

If you use a third-party storage vendor, check the Ready storage partners
(https://cloud.google.com/anthos/docs/resources/partner-storage) document to make sure the storage vendor has already
passed the qualification for this release of Google Distributed Cloud for bare metal.

FIXED The following issues are fixed in 1.30.500-gke.127:

Fixed an issue
(https://cloud.google.com/kubernetes-engine/distributed-cloud/bare-metal/docs/troubleshooting/known-issues#control-plane-
upgrade-failure-due-to-missing-super-admin.conf-file)
where node upgrades failed due to missing super-admin.conf file.

Fixed an issue where prompting during bmctl update cluster prevented use of automation. You can now use the -
-quiet flag to skip prompting.

Fixed an issue where node machines didn't update when the registry mirror hosts field was updated.

FIXED The 1.30.500-gke.127 release includes many vulnerability fixes. For a list of all vulnerabilities fixed in this release, see
Vulnerability fixes (https://cloud.google.com/kubernetes-engine/distributed-cloud/bare-metal/docs/vulnerabilities).

ISSUE For information about the latest known issues, see Google Distributed Cloud for bare metal known issues
(https://cloud.google.com/kubernetes-engine/distributed-cloud/bare-metal/docs/troubleshooting/known-issues) in the Troubleshooting
section.

ANNOUNCEMENT
Release 1.31.200-gke.59

https://cloud.google.com/release-notes 117/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Google Distributed Cloud for bare metal 1.31.200-gke.59 is now available for download
(https://cloud.google.com/kubernetes-engine/distributed-cloud/bare-metal/docs/downloads). To upgrade, see Upgrade clusters
(https://cloud.google.com/kubernetes-engine/distributed-cloud/bare-metal/docs/how-to/upgrade). Google Distributed Cloud for bare
metal 1.31.200-gke.59 runs on Kubernetes v1.31.5-gke.300.

After a release, it takes approximately 7 to 14 days for the version to become available for installations or upgrades with
the GKE On-Prem API clients
(https://cloud.google.com/kubernetes-engine/distributed-cloud/bare-metal/docs/installing/cluster-lifecycle-management-tools): the
Google Cloud console, the gcloud CLI, and Terraform.

If you use a third-party storage vendor, check the Ready storage partners
(https://cloud.google.com/anthos/docs/resources/partner-storage) document to make sure the storage vendor has already
passed the qualification for this release of Google Distributed Cloud for bare metal.

FIXED The following issue is fixed in 1.31.200-gke.69:

Fixed an issue
(https://cloud.google.com/kubernetes-engine/distributed-cloud/bare-metal/docs/troubleshooting/known-issues#control-plane-
upgrade-failure-due-to-missing-super-admin.conf-file)
where node upgrades failed due to missing super-admin.conf file.

FIXED The 1.31.200-gke.59 release includes many vulnerability fixes. For a list of all vulnerabilities fixed in this release, see
Vulnerability fixes (https://cloud.google.com/kubernetes-engine/distributed-cloud/bare-metal/docs/vulnerabilities).

ISSUE For information about the latest known issues, see Google Distributed Cloud for bare metal known issues
(https://cloud.google.com/kubernetes-engine/distributed-cloud/bare-metal/docs/troubleshooting/known-issues) in the Troubleshooting
section.

https://cloud.google.com/release-notes 118/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

ANNOUNCEMENT Release 1.29.1100-gke.84

Google Distributed Cloud for bare metal 1.29.1100-gke.84 is now available for download
(https://cloud.google.com/kubernetes-engine/distributed-cloud/bare-metal/docs/downloads). To upgrade, see Upgrade clusters
(https://cloud.google.com/kubernetes-engine/distributed-cloud/bare-metal/docs/how-to/upgrade). Google Distributed Cloud for bare
metal 1.29.1100-gke.84 runs on Kubernetes v1.29.13-gke.500.

After a release, it takes approximately 7 to 14 days for the version to become available for installations or upgrades with
the GKE On-Prem API clients
(https://cloud.google.com/kubernetes-engine/distributed-cloud/bare-metal/docs/installing/cluster-lifecycle-management-tools): the
Google Cloud console, the gcloud CLI, and Terraform.

If you use a third-party storage vendor, check the Ready storage partners
(https://cloud.google.com/anthos/docs/resources/partner-storage) document to make sure the storage vendor has already
passed the qualification for this release of Google Distributed Cloud for bare metal.

FIXED The 1.29.1100-gke.84 release includes many vulnerability fixes. For a list of all vulnerabilities fixed in this release, see
Vulnerability fixes (https://cloud.google.com/kubernetes-engine/distributed-cloud/bare-metal/docs/vulnerabilities).

ANNOUNCEMENT The initial patch releases for 1.30.500, 1.30.600, and 1.31.200 contained a known issue
(https://cloud.google.com/kubernetes-engine/distributed-cloud/bare-metal/docs/troubleshooting/known-issues#control-plane-upgrade-
failure-due-to-missing-super-admin.conf-file)
that blocked cluster upgrades. This issue is fixed in the following updated patches:

1.31.200-gke.59

1.30.600-gke.69

1.30.500-gke.127

https://cloud.google.com/release-notes 119/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

The release notes and related documentation have been updated to reflect the updated patch version information.
Google Kubernetes Engine

FEATURE The GKE Autopilot partner program now lets partners create and manage allowlists that correspond to specific partner
workloads. In GKE version 1.32.1-gke.1729000 and later, you can explicitly install allowlists in your clusters to run only the
partner solutions that you need.

To learn more, see Run privileged workloads from GKE Autopilot partners
(https://cloud.google.com/kubernetes-engine/docs/how-to/run-autopilot-partner-workloads).

Network Connectivity Center

FEATURE Producer VPC Spokes

(https://cloud.google.com/network-connectivity/docs/network-connectivity-center/concepts/producer-vpc-spokes-overview) is generally
available (https://cloud.google.com/products#product-launch-stages).

If you have a VPC network that consumes a service offered through private services access, you can use a Network
Connectivity Center producer VPC spoke to make the service reachable by other spokes on a hub.

Network Intelligence Center

FEATURE Flow Analyzer (https://cloud.google.com/network-intelligence-center/docs/flow-analyzer/overview) is available in General

availability.

VPC Service Controls

FEATURE Preview stage (https://cloud.google.com/products#product-launch-stages) support for the following integration:

Service Usage (https://cloud.google.com/vpc-service-controls/docs/supported-products#table_usage)

https://cloud.google.com/release-notes 120/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Virtual Private Cloud

FEATURE The following Private Service Connect monitoring metrics are available for both producers and consumers in General
Availability:

Closed connections count

Received packets dropped count

Sent packets dropped count

New connections count

Open connections

Received bytes count

Received packets count

Sent bytes count

Sent packets count

Additionally, the NAT IP address capacity metric is available for producers in General Availability.

You can use these metrics to help monitor and troubleshoot published services
(https://cloud.google.com/vpc/docs/configure-private-service-connect-producer#dropped-packets), endpoints that connect to
published services (https://cloud.google.com/vpc/docs/configure-private-service-connect-services#dropped-packets), and backends
that connect to published services
(https://cloud.google.com/vpc/docs/configure-private-service-connect-services-controls#dropped-packets). For more information, see
Monitor Private Service Connect connections (https://cloud.google.com/vpc/docs/monitor-private-service-connect-connections).

https://cloud.google.com/release-notes 121/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

February 26, 2025

Cloud Database Migration Service

FEATURE Database Migration Service for homogeneous Cloud SQL for PostgreSQL migrations now lets you migrate specific
databases from your source instance. You can view metrics, statuses, and errors separately for each database.

For more information about migrating specific databases, see:

Create a migration job to a new destination instance

(https://cloud.google.com/database-migration/docs/postgres/create-migration-job)

Create a migration job to an existing destination instance

(https://cloud.google.com/database-migration/docs/postgres/create-migration-job-existing-instance)

Review a migration job (https://cloud.google.com/database-migration/docs/postgres/review-migration-job)

Manage migration jobs (https://cloud.google.com/database-migration/docs/postgres/migration-job-actions)

Cloud Monitoring

CHANGE You can now enable and disable the logging of uptime-check failures by using the log_check_failures field
(https://cloud.google.com/monitoring/api/ref_v3/rest/v3/projects.uptimeCheckConfigs#uptimeCheckConfig.FIELDS.log_check_failures) in
the Cloud Monitoring API.

Cloud SQL for MySQL

FEATURE You can now include replicas when you perform an in-place major version upgrade using gcloud or the Cloud SQL Admin
API. For more information, see Upgrade the database major version in-place
(https://cloud.google.com/sql/docs/mysql/upgrade-major-db-version-inplace#include-replicas).

https://cloud.google.com/release-notes 122/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Cloud SQL for PostgreSQL

FEATURE You can now include replicas when you perform an in-place major version upgrade using gcloud or the Cloud SQL Admin
API. For more information, see Upgrade the database major version in-place
(https://cloud.google.com/sql/docs/postgres/upgrade-major-db-version-inplace#include-replicas).

Cloud Storage

FEATURE Bucket relocation (https://cloud.google.com/storage/docs/bucket-relocation/overview) for Cloud Storage is generally available (GA
(https://cloud.google.com/products#product-launch-stages)). You can use bucket relocation to relocate buckets between
geographic locations.

Google Kubernetes Engine

CHANGE (2025-R08) Version updates

GKE cluster versions have been updated.

New versions available for upgrades and new clusters.

The following Kubernetes versions are now available for new clusters and for opt-in control plane upgrades and node
upgrades for existing clusters. For more information on versioning and upgrades, see GKE versioning and support
(https://cloud.google.com/kubernetes-engine/versioning) and Upgrades (https://cloud.google.com/kubernetes-engine/upgrades).

Rapid channelRegular channel… Stable channel… Extended channel… No channel (#no-channel)

(#rapid-channel)

star Note: Your clusters might not have these versions available. Rollouts are already in progress when we publish the release notes, and
can take multiple days to complete across all Google Cloud zones.

https://cloud.google.com/release-notes 123/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Version 1.32.1-gke.1729000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#v1321) is now the default
version for cluster creation in the Rapid channel.

The following versions are now available in the Rapid channel:

1.29.14-gke.1020000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12914)

1.29.14-gke.1067000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12914)

1.30.10-gke.1042000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v13010)

1.30.10-gke.1070000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v13010)

1.31.6-gke.1027000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1316)

1.31.6-gke.1064000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1316)

1.32.2-gke.1182000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#v1322)

The following versions are no longer available in the Rapid channel:

1.29.13-gke.1109000

1.29.13-gke.1169000

https://cloud.google.com/release-notes 124/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

1.30.9-gke.1201000

1.30.9-gke.1231000

1.31.5-gke.1169000

1.31.5-gke.1233000

1.32.1-gke.1489001

Auto-upgrade targets are now available for the following minor versions:

Control planes and nodes with auto-upgrade enabled in the Rapid channel will be upgraded from version
1.28 to version 1.29.14-gke.1018000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12914) with this
release.

Control planes and nodes with auto-upgrade enabled in the Rapid channel will be upgraded from version
1.29 to version 1.30.10-gke.1022000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v13010) with this
release.

Control planes and nodes with auto-upgrade enabled in the Rapid channel will be upgraded from version
1.30 to version 1.31.6-gke.1020000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1316) with this
release.

The following patch-only version auto-upgrade targets are now available for clusters with maintenance
exclusions
(https://cloud.google.com/kubernetes-engine/docs/concepts/maintenance-windows-and-exclusions#exclusions) or other
factors preventing minor version upgrades:

https://cloud.google.com/release-notes 125/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Control planes and nodes with auto-upgrade enabled in the Rapid channel will be upgraded from version
1.29 to version 1.29.14-gke.1018000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12914) with this
release.

Control planes and nodes with auto-upgrade enabled in the Rapid channel will be upgraded from version
1.30 to version 1.30.10-gke.1022000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v13010) with this
release.

Control planes and nodes with auto-upgrade enabled in the Rapid channel will be upgraded from version
1.31 to version 1.31.6-gke.1020000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1316) with this
release.

CHANGE (2025-R08) Version updates

star Note: Your clusters might not have these versions available. Rollouts are already in progress when we publish the release notes, and can
take multiple days to complete across all Google Cloud zones.

Version 1.32.1-gke.1729000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#v1321) is now the default version
for cluster creation in the Rapid channel.

The following versions are now available in the Rapid channel:

1.29.14-gke.1020000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12914)

https://cloud.google.com/release-notes 126/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

1.29.14-gke.1067000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12914)

1.30.10-gke.1042000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v13010)

1.30.10-gke.1070000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v13010)

1.31.6-gke.1027000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1316)

1.31.6-gke.1064000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1316)

1.32.2-gke.1182000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#v1322)

The following versions are no longer available in the Rapid channel:

1.29.13-gke.1109000

1.29.13-gke.1169000

1.30.9-gke.1201000

1.30.9-gke.1231000

1.31.5-gke.1169000

1.31.5-gke.1233000

1.32.1-gke.1489001

Auto-upgrade targets are now available for the following minor versions:

https://cloud.google.com/release-notes 127/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Control planes and nodes with auto-upgrade enabled in the Rapid channel will be upgraded from version 1.28 to
version 1.29.14-gke.1018000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12914) with this release.

Control planes and nodes with auto-upgrade enabled in the Rapid channel will be upgraded from version 1.29 to
version 1.30.10-gke.1022000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v13010) with this release.

Control planes and nodes with auto-upgrade enabled in the Rapid channel will be upgraded from version 1.30 to
version 1.31.6-gke.1020000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1316) with this release.

The following patch-only version auto-upgrade targets are now available for clusters with maintenance exclusions
(https://cloud.google.com/kubernetes-engine/docs/concepts/maintenance-windows-and-exclusions#exclusions) or other factors
preventing minor version upgrades:

Control planes and nodes with auto-upgrade enabled in the Rapid channel will be upgraded from version 1.29 to
version 1.29.14-gke.1018000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12914) with this release.

Control planes and nodes with auto-upgrade enabled in the Rapid channel will be upgraded from version 1.30 to
version 1.30.10-gke.1022000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v13010) with this release.

Control planes and nodes with auto-upgrade enabled in the Rapid channel will be upgraded from version 1.31 to
version 1.31.6-gke.1020000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1316) with this release.

CHANGE (2025-R08) Version updates

https://cloud.google.com/release-notes 128/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

star Note: Your clusters might not have these versions available. Rollouts are already in progress when we publish the release notes, and can
take multiple days to complete across all Google Cloud zones.

Version 1.31.5-gke.1169000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1315) is now the default version
for cluster creation in the Regular channel.

The following versions are now available in the Regular channel:

1.29.13-gke.1169000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12913)

1.30.9-gke.1201000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1309)

1.31.5-gke.1233000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1315)

The following versions are no longer available in the Regular channel:

1.29.13-gke.1038000

1.30.9-gke.1046000

1.31.5-gke.1068000

1.32.1-gke.1200003

Auto-upgrade targets are now available for the following minor versions:

Control planes and nodes with auto-upgrade enabled in the Regular channel will be upgraded from version 1.28
to version 1.29.13-gke.1109000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12913) with this release.

https://cloud.google.com/release-notes 129/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Control planes and nodes with auto-upgrade enabled in the Regular channel will be upgraded from version 1.29
to version 1.30.9-gke.1127000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1309) with this release.

The following patch-only version auto-upgrade targets are now available for clusters with maintenance exclusions
(https://cloud.google.com/kubernetes-engine/docs/concepts/maintenance-windows-and-exclusions#exclusions) or other factors
preventing minor version upgrades:

Control planes and nodes with auto-upgrade enabled in the Regular channel will be upgraded from version 1.29
to version 1.29.13-gke.1109000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12913) with this release.

Control planes and nodes with auto-upgrade enabled in the Regular channel will be upgraded from version 1.30
to version 1.30.9-gke.1127000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1309) with this release.

Control planes and nodes with auto-upgrade enabled in the Regular channel will be upgraded from version 1.31
to version 1.31.5-gke.1169000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1315) with this release.

Control planes and nodes with auto-upgrade enabled in the Regular channel will be upgraded from version 1.32
to version 1.32.1-gke.1357001
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#v1321) with this release.

CHANGE (2025-R08) Version updates

star Note: Your clusters might not have these versions available. Rollouts are already in progress when we publish the release notes, and can
take multiple days to complete across all Google Cloud zones.

https://cloud.google.com/release-notes 130/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Version 1.30.9-gke.1009000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1309) is now the default version
for cluster creation in the Stable channel.

The following versions are now available in the Stable channel:

1.29.13-gke.1038000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12913)

1.30.9-gke.1046000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1309)

1.31.5-gke.1068000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1315)

The following versions are no longer available in the Stable channel:

1.29.12-gke.1270000

1.30.8-gke.1261000

1.31.4-gke.1372000

Auto-upgrade targets are now available for the following minor versions:

Control planes and nodes with auto-upgrade enabled in the Stable channel will be upgraded from version 1.28
to version 1.29.13-gke.1006000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12913) with this release.

Control planes and nodes with auto-upgrade enabled in the Stable channel will be upgraded from version 1.29
to version 1.30.9-gke.1009000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1309) with this release.

The following patch-only version auto-upgrade targets are now available for clusters with maintenance exclusions
(https://cloud.google.com/kubernetes-engine/docs/concepts/maintenance-windows-and-exclusions#exclusions) or other factors

https://cloud.google.com/release-notes 131/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

preventing minor version upgrades:

Control planes and nodes with auto-upgrade enabled in the Stable channel will be upgraded from version 1.29
to version 1.29.13-gke.1006000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12913) with this release.

Control planes and nodes with auto-upgrade enabled in the Stable channel will be upgraded from version 1.30
to version 1.30.9-gke.1009000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1309) with this release.

Control planes and nodes with auto-upgrade enabled in the Stable channel will be upgraded from version 1.31
to version 1.31.5-gke.1023000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1315) with this release.

CHANGE (2025-R08) Version updates

star Note: Your clusters might not have these versions available. Rollouts are already in progress when we publish the release notes, and can
take multiple days to complete across all Google Cloud zones.

Version 1.31.5-gke.1169000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1315) is now the default version
for cluster creation in the Extended channel.

The following versions are now available in the Extended channel:

1.27.16-gke.2477000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.27.md#v12716)

https://cloud.google.com/release-notes 132/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

1.28.15-gke.1781000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.28.md#v12815)

1.28.15-gke.1881000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.28.md#v12815)

1.29.13-gke.1169000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12913)

1.30.9-gke.1201000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1309)

1.31.5-gke.1233000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1315)

The following versions are no longer available in the Extended channel:

1.27.16-gke.2440000

1.28.15-gke.1612000

1.28.15-gke.1844000

1.29.13-gke.1038000

1.30.9-gke.1046000

1.31.5-gke.1068000

1.32.1-gke.1200003

The following patch-only version auto-upgrade targets are now available for clusters with maintenance exclusions
(https://cloud.google.com/kubernetes-engine/docs/concepts/maintenance-windows-and-exclusions#exclusions) or other factors
preventing minor version upgrades:

https://cloud.google.com/release-notes 133/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Control planes and nodes with auto-upgrade enabled in the Extended channel will be upgraded from version
1.28 to version 1.28.15-gke.1641000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.28.md#v12815) with this release.

Control planes and nodes with auto-upgrade enabled in the Extended channel will be upgraded from version
1.29 to version 1.29.13-gke.1109000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12913) with this release.

Control planes and nodes with auto-upgrade enabled in the Extended channel will be upgraded from version
1.30 to version 1.30.9-gke.1127000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1309) with this release.

Control planes and nodes with auto-upgrade enabled in the Extended channel will be upgraded from version
1.31 to version 1.31.5-gke.1169000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1315) with this release.

Control planes and nodes with auto-upgrade enabled in the Extended channel will be upgraded from version
1.32 to version 1.32.1-gke.1357001
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#v1321) with this release.

CHANGE (2025-R08) Version updates

star Note: Your clusters might not have these versions available. Rollouts are already in progress when we publish the release notes, and can
take multiple days to complete across all Google Cloud zones.

Version 1.31.5-gke.1169000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1315) is now the default version
for cluster creation.

https://cloud.google.com/release-notes 134/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

The following versions are now available:

1.29.14-gke.1020000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12914)

1.29.14-gke.1067000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12914)

1.30.10-gke.1042000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v13010)

1.30.10-gke.1070000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v13010)

1.31.6-gke.1027000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1316)

1.31.6-gke.1064000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1316)

1.32.2-gke.1182000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#v1322)

The following node versions are now available:

1.27.16-gke.2477000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.27.md#v12716)

1.28.15-gke.1881000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.28.md#v12815)

1.29.14-gke.1020000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12914)

1.29.14-gke.1067000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12914)

https://cloud.google.com/release-notes 135/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

1.30.10-gke.1042000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v13010)

1.30.10-gke.1070000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v13010)

1.31.6-gke.1027000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1316)

1.31.6-gke.1064000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1316)

1.32.2-gke.1182000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#v1322)

The following versions are no longer available:

1.29.12-gke.1270000

1.30.8-gke.1162001

1.30.9-gke.1231000

1.31.4-gke.1372000

1.32.1-gke.1200003

Auto-upgrade targets are now available for the following minor versions:

Control planes and nodes with auto-upgrade enabled will be upgraded from version 1.28 to version 1.29.13-
gke.1109000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12913) with
this release.

Control planes and nodes with auto-upgrade enabled will be upgraded from version 1.29 to version 1.30.9-
gke.1009000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1309) with
this release.

https://cloud.google.com/release-notes 136/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

The following patch-only version auto-upgrade targets are now available for clusters with maintenance exclusions
(https://cloud.google.com/kubernetes-engine/docs/concepts/maintenance-windows-and-exclusions#exclusions) or other factors
preventing minor version upgrades:

Control planes and nodes with auto-upgrade enabled will be upgraded from version 1.29 to version 1.29.13-
gke.1109000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12913) with
this release.

Control planes and nodes with auto-upgrade enabled will be upgraded from version 1.30 to version 1.30.9-
gke.1009000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1309) with
this release.

Control planes and nodes with auto-upgrade enabled will be upgraded from version 1.31 to version 1.31.5-
gke.1169000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1315) with
this release.

Control planes and nodes with auto-upgrade enabled will be upgraded from version 1.32 to version 1.32.1-
gke.1357001 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#v1321) with
this release.
Network Connectivity Center

ISSUE Private Service Connect connection propagation

(https://cloud.google.com/network-connectivity/docs/network-connectivity-center/concepts/psc-propagated-connection-overview) is
asynchronous after spoke creation or deletion. When a VPC spoke is removed from a hub, it can take some time to update
propagated Private Service Connect connections. While the Private Service Connect propagation connection update is in
progress, traffic from the VM within the VPC network can flow to the backend, even after the VPC spoke is added to a new
hub. To avoid this issue, we recommend that before adding the spoke to another hub, make sure that all of the propagation
status entries for the VPC network in the previous hub, whether as a source spoke or a target spoke, are deleted.

https://cloud.google.com/release-notes 137/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

FEATURE Private Service Connect connection propagation

(https://cloud.google.com/network-connectivity/docs/network-connectivity-center/concepts/psc-propagated-connection-overview) is
generally available (https://cloud.google.com/products#product-launch-stages).

Connection propagation through the Network Connectivity Center hub provides access to Private Service Connect
endpoints from other VPC networks.

Vertex AI Agent Builder

FEATURE Vertex AI Search: Personalize responses from the answer method (GA)

When making a query call to the answer method, you can provide information about the user to personalize the generated
answer.

This feature is Generally available (GA). For more information, see Personalize answers
(https://cloud.google.com/generative-ai-app-builder/docs/answer#personalize-answers).

Virtual Private Cloud

FEATURE Private Service Connect propagated connections (https://cloud.google.com/vpc/docs/about-propagated-connections) are

available in General Availability. With propagated connections, services that are accessible in one consumer VPC spoke
through Private Service Connect endpoints can be privately accessed by other consumer VPC spokes that are connected
to the same Network Connectivity Center hub.

February 25, 2025

AlloyDB for PostgreSQL

https://cloud.google.com/release-notes 138/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

ANNOUNCEMENT The alloydb_scann extension is updated to include the following vector search improvements in Preview
(https://cloud.google.com/products#product-launch-stages):

AlloyDB for PostgreSQL introduces inline filtering for vector search. With inline filtering, SQL filter evaluation is
performed at the same time as vector search. This feature mitigates potential issues from existing pre and post-filter
evaluation mechanisms. For more information about scann.enable_inline_filtering, see ScaNN index reference
(https://cloud.google.com/alloydb/docs/reference/ai/scann-index-reference).

A distribution histogram is available in the pg_stat_ann_indexes view, which helps you understand the distribution
of vectors between partitions and num_leaves of your ScaNN index. For more information, including
recommendations about tuning the distributionpercentile metric, see Tuning metrics
(https://cloud.google.com/alloydb/docs/reference/vector-index-metrics#tuning-metrics).

BigQuery

ANNOUNCEMENT You can now see a list of BigQuery API and service dependencies
(https://cloud.google.com/bigquery/docs/service-dependencies). You can also review the effects of disabling an API or service.

FEATURE You can use the best sellers (https://cloud.google.com/bigquery/docs/merchant-center-best-sellers-migration) and price
competitiveness (https://cloud.google.com/bigquery/docs/merchant-center-price-competitiveness-migration) migration guides to
transition to the newer version of the reports. This feature is in preview
(https://cloud.google.com/products#product-launch-stages).

FEATURE BigQuery resource utilization charts (https://cloud.google.com/bigquery/docs/admin-resource-charts#view-resource-utilization)

provide metrics views and more chart configuration options in Preview
(https://cloud.google.com/products/#product-launch-stages).

Cloud Composer

FEATURE Cloud Composer 3 is now available in Stockholm (europe-north2). The change is gradually rolling out.

https://cloud.google.com/release-notes 139/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Cloud SQL for PostgreSQL

FEATURE You can now export or import all user databases in an instance
(https://cloud.google.com/sql/docs/postgres/import-export/import-export-parallel#export-entire-instance) using a directory-formatted,
parallel export or import operation.

Cloud Service Mesh

ANNOUNCEMENT Managed Cloud Service Mesh with the Traffic Director control plane now supports configuring the network topology
(https://istio.io/latest/docs/ops/configuration/traffic-management/network-topologies/#configuring-network-topologies) to use X-
Forwarded-For and X-Forwarded-Client-Cert headers by MeshConfig or annotations of workloads.

Config Controller

CHANGE Config Controller now uses the following versions of its included products:

Config Connector v1.128.0, release notes (https://cloud.google.com/config-connector/docs/release-notes#February_04_2025)

Generative AI on Vertex AI

FEATURE Gemini 2.0 Flash-Lite is now generally available

Gemini 2.0 Flash-Lite is now generally available. For more information, see Gemini 2.0
(https://cloud.google.com/vertex-ai/generative-ai/docs/gemini-v2).

Google Cloud VMware Engine

FEATURE Generally available: VMware Engine Update center on the Google Cloud console is now generally available. Update center
lets you view and manage updates to your private clouds, including specifying start dates and times for schedulable
VMware version updates, and viewing the status of in-progress schedulable and non-schedulable updates, such as

https://cloud.google.com/release-notes 140/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

security patches. For more information, see Update a private cloud

(https://cloud.google.com/vmware-engine/docs/update-center).
Google Kubernetes Engine

FEATURE Three new metrics are added for checking node and node pool status:

kubernetes.io/node/status_condition: The condition of a node from the node status condition field. The Ready
field has Unknown status if the node controller has not heard from the node in the last node-monitor-grace-period
period. This metric is available for clusters with GKE version 1.32.1-gke.1260000 and later.

kubernetes.io/node_pool/multi_host/available: The multi-host NodePool availability. When all the nodes in the
node pool are available, the value is True. If any of the nodes in the node pool are unavailable, the value is False.
This metric is available for Multi-host TPU node pools only.

kubernetes.io/node_pool/status: The current status of the node pool from the NodePool instance. Status
updates happen after GKE API operations complete. This metric is available for Multi-host TPU node pools only.

Google SecOps

ANNOUNCEMENT The Custom Fields (https://cloud.google.com/chronicle/docs/secops/release-notes#February_22_2025) feature has been rolled

back.

Security Command Center

FEATURE You can now use Organization Policy Service custom constraints to provide more granular control over specific fields for
some Security Command Center resources. For more information, see Configure custom organization policies
(https://cloud.google.com/security-command-center/docs/org-policy-custom-constraints). This feature is in General Availability
(https://cloud.google.com/products#product-launch-stages).

https://cloud.google.com/release-notes 141/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

February 24, 2025

App Hub

FEATURE App Hub supports resources from the following sources (https://cloud.google.com/app-hub/docs/supported-resources) in
Preview (https://cloud.google.com/products#product-launch-stages):

Bigtable

Cloud SQL

Cloud Storage

Memorystore for Redis

Pub/Sub

Spanner

BigQuery

FEATURE You can now use the @@location system variable (https://cloud.google.com/bigquery/docs/reference/system-variables) to set the
location in which to run a query. This feature is in preview (https://cloud.google.com/products#product-launch-stages).

Bigtable

FEATURE Bigtable Data Boost (https://cloud.google.com/bigtable/docs/data-boost-overview), a serverless compute service designed for
high-throughput read jobs and queries, is generally available (GA) (https://cloud.google.com/products#product-launch-stages).

FEATURE Automated backup for Bigtable is generally available (GA) (https://cloud.google.com/products#product-launch-stages). For more
information, see the Backups overview (https://cloud.google.com/bigtable/docs/backups).

https://cloud.google.com/release-notes 142/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Cloud Service Mesh

ANNOUNCEMENT If you're a user of managed Cloud Service Mesh with the ISTIOD control plane implementation, you can now fine-tune your
control plane modernization. See the Managed control plane modernization
(https://cloud.google.com/service-mesh/docs/modernization) page for details.

Cloud Storage

LIBRARIES A weekly digest of client library updates from across the Cloud SDK (https://cloud.google.com/sdk).

Node.js
(#node.js)

Changes for @google-cloud/storage (https://github.com/googleapis/nodejs-storage)

7.15.2 (https://github.com/googleapis/nodejs-storage/compare/v7.15.1...v7.15.2) (2025-02-20)

Bug Fixes

Export SaveData type from index.ts (#2580 (https://github.com/googleapis/nodejs-storage/issues/2580)) (dbf510c

(https://github.com/googleapis/nodejs-storage/commit/dbf510c08f28c720ba66268eea6a62e139179ab4))

FEATURE You can move an object within a bucket with hierarchical namespace enabled using the Objects: move
(https://cloud.google.com/storage/docs/json_api/v1/objects/move) method.

Container Optimized OS

CHANGE cos-dev-121-18867-0-24

https://cloud.google.com/release-notes 143/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Kernel Docker ContainerdGPU Drivers

(https://cloud.goo
os/docs/how-to/ru

COS-6.6.74 v25.0.7v2.0.2 See List

(https://cos.googlesource.com/third_party/kernel/+/bc67b314e6581abe448ef9194130530bf0872262) (https://storage.g
tools/18867.0.24/

CHANGE Updated app-admin/google-guest-configs to v20250207.00.

CHANGE Upgraded app-admin/google-guest-agent to v20250204.02.

CHANGE Updated the default tag of the GPU driver supporting the NVIDIA H200 GPU device to 570.86.15.

CHANGE Upgraded cloud-init from 23.4.3 to 24.4.1.

CHANGE Updated Konlet to v0.13.4.

CHANGE Fixed CVE-2025-0840 in binutils.

FEATURE Support for NVIDIA B200 GPU – Added support for the R570 driver series, including version 570.86.15. This version has
been assigned the latest, default, and R570 tags.

FEATURE Updated cos-gpu-installer to v2.4.7: 1.Added Support for NVIDIA B200 GPU. 2.Enabled --prepare-build-tools flag to preload
GPU driver metadata for ARM64

FIXED Upgraded app-admin/fluent-bit to v3.2.5.

FIXED Upgraded sys-apps/hwdata to v0.391.

FIXED Upgraded sys-apps/diffutils to v3.11.

https://cloud.google.com/release-notes 144/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

FIXED Upgraded sys-apps/pv to v1.9.27.

SECURITY Fixed CVE-2024-13176 in dev-libs/openssl.

SECURITY Fixed CVE-2025-0395 in sys-libs/glibc.

SECURITY Fixed CVE-2024-9287 in dev-lang/python.

CHANGE Runtime sysctl changes:

Changed: fs.file-max: 811771 -> 811788

CHANGE cos-109-17800-436-42

Kernel Docker ContainerdGPU Drivers

(https://cloud.goo
os/docs/how-to/ru

COS-6.1.124 v24.0.9v1.7.24 See List

(https://cos.googlesource.com/third_party/kernel/+/31a852343550ac6012872e47e53a4d2e8e2f4f13) (https://storage.go
tools/17800.436.4

CHANGE Updated app-admin/google-guest-configs to v20250207.00.

SECURITY Fixed CVE-2024-13176 in dev-libs/openssl.

SECURITY Fixed CVE-2025-0395 in sys-libs/glibc.

SECURITY Fixed CVE-2024-9287 in dev-lang/python.

https://cloud.google.com/release-notes 145/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

SECURITY Fixed CVE-2024-56664 in the Linux kernel.

SECURITY Fixed CVE-2024-57949 in the Linux kernel.

SECURITY Fixed CVE-2024-57951 in the Linux kernel.

CHANGE Runtime sysctl changes:

Changed: fs.file-max: 812276 -> 812258

CHANGE cos-117-18613-164-47

Kernel Docker ContainerdGPU Drivers

(https://cloud.goo
os/docs/how-to/ru

COS-6.6.72 v24.0.9v1.7.24 See List

(https://cos.googlesource.com/third_party/kernel/+/9f4b9310d6f9c066089b5bd758e2e1328b1248a5) (https://storage.g
tools/18613.164.4

SECURITY Fixed CVE-2025-0395 in sys-libs/glibc.

SECURITY Fixed CVE-2024-9287 in dev-lang/python.

CHANGE Updated app-admin/google-guest-configs to v20250207.00.

SECURITY Fixed CVE-2024-13176 in dev-libs/openssl.

SECURITY Fixed CVE-2024-57949 in the Linux kernel.

https://cloud.google.com/release-notes 146/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

SECURITY Fixed CVE-2024-57951 in the Linux kernel.

CHANGE Runtime sysctl changes:

Changed: fs.file-max: 811817 -> 811792

CHANGE cos-113-18244-291-46

Kernel Docker ContainerdGPU Drivers

(https://cloud.goo
os/docs/how-to/ru

COS-6.1.123 v24.0.9v1.7.24 See List

(https://cos.googlesource.com/third_party/kernel/+/83c40a00c1052f7d609b55af08584a03779bca7e) (https://storage.go
tools/18244.291.4

CHANGE Updated app-admin/google-guest-configs to v20250207.00.

SECURITY Fixed CVE-2024-13176 in dev-libs/openssl.

SECURITY Fixed CVE-2025-0395 in sys-libs/glibc.

SECURITY Fixed CVE-2024-9287 in dev-lang/python.

SECURITY Fixed CVE-2024-57949 in the Linux kernel.

SECURITY Fixed CVE-2024-57951 in the Linux kernel.

CHANGE Runtime sysctl changes:

https://cloud.google.com/release-notes 147/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Changed: fs.file-max: 812031 -> 812058

CHANGE cos-105-17412-535-61

Kernel Docker ContainerdGPU Drivers

(https://cloud.goog
os/docs/how-to/run

COS-5.15.173 v23.0.3v1.7.23 See List

(https://cos.googlesource.com/third_party/kernel/+/52070ca369fc14ffeadb0b794325dd7174bfbf33) (https://storage.goo
tools/17412.535.61

SECURITY Fixed CVE-2025-0395 in sys-libs/glibc.

SECURITY Fixed CVE-2024-9287 in dev-lang/python.

SECURITY Fixed CVE-2023-27043 in dev-lang/python.

SECURITY Fixed CVE-2024-57951 in the Linux kernel.

SECURITY Fixed CVE-2024-53215 in the Linux kernel.

SECURITY Fixed CVE-2024-56569 in the Linux kernel.

Dataproc

ANNOUNCEMENT New Dataproc on Compute Engine subminor image versions

(https://cloud.google.com/dataproc/docs/concepts/versioning/dataproc-version-clusters#supported_dataproc_versions):

2.0.133-debian10, 2.0.133-rocky8, 2.0.133-ubuntu18

https://cloud.google.com/release-notes 148/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

2.1.81-debian11, 2.1.81-rocky8, 2.1.81-ubuntu20, 2.1.81-ubuntu20-arm

2.2.47-debian12, 2.2.47-rocky9, 2.2.47-ubuntu22

ANNOUNCEMENT New Dataproc Serverless for Spark runtime versions

(https://cloud.google.com/dataproc-serverless/docs/concepts/versions/dataproc-serverless-versions):

1.1.93

1.2.37

2.2.37

Dialogflow

FEATURE Dialogflow CX (Conversational Agents): Text-to-speech used by Dialogflow now supports new Chirp HD voices
(https://cloud.google.com/text-to-speech/docs/voice-types#chirp_hd_voices).

FEATURE Dialogflow CX (Conversational Agents) & ES: Text-to-speech removed support for voices across European markets.
Affected users were sent an email announcement (https://cloud.google.com/dialogflow/docs/data/euro_voices.pdf).

Generative AI on Vertex AI

ANNOUNCEMENT Anthropic's Claude Sonnet 3.7 is in Preview (https://cloud.google.com/products#product-launch-stages) on Vertex AI. To learn
more, view the Claude Sonnet 3.7 model card
(https://console.cloud.google.com/vertex-ai/publishers/anthropic/model-garden/claude-3-7-sonnet) in Model Garden.

Identity and Access Management

FEATURE Workforce Identity Federation can map up to 400 groups from Microsoft Entra ID. The feature is generally available. To
learn more, see Configure Workforce Identity Federation with Microsoft Entra ID and a large number of groups

https://cloud.google.com/release-notes 149/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

(https://cloud.google.com/iam/docs/workforce-sign-in-microsoft-entra-id-scalable-groups).
Looker

FEATURE The following Gemini in Looker (https://cloud.google.com/looker/docs/overview-gemini) features are available in Preview
(https://cloud.google.com/products#product-launch-stages) for instances on Looker 25.2 and later:

Create custom Looker visualizations (https://cloud.google.com/looker/docs/custom-looker-visualization-gemini): The

Visualization Assistant helps you generate custom formatting options for Looker visualizations
(https://cloud.google.com/looker/docs/chart-config-editor) by using natural language.

Generate LookML (https://cloud.google.com/looker/docs/write-lookml-gemini): Use Gemini assistance to generate LookML

(https://cloud.google.com/looker/docs/what-is-lookml) code suggestions in response to natural language prompts. In the
Looker IDE (https://cloud.google.com/looker/docs/looker-ide), click the Help me code icon to get Gemini assistance to
create dimensions, dimension groups, and measures in your LookML project.

To learn more about how to activate these features, see Admin settings – Gemini in Looker
(https://cloud.google.com/looker/docs/admin-panel-platform-gil).

FEATURE Conversational Analytics is now available in Preview (https://cloud.google.com/products#product-launch-stages) for Looker

(original) and Looker (Google Cloud core) instances on Looker 25.0 and later that have both Studio in Looker
(https://cloud.google.com/looker/docs/studio-in-looker) and Gemini in Looker (https://cloud.google.com/looker/docs/overview-gemini)
enabled. You can use Conversational Analytics
(https://cloud.google.com/looker/docs/studio/query-your-data-in-natural-language-gemini) to query your Looker Explore data in
natural language.

VPC Service Controls

FEATURE VPC Service Controls feature (Status: Preview (https://cloud.google.com/products#product-launch-stages)): The VPC Service
Controls violation analyzer lets you diagnose access denial events for services in your perimeters using an encrypted

https://cloud.google.com/release-notes 150/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

troubleshooting token generated by VPC Service Controls. The violation analyzer also provides troubleshooting results that
can help you understand and resolve the access denial events. This feature is available in Preview
(https://cloud.google.com/products#product-launch-stages).

For more information, see Diagnose an access denial event using the VPC Service Controls violation analyzer
(https://cloud.google.com/vpc-service-controls/docs/violation-analyzer).

February 22, 2025

Google SecOps

FEATURE New Custom fields for case management

Added support for custom fields that analysts can fill out when working with cases or alerts, such as report time or
false positives. These fields appear as a widget in the Case or Alert overview tab.

Custom fields can now be added to playbooks as actions or placeholders.

Requires downloading the latest Siemplify integration.

For more information about this new feature, see Create Custom Fields
(https://cloud.google.com/chronicle/docs/soar/investigate/working-with-cases/adding-custom-fields).

Google SecOps SOAR

ANNOUNCEMENT Release 6.3.36 is currently in Preview. This release contains the following feature.

FEATURE New Custom fields for case management

https://cloud.google.com/release-notes 151/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Added support for custom fields that analysts can fill out when working with cases or alerts, such as report time or
false positives. These fields appear as a widget in the Case or Alert overview tab.

Custom fields can now be added to playbooks as actions or placeholders.

Requires downloading the latest Siemplify integration.

For more information about this new feature, see Create Custom Fields
(https://cloud.google.com/chronicle/docs/soar/investigate/working-with-cases/adding-custom-fields).

ANNOUNCEMENT Release 6.3.35 (https://cloud.google.com/chronicle/docs/soar/release-notes#February_15_2025) is now in General Availability.

February 21, 2025

AlloyDB for PostgreSQL

FEATURE You can use an API to import data to AlloyDB for PostgreSQL clusters. This feature is generally available (GA). You can
also cancel the import of data (https://cloud.google.com/alloydb/docs/cancel-import) and check the status of the import
(https://cloud.google.com/alloydb/docs/import-csv-file#check-status-import). For more information, see Import a CSV file
(https://cloud.google.com/alloydb/docs/import-csv-file) and Import a SQL file (https://cloud.google.com/alloydb/docs/import-sql-file).

FEATURE You can perform an in-place major version upgrade of your AlloyDB cluster
(https://cloud.google.com/alloydb/docs/upgrade-db-inplace-major-version) to PostgreSQL version 16 from PostgreSQL version 14
or 15. This feature is available in Preview (https://cloud.google.com/products#product-launch-stages).

Cloud Composer

https://cloud.google.com/release-notes 152/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

ANNOUNCEMENT Starting April 14, 2025, the Deployment Manager API won't be automatically enabled when you enable Cloud Composer
API because this API isn't used by the Cloud Composer service.

Cloud DNS

FEATURE Health checks for external endpoints (https://cloud.google.com/dns/docs/routing-policies-overview#health-checks-internet) in Cloud

DNS routing policies are now available in GA (https://cloud.google.com/products#product-launch-stages).

Cloud Endpoints

ANNOUNCEMENT Version 1.0.17 of the endpoints-management-java Java library

(https://github.com/cloudendpoints/endpoints-management-java/releases/tag/v1.0.17) is available.

This release contains no change in binaries.

FIXED
Bug ID Description

387351751 Fixed Checkstyle violations in the ServiceConfigSupplierTest the of source code.

Cloud Key Management Service

FEATURE Cloud KMS now supports the following post-quantum computing (PQC) algorithms for digital signatures in Public Preview:

PQ_SIGN_ML_DSA_65: Module-lattice-based digital signature algorithm

PQ_SIGN_SLH_DSA_SHA2_128S: Stateless hash-based digital signature algorithm

To Retrieve a public key (https://cloud.google.com/kms/docs/retrieve-public-key) for a PQC key, you must use the gcloud CLI or
the Cloud KMS REST API.

https://cloud.google.com/release-notes 153/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

For the gcloud CLI, use the --public-key-format nist-pqc flag.

For the REST API, use the public_key_format=NIST_PQC header parameter.

For more information about PQC algorithms, see PQC signing algorithms
(https://cloud.google.com/kms/docs/algorithms#pqc_signing_algorithms). For more information about PQC digital signatures, see
Post-quantum cryptography (PQC) digital signature (https://cloud.google.com/kms/docs/digital-signatures#pqc).
Gemini Code Assist

ANNOUNCEMENT Gemini Code Assist now uses a code-optimized version of Gemini 2.0. This new model is used in the following
experiences:

Chat

Code generation

Code transformation

Generative AI on Vertex AI

CHANGE PEFT Docker updates

Added support for evaluation metrics like perplexity, bleu, google_bleu, rouge1, rouge2, rougeL, rougeLSum.

Uses the best checkpoint and loads the model based on the best eval metrics.

Run training and eval only for data which is less than or equal to the max_seq_length.

Use gcloud storage rsync instead of csfuse to save a checkpoint.

Fine tuning updates

https://cloud.google.com/release-notes 154/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

You can select a service account when you click Fine-tune for a model, such as Llama 3.1
(https://console.cloud.google.com/vertex-ai/publishers/meta/model-garden/llama3_1).

Added a PEFT based LLM finetuning tutorial notebook

(https://github.com/GoogleCloudPlatform/vertex-ai-
samples/blob/main/notebooks/community/model_garden/model_garden_finetuning_tutorial.ipynb)
.

Added a Axolotl based LLM finetuning notebook

(https://github.com/GoogleCloudPlatform/vertex-ai-
samples/blob/main/notebooks/community/model_garden/model_garden_axolotl_finetuning.ipynb)
.

Updated Llama 3.1

(https://github.com/GoogleCloudPlatform/vertex-ai-
samples/blob/main/notebooks/community/model_garden/model_garden_pytorch_llama3_1_finetuning.ipynb)
and Gemma 2
(https://github.com/GoogleCloudPlatform/vertex-ai-
samples/blob/main/notebooks/community/model_garden/model_garden_gemma2_finetuning_on_vertex.ipynb)
fine-tuning notebooks with the updated PEFT Docker container.

Model updates

Updated the PaliGemma (https://console.cloud.google.com/vertex-ai/publishers/google/model-garden/paligemma)

model card by supporting PaliGemma 2 mix models, and segmentation functionality to Paligemma 1 models.

Updated the LLaVa model card

(https://console.cloud.google.com/vertex-ai/publishers/liuhaotian/model-garden/pytorch-llava) by supporting LLaVA Next
models and adding vLLM to the notebook.
Google Distributed Cloud connected

https://cloud.google.com/release-notes 155/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

ANNOUNCEMENT This is a minor release of Google Distributed Cloud connected (version 1.8.0).

FEATURE The following new functionality has been introduced in this release of Google Distributed Cloud connected:

Refreshed GDC connected rack hardware. New GDC connected rack hardware is now available for purchase as a
preview-level offering. This new offering allows you to deploy GDC connected racks as combinations of base rack
pairs and up to three expansion racks for each zone. Each rack is populated by up to four compute blocks of three
machines each. For more information, see Google Distributed Cloud connected form factors
(https://cloud.google.com/distributed-cloud/edge/latest/docs/how-it-works#form-factors).

GDC connected services platform. Google Distributed Cloud connected now ships with a platform supporting the
deployment of select Google services. For more information, see Manage Google services
(https://cloud.google.com/distributed-cloud/edge/latest/docs/services).

GPU workloads on GDC connected servers. You can now deploy GPU-based workloads on Google Distributed Cloud
connected servers. The machines now ship with optional NVIDIA L4 GPUs. For more information, see Manage GPU
workloads (https://cloud.google.com/distributed-cloud/edge/latest/docs/gpu). This is a limited-access feature; contact your
Google field sales representative for details.

Configurable local storage schemas. You can now configure the local storage present on GDC connected
deployments with custom schemas. For more information, see Configure local storage schemas
(https://cloud.google.com/distributed-cloud/edge/latest/docs/storage#schemas).

Network connectivity verification tool. Google Distributed Cloud connected now offers a tool that allows you to
verify that your local network meets the connectivity requirements for Google Distributed Cloud connected. For more
information, see Validate your connectivity before ordering Distributed Cloud connected
(https://cloud.google.com/distributed-
cloud/edge/latest/docs/requirements#validate_your_connectivity_before_ordering_connected)
.

https://cloud.google.com/release-notes 156/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

L2 load balancer virtual IP pool support. You can now specify IPv4 and IPv6 addresses, address ranges, or
subnetworks for ingress traffic for services that run behind the GDC connected L2 load balancer when the cluster is
running in survivability mode. For more information, see Layer 2 load balancing with MetalLB
(https://cloud.google.com/distributed-cloud/edge/latest/docs/networking#load-balancing-metal-lb).

Terraform support for the Edge Container API. The Google Distributed Cloud Connected Edge Container API is now
supported in Terraform. See the Terraform repository
(https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/edgecontainer_cluster) for details.

Symcloud Storage metrics. Certain metrics for Symcloud Storage are now available in Cloud Monitoring. For more
information, see Google Distributed Cloud metrics (https://cloud.google.com/monitoring/api/metrics_anthos#anthos).

CHANGE The following changes to existing functionality have been introduced in this release of Google Distributed Cloud
connected:

Kubernetes metadata API now required for cluster creation and upgrades. You must enable the
kubernetesmetadata.googleapis.com API to create Google Distributed Cloud connected clusters. This API is also
required for upgrading clusters to Google Distributed Cloud connected software version 1.8.0. For more information,
see Create and manage clusters (https://cloud.google.com/distributed-cloud/edge/latest/docs/clusters).

Configure CMEK on existing clusters and node pools. You can now enable and disable support for Customer-
Managed Encryption Keys (CMEK) on existing Google Distributed Cloud connected clusters and node pools. For
more information, see Local storage security (https://cloud.google.com/distributed-cloud/edge/latest/docs/security#storage).

Improved hardware ordering process. The ordering process for Google Distributed Cloud connected hardware has
been improved. For more information, see Order hardware
(https://cloud.google.com/distributed-cloud/edge/latest/docs/order).

The order form for Google Distributed Cloud connected hardware in the Cloud console now has feature parity
with the Google Distributed Cloud Hardware Management API.

https://cloud.google.com/release-notes 157/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

The Google Distributed Cloud Hardware Management API has been improved with more robust functionality.

Overhauled pricing page. The pricing page for Google Distributed Cloud connected has been overhauled to include
detailed pricing information for the supported form factors and their respective regions. For more information, see
Pricing (https://cloud.google.com/distributed-cloud/edge/latest/pricing).

Hardware ordering documentation has been expanded. The "Order hardware" page has been expanded with
additional information on prerequisites, enabling the Google Distributed Cloud Hardware Management API, and the
actions that can be performed on an order. For more information, see Order hardware
(https://cloud.google.com/distributed-cloud/edge/latest/docs/order).

DEPRECATED The following functionality has been deprecated in this release of Google Distributed Cloud connected:

Legacy GDC connected rack hardware. The legacy GDC connected rack hardware (also known as "Config 1" and
"Config 2") has reached end-of-sale and can no longer be ordered. Google continues to support your existing legacy
rack deployments until the end of your contract term. For more information, contact your Google field sales
representative.

GPU workloads on refreshed GDC connected racks. The refreshed Google Distributed Cloud connected rack
hardware does not support GPU workloads. GPU workloads are supported on Google Distributed Cloud connected
legacy rack hardware and on Google Distributed Cloud connected servers as a limited-access feature.

Virtual machine workloads on refreshed GDC connected racks. The refreshed Google Distributed Cloud connected
rack hardware does not support virtual machine workloads. Virtual machine workloads are supported on Google
Distributed Cloud connected legacy rack hardware and on Google Distributed Cloud connected servers.

FIXED The following issues have been resolved in this release of Google Distributed Cloud connected:

Virtual machine management no longer fails after a node has been powered down for an extended time. If you
power down your Google Distributed Cloud connected machines for an extended period of time, you can now reliably

https://cloud.google.com/release-notes 158/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

manage virtual machines scheduled on the corresponding nodes after you power the machines back up.

The Kubernetes API server no longer returns 404 errors when attempting to access virt-api endpoints.

Cluster deletion no longer fails due to stale Symcloud Storage data. You can now reliably delete a cluster during
disaster recovery or cluster reset. Symcloud Storage now properly cleans up the corresponding Symcloud Storage
volumes.

Containerized Data Importer (CDI) import performance has been improved. When creating a virtual machine that
uses a block Symcloud Storage volume, the speed of importing machine images has been significantly improved.

ISSUE This release of Google Distributed Cloud connected contains the following known issues:

Virtual machines using file-based Symcloud Storage volumes can experience a CDI import error. When creating a
virtual machine that uses a file-based Symcloud Storage volume, you can experience a CDI import failure. To work
around this issue, add the following annotation to the corresponding Symcloud storage class config:

annotations:
cdi.kubevirt.io/enable-qemu-target-zero-option: "false"

The Storage Infrastructure Cluster cannot be deleted. On refreshed rack hardware deployments, the first cluster in a
Google Distributed Cloud connected zone, also known as the Storage Infrastructure Cluster (SIC) cannot be deleted.
Doing so would render Google Distributed Cloud connected storage inoperable. This is intentional behavior. Legacy
Google Distributed Cloud connected rack hardware deployments and Google Distributed Cloud connected server
deployments are not affected by this issue.

You must manually copy storage secrets for corresponding buckets to the target clusters in a zone. For Google
Distributed Cloud connected zones with more than one cluster deployed on refreshed rack hardware, management of

https://cloud.google.com/release-notes 159/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

storage buckets for all clusters must be done through the first cluster in the zone, also known as the Storage
Infrastructure Cluster (SIC). This is because bucket access is granted through roles to users on the SIC. When access
to a bucket is granted, a secret is generated on the SIC for the associated user, and Google Distributed Cloud
connected does not synchronize storage secrets across clusters. To work around this issue, you must manually copy
the respective storage secrets from the "storage infrastructure cluster" to the cluster on which the corresponding
storage buckets are used. Legacy Google Distributed Cloud connected rack hardware deployments and Google
Distributed Cloud connected server deployments do not use a SIC and are not affected by this issue.

Storage is not freed immediately upon cluster deletion. After deleting a cluster, the storage used by that cluster is
not freed up immediately. This is because storage clean-up is part of a garbage collection task that runs infrequently.
To work around this issue, manually delete all of a cluster's persistent volumes before deleting the cluster itself.

Machines can experience intermittent connectivity loss. Google Distributed Cloud connected machines can
experience intermittent connectivity loss due to a rare condition that can occur with fleet credential management. To
remedy this issue, contact Google Support (https://cloud.google.com/distributed-cloud/edge/latest/docs/getting-support).

After a network disruption, Symcloud Storage volumes can fail to mount or dismount. If a node that uses Symcloud
Storage volumes experiences a network disconnection, the Symcloud Storage volumes can fail to mount or dismount
after network connectivity is restored. This is caused by the iomgr service entering a degraded state. To work around
this issue, delete the iomgr container on the affected node.

Reallocating a GPU resource from a VM to a container can cause an initialization error. When you reallocate a GPU
from a virtual machine workload to a container workload, you might receive an NVML initialization error. To remedy
this issue, contact Google Support (https://cloud.google.com/distributed-cloud/edge/latest/docs/getting-support).

The anthos-multinet container might take up to two hours to fully start. You might intermittently experience a
slower than normal startup for the anthos-multinet container (up to two hours). To remedy this issue, contact
Google Support (https://cloud.google.com/distributed-cloud/edge/latest/docs/getting-support).

https://cloud.google.com/release-notes 160/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

LIBRARIES The following Google Distributed Cloud connected components have been updated:

GKE on Bare Metal has been updated from version 1.28.700-gke.154 to version 1.29.800-gke.111. (This component
was formerly known as Anthos Clusters on Bare Metal.)

Kubernetes has been updated from version 1.28.10 to version 1.29.

SECURITY Security mitigations for the following vulnerabilities have been implemented in this release of Google Distributed Cloud
connected:

OS layer security mitigations: CVE-2024-41087, CVE-2024-40961, CVE-2024-41000, CVE-2024-40995, CVE-2024-

38588, CVE-2024-40905, CVE-2024-40959, CVE-2024-39487, CVE-2024-42131, CVE-2024-42145, CVE-2024-36901

GKE on Bare Metal security mitigations: CVE-2024-37371, CVE-2021-38297, CVE-2022-23806, CVE-2023-24538,

CVE-2023-24540, CVE-2023-25775, CVE-2023-29402, CVE-2023-29404, CVE-2023-29405, CVE-2020-22218, CVE-
2024-0553, CVE-2024-0567, CVE-2024-37370, GHSA-87m9-rv8p-rgmg, CVE-2024-39487, CVE-2024-41040, CVE-2024-
41046, CVE-2024-41049, CVE-2024-41059, CVE-2024-41070, CVE-2024-42104, CVE-2024-42148, CVE-2023-49083,
CVE-2024-0743, CVE-2024-6609, CVE-2024-46738, CVE-2024-46740, CVE-2024-46743, CVE-2024-46744, CVE-2024-
46747, CVE-2024-46756, CVE-2024-46757, CVE-2024-46758, CVE-2024-46759, CVE-2024-46782, CVE-2024-46798,
CVE-2024-46800, CVE-2024-46804, CVE-2024-46814, CVE-2024-46815, CVE-2024-46818, CVE-2024-46828, CVE-
2024-46844, CVE-2020-29652, CVE-2021-29923, CVE-2021-33195, CVE-2021-33196, CVE-2021-33198, CVE-2021-
39293, CVE-2021-41771, CVE-2021-41772, CVE-2021-44716, CVE-2022-2879, CVE-2022-2880, CVE-2022-21698, CVE-
2022-23772, CVE-2022-23773, CVE-2022-24675, CVE-2022-24921, CVE-2022-28131, CVE-2022-28327, CVE-2022-
28948, CVE-2022-30580, CVE-2022-30630, CVE-2022-30631, CVE-2022-30632, CVE-2022-30633, CVE-2022-30635,
CVE-2022-32189, CVE-2022-41715, CVE-2022-41724, CVE-2022-41725, CVE-2023-5717, CVE-2023-6040, CVE-2023-
6356, CVE-2023-6536, CVE-2023-6606, CVE-2023-6931, CVE-2023-6932, CVE-2023-24534, CVE-2023-24536, CVE-
2023-24537, CVE-2023-24539, CVE-2023-29400, CVE-2023-29403, CVE-2023-29499, CVE-2023-35827, CVE-2023-
46838, CVE-2023-51780, CVE-2023-51781, CVE-2023-51782, CVE-2023-52436, CVE-2023-52439, CVE-2023-52444,
CVE-2023-52445, CVE-2023-52451, CVE-2023-52464, CVE-2023-52469, CVE-2024-1086, CVE-2024-26586, CVE-2024-

https://cloud.google.com/release-notes 161/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

26597, CVE-2024-26598, CVE-2023-6270, CVE-2023-39323, CVE-2023-45285, CVE-2023-45287, CVE-2023-52434,

CVE-2024-0565, CVE-2024-0985, CVE-2024-26882, CVE-2024-26883, CVE-2024-26884, CVE-2024-26898, CVE-2024-
26907, CVE-2024-26934, CVE-2024-27020, CVE-2022-48655, CVE-2019-16884, CVE-2021-30465, CVE-2021-33194,
CVE-2021-38561, CVE-2021-43565, CVE-2021-43816, CVE-2022-23648, CVE-2022-27191, CVE-2022-27664, CVE-
2022-32149, CVE-2022-41723, CVE-2022-43945, CVE-2024-36971, CVE-2024-38583, CVE-2024-39480, CVE-2024-
39495, CVE-2024-40902, CVE-2024-7348, CVE-2023-47038, CVE-2024-42161, CVE-2024-42224, CVE-2024-6104,
GHSA-mh55-gqvf-xfwm, CVE-2016-3709, CVE-2024-7264, CVE-2024-36901, CVE-2024-36938, CVE-2024-41009, CVE-
2024-41012, CVE-2024-41055, CVE-2024-41063, CVE-2024-41064, CVE-2024-42101, CVE-2024-42102, CVE-2024-
42131, CVE-2024-42137, CVE-2024-42152, CVE-2024-42153, CVE-2024-42154, CVE-2023-23931, CVE-2024-50096,
CVE-2024-50099, CVE-2021-3669, CVE-2021-3733, CVE-2021-4189, CVE-2023-27043, CVE-2023-31083, CVE-2023-
40217, CVE-2023-52889, CVE-2024-41098, CVE-2024-42114, CVE-2024-42246, CVE-2024-42259, CVE-2024-42272,
CVE-2024-42283, CVE-2024-42286, CVE-2024-42287, CVE-2024-42288, CVE-2024-42289, CVE-2024-42297, CVE-
2024-42309, CVE-2024-42310, CVE-2024-42311, CVE-2024-43828, CVE-2024-43829, CVE-2024-43834, CVE-2024-
43835, CVE-2024-43846, CVE-2024-43849, CVE-2024-43853, CVE-2024-43854, CVE-2024-43856, CVE-2024-43860,
CVE-2024-43861, CVE-2024-43871, CVE-2024-43884, CVE-2024-43889, CVE-2024-43890, CVE-2024-43892, CVE-
2024-43893, CVE-2024-43894, CVE-2024-43905, CVE-2024-43907, CVE-2024-43908, CVE-2024-43914, CVE-2024-
44935, CVE-2024-44944, CVE-2024-44946, CVE-2024-44947, CVE-2024-44954, CVE-2024-44960, CVE-2024-44965,
CVE-2024-44968, CVE-2024-44971, CVE-2024-44988, CVE-2024-44989, CVE-2024-44990, CVE-2024-44995, CVE-
2024-45003, CVE-2024-45006, CVE-2024-45016, CVE-2024-45018, CVE-2024-45021, CVE-2024-45025, CVE-2024-
45028, CVE-2024-46675, CVE-2024-46676, CVE-2024-46677, CVE-2024-46679, CVE-2024-46685, CVE-2024-46689,
CVE-2024-46702, CVE-2024-46707, CVE-2024-46714, CVE-2024-46719, CVE-2024-46721, CVE-2024-46737, CVE-
2024-46739, CVE-2024-46750, CVE-2024-46755, CVE-2024-46763, CVE-2024-46771, CVE-2024-46777, CVE-2024-
46780, CVE-2024-46781, CVE-2024-46783, CVE-2024-46791, CVE-2024-46817, CVE-2024-46819, CVE-2024-46822,
CVE-2024-46829, CVE-2024-46840, CVE-2024-47663, CVE-2020-29509, CVE-2020-29511, CVE-2021-33197, CVE-
2021-34558, CVE-2021-36221, CVE-2021-44879, CVE-2022-1705, CVE-2022-1962, CVE-2022-32148, CVE-2022-
41717, CVE-2023-3446, CVE-2023-3817, CVE-2023-6004, CVE-2023-6121, CVE-2023-6915, CVE-2023-6918, CVE-
2023-24532, CVE-2023-29406, CVE-2023-29409, CVE-2023-32611, CVE-2023-32665, CVE-2023-34324, CVE-2023-

https://cloud.google.com/release-notes 162/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

39198, CVE-2023-39804, CVE-2023-45863, CVE-2023-46218, CVE-2023-46343, CVE-2023-49290, CVE-2023-52443,

CVE-2023-52449, CVE-2023-52470, CVE-2024-21664, CVE-2024-28085, GHSA-2c7c-3mj9-8fqh, CVE-2024-2961, CVE-
2024-28182, CVE-2023-7042, CVE-2023-39318, CVE-2023-39319, CVE-2023-39326, CVE-2023-47233, CVE-2023-
52429, CVE-2023-52435, CVE-2023-52458, CVE-2024-0340, CVE-2024-0607, CVE-2024-22099, CVE-2024-23849, CVE-
2024-23851, CVE-2024-24857, CVE-2024-24858, CVE-2024-24861, CVE-2024-25739, CVE-2024-26600, CVE-2024-
26602, CVE-2024-26606, CVE-2024-26901, CVE-2024-26903, CVE-2024-26910, CVE-2024-27013, CVE-2024-33599,
CVE-2024-33600, CVE-2024-33601, CVE-2024-33602, CVE-2024-35978, CVE-2024-35982, CVE-2024-35984, CVE-
2024-35997, GHSA-6xv5-86q9-7xr8, CVE-2024-26900, CVE-2024-28122, CVE-2024-35255, CVE-2024-36902, CVE-
2019-19921, CVE-2021-31525, CVE-2021-32760, CVE-2021-41103, CVE-2021-43784, CVE-2022-23471, CVE-2022-
29162, CVE-2022-29526, CVE-2022-31030, CVE-2022-40735, CVE-2022-41717, CVE-2023-25153, CVE-2023-25173,
CVE-2023-28642, CVE-2023-48795, CVE-2024-27019, CVE-2024-36288, CVE-2024-38662, CVE-2024-38780, CVE-
2024-39292, CVE-2024-39475, CVE-2024-39476, CVE-2024-39482, CVE-2024-39484, CVE-2024-39489, CVE-2024-
39493, CVE-2024-42070, CVE-2024-42076, CVE-2024-42077, CVE-2024-42082, GHSA-7ww5-4wqc-m92c, CVE-2023-
5981, CVE-2024-42157, CVE-2024-42223, CVE-2024-42229, CVE-2024-42232, CVE-2024-42236, CVE-2024-42244,
CVE-2024-42247, CVE-2021-3426, CVE-2021-28861, CVE-2021-29921, CVE-2022-42919, CVE-2023-6597, CVE-2023-
28450, CVE-2023-50387, CVE-2023-50868, CVE-2024-0397, CVE-2024-4032, CVE-2024-8088, CVE-2024-8508, CVE-
2024-8775, CVE-2024-9287, CVE-2024-9902, CVE-2024-11168, CVE-2024-43841, CVE-2021-25743, CVE-2022-30629,
CVE-2023-26604, CVE-2023-2975, CVE-2023-5178, CVE-2023-5197, CVE-2023-6531, CVE-2023-6817, CVE-2023-
46813, CVE-2023-46862, CVE-2023-52438, CVE-2022-38096, CVE-2023-5363, CVE-2023-6246, CVE-2023-6779, CVE-
2023-6780, CVE-2023-52447, CVE-2023-52489, CVE-2023-52492, CVE-2023-52493, CVE-2023-52497, CVE-2023-
52616, CVE-2023-52627, CVE-2023-52637, CVE-2023-52672, CVE-2024-0841, CVE-2024-23850, CVE-2024-26581,
CVE-2024-26593, CVE-2024-26601, CVE-2024-26610, CVE-2024-26627, CVE-2024-26643, CVE-2024-26665, CVE-
2024-26673, CVE-2024-26684, CVE-2024-26688, CVE-2024-26695, CVE-2024-26698, CVE-2024-26702, CVE-2024-
26707, CVE-2024-26712, CVE-2024-26727, CVE-2024-26748, CVE-2024-26749, CVE-2024-26753, CVE-2024-26781,
CVE-2024-26782, CVE-2024-26787, CVE-2024-26788, CVE-2024-26790, CVE-2024-26795, CVE-2024-26808, CVE-
2024-26809, CVE-2024-26814, CVE-2024-26833, CVE-2024-26835, CVE-2024-26848, CVE-2024-26855, CVE-2024-
26861, CVE-2024-26862, CVE-2024-26870, CVE-2024-26877, CVE-2024-26885, CVE-2024-26891, CVE-2024-26895,

https://cloud.google.com/release-notes 163/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

CVE-2024-26897, CVE-2024-26924, CVE-2024-26925, CVE-2024-26926, CVE-2024-26935, CVE-2024-26937, CVE-

2024-26950, CVE-2024-26951, CVE-2024-26970, CVE-2024-26978, CVE-2024-26988, CVE-2024-27030, CVE-2024-
27038, CVE-2024-27044, CVE-2024-27045, CVE-2024-27047, CVE-2024-27052, CVE-2024-27053, CVE-2024-27065,
CVE-2024-27076, CVE-2024-27414, CVE-2024-27417, CVE-2024-27431, CVE-2024-35785, CVE-2024-35796, CVE-
2024-35813, CVE-2024-35829CVE-2023-25809, GHSA-5j5w-g665-5m35, GHSA-77vh-xpmg-72qh, GHSA-c9cp-9c75-
9v8c, CVE-2022-48303, CVE-2022-2309, CVE-2024-41007, CVE-2024-43167, CVE-2024-43168, GHSA-xr7q-jx4m-
x55m.
Google Kubernetes Engine

CHANGE In GKE version 1.33 and later, if you omit the whenUnsatisfiable field in a new GKE compute class specification, the
default value is DoNotScaleUp.

In GKE versions earlier than 1.33, the default value is ScaleUpAnyway. Ensure that your compute class specifications
explicitly set a value in the whenUnsatisfiable field after you upgrade to version 1.33. This change only affects new
ComputeClass objects that you create that omit the whenUnsatisfiable field. Any existing compute classes that omit the
field continue to use ScaleUpAnyway as the default value even after you upgrade the cluster to version 1.33 or later.

To learn more about the whenUnsatisfiable field, see Define scaling behavior when no priority rules apply
(https://cloud.google.com/kubernetes-engine/docs/concepts/about-custom-compute-classes#define-scaling-no-rules).

February 20, 2025

Cloud Composer

FIXED (Cloud Composer 3) Fixed a problem with configuring access to SMTP servers that don't support user and password
authentication. The [smtp]smtp_user and [smtp]smtp_password Airflow configuration options are no longer
preconfigured with placeholder values.

https://cloud.google.com/release-notes 164/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

CHANGE Improved the forbidden APIs check. When a new environment is created, Cloud Composer now checks for forbidden APIs
that are required by a specific major version of Cloud Composer.

CHANGE (Airflow 2.10.2 and 2.9.3) Preinstalled packages were changed:

virtualenv was downgraded from 20.29.1 to 20.28.1

CHANGE New Airflow builds (https://cloud.google.com/composer/docs/composer-versions#images-composer-3) are available in Cloud

Composer 3:

composer-3-airflow-2.10.2-build.9 (default)

composer-3-airflow-2.9.3-build.16

CHANGE New images (https://cloud.google.com/composer/docs/composer-versions#images-composer-2) are available in Cloud Composer

2:

composer-2.11.3-airflow-2.10.2 (default)

composer-2.11.3-airflow-2.9.3

DEPRECATED Cloud Composer version 2.6.1 has reached its end of support period
(https://cloud.google.com/composer/docs/composer-versioning-overview#version-deprecation-and-support).

Cloud Healthcare API

ANNOUNCEMENT A new release is available. This release may include some or all of the following: general performance improvements, bug
fixes, and updates to the API reference documentation.

Cloud Load Balancing

https://cloud.google.com/release-notes 165/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

FEATURE Cleartext HTTP/2 over TCP, also known as H2C, lets you use HTTP/2 without TLS. H2C is supported by internal and
external Application Load Balancers for both of the following connections:

Connections between clients and the load balancer. No special configuration is required. Support for this capability is
in General Availability.

Connections between the load balancer and its backends. Support for this capability is in Preview.

To configure H2C for connections between the load balancer and its backends, you set the backend service protocol
to H2C.

Cloud Monitoring

FEATURE When you add an Observability Analytics widget to a custom Cloud Monitoring dashboard, you can now select other log
views and analytics views to query in the Views & Schema section. For more information, see Display charts generated
from a Log Analytics query (https://cloud.google.com/monitoring/charts/view-logs#add-sql-chart).

Cloud SQL for MySQL

FEATURE You can now create a final backup of your data before you delete a Cloud SQL instance. You can use the final backup to
restore your data to a new instance. This way, you can recover your data after you delete the instance. For more
information, see About Cloud SQL backups (https://cloud.google.com/sql/docs/mysql/backup-recovery/backups#final-backups).

Cloud SQL for PostgreSQL

FEATURE You can now create a final backup of your data before you delete a Cloud SQL instance. You can use the final backup to
restore your data to a new instance. This way, you can recover your data after you delete the instance. For more
information, see About Cloud SQL backups (https://cloud.google.com/sql/docs/postgres/backup-recovery/backups#final-backups).

Cloud SQL for SQL Server

https://cloud.google.com/release-notes 166/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

FEATURE You can now create a final backup of your data before you delete a Cloud SQL instance. You can use the final backup to
restore your data to a new instance. This way, you can recover your data after you delete the instance. For more
information, see About Cloud SQL backups (https://cloud.google.com/sql/docs/sqlserver/backup-recovery/backups#final-backups).

Google Kubernetes Engine

FEATURE GKE Managed NVIDIA Data Center GPU Manager (DCGM) Metrics Package is now generally available for both GKE
Standard and Autopilot clusters running version 1.32.0-gke.1764000 and later. You can enable the feature via the Console,
gcloud, or Terraform. Starting with cluster version 1.32.1-gke.1357000, GKE Managed NVIDIA DCGM will be default-on for
new clusters.

GKE Managed DCGM provides a curated set of metrics for monitoring the utilization, performance, and health of NVIDIA
GPUs. These metrics are collected by Google Cloud Managed Service for Prometheus and you can view the metric charts
in the Observability Tab on the Kubernetes Clusters page or in Cloud Monitoring. For more information, see Collect and
view DCGM metrics.

To learn more, see Collect and view DCGM metrics (https://cloud.google.com/kubernetes-engine/docs/how-to/dcgm-metrics).

FEATURE GKE automatically adds the following resource labels to node pools:

goog-gke-accelerator-type: The accelerator type used in the node pool.

goog-gke-tpu-node-pool-type: The TPU node pool type, which can be single-host or multi-host.

goog-gke-node-pool-provisioning-model: The provisioning model of the node pool. The nodes can be on
demand, by reservation, or Spot VMs.

To learn more, see Automatically applied labels

(https://cloud.google.com/kubernetes-engine/docs/how-to/creating-managing-labels#automatically-applied-labels).

https://cloud.google.com/release-notes 167/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

CHANGE New GKE 1.27 patch versions starting with version 1.27.16-gke.2440000 are built with COS 109, because COS 105 is near
the end of support. GKE makes new 1.27 patch versions available using COS 109. However, GKE won't auto-upgrade nodes
across the COS milestone boundary, from a patch version using COS 105 to a patch version using COS 109.

If you manually upgrade your nodes to 1.27.16-gke.2440000 or later, GKE continues node auto-upgrades as normal.
Control plane upgrades are unaffected, and cluster auto-upgrades to the next minor version towards the end of extended
support proceed as normal.

To learn more, see Container-Optimized OS updates during the extended support period
(https://cloud.google.com/kubernetes-engine/versioning#cos-extended).

Google SecOps

FEATURE Data tables (https://cloud.google.com/chronicle/docs/investigation/data-tables)

Data tables are multicolumn data constructs that let you input your own data into Google SecOps. They can act as lookup
tables with defined columns and the data stored in rows. You can create or import a data table to your Google SecOps
account using the Google SecOps UI, the data tables API, or by using a YARA-L query in rules. This feature is in public
preview.

FEATURE Enhanced Cloud Threat Detections (https://cloud.google.com/chronicle/docs/detection/cloud-threats-category) by adding three

new rules to the AWS - GuardDuty rule set.

Google SecOps SIEM

FEATURE Data tables (https://cloud.google.com/chronicle/docs/investigation/data-tables)

Data tables are multicolumn data constructs that let you input your own data into Google SecOps. They can act as lookup
tables with defined columns and the data stored in rows. You can create or import a data table to your Google SecOps

https://cloud.google.com/release-notes 168/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

account using the Google SecOps UI, the data tables API, or by using a YARA-L query in rules. This feature is in public
preview.

FEATURE Enhanced Cloud Threat Detections (https://cloud.google.com/chronicle/docs/detection/cloud-threats-category) by adding three

new rules to the AWS - GuardDuty rule set.

Organization Policy

FEATURE Custom organization policies are now generally available for Cloud Healthcare API. For more information, see Use custom
organization policies (https://cloud.google.com/healthcare-api/docs/custom-org-policy).

Resource Manager

FEATURE Custom organization policies are now generally available for Cloud Healthcare API. For more information, see Use custom
organization policies (https://cloud.google.com/healthcare-api/docs/custom-org-policy).

Spanner

FEATURE The Java and Go clients for Spanner now implement multiplexed sessions. This allows all requests to be concurrently sent
over a single session, thus eliminating the requirement that you define the minimum and maximum session count. Instead,
you can use any number of requests to the configured gRPC channels. This approach eliminates the possibility of session
leaks and reduces the occurrences of Transaction outcome unknown errors. You must set an environment variable in
your client to opt in to this feature. For more information, see Multiplexed sessions
(https://cloud.google.com/spanner/docs/sessions#multiplexed_sessions).

Virtual Private Cloud

FEATURE Private Service Connect service connectivity automation supports IPv6 connectivity to eligible managed services. This
feature is available in General availability. For more information, see Endpoint IP versions
(https://cloud.google.com/vpc/docs/about-service-connection-policies#ip-versions).

https://cloud.google.com/release-notes 169/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

reCAPTCHA

ANNOUNCEMENT reCAPTCHA SMS defense (formerly SMS toll fraud protection) is now available in GA
(https://cloud.google.com/products#product-launch-stages). For more information, see Detect and prevent SMS fraud
(https://cloud.google.com/recaptcha-enterprise/docs/sms-fraud-detection).

February 19, 2025

Apigee X

ANNOUNCEMENT On February 19, 2025, we released an updated version of Apigee (1-14-0-apigee-7).

star Note: Rollouts of this release to production instances will begin within two business days and may take four or more business days to
complete across all Google Cloud zones. Your instances may not have the features and fixes available until the rollout is complete.

SECURITY
Bug ID Description

391714121 Security fix for Apigee infrastructure.

This addresses the following vulnerability:

CVE-2024-45338 (https://nvd.nist.gov/vuln/detail/CVE-2024-45338)

FIXED
Bug ID Description

N/A Updates to security infrastructure and libraries.

https://cloud.google.com/release-notes 170/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

App Hub

ANNOUNCEMENT App Hub supports regional and global infrastructure resources (https://cloud.google.com/app-hub/docs/supported-resources)
with global applications (https://cloud.google.com/app-hub/docs/set-up-app-hub#create-application) in (GA
(https://cloud.google.com/products#product-launch-stages)).

Application Integration

CHANGE Enhancements to Execution Logs

Application Integration Execution Logs now provides the following enhancements:

View detailed task execution information: The dedicated Task Execution pane displays comprehensive execution
details, including start and end times, status, type, and variable payload information , enabling improved debugging.

Download execution logs in JSON format: You can now download integration execution logs as structured JSON
files, facilitating easier log analysis.

View sub-integration execution logs: The Execution Logs page now displays all sub-integration execution logs within
the same stack trace as the main integration, simplifying troubleshooting of complex integration flows.

For more information, see View execution logs (https://cloud.google.com/application-integration/docs/integration-execution-logs).

Artifact Registry

ISSUE Artifact Registry might give a 400 error on pushes or pulls for Workforce Identity Federation users. This issue is caused by
Workforce Identity Federation attribute mappings
(https://cloud.google.com/iam/docs/workforce-identity-federation#attribute-mappings) in the Artifact Registry URL causing
problems on the backend.

https://cloud.google.com/release-notes 171/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

To mitigate this issue, you can push or pull from Artifact Registry without attribute mappings, or reduce the length of your
attribute mappings.
Cloud Asset Inventory

FEATURE The following resource types are now publicly available through the analyze policy APIs
(https://cloud.google.com/asset-inventory/docs/analyzing-iam-policy) (AnalyzeIamPolicy
(https://cloud.google.com/asset-inventory/docs/reference/rest/v1/TopLevel/analyzeIamPolicy) and AnalyzeIamPolicyLongrunning
(https://cloud.google.com/asset-inventory/docs/reference/rest/v1/TopLevel/analyzeIamPolicyLongrunning)).

Compute Engine

compute.googleapis.com/NetworkEdgeSecurityService

Gemini for Google Cloud

cloudaicompanion.googleapis.com/CodeRepositoryIndex

cloudaicompanion.googleapis.com/RepositoryGroup

Google Cloud NetApp Volumes

netapp.googleapis.com/Backup

netapp.googleapis.com/BackupPolicy

netapp.googleapis.com/BackupVault

Memorystore

redis.googleapis.com/Cluster

Cloud Load Balancing

https://cloud.google.com/release-notes 172/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

FEATURE Internal and external passthrough Network Load Balancers now support connection draining for UDP and other non-TCP
protocol traffic. For details, see Enable connection draining
(https://cloud.google.com/load-balancing/docs/enabling-connection-draining).

This feature is now generally available (GA) (https://cloud.google.com/products?e=48754805&hl=en#product-launch-stages).

Cloud Run

FEATURE Support for deploying functions (https://cloud.google.com/run/docs/deploy-functions) in Cloud Run is now in general availability
(GA). Note that you must use Google Cloud SDK 511.0.0 version or later if using the gcloud CLI. Review the use cases
(https://cloud.google.com/run/docs/functions-with-run) guide for deploying new functions.

FEATURE Support for configuring automatic base image updates

(https://cloud.google.com/run/docs/configuring/services/automatic-base-image-updates) for Cloud Run source deployed services
and functions is now in general availability (GA). Note that you must use Google Cloud SDK 511.0.0 version or later if using
the gcloud CLI.

Cloud Run functions

FEATURE Support for deploying v2 functions (https://cloud.google.com/run/docs/deploy-functions) in Cloud Run is now in general
availability (GA). This lets you customize your function as you would a Cloud Run service. This change removes support for
creating, deploying, or updating v2 functions in the Google Cloud console. However, you can still manage functions created
with the Cloud Functions v2 API using the Cloud Functions gcloud CLI, the Cloud Functions v2 API, or the Cloud Run Cloud
Console. See Cloud Run functions comparison (https://cloud.google.com/run/docs/functions/comparison) for more details.

Cloud Service Mesh

ANNOUNCEMENT Managed Cloud Service Mesh 1.20 is rolling out to the rapid channel.

Developer Connect

https://cloud.google.com/release-notes 173/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

FEATURE Developer Connect now lets you connect to repositories on private networks.

To get started, see the guide for your source code management provider:

GitHub Enterprise (https://cloud.google.com/developer-connect/docs/connect-github-enterprise-private)

GitLab Enterprise (https://cloud.google.com/developer-connect/docs/connect-gitlab-enterprise-private)

Bitbucket Data Center (https://cloud.google.com/developer-connect/docs/connect-bitbucket-data-center-private)

Once they're connected, you can use Gemini Code Assist code customization
(https://cloud.google.com/gemini/docs/codeassist/code-customization-overview) on source code repositories outside of Google
Cloud.

CHANGE You can now use Developer Connect to act as a proxy to run Git commands on source code management tools. You can
toggle Enable git proxy (https://cloud.google.com/developer-connect/docs/connect-github-repo#connection) on in the Google Cloud
console, or pass the --git-proxy-config-enabled flag in glcoud. This feature is in Preview
(https://cloud.google.com/products#product-launch-stages).

Dialogflow

CHANGE Conversational Agents (CX), ES & Agent Assist: Starting February 24, 2025, a limit of 5 phone numbers per project will be
enforced (https://cloud.google.com/dialogflow/quotas#count_limits). For instructions on deleting unused phone numbers and
resolving the limit issue, see the RESOURCE_EXHAUSTED troubleshooting section
(https://cloud.google.com/dialogflow/docs/support/troubleshooting?agent=any&category=any#phone-number-limit). If you have a
business requirement to increase the limit, request to increase (https://cloud.google.com/dialogflow/quotas#increase) the Phone
numbers quota specifying the region and providing detailed justification for your request.

Gemini Code Assist

https://cloud.google.com/release-notes 174/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

CHANGE IntelliJ Gemini Code Assist now shows disconnected network status in the Gemini status bar instead of an error.

Google Distributed Cloud (software only) for VMware

ANNOUNCEMENT Google Distributed Cloud (software only) for VMware 1.30.600-gke.68 is now available for download
(https://cloud.google.com/anthos/clusters/docs/on-prem/latest/downloads). To upgrade, see Upgrade a cluster or a node pool
(https://cloud.google.com/anthos/clusters/docs/on-prem/latest/how-to/upgrading). Google Distributed Cloud 1.30.600-gke.68 runs
on Kubernetes v1.30.9-gke.100.

If you are using a third-party storage vendor, check the GDC Ready storage partners
(https://cloud.google.com/anthos/docs/resources/partner-storage) document to make sure the storage vendor has already
passed the qualification for this release.

After a release, it takes approximately 7 to 14 days for the version to become available for use with GKE On-Prem API
clients (https://cloud.google.com/kubernetes-engine/distributed-cloud/vmware/docs/how-to/cluster-lifecycle-management-tools): the
Google Cloud console, the gcloud CLI, and Terraform.

FIXED The following issues are fixed in 1.30.600-gke.68:

Fixed an issue
(https://cloud.google.com/kubernetes-engine/distributed-cloud/vmware/docs/troubleshooting/known-issues#runtime:-out-of-
memory-error-after-running-gkeadm-create-or-upgrade)
that caused Runtime: out of memory errors after running gkeadm to create or upgrade clusters.

Fixed an issue to prevent checking for add-on node IP addresses for HA admin clusters with three control-plane
nodes and no add-on nodes.

FIXED The 1.30.600-gke.68 release includes many vulnerability fixes. For a list of all vulnerabilities fixed in this release, see
Vulnerability fixes (https://cloud.google.com/kubernetes-engine/distributed-cloud/vmware/docs/vulnerabilities).

https://cloud.google.com/release-notes 175/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Google Distributed Cloud (software only) for bare metal

ANNOUNCEMENT
Release 1.30.600-gke.68
Google Distributed Cloud for bare metal 1.30.600-gke.68 is now available for download
(https://cloud.google.com/kubernetes-engine/distributed-cloud/bare-metal/docs/downloads). To upgrade, see Upgrade clusters
(https://cloud.google.com/kubernetes-engine/distributed-cloud/bare-metal/docs/how-to/upgrade). Google Distributed Cloud for bare
metal 1.30.600-gke.68 runs on Kubernetes v1.30.9-gke.100.

After a release, it takes approximately 7 to 14 days for the version to become available for installations or upgrades with
the GKE On-Prem API clients
(https://cloud.google.com/kubernetes-engine/distributed-cloud/bare-metal/docs/installing/cluster-lifecycle-management-tools): the
Google Cloud console, the gcloud CLI, and Terraform.

If you use a third-party storage vendor, check the Ready storage partners
(https://cloud.google.com/anthos/docs/resources/partner-storage) document to make sure the storage vendor has already
passed the qualification for this release of Google Distributed Cloud for bare metal.

CHANGE The following functional change was made in 1.30.600-gke.68:

Cluster deletion now deletes worker node pools prior to deleting any control plane node pools.

FIXED The following issue is fixed in 1.30.600-gke.68:

Fixed an issue
(https://cloud.google.com/kubernetes-engine/distributed-cloud/bare-metal/docs/troubleshooting/known-issues#immutable-field-
error-when-updating-user-clusters-with-bmctl-version-1.30.x)
where bmctl update clustercommand fails for user clusters that were created with
thecloudOperationsServiceAccountKeyPath setting in the header section of the cluster configuration file.

https://cloud.google.com/release-notes 176/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

FIXED The 1.30.600-gke.68 release includes many vulnerability fixes. For a list of all vulnerabilities fixed in this release, see
Vulnerability fixes (https://cloud.google.com/kubernetes-engine/distributed-cloud/bare-metal/docs/vulnerabilities).

ISSUE For information about the latest known issues, see Google Distributed Cloud for bare metal known issues
(https://cloud.google.com/kubernetes-engine/distributed-cloud/bare-metal/docs/troubleshooting/known-issues) in the Troubleshooting
section.

Google Kubernetes Engine

CHANGE Starting on July 1, 2025, new organizations will no longer be able to create GKE clusters with Identity Service for GKE
(https://cloud.google.com/kubernetes-engine/docs/how-to/oidc). You can continue to use Identity Service for GKE in existing
organizations, but we encourage you to migrate to Workforce Identity Federation
(https://cloud.google.com/iam/docs/workforce-identity-federation).

Workforce Identity Federation is the recommended method for configuring access to your GKE clusters from external
identity providers. Workforce Identity Federation provides a single hosted solution for managing external IdPs across
Google Cloud products. Unlike Identity Service for GKE, Workforce Identity Federation doesn't install components in your
cluster.

For details and migration instructions, see Use external identity providers to authenticate to GKE
(https://cloud.google.com/kubernetes-engine/docs/how-to/oidc).

Organization Policy

FEATURE Custom organization policies are now generally available for Essential Contacts. For more information, see Creating
custom constraints for Essential Contacts (https://cloud.google.com/resource-manager/docs/essentialcontacts-custom-org-policies)
.

Resource Manager

https://cloud.google.com/release-notes 177/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

FEATURE Custom organization policies are now generally available for Essential Contacts. For more information, see Creating
custom constraints for Essential Contacts (https://cloud.google.com/resource-manager/docs/essentialcontacts-custom-org-policies)
.

Workflows

CHANGE Workflows is available in the following additional region (https://cloud.google.com/workflows/docs/locations): europe-north2

(Stockholm, Sweden).

February 18, 2025

Cloud CDN

FEATURE External HTTP(S) Load Balancing and Cloud CDN support early data for TLS 1.3
(https://cloud.google.com/cdn/docs/best-practices#tls-early-data), also known as 0-RTT or zero round trip. Early data helps
clients include HTTP request data with a TLS handshake, which can improve web performance for resumed connections.

Cloud Load Balancing

FEATURE TLS 1.3 early data is now supported on the target HTTPS proxy of global external Application Load Balancers and classic
Application Load Balancers.

TLS 1.3 early data, also known as zero-round-trip time (0-RTT) data, can improve application performance for resumed
connections by 30 to 50%.

For details, see TLS 1.3 early data support (https://cloud.google.com/load-balancing/docs/https#tls-early-data-support).

This feature is available in General Availability.

https://cloud.google.com/release-notes 178/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Cloud Logging

FEATURE You can now use custom constraints with Organization Policy to provide more granular control over your Cloud Logging
resources. For more information, see Use custom organization policies
(https://cloud.google.com/logging/docs/custom-constraints).

Cloud Run

FEATURE You can now scale your Cloud Run service manually (https://cloud.google.com/run/docs/configuring/services/manual-scaling), in
place of the built-in Cloud Run autoscaling feature (https://cloud.google.com/run/docs/about-instance-autoscaling). (Preview)

Container Optimized OS

CHANGE cos-105-17412-535-59

Kernel Docker ContainerdGPU Drivers

(https://cloud.goog
os/docs/how-to/ru

COS-5.15.173 v23.0.3v1.7.23 See List

(https://cos.googlesource.com/third_party/kernel/+/046e3bbc6bebe305d264f46620cc66f9b149f6d4) (https://storage.go
tools/17412.535.59

SECURITY Fixed CVE-2025-0395 in sys-libs/glibc.

SECURITY Fixed CVE-2024-9287 in dev-lang/python.

SECURITY Fixed CVE-2023-27043 in dev-lang/python.

https://cloud.google.com/release-notes 179/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

SECURITY Fixed CVE-2024-53215 in the Linux kernel.

SECURITY Fixed CVE-2024-56569 in the Linux kernel.

CHANGE Runtime sysctl changes:

Changed: fs.file-max: 812690 -> 812681

CHANGE cos-117-18613-164-38

Kernel Docker ContainerdGPU Drivers

(https://cloud.goog
os/docs/how-to/ru

COS-6.6.72 v24.0.9v1.7.24 See List

(https://cos.googlesource.com/third_party/kernel/+/5d3d66d87f5a527447026cdd4c1f2efb0bdcf831) (https://storage.go
tools/18613.164.38

SECURITY Fixed CVE-2025-0395 in sys-libs/glibc.

SECURITY Fixed CVE-2024-9287 in dev-lang/python.

CHANGE Runtime sysctl changes:

Changed: fs.file-max: 811817 -> 811794

CHANGE cos-109-17800-436-37

https://cloud.google.com/release-notes 180/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Kernel Docker ContainerdGPU Drivers

(https://cloud.goo
os/docs/how-to/ru

COS-6.1.124 v24.0.9v1.7.24 See List

(https://cos.googlesource.com/third_party/kernel/+/35d0c2a788899c479eeeb355f9e2e7da0d33d5c3) (https://storage.g
tools/17800.436.3

SECURITY Fixed CVE-2025-0395 in sys-libs/glibc.

SECURITY Fixed CVE-2024-9287 in dev-lang/python.

CHANGE Runtime sysctl changes:

Changed: fs.file-max: 812276 -> 812258

CHANGE cos-113-18244-291-40

Kernel Docker ContainerdGPU Drivers

(https://cloud.goo
os/docs/how-to/r

COS-6.1.123 v24.0.9v1.7.24 See List

(https://cos.googlesource.com/third_party/kernel/+/ca55c7872e363f10735d5b4549ee0a3b51003a3d) (https://storage.g
tools/18244.291.4

SECURITY Fixed CVE-2025-0395 in sys-libs/glibc.

SECURITY Fixed CVE-2024-9287 in dev-lang/python.

https://cloud.google.com/release-notes 181/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Dataplex

DEPRECATED Dataplex Attribute Store is deprecated and will be discontinued on February 18, 2026. For steps to transition to tags, policy
tags, and IAM conditions, see Migrate from Attribute Store to tags and IAM conditions
(https://cloud.google.com/dataplex/docs/attribute-store#migrate).

Gemini Code Assist

FEATURE Code customization for Gemini Code Assist Enterprise now supports repositories hosted on the following:

GitHub Enterprise Cloud (https://cloud.google.com/developer-connect/docs/connect-github-enterprise-cloud)

GitHub Enterprise (https://cloud.google.com/developer-connect/docs/connect-github-enterprise)

GitLab (https://cloud.google.com/developer-connect/docs/connect-gitlab)

GitLab Enterprise (https://cloud.google.com/developer-connect/docs/connect-gitlab-enterprise)

Bitbucket Cloud (https://cloud.google.com/developer-connect/docs/connect-bitbucket-cloud)

Bitbucket Data Center (https://cloud.google.com/developer-connect/docs/connect-bitbucket-dc)

Google Kubernetes Engine

CHANGE (2025-R07) Version updates

GKE cluster versions have been updated.

New versions available for upgrades and new clusters.

The following Kubernetes versions are now available for new clusters and for opt-in control plane upgrades and node
upgrades for existing clusters. For more information on versioning and upgrades, see GKE versioning and support

https://cloud.google.com/release-notes 182/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

(https://cloud.google.com/kubernetes-engine/versioning) and Upgrades (https://cloud.google.com/kubernetes-engine/upgrades).

Rapid channelRegular channel… Stable channel… Extended channel… No channel (#no-channel)

(#rapid-channel)

star Note: Your clusters might not have these versions available. Rollouts are already in progress when we publish the release notes, and
can take multiple days to complete across all Google Cloud zones.

Version 1.32.1-gke.1489001
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#v1321) is now the default
version for cluster creation in the Rapid channel.

The following versions are now available in the Rapid channel:

1.29.14-gke.1018000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12914)

1.30.9-gke.1231000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1309)

1.30.10-gke.1022000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v13010)

1.31.6-gke.1020000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1316)

1.32.1-gke.1729000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#v1321)

The following versions are no longer available in the Rapid channel:

https://cloud.google.com/release-notes 183/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

1.29.13-gke.1038000

1.30.9-gke.1046000

1.30.9-gke.1127000

1.31.5-gke.1068000

1.32.1-gke.1200003

Auto-upgrade targets are now available for the following minor versions:

Control planes and nodes with auto-upgrade enabled in the Rapid channel will be upgraded from version
1.28 to version 1.29.13-gke.1109000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12913) with this
release.

Control planes and nodes with auto-upgrade enabled in the Rapid channel will be upgraded from version
1.29 to version 1.30.9-gke.1201000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1309) with this
release.

Control planes and nodes with auto-upgrade enabled in the Rapid channel will be upgraded from version
1.30 to version 1.31.5-gke.1169000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1315) with this
release.

The following patch-only version auto-upgrade targets are now available for clusters with maintenance
exclusions
(https://cloud.google.com/kubernetes-engine/docs/concepts/maintenance-windows-and-exclusions#exclusions) or other
factors preventing minor version upgrades:

https://cloud.google.com/release-notes 184/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Control planes and nodes with auto-upgrade enabled in the Rapid channel will be upgraded from version
1.29 to version 1.29.13-gke.1109000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12913) with this
release.

Control planes and nodes with auto-upgrade enabled in the Rapid channel will be upgraded from version
1.30 to version 1.30.9-gke.1201000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1309) with this
release.

Control planes and nodes with auto-upgrade enabled in the Rapid channel will be upgraded from version
1.31 to version 1.31.5-gke.1169000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1315) with this
release.

Control planes and nodes with auto-upgrade enabled in the Rapid channel will be upgraded from version
1.32 to version 1.32.1-gke.1357001
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#v1321) with this
release.

CHANGE (2025-R07) Version updates

star Note: Your clusters might not have these versions available. Rollouts are already in progress when we publish the release notes, and can
take multiple days to complete across all Google Cloud zones.

Version 1.32.1-gke.1489001
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#v1321) is now the default version

https://cloud.google.com/release-notes 185/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

for cluster creation in the Rapid channel.

The following versions are now available in the Rapid channel:

1.29.14-gke.1018000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12914)

1.30.9-gke.1231000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1309)

1.30.10-gke.1022000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v13010)

1.31.6-gke.1020000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1316)

1.32.1-gke.1729000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#v1321)

The following versions are no longer available in the Rapid channel:

1.29.13-gke.1038000

1.30.9-gke.1046000

1.30.9-gke.1127000

1.31.5-gke.1068000

1.32.1-gke.1200003

Auto-upgrade targets are now available for the following minor versions:

Control planes and nodes with auto-upgrade enabled in the Rapid channel will be upgraded from version 1.28 to
version 1.29.13-gke.1109000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12913) with this release.

https://cloud.google.com/release-notes 186/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Control planes and nodes with auto-upgrade enabled in the Rapid channel will be upgraded from version 1.29 to
version 1.30.9-gke.1201000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1309) with this release.

Control planes and nodes with auto-upgrade enabled in the Rapid channel will be upgraded from version 1.30 to
version 1.31.5-gke.1169000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1315) with this release.

The following patch-only version auto-upgrade targets are now available for clusters with maintenance exclusions
(https://cloud.google.com/kubernetes-engine/docs/concepts/maintenance-windows-and-exclusions#exclusions) or other factors
preventing minor version upgrades:

Control planes and nodes with auto-upgrade enabled in the Rapid channel will be upgraded from version 1.29 to
version 1.29.13-gke.1109000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12913) with this release.

Control planes and nodes with auto-upgrade enabled in the Rapid channel will be upgraded from version 1.30 to
version 1.30.9-gke.1201000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1309) with this release.

Control planes and nodes with auto-upgrade enabled in the Rapid channel will be upgraded from version 1.31 to
version 1.31.5-gke.1169000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1315) with this release.

Control planes and nodes with auto-upgrade enabled in the Rapid channel will be upgraded from version 1.32 to
version 1.32.1-gke.1357001
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#v1321) with this release.

CHANGE (2025-R07) Version updates

https://cloud.google.com/release-notes 187/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

star Note: Your clusters might not have these versions available. Rollouts are already in progress when we publish the release notes, and can
take multiple days to complete across all Google Cloud zones.

Version 1.31.5-gke.1068000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1315) is now the default version
for cluster creation in the Regular channel.

The following versions are now available in the Regular channel:

1.29.13-gke.1109000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12913)

1.30.9-gke.1127000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1309)

1.31.5-gke.1169000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1315)

1.32.1-gke.1357001 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#v1321)

The following versions are no longer available in the Regular channel:

1.29.13-gke.1006000

1.30.9-gke.1009000

1.31.5-gke.1023000

Auto-upgrade targets are now available for the following minor versions:

Control planes and nodes with auto-upgrade enabled in the Regular channel will be upgraded from version 1.28
to version 1.29.13-gke.1038000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12913) with this release.

https://cloud.google.com/release-notes 188/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Control planes and nodes with auto-upgrade enabled in the Regular channel will be upgraded from version 1.29
to version 1.30.9-gke.1046000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1309) with this release.

The following patch-only version auto-upgrade targets are now available for clusters with maintenance exclusions
(https://cloud.google.com/kubernetes-engine/docs/concepts/maintenance-windows-and-exclusions#exclusions) or other factors
preventing minor version upgrades:

Control planes and nodes with auto-upgrade enabled in the Regular channel will be upgraded from version 1.29
to version 1.29.13-gke.1038000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12913) with this release.

Control planes and nodes with auto-upgrade enabled in the Regular channel will be upgraded from version 1.30
to version 1.30.9-gke.1046000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1309) with this release.

Control planes and nodes with auto-upgrade enabled in the Regular channel will be upgraded from version 1.31
to version 1.31.5-gke.1068000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1315) with this release.

CHANGE (2025-R07) Version updates

star Note: Your clusters might not have these versions available. Rollouts are already in progress when we publish the release notes, and can
take multiple days to complete across all Google Cloud zones.

Version 1.30.8-gke.1261000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1308) is now the default version
for cluster creation in the Stable channel.

https://cloud.google.com/release-notes 189/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

The following versions are now available in the Stable channel:

1.29.13-gke.1006000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12913)

1.30.9-gke.1009000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1309)

1.31.5-gke.1023000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1315)

The following versions are no longer available in the Stable channel:

1.29.12-gke.1143001

1.30.8-gke.1162001

1.31.4-gke.1256000

Auto-upgrade targets are now available for the following minor versions:

Control planes and nodes with auto-upgrade enabled in the Stable channel will be upgraded from version 1.28
to version 1.29.12-gke.1270000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12912) with this release.

Control planes and nodes with auto-upgrade enabled in the Stable channel will be upgraded from version 1.29
to version 1.30.8-gke.1261000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1308) with this release.

The following patch-only version auto-upgrade targets are now available for clusters with maintenance exclusions
(https://cloud.google.com/kubernetes-engine/docs/concepts/maintenance-windows-and-exclusions#exclusions) or other factors
preventing minor version upgrades:

Control planes and nodes with auto-upgrade enabled in the Stable channel will be upgraded from version 1.29
to version 1.29.12-gke.1270000

https://cloud.google.com/release-notes 190/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12912) with this release.

Control planes and nodes with auto-upgrade enabled in the Stable channel will be upgraded from version 1.30
to version 1.30.8-gke.1261000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1308) with this release.

Control planes and nodes with auto-upgrade enabled in the Stable channel will be upgraded from version 1.31
to version 1.31.4-gke.1372000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1314) with this release.

CHANGE (2025-R07) Version updates

star Note: Your clusters might not have these versions available. Rollouts are already in progress when we publish the release notes, and can
take multiple days to complete across all Google Cloud zones.

Version 1.31.5-gke.1068000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1315) is now the default version
for cluster creation in the Extended channel.

The following versions are now available in the Extended channel:

1.27.16-gke.2440000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.27.md#v12716)

1.27.16-gke.2451000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.27.md#v12716)

1.28.15-gke.1844000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.28.md#v12815)

https://cloud.google.com/release-notes 191/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

1.29.13-gke.1109000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12913)

1.30.9-gke.1127000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1309)

1.31.5-gke.1169000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1315)

1.32.1-gke.1357001 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#v1321)

The following versions are no longer available in the Extended channel:

1.27.16-gke.2296000

1.27.16-gke.2387000

1.28.15-gke.1781000

1.29.13-gke.1006000

1.30.9-gke.1009000

1.31.5-gke.1023000

The following patch-only version auto-upgrade targets are now available for clusters with maintenance exclusions
(https://cloud.google.com/kubernetes-engine/docs/concepts/maintenance-windows-and-exclusions#exclusions) or other factors
preventing minor version upgrades:

Control planes and nodes with auto-upgrade enabled in the Extended channel will be upgraded from version
1.29 to version 1.29.13-gke.1038000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12913) with this release.

Control planes and nodes with auto-upgrade enabled in the Extended channel will be upgraded from version
1.30 to version 1.30.9-gke.1046000

https://cloud.google.com/release-notes 192/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1309) with this release.

Control planes and nodes with auto-upgrade enabled in the Extended channel will be upgraded from version
1.31 to version 1.31.5-gke.1068000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1315) with this release.

CHANGE (2025-R07) Version updates

star Note: Your clusters might not have these versions available. Rollouts are already in progress when we publish the release notes, and can
take multiple days to complete across all Google Cloud zones.

Version 1.31.5-gke.1068000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1315) is now the default version
for cluster creation.

The following versions are now available:

1.29.14-gke.1018000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12914)

1.30.9-gke.1231000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1309)

1.30.10-gke.1022000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v13010)

1.31.6-gke.1020000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1316)

1.32.1-gke.1729000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#v1321)

The following node versions are now available:

https://cloud.google.com/release-notes 193/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

1.27.16-gke.2440000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.27.md#v12716)

1.27.16-gke.2451000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.27.md#v12716)

1.28.15-gke.1844000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.28.md#v12815)

1.29.14-gke.1018000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12914)

1.30.9-gke.1231000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1309)

1.30.10-gke.1022000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v13010)

1.31.6-gke.1020000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1316)

1.32.1-gke.1729000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#v1321)

The following versions are no longer available:

1.29.12-gke.1143001

1.30.8-gke.1128001

1.31.4-gke.1256000

Auto-upgrade targets are now available for the following minor versions:

Control planes and nodes with auto-upgrade enabled will be upgraded from version 1.28 to version 1.29.13-
gke.1038000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12913) with

https://cloud.google.com/release-notes 194/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

this release.

Control planes and nodes with auto-upgrade enabled will be upgraded from version 1.29 to version 1.30.8-
gke.1261000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1308) with
this release.

The following patch-only version auto-upgrade targets are now available for clusters with maintenance exclusions
(https://cloud.google.com/kubernetes-engine/docs/concepts/maintenance-windows-and-exclusions#exclusions) or other factors
preventing minor version upgrades:

Control planes and nodes with auto-upgrade enabled will be upgraded from version 1.29 to version 1.29.13-
gke.1038000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12913) with
this release.

Control planes and nodes with auto-upgrade enabled will be upgraded from version 1.30 to version 1.30.8-
gke.1261000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1308) with
this release.

Control planes and nodes with auto-upgrade enabled will be upgraded from version 1.31 to version 1.31.5-
gke.1068000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1315) with
this release.
VPC Service Controls

FEATURE Preview stage (https://cloud.google.com/products#product-launch-stages) support for the following integration:

Google Agentspace Enterprise

(https://cloud.google.com/vpc-service-controls/docs/supported-products#table_agentspace_enterprise)

FEATURE General availability (https://cloud.google.com/products#product-launch-stages) support for the following integration:

https://cloud.google.com/release-notes 195/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Google Agentspace - NotebookLM Enterprise

(https://cloud.google.com/vpc-service-controls/docs/supported-products#table_agentspace_notebooklm_enterprise)

February 17, 2025

BigQuery

LIBRARIES A weekly digest of client library updates from across the Cloud SDK (https://cloud.google.com/sdk).

Node.jsJava (#java)
(#node.js)

Changes for @google-cloud/bigquery (https://github.com/googleapis/nodejs-bigquery)

7.9.2 (https://github.com/googleapis/nodejs-bigquery/compare/v7.9.1...v7.9.2) (2025-02-12)

Bug Fixes

Avoid schema field mutation when passing selectedFields opt (#1437

(https://github.com/googleapis/nodejs-bigquery/issues/1437)) (27044d5
(https://github.com/googleapis/nodejs-bigquery/commit/27044d52e6bb6b4b6dbc746a0cfb02951817d7f1))

FEATURE Subscriber email logging lets you log the principal identifiers of users who execute jobs and queries against linked
datasets. You can enable logging at the listing level
(https://cloud.google.com/bigquery/docs/analytics-hub-manage-listings#create_a_listing) and the data exchange level
(https://cloud.google.com/bigquery/docs/analytics-hub-manage-exchanges#create-exchange) (for all the listings in the data

https://cloud.google.com/release-notes 196/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

exchange). Once you enable and save subscriber email logging, this setting cannot be edited. This feature is in preview
(https://cloud.google.com/products#product-launch-stages).
Bigtable

LIBRARIES A weekly digest of client library updates from across the Cloud SDK (https://cloud.google.com/sdk).

Java
(#java)

Changes for google-cloud-bigtable (https://github.com/googleapis/java-bigtable)

2.52.0 (https://github.com/googleapis/java-bigtable/compare/v2.51.2...v2.52.0) (2025-02-14)

Features

Automated backups are supported in the admin client (#2472

(https://github.com/googleapis/java-bigtable/issues/2472)) (48633e6
(https://github.com/googleapis/java-bigtable/commit/48633e6160593c84f42a02f348ec18c3d1521ef0))

Bug Fixes

deps: Update the Java code generator (gapic-generator-java) to 2.53.0 (47ca299

(https://github.com/googleapis/java-bigtable/commit/47ca29931699cae87d640185ad31e4b61c0bb212))

Extend timeouts for check consistency (47ca299

(https://github.com/googleapis/java-bigtable/commit/47ca29931699cae87d640185ad31e4b61c0bb212))

Dependencies

https://cloud.google.com/release-notes 197/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Update dependency com.google.cloud:gapic-libraries-bom to v1.52.0 (#2490

(https://github.com/googleapis/java-bigtable/issues/2490)) (ca25d4e
(https://github.com/googleapis/java-bigtable/commit/ca25d4eb6c7333d1a77d2c99b1bb95c2a2f710c1))

Update dependency com.google.cloud:sdk-platform-java-config to v3.43.0 (#2481

(https://github.com/googleapis/java-bigtable/issues/2481)) (deb1f79
(https://github.com/googleapis/java-bigtable/commit/deb1f79c6efa223f6c2f780724ec9386f44f018a))

Cloud Logging

LIBRARIES A weekly digest of client library updates from across the Cloud SDK (https://cloud.google.com/sdk).

Java
(#java)

Changes for google-cloud-logging (https://github.com/googleapis/java-logging)

3.21.3 (https://github.com/googleapis/java-logging/compare/v3.21.2...v3.21.3) (2025-02-12)

Bug Fixes

deps: Update the Java code generator (gapic-generator-java) to 2.52.0 (888a885

(https://github.com/googleapis/java-logging/commit/888a885dc229960c26fae5098c4b43b7b0ef4fa6))

Dependencies

Update dependency com.google.cloud:sdk-platform-java-config to v3.43.0 (#1763

(https://github.com/googleapis/java-logging/issues/1763)) (e0f9f27
(https://github.com/googleapis/java-logging/commit/e0f9f271be10cec0d9400bc464bcc0a175078d97))

https://cloud.google.com/release-notes 198/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Cloud Storage

LIBRARIES A weekly digest of client library updates from across the Cloud SDK (https://cloud.google.com/sdk).

Node.jsJava (#java)
(#node.js)

Changes for @google-cloud/storage (https://github.com/googleapis/nodejs-storage)

7.15.1 (https://github.com/googleapis/nodejs-storage/compare/v7.15.0...v7.15.1) (2025-02-11)

Bug Fixes

getFiles: Add nextPageToken to fields for autoPaginate (#2570

(https://github.com/googleapis/nodejs-storage/issues/2570)) (75c309c
(https://github.com/googleapis/nodejs-storage/commit/75c309c0761e4029dcd13024e748d8957052f766))

Dataproc

ANNOUNCEMENT New Dataproc on Compute Engine subminor image versions:

(https://cloud.google.com/dataproc/docs/concepts/versioning/dataproc-version-clusters#supported_dataproc_versions)

2.0.132-debian10, 2.0.132-rocky8, 2.0.132-ubuntu18

2.1.80-debian11, 2.1.80-rocky8, 2.1.80-ubuntu20, 2.1.80-ubuntu20-arm

2.2.46-debian12, 2.2.46-rocky9, 2.2.46-ubuntu22

ANNOUNCEMENT New Dataproc Serverless for Spark runtime versions

(https://cloud.google.com/dataproc-serverless/docs/concepts/versions/dataproc-serverless-versions):

https://cloud.google.com/release-notes 199/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

1.1.92

1.2.36

2.2.36
Google Cloud Contact Center as a Service

ANNOUNCEMENT Version 3.31 is released

All release notes published on this date are part of version 3.31.

The timing of the update to your instance depends on the deployment schedule that you have chosen. For more
information, see Deployment schedules (https://cloud.google.com/contact-center/ccai-platform/docs/deployment-schedules).

FEATURE Transfer restrictions for teams

Transfer restrictions, which let you control the source and destination of transfers, is now available for teams. For more
information, see Configure team transfer restrictions
(https://cloud.google.com/contact-center/ccai-platform/docs/Queue_and_Menu_Setup#configure-team-transfer-restrictions).

FEATURE Additional options for maximum transfer limits for chats

You can now specify whether you want virtual agents, human agents, or both to be included in transfer counts. You can
also specify whether you want the transfer count reset to zero when a chat is dismissed. For more information, see
Configure transfer limits for chats
(https://cloud.google.com/contact-center/ccai-platform/docs/Chat_Settings_and_Features#configure-transfer-limits-for-chats).

FEATURE Agents can configure spelling and grammar check in the chat adapter

You can let agents turn spelling and grammar check on and off in the chat adapter. You can also let agents select the
language for spell and grammar check. For more information, see Turn on and configure Agent Assist for chat

https://cloud.google.com/release-notes 200/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

(https://cloud.google.com/contact-center/ccai-platform/docs/agent-assist#aa-turn-on-chat) and Check spelling and grammar

(https://cloud.google.com/contact-center/ccai-platform/docs/check-spelling-and-grammar).

FEATURE Get user configuration data using the Apps API

You can now use the Apps API to get user configuration data. For more information, see Get user configuration data
(https://cloud.google.com/contact-center/ccai-platform/docs/get-user-configuration-data).

FEATURE Pass data parameters to a virtual agent mid-session

You can pass data parameters to a virtual agent while a session is in progress. For more information, see Pass data
parameters to virtual agents mid-session
(https://cloud.google.com/contact-center/ccai-platform/docs/va-pass-data-parameters#virtual-agent-custom-data).

FEATURE Interaction history retrieval is extended to 90 days

There are two new settings for specifying how many days of interaction history to retrieve: 60 days and 90 days. For more
information, see Set up interaction history
(https://cloud.google.com/contact-center/ccai-platform/docs/agent-assist#set-up-interaction-history).

FEATURE Blended inbound and outbound calling

You can automatically transition agents between handling outbound campaign calls and inbound calls, based on call
volumes and conditions that you configure. For more information, see Call blending
(https://cloud.google.com/contact-center/ccai-platform/docs/campaign-management#call-blending).

FEATURE Restrict outbound calling to emergency or special services

You can restrict outbound calling to emergency or special services by agent and location. The following configuration
options are available:

https://cloud.google.com/release-notes 201/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Restrict specific agents from calling emergency or special service phone numbers.

Configure from which locations agents are permitted to call emergency or special service phone numbers.

For more information, see Restrict outbound calling for agents (new number)
(https://cloud.google.com/contact-center/ccai-platform/docs/call-settings#restrict-outbound-calling-agents).

FEATURE Automatic redirect with percent allocation

You can configure automatic redirection so that specified percentages of sessions are redirected to the redirection groups
that you specify. For more information, see Automatic redirection
(https://cloud.google.com/contact-center/ccai-platform/docs/automatic_redirection).

FEATURE Custom agent status lists

You can create lists of custom statuses and assign them to queues or teams. This gives you control over the statuses that
agents in queues and teams can use. For more information, see Agent status lists
(https://cloud.google.com/contact-center/ccai-platform/docs/agent-status#agent-status-lists).

FEATURE Availability preferences

You can create availability preferences filters and apply them to users and teams. This lets you filter incoming contacts so
only the appropriate types of contacts enter their queues. You can also give agents the ability to create their own
availability preference filters. Filtering criteria include channel, session direction, schedule, transfers, and more. For more
information, see Availability preferences
(https://cloud.google.com/contact-center/ccai-platform/docs/agent-status#availability-preferences).

FIXED Fixed an issue where attempting to cancel a call transfer failed.

FIXED Fixed an issue where the SIP URI format was not accepted in the user interface.

https://cloud.google.com/release-notes 202/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

FIXED Fixed an issue where chat shortcuts were not entered into message input fields when selected from the chat shortcut list.

FIXED Fixed an issue where character limits were causing errors when email templates were being created.

FIXED Fixed an issue where chats that were escalated from a virtual agent were assigned the wrong priority and never connected
with an agent.

FIXED Fixed an issue where agents couldn't see waiting chat contacts when their statuses were set to Unavailable.

FIXED Fixed an issue where the Dismiss button in the agent adapter didn't meet accessibility requirements for contrast.

FIXED Fixed an issue with Co-browse taking too long to start.

FIXED Fixed an issue where the summary box in the chat adapter was not sized correctly when using a CRM.

FIXED Fixed an issue for custom CRM users where the CRM record was not appearing when a session started.

FIXED Fixed an issue where changing deflection settings for agent extensions in the call adapter failed.

FIXED Fixed an issue where agents could not set their statuses to Busy after calls.

FIXED For workforce management, fixed an issue where an error was returned when searching for an employee in the Assign
Shift pane.

Pub/Sub

LIBRARIES A weekly digest of client library updates from across the Cloud SDK (https://cloud.google.com/sdk).

Java
(#java)

https://cloud.google.com/release-notes 203/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Changes for google-cloud-pubsub (https://github.com/googleapis/java-pubsub)

1.137.0 (https://github.com/googleapis/java-pubsub/compare/v1.136.1...v1.137.0) (2025-02-12)

Features

Add support for message transforms to Topic and Subscription (3889a05

(https://github.com/googleapis/java-pubsub/commit/3889a05a5c5d7479d3cc6b6dc0b0c425d41efd5d))

Bug Fixes

deps: Update the Java code generator (gapic-generator-java) to 2.53.0 (b952e58

(https://github.com/googleapis/java-pubsub/commit/b952e5826748bc680936a79b14d75f5873e6db06))

Dependencies

Update dependency com.google.cloud:google-cloud-bigquery to v2.47.0 (#2331

(https://github.com/googleapis/java-pubsub/issues/2331)) (216feef
(https://github.com/googleapis/java-pubsub/commit/216feef976595cd03e282f8d8effa2ac8430c419))

Update dependency com.google.cloud:google-cloud-core to v2.51.0 (#2338

(https://github.com/googleapis/java-pubsub/issues/2338)) (ac2403e
(https://github.com/googleapis/java-pubsub/commit/ac2403ecd21aad0d44c5b06fce2853f9a433adbd))

Update dependency com.google.cloud:google-cloud-storage to v2.48.1 (#2332

(https://github.com/googleapis/java-pubsub/issues/2332)) (23fd7a8
(https://github.com/googleapis/java-pubsub/commit/23fd7a8f4ab2438b72f3a6da5613f5deb0ac307e))

https://cloud.google.com/release-notes 204/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Update dependency com.google.cloud:google-cloud-storage to v2.48.2 (#2341

(https://github.com/googleapis/java-pubsub/issues/2341)) (eeb99a9
(https://github.com/googleapis/java-pubsub/commit/eeb99a997fa2e7154dcc228b964ff47867738122))

Update dependency com.google.cloud:sdk-platform-java-config to v3.43.0 (#2336

(https://github.com/googleapis/java-pubsub/issues/2336)) (996f4eb
(https://github.com/googleapis/java-pubsub/commit/996f4ebdfa6b5cb38dbe37d4be981ca7d941bc0d))

Documentation

A comment for field code in message .google.pubsub.v1.JavaScriptUDF is changed (3889a05

(https://github.com/googleapis/java-pubsub/commit/3889a05a5c5d7479d3cc6b6dc0b0c425d41efd5d))

Secret Manager

LIBRARIES A weekly digest of client library updates from across the Cloud SDK (https://cloud.google.com/sdk).

Go
(#go)

Changes for secretmanager/apiv1 (https://github.com/googleapis/google-cloud-go/tree/main/secretmanager/apiv1)

1.14.5 (https://github.com/googleapis/google-cloud-go/compare/secretmanager/v1.14.4...secretmanager/v1.14.5) (2025-02-
12)

Bug Fixes

secretmanager: Upgrade Go gRPC Protobuf generation (90140b1

(https://github.com/googleapis/google-cloud-go/commit/90140b17da6378fa87d4bec0d404c18a78d6b02a))

https://cloud.google.com/release-notes 205/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

February 16, 2025

Google SecOps SIEM

FEATURE Manage user preferences

The ability to manage platform time zones has been relocated to the new User Preferences dialog, accessible from your
avatar. In addition, a new accessibility option in the User Preferences dialog lets you define how long feedback messages
remain on the screen.

For more information, refer to Configure user preferences (SIEM only)

(https://cloud.google.com/chronicle/docs/siem/user-prefs-siem).

February 15, 2025

Google SecOps

FEATURE Manage user preferences

The ability to manage platform time zones, date/time settings, and notifications has been relocated to the new User
Preferences dialog, accessible from your avatar.

In addition, a new accessibility option in the User Preferences dialog lets you define how long feedback messages remain
on the screen.

For more information, refer to Configure user preferences (https://cloud.google.com/chronicle/docs/secops/user-preferences).

https://cloud.google.com/release-notes 206/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

FEATURE This feature is available in Preview.

New options to close a case

New custom field options have been added to the SOAR Settings > Case Data > Close Case page. Once you define these
fields, analysts must enter specific types of information when closing a case.

For more information, refer to Customize the Close Case dialog

(https://cloud.google.com/chronicle/docs/soar/investigate/working-with-cases/add-new-case-close-root-cause-admin).

Google SecOps SOAR

ANNOUNCEMENT Release 6.3.35 is currently in Preview. This release contains the following feature.

FEATURE New options for closing a case

This feature is currently in Preview.

New custom field options have been added to the Settings > Case Data > Close Case page. Once you define these fields,
analysts must enter specific types of information when closing a case.

For more information, refer to Customize the Close Case dialog

(https://cloud.google.com/chronicle/docs/soar/investigate/working-with-cases/add-new-case-close-root-cause-admin).

ANNOUNCEMENT Release 6.3.34 is now in General Availability.

February 14, 2025

AlloyDB for PostgreSQL

https://cloud.google.com/release-notes 207/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

FEATURE Support for advanced query insights (https://cloud.google.com/alloydb/docs/advanced-query-insights-overview), index advisor

(https://cloud.google.com/alloydb/docs/use-index-advisor-with-query-insights), and active queries
(https://cloud.google.com/alloydb/docs/monitor-active-queries) is now generally available (GA
(https://cloud.google.com/products#product-launch-stages)) in AlloyDB for PostgreSQL.

ISSUE You cannot enable advanced query insights on clusters with secondary instances. See Limitations
(https://cloud.google.com/alloydb/docs/advanced-query-insights-overview#limitations) for more information.

BigQuery Engine for Apache Flink

DEPRECATED BigQuery Engine for Apache Flink Preview will be discontinued on February 28, 2025.

Cloud Database Migration Service

FEATURE Database Migration Service for homogeneous AlloyDB for PostgreSQL migrations now lets you migrate specific databases
from your source instance. You can view metrics, statuses, and errors separately for each database.

For more information about migrating specific databases, see: Create a migration job to a new destination instance
(https://cloud.google.com/database-migration/docs/postgresql-to-alloydb/create-migration-job) and Create a migration job to an
existing destination instance
(https://cloud.google.com/database-migration/docs/postgresql-to-alloydb/create-migration-job-existing-instance).

FEATURE Database Migration Service for homogeneous Cloud SQL for SQL Server migrations now lets you promote, restart, or view
additional metrics for each database individually.

For more information, see: Migration job metrics

(https://cloud.google.com/database-migration/docs/sqlserver/migration-job-metrics) and Manage migration jobs
(https://cloud.google.com/database-migration/docs/sqlserver/manage-migration-jobs).

Cloud Monitoring

https://cloud.google.com/release-notes 208/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

CHANGE The Dashboards page of the Cloud Console has been refreshed. For more information about dashboards, see the following
documents:

Dashboards overview (https://cloud.google.com/monitoring/dashboards).

Install a dashboard by uploading a template from GitHub

(https://cloud.google.com/monitoring/dashboards/dashboard-templates).

Create and manage custom dashboards (https://cloud.google.com/monitoring/charts/dashboards).

Cloud SQL for SQL Server

CHANGE Point in time recovery (PITR) (https://cloud.google.com/sql/docs/sqlserver/backup-recovery/pitr) is available by default for all
Cloud SQL Enterprise Plus edition for SQL Server instances.

Compute Engine

CHANGE Starting as soon as February 14, 2025, projects might start seeing a Data protection pane on the Create an instance page
in the Google Cloud console. If you see the Data protection pane, it selects an option to automatically back up data by
default, which is recommended to make sure you can recover your data if it's lost due to unforeseen events. The backup
incurs additional costs according to either Backup and DR pricing (https://cloud.google.com/backup-disaster-recovery/pricing) or
Compute Engine pricing for disk snapshots (https://cloud.google.com/compute/disks-image-pricing).

If desired, you can select a different backup option (or disable backups) before you finish creating an instance. You can
also change which backup option your project selects by default. For more information, see Configure the default backup
setting for the console (https://cloud.google.com/compute/docs/disks/default-backup).

FEATURE You can apply a Backup and DR Service backup plan during instance creation
(https://cloud.google.com/compute/docs/instances/create-instance-with-gcbdr-backup-plan). Use backup plans to centralize backup

https://cloud.google.com/release-notes 209/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

management of instances across projects and improve cyber resilience through immutable and indelible backups to
backup vaults.
Document AI

FEATURE Custom extractor model pretrained-foundation-model-v1.4-2025-02-05 powered by Gemini 2.0 Flash LLM is
available as Public Preview in US and EU regions with improved accuracy. The Custom Extractor Model supports a quota of
up to 120 pages per minute for online process requests.

For more information about available models, see Custom extractor model versions
(https://cloud.google.com/document-ai/docs/ce-with-genai#models).

Organization Policy

FEATURE Custom organization policies are now generally available for Cloud Logging. For more information, see Use custom
organization policies (https://cloud.google.com/logging/docs/custom-constraints).

Resource Manager

FEATURE Custom organization policies are now generally available for Cloud Logging. For more information, see Use custom
organization policies (https://cloud.google.com/logging/docs/custom-constraints).

Security Command Center

FEATURE The attack path simulations feature can now automatically set the resource value of a Vertex AI dataset
(https://cloud.google.com/security-command-center/docs/attack-exposure-learn#priority-values-auto-by-data-sensitivity) based on the
sensitivity of the data that the dataset contains. For information about how to enable the automatic assignment of
resource values based on data sensitivity, see Create a resource value configuration
(https://cloud.google.com/security-command-center/docs/attack-exposure-define-high-value-resource-
set#create_a_resource_value_configuration)
.

https://cloud.google.com/release-notes 210/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Sensitive Data Protection

FEATURE Sensitive data discovery for Vertex AI (https://cloud.google.com/sensitive-data-protection/docs/discovery-for-vertex-ai) is in General

Availability (https://cloud.google.com/products#product-launch-stages). You can run discovery at the organization, folder, or
project level to generate profiles of your Vertex AI training data. Data profiles provide metrics and insights about the
sensitivity and risk levels of your data to help you plan your data governance workflows.

VPC Service Controls

FEATURE VPC Service Controls feature (Status: Preview (https://cloud.google.com/products#product-launch-stages)): The VPC Service
Controls violation dashboard provides an aggregated view of all access denials by service perimeters in your organization.
This feature is available in Preview (https://cloud.google.com/products#product-launch-stages).

For more information, see Set up and view the violation dashboard
(https://cloud.google.com/vpc-service-controls/docs/violation-dashboard).

February 13, 2025

AlloyDB for PostgreSQL

CHANGE The extension vector, which includes pgvector functions and operators, is updated to version 0.8.0.

Carbon Footprint

CHANGE For the January 2025 semi-annual methodology refresh (released in mid-February 2025), we implemented the following
improvements and updated the carbon model to version 12:

https://cloud.google.com/release-notes 211/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Improved internal cost accounting for Vertex AI and Notebooks services. This resulted in an improved allocation of energy
consumption and emissions to these services. For more information on how we use internal cost to reallocate shared
infrastructure, see Energy use and allocation to internal services
(https://cloud.google.com/carbon-footprint/docs/methodology#energy-allocation).
Certificate Authority Service

FEATURE Custom Authority Information Access (AIA) and CRL Distribution Point (CDP) extensions for certificate authorities (CAs) is
now generally available (GA (https://cloud.google.com/products#product-launch-stages)). You can create CAs with custom AIA
and CDP certificate extensions. These custom URLs are embedded directly into certificates issued by your CA, providing
precise control over certificate validation paths. If custom AIA and CDP extensions are not specified, the system continues
to use the default Google Cloud Storage (GCS) publishing locations for AIA and CDP information in issued certificates. The
AIA extension enables clients to locate the issuer's certificate, while the CDP extension provides access to the Certificate
Revocation List (CRL).

Cloud CDN

FEATURE Cloud CDN supports invalidation by using cache tags (https://cloud.google.com/cdn/docs/cache-invalidation-overview#cache-tags)

with faster performance and higher rate limits in Preview. By grouping objects together using cache tags, you can remove
and refresh content at scale.

Cloud Composer

FIXED (Cloud Composer 3) The GOOGLE_CLOUD_PROJECT environment variable is changed to reserved for Cloud Composer 3. This
fixes an issue where creating an environment with this variable failed with a non-specific error.

FIXED (Cloud Composer 2) The dependency_permissions_check_count metric now correctly reports the number of missing
permissions.

https://cloud.google.com/release-notes 212/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

CHANGE (Cloud Composer 2) The list of permissions reported by dependency_permissions_check_count metric was updated.
Now the metric reports more permissions that are required for a functioning environment. Permissions that weren't
necessary were replaced or removed.

CHANGE (New Cloud Composer environments only) Cloud Composer now enforces SSL connections to Cloud SQL instances.

This change implements a security compliance standard in Cloud Composer and enforces SSL usage. You can adopt other
security standards by following recommendations listed in Vulnerability findings
(https://cloud.google.com/security-command-center/docs/concepts-vulnerabilities-findings#supported-security-standards). Previously, it
was possible to create a non-SSL connection to the Airflow database. After the change, the connection will be refused.

FIXED (Available without upgrading) Fixed a problem that caused Terraform to unnecessarily force the replacement of
cloud_composer_network_ipv4_cidr_block, web_server_ipv4_cidr_block, and cloud_sql_ipv4_cidr_block fields
in some configurations of Cloud Composer 2 and Cloud Composer 1 environments.

CHANGE (Airflow 2.10.2 and 2.9.3) Preinstalled packages were changed:

logbook was removed from preinstalled packages

minimal-snowplow-tracker was removed from preinstalled packages

mashumaro was downgraded from 3.15 to 3.14

CHANGE New Airflow builds (https://cloud.google.com/composer/docs/concepts/versioning/composer-versions#images-composer-3) are

available in Cloud Composer 3:

composer-3-airflow-2.10.2-build.8 (default)

composer-3-airflow-2.9.3-build.15

https://cloud.google.com/release-notes 213/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

CHANGE New images (https://cloud.google.com/composer/docs/concepts/versioning/composer-versions#images-composer-2) are available in

Cloud Composer 2:

composer-2.11.2-airflow-2.10.2 (default)

composer-2.11.2-airflow-2.9.3

DEPRECATED Cloud Composer versions 2.6.0 and 2.6.1 have reached their end of support period
(https://cloud.google.com/composer/docs/concepts/versioning/composer-versioning-overview#version-deprecation-and-support).

Cloud SQL for MySQL

FEATURE Cloud SQL for MySQL lets you recreate a lagging replica when replication falls behind a predefined length of time. For more
information, see Recreate lagging replica
(https://cloud.google.com/sql/docs/mysql/replication/replication-lag#recreate_lagging_replica). This feature is in Preview.

Google Cloud VMware Engine

FEATURE Google Cloud VMware Engine now supports soft deletion for private clouds. This feature provides seven days of post
delete data protection. See Delete a private cloud
(https://cloud.google.com/vmware-engine/docs/private-clouds/howto-delete-private-cloud) for more information.

Google Distributed Cloud (software only) for VMware

ANNOUNCEMENT Google Distributed Cloud (software only) for VMware 1.31.200-gke.58 is now available for download
(https://cloud.google.com/anthos/clusters/docs/on-prem/latest/downloads). To upgrade, see Upgrade a cluster or a node pool
(https://cloud.google.com/anthos/clusters/docs/on-prem/latest/how-to/upgrading). Google Distributed Cloud 1.31.200-gke.58 runs
on Kubernetes v1.31.5-gke.300.

https://cloud.google.com/release-notes 214/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

If you are using a third-party storage vendor, check the GDC Ready storage partners
(https://cloud.google.com/anthos/docs/resources/partner-storage) document to make sure the storage vendor has already
passed the qualification for this release.

After a release, it takes approximately 7 to 14 days for the version to become available for use with GKE On-Prem API
clients (https://cloud.google.com/kubernetes-engine/distributed-cloud/vmware/docs/how-to/cluster-lifecycle-management-tools): the
Google Cloud console, the gcloud CLI, and Terraform.

FIXED The following issue is fixed in 1.31.200-gke.58:

Fixed an issue
(https://cloud.google.com/kubernetes-engine/distributed-cloud/vmware/docs/troubleshooting/known-issues#runtime:-out-of-
memory-error-after-running-gkeadm-create-or-upgrade)
that caused Runtime: out of memory errors after running gkeadm to create or upgrade clusters.

FIXED The 1.31.200-gke.58 release includes many vulnerability fixes. For a list of all vulnerabilities fixed in this release, see
Vulnerability fixes (https://cloud.google.com/kubernetes-engine/distributed-cloud/vmware/docs/vulnerabilities).

Google Distributed Cloud (software only) for bare metal

ANNOUNCEMENT
Release 1.31.200-gke.58
Google Distributed Cloud for bare metal 1.31.200-gke.58 is now available for download
(https://cloud.google.com/kubernetes-engine/distributed-cloud/bare-metal/docs/downloads). To upgrade, see Upgrade clusters
(https://cloud.google.com/kubernetes-engine/distributed-cloud/bare-metal/docs/how-to/upgrade). Google Distributed Cloud for bare
metal 1.31.200-gke.58 runs on Kubernetes v1.31.5-gke.300.

After a release, it takes approximately 7 to 14 days for the version to become available for installations or upgrades with
the GKE On-Prem API clients

https://cloud.google.com/release-notes 215/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

(https://cloud.google.com/kubernetes-engine/distributed-cloud/bare-metal/docs/installing/cluster-lifecycle-management-tools): the
Google Cloud console, the gcloud CLI, and Terraform.

If you use a third-party storage vendor, check the Ready storage partners
(https://cloud.google.com/anthos/docs/resources/partner-storage) document to make sure the storage vendor has already
passed the qualification for this release of Google Distributed Cloud for bare metal.

FIXED The 1.31.200-gke.58 release includes many vulnerability fixes. For a list of all vulnerabilities fixed in this release, see
Vulnerability fixes (https://cloud.google.com/kubernetes-engine/distributed-cloud/bare-metal/docs/vulnerabilities).

ISSUE For information about the latest known issues, see Google Distributed Cloud for bare metal known issues
(https://cloud.google.com/kubernetes-engine/distributed-cloud/bare-metal/docs/troubleshooting/known-issues) in the Troubleshooting
section.

Looker Studio

FEATURE Sort by multiple columns

Viewers can now sort table charts by multiple columns by clicking multiple column headers while holding the Shift key.

Learn more about table charts. (https://cloud.google.com/looker/docs/studio/table-reference)

Organization Policy

FEATURE Custom organization policies are now generally available for security posture resources. For more information, see Add a
custom organization policy (https://cloud.google.com/security-command-center/docs/security-posture-custom-constraints).

Resource Manager

https://cloud.google.com/release-notes 216/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

FEATURE Custom organization policies are now generally available for security posture resources. For more information, see Add a
custom organization policy (https://cloud.google.com/security-command-center/docs/security-posture-custom-constraints).

Security Command Center

FEATURE Security Command Center now supports integration with Snyk

(https://cloud.google.com/security-command-center/docs/how-to-configure-snyk-for-scc). This feature is in Preview
(https://cloud.google.com/products#product-launch-stages).

Vertex AI Agent Builder

FEATURE Vertex AI Search: Stream answers (GA)

Vertex AI Search now supports answer streaming. This feature returns generated answers in sequential parts, reducing the
perception of latency. As the end users read the first part of the answer, the subsequent parts of the answer are being
generated.

This feature also includes many of the features of the original answer method.

This feature is Generally available to all customers. For more information, see Stream answers
(https://cloud.google.com/generative-ai-app-builder/docs/stream-answer.html).

February 12, 2025

Anthos Attached Clusters

ANNOUNCEMENT You can now launch clusters with the following Kubernetes versions. Click on the following links to see the release notes
associated with these patches:

https://cloud.google.com/release-notes 217/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

1.31.0-gke.2
(https://cloud.google.com/kubernetes-engine/multi-cloud/docs/attached/aks/reference/supported-versions#1310-gke2)

1.30.0-gke.5
(https://cloud.google.com/kubernetes-engine/multi-cloud/docs/attached/aks/reference/supported-versions#1300-gke5)

1.29.0-gke.8
(https://cloud.google.com/kubernetes-engine/multi-cloud/docs/attached/aks/reference/supported-versions#1290-gke8)
Anthos clusters on AWS

ANNOUNCEMENT You can now launch clusters with the following Kubernetes versions. Click on the following links to see the release notes
associated with these patches:

1.31.4-gke.500 (https://cloud.google.com/kubernetes-engine/multi-cloud/docs/aws/reference/supported-versions#1314-gke500)

1.30.8-gke.100 (https://cloud.google.com/kubernetes-engine/multi-cloud/docs/aws/reference/supported-versions#1308-gke100)

1.29.12-gke.100
(https://cloud.google.com/kubernetes-engine/multi-cloud/docs/aws/reference/supported-versions#12912-gke100)

Anthos clusters on Azure

ANNOUNCEMENT You can now launch clusters with the following Kubernetes versions. Click on the following links to see the release notes
associated with these patches:

1.31.4-gke.500 (https://cloud.google.com/kubernetes-engine/multi-cloud/docs/azure/reference/supported-versions#1314-gke500)

1.30.8-gke.100 (https://cloud.google.com/kubernetes-engine/multi-cloud/docs/azure/reference/supported-versions#1308-gke100)

1.29.12-gke.100
(https://cloud.google.com/kubernetes-engine/multi-cloud/docs/azure/reference/supported-versions#12912-gke100)

https://cloud.google.com/release-notes 218/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Cloud NAT

FEATURE Cloud NAT gateways for Public NAT support IPv6 to IPv4 network address translation in Preview. For more information,
see NAT64 in Public NAT (https://cloud.google.com/nat/docs/public-nat#nat64).

Cloud SQL for PostgreSQL

FEATURE Cloud SQL for PostgreSQL now supports the tds_fdw extension. This extension provides a foreign data wrapper (fdw) for
accessing databases that use the Tabular Data Stream (TDS) protocol, such as Microsoft SQL Server or Sybase. Cloud SQL
for PostgreSQL supports tds_fdw version 2.0.4. For more information about using this extension, see Configure
PostgreSQL extensions (https://cloud.google.com/sql/docs/postgres/extensions).

You can now perform pg_replication_origin_* functions as a database user with the cloudsqlsuperuser role. For
more information about cloudsqlsuperuser, see About PostgreSQL users and roles
(https://cloud.google.com/sql/docs/postgres/users).

The rollout of the following extension version is underway:

rdkit is upgraded from 4.3.0 to 4.6.1

If you use a maintenance window, then the updates to the extension version happen according to the timeframe that you
set in the window. Otherwise, the updates occur within the next few weeks.

The new maintenance version is [PostgreSQL version].R20250112.01_03. To learn how to check your maintenance
version, see Self-service maintenance (https://cloud.google.com/sql/docs/postgres/self-service-maintenance). To find your
maintenance window or to manage maintenance updates, see Find and set maintenance windows
(https://cloud.google.com/sql/docs/postgres/set-maintenance-window).

Container Optimized OS

https://cloud.google.com/release-notes 219/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

CHANGE cos-113-18244-291-36

Kernel Docker ContainerdGPU Drivers

(https://cloud.goo
os/docs/how-to/r

COS-6.1.123 v24.0.9v1.7.24 See List

(https://cos.googlesource.com/third_party/kernel/+/e5585232be3888e89f83216296c74a971b37e231) (https://storage.g
tools/18244.291.3

CHANGE Updated the default tag of the GPU driver supporting the NVIDIA H200 GPU device to 570.86.15.

CHANGE Updated Konlet to v.0.13.4.

FEATURE Support for NVIDIA B200 GPU – Added support for the R570 driver series, including version 570.86.15. This version has
been assigned the latest, default, and R570 tags.

FEATURE Updated cos-gpu-installer to v2.4.7:

1.Added Support for NVIDIA B200 GPU.

2.Enabled --prepare-build-tools flag to preload GPU driver metadata for ARM64.

FIXED Upgraded sys-apps/diffutils to v3.11.

FIXED Upgraded sys-apps/hwdata to v0.391.

SECURITY Fixed CVE-2025-0840 in binutils.

SECURITY Fixed CVE-2024-56664 in the Linux kernel.

https://cloud.google.com/release-notes 220/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

SECURITY Fixed CVE-2024-50304 in the Linux kernel.

SECURITY Fixed CVE-2024-50047 in the Linux kernel.

SECURITY Fixed CVE-2025-21669 in the Linux kernel.

SECURITY Fixed CVE-2025-21683 in the Linux kernel.

SECURITY Fixed CVE-2024-40945 in the Linux kernel.

SECURITY Fixed CVE-2025-21666 in the Linux kernel.

SECURITY Fixed CVE-2025-21631 in the Linux kernel.

SECURITY Fixed CVE-2025-21671 in the Linux kernel.

SECURITY Fixed CVE-2024-50014 in the Linux kernel.

SECURITY Fixed CVE-2024-49994 in the Linux kernel.

SECURITY Fixed CVE-2025-21665 in the Linux kernel.

SECURITY Fixed CVE-2025-21667 in the Linux kernel.

CHANGE Runtime sysctl changes:

Changed: fs.file-max: 812027 -> 812031

CHANGE cos-109-17800-436-33

https://cloud.google.com/release-notes 221/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Kernel Docker ContainerdGPU Drivers

(https://cloud.goo
os/docs/how-to/r

COS-6.1.124 v24.0.9v1.7.24 See List

(https://cos.googlesource.com/third_party/kernel/+/6d837756c3d0b3b617c83468d345146a191adfeb) (https://storage.g
tools/17800.436.3

CHANGE Added support for TPU v6 devices.

CHANGE Runtime sysctl changes:

Changed: fs.file-max: 812272 -> 812276

Generative AI on Vertex AI

FEATURE Deepseek-V3 and Deepseek-R1 have been added to Model Garden (https://console.cloud.google.com/vertex-ai/model-garden) in
Preview (https://cloud.google.com/products#product-launch-stages):

DeepSeek-V3 (https://console.cloud.google.com/vertex-ai/publishers/deepseek-ai/model-garden/deepseek-v3) (671B) is a

powerful Mixture-of-Experts (MoE) language model with 671B total parameters with 37B activated for each token.

DeepSeek-R1 (https://console.cloud.google.com/vertex-ai/publishers/deepseek-ai/model-garden/deepseek-r1) (671B) is one of

the first-generation reasoning models introduced by DeepSeek and offers performance comparable to OpenAI-o1
across math, code, and reasoning tasks.

You can use a notebook

(https://colab.research.google.com/github/GoogleCloudPlatform/vertex-ai-
samples/blob/main/notebooks/community/model_garden/model_garden_pytorch_deepseek_deployment.ipynb)
to deploy these models.

https://cloud.google.com/release-notes 222/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Google SecOps

ANNOUNCEMENT The following parser documentation is now available:

Collect NGINX logs (https://cloud.google.com/chronicle/docs/ingestion/default-parsers/nginx)

Collect Proofpoint On-Demand logs (https://cloud.google.com/chronicle/docs/ingestion/default-parsers/proofpoint-od)

Collect Qualys asset context logs (https://cloud.google.com/chronicle/docs/ingestion/default-parsers/qualys-ac)

Collect Qualys Continuous Monitoring logs (https://cloud.google.com/chronicle/docs/ingestion/default-parsers/qualys-cm)

Collect Qualys Scan logs (https://cloud.google.com/chronicle/docs/ingestion/default-parsers/qualys-scan)

Collect Qualys Vulnerability Management logs (https://cloud.google.com/chronicle/docs/ingestion/default-parsers/qualys-vm)

Collect Qualys Virtual Scanner logs (https://cloud.google.com/chronicle/docs/ingestion/default-parsers/qualys-vs)

Collect ThreatConnect IOC logs (https://cloud.google.com/chronicle/docs/ingestion/default-parsers/threatconnect-ioc)

Collect Akamai DNS logs (https://cloud.google.com/chronicle/docs/ingestion/default-parsers/akamai-dns)

Collect Aruba switch logs (https://cloud.google.com/chronicle/docs/ingestion/default-parsers/aruba-switch)

Collect Bitdefender logs (https://cloud.google.com/chronicle/docs/ingestion/default-parsers/bitdefender)

Collect HashiCorp audit logs (https://cloud.google.com/chronicle/docs/ingestion/default-parsers/hashicorp)

Collect Microsoft SQL Server logs (https://cloud.google.com/chronicle/docs/ingestion/default-parsers/collect-microsoft-sql-logs)

Collect FireEye NX logs (https://cloud.google.com/chronicle/docs/ingestion/default-parsers/collect-fireeye-nx-logs)

https://cloud.google.com/release-notes 223/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Collect Illumio Core logs (https://cloud.google.com/chronicle/docs/ingestion/default-parsers/collect-illumio-core-logs)

Collect Microsoft Azure Key Vault logging logs

(https://cloud.google.com/chronicle/docs/ingestion/default-parsers/collect-azure-keyvault-audit-logs)

Collect BeyondTrust Remote Support logs (https://cloud.google.com/chronicle/docs/ingestion/default-parsers/beyondtrust-rs)

Collect BlueCat DDI logs (https://cloud.google.com/chronicle/docs/ingestion/default-parsers/bluecat-ddi)

Collect BMC Helix Discovery logs (https://cloud.google.com/chronicle/docs/ingestion/default-parsers/bmc-helix-discovery)

Collect Brocade ServerIron logs (https://cloud.google.com/chronicle/docs/ingestion/default-parsers/brocade-serverIron)

Collect Check Point firewall logs (https://cloud.google.com/chronicle/docs/ingestion/default-parsers/checkpoint-fw)

Collect CyberArk EPM logs (https://cloud.google.com/chronicle/docs/ingestion/default-parsers/cyberark-epm)

Collect CyberArk PAM logs (https://cloud.google.com/chronicle/docs/ingestion/default-parsers/cyberark-pam)

Collect Dell ECS logs (https://cloud.google.com/chronicle/docs/ingestion/default-parsers/dell-ecs)

Collect Dell switch logs (https://cloud.google.com/chronicle/docs/ingestion/default-parsers/dell-switch)

Collect IBM Security Verify Access logs (https://cloud.google.com/chronicle/docs/ingestion/default-parsers/ibm-sva)

Collect McAfee Firewall Enterprise logs (https://cloud.google.com/chronicle/docs/ingestion/default-parsers/mcafee-esm)

Collect NetApp ONTAP logs (https://cloud.google.com/chronicle/docs/ingestion/default-parsers/netapp-ontap)

Collect Trend Micro Apex One logs (https://cloud.google.com/chronicle/docs/ingestion/default-parsers/trendmicro-apexone)

Collect Trend Micro Deep Security logs (https://cloud.google.com/chronicle/docs/ingestion/default-parsers/trendmicro-ds)

https://cloud.google.com/release-notes 224/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Collect Versa Networks Secure Access Service Edge (SASE) logs

(https://cloud.google.com/chronicle/docs/ingestion/default-parsers/versa-sase)

Collect VMware Networking and Security Virtualization (NSX) Manager logs

(https://cloud.google.com/chronicle/docs/ingestion/default-parsers/vmware-nsx)

Collect Zscaler Cloud Access Security Broker (CASB) alert logs

(https://cloud.google.com/chronicle/docs/ingestion/default-parsers/zscaler-casb)
Google SecOps SIEM

ANNOUNCEMENT The following parser documentation is now available:

Collect NGINX logs (https://cloud.google.com/chronicle/docs/ingestion/default-parsers/nginx)

Collect Proofpoint On-Demand logs (https://cloud.google.com/chronicle/docs/ingestion/default-parsers/proofpoint-od)

Collect Qualys asset context logs (https://cloud.google.com/chronicle/docs/ingestion/default-parsers/qualys-ac)

Collect Qualys Continuous Monitoring logs (https://cloud.google.com/chronicle/docs/ingestion/default-parsers/qualys-cm)

Collect Qualys Scan logs (https://cloud.google.com/chronicle/docs/ingestion/default-parsers/qualys-scan)

Collect Qualys Vulnerability Management logs (https://cloud.google.com/chronicle/docs/ingestion/default-parsers/qualys-vm)

Collect Qualys Virtual Scanner logs (https://cloud.google.com/chronicle/docs/ingestion/default-parsers/qualys-vs)

Collect ThreatConnect IOC logs (https://cloud.google.com/chronicle/docs/ingestion/default-parsers/threatconnect-ioc)

Collect Akamai DNS logs (https://cloud.google.com/chronicle/docs/ingestion/default-parsers/akamai-dns)

Collect Aruba switch logs (https://cloud.google.com/chronicle/docs/ingestion/default-parsers/aruba-switch)

https://cloud.google.com/release-notes 225/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Collect Bitdefender logs (https://cloud.google.com/chronicle/docs/ingestion/default-parsers/bitdefender)

Collect HashiCorp audit logs (https://cloud.google.com/chronicle/docs/ingestion/default-parsers/hashicorp)

Collect Microsoft SQL Server logs (https://cloud.google.com/chronicle/docs/ingestion/default-parsers/collect-microsoft-sql-logs)

Collect FireEye NX logs (https://cloud.google.com/chronicle/docs/ingestion/default-parsers/collect-fireeye-nx-logs)

Collect Illumio Core logs (https://cloud.google.com/chronicle/docs/ingestion/default-parsers/collect-illumio-core-logs)

Collect Microsoft Azure Key Vault logging logs

(https://cloud.google.com/chronicle/docs/ingestion/default-parsers/collect-azure-keyvault-audit-logs)

Collect BeyondTrust Remote Support logs (https://cloud.google.com/chronicle/docs/ingestion/default-parsers/beyondtrust-rs)

Collect BlueCat DDI logs (https://cloud.google.com/chronicle/docs/ingestion/default-parsers/bluecat-ddi)

Collect BMC Helix Discovery logs (https://cloud.google.com/chronicle/docs/ingestion/default-parsers/bmc-helix-discovery)

Collect Brocade ServerIron logs (https://cloud.google.com/chronicle/docs/ingestion/default-parsers/brocade-serverIron)

Collect Check Point firewall logs (https://cloud.google.com/chronicle/docs/ingestion/default-parsers/checkpoint-fw)

Collect CyberArk EPM logs (https://cloud.google.com/chronicle/docs/ingestion/default-parsers/cyberark-epm)

Collect CyberArk PAM logs (https://cloud.google.com/chronicle/docs/ingestion/default-parsers/cyberark-pam)

Collect Dell ECS logs (https://cloud.google.com/chronicle/docs/ingestion/default-parsers/dell-ecs)

Collect Dell switch logs (https://cloud.google.com/chronicle/docs/ingestion/default-parsers/dell-switch)

Collect IBM Security Verify Access logs (https://cloud.google.com/chronicle/docs/ingestion/default-parsers/ibm-sva)

https://cloud.google.com/release-notes 226/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Collect McAfee Firewall Enterprise logs (https://cloud.google.com/chronicle/docs/ingestion/default-parsers/mcafee-esm)

Collect NetApp ONTAP logs (https://cloud.google.com/chronicle/docs/ingestion/default-parsers/netapp-ontap)

Collect Trend Micro Apex One logs (https://cloud.google.com/chronicle/docs/ingestion/default-parsers/trendmicro-apexone)

Collect Trend Micro Deep Security logs (https://cloud.google.com/chronicle/docs/ingestion/default-parsers/trendmicro-ds)

Collect Versa Networks Secure Access Service Edge (SASE) logs

(https://cloud.google.com/chronicle/docs/ingestion/default-parsers/versa-sase)

Collect VMware Networking and Security Virtualization (NSX) Manager logs

(https://cloud.google.com/chronicle/docs/ingestion/default-parsers/vmware-nsx)

Collect Zscaler Cloud Access Security Broker (CASB) alert logs

(https://cloud.google.com/chronicle/docs/ingestion/default-parsers/zscaler-casb)
Looker

ANNOUNCEMENT Looker 25.2 is expected to include the following changes, features, and fixes:

Expected Looker (original) deployment start: Tuesday, February 18, 2025

Expected Looker (original) final deployment and download available: Thursday, February 27, 2025

Expected Looker (Google Cloud core) deployment start: Tuesday, February 18, 2025

Expected Looker (Google Cloud core) final deployment: Tuesday, March 4, 2025

BREAKING The Search Content Summaries API endpoint now returns more secure results when a closed system is enabled for an
instance. The target_user_id value must be a user who is visible to the user who is calling the endpoint, and the
target_group_id value must be a group that the user is a part of.

https://cloud.google.com/release-notes 227/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

BREAKING Looker now prevents developers from creating new models named system__activity.

FEATURE The Chart Config Editor now supports the median function in the formatters.select parameter.

FEATURE The manage_modelsets_restricted permission

(https://cloud.google.com/looker/docs/admin-panel-users-roles#manage_modelsets_restricted) is now generally available. This
permission lets users add or remove models from specified model sets.

FEATURE The manage_schedules permission (https://cloud.google.com/looker/docs/admin-panel-users-roles#manage_schedules) is now

generally available. This permission lets users reassign and delete schedules on the Schedules page for the models that
they have access to.

FEATURE Aggregate tables now support the publish_as_db_view

(https://cloud.google.com/looker/docs/reference/param-view-publish-as-db-view) parameter for database dialects that support PDT
stable database views
(https://cloud.google.com/looker/docs/reference/param-view-publish-as-db-view#dialect_support_for_the_pdt_stable_database_view).
When an aggregate table is configured with publish_as_db_view: yes, Looker creates a stable database view on your
database for the aggregate table to enable querying the table outside of Looker. NOTE: This item was added on March 4,
2025.

FIXED An issue has been fixed where downloading a dashboard as a PDF with multiple pages could cause some content to be
cut off. This feature now performs as expected.

FIXED An issue has been fixed where using a Snowflake or Postgres connection could trigger the following error message:
Driver cannot be initialized: can't modify frozen String. This feature now performs as expected.

FIXED An issue has been fixed where creating a visualization with no unpivoted dimensions could cause Looker to display a
vague error message for some chart types. Looker now informs the user that at least one unpivoted dimension is required
for the visualization, and this feature now performs as expected.

https://cloud.google.com/release-notes 228/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

FIXED An issue has been fixed where encoded embed domains could not be used with the Embed SDK. Looker can now decode
URLs in the embed_domain parameter, and this feature now performs as expected.

FIXED An issue has been fixed where the Marketplace auto-update and auto-install processes could cause other parts of Looker
to take longer to respond. This feature now performs as expected.

FIXED An issue has been fixed where searching terms with multiple words in the field picker would match each word separately.
The search now correctly matches multi-word phrases, and this feature now performs as expected.

FIXED An issue has been fixed where an invalid conditional formatting string could cause the Explore page to crash. This feature
now performs as expected.

FIXED An issue has been fixed where actions whose connection tests failed would continue to run excessive tests in the
background. This feature now performs as expected.

FIXED An issue has been fixed where Looker did not correctly apply theme text colors to axis labels on timeline visualizations.
This feature now performs as expected.

FIXED An issue has been fixed where setting a long external_group_id when creating an embed user caused Looker to display
a vague error. The recommended external_group_id length is now documented as 81 characters, and this feature now
performs as expected.

FIXED An issue has been fixed where navigating to a Look from another Look could cause incorrect System Activity records. This
feature now performs as expected.

FIXED An issue has been fixed where reordering columns in an Explore could cause hidden table calculations to be removed from
the table. This feature now performs as expected.

FIXED An issue has been fixed where adding multiple dashboard filters to the same date field could cause Looker to remove
filters from the dashboard. This feature now performs as expected.

https://cloud.google.com/release-notes 229/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

FIXED An issue has been fixed where tables could be cut off on dashboard PDFs that included multiple pages. This feature now
performs as expected.

FIXED An issue has been fixed where dashboard filters could prevent users from using commas to add multiple filter conditions.
This feature now performs as expected.

FIXED An issue has been fixed where certain custom visualization configurations could cause rendered PDF downloads to be
blank. This feature now performs as expected.

FIXED An issue has been fixed where the LookML Validator could surface outdated LookML errors that were related to
extensions. This feature now performs as expected.

FIXED An issue has been fixed where exploring from a merge query on an embedded dashboard could lead to a blank page. This
feature now performs as expected.

FIXED An issue has been fixed where embed users were unable to see certain shared folders. This feature now performs as
expected.

Security Command Center

FEATURE Cloud Infrastructure Entitlement Management (CIEM) (https://cloud.google.com/security-command-center/docs/ciem-overview)

has launched support for the following:

AWS Managed Microsoft AD and on-premises Active Directory identities. This feature alerts you to potential
misconfigurations in your on-premises Active Directory or AWS-managed Active Directory identities.

Account-level findings in AWS. This lets you set up AWS audit logs for individual AWS accounts—instead of
mandating logs across the entire AWS organization—and helps reduce your total cost of operations for CIEM in
Security Command Center Enterprise.

https://cloud.google.com/release-notes 230/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Service Extensions

FEATURE Service Extensions plugins support Go-compiled Wasm, in addition to Rust and C++. For more information, see Prepare the
plugin code (https://cloud.google.com/service-extensions/docs/prepare-plugin-code#go).

February 11, 2025

Apigee API hub

FEATURE IAM conditions for fine-grained access

API hub now integrates with IAM Conditions, enabling you to define and enforce granular, conditional attribute-based
access control for your API hub resources. For more information, see Add IAM conditions
(https://cloud.google.com/apigee/docs/apihub/add-iam-conditions).

CHANGE Enhanced onboarding experience

After provisioning your API hub instance in your Google Cloud project, you'll now see an updated Overview page. You can
also automatically attach your Apigee runtime projects right from this page. For more information, see Provision API hub in
the Cloud console (https://cloud.google.com/apigee/docs/apihub/provision).

CHANGE Auth support for Vertex AI extensions

API hub now supports the following authentication configurations for creating Vertex AI extensions:

API Key: Authenticate using API keys stored in Secret Manager.

HTTP Basic: Authenticate using credentials stored in Secret Manager.

https://cloud.google.com/release-notes 231/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

For more information, see Create a Vertex AI extension

(https://cloud.google.com/apigee/docs/apihub/vertex-extensions#createextension).

CHANGE Resource ID length limits increased

The maximum allowed length for API hub resource IDs has been increased. The new limits are as follows:

APIs: API unique IDs can now be up to 500 characters long.

Versions: Version unique IDs can now be up to 700 characters long.

Specs: Specification unique IDs can now be up to 1000 characters long.

Apigee UI

CHANGE On February 11, 2025, we released an updated version of the Apigee UI.

FIXED
Bug ID Description

356780408Fixed issue preventing users from saving a proxy revision

Resolved issue in the proxy editor where navigating away from a proxy file containing an error would not properly clear the error
state, requiring users to reload the page to save the edited proxy.

Cloud Healthcare API

ANNOUNCEMENT A new release is available. This release may include some or all of the following: general performance improvements, bug
fixes, and updates to the API reference documentation.

Cloud Run functions

https://cloud.google.com/release-notes 232/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

FEATURE Cloud Run functions created with the Cloud Functions (v2) API (cloudfunctions.googleapis.com) can now be detached
so that they can only be managed through the Cloud Run Admin API (run.googleapis.com). When the detach operation
completes, your function will retain its cloudfunctions.net URLs and triggers, and can only be managed using the Cloud
Run Admin API. Note that the detach operation is irreversible. For more information see Manage functions
(https://cloud.google.com/functions/docs/managing).

Cloud SQL for MySQL

FEATURE Cloud SQL for MySQL vector search is now generally available. After you store vector embeddings in a table, you can
perform K-nearest neighbor (KNN) searches against your vector dataset. You can also add a vector search index to
perform approximate nearest neighbor (ANN) searches.

For more information, see Vector search (https://cloud.google.com/sql/docs/mysql/vector-search).

FEATURE You can now use a custom DNS name to connect to your Cloud SQL instances by adding a custom subject alternative
name (SAN) to your Cloud SQL instances. This feature is available for instances that are configured with Customer
Managed CAS CA.. For more information, see Create instances (https://cloud.google.com/sql/docs/mysql/create-instance).

You can also add, modify, and remove a custom SAN for existing Cloud SQL instances. For more information, see Edit
instances (https://cloud.google.com/sql/docs/mysql/edit-instance).

This feature is available in Preview (https://cloud.google.com/products#product-launch-stages).

Cloud SQL for PostgreSQL

FEATURE You can now use a custom DNS name to connect to your Cloud SQL instances by adding a custom subject alternative
name (SAN) to your Cloud SQL instances. This feature is available for instances that are configured with Customer
Managed CAS CA.. For more information, see Create instances (https://cloud.google.com/sql/docs/postgres/create-instance).

https://cloud.google.com/release-notes 233/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

You can also add, modify, and remove a custom SAN for existing Cloud SQL instances. For more information, see Edit
instances (https://cloud.google.com/sql/docs/postgres/edit-instance).

This feature is available in Preview (https://cloud.google.com/products#product-launch-stages).

Cloud SQL for SQL Server

FEATURE You can now use a custom DNS name to connect to your Cloud SQL instances by adding a custom subject alternative
name (SAN) to your Cloud SQL instances. This feature is available for instances that are configured with Customer
Managed CAS CA.. For more information, see Create instances (https://cloud.google.com/sql/docs/sqlserver/create-instance).

You can also add, modify, and remove a custom SAN for existing Cloud SQL instances. For more information, see Edit
instances (https://cloud.google.com/sql/docs/sqlserver/edit-instance).

This feature is available in Preview (https://cloud.google.com/products#product-launch-stages).

Dataplex

FEATURE Data lineage for Dataproc Hive jobs is available in preview (https://cloud.google.com/products#product-launch-stages). For more
information, see Enable Hive data lineage in Dataproc (https://cloud.google.com/dataproc/docs/guides/hive-lineage).

Dataproc

ANNOUNCEMENT Data Lineage for Dataproc Hive (https://cloud.google.com/dataproc/docs/guides/hive-lineage) is now in Public Preview, which can
be enabled using the Hive Lineage initialization action
(https://github.com/GoogleCloudDataproc/initialization-actions/tree/master/hive-lineage).

Developer Connect

CHANGE Developer Connect gcloud commands are now Generally Available (GA)
(https://cloud.google.com/products/#product-launch-stages).

https://cloud.google.com/release-notes 234/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

FEATURE Developer Connect now supports connectivity with Bitbucket Cloud and Bitbucket Data Center. These features are
Generally Available (GA) (https://cloud.google.com/products/#product-launch-stages). Learn how to get started at Connect to
Bitbucket Cloud (https://cloud.google.com/developer-connect/docs/connect-bitbucket-cloud) and Connect to Bitbucket Data Center
(https://cloud.google.com/developer-connect/docs/connect-bitbucket-dc).

Generative AI on Vertex AI

ANNOUNCEMENT The Llama 3.3 70B (https://console.cloud.google.com/vertex-ai/publishers/meta/model-garden/llama-3.3-70b-instruct-maas) model

that is managed on Vertex AI is now in Preview (https://cloud.google.com/products?e=13802955&hl=en#product-launch-stages).

Google Kubernetes Engine

CHANGE (2025-R06) Version updates

GKE cluster versions have been updated.

New versions available for upgrades and new clusters.

The following Kubernetes versions are now available for new clusters and for opt-in control plane upgrades and node
upgrades for existing clusters. For more information on versioning and upgrades, see GKE versioning and support
(https://cloud.google.com/kubernetes-engine/versioning) and Upgrades (https://cloud.google.com/kubernetes-engine/upgrades).

Rapid channelRegular channel… Stable channel… Extended channel… No channel (#no-channel)

(#rapid-channel)

star Note: Your clusters might not have these versions available. Rollouts are already in progress when we publish the release notes, and
can take multiple days to complete across all Google Cloud zones.

https://cloud.google.com/release-notes 235/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Version 1.32.1-gke.1200003
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#v1321) is now the default
version for cluster creation in the Rapid channel.

The following versions are now available in the Rapid channel:

1.29.13-gke.1169000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12913)

1.30.9-gke.1201000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1309)

1.31.5-gke.1233000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1315)

1.32.1-gke.1489001
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#v1321)

The following versions are no longer available in the Rapid channel:

1.28.15-gke.1641000

1.28.15-gke.1673000

1.28.15-gke.1720000

1.29.13-gke.1006000

1.30.9-gke.1009000

1.31.5-gke.1023000

1.32.0-gke.1448000

https://cloud.google.com/release-notes 236/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Auto-upgrade targets are now available for the following minor versions:

Control planes and nodes with auto-upgrade enabled in the Rapid channel will be upgraded from version
1.28 to version 1.29.13-gke.1038000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12913) with this
release.

Control planes and nodes with auto-upgrade enabled in the Rapid channel will be upgraded from version
1.29 to version 1.30.9-gke.1046000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1309) with this
release.

Control planes and nodes with auto-upgrade enabled in the Rapid channel will be upgraded from version
1.30 to version 1.31.5-gke.1068000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1315) with this
release.

The following patch-only version auto-upgrade targets are now available for clusters with maintenance
exclusions
(https://cloud.google.com/kubernetes-engine/docs/concepts/maintenance-windows-and-exclusions#exclusions) or other
factors preventing minor version upgrades:

Control planes and nodes with auto-upgrade enabled in the Rapid channel will be upgraded from version
1.29 to version 1.29.13-gke.1038000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12913) with this
release.

Control planes and nodes with auto-upgrade enabled in the Rapid channel will be upgraded from version
1.30 to version 1.30.9-gke.1046000

https://cloud.google.com/release-notes 237/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1309) with this

release.

Control planes and nodes with auto-upgrade enabled in the Rapid channel will be upgraded from version
1.31 to version 1.31.5-gke.1068000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1315) with this
release.

CHANGE (2025-R06) Version updates

star Note: Your clusters might not have these versions available. Rollouts are already in progress when we publish the release notes, and can
take multiple days to complete across all Google Cloud zones.

Version 1.32.1-gke.1200003
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#v1321) is now the default version
for cluster creation in the Rapid channel.

The following versions are now available in the Rapid channel:

1.29.13-gke.1169000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12913)

1.30.9-gke.1201000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1309)

1.31.5-gke.1233000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1315)

1.32.1-gke.1489001 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#v1321)

The following versions are no longer available in the Rapid channel:

https://cloud.google.com/release-notes 238/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

1.28.15-gke.1641000

1.28.15-gke.1673000

1.28.15-gke.1720000

1.29.13-gke.1006000

1.30.9-gke.1009000

1.31.5-gke.1023000

1.32.0-gke.1448000

Auto-upgrade targets are now available for the following minor versions:

Control planes and nodes with auto-upgrade enabled in the Rapid channel will be upgraded from version 1.28 to
version 1.29.13-gke.1038000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12913) with this release.

Control planes and nodes with auto-upgrade enabled in the Rapid channel will be upgraded from version 1.29 to
version 1.30.9-gke.1046000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1309) with this release.

Control planes and nodes with auto-upgrade enabled in the Rapid channel will be upgraded from version 1.30 to
version 1.31.5-gke.1068000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1315) with this release.

The following patch-only version auto-upgrade targets are now available for clusters with maintenance exclusions
(https://cloud.google.com/kubernetes-engine/docs/concepts/maintenance-windows-and-exclusions#exclusions) or other factors
preventing minor version upgrades:

https://cloud.google.com/release-notes 239/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Control planes and nodes with auto-upgrade enabled in the Rapid channel will be upgraded from version 1.29 to
version 1.29.13-gke.1038000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12913) with this release.

Control planes and nodes with auto-upgrade enabled in the Rapid channel will be upgraded from version 1.30 to
version 1.30.9-gke.1046000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1309) with this release.

Control planes and nodes with auto-upgrade enabled in the Rapid channel will be upgraded from version 1.31 to
version 1.31.5-gke.1068000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1315) with this release.

CHANGE (2025-R06) Version updates

star Note: Your clusters might not have these versions available. Rollouts are already in progress when we publish the release notes, and can
take multiple days to complete across all Google Cloud zones.

Version 1.31.5-gke.1023000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1315) is now the default version
for cluster creation in the Regular channel.

The following versions are now available in the Regular channel:

1.29.13-gke.1038000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12913)

1.30.9-gke.1046000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1309)

1.31.5-gke.1068000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1315)

https://cloud.google.com/release-notes 240/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

1.32.1-gke.1200003 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#v1321)

The following versions are no longer available in the Regular channel:

1.28.15-gke.1612000

1.28.15-gke.1641000

1.29.12-gke.1270000

1.30.8-gke.1261000

1.31.4-gke.1372000

Auto-upgrade targets are now available for the following minor versions:

Control planes and nodes with auto-upgrade enabled in the Regular channel will be upgraded from version 1.28
to version 1.29.13-gke.1006000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12913) with this release.

Control planes and nodes with auto-upgrade enabled in the Regular channel will be upgraded from version 1.29
to version 1.30.9-gke.1009000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1309) with this release.

The following patch-only version auto-upgrade targets are now available for clusters with maintenance exclusions
(https://cloud.google.com/kubernetes-engine/docs/concepts/maintenance-windows-and-exclusions#exclusions) or other factors
preventing minor version upgrades:

Control planes and nodes with auto-upgrade enabled in the Regular channel will be upgraded from version 1.29
to version 1.29.13-gke.1006000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12913) with this release.

https://cloud.google.com/release-notes 241/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Control planes and nodes with auto-upgrade enabled in the Regular channel will be upgraded from version 1.30
to version 1.30.9-gke.1009000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1309) with this release.

Control planes and nodes with auto-upgrade enabled in the Regular channel will be upgraded from version 1.31
to version 1.31.5-gke.1023000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1315) with this release.

Control planes and nodes with auto-upgrade enabled in the Regular channel will be upgraded from version 1.32
to version 1.32.1-gke.1200003
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#v1321) with this release.

CHANGE (2025-R06) Version updates

star Note: Your clusters might not have these versions available. Rollouts are already in progress when we publish the release notes, and can
take multiple days to complete across all Google Cloud zones.

Version 1.30.8-gke.1162001
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1308) is now the default version
for cluster creation in the Stable channel.

The following versions are now available in the Stable channel:

1.29.12-gke.1270000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12912)

1.30.8-gke.1261000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1308)

1.31.4-gke.1372000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1314)

https://cloud.google.com/release-notes 242/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

The following versions are no longer available in the Stable channel:

1.28.15-gke.1480000

1.28.15-gke.1503000

1.29.12-gke.1120001

1.30.8-gke.1128001

1.30.8-gke.1162000

1.31.4-gke.1183000

Auto-upgrade targets are now available for the following minor versions:

Control planes and nodes with auto-upgrade enabled in the Stable channel will be upgraded from version 1.28
to version 1.29.12-gke.1143001
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12912) with this release.

Control planes and nodes with auto-upgrade enabled in the Stable channel will be upgraded from version 1.29
to version 1.30.8-gke.1162001
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1308) with this release.

The following patch-only version auto-upgrade targets are now available for clusters with maintenance exclusions
(https://cloud.google.com/kubernetes-engine/docs/concepts/maintenance-windows-and-exclusions#exclusions) or other factors
preventing minor version upgrades:

Control planes and nodes with auto-upgrade enabled in the Stable channel will be upgraded from version 1.29
to version 1.29.12-gke.1143001
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12912) with this release.

https://cloud.google.com/release-notes 243/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Control planes and nodes with auto-upgrade enabled in the Stable channel will be upgraded from version 1.30
to version 1.30.8-gke.1162001
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1308) with this release.

Control planes and nodes with auto-upgrade enabled in the Stable channel will be upgraded from version 1.31
to version 1.31.4-gke.1256000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1314) with this release.

CHANGE (2025-R06) Version updates

star Note: Your clusters might not have these versions available. Rollouts are already in progress when we publish the release notes, and can
take multiple days to complete across all Google Cloud zones.

Version 1.31.5-gke.1023000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1315) is now the default version
for cluster creation in the Extended channel.

The following versions are now available in the Extended channel:

1.27.16-gke.2296000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.27.md#v12716)

1.27.16-gke.2387000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.27.md#v12716)

1.28.15-gke.1781000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.28.md#v12815)

https://cloud.google.com/release-notes 244/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

1.29.13-gke.1038000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12913)

1.30.9-gke.1046000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1309)

1.31.5-gke.1068000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1315)

1.32.1-gke.1200003 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#v1321)

The following versions are no longer available in the Extended channel:

1.27.16-gke.2246000

1.27.16-gke.2342000

1.29.12-gke.1270000

1.30.8-gke.1261000

1.31.4-gke.1372000

The following patch-only version auto-upgrade targets are now available for clusters with maintenance exclusions
(https://cloud.google.com/kubernetes-engine/docs/concepts/maintenance-windows-and-exclusions#exclusions) or other factors
preventing minor version upgrades:

Control planes and nodes with auto-upgrade enabled in the Extended channel will be upgraded from version
1.27 to version 1.27.16-gke.2270000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.27.md#v12716) with this release.

Control planes and nodes with auto-upgrade enabled in the Extended channel will be upgraded from version
1.29 to version 1.29.13-gke.1006000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12913) with this release.

https://cloud.google.com/release-notes 245/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Control planes and nodes with auto-upgrade enabled in the Extended channel will be upgraded from version
1.30 to version 1.30.9-gke.1009000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1309) with this release.

Control planes and nodes with auto-upgrade enabled in the Extended channel will be upgraded from version
1.31 to version 1.31.5-gke.1023000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1315) with this release.

Control planes and nodes with auto-upgrade enabled in the Extended channel will be upgraded from version
1.32 to version 1.32.1-gke.1200003
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#v1321) with this release.

CHANGE (2025-R06) Version updates

star Note: Your clusters might not have these versions available. Rollouts are already in progress when we publish the release notes, and can
take multiple days to complete across all Google Cloud zones.

Version 1.31.5-gke.1023000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1315) is now the default version
for cluster creation.

The following versions are now available:

1.29.13-gke.1169000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12913)

1.30.9-gke.1201000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1309)

1.31.5-gke.1233000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1315)

https://cloud.google.com/release-notes 246/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

1.32.1-gke.1200003 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#v1321)

1.32.1-gke.1357001 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#v1321)

1.32.1-gke.1489001 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#v1321)

The following node versions are now available:

1.27.16-gke.2387000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.27.md#v12716)

1.28.15-gke.1781000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.28.md#v12815)

1.29.13-gke.1169000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12913)

1.30.9-gke.1201000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1309)

1.31.5-gke.1233000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1315)

1.32.1-gke.1200003 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#v1321)

1.32.1-gke.1357001 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#v1321)

1.32.1-gke.1489001 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#v1321)

The following versions are no longer available:

1.28.15-gke.1480000

1.28.15-gke.1503000

1.28.15-gke.1612000

https://cloud.google.com/release-notes 247/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

1.28.15-gke.1641000

1.28.15-gke.1673000

1.28.15-gke.1720000

1.29.12-gke.1120001

1.30.8-gke.1051000

1.30.8-gke.1162000

1.31.4-gke.1183000

Auto-upgrade targets are now available for the following minor versions:

Control planes and nodes with auto-upgrade enabled will be upgraded from version 1.28 to version 1.29.13-
gke.1006000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12913) with
this release.

Control planes and nodes with auto-upgrade enabled will be upgraded from version 1.29 to version 1.30.8-
gke.1162001 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1308) with
this release.

The following patch-only version auto-upgrade targets are now available for clusters with maintenance exclusions
(https://cloud.google.com/kubernetes-engine/docs/concepts/maintenance-windows-and-exclusions#exclusions) or other factors
preventing minor version upgrades:

Control planes and nodes with auto-upgrade enabled will be upgraded from version 1.29 to version 1.29.13-
gke.1006000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12913) with
this release.

https://cloud.google.com/release-notes 248/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Control planes and nodes with auto-upgrade enabled will be upgraded from version 1.30 to version 1.30.8-
gke.1162001 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1308) with
this release.

Control planes and nodes with auto-upgrade enabled will be upgraded from version 1.31 to version 1.31.5-
gke.1023000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1315) with
this release.

Control planes and nodes with auto-upgrade enabled will be upgraded from version 1.32 to version 1.32.1-
gke.1200003 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#v1321) with
this release.
Google SecOps

FIXED The following is a correction to the release note published on December 22, 2024
(https://cloud.google.com/chronicle/docs/release-notes#December_22_2024).

Google SecOps has updated the list of supported default parsers. Parsers are updated gradually, so it might take one to
four days before you see the changes reflected in your region.

The following supported default parsers have changed. Each parser is listed by product name and log_type value, if
applicable. This list now includes both released default parsers and pending parser updates.

Absolute Mobile Device Management (ABSOLUTE)

Atlassian Cloud Admin Audit (ATLASSIAN_AUDIT)

AWS VPC Flow (AWS_VPC_FLOW)

Azure AD (AZURE_AD)

Azure Application Gateway (AZURE_GATEWAY)

https://cloud.google.com/release-notes 249/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Azure SQL (AZURE_SQL)

Azure Storage Audit (AZURE_STORAGE_AUDIT)

Blue Coat Proxy (BLUECOAT_WEBPROXY)

Check Point Harmony (CHECKPOINT_HARMONY)

Cisco ASA (CISCO_ASA_FIREWALL)

Cisco Firepower NGFW (CISCO_FIREPOWER_FIREWALL)

Cisco Meraki (CISCO_MERAKI)

Cisco Router (CISCO_ROUTER)

Cisco Umbrella SWG DLP (CISCO_UMBRELLA_SWG_DLP)

Cisco VPN (CISCO_VPN)

Citrix Netscaler (CITRIX_NETSCALER)

Claroty Continuous Threat Detection (CLAROTY_CTD)

Cloud Audit Logs (N/A)

Cloud DNS (N/A)

Code42 Incydr (CODE42_INCYDR)

Colinet Trotta GAUS SEGUROS (CT_GAUS_SEGUROS)

CrowdStrike Falcon (CS_EDR)

Delinea Distributed Engine (DELINEA_DISTRIBUTED_ENGINE)

https://cloud.google.com/release-notes 250/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Druva Backup (DRUVA_BACKUP)

Duo Administrator Logs (DUO_ADMIN)

Elastic Audit Beats (ELASTIC_AUDITBEAT)

F5 BIGIP LTM (F5_BIGIP_LTM)

Forcepoint NGFW (FORCEPOINT_FIREWALL)

FortiGate (FORTINET_FIREWALL)

GitHub (GITHUB)

Google Cloud Identity Context (CLOUD_IDENTITY_CONTEXT)

Guardicore Centra (GUARDICORE_CENTRA)

HPE Aruba Networking Central (ARUBA_CENTRAL)

Imperva Advanced Bot Protection (IMPERVA_ABP)

Kubernetes Audit Azure (KUBERNETES_AUDIT_AZURE)

Linux Auditing System (AuditD) (AUDITD)

Maria Database (MARIA_DB)

Microsoft Defender for Endpoint (MICROSOFT_DEFENDER_ENDPOINT)

Opnsense (OPNSENSE)

Oracle NetSuite (ORACLE_NETSUITE)

Palo Alto Panorama (PAN_PANORAMA)

https://cloud.google.com/release-notes 251/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Palo Alto Prisma Cloud Alert payload (PAN_PRISMA_CA)

Ping One (PING_ONE)

Proofpoint Observeit (OBSERVEIT)

Proofpoint Threat Response (PROOFPOINT_TRAP)

QNAP Systems NAS (QNAP_NAS)

Reserved LogType2 (RESERVED_LOG_TYPE_2)

Salesforce (SALESFORCE)

SAP Sybase Adaptive Server Enterprise Database (SAP_ASE)

Sentinelone Alerts (SENTINELONE_ALERT)

Snort (SNORT_IDS)

Solaris system (SOLARIS_SYSTEM)

Sourcefire (SOURCEFIRE_IDS)

Suricata IDS (SURICATA_IDS)

Symantec DLP (SYMANTEC_DLP)

Symantec Event export (SYMANTEC_EVENT_EXPORT)

Trend Micro Vision One (TRENDMICRO_VISION_ONE)

TrendMicro Apex Central (TRENDMICRO_APEX_CENTRAL)

Twingate (TWINGATE)

https://cloud.google.com/release-notes 252/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Wazuh (WAZUH)

Windows DHCP (WINDOWS_DHCP)

Windows Event (WINEVTLOG)

Windows Network Policy Server (WINDOWS_NET_POLICY_SERVER)

Windows Sysmon (WINDOWS_SYSMON)

The following log types were added without a default parser. Each parser is listed by product name and log_type value, if
applicable.

Addigy MDM (ADDIGY_MDM)

Akamai DataStream 2 (AKAMAI_DATASTREAM_2)

Anzenna (ANZENNA)

AWS ECS Metrics (AWS_ECS_METRICS)

Azure Log Analytics Workspace (AZURE_LOG_ANALYTICS_WORKSPACE)

Blockdaemon API (BLOCKDAEMON_API)

Chronicle Feed (CHRONICLE_FEED)

Claroty xDome Secure Access (CLAROTY_XDOME_SECURE_ACCESS)

Cloudflare Spectrum (CLOUDFLARE_SPECTRUM)

Cloudsek Alerts (CLOUDSEK_ALERTS)

CloudWaves Sensato Nightingale Honeypot (SENSATO_HONEYPOT)

https://cloud.google.com/release-notes 253/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Docker Hub Activity (DOCKER_HUB_ACTIVITY)

Fortinet FortiDDoS (FORTINET_FORTIDDOS)

Honeywell Cyber Insights (HONEYWELL_CYBERINSIGHTS)

IPFire (IPFIRE)

Jamf Connect (JAMF_CONNECT)

KnowBe4 Audit Log (KNOWBE4)

LogicGate (LOGICGATE)

ManageEngine NCM (MANAGEENGINE_NCM)

Microsoft Dotnet Log Files (MICROSOFT_DOTNET)

Nessus Network Monitor (NESSUS_NETWORK_MONITOR)

Netography Fusion (NETOGRAPHY_FUSION)

Netwrix StealthAudit (NETWRIX_STEALTHAUDIT)

Oomnitza (OOMNITZA)

Open CTI Platform (OPENCTI)

Oracle EBS (ORACLE_EBS)

Oracle Zero Data Loss Recovery Appliance (ORACLE_ZDLRA)

PhishAlarm (PHISHALARM)

Savvy Security (SAVVY_SECURITY)

https://cloud.google.com/release-notes 254/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Symantec Security Analytics (SYMANTEC_SA)

Venafi ZTPKI (VENAFI_ZTPKI)

For a list of supported log types and details about default parser changes, see Supported log types and default parsers
(https://cloud.google.com/chronicle/docs/ingestion/parser-list/supported-default-parsers).
Google SecOps SIEM

FIXED The following is a correction to the release note published on December 22, 2024
(https://cloud.google.com/chronicle/docs/release-notes#December_22_2024).

Google SecOps has updated the list of supported default parsers. Parsers are updated gradually, so it might take one to
four days before you see the changes reflected in your region.

The following supported default parsers have changed. Each parser is listed by product name and log_type value, if
applicable. This list now includes both released default parsers and pending parser updates.

Absolute Mobile Device Management (ABSOLUTE)

Atlassian Cloud Admin Audit (ATLASSIAN_AUDIT)

AWS VPC Flow (AWS_VPC_FLOW)

Azure AD (AZURE_AD)

Azure Application Gateway (AZURE_GATEWAY)

Azure SQL (AZURE_SQL)

Azure Storage Audit (AZURE_STORAGE_AUDIT)

Blue Coat Proxy (BLUECOAT_WEBPROXY)

https://cloud.google.com/release-notes 255/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Check Point Harmony (CHECKPOINT_HARMONY)

Cisco ASA (CISCO_ASA_FIREWALL)

Cisco Firepower NGFW (CISCO_FIREPOWER_FIREWALL)

Cisco Meraki (CISCO_MERAKI)

Cisco Router (CISCO_ROUTER)

Cisco Umbrella SWG DLP (CISCO_UMBRELLA_SWG_DLP)

Cisco VPN (CISCO_VPN)

Citrix Netscaler (CITRIX_NETSCALER)

Claroty Continuous Threat Detection (CLAROTY_CTD)

Cloud Audit Logs (N/A)

Cloud DNS (N/A)

Code42 Incydr (CODE42_INCYDR)

Colinet Trotta GAUS SEGUROS (CT_GAUS_SEGUROS)

CrowdStrike Falcon (CS_EDR)

Delinea Distributed Engine (DELINEA_DISTRIBUTED_ENGINE)

Druva Backup (DRUVA_BACKUP)

Duo Administrator Logs (DUO_ADMIN)

Elastic Audit Beats (ELASTIC_AUDITBEAT)

https://cloud.google.com/release-notes 256/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

F5 BIGIP LTM (F5_BIGIP_LTM)

Forcepoint NGFW (FORCEPOINT_FIREWALL)

FortiGate (FORTINET_FIREWALL)

GitHub (GITHUB)

Google Cloud Identity Context (CLOUD_IDENTITY_CONTEXT)

Guardicore Centra (GUARDICORE_CENTRA)

HPE Aruba Networking Central (ARUBA_CENTRAL)

Imperva Advanced Bot Protection (IMPERVA_ABP)

Kubernetes Audit Azure (KUBERNETES_AUDIT_AZURE)

Linux Auditing System (AuditD) (AUDITD)

Maria Database (MARIA_DB)

Microsoft Defender for Endpoint (MICROSOFT_DEFENDER_ENDPOINT)

Opnsense (OPNSENSE)

Oracle NetSuite (ORACLE_NETSUITE)

Palo Alto Panorama (PAN_PANORAMA)

Palo Alto Prisma Cloud Alert payload (PAN_PRISMA_CA)

Ping One (PING_ONE)

Proofpoint Observeit (OBSERVEIT)

https://cloud.google.com/release-notes 257/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Proofpoint Threat Response (PROOFPOINT_TRAP)

QNAP Systems NAS (QNAP_NAS)

Reserved LogType2 (RESERVED_LOG_TYPE_2)

Salesforce (SALESFORCE)

SAP Sybase Adaptive Server Enterprise Database (SAP_ASE)

Sentinelone Alerts (SENTINELONE_ALERT)

Snort (SNORT_IDS)

Solaris system (SOLARIS_SYSTEM)

Sourcefire (SOURCEFIRE_IDS)

Suricata IDS (SURICATA_IDS)

Symantec DLP (SYMANTEC_DLP)

Symantec Event export (SYMANTEC_EVENT_EXPORT)

Trend Micro Vision One (TRENDMICRO_VISION_ONE)

TrendMicro Apex Central (TRENDMICRO_APEX_CENTRAL)

Twingate (TWINGATE)

Wazuh (WAZUH)

Windows DHCP (WINDOWS_DHCP)

Windows Event (WINEVTLOG)

https://cloud.google.com/release-notes 258/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Windows Network Policy Server (WINDOWS_NET_POLICY_SERVER)

Windows Sysmon (WINDOWS_SYSMON)

The following log types were added without a default parser. Each parser is listed by product name and log_type value, if
applicable.

Addigy MDM (ADDIGY_MDM)

Akamai DataStream 2 (AKAMAI_DATASTREAM_2)

Anzenna (ANZENNA)

AWS ECS Metrics (AWS_ECS_METRICS)

Azure Log Analytics Workspace (AZURE_LOG_ANALYTICS_WORKSPACE)

Blockdaemon API (BLOCKDAEMON_API)

Chronicle Feed (CHRONICLE_FEED)

Claroty xDome Secure Access (CLAROTY_XDOME_SECURE_ACCESS)

Cloudflare Spectrum (CLOUDFLARE_SPECTRUM)

Cloudsek Alerts (CLOUDSEK_ALERTS)

CloudWaves Sensato Nightingale Honeypot (SENSATO_HONEYPOT)

Docker Hub Activity (DOCKER_HUB_ACTIVITY)

Fortinet FortiDDoS (FORTINET_FORTIDDOS)

Honeywell Cyber Insights (HONEYWELL_CYBERINSIGHTS)

https://cloud.google.com/release-notes 259/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

IPFire (IPFIRE)

Jamf Connect (JAMF_CONNECT)

KnowBe4 Audit Log (KNOWBE4)

LogicGate (LOGICGATE)

ManageEngine NCM (MANAGEENGINE_NCM)

Microsoft Dotnet Log Files (MICROSOFT_DOTNET)

Nessus Network Monitor (NESSUS_NETWORK_MONITOR)

Netography Fusion (NETOGRAPHY_FUSION)

Netwrix StealthAudit (NETWRIX_STEALTHAUDIT)

Oomnitza (OOMNITZA)

Open CTI Platform (OPENCTI)

Oracle EBS (ORACLE_EBS)

Oracle Zero Data Loss Recovery Appliance (ORACLE_ZDLRA)

PhishAlarm (PHISHALARM)

Savvy Security (SAVVY_SECURITY)

Symantec Security Analytics (SYMANTEC_SA)

Venafi ZTPKI (VENAFI_ZTPKI)

https://cloud.google.com/release-notes 260/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

For a list of supported log types and details about default parser changes, see Supported log types and default parsers
(https://cloud.google.com/chronicle/docs/ingestion/parser-list/supported-default-parsers).
Organization Policy

FEATURE Custom organization policies are now generally available for Spanner. For more information, see Add a custom
organization policy (https://cloud.google.com/spanner/docs/spanner-custom-constraints).

FEATURE Custom organization policies are now generally available for Identity-Aware Proxy. For more information, see Use custom
organization policies (https://cloud.google.com/iap/docs/custom-org-policies).

FEATURE Custom organization policies are now generally available for Developer Connect. For more information, see Create custom
organization policies (https://cloud.google.com/developer-connect/docs/custom-constraints).

FEATURE Custom organization policies are now generally available for Dataproc Serverless. For more information, see Use custom
constraints (https://cloud.google.com/dataproc-serverless/docs/guides/dataproc-serverless-custom-constraints).

FEATURE Custom organization policies are now generally available for Cloud DNS. For more information, see Create custom
organization policy constraints (https://cloud.google.com/dns/docs/create-custom-constraints).

Resource Manager

FEATURE Custom organization policies are now generally available for Spanner. For more information, see Add a custom
organization policy (https://cloud.google.com/spanner/docs/spanner-custom-constraints).

FEATURE Custom organization policies are now generally available for Identity-Aware Proxy. For more information, see Use custom
organization policies (https://cloud.google.com/iap/docs/custom-org-policies).

FEATURE Custom organization policies are now generally available for Developer Connect. For more information, see Create custom
organization policies (https://cloud.google.com/developer-connect/docs/custom-constraints).

https://cloud.google.com/release-notes 261/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

FEATURE Custom organization policies are now generally available for Dataproc Serverless. For more information, see Use custom
constraints (https://cloud.google.com/dataproc-serverless/docs/guides/dataproc-serverless-custom-constraints).

FEATURE Custom organization policies are now generally available for Cloud DNS. For more information, see Create custom
organization policy constraints (https://cloud.google.com/dns/docs/create-custom-constraints).

Sensitive Data Protection

FEATURE The JAPAN_CORPORATE_NUMBER infoType detector is available in all regions. For more information about all built-in
infoTypes, see InfoType detector reference (https://cloud.google.com/dlp/docs/infotypes-reference).

Spanner

FEATURE Managed autoscaler (https://cloud.google.com/spanner/docs/managed-autoscaler) is Generally Available.

Managed autoscaler now also supports the ability to scale read-only replicas independently from read-write replicas. By
setting the compute capacity limits and CPU utilization targets, you can configure the managed autoscaler for all replicas
of an instance or independently scale read-only replicas. For more information, see Asymmetric read-only autoscaling
(https://cloud.google.com/spanner/docs/managed-autoscaler#asymmetric-read-only-autoscaling).

February 10, 2025

BigQuery

LIBRARIES A weekly digest of client library updates from across the Cloud SDK (https://cloud.google.com/sdk).

Go
(#go)

https://cloud.google.com/release-notes 262/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Changes for bigquery/storage/apiv1beta1

(https://github.com/googleapis/google-cloud-go/tree/main/bigquery/storage/apiv1beta1)

1.66.2 (https://github.com/googleapis/google-cloud-go/compare/bigquery/v1.66.1...bigquery/v1.66.2) (2025-02-04)

Bug Fixes

bigquery: Broken github.com/envoyproxy/go-control-plane/envoy dep (#11556

(https://github.com/googleapis/google-cloud-go/issues/11556)) (e70d63b
(https://github.com/googleapis/google-cloud-go/commit/e70d63bbc267c3b166bf264670b8b282a3651cc5)), refs #11542
(https://github.com/googleapis/google-cloud-go/issues/11542)

1.66.1 (https://github.com/googleapis/google-cloud-go/compare/bigquery/v1.66.0...bigquery/v1.66.1) (2025-02-03)

Bug Fixes

bigquery: Move MaxStaleness field to table level (#10066

(https://github.com/googleapis/google-cloud-go/issues/10066)) (164492d
(https://github.com/googleapis/google-cloud-go/commit/164492d749ef0eeaf03a93d94b4a2c6c407eb4d6))

FEATURE BigQuery data preparation provides context-aware join operation recommendations from Gemini
(https://cloud.google.com/bigquery/docs/data-prep-get-suggestions#add-join). Data preparation is available in Preview
(https://cloud.google.com/products#product-launch-stages).

Bigtable

LIBRARIES A weekly digest of client library updates from across the Cloud SDK (https://cloud.google.com/sdk).

https://cloud.google.com/release-notes 263/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Java

Changes for google-cloud-bigtable (https://github.com/googleapis/java-bigtable)

2.51.2 (https://github.com/googleapis/java-bigtable/compare/v2.51.1...v2.51.2) (2025-02-03)

Bug Fixes

Add known conformance test failures (#2474 (https://github.com/googleapis/java-bigtable/issues/2474)) (15488fe

(https://github.com/googleapis/java-bigtable/commit/15488fe6cfe05e84c4b6d65565150ee7277a60e7))

Dependencies

Update shared dependencies (#2473 (https://github.com/googleapis/java-bigtable/issues/2473)) (4d6d419

(https://github.com/googleapis/java-bigtable/commit/4d6d41988c8e4b92b01851ab7ab52183254e8798))

Cloud Asset Inventory

FEATURE The following resource types are now publicly available through the ExportAssets
(https://cloud.google.com/asset-inventory/docs/reference/rest/v1/TopLevel/exportAssets), ListAssets
(https://cloud.google.com/asset-inventory/docs/listing-assets), BatchGetAssetsHistory
(https://cloud.google.com/asset-inventory/docs/reference/rest/v1/TopLevel/batchGetAssetsHistory), QueryAssets
(https://cloud.google.com/asset-inventory/docs/reference/rest/v1/TopLevel/queryAssets), Feed
(https://cloud.google.com/asset-inventory/docs/reference/rest/v1/feeds), and Search (SearchAllResources
(https://cloud.google.com/asset-inventory/docs/reference/rest/v1/TopLevel/searchAllResources), SearchAllIamPolicies
(https://cloud.google.com/asset-inventory/docs/reference/rest/v1/TopLevel/searchAllIamPolicies)).

Essential Contacts API

https://cloud.google.com/release-notes 264/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

essentialcontacts.googleapis.com/Contact
Cloud Monitoring

FEATURE You can now use a variable to control the visibility of a dashboard widget. For more information, see the following
documents:

Create and manage variables and pinned filters (https://cloud.google.com/monitoring/dashboards/filter-permanent)

Configure dashboard filters and variables by using the API

(https://cloud.google.com/monitoring/dashboards/api-dashboard#define_filters)

Cloud Storage

LIBRARIES A weekly digest of client library updates from across the Cloud SDK (https://cloud.google.com/sdk).

Java
(#java)

Changes for google-cloud-storage (https://github.com/googleapis/java-storage)

2.48.1 (https://github.com/googleapis/java-storage/compare/v2.48.0...v2.48.1) (2025-02-03)

Bug Fixes

deps: Update the Java code generator (gapic-generator-java) to 2.52.0 (00754bc

(https://github.com/googleapis/java-storage/commit/00754bc0b30da4ebc13e75f55525d9bd885b0572))

Update batch handling to ensure each operation has its own unique idempotency-token (#2905
(https://github.com/googleapis/java-storage/issues/2905)) (8d79b8d
(https://github.com/googleapis/java-storage/commit/8d79b8d9cea30c6bba0d2550fa397b8c8b7acc3c))

https://cloud.google.com/release-notes 265/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Dependencies

Update dependency com.google.cloud:sdk-platform-java-config to v3.42.0 (#2895

(https://github.com/googleapis/java-storage/issues/2895)) (145afb0
(https://github.com/googleapis/java-storage/commit/145afb0d3a783fe73a388a7be174b598a195a2c6))

Update dependency com.google.cloud.opentelemetry:exporter-trace to v0.33.0 (#2904

(https://github.com/googleapis/java-storage/issues/2904)) (2a5242e
(https://github.com/googleapis/java-storage/commit/2a5242e580185a5952181f922c4eca25790bcec6))

Documentation

Create OpenTelemetry Quickstart Sample (#2861 (https://github.com/googleapis/java-storage/issues/2861))

(31df9b7 (https://github.com/googleapis/java-storage/commit/31df9b7a6350714ff354934ccbd27c5dd68762f5))
Cloud Translation

CHANGE Translation LLM now supports translation between any of the supported source/target languages without English having
to be either source or target.

Container Optimized OS

CHANGE cos-117-18613-164-28

Kernel Docker ContainerdGPU Drivers

(https://cloud.goo
os/docs/how-to/ru

https://cloud.google.com/release-notes 266/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

COS-6.6.72 v24.0.9v1.7.24 See List

(https://cos.googlesource.com/third_party/kernel/+/e468c68a19c18e38b48ff36243a1bbdce8950a4c) (https://storage.go
tools/18613.164.2

CHANGE Updated the default tag of the GPU driver supporting the NVIDIA H200 GPU device to 570.86.15.

CHANGE Updated Konlet to v0.13.4.

FEATURE Support for NVIDIA B200 GPU – Added support for the R570 driver series, including version 570.86.15. This version has
been assigned the latest, default, and R570 tags.

FEATURE Updated cos-gpu-installer to v2.4.7: 1.Added Support for NVIDIA B200 GPU. 2.Enabled --prepare-build-tools flag to preload
GPU driver metadata for ARM64

FIXED Upgraded app-admin/fluent-bit to v3.1.10.

FIXED Upgraded sys-apps/hwdata to v0.391.

SECURITY Fixed CVE-2025-0840 in binutils.

SECURITY Fixed CVE-2025-21673 in the Linux kernel.

SECURITY Fixed CVE-2025-21669 in the Linux kernel.

SECURITY Fixed CVE-2025-21683 in the Linux kernel.

SECURITY Fixed CVE-2024-50304 in the Linux kernel.

SECURITY Fixed CVE-2025-21671 in the Linux kernel.

https://cloud.google.com/release-notes 267/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

SECURITY Fixed CVE-2025-21670 in the Linux kernel.

SECURITY Fixed CVE-2024-50014 in the Linux kernel.

SECURITY Fixed CVE-2024-49994 in the Linux kernel.

SECURITY Fixed CVE-2025-21666 in the Linux kernel.

SECURITY Fixed CVE-2025-21665 in the Linux kernel.

SECURITY Fixed CVE-2025-21667 in the Linux kernel.

CHANGE cos-109-17800-436-32

Kernel Docker ContainerdGPU Drivers

(https://cloud.goo
os/docs/how-to/r

COS-6.1.124 v24.0.9v1.7.24 See List

(https://cos.googlesource.com/third_party/kernel/+/6d837756c3d0b3b617c83468d345146a191adfeb) (https://storage.g
tools/17800.436.3

CHANGE Updated the default tag of the GPU driver supporting the NVIDIA H200 GPU device to 570.86.15.

CHANGE Updated Konlet to v0.13.4.

FEATURE Support for NVIDIA B200 GPU – Added support for the R570 driver series, including version 570.86.15. This version has
been assigned the latest, default, and R570 tags.

FEATURE Updated cos-gpu-installer to v2.4.7: Added Support for NVIDIA B200 GPU.

https://cloud.google.com/release-notes 268/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

FIXED Upgraded sys-apps/diffutils to v3.11.

SECURITY Fixed CVE-2025-0840 in binutils.

SECURITY Fixed CVE-2024-50304 in the Linux kernel.

SECURITY Fixed CVE-2024-50047 in the Linux kernel.

SECURITY Fixed CVE-2025-21669 in the Linux kernel.

SECURITY Fixed CVE-2025-21683 in the Linux kernel.

SECURITY Fixed CVE-2024-40945 in the Linux kernel.

SECURITY Fixed CVE-2025-21671 in the Linux kernel.

SECURITY Fixed CVE-2024-50014 in the Linux kernel.

SECURITY Fixed CVE-2024-49994 in the Linux kernel.

SECURITY Fixed CVE-2025-21666 in the Linux kernel.

SECURITY Fixed CVE-2025-21631 in the Linux kernel.

SECURITY Fixed CVE-2025-21665 in the Linux kernel.

SECURITY Fixed CVE-2025-21667 in the Linux kernel.

CHANGE cos-105-17412-535-55

https://cloud.google.com/release-notes 269/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Kernel Docker ContainerdGPU Drivers

(https://cloud.goo
os/docs/how-to/r

COS-5.15.173 v23.0.3v1.7.23 See List

(https://cos.googlesource.com/third_party/kernel/+/8c963bd224ec959e77d66017e5a7750ea9a80a23) (https://storage.g
tools/17412.535.

CHANGE Updated Konlet to v0.13.4.

FIXED Upgraded sys-apps/diffutils to v3.11.

SECURITY Fixed CVE-2025-0840 in binutils.

SECURITY Fixed CVE-2024-56672 in the Linux kernel.

SECURITY Fixed CVE-2024-50304 in the Linux kernel.

SECURITY Fixed CVE-2025-21669 in the Linux kernel.

SECURITY Fixed CVE-2025-21683 in the Linux kernel.

SECURITY Fixed CVE-2024-53217 in the Linux kernel.

SECURITY Fixed CVE-2024-48881 in the Linux kernel.

SECURITY Fixed CVE-2025-21666 in the Linux kernel.

SECURITY Fixed CVE-2025-21631 in the Linux kernel.

SECURITY Fixed CVE-2024-57874 in the Linux kernel.

https://cloud.google.com/release-notes 270/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

SECURITY Fixed CVE-2025-21665 in the Linux kernel.

Dataproc

ANNOUNCEMENT Dataproc on Compute Engine: To help diagnose Dataproc clusters, you can set the following cluster properties
(https://cloud.google.com/dataproc/docs/concepts/configuring-clusters/cluster-properties#dataproc_service_properties_table) to true
when you create a cluster (https://cloud.google.com/dataproc/docs/guides/create-cluster#creating_a_cloud_dataproc_cluster):

dataproc:diagnostic.capture.enabled: When set to true, enables the collection of checkpoint data

(https://cloud.google.com/dataproc/docs/support/diagnose-clusters#checkpoint_data) in the cluster temp bucket
(https://cloud.google.com/dataproc/docs/concepts/configuring-clusters/staging-bucket).

dataproc:dataproc.logging.extended.enabled: When set to true, enables the collection of logs for the Knox,
Zeppelin, Solr, Trino, Presto, Ranger-usersync, Jupyter_notebook components
(https://cloud.google.com/dataproc/docs/concepts/components/overview) and the Spark History-Server
(https://cloud.google.com/dataproc/docs/concepts/jobs/history-server) in Cloud Logging
(https://cloud.google.com/dataproc/docs/guides/logging#cluster_logs_in).

dataproc:dataproc.logging.syslog.enabled: When set to true, enables the collection of VM syslogs in Cloud

Logging (https://cloud.google.com/dataproc/docs/guides/logging#cluster_logs_in).

Note: starting May 10, 2025, these properties will be set to true by default.

Sensitive Data Protection

CHANGE The RELIGIOUS_TERM infoType detector is now generally available in all regions. For more information about all built-in
infoTypes, see InfoType detector reference (https://cloud.google.com/dlp/docs/infotypes-reference).

Spanner

https://cloud.google.com/release-notes 271/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

FEATURE Custom organization policies are now generally available for Spanner. For more information, see Add a custom
organization policy (https://cloud.google.com/spanner/docs/spanner-custom-constraints).

Text-to-Speech

CHANGE Journey voices have been rebranded as Chirp HD voices (https://cloud.google.com/text-to-speech/docs/voice-types).

VPC Service Controls

FEATURE VPC Service Controls feature: Support for using third-party identities (both single identities and groups) in the ingress and
egress rules to allow access to resources protected by a service perimeter is generally available
(https://cloud.google.com/products#product-launch-stages).

For more information, see Configure identity groups and third-party identities in ingress and egress rules
(https://cloud.google.com/vpc-service-controls/docs/configure-identity-groups).

Vertex AI Agent Builder

CHANGE Vertex AI Search: gemini-2.0-flash-001 model for the answer method

The Gemini 2.0 Flash (gemini-2.0-flash-001) model is available for answer generation in Vertex AI Search. This model
is tuned to address context-based question and answering tasks.

For more information, see Answer generation model versions and lifecycle
(https://cloud.google.com/generative-ai-app-builder/docs/answer-generation-models).

February 09, 2025

https://cloud.google.com/release-notes 272/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Dataproc

ANNOUNCEMENT New Dataproc Serverless for Spark runtime versions

(https://cloud.google.com/dataproc-serverless/docs/concepts/versions/dataproc-serverless-versions):

1.1.91

1.2.35

2.2.35

Google SecOps SOAR

ANNOUNCEMENT Release 6.3.33 (https://cloud.google.com/chronicle/docs/soar/release-notes#February_02_2025) is now in General Availability.

February 08, 2025

Google SecOps SOAR

ANNOUNCEMENT Release 6.3.34 is currently in Preview.

February 07, 2025

Cloud Composer

ANNOUNCEMENT Starting March 2025, the default version for new Cloud Composer environments changes from Cloud Composer 2 to
Cloud Composer 3.

https://cloud.google.com/release-notes 273/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

New environments that are created without a specified version will use the default Airflow build of Cloud Composer 3,
composer-3-airflow-2. Currently, the default version is composer-2-airflow-2.
Cloud Run

CHANGE Cloud Run integrations are discontinued from the Google Cloud console and Google Cloud CLI. No action is required; your
deployed services that use these integrations will continue to work. We recommend transitioning to use the individual
product experiences for each integration you have deployed. For more information about configuring resources for your
services to connect to other Google Cloud products, see Connect to Google Cloud services
(https://cloud.google.com/run/docs/integrate/using-gcp-services).

Dataproc

CHANGE New Dataproc on Compute Engine subminor image versions:

(https://cloud.google.com/dataproc/docs/concepts/versioning/dataproc-version-clusters#supported_dataproc_versions)

2.0.131-debian10, 2.0.131-rocky8, 2.0.131-ubuntu18

2.1.79-debian11, 2.1.79-rocky8, 2.1.79-ubuntu20, 2.1.79-ubuntu20-arm

2.2.45-debian12, 2.2.45-rocky9, 2.2.45-ubuntu22

ANNOUNCEMENT Spark UI for Dataproc Serverless Batches

(https://cloud.google.com/dataproc-serverless/docs/guides/monitor-troubleshoot-batches#spark_ui) and Interactive sessions
(https://cloud.google.com/dataproc-serverless/docs/guides/monitor-troubleshoot-sessions#spark_ui), which lets you to monitor and
debug your serverless Spark workloads, is now available for CMEK (Customer-Managed Encryption Keys)
(https://cloud.google.com/dataproc-serverless/docs/guides/cmek-serverless) and Assured Workloads
(https://cloud.google.com/assured-workloads/docs/overview). The Spark UI is available by default and free of cost.

Gemini Code Assist

https://cloud.google.com/release-notes 274/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

CHANGE Various bug fixes and minor product enhancements for VSCode Gemini Code Assist extension.

Generative AI on Vertex AI

FEATURE deepseek-ai/deepseek-r1 (https://console.cloud.google.com/vertex-ai/publishers/deepseek-ai/model-garden/deepseek-r1) and

microsoft/Phi-4 (https://console.cloud.google.com/vertex-ai/publishers/microsoft/model-garden/phi-4) models were added to Model
Garden (https://console.cloud.google.com/vertex-ai/model-garden).

CHANGE The following advanced LLM inference optimization techniques are available in Model Garden in Preview
(https://cloud.google.com/products#product-launch-stages):

Prefix caching reuses computations from previously generated text, eliminating redundant processing. It reduces
time-to-first-token for requests with common prompt prefixes. Prefix caching is available for the following models:

vLLM: Llama 3.1 (8b, 70b), Llama 3.3 (70b)

Hex-LLM: Llama 2 (7b, 13b), Llama 3 (8b), Llama 3.1 (8b, 70b), Llama 3.2 (1b, 3b), Llama Guard (1b, 8b),
CodeLlama (7b, 13b), Gemma (2b, 7b), CodeGemma (2b, 7b), Mistral-7B (v0.2, v0.3), Mixtral-8x7B (v0.1)

Speculative decoding is an effective optimization technique to reduce generation time-per-output-token latency. For
more information, see the Model Garden advanced features notebook
(https://github.com/GoogleCloudPlatform/vertex-ai-
samples/blob/main/notebooks/community/model_garden/model_garden_advanced_features.ipynb)
.

Google Cloud Architecture Center

CHANGE Google Cloud Architecture Framework: Security, privacy, and compliance

(https://cloud.google.com/architecture/framework/security): Major update to align the recommendations with core principles of
security.

https://cloud.google.com/release-notes 275/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Identity-Aware Proxy

FEATURE Generally available: You can configure Workforce Identity Federation with IAP, and use an external identity provider (IdP) to
authenticate and authorize a workforce—a group of users, such as employees, partners, and contractors—using Identity
and Access Management (IAM), so that the users can securely access services deployed on Google Cloud or on-premises.

For more information, see Configure IAP with Workforce Identity Federation
(https://cloud.google.com/iap/docs/use-workforce-identity-federation).

FEATURE Generally available: Support for service account JWT authentication for Identity Platform and Workforce Identity
Federation configured applications. For more information, see Authenticating with a service account JWT
(https://cloud.google.com/iap/docs/authentication-howto#authenticating_with_a_service_account_jwt).

Memorystore for Redis Cluster

FEATURE Multi-VPC support for Memorystore for Redis Cluster is now Generally Available (GA)
(https://cloud.google.com/products#product-launch-stages). This functionality enables you to create Private Service Connect
endpoints in multiple VPCs to connect to the same Memorystore for Redis Cluster instance. This provides you with
enhanced flexibility and resilience for your network architecture. For more information, see About multiple VPC networking
(https://cloud.google.com/memorystore/docs/cluster/about-multiple-vpc-networking).

VPC Service Controls

FEATURE VPC Service Controls feature: Support for adding projects as a source in the egress rules of a service perimeter is
generally available (https://cloud.google.com/products#product-launch-stages).

For more information, see Ingress and egress rules (https://cloud.google.com/vpc-service-controls/docs/ingress-egress-rules).

FEATURE VPC Service Controls feature: Support for adding titles in the ingress and egress rules of a service perimeter is generally
available (https://cloud.google.com/products#product-launch-stages).

https://cloud.google.com/release-notes 276/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

For more information, see Ingress and egress rules (https://cloud.google.com/vpc-service-controls/docs/ingress-egress-rules).

Workflows

CHANGE Support for retrieving the detailed history of a workflow execution (expected iterations, in-scope variables)
(https://cloud.google.com/workflows/docs/debug-steps) is available in Preview
(https://cloud.google.com/products#product-launch-stages).

February 06, 2025

Apigee X

ANNOUNCEMENT On February 6, 2025, we released an updated version of Apigee (1-14-0-apigee-6).

star Note: Rollouts of this release to production instances will begin within two business days and may take four or more business days to be
completed across all Google Cloud zones. Your instances may not have the features and fixes available until the rollout is complete.

FIXED
Bug ID Description

381553288Fixed class initialization issue in JavaCallout policy.

390559772Fixed issue with ResponseCache policy not appearing in debug sessions when added using Apigee APIM Operator for
Kubernetes.

N/A Updates to security infrastructure and libraries.

BigQuery

https://cloud.google.com/release-notes 277/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

FEATURE You can create a JavaScript user-defined aggregate function

(https://cloud.google.com/bigquery/docs/user-defined-aggregates#create-javascript-udaf) by using the CREATE AGGREGATE
FUNCTION statement
(https://cloud.google.com/bigquery/docs/reference/standard-sql/data-definition-language#javascript-create-udaf-function). This feature
is generally available (https://cloud.google.com/products#product-launch-stages) (GA).

Cloud Composer

CHANGE Cloud Composer 2 is no longer available in Mexico (northamerica-south1). It is not possible to select this region when
creating a new Cloud Composer 2 environment. Existing Cloud Composer 2 environments and both new and existing
Cloud Composer 3 environments are not affected by this change.

Cloud Logging

FEATURE You can now create and manage your log views by using the Google Cloud console. For more information, see Configure
log views on a log bucket (https://cloud.google.com/logging/docs/logs-views).

Gemini Code Assist

FEATURE IntelliJ Gemini Code Assist now has a setting to block suggestions that contain citations.

FIXED Fixed issues with Google Cloud project settings for VS Code Gemini Code Assist.

Google Kubernetes Engine

CHANGE (2025-R05) Version updates

GKE cluster versions have been updated.

New versions available for upgrades and new clusters.

https://cloud.google.com/release-notes 278/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

The following Kubernetes versions are now available for new clusters and for opt-in control plane upgrades and node
upgrades for existing clusters. For more information on versioning and upgrades, see GKE versioning and support
(https://cloud.google.com/kubernetes-engine/versioning) and Upgrades (https://cloud.google.com/kubernetes-engine/upgrades).

Rapid channelRegular channel… Stable channel… Extended channel… No channel (#no-channel)

(#rapid-channel)

star Note: Your clusters might not have these versions available. Rollouts are already in progress when we publish the release notes, and
can take multiple days to complete across all Google Cloud zones.

Version 1.31.5-gke.1068000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1315) is now the default
version for cluster creation in the Rapid channel.

The following versions are now available in the Rapid channel:

1.28.15-gke.1720000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.28.md#v12815)

1.29.13-gke.1109000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12913)

1.30.9-gke.1127000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1309)

1.31.5-gke.1169000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1315)

1.32.1-gke.1200003
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#v1321)

https://cloud.google.com/release-notes 279/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

1.32.1-gke.1357001
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#v1321)

The following versions are no longer available in the Rapid channel:

1.28.15-gke.1612000

1.29.12-gke.1270000

1.30.9-gke.1027000

1.31.4-gke.1372000

1.32.0-gke.1538000

1.32.1-gke.1200000

Auto-upgrade targets are now available for the following minor versions:

Control planes and nodes with auto-upgrade enabled in the Rapid channel will be upgraded from version
1.27 to version 1.28.15-gke.1641000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.28.md#v12815) with this
release.

Control planes and nodes with auto-upgrade enabled in the Rapid channel will be upgraded from version
1.28 to version 1.29.13-gke.1006000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12913) with this
release.

Control planes and nodes with auto-upgrade enabled in the Rapid channel will be upgraded from version
1.30 to version 1.31.5-gke.1023000

https://cloud.google.com/release-notes 280/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1315) with this

release.

The following patch-only version auto-upgrade targets are now available for clusters with maintenance
exclusions
(https://cloud.google.com/kubernetes-engine/docs/concepts/maintenance-windows-and-exclusions#exclusions) or other
factors preventing minor version upgrades:

Control planes and nodes with auto-upgrade enabled in the Rapid channel will be upgraded from version
1.28 to version 1.28.15-gke.1641000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.28.md#v12815) with this
release.

Control planes and nodes with auto-upgrade enabled in the Rapid channel will be upgraded from version
1.29 to version 1.29.13-gke.1006000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12913) with this
release.

Control planes and nodes with auto-upgrade enabled in the Rapid channel will be upgraded from version
1.31 to version 1.31.5-gke.1023000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1315) with this
release.

Control planes and nodes with auto-upgrade enabled in the Rapid channel will be upgraded from version
1.32 to version 1.32.1-gke.1200003
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#v1321) with this
release.

CHANGE (2025-R05) Version updates

https://cloud.google.com/release-notes 281/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

star Note: Your clusters might not have these versions available. Rollouts are already in progress when we publish the release notes, and can
take multiple days to complete across all Google Cloud zones.

Version 1.31.5-gke.1068000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1315) is now the default version
for cluster creation in the Rapid channel.

The following versions are now available in the Rapid channel:

1.28.15-gke.1720000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.28.md#v12815)

1.29.13-gke.1109000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12913)

1.30.9-gke.1127000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1309)

1.31.5-gke.1169000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1315)

1.32.1-gke.1200003 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#v1321)

1.32.1-gke.1357001 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#v1321)

The following versions are no longer available in the Rapid channel:

1.28.15-gke.1612000

1.29.12-gke.1270000

1.30.9-gke.1027000

1.31.4-gke.1372000

https://cloud.google.com/release-notes 282/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

1.32.0-gke.1538000

1.32.1-gke.1200000

Auto-upgrade targets are now available for the following minor versions:

Control planes and nodes with auto-upgrade enabled in the Rapid channel will be upgraded from version 1.27 to
version 1.28.15-gke.1641000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.28.md#v12815) with this release.

Control planes and nodes with auto-upgrade enabled in the Rapid channel will be upgraded from version 1.28 to
version 1.29.13-gke.1006000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12913) with this release.

Control planes and nodes with auto-upgrade enabled in the Rapid channel will be upgraded from version 1.30 to
version 1.31.5-gke.1023000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1315) with this release.

The following patch-only version auto-upgrade targets are now available for clusters with maintenance exclusions
(https://cloud.google.com/kubernetes-engine/docs/concepts/maintenance-windows-and-exclusions#exclusions) or other factors
preventing minor version upgrades:

Control planes and nodes with auto-upgrade enabled in the Rapid channel will be upgraded from version 1.28 to
version 1.28.15-gke.1641000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.28.md#v12815) with this release.

Control planes and nodes with auto-upgrade enabled in the Rapid channel will be upgraded from version 1.29 to
version 1.29.13-gke.1006000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12913) with this release.

https://cloud.google.com/release-notes 283/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Control planes and nodes with auto-upgrade enabled in the Rapid channel will be upgraded from version 1.31 to
version 1.31.5-gke.1023000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1315) with this release.

Control planes and nodes with auto-upgrade enabled in the Rapid channel will be upgraded from version 1.32 to
version 1.32.1-gke.1200003
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#v1321) with this release.

CHANGE (2025-R05) Version updates

star Note: Your clusters might not have these versions available. Rollouts are already in progress when we publish the release notes, and can
take multiple days to complete across all Google Cloud zones.

Version 1.31.4-gke.1372000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1314) is now the default version
for cluster creation in the Regular channel.

The following versions are now available in the Regular channel:

1.28.15-gke.1641000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.28.md#v12815)

1.29.13-gke.1006000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12913)

1.30.9-gke.1009000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1309)

1.31.5-gke.1023000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1315)

https://cloud.google.com/release-notes 284/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

The following versions are no longer available in the Regular channel:

1.28.15-gke.1503000

1.29.12-gke.1143000

1.29.12-gke.1143001

1.30.8-gke.1162000

1.30.8-gke.1162001

1.31.4-gke.1256000

Auto-upgrade targets are now available for the following minor versions:

Control planes and nodes with auto-upgrade enabled in the Regular channel will be upgraded from version 1.27
to version 1.28.15-gke.1612000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.28.md#v12815) with this release.

Control planes and nodes with auto-upgrade enabled in the Regular channel will be upgraded from version 1.28
to version 1.29.12-gke.1270000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12912) with this release.

Control planes and nodes with auto-upgrade enabled in the Regular channel will be upgraded from version 1.29
to version 1.30.8-gke.1261000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1308) with this release.

The following patch-only version auto-upgrade targets are now available for clusters with maintenance exclusions
(https://cloud.google.com/kubernetes-engine/docs/concepts/maintenance-windows-and-exclusions#exclusions) or other factors
preventing minor version upgrades:

https://cloud.google.com/release-notes 285/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Control planes and nodes with auto-upgrade enabled in the Regular channel will be upgraded from version 1.28
to version 1.28.15-gke.1612000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.28.md#v12815) with this release.

Control planes and nodes with auto-upgrade enabled in the Regular channel will be upgraded from version 1.29
to version 1.29.12-gke.1270000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12912) with this release.

Control planes and nodes with auto-upgrade enabled in the Regular channel will be upgraded from version 1.30
to version 1.30.8-gke.1261000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1308) with this release.

Control planes and nodes with auto-upgrade enabled in the Regular channel will be upgraded from version 1.31
to version 1.31.4-gke.1372000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1314) with this release.

CHANGE (2025-R05) Version updates

star Note: Your clusters might not have these versions available. Rollouts are already in progress when we publish the release notes, and can
take multiple days to complete across all Google Cloud zones.

Version 1.30.8-gke.1128001
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1308) is now the default version
for cluster creation in the Stable channel.

The following versions are now available in the Stable channel:

https://cloud.google.com/release-notes 286/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

1.28.15-gke.1503000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.28.md#v12815)

1.29.12-gke.1143001
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12912)

1.30.8-gke.1162000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1308)

1.30.8-gke.1162001 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1308)

1.31.4-gke.1256000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1314)

The following versions are no longer available in the Stable channel:

1.28.15-gke.1435000

1.29.12-gke.1055000

1.29.12-gke.1055001

1.30.8-gke.1051000

1.30.8-gke.1051001

Auto-upgrade targets are now available for the following minor versions:

Control planes and nodes with auto-upgrade enabled in the Stable channel will be upgraded from version 1.27
to version 1.28.15-gke.1480000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.28.md#v12815) with this release.

Control planes and nodes with auto-upgrade enabled in the Stable channel will be upgraded from version 1.28
to version 1.29.12-gke.1120001
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12912) with this release.

https://cloud.google.com/release-notes 287/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Control planes and nodes with auto-upgrade enabled in the Stable channel will be upgraded from version 1.29
to version 1.30.8-gke.1128001
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1308) with this release.

The following patch-only version auto-upgrade targets are now available for clusters with maintenance exclusions
(https://cloud.google.com/kubernetes-engine/docs/concepts/maintenance-windows-and-exclusions#exclusions) or other factors
preventing minor version upgrades:

Control planes and nodes with auto-upgrade enabled in the Stable channel will be upgraded from version 1.28
to version 1.28.15-gke.1480000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.28.md#v12815) with this release.

Control planes and nodes with auto-upgrade enabled in the Stable channel will be upgraded from version 1.29
to version 1.29.12-gke.1120001
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12912) with this release.

Control planes and nodes with auto-upgrade enabled in the Stable channel will be upgraded from version 1.30
to version 1.30.8-gke.1128001
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1308) with this release.

CHANGE (2025-R05) Version updates

star Note: Your clusters might not have these versions available. Rollouts are already in progress when we publish the release notes, and can
take multiple days to complete across all Google Cloud zones.

Version 1.31.4-gke.1372000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1314) is now the default version
for cluster creation in the Extended channel.

https://cloud.google.com/release-notes 288/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

The following versions are now available in the Extended channel:

1.27.16-gke.2270000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.27.md#v12716)

1.27.16-gke.2342000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.27.md#v12716)

1.28.15-gke.1641000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.28.md#v12815)

1.29.13-gke.1006000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12913)

1.30.9-gke.1009000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1309)

1.31.5-gke.1023000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1315)

The following versions are no longer available in the Extended channel:

1.27.16-gke.2142000

1.27.16-gke.2296000

1.28.15-gke.1503000

1.29.12-gke.1143000

1.29.12-gke.1143001

1.30.8-gke.1162000

1.30.8-gke.1162001

https://cloud.google.com/release-notes 289/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

1.31.4-gke.1256000

The following patch-only version auto-upgrade targets are now available for clusters with maintenance exclusions
(https://cloud.google.com/kubernetes-engine/docs/concepts/maintenance-windows-and-exclusions#exclusions) or other factors
preventing minor version upgrades:

Control planes and nodes with auto-upgrade enabled in the Extended channel will be upgraded from version
1.27 to version 1.27.16-gke.2246000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.27.md#v12716) with this release.

Control planes and nodes with auto-upgrade enabled in the Extended channel will be upgraded from version
1.28 to version 1.28.15-gke.1612000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.28.md#v12815) with this release.

Control planes and nodes with auto-upgrade enabled in the Extended channel will be upgraded from version
1.29 to version 1.29.12-gke.1270000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12912) with this release.

Control planes and nodes with auto-upgrade enabled in the Extended channel will be upgraded from version
1.30 to version 1.30.8-gke.1261000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1308) with this release.

Control planes and nodes with auto-upgrade enabled in the Extended channel will be upgraded from version
1.31 to version 1.31.4-gke.1372000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1314) with this release.

CHANGE (2025-R05) Version updates

https://cloud.google.com/release-notes 290/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

star Note: Your clusters might not have these versions available. Rollouts are already in progress when we publish the release notes, and can
take multiple days to complete across all Google Cloud zones.

Version 1.31.4-gke.1372000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1314) is now the default version
for cluster creation.

The following versions are now available:

1.28.15-gke.1720000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.28.md#v12815)

1.29.13-gke.1109000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12913)

1.30.9-gke.1127000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1309)

1.31.5-gke.1169000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1315)

The following node versions are now available:

1.27.16-gke.2342000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.27.md#v12716)

1.28.15-gke.1720000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.28.md#v12815)

1.29.13-gke.1109000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12913)

1.30.9-gke.1127000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1309)

https://cloud.google.com/release-notes 291/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

1.31.5-gke.1169000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1315)

The following versions are no longer available:

1.28.15-gke.1435000

1.29.12-gke.1055000

1.29.12-gke.1055001

1.29.12-gke.1143000

1.30.5-gke.1713000

1.30.8-gke.1051001

1.30.9-gke.1027000

Auto-upgrade targets are now available for the following minor versions:

Control planes and nodes with auto-upgrade enabled will be upgraded from version 1.27 to version 1.28.15-
gke.1612000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.28.md#v12815) with
this release.

Control planes and nodes with auto-upgrade enabled will be upgraded from version 1.28 to version 1.29.12-
gke.1270000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12912) with
this release.

Control planes and nodes with auto-upgrade enabled will be upgraded from version 1.29 to version 1.30.8-
gke.1128001 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1308) with
this release.

https://cloud.google.com/release-notes 292/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

The following patch-only version auto-upgrade targets are now available for clusters with maintenance exclusions
(https://cloud.google.com/kubernetes-engine/docs/concepts/maintenance-windows-and-exclusions#exclusions) or other factors
preventing minor version upgrades:

Control planes and nodes with auto-upgrade enabled will be upgraded from version 1.28 to version 1.28.15-
gke.1612000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.28.md#v12815) with
this release.

Control planes and nodes with auto-upgrade enabled will be upgraded from version 1.29 to version 1.29.12-
gke.1270000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12912) with
this release.

Control planes and nodes with auto-upgrade enabled will be upgraded from version 1.30 to version 1.30.8-
gke.1128001 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1308) with
this release.

Control planes and nodes with auto-upgrade enabled will be upgraded from version 1.31 to version 1.31.4-
gke.1372000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1314) with
this release.

FEATURE Weighted load balancing for GKE External LoadBalancer Services is now generally available on GKE clusters running
version 1.31.0-gke.1506000 or later. Weighted load balancing is a more efficient way to distribute traffic to nodes based on
the number of serving Pods they have backing the Service.

To learn more, see Weighted load balancing

(https://cloud.google.com/kubernetes-engine/docs/concepts/service-load-balancer#weighted-lb).

Google SecOps

https://cloud.google.com/release-notes 293/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

CHANGE The collector ID representing Google Cloud direct ingestion

(https://cloud.google.com/chronicle/docs/ingestion/cloud/ingest-gcp-logs) in the Cloud Monitoring metrics and BigQuery has
changed from dddddddd-dddd-dddd-dddd-dddddddddddd to aaaa3333-aaaa-3333-aaaa-3333aaaa3333.

For a complete list of updated collector IDs used for ingestion metrics, see Use Cloud Monitoring for ingestion
notifications (https://cloud.google.com/chronicle/docs/ingestion/ingestion-notifications-for-health-metrics).

Google SecOps SIEM

CHANGE The collector ID representing Google Cloud direct ingestion

(https://cloud.google.com/chronicle/docs/ingestion/cloud/ingest-gcp-logs) in the Cloud Monitoring metrics and BigQuery has
changed from dddddddd-dddd-dddd-dddd-dddddddddddd to aaaa3333-aaaa-3333-aaaa-3333aaaa3333.

For a complete list of updated collector IDs used for ingestion metrics, see Use Cloud Monitoring for ingestion
notifications (https://cloud.google.com/chronicle/docs/ingestion/ingestion-notifications-for-health-metrics).

Looker Studio

ANNOUNCEMENT Looker Studio documentation has a new home

Looker Studio documentation has moved from Help Center to Google Cloud. Visit the new documentation site to learn
more about the move. (https://cloud.google.com/looker/docs/studio/new-studio-docs)

FEATURE Modern charts in public preview

The new Modern charts public preview offers new chart styling, new default chart configuration options, and new chart
settings that give report creators greater control over how data is curated and presented to users.

Learn more about Modern charts. (https://cloud.google.com/looker/docs/studio/modern-charts)

https://cloud.google.com/release-notes 294/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

ANNOUNCEMENT Partner connection launch update

The following partner connectors have been added to the Looker Studio Connector Gallery
(https://lookerstudio.google.com/data):

Refinaria by Totvs
(https://lookerstudio.google.com/c/datasources/create?connectorId=AKfycbzgGhg0Viryztzh-
_uJzSAZ0q8leD591XqBBKSGBcwysmEIhBEWLJBd-hpANX6ZoZCW0w)
by TOTVS S.A.

Prestashop Connector
(https://lookerstudio.google.com/c/datasources/create?connectorId=AKfycbzn47DTUC3y4wXH1-c5mornvg9-
K9R3gxr9yfTP_8LNrtaj9g4RoJD3NYjbtlpIn_j34Q)
by SOLEDIS

Magento
(https://lookerstudio.google.com/c/datasources/create?
connectorId=AKfycbzZfZ75ND1SfOZvfYB16B5tTWOuHQmqgQbIOhFce_hbtoDOXyUvxj8euB_xnt4-ebKJTA)
by Catchr

TikTok Ads CMMNDR Private

(https://lookerstudio.google.com/c/datasources/create?connectorId=AKfycbxkwl6cHx6VlRe3NsVSSp-dSoYs1ebmcKeU-t-D-
V3saYrg-gT7YdCqvYppGi7RszKn)
by Kondiment Worldwide SRL

GA CMMNDR Private
(https://lookerstudio.google.com/c/datasources/create?
connectorId=AKfycbzjqkvCsIbpYKMRDmm6UAH0LIkQh0hjy3hpFMORcXxo5UIVKsc_rLdZm6KdqRbvkHk9)
by Kondiment Worldwide SRL

https://cloud.google.com/release-notes 295/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

IG Insights CMMNDR Private

(https://lookerstudio.google.com/c/datasources/create?connectorId=AKfycbxh-
uUayMeXGuymo3ng_HFB2xX_vUExptMtjkFAmDvIbp0oFYGXyY13jWJBazsZYK-Xbw)
by Kondiment Worldwide SRL

FB Insights CMMNDR Private

(https://lookerstudio.google.com/c/datasources/create?
connectorId=AKfycbwx8_Uk_PLRE9O9Clh7it1DKvZhFpn6s7Ok6wrFvcLGv4m25cUipifXF7MevYf06o7WKQ)
by Kondiment Worldwide SRL

Google Ads CMMNDR Private

(https://lookerstudio.google.com/c/datasources/create?
connectorId=AKfycbwKkv96nMoCSwlzCuoJNbDrsEYdRu8Vb8yaZoojjPGk9WiTiwHhs7v5l8eTifDksejy)
by Kondiment Worldwide SRL

FB Ads CMMNDR Private

(https://lookerstudio.google.com/c/datasources/create?
connectorId=AKfycby0a1f2lLElLLgNl0H67XCHq1Rh4juIHlJcgbhswK_zeCWiAqxmRGJgE01CnAqQeShx)
by Kondiment Worldwide SRL

TT Organic CMMNDR Private

(https://lookerstudio.google.com/c/datasources/create?
connectorId=AKfycbwMHMYuoPDAUIIRvNOMJnY8GHpO34kib646c7j0WZ2T66XfjTvpN0nKOwA_sfIsurTu)
by Kondiment Worldwide SRL

Piano Analytics
(https://lookerstudio.google.com/c/datasources/create?
connectorId=AKfycbyg6U07ARpuqdYQj5nd3iU9N7RCQyHEFwBrV1J3ug2BzaLqURtzwjG5FOqKthupmJSHoQ)
by Piano

https://cloud.google.com/release-notes 296/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

BigCommerce
(https://lookerstudio.google.com/c/datasources/create?connectorId=AKfycbz75MnczxXbzuEHbMBmNnb43fu0OlZJwnShmWXG5-
OUQozBlTBFEEGgigW6Pxp2uaVq)
by Catchr

Snapchat Ads
(https://lookerstudio.google.com/c/datasources/create?
connectorId=AKfycbwoKZFG4t0HEyJTlP8domBZUIgm9CNPSs7Wo48tHFKUpqt4Z5MnUdo08bLOBBUZ0EWWAw)
by Reporting Ninja

Gravity Forms
(https://lookerstudio.google.com/c/datasources/create?connectorId=AKfycbwtr-
w2zTyhBVUmptaLAOaBb_gXpROxtTCCEtRZJy5SS_2PnxlyQU5yhsOLFvd46NxV7w)
by Windsor.ai

LinkedIn Company Pages

(https://lookerstudio.google.com/c/datasources/create?connectorId=AKfycbyhmD_qVCTVb9h7cu72CzZS-NPSI3FLcndDGBvOd8Kv-
2noNUZrMwJ5589oyVRpzpah0g)
by Adzviser

LogicGate Risk Cloud®

(https://lookerstudio.google.com/c/datasources/create?
connectorId=AKfycbxEdSxtFh3ejyzXQZ0FCrBNFukDQQfitF1hU7KvY5gyvJOeU9JCKZN_MXf-XsevNkbj)
by LogicGate
Organization Policy

FEATURE You can now create custom organization policies for Workflows. For more information, see Create custom organization
policy constraints for Workflows (https://cloud.google.com/workflows/docs/custom-constraints).

Resource Manager

https://cloud.google.com/release-notes 297/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

FEATURE You can now create custom organization policies for Workflows. For more information, see Create custom organization
policy constraints for Workflows (https://cloud.google.com/workflows/docs/custom-constraints).

Workflows

FEATURE Support for creating custom organization policy constraints (https://cloud.google.com/workflows/docs/custom-constraints) is

available.

February 05, 2025

Cloud Asset Inventory

FEATURE The following resource types are now publicly available through the ExportAssets
(https://cloud.google.com/asset-inventory/docs/reference/rest/v1/TopLevel/exportAssets), ListAssets
(https://cloud.google.com/asset-inventory/docs/listing-assets), BatchGetAssetsHistory
(https://cloud.google.com/asset-inventory/docs/reference/rest/v1/TopLevel/batchGetAssetsHistory), QueryAssets
(https://cloud.google.com/asset-inventory/docs/reference/rest/v1/TopLevel/queryAssets), Feed
(https://cloud.google.com/asset-inventory/docs/reference/rest/v1/feeds), and Search (SearchAllResources
(https://cloud.google.com/asset-inventory/docs/reference/rest/v1/TopLevel/searchAllResources), SearchAllIamPolicies
(https://cloud.google.com/asset-inventory/docs/reference/rest/v1/TopLevel/searchAllIamPolicies)).

Backup and Disaster Recovery

backupdr.googleapis.com/BackupPlan

backupdr.googleapis.com/BackupPlanAssociation

Cloud SQL for MySQL

https://cloud.google.com/release-notes 298/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

FEATURE You can now configure customer-managed CA (CUSTOMER_MANAGED_CAS_CA) as the server certificate authority (CA) mode
when you create a Cloud SQL instance. With customer-managed CA mode, you set up your own CA pool and CA in
Certificate Authority Service (https://cloud.google.com/certificate-authority-service/docs/ca-service-overview). This option lets you
establish your own CA hierarchy and manage the rotation of CA certificates for your Cloud SQL instances to help you meet
your regulatory compliance needs.

To use the customer-managed CA option in Cloud SQL, see Use a customer-managed certificate authority (CA)
(https://cloud.google.com/sql/docs/mysql/customer-managed-ca). For more information about server CA mode options, see
Certificate authority (CA) hierarchies (https://cloud.google.com/sql/docs/mysql/authorize-ssl#ca-hierarchies). The customer-
managed CA feature is in Preview (https://cloud.google.com/products#product-launch-stages).

Cloud SQL for PostgreSQL

FEATURE You can now migrate a subset of databases from an external server to a destination Cloud SQL instance. For more
information, see Configure Cloud SQL and the external server for replication
(https://cloud.google.com/sql/docs/postgres/replication/configure-replication-from-external).

FEATURE You can now configure customer-managed CA (CUSTOMER_MANAGED_CAS_CA) as the server certificate authority (CA) mode
when you create a Cloud SQL instance. With customer-managed CA mode, you set up your own CA pool and CA in
Certificate Authority Service (https://cloud.google.com/certificate-authority-service/docs/ca-service-overview). This option lets you
establish your own CA hierarchy and manage the rotation of CA certificates for your Cloud SQL instances to help you meet
your regulatory compliance needs.

To use the customer-managed CA option in Cloud SQL, see Use a customer-managed certificate authority (CA)
(https://cloud.google.com/sql/docs/postgres/customer-managed-ca). For more information about server CA mode options, see
Certificate authority (CA) hierarchies (https://cloud.google.com/sql/docs/postgres/authorize-ssl#ca-hierarchies). The customer-
managed CA feature is in Preview (https://cloud.google.com/products#product-launch-stages).

Cloud SQL for SQL Server

https://cloud.google.com/release-notes 299/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

FEATURE You can now configure customer-managed CA (CUSTOMER_MANAGED_CAS_CA) as the server certificate authority (CA) mode
when you create a Cloud SQL instance. With customer-managed CA mode, you set up your own CA pool and CA in
Certificate Authority Service (https://cloud.google.com/certificate-authority-service/docs/ca-service-overview). This option lets you
establish your own CA hierarchy and manage the rotation of CA certificates for your Cloud SQL instances to help you meet
your regulatory compliance needs.

To use the customer-managed CA option in Cloud SQL, see Use a customer-managed certificate authority (CA)
(https://cloud.google.com/sql/docs/sqlserver/customer-managed-ca). For more information about server CA mode options, see
Certificate authority (CA) hierarchies (https://cloud.google.com/sql/docs/sqlserver/authorize-ssl#ca-hierarchies). The customer-
managed CA feature is in Preview (https://cloud.google.com/products#product-launch-stages).

Cloud Storage

ANNOUNCEMENT Announced billing changes (https://cloud.google.com/resources/storage/billing-fix-bigquery) for accessing Cloud Storage through
BigQuery take effect Feb 21, 2025. These changes were originally set to take effect on February 01, 2025.

Confidential Space

ANNOUNCEMENT A new Confidential Space image (250101) is now available.

CHANGE Update go-sev-guest to v.0.12.1.

CHANGE Update the verifier API version to include a new principal tag token type.

Generative AI on Vertex AI

FEATURE Gemini 2.0 Flash general availability for text-only output

Gemini 2.0 Flash is now generally available for text-only outputs. Multimodal outputs are still available only as a private
preview. For more information, see Gemini 2.0 (https://cloud.google.com/vertex-ai/generative-ai/docs/gemini-v2).

https://cloud.google.com/release-notes 300/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

FEATURE New Gemini 2.0 Pro and Gemini 2.0 Flash-Lite models available to users

Two new models in the Gemini 2.0 family are now available to users:

Gemini 2.0 Pro: Our strongest model for coding and world knowledge, featuring a 2M long context window. Gemini
2.0 Pro is available as an experimental model in Vertex AI.

Gemini 2.0 Flash-Lite: Our fastest and most cost efficient Flash model. Gemini 2.0 Flash-Lite is available as a
Preview model in Vertex AI.

For more information, see Gemini 2.0 (https://cloud.google.com/vertex-ai/generative-ai/docs/gemini-v2)

Google Distributed Cloud (software only) for VMware

ANNOUNCEMENT Google Distributed Cloud (software only) for VMware 1.31.100-gke.136 is now available for download
(https://cloud.google.com/anthos/clusters/docs/on-prem/latest/downloads). To upgrade, see Upgrade a cluster or a node pool
(https://cloud.google.com/anthos/clusters/docs/on-prem/latest/how-to/upgrading). Google Distributed Cloud 1.31.100-gke.136
runs on Kubernetes v1.31.4-gke.900.

If you are using a third-party storage vendor, check the GDC Ready storage partners
(https://cloud.google.com/anthos/docs/resources/partner-storage) document to make sure the storage vendor has already
passed the qualification for this release.

After a release, it takes approximately 7 to 14 days for the version to become available for use with GKE On-Prem API
clients (https://cloud.google.com/kubernetes-engine/distributed-cloud/vmware/docs/how-to/cluster-lifecycle-management-tools): the
Google Cloud console, the gcloud CLI, and Terraform.

CHANGE The following functional change was made in 1.31.100-gke.136:

https://cloud.google.com/release-notes 301/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Removed support in the Konnectivity server (konnectivity-server) for the following weak cryptographic cipher
suites: TLS_RSA_WITH_AES_256_GCM_SHA384 and TLS_RSA_WITH_AES_128_GCM_SHA256

FIXED The following issues are fixed in 1.31.100-gke.136:

Fixed an issue to prevent checking for add-on node IP addresses for HA admin clusters with three control-plane
nodes and no add-on nodes.

Fixed an issue where DNS and NTP servers weren't checked for HA admin clusters or for user clusters configured for
Controlplane V2.

Fixed an issue where the VM template used for the HA admin control plane node repair isn't refreshed in vCenter
after an upgrade.

Fixed an issue where a race condition during migration caused admin add-on nodes to get stuck at a NotReady
status.

FIXED The 1.31.100-gke.136 release includes many vulnerability fixes. For a list of all vulnerabilities fixed in this release, see
Vulnerability fixes (https://cloud.google.com/kubernetes-engine/distributed-cloud/vmware/docs/vulnerabilities).

ANNOUNCEMENT Google Distributed Cloud (software only) for VMware 1.30.500-gke.126 is now available for download
(https://cloud.google.com/anthos/clusters/docs/on-prem/latest/downloads). To upgrade, see Upgrade a cluster or a node pool
(https://cloud.google.com/anthos/clusters/docs/on-prem/latest/how-to/upgrading). Google Distributed Cloud 1.30.500-gke.126
runs on Kubernetes v1.30.8-gke.200.

If you are using a third-party storage vendor, check the GDC Ready storage partners
(https://cloud.google.com/anthos/docs/resources/partner-storage) document to make sure the storage vendor has already
passed the qualification for this release.

https://cloud.google.com/release-notes 302/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

After a release, it takes approximately 7 to 14 days for the version to become available for use with GKE On-Prem API
clients (https://cloud.google.com/kubernetes-engine/distributed-cloud/vmware/docs/how-to/cluster-lifecycle-management-tools): the
Google Cloud console, the gcloud CLI, and Terraform.

FIXED The following issues are fixed in 1.30.500-gke.126:

Fixed an issue
(https://cloud.google.com/kubernetes-engine/distributed-cloud/vmware/docs/troubleshooting/known-issues#non-ha-admin-cluster-
upgrade-stuck-at-creating-or-updating-cluster-control-plane-workloads)
that caused non-HA cluster upgrades to get stuck creating or updating cluster control plane workloads.

Fixed an issue where DNS and NTP servers weren't checked for HA admin clusters or for user clusters configured for
Controlplane V2.

Fixed an issue
(https://cloud.google.com/kubernetes-engine/distributed-cloud/vmware/docs/troubleshooting/known-issues#admin-add-on-nodes-
stuck-at-notready-during-non-ha-to-ha-admin-cluster-migration)
where a race condition during migration caused admin add-on nodes to get stuck at a NotReady status.

Fixed an issue where customer workloads with high resource requests triggered irrelevant resource validation
warnings.

Fixed an issue
(https://cloud.google.com/kubernetes-engine/distributed-cloud/vmware/docs/troubleshooting/known-issues#ha-admin-control-
plane-node-shows-older-version-after-running-gkectl-repair-admin-master)
where the VM template used for the HA admin control plane node repair isn't refreshed in vCenter after an upgrade.

FIXED The 1.30.500-gke.126 release includes many vulnerability fixes. For a list of all vulnerabilities fixed in this release, see
Vulnerability fixes (https://cloud.google.com/kubernetes-engine/distributed-cloud/vmware/docs/vulnerabilities).

Google Distributed Cloud (software only) for bare metal

https://cloud.google.com/release-notes 303/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

ANNOUNCEMENT Release 1.31.100-gke.136

Google Distributed Cloud for bare metal 1.31.100-gke.136 is now available for download
(https://cloud.google.com/kubernetes-engine/distributed-cloud/bare-metal/docs/downloads). To upgrade, see Upgrade clusters
(https://cloud.google.com/kubernetes-engine/distributed-cloud/bare-metal/docs/how-to/upgrade). Google Distributed Cloud for bare
metal 1.31.100-gke.136 runs on Kubernetes 1.31.

After a release, it takes approximately 7 to 14 days for the version to become available for installations or upgrades with
the GKE On-Prem API clients
(https://cloud.google.com/kubernetes-engine/distributed-cloud/bare-metal/docs/installing/cluster-lifecycle-management-tools): the
Google Cloud console, the gcloud CLI, and Terraform.

If you use a third-party storage vendor, check the Ready storage partners
(https://cloud.google.com/anthos/docs/resources/partner-storage) document to make sure the storage vendor has already
passed the qualification for this release of Google Distributed Cloud for bare metal.

FEATURE The following feature is available in 1.31.100-gke.136:

GA: Added bmctl configure projects

(https://cloud.google.com/kubernetes-engine/distributed-cloud/bare-metal/docs/reference/bmctl#configure_projects) command
to automatically configure IAM policy bindings for workload identity cluster authentication
(https://cloud.google.com/kubernetes-engine/distributed-cloud/bare-metal/docs/installing/keyless). Creates required service
accounts and enables required APIs.

CHANGE The following functional change was made in 1.31.100-gke.136:

Cluster deletion now deletes worker node pools prior to deleting any control plane node pools.

FIXED The following issues are fixed in 1.31.100-gke.136:

https://cloud.google.com/release-notes 304/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Fixed an issue
(https://cloud.google.com/kubernetes-engine/distributed-cloud/bare-metal/docs/troubleshooting/known-issues#immutable-field-
error-when-updating-user-clusters-with-bmctl-version-1.30.x)
where bmctl update clustercommand fails for user clusters that were created with
thecloudOperationsServiceAccountKeyPath setting in the header section of the cluster configuration file.

Fixed an issue where prompting during bmctl update cluster prevented use of automation. You can now use the -
-quiet flag to skip prompting.

Fixed an issue where node machines didn't update when the registry mirror hosts field was updated.

FIXED The 1.31.100-gke.136 release includes many vulnerability fixes. For a list of all vulnerabilities fixed in this release, see
Vulnerability fixes (https://cloud.google.com/kubernetes-engine/distributed-cloud/bare-metal/docs/vulnerabilities).

ISSUE For information about the latest known issues, see Google Distributed Cloud for bare metal known issues
(https://cloud.google.com/kubernetes-engine/distributed-cloud/bare-metal/docs/troubleshooting/known-issues) in the Troubleshooting
section.

ANNOUNCEMENT
Release 1.29.1000-gke.93
Google Distributed Cloud for bare metal 1.29.1000-gke.93 is now available for download
(https://cloud.google.com/kubernetes-engine/distributed-cloud/bare-metal/docs/downloads). To upgrade, see Upgrade clusters
(https://cloud.google.com/kubernetes-engine/distributed-cloud/bare-metal/docs/how-to/upgrade). Google Distributed Cloud for bare
metal 1.29.1000-gke.93 runs on Kubernetes 1.29.

After a release, it takes approximately 7 to 14 days for the version to become available for installations or upgrades with
the GKE On-Prem API clients
(https://cloud.google.com/kubernetes-engine/distributed-cloud/bare-metal/docs/installing/cluster-lifecycle-management-tools): the
Google Cloud console, the gcloud CLI, and Terraform.

https://cloud.google.com/release-notes 305/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

If you use a third-party storage vendor, check the Ready storage partners
(https://cloud.google.com/anthos/docs/resources/partner-storage) document to make sure the storage vendor has already
passed the qualification for this release of Google Distributed Cloud for bare metal.

CHANGE The following functional change was made in 1.29.1000-gke.93:

Cluster deletion now deletes worker node pools prior to deleting any control plane node pools.

FIXED The 1.29.1000-gke.93 release includes many vulnerability fixes. For a list of all vulnerabilities fixed in this release, see
Vulnerability fixes (https://cloud.google.com/kubernetes-engine/distributed-cloud/bare-metal/docs/vulnerabilities).

ISSUE For information about the latest known issues, see Google Distributed Cloud for bare metal known issues
(https://cloud.google.com/kubernetes-engine/distributed-cloud/bare-metal/docs/troubleshooting/known-issues) in the Troubleshooting
section.

ANNOUNCEMENT
Release 1.30.500-gke.126
Google Distributed Cloud for bare metal 1.30.500-gke.126 is now available for download
(https://cloud.google.com/kubernetes-engine/distributed-cloud/bare-metal/docs/downloads). To upgrade, see Upgrade clusters
(https://cloud.google.com/kubernetes-engine/distributed-cloud/bare-metal/docs/how-to/upgrade). Google Distributed Cloud for bare
metal 1.30.500-gke.126 runs on Kubernetes 1.30.

After a release, it takes approximately 7 to 14 days for the version to become available for installations or upgrades with
the GKE On-Prem API clients
(https://cloud.google.com/kubernetes-engine/distributed-cloud/bare-metal/docs/installing/cluster-lifecycle-management-tools): the
Google Cloud console, the gcloud CLI, and Terraform.

https://cloud.google.com/release-notes 306/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

If you use a third-party storage vendor, check the Ready storage partners
(https://cloud.google.com/anthos/docs/resources/partner-storage) document to make sure the storage vendor has already
passed the qualification for this release of Google Distributed Cloud for bare metal.

FIXED The following issues are fixed in 1.30.500-gke.126:

Fixed an issue where prompting during bmctl update cluster prevented use of automation. You can now use the -
-quiet flag to skip prompting.

Fixed an issue where node machines didn't update when the registry mirror hosts field was updated.

FIXED The 1.30.500-gke.126 release includes many vulnerability fixes. For a list of all vulnerabilities fixed in this release, see
Vulnerability fixes (https://cloud.google.com/kubernetes-engine/distributed-cloud/bare-metal/docs/vulnerabilities).

ISSUE For information about the latest known issues, see Google Distributed Cloud for bare metal known issues
(https://cloud.google.com/kubernetes-engine/distributed-cloud/bare-metal/docs/troubleshooting/known-issues) in the Troubleshooting
section.

Google SecOps

CHANGE Google SecOps has updated the list of supported default parsers. Parsers are updated gradually, so it might take one to
four days before you see the changes reflected in your region.

The following supported default parsers have changed. Each parser is listed by product name and log_type value, if
applicable. This list now includes both released default parsers and pending parser updates.

A10 Load Balancer (A10_LOAD_BALANCER)

Akamai Enterprise Application Access (AKAMAI_EAA)

Akamai WAF (AKAMAI_WAF)

https://cloud.google.com/release-notes 307/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Apache (APACHE)

Apache Tomcat (TOMCAT)

AppOmni (APPOMNI)

Arcsight CEF (ARCSIGHT_CEF)

Aruba (ARUBA_WIRELESS)

Aruba Airwave (ARUBA_AIRWAVE)

Atlassian Cloud Admin Audit (ATLASSIAN_AUDIT)

Attivo Networks (ATTIVO)

Auth0 (AUTH_ZERO)

Avigilon Access Logs (AVIGILON_ACCESS_LOGS)

AWS Cloudtrail (AWS_CLOUDTRAIL)

AWS GuardDuty (GUARDDUTY)

AWS RDS (AWS_RDS)

AWS Security Hub (AWS_SECURITY_HUB)

AWS VPC Flow (AWS_VPC_FLOW)

Azure AD (AZURE_AD)

Azure Application Gateway (AZURE_GATEWAY)

Azure Cosmos DB (AZURE_COSMOS_DB)

https://cloud.google.com/release-notes 308/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Azure Firewall (AZURE_FIREWALL)

Azure Front Door (AZURE_FRONT_DOOR)

Bindplane Agent (BINDPLANE_AGENT)

BloxOne Threat Defense (BLOXONE)

Blue Coat Proxy (BLUECOAT_WEBPROXY)

Cato Networks (CATO_NETWORKS)

Check Point (CHECKPOINT_FIREWALL)

Check Point Harmony (CHECKPOINT_HARMONY)

CircleCI (CIRCLECI)

Cisco AMP (CISCO_AMP)

Cisco Application Centric Infrastructure (CISCO_ACI)

Cisco ASA (CISCO_ASA_FIREWALL)

Cisco Email Security (CISCO_EMAIL_SECURITY)

Cisco Firepower NGFW (CISCO_FIREPOWER_FIREWALL)

Cisco Internetwork Operating System (CISCO_IOS)

Cisco ISE (CISCO_ISE)

Cisco NX-OS (CISCO_NX_OS)

Cisco Umbrella DNS (UMBRELLA_DNS)

https://cloud.google.com/release-notes 309/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Cisco Umbrella Web Proxy (UMBRELLA_WEBPROXY)

Cisco vManage SD-WAN (CISCO_SDWAN)

Cisco VPN (CISCO_VPN)

Citrix Netscaler (CITRIX_NETSCALER)

Cloudflare (CLOUDFLARE)

Cloudflare Warp (CLOUDFLARE_WARP)

CrowdStrike Detection Monitoring (CS_DETECTS)

CrowdStrike Falcon (CS_EDR)

CrowdStrike Falcon Stream (CS_STREAM)

Crowdstrike Identity Protection Services (CS_IDP)

Dell CyberSense (DELL_CYBERSENSE)

Duo Administrator Logs (DUO_ADMIN)

Elastic Packet Beats (ELASTIC_PACKETBEATS)

Elastic Windows Event Log Beats (ELASTIC_WINLOGBEAT)

ExtraHop RevealX (EXTRAHOP)

F5 ASM (F5_ASM)

F5 BIGIP LTM (F5_BIGIP_LTM)

F5 Distributed Cloud Services (F5_DCS)

https://cloud.google.com/release-notes 310/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Fastly CDN (FASTLY_CDN)

Forcepoint DLP (FORCEPOINT_DLP)

Forcepoint Proxy (FORCEPOINT_WEBPROXY)

FortiGate (FORTINET_FIREWALL)

Fortinet FortiAnalyzer (FORTINET_FORTIANALYZER)

Fortinet FortiClient (FORTINET_FORTICLIENT)

Fortinet FortiDDoS (FORTINET_FORTIDDOS)

Fortinet FortiEDR (FORTINET_FORTIEDR)

Fortinet Proxy (FORTINET_WEBPROXY)

GitHub (GITHUB)

Gitlab (GITLAB)

HP Linux (HP_LINUX)

IBM Guardium (GUARDIUM)

Imperva (IMPERVA_WAF)

Juniper MX Router (JUNIPER_MX)

Kemp Load Balancer (KEMP_LOADBALANCER)

Linkshadow NDR (LINKSHADOW_NDR)

Linux Auditing System (AuditD) (AUDITD)

https://cloud.google.com/release-notes 311/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

McAfee Web Gateway (MCAFEE_WEBPROXY)

McAfee Web Protection (MCAFEE_WEB_PROTECTION)

Micro Focus iManager (MICROFOCUS_IMANAGER)

Microsoft Azure NSG Flow (AZURE_NSG_FLOW)

Microsoft Azure Resource (AZURE_RESOURCE_LOGS)

Microsoft CyberX (CYBERX)

Microsoft Defender for Endpoint (MICROSOFT_DEFENDER_ENDPOINT)

Microsoft Dynamics 365 User Activity (MICROSOFT_DYNAMICS_365)

Microsoft Graph API Alerts (MICROSOFT_GRAPH_ALERT)

Microsoft Netlogon (MICROSOFT_NETLOGON)

Microsoft PowerShell (POWERSHELL)

Microsoft System Center Endpoint Protection (MICROSOFT_SCEP)

Mikrotik Router (MIKROTIK_ROUTER)

Mimecast URL Logs (MIMECAST_URL_LOGS)

Office 365 (OFFICE_365)

Okta (OKTA)

Okta User Context (OKTA_USER_CONTEXT)

Open LDAP (OPENLDAP)

https://cloud.google.com/release-notes 312/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Open Policy Agent (OPA)

Oracle (ORACLE_DB)

Oracle Cloud Guard (OCI_CLOUDGUARD)

Orca Cloud Security Platform (ORCA)

Palo Alto Cortex XDR Alerts (CORTEX_XDR)

Palo Alto Networks Firewall (PAN_FIREWALL)

Palo Alto Networks IoT Security (PAN_IOT)

Palo Alto Prisma Cloud Alert payload (PAN_PRISMA_CA)

ProFTPD (PROFTPD)

Proofpoint Observeit (OBSERVEIT)

Proofpoint On Demand (PROOFPOINT_ON_DEMAND)

ProofPoint Secure Email Relay (PROOFPOINT_SER)

Proofpoint Tap Alerts (PROOFPOINT_MAIL)

Proofpoint Threat Response (PROOFPOINT_TRAP)

RSA SecurID Access Identity Router (RSA_SECURID)

Rubrik (RUBRIK)

Salesforce (SALESFORCE)

Security Command Center Threat (N/A)

https://cloud.google.com/release-notes 313/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Sentry (SENTRY)

ServiceNow Audit (SERVICENOW_AUDIT)

ServiceNow CMDB (SERVICENOW_CMDB)

Smartsheet (SMARTSHEET)

Snare System Diagnostic Logs (SNARE_SOLUTIONS)

Snowflake (SNOWFLAKE)

Solaris system (SOLARIS_SYSTEM)

SonicWall (SONIC_FIREWALL)

Sophos Central (SOPHOS_CENTRAL)

Sophos UTM (SOPHOS_UTM)

Sourcefire (SOURCEFIRE_IDS)

Suricata EVE (SURICATA_EVE)

Symantec DLP (SYMANTEC_DLP)

Symantec Endpoint Protection (SEP)

Symantec Event export (SYMANTEC_EVENT_EXPORT)

Symantec Web Security Service (SYMANTEC_WSS)

Sysdig (SYSDIG)

Tableau (TABLEAU)

https://cloud.google.com/release-notes 314/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Tanium Asset (TANIUM_ASSET)

Tanium Threat Response (TANIUM_THREAT_RESPONSE)

tenable.io (TENABLE_IO)

Trend Micro (TIPPING_POINT)

Trend Micro Deep Security (TRENDMICRO_DEEP_SECURITY)

Trend Micro Vision One (TRENDMICRO_VISION_ONE)

TrendMicro Deep Discovery Inspector (TRENDMICRO_DDI)

UberAgent (UBERAGENT)

Unix system (NIX_SYSTEM)

Vectra Detect (VECTRA_DETECT)

Vectra Stream (VECTRA_STREAM)

Venafi ZTPKI (VENAFI_ZTPKI)

Vercel WAF (VERCEL_WAF)

Virtru Email Encryption (VIRTRU_EMAIL_ENCRYPTION)

WatchGuard (WATCHGUARD)

Wazuh (WAZUH)

Windows DNS (WINDOWS_DNS)

Windows Event (WINEVTLOG)

https://cloud.google.com/release-notes 315/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Windows Event (XML) (WINEVTLOG_XML)

Windows Network Policy Server (WINDOWS_NET_POLICY_SERVER)

Zendesk CRM (ZENDESK_CRM)

ZeroFox Platform (ZEROFOX_PLATFORM)

Zimperium (ZIMPERIUM)

Zoom Operation Logs (ZOOM_OPERATION_LOGS)

Zscaler (ZSCALER_WEBPROXY)

Zscaler Internet Access Audit Logs (ZSCALER_INTERNET_ACCESS)

Zscaler Secure Private Access Audit Logs (ZSCALER_ZPA_AUDIT)

The following log types were added without a default parser. Each parser is listed by product name and log_type value, if
applicable.

Arcon PAM (ARCON_PAM)

Azure VNET Flow (AZURE_VNET_FLOW)

Cameyo Activity Logs (CAMEYO_ACTIVITY_LOGS)

ChromeOS XDR (CHROMEOS_XDR)

Cisco Vulnerability Management (CISCO_VULNERABILITY_MANAGEMENT)

Cloudflare Network Analytics (CLOUDFLARE_NETWORK_ANALYTICS)

Draytek Router (DRAYTEK_ROUTER)

https://cloud.google.com/release-notes 316/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

FA Solutions (FA_SOLUTIONS)

Files dot com (FILES_DOT_COM)

Fortinet ADC (FORTINET_ADC)

FoxPass Audit Logs (FOXPASS_AUDIT_LOGS)

Front (FRONT)

Ghangor DLP (GHANGOR_DLP)

Hillstone Firewall (HILLSTONE_NGFW)

Hoxhunt (HOXHUNT)

Huawei NextGen Firewall (HUAWEI_FIREWALL)

Huawei Fusion Sphere Hypervisor (HUAWEI_FUSIONSPHERE)

IBM Security Verify Access (IBM_SVA)

Indusface WAF (INDUSFACE_WAF)

Informatica (INFORMATICA)

Informatica Powercenter (INFORMATICA_POWERCENTER)

Intel Endpoint Management Assistant (INTEL_EMA)

Jamf Protect Telemetry V2 (JAMF_TELEMETRY_V2)

JiranSecurity MailScreen (JIRANSECURITY_MAILSCREEN)

Juniper SSR Conductor (JUNIPER_SSR_CONDUCTOR)

https://cloud.google.com/release-notes 317/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Metabase (METABASE)

Netlify Log Drains (NETLIFY_LOGDRAINS)

Pingcap TIDB (PINGCAP_TIDB)

PingOne Advanced Identity Cloud (PINGONE_AIC)

PingOne Protect (PINGONE_PROTECT)

Privacy-I (PRIVACY_I)

ReviveSec (REVIVESEC)

Sangfor Proxy (SANGFOR_PROXY)

SoftEther VPN (SOFTETHER_VPN)

Tehtris EDR (TEHTRIS_EDR)

TrendMicro Cloud Email Gateway Protection (TRENDMICRO_CLOUD_EMAIL_GATEWAY_PROTECTION)

VMware VeloCloud SD-WAN (VELOCLOUD_SDWAN)

Wing Security (WING_SECURITY)

For a list of supported log types and details about default parser changes, see Supported log types and default parsers
(https://cloud.google.com/chronicle/docs/ingestion/parser-list/supported-default-parsers).
Google SecOps SIEM

CHANGE Google SecOps has updated the list of supported default parsers. Parsers are updated gradually, so it might take one to
four days before you see the changes reflected in your region.

https://cloud.google.com/release-notes 318/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

The following supported default parsers have changed. Each parser is listed by product name and log_type value, if
applicable. This list now includes both released default parsers and pending parser updates.

A10 Load Balancer (A10_LOAD_BALANCER)

Akamai Enterprise Application Access (AKAMAI_EAA)

Akamai WAF (AKAMAI_WAF)

Apache (APACHE)

Apache Tomcat (TOMCAT)

AppOmni (APPOMNI)

Arcsight CEF (ARCSIGHT_CEF)

Aruba (ARUBA_WIRELESS)

Aruba Airwave (ARUBA_AIRWAVE)

Atlassian Cloud Admin Audit (ATLASSIAN_AUDIT)

Attivo Networks (ATTIVO)

Auth0 (AUTH_ZERO)

Avigilon Access Logs (AVIGILON_ACCESS_LOGS)

AWS Cloudtrail (AWS_CLOUDTRAIL)

AWS GuardDuty (GUARDDUTY)

AWS RDS (AWS_RDS)

https://cloud.google.com/release-notes 319/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

AWS Security Hub (AWS_SECURITY_HUB)

AWS VPC Flow (AWS_VPC_FLOW)

Azure AD (AZURE_AD)

Azure Application Gateway (AZURE_GATEWAY)

Azure Cosmos DB (AZURE_COSMOS_DB)

Azure Firewall (AZURE_FIREWALL)

Azure Front Door (AZURE_FRONT_DOOR)

Bindplane Agent (BINDPLANE_AGENT)

BloxOne Threat Defense (BLOXONE)

Blue Coat Proxy (BLUECOAT_WEBPROXY)

Cato Networks (CATO_NETWORKS)

Check Point (CHECKPOINT_FIREWALL)

Check Point Harmony (CHECKPOINT_HARMONY)

CircleCI (CIRCLECI)

Cisco AMP (CISCO_AMP)

Cisco Application Centric Infrastructure (CISCO_ACI)

Cisco ASA (CISCO_ASA_FIREWALL)

Cisco Email Security (CISCO_EMAIL_SECURITY)

https://cloud.google.com/release-notes 320/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Cisco Firepower NGFW (CISCO_FIREPOWER_FIREWALL)

Cisco Internetwork Operating System (CISCO_IOS)

Cisco ISE (CISCO_ISE)

Cisco NX-OS (CISCO_NX_OS)

Cisco Umbrella DNS (UMBRELLA_DNS)

Cisco Umbrella Web Proxy (UMBRELLA_WEBPROXY)

Cisco vManage SD-WAN (CISCO_SDWAN)

Cisco VPN (CISCO_VPN)

Citrix Netscaler (CITRIX_NETSCALER)

Cloudflare (CLOUDFLARE)

Cloudflare Warp (CLOUDFLARE_WARP)

CrowdStrike Detection Monitoring (CS_DETECTS)

CrowdStrike Falcon (CS_EDR)

CrowdStrike Falcon Stream (CS_STREAM)

Crowdstrike Identity Protection Services (CS_IDP)

Dell CyberSense (DELL_CYBERSENSE)

Duo Administrator Logs (DUO_ADMIN)

Elastic Packet Beats (ELASTIC_PACKETBEATS)

https://cloud.google.com/release-notes 321/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Elastic Windows Event Log Beats (ELASTIC_WINLOGBEAT)

ExtraHop RevealX (EXTRAHOP)

F5 ASM (F5_ASM)

F5 BIGIP LTM (F5_BIGIP_LTM)

F5 Distributed Cloud Services (F5_DCS)

Fastly CDN (FASTLY_CDN)

Forcepoint DLP (FORCEPOINT_DLP)

Forcepoint Proxy (FORCEPOINT_WEBPROXY)

FortiGate (FORTINET_FIREWALL)

Fortinet FortiAnalyzer (FORTINET_FORTIANALYZER)

Fortinet FortiClient (FORTINET_FORTICLIENT)

Fortinet FortiDDoS (FORTINET_FORTIDDOS)

Fortinet FortiEDR (FORTINET_FORTIEDR)

Fortinet Proxy (FORTINET_WEBPROXY)

GitHub (GITHUB)

Gitlab (GITLAB)

HP Linux (HP_LINUX)

IBM Guardium (GUARDIUM)

https://cloud.google.com/release-notes 322/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Imperva (IMPERVA_WAF)

Juniper MX Router (JUNIPER_MX)

Kemp Load Balancer (KEMP_LOADBALANCER)

Linkshadow NDR (LINKSHADOW_NDR)

Linux Auditing System (AuditD) (AUDITD)

McAfee Web Gateway (MCAFEE_WEBPROXY)

McAfee Web Protection (MCAFEE_WEB_PROTECTION)

Micro Focus iManager (MICROFOCUS_IMANAGER)

Microsoft Azure NSG Flow (AZURE_NSG_FLOW)

Microsoft Azure Resource (AZURE_RESOURCE_LOGS)

Microsoft CyberX (CYBERX)

Microsoft Defender for Endpoint (MICROSOFT_DEFENDER_ENDPOINT)

Microsoft Dynamics 365 User Activity (MICROSOFT_DYNAMICS_365)

Microsoft Graph API Alerts (MICROSOFT_GRAPH_ALERT)

Microsoft Netlogon (MICROSOFT_NETLOGON)

Microsoft PowerShell (POWERSHELL)

Microsoft System Center Endpoint Protection (MICROSOFT_SCEP)

Mikrotik Router (MIKROTIK_ROUTER)

https://cloud.google.com/release-notes 323/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Mimecast URL Logs (MIMECAST_URL_LOGS)

Office 365 (OFFICE_365)

Okta (OKTA)

Okta User Context (OKTA_USER_CONTEXT)

Open LDAP (OPENLDAP)

Open Policy Agent (OPA)

Oracle (ORACLE_DB)

Oracle Cloud Guard (OCI_CLOUDGUARD)

Orca Cloud Security Platform (ORCA)

Palo Alto Cortex XDR Alerts (CORTEX_XDR)

Palo Alto Networks Firewall (PAN_FIREWALL)

Palo Alto Networks IoT Security (PAN_IOT)

Palo Alto Prisma Cloud Alert payload (PAN_PRISMA_CA)

ProFTPD (PROFTPD)

Proofpoint Observeit (OBSERVEIT)

Proofpoint On Demand (PROOFPOINT_ON_DEMAND)

ProofPoint Secure Email Relay (PROOFPOINT_SER)

Proofpoint Tap Alerts (PROOFPOINT_MAIL)

https://cloud.google.com/release-notes 324/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Proofpoint Threat Response (PROOFPOINT_TRAP)

RSA SecurID Access Identity Router (RSA_SECURID)

Rubrik (RUBRIK)

Salesforce (SALESFORCE)

Security Command Center Threat (N/A)

Sentry (SENTRY)

ServiceNow Audit (SERVICENOW_AUDIT)

ServiceNow CMDB (SERVICENOW_CMDB)

Smartsheet (SMARTSHEET)

Snare System Diagnostic Logs (SNARE_SOLUTIONS)

Snowflake (SNOWFLAKE)

Solaris system (SOLARIS_SYSTEM)

SonicWall (SONIC_FIREWALL)

Sophos Central (SOPHOS_CENTRAL)

Sophos UTM (SOPHOS_UTM)

Sourcefire (SOURCEFIRE_IDS)

Suricata EVE (SURICATA_EVE)

Symantec DLP (SYMANTEC_DLP)

https://cloud.google.com/release-notes 325/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Symantec Endpoint Protection (SEP)

Symantec Event export (SYMANTEC_EVENT_EXPORT)

Symantec Web Security Service (SYMANTEC_WSS)

Sysdig (SYSDIG)

Tableau (TABLEAU)

Tanium Asset (TANIUM_ASSET)

Tanium Threat Response (TANIUM_THREAT_RESPONSE)

tenable.io (TENABLE_IO)

Trend Micro (TIPPING_POINT)

Trend Micro Deep Security (TRENDMICRO_DEEP_SECURITY)

Trend Micro Vision One (TRENDMICRO_VISION_ONE)

TrendMicro Deep Discovery Inspector (TRENDMICRO_DDI)

UberAgent (UBERAGENT)

Unix system (NIX_SYSTEM)

Vectra Detect (VECTRA_DETECT)

Vectra Stream (VECTRA_STREAM)

Venafi ZTPKI (VENAFI_ZTPKI)

Vercel WAF (VERCEL_WAF)

https://cloud.google.com/release-notes 326/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Virtru Email Encryption (VIRTRU_EMAIL_ENCRYPTION)

WatchGuard (WATCHGUARD)

Wazuh (WAZUH)

Windows DNS (WINDOWS_DNS)

Windows Event (WINEVTLOG)

Windows Event (XML) (WINEVTLOG_XML)

Windows Network Policy Server (WINDOWS_NET_POLICY_SERVER)

Zendesk CRM (ZENDESK_CRM)

ZeroFox Platform (ZEROFOX_PLATFORM)

Zimperium (ZIMPERIUM)

Zoom Operation Logs (ZOOM_OPERATION_LOGS)

Zscaler (ZSCALER_WEBPROXY)

Zscaler Internet Access Audit Logs (ZSCALER_INTERNET_ACCESS)

Zscaler Secure Private Access Audit Logs (ZSCALER_ZPA_AUDIT)

The following log types were added without a default parser. Each parser is listed by product name and log_type value, if
applicable.

Arcon PAM (ARCON_PAM)

Azure VNET Flow (AZURE_VNET_FLOW)

https://cloud.google.com/release-notes 327/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Cameyo Activity Logs (CAMEYO_ACTIVITY_LOGS)

ChromeOS XDR (CHROMEOS_XDR)

Cisco Vulnerability Management (CISCO_VULNERABILITY_MANAGEMENT)

Cloudflare Network Analytics (CLOUDFLARE_NETWORK_ANALYTICS)

Draytek Router (DRAYTEK_ROUTER)

FA Solutions (FA_SOLUTIONS)

Files dot com (FILES_DOT_COM)

Fortinet ADC (FORTINET_ADC)

FoxPass Audit Logs (FOXPASS_AUDIT_LOGS)

Front (FRONT)

Ghangor DLP (GHANGOR_DLP)

Hillstone Firewall (HILLSTONE_NGFW)

Hoxhunt (HOXHUNT)

Huawei NextGen Firewall (HUAWEI_FIREWALL)

Huawei Fusion Sphere Hypervisor (HUAWEI_FUSIONSPHERE)

IBM Security Verify Access (IBM_SVA)

Indusface WAF (INDUSFACE_WAF)

Informatica (INFORMATICA)

https://cloud.google.com/release-notes 328/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Informatica Powercenter (INFORMATICA_POWERCENTER)

Intel Endpoint Management Assistant (INTEL_EMA)

Jamf Protect Telemetry V2 (JAMF_TELEMETRY_V2)

JiranSecurity MailScreen (JIRANSECURITY_MAILSCREEN)

Juniper SSR Conductor (JUNIPER_SSR_CONDUCTOR)

Metabase (METABASE)

Netlify Log Drains (NETLIFY_LOGDRAINS)

Pingcap TIDB (PINGCAP_TIDB)

PingOne Advanced Identity Cloud (PINGONE_AIC)

PingOne Protect (PINGONE_PROTECT)

Privacy-I (PRIVACY_I)

ReviveSec (REVIVESEC)

Sangfor Proxy (SANGFOR_PROXY)

SoftEther VPN (SOFTETHER_VPN)

Tehtris EDR (TEHTRIS_EDR)

TrendMicro Cloud Email Gateway Protection (TRENDMICRO_CLOUD_EMAIL_GATEWAY_PROTECTION)

VMware VeloCloud SD-WAN (VELOCLOUD_SDWAN)

Wing Security (WING_SECURITY)

https://cloud.google.com/release-notes 329/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

For a list of supported log types and details about default parser changes, see Supported log types and default parsers
(https://cloud.google.com/chronicle/docs/ingestion/parser-list/supported-default-parsers).
Organization Policy

FEATURE You can now create custom organization policies for Cloud Monitoring alerting policies, notification channels, and
snoozes. For more information, see Use custom organization policies
(https://cloud.google.com/monitoring/docs/custom-constraints).

Resource Manager

FEATURE You can now create custom organization policies for Cloud Monitoring alerting policies, notification channels, and
snoozes. For more information, see Use custom organization policies
(https://cloud.google.com/monitoring/docs/custom-constraints).

Sensitive Data Protection

CHANGE The CREDIT_CARD_EXPIRATION_DATE infoType detector is available in all regions. For more information about all built-in
infoTypes, see InfoType detector reference (https://cloud.google.com/dlp/docs/infotypes-reference).

Spanner

FEATURE Informational foreign keys are available in Spanner. Informational foreign keys don't enforce referential integrity and are
used to declare the intended logical data model for query optimization. Enforced foreign keys, which enforce referential
integrity, are also available.

Informational foreign keys are supported by GoogleSQL only. Enforced foreign keys are supported by GoogleSQL and
PostgreSQL.

For more information, see the following:

https://cloud.google.com/release-notes 330/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Types of foreign keys (https://cloud.google.com/spanner/docs/foreign-keys/overview#types-of-foreign-keys)

Comparison of foreign key types

(https://cloud.google.com/spanner/docs/foreign-keys/overview#comparison-of-foreign-keys-types)

Choose which foreign key type to use (https://cloud.google.com/spanner/docs/foreign-keys/overview#choose-foreign-key-type)

Use informational foreign keys (https://cloud.google.com/spanner/docs/foreign-keys/overview#use-informational-foreign-keys)

February 04, 2025

Apigee Integrated Portal

ANNOUNCEMENT On February 4, 2025 we released a new version of the Apigee integrated portal.

FEATURE This release includes general improvements to performance and availability.

Backup and DR

ANNOUNCEMENT The Backup and DR service has added support for activating the management console and for storing backup vault data in
the following regions: us-east5, asia-northeast1, and asia-southeast2.

Cloud Asset Inventory

FEATURE The following resource types are now publicly available through the analyze policy APIs
(https://cloud.google.com/asset-inventory/docs/analyzing-iam-policy) (AnalyzeIamPolicy
(https://cloud.google.com/asset-inventory/docs/reference/rest/v1/TopLevel/analyzeIamPolicy) and AnalyzeIamPolicyLongrunning
(https://cloud.google.com/asset-inventory/docs/reference/rest/v1/TopLevel/analyzeIamPolicyLongrunning)).

https://cloud.google.com/release-notes 331/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Google Kubernetes Engine

admissionregistration.k8s.io/ValidatingWebhookConfiguration

BigQuery Data Transfer API

bigquerydatatransfer.googleapis.com/TransferConfig
Cloud Composer

ANNOUNCEMENT All Cloud Composer environment's GKE clusters are set up with maintenance exclusions from January 21, 2025 to
February 10, 2025. For more information, see Maintenance exclusions
(https://cloud.google.com/kubernetes-engine/docs/concepts/maintenance-windows-and-exclusions#exclusions).

Cloud Monitoring

FEATURE When you create a snooze from the Incident details page, you can now apply the snooze to other incidents that have one
or more of the same resource labels. For more information, see Create a snooze
(https://cloud.google.com/monitoring/alerts/manage-snooze#create).

Cloud Run

FEATURE When deploying a function in Cloud Run, you can now specify an Artifact Registry image repository
(https://cloud.google.com/run/docs/deploy-functions#specify-image-repository) to store the container (Preview).

Config Connector

ANNOUNCEMENT Config Connector version 1.128.0 is now available.

FEATURE New Beta resources (direct reconciler)

ApigeeEnvgroup (https://cloud.google.com/config-connector/docs/reference/resource-docs/apigee/apigeeenvgroup)

https://cloud.google.com/release-notes 332/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Define environment groups to specify the hostnames for routing traffic to Apigee environments.

KMSAutokeyconfig (https://cloud.google.com/config-connector/docs/reference/resource-docs/kms/kmsautokeyconfig)

Manage the KMS auto key (https://cloud.google.com/kms/docs/autokey-overview) which simplifies the CMEKs
provisioning and assignment.

FEATURE New Fields

SpannerInstance

You need to use the alpha.cnrm.cloud.google.com/reconciler: direct annotation on SpannerInstance

resource to opt-in these features.

spec.autoscalingConfig

spec.edition

CHANGE Reconciliation Improvements

We have added support for direct reconciliation to more resources, with opt-in behaviour. The API is unchanged. To
use the direct reconciler, add the alpha.cnrm.cloud.google.com/reconciler: direct annotation to the
corresponding Config Connector object. The following resources now have direct reconciliation support:

AlloyDBInstance

SpannerInstance

CHANGE New Alpha resources (direct reconciler)

IAPSettings

https://cloud.google.com/release-notes 333/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Customize the Identity-Aware Proxy (IAP) (https://cloud.google.com/iap/docs/customizing) settings for applications

and services running on Google Cloud Platform.

SecureSourceManangerInstance

SecureSourceManangerRepository

FIXED DataformRepository fields validation error.

Fixed the incorrect format validation for the following fields:

spec.gitRemoteSettings.authenticationTokenSecretVersionRef

spec.gitRemoteSettings.sshAuthenticationConfig.userPrivateKeySecretVersionRef

spec.npmrcEnvironmentVariablesSecretVersionRef

Google Distributed Cloud (software only) for VMware

ANNOUNCEMENT Google Distributed Cloud (software only) for VMware 1.29.1000-gke.94 is now available for download
(https://cloud.google.com/anthos/clusters/docs/on-prem/latest/downloads). To upgrade, see Upgrade a cluster or a node pool
(https://cloud.google.com/anthos/clusters/docs/on-prem/latest/how-to/upgrading). Google Distributed Cloud 1.29.1000-gke.94
runs on Kubernetes v1.29.12-gke.800.

If you are using a third-party storage vendor, check the GDC Ready storage partners
(https://cloud.google.com/anthos/docs/resources/partner-storage) document to make sure the storage vendor has already
passed the qualification for this release.

After a release, it takes approximately 7 to 14 days for the version to become available for use with GKE On-Prem API
clients (https://cloud.google.com/kubernetes-engine/distributed-cloud/vmware/docs/how-to/cluster-lifecycle-management-tools): the
Google Cloud console, the gcloud CLI, and Terraform.

https://cloud.google.com/release-notes 334/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

FIXED The following issues are fixed in 1.29.1000-gke.94:

Fixed an issue to prevent checking for add-on node IP addresses for HA admin clusters with three control-plane
nodes and no add-on nodes.

Fixed an issue where DNS and NTP servers weren't checked for HA admin clusters or for user clusters configured for
Controlplane V2.

FIXED The 1.29.1000-gke.94 release includes many vulnerability fixes. For a list of all vulnerabilities fixed in this release, see
Vulnerability fixes (https://cloud.google.com/kubernetes-engine/distributed-cloud/vmware/docs/vulnerabilities).

Google Kubernetes Engine

FIXED A bug in the image streaming (https://cloud.google.com/kubernetes-engine/docs/how-to/image-streaming) feature caused

authentication-related failures in specific scenarios when the workload tried to access container image data. This bug has
been fixed in the following GKE versions:

1.32.0-gke.1448000 and above.

1.31.4-gke.1183000 and above.

1.30.8-gke.1261000 and above.

SECURITY A security vulnerability was discovered in the Google Secret Manager Provider for Secret Store CSI Driver. This vulnerability
could allow an attacker to gain access to the Kubernetes service account token of the CSI driver.

For more details, see GCP-2025-006 security bulletin (https://cloud.google.com/kubernetes-engine/security-bulletins#gcp-2025-006)

.

FEATURE GKE cluster notifications have the following new capabilities:

https://cloud.google.com/release-notes 335/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

You can now receive cluster notifications through Cloud Logging. To learn more, see Viewing cluster notifications in
Cloud Logging (Preview) (https://cloud.google.com/kubernetes-engine/docs/concepts/cluster-notifications#viewing-logging).

GKE now sends a cluster notification to notify you when your cluster is running a minor version that is at or near the
end of support. To learn more, see Minor version at or near the end of support
(https://cloud.google.com/kubernetes-engine/docs/concepts/cluster-notifications#end-of-standard-support-notification).

GKE now sends a cluster notification to notify you when your cluster has completed an upgrade operation. To learn
more, see Upgrade operation is complete
(https://cloud.google.com/kubernetes-engine/docs/concepts/cluster-notifications#upgrade-operation-complete-notification).

For more details about the different types of cluster notifications GKE sends and how you can receive them, see Cluster
notifications (https://cloud.google.com/kubernetes-engine/docs/concepts/cluster-notifications).
Sensitive Data Protection

ANNOUNCEMENT Regional endpoints for Sensitive Data Protection are available in the eu and us multi-regions. For more information, see
Global and regional endpoints for Sensitive Data Protection
(https://cloud.google.com/sensitive-data-protection/docs/api-endpoints).

Transcoder API

FEATURE Standalone MP3 audio-only outputs are now supported

(https://cloud.google.com/transcoder/docs/concepts/supported-input-and-output-formats).

February 03, 2025

AlloyDB for PostgreSQL

https://cloud.google.com/release-notes 336/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

ANNOUNCEMENT The AlloyDB Omni Kubernetes operator (https://cloud.google.com/alloydb/omni/docs/deploy-kubernetes) version 1.3.0 is

generally available (GA (https://cloud.google.com/products#product-launch-stages)). Version 1.3.0 includes the following new
features and changes:

The Kubernetes operator 1.3.0 supports connection pooling

(https://cloud.google.com/alloydb/omni/docs/use-connection-pooler-kubernetes) (Preview
(https://cloud.google.com/products?e=48754805&hl=en#product-launch-stages)).

You can put the database in maintenance mode

(https://cloud.google.com/alloydb/omni/docs/kubernetes-maintenance-mode) to make a maintenance update or repair a pod.

You can create replication slots and users (https://cloud.google.com/alloydb/omni/docs/create-replication-slots) for logical
replication via the Operator API from your database instance to subscribed applications.

This release of the Kubernetes operator adds support for kube-state-metrics

(https://github.com/kubernetes/kube-state-metrics) so that you can use Prometheus or a Prometheus-compatible scraper
to consume and display custom resource metrics like DBCluster Backup, and DBInstance. For more information, see
Monitor AlloyDB Omni Kubernetes operator custom resources
(https://cloud.google.com/alloydb/omni/docs/monitor-kubernetes-operator-custom-resources).

When you create a new database cluster, this version of the Kubernetes operator creates read-only (RO) and read-
write (RW) load balancers concurrently, which reduces the time that it takes for the database cluster to be ready for
connections and queries.

Configurable log rotation has a default retention time of seven days, and each archived file is individually
compressed using Gzip. For more information, see Configure AlloyDB Omni log rotation
(https://cloud.google.com/alloydb/omni/docs/configure-log-rotation).

Various bug fixes and performance improvements.

https://cloud.google.com/release-notes 337/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Apigee UI

ANNOUNCEMENT On February 3, we released an updated version of the Apigee UI.

FEATURE GA of Apigee analytics dashboards in Google Cloud console

You can now access these dashboards in the Apigee UI in Google Cloud console:

Analytics > Developer analysis > Developer engagement

(https://cloud.google.com/apigee/docs/api-platform/analytics/partner-engagement-dashboard)

Analytics > Developer analysis > Traffic composition

(https://cloud.google.com/apigee/docs/api-platform/analytics/traffic-composition-dashboard)

Analytics > End user analysis > Devices (https://cloud.google.com/apigee/docs/api-platform/analytics/devices-dashboard)

Analytics > End user analysis > Geomap (https://cloud.google.com/apigee/docs/api-platform/analytics/geomap-dashboard)

Apigee X

FEATURE Public Preview of the Apigee APIM Operator for Kubernetes

The Apigee APIM Operator for Kubernetes (Preview) allows you to perform API management tasks using Kubernetes tools.
It is designed to support cloud-native developers by providing a command-line interface that integrates with familiar
Kubernetes tools like kubectl. The operator works by using various APIM resources to keep your Google Kubernetes
Engine (GKE) cluster synchronized with the Apigee runtime.

For more information, see Apigee APIM Operator for Kubernetes overview
(https://cloud.google.com/apigee/docs/api-platform/apigee-kubernetes/apigee-apim-operator-overview).

BigQuery

https://cloud.google.com/release-notes 338/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

LIBRARIES A weekly digest of client library updates from across the Cloud SDK (https://cloud.google.com/sdk).

Java
(#java)

Changes for google-cloud-bigquery (https://github.com/googleapis/java-bigquery)

2.47.0 (https://github.com/googleapis/java-bigquery/compare/v2.46.0...v2.47.0) (2025-01-29)

Features

bigquery: Support resource tags for datasets in java client (#3647

(https://github.com/googleapis/java-bigquery/issues/3647)) (01e0b74
(https://github.com/googleapis/java-bigquery/commit/01e0b742b9ffeafaa89b080a39d8a66c12c1fd3b))

Bug Fixes

bigquery: Remove ReadAPI bypass in executeSelect() (#3624

(https://github.com/googleapis/java-bigquery/issues/3624)) (fadd992
(https://github.com/googleapis/java-bigquery/commit/fadd992a63fd1bc87c99cc689ed103f05de49a99))

Close bq read client (#3644 (https://github.com/googleapis/java-bigquery/issues/3644)) (8833c97

(https://github.com/googleapis/java-bigquery/commit/8833c97d73e3ba8e6a2061bbc55a6254b9e6668e))

Dependencies

Update dependency com.google.apis:google-api-services-bigquery to v2-rev20250112-2.0.0 (#3651

(https://github.com/googleapis/java-bigquery/issues/3651)) (fd06100
(https://github.com/googleapis/java-bigquery/commit/fd06100c4c18b0416d384ec1f6bdfc796b70ad9f))

https://cloud.google.com/release-notes 339/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Update dependency com.google.cloud:sdk-platform-java-config to v3.42.0 (#3653

(https://github.com/googleapis/java-bigquery/issues/3653)) (1a14342
(https://github.com/googleapis/java-bigquery/commit/1a143428c7f584db3dd6e827c2ee8fe980afe18c))

Update github/codeql-action action to v2.28.1 (#3637 (https://github.com/googleapis/java-bigquery/issues/3637))

(858e517 (https://github.com/googleapis/java-bigquery/commit/858e51792d98276f10fd780ef6edd0bb4a1b4f54))

CHANGE The BigQuery ML ML.BUCKETIZE (https://cloud.google.com/bigquery/docs/reference/standard-sql/bigqueryml-syntax-bucketize) and

ML.QUANTILE_BUCKETIZE (https://cloud.google.com/bigquery/docs/reference/standard-sql/bigqueryml-syntax-quantile-bucketize)
functions now support formatting of the function output. You can use the output_format argument to format the function
output as one of the following:

A string in the format bin_<bucket_index>

A string in interval notation (https://en.wikipedia.org/wiki/Interval_(mathematics))

A JSON-formatted string

FEATURE You can now use the BY NAME and CORRESPONDING modifiers
(https://cloud.google.com/bigquery/docs/reference/standard-sql/query-syntax#by_name_or_corresponding) with set operations to
match columns by name instead of by position. This feature is generally available
(https://cloud.google.com/products#product-launch-stages) (GA).

Bigtable

FEATURE Tags data for Bigtable instances is now included in Cloud Billing data, letting you use tagged Bigtable instances to gain
visibility into your resource usage and spending. For more information, see Understand standard and detailed usage cost
data (https://cloud.google.com/billing/docs/how-to/export-data-bigquery-tables/standard-usage#usage-cost-export-more-info).

Cloud Billing

https://cloud.google.com/release-notes 340/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

CHANGE Google Cloud Marketplace now uses the agency model for marketplace services for UK, FR, and DE customers.

As part of this change, customers will receive separate invoices for Google Cloud and third-party vendor transactions in
the Cloud Marketplace.

For more information, see Split invoicing for agency model transactions
(https://cloud.google.com/billing/docs/how-to/split-invoice) and Marketplace Agency Account Migration FAQ
(https://support.google.com/cloud/answer/13855075).

Cloud Healthcare API

ANNOUNCEMENT A new release is available. This release may include some or all of the following: general performance improvements, bug
fixes, and updates to the API reference documentation.

Cloud Logging

LIBRARIES A weekly digest of client library updates from across the Cloud SDK (https://cloud.google.com/sdk).

JavaPython (#python)
(#java)

Changes for google-cloud-logging (https://github.com/googleapis/java-logging)

3.21.2 (https://github.com/googleapis/java-logging/compare/v3.21.1...v3.21.2) (2025-01-29)

Dependencies

Update dependency com.google.cloud:sdk-platform-java-config to v3.42.0 (#1755

(https://github.com/googleapis/java-logging/issues/1755)) (d404381
(https://github.com/googleapis/java-logging/commit/d4043815246423efe542356dc50ba663092b8df0))

https://cloud.google.com/release-notes 341/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Update dependency io.opentelemetry:opentelemetry-bom to v1.46.0 (#1747

(https://github.com/googleapis/java-logging/issues/1747)) (5ef2853
(https://github.com/googleapis/java-logging/commit/5ef285387d63b79bff7e43b233c7f9770f378dba))

Update googleapis/sdk-platform-java action to v2.52.0 (#1753

(https://github.com/googleapis/java-logging/issues/1753)) (3dcf86a
(https://github.com/googleapis/java-logging/commit/3dcf86adc3e1ef3d5866cd043149808601c213b8))

Cloud Monitoring

FEATURE You can now create custom organization policies on alerting policies, notification channels, and snoozes. For more
information, see Use custom organization policies (https://cloud.google.com/monitoring/docs/custom-constraints).

Cloud Service Mesh

ANNOUNCEMENT A new version of the data plane for Gateway API is now generally available (GA) as a part of managed Cloud Service Mesh
for clusters on GKE Rapid channel. The managed data plane helps you to trigger upgrades for data plane proxies. For more
information see Data plan management considerations (https://cloud.google.com/service-mesh/docs/gateway/prepare-gateway) .

ANNOUNCEMENT Managed Cloud Service Mesh starts using Envoy.1.33 for Gateway API on GKE clusters with rapid channel.

Cloud Storage

LIBRARIES A weekly digest of client library updates from across the Cloud SDK (https://cloud.google.com/sdk).

JavaPython (#python)
(#java)

Changes for google-cloud-storage (https://github.com/googleapis/java-storage)

2.48.0 (https://github.com/googleapis/java-storage/compare/v2.47.0...v2.48.0) (2025-01-27)

https://cloud.google.com/release-notes 342/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Features

Add new Storage#moveBlob method to atomically rename an object (#2882

(https://github.com/googleapis/java-storage/issues/2882)) (c49fd08
(https://github.com/googleapis/java-storage/commit/c49fd08582c7235919270c1dd4eb2ece6933d302))

Next release from main branch is 2.48.0 (#2885 (https://github.com/googleapis/java-storage/issues/2885))

(34e5903 (https://github.com/googleapis/java-storage/commit/34e5903df9b7221ba9ebabc07046d7b819f9f209))

Bug Fixes

deps: Update the Java code generator (gapic-generator-java) to 2.51.1 (09ed029

(https://github.com/googleapis/java-storage/commit/09ed02995f4688db69c0e0db1c3d72cadce0c395))

Update Signed URL default scheme to resolve from storage options host (#2880
(https://github.com/googleapis/java-storage/issues/2880)) (7ae7e39
(https://github.com/googleapis/java-storage/commit/7ae7e3998930c1bec72ff7c06ebc2b66343852ca)), closes #2870
(https://github.com/googleapis/java-storage/issues/2870)

Update StorageException translation of an ApiException to include error details (#2872

(https://github.com/googleapis/java-storage/issues/2872)) (8ad5010
(https://github.com/googleapis/java-storage/commit/8ad501012fab0dfd8d0f0dce49d7c681540022a9))

Dependencies

Update dependency com.google.cloud.opentelemetry:exporter-trace to v0.33.0 (#2873

(https://github.com/googleapis/java-storage/issues/2873)) (39509d5
(https://github.com/googleapis/java-storage/commit/39509d53ee283694526efbec58daa24c3d8ca080))

https://cloud.google.com/release-notes 343/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Update gcr.io/cloud-devrel-public-resources/storage-testbench docker tag to v0.52.0 (#2883

(https://github.com/googleapis/java-storage/issues/2883)) (a64a3d5
(https://github.com/googleapis/java-storage/commit/a64a3d58410dd2e9db20a36cd7169037f71eaeeb))

Container Optimized OS

CHANGE cos-117-18613-164-13

Kernel Docker ContainerdGPU Drivers

(https://cloud.goo
os/docs/how-to/ru

COS-6.6.72 v24.0.9v1.7.24 See List

(https://cos.googlesource.com/third_party/kernel/+/3b3b0baec7c5bcdfb1763afe4e0022d903b19da7) (https://storage.go
tools/18613.164.1

FEATURE Added NVIDIA GPU driver's R570 branch. Updated the LATEST GPU driver label to version 570.86.15.

FEATURE Backported Intel TDX (Trust Domain Extensions) and confidential computing patches from Linux kernel 6.7 upstream to
enable TDX feature support.

FEATURE Enabled Grace platform support: Enabled DMA-BUF shared memory support for the ARM64 kernel.

FEATURE Enabled Grace platform support: Enabled ATS/PASID(PCI) for ARM64 kernel.

FEATURE Enabled Grace platform support: Enabled SMMU (v3) for ARM64 kernel.

FEATURE Enabled Grace platform support: Enabled memory_hotplug and device_private in the ARM64 kernel.

FEATURE Enabled ECC kernel modules required for confidential GPU functionality.

https://cloud.google.com/release-notes 344/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

SECURITY Fixed KCTF-bc50835 in the Linux kernel.

SECURITY Fixed CVE-2024-53170 in the Linux kernel.

SECURITY Fixed CVE-2024-53124 in the Linux kernel.

CHANGE Runtime sysctl changes:

Changed: fs.file-max: 811776 -> 811757

CHANGE cos-dev-121-18865-0-0

Kernel Docker ContainerdGPU Drivers

(https://cloud.goo
os/docs/how-to/ru

COS-6.6.74 v25.0.7v2.0.2 See List

(https://cos.googlesource.com/third_party/kernel/+/989d6b4926a38e7cdfa63d3c941bdbd435e3f90c) (https://storage.go
tools/18865.0.0/la

CHANGE Updated the Linux kernel to v6.6.74.

FEATURE Added NVIDIA GPU driver's R570 branch. Updated the LATEST GPU driver label to version 570.86.15.

FEATURE Backported Intel TDX (Trust Domain Extensions) and confidential computing patches from Linux kernel 6.7 upstream to
enable TDX feature support.

FEATURE Enabled Grace platform support: Enabled ATS/PASID(PCI) for ARM64 kernel.

FEATURE Enabled Grace platform support: Enabled SMMU (v3) for ARM64 kernel.

https://cloud.google.com/release-notes 345/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

FEATURE Enabled Grace platform support: Enabled memory_hotplug and device_private in the ARM64 kernel.

FEATURE Enabled Grace platform support: Enabled DMA-BUF shared memory support for the ARM64 kernel.

FEATURE Enabled ECC kernel modules required for confidential GPU functionality.

SECURITY Fixed KCTF-bc50835 in the Linux kernel.

CHANGE Runtime sysctl changes:

Changed: fs.file-max: 811821 -> 811771

CHANGE cos-105-17412-535-42

Kernel Docker ContainerdGPU Drivers

(https://cloud.goo
os/docs/how-to/ru

COS-5.15.173 v23.0.3v1.7.23 See List

(https://cos.googlesource.com/third_party/kernel/+/fa6d12428f53596058ac4d613358d928470803be) (https://storage.g
tools/17412.535.4

FEATURE Added NVIDIA GPU driver's R570 branch. Updated the LATEST GPU driver label to version 570.86.15.

SECURITY Fixed CVE-2024-40896 in libxml2.

SECURITY Fixed KCTF-bc50835 in the Linux kernel.

SECURITY Fixed CVE-2024-53124 in the Linux kernel.

https://cloud.google.com/release-notes 346/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

SECURITY Fixed CVE-2024-47707 in the Linux kernel.

SECURITY Fixed CVE-2024-56688 in the Linux kernel.

SECURITY Fixed KCTF-3d5ad2d in the Linux kernel.

SECURITY Fixed CVE-2024-56756 in the Linux kernel.

CHANGE Runtime sysctl changes:

Changed: fs.file-max: 812681 -> 812686

CHANGE cos-113-18244-291-24

Kernel Docker ContainerdGPU Drivers

(https://cloud.goo
os/docs/how-to/r

COS-6.1.123 v24.0.9v1.7.24 See List

(https://cos.googlesource.com/third_party/kernel/+/0550cb58c8410dd57c4479c25c22439a8bba2f45) (https://storage.g
tools/18244.291.2

FEATURE Added NVIDIA GPU driver's R570 branch. Updated the LATEST GPU driver label to version 570.86.15.

SECURITY Fixed CVE-2024-53128 in the Linux kernel.

SECURITY Fixed KCTF-bc50835 in the Linux kernel.

SECURITY Fixed CVE-2024-53170 in the Linux kernel.

https://cloud.google.com/release-notes 347/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

SECURITY Fixed CVE-2024-53124 in the Linux kernel.

CHANGE Runtime sysctl changes:

Changed: fs.file-max: 812045 -> 812027

CHANGE cos-109-17800-436-19

Kernel Docker ContainerdGPU Drivers

(https://cloud.goo
os/docs/how-to/ru

COS-6.1.124 v24.0.9v1.7.24 See List

(https://cos.googlesource.com/third_party/kernel/+/c68ebdfb3a884785c3070db4a6a6b78f4d5baa03) (https://storage.go
tools/17800.436.1

FEATURE Added NVIDIA GPU driver's R570 branch. Updated the LATEST GPU driver label to version 570.86.15.

SECURITY Fixed CVE-2024-40896 in libxml2.

SECURITY Fixed KCTF-bc50835 in the Linux kernel.

SECURITY Fixed CVE-2024-53170 in the Linux kernel.

SECURITY Fixed CVE-2024-53124 in the Linux kernel.

CHANGE Runtime sysctl changes:

Changed: fs.file-max: 812276 -> 812300

https://cloud.google.com/release-notes 348/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Data Catalog

DEPRECATED Data Catalog is deprecated and will be discontinued on January 30, 2026. For steps to transition your Data Catalog users,
workloads, and content to Dataplex Catalog, see Transition from Data Catalog to Dataplex Catalog
(https://cloud.google.com/dataplex/docs/transition-to-dataplex-catalog).

Document AI

FEATURE Model pretrained-ocr-v2.1-2024-08-07 has General Availability (GA) in the US and EU.

For more information about available models, see Enterprise Document OCR
(https://cloud.google.com/document-ai/docs/enterprise-document-ocr) and Regional and multi-regional support availability
(https://cloud.google.com/document-ai/docs/regions).

FEATURE Model pretrained-ocr-v2.1.1-2025-01-31 is available as a Release Candidate in the regions asia-south1,

australia-southeast1, europe-west2, europe-west3 and northamerica-northeast1.

For more information about available models, see Enterprise Document OCR
(https://cloud.google.com/document-ai/docs/enterprise-document-ocr).

Google Kubernetes Engine

CHANGE Starting on February 3, 2025, GKE will create a new service agent named service-{PROJECT_ NUMBER}@gcp-sa-
gkenode.iam.gserviceaccount.com that the GKE system workloads that run on your worker nodes can use. This service
agent will only have the minimum permissions that GKE needs to operate these nodes by default, and will help to isolate
the requirements of GKE-managed workloads from the requirements of your workloads. GKE-managed system workloads
will begin using this service agent in an upcoming GKE version, which we'll announce in a separate release note.

Pub/Sub

https://cloud.google.com/release-notes 349/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

LIBRARIES A weekly digest of client library updates from across the Cloud SDK (https://cloud.google.com/sdk).

GoJava (#java)Python (#python)

(#go)

Changes for pubsub/apiv1 (https://github.com/googleapis/google-cloud-go/tree/main/pubsub/apiv1)

1.47.0 (https://github.com/googleapis/google-cloud-go/compare/pubsub/v1.46.0...pubsub/v1.47.0) (2025-01-31)

Features

pubsub: Support new forms of topic ingestion (#11537

(https://github.com/googleapis/google-cloud-go/issues/11537)) (46d6ed4
(https://github.com/googleapis/google-cloud-go/commit/46d6ed475e6ae6b96f3e11e17496fd75fd8ea7c4))

1.46.0 (https://github.com/googleapis/google-cloud-go/compare/pubsub/v1.45.3...pubsub/v1.46.0) (2025-01-24)

Features

pubsub: Add Kafka-based sources to IngestionDataSourceSettings proto and IngestionFailureEvent proto

(e4e1a49 (https://github.com/googleapis/google-cloud-go/commit/e4e1a498f21b0792e0a7662f82f9e062e5aa0fe9))

Bug Fixes

pubsub: Fix defer call in for loop (#11175 (https://github.com/googleapis/google-cloud-go/issues/11175)) (7aec711

(https://github.com/googleapis/google-cloud-go/commit/7aec711200d8e79686370f5d40915e21df7651a4))

https://cloud.google.com/release-notes 350/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

pubsub: Update golang.org/x/net to v0.33.0 (e9b0b69

(https://github.com/googleapis/google-cloud-go/commit/e9b0b69644ea5b276cacff0a707e8a5e87efafc9))

Retail API

FEATURE Pinning is available for Vertex AI Search for commerce. Pinning is a serving control for that lets you specify an exact
position in search results for a certain item to appear.

The pinning control is created by adding a rule to the search or browse condition, which is the action field pin_action in
the Retail API. A pin value from 1 to 120 can be applied to determine the fixed position for results matching the defined
conditions. This feature is not supported for recommendations.

For more about pinning, see Pinning controls (https://cloud.google.com/retail/docs/serving-control-rules#pinning).

Secret Manager

LIBRARIES A weekly digest of client library updates from across the Cloud SDK (https://cloud.google.com/sdk).

Go
(#go)

Changes for secretmanager/apiv1 (https://github.com/googleapis/google-cloud-go/tree/main/secretmanager/apiv1)

1.14.4 (https://github.com/googleapis/google-cloud-go/compare/secretmanager/v1.14.3...secretmanager/v1.14.4) (2025-01-
30)

Documentation

secretmanager: Fix link in Markdown comments (aa54375

(https://github.com/googleapis/google-cloud-go/commit/aa54375c195b1bf8653de26400f342438a8d6f85))

https://cloud.google.com/release-notes 351/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

secretmanager: Updated comment for customer_managed_encryption in message

.google.cloud.secretmanager.v1.Secret (aa54375
(https://github.com/googleapis/google-cloud-go/commit/aa54375c195b1bf8653de26400f342438a8d6f85))

secretmanager: Updated comment for customer_managed_encryption in message

.google.cloud.secretmanager.v1.SecretVersion (aa54375
(https://github.com/googleapis/google-cloud-go/commit/aa54375c195b1bf8653de26400f342438a8d6f85))

secretmanager: Updated comment for name in message .google.cloud.secretmanager.v1.Topic

(aa54375 (https://github.com/googleapis/google-cloud-go/commit/aa54375c195b1bf8653de26400f342438a8d6f85))

secretmanager: Updated comment for Replication (aa54375

(https://github.com/googleapis/google-cloud-go/commit/aa54375c195b1bf8653de26400f342438a8d6f85))

secretmanager: Updated comment for scheduled_destroy_time in message

.google.cloud.secretmanager.v1.SecretVersion (aa54375
(https://github.com/googleapis/google-cloud-go/commit/aa54375c195b1bf8653de26400f342438a8d6f85))

Security Command Center

FEATURE Protect your AI applications using Model Armor

Model Armor is a Google Cloud service that enables you to apply content safety and content security controls to LLM
prompts and responses to mitigate risks such as sensitive data leakage, prompt injection, and offensive content. For more
information, see Model Armor overview (https://cloud.google.com/security-command-center/docs/model-armor-overview).

Sensitive Data Protection

FEATURE The CVV_NUMBER infoType detector is available in all regions. For more information about all built-in infoTypes, see
InfoType detector reference (https://cloud.google.com/dlp/docs/infotypes-reference).

https://cloud.google.com/release-notes 352/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

February 02, 2025

Dataproc

ANNOUNCEMENT New Dataproc Serverless for Spark runtime versions

(https://cloud.google.com/dataproc-serverless/docs/concepts/versions/spark-runtime-versions):

1.1.90

1.2.34

2.2.34

Google SecOps SOAR

ANNOUNCEMENT Release 6.3.33 is currently in Preview. This release contains the following features.

FEATURE Map IdP Groups to control access parameters

You can now create user groups in your SAML provider and map them to IdP groups, removing the need to manually add
individual users to the platform. For more information, see IdP Group Mapping in the SOAR platform
(https://cloud.google.com/chronicle/docs/soar/admin-tasks/saml-soar-only/idp-group-mapping-soar-only).

FEATURE Environment groups

This feature lets you group environments into logical categories, making it easier to manage your company or your
customers as an MSSP.

You can use environment groups when adding users, mapping IdP user groups, creating new playbooks, and applying case
filters on the platform. For more information about how to create groups of environments, see Create environment groups

https://cloud.google.com/release-notes 353/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

(https://cloud.google.com/chronicle/docs/soar/admin-tasks/environments/environment-groups).

February 01, 2025

Cloud SQL for MySQL

ANNOUNCEMENT All Cloud SQL for MySQL 5.6 and 5.7 instances are running community end-of-life (EOL) major versions and are now
enrolled in Cloud SQL extended support.

IMPORTANT: Extended support is a paid service and is an addition to the current cost of your instance. Charges for
extended support are waived from February 1, 2025 through April 30, 2025. Starting on May 1, 2025, all instances enrolled
in extended support will be charged. To learn more about the benefits of extended support and pricing, see Extended
support for Cloud SQL (https://cloud.google.com/sql/docs/mysql/extended-support).

Cloud SQL for PostgreSQL

ANNOUNCEMENT All Cloud SQL for PostgreSQL 9.6, 10, 11, and 12 instances are running community end-of-life (EOL) major versions and are
now enrolled in Cloud SQL extended support.

IMPORTANT: Extended support is a paid service and is an addition to the current cost of your instance. Charges for
extended support are waived from February 1, 2025 through April 30, 2025. Starting on May 1, 2025, all instances enrolled
in extended support will be charged. To learn more about the benefits of extended support and pricing, see Extended
support for Cloud SQL (https://cloud.google.com/sql/docs/postgres/extended-support).

Google SecOps SOAR

ANNOUNCEMENT Release 6.3.32 is now in General Availability.

https://cloud.google.com/release-notes 354/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

January 31, 2025

Assured Workloads

FEATURE The following products are now supported by the following control packages
(https://cloud.google.com/assured-workloads/docs/control-packages). See supported products
(https://cloud.google.com/assured-workloads/docs/supported-products) for more information:

Cloud Service Mesh, Connect, Generative AI on Vertex AI, Resource Manager, Secure Source Manager:

Australia Regions

Australia Regions with Assured Support

Brazil Regions

Canada Regions

Canada Regions and Support

Chile Regions

EU Regions

EU Regions and Support

Hong Kong Regions

India Regions

Indonesia Regions

Israel Regions

https://cloud.google.com/release-notes 355/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Israel Regions and Support

Japan Regions

Qatar Regions

Singapore Regions

South Africa Regions

South Korea Regions

Switzerland Regions

Taiwan Regions

UK Regions

US Regions

US Regions and Support

Cloud Composer

ISSUE (Cloud Composer 3) The issue with upgrading Airflow builds (#January_27_2025) is now resolved. You can now upgrade
Airflow builds for Cloud Composer 3 in the asia-south1, asia-northeast2, europe-west1, europe-west3, and europe-north1
regions.

Cloud Monitoring

FEATURE You can now monitor usage, throughput, and latency, and troubleshoot 429 errors on Vertex AI foundation models like
Google Gemini and Anthropic Claude by using a new predefined dashboard. After querying a model from the Vertex AI
Model Garden (https://cloud.google.com/model-garden), you can find the models associated with your project from the Vertex
AI Dashboard page under the "Model observability" heading.

https://cloud.google.com/release-notes 356/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

To customize the dashboard and explore relevant metrics in Cloud Monitoring, click Show All Metrics. For information
about using dashboards in Cloud Monitoring, see View and customize Google Cloud dashboards
(https://cloud.google.com/monitoring/charts/predefined-dashboards).
Cloud Storage

FEATURE You can now enable client-side traces with OpenTelemetry when you use Cloud Storage client libraries. To learn more
about how client-side traces work and how to configure tracing for your application, see Use client-side traces
(https://cloud.google.com/storage/docs/traces).

Dataproc

CHANGE New Dataproc on Compute Engine subminor image versions:

(https://cloud.google.com/dataproc/docs/concepts/versioning/dataproc-version-clusters#supported_dataproc_versions)

2.0.130-debian10, 2.0.130-rocky8, 2.0.130-ubuntu18

2.1.78-debian11, 2.1.78-rocky8, 2.1.78-ubuntu20, 2.1.78-ubuntu20-arm

2.2.44-debian12, 2.2.44-rocky9, 2.2.44-ubuntu22

ANNOUNCEMENT New Hyperdisk Balanced (https://cloud.google.com/dataproc/docs/concepts/compute/dataproc-persistent-disks) primary

disk type available on Dataproc clusters.

New machine types (https://cloud.google.com/dataproc/docs/concepts/compute/supported-machine-types.md) available for

Hyperdisk Balanced disk type on clusters: C4, C4A, and N4.

Generative AI on Vertex AI

FEATURE You can now monitor usage, throughput, and latency and troubleshoot 429 errors on Vertex AI foundation models, like
Google Gemini and Anthropic Claude, by using a predefined dashboard. After querying a model from the Vertex AI Model

https://cloud.google.com/release-notes 357/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Garden (https://cloud.google.com/model-garden), you can find the name of the model you queried in the Vertex AI Dashboard
page under the "Model observability" heading.

To customize the dashboard and explore relevant metrics in Cloud Monitoring, click Show All Metrics. For information
about using dashboards in Cloud Monitoring, see View and customize Google Cloud dashboards
(https://cloud.google.com/monitoring/charts/predefined-dashboards).
Google Cloud Architecture Center

CHANGE Best practices and reference architectures for VPC design (https://cloud.google.com/architecture/best-practices-vpc-design):
Updates to the document to reflect feature releases over the past months.

CHANGE Cross-Cloud Network for distributed applications (https://cloud.google.com/architecture/ccn-distributed-apps-design): Updates to

the document set to reflect feature releases over the past months.

Retail API

FEATURE Vertex AI Search for commerce: Merchandising console

Vertex AI Search for commerce has released a new user-friendly Merchandising console for site merchants and business
users. Cloud console admins can grant users access as a Creator or Approver to set or define rules, and create and
manage controls. The Google Cloud Search for commerce console Controls section has a Merchandising console tab
where admins can grant users access and manage user permissions for the Merchandising console.

For more information, see Console options for creating controls

(https://cloud.google.com/retail/docs/create-controls#console-options).

SAP on Google Cloud

ANNOUNCEMENT New certification: Oracle Database with Oracle Linux for SAP NetWeaver

https://cloud.google.com/release-notes 358/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

For SAP NetWeaver based applications running on Google Cloud, SAP and Oracle have certified the use of single-node
instances of Oracle Database 19c or later with UEK-enabled Oracle Linux 8 or 9.

While using an Oracle Database, all components of your SAP system must use the same version of Oracle Linux. This
includes the database, app servers, and any other closely coupled auxiliary system.

For more information, see the following:

Plan Oracle Database implementation for SAP NetWeaver (https://cloud.google.com/solutions/sap/docs/oracle-planning)

Deploy Oracle Database for SAP NetWeaver (https://cloud.google.com/solutions/sap/docs/oracle-deployment-single-node)

Spanner

LIBRARIES A monthly digest of client library updates from across the Cloud SDK (https://cloud.google.com/sdk).

JavaNode.js (#node.js)
(#java)

Changes for google-cloud-spanner (https://github.com/googleapis/java-spanner)

6.85.0 (https://github.com/googleapis/java-spanner/compare/v6.84.0...v6.85.0) (2025-01-10)

Features

Add gcp client attributes in OpenTelemetry traces (#3595

(https://github.com/googleapis/java-spanner/issues/3595)) (7893f24
(https://github.com/googleapis/java-spanner/commit/7893f2499f6a43e4e80ec78a9f0da5beedb6967a))

Add LockHint feature (#3588 (https://github.com/googleapis/java-spanner/issues/3588)) (326442b

(https://github.com/googleapis/java-spanner/commit/326442bca41700debcbeb67b6bd11fc36bd4f26d))

https://cloud.google.com/release-notes 359/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

spanner: MTLS setup for spanner external host clients (#3574

(https://github.com/googleapis/java-spanner/issues/3574)) (f8dd152
(https://github.com/googleapis/java-spanner/commit/f8dd15272f2a250c5b57c9f2527d03dbd557d717))

Dependencies

Update dependency com.google.api.grpc:proto-google-cloud-monitoring-v3 to v3.56.0 (#3563

(https://github.com/googleapis/java-spanner/issues/3563)) (e4d0b0f
(https://github.com/googleapis/java-spanner/commit/e4d0b0ffa2308c8d949630b52c67e3b79c4491fb))

Update dependency com.google.api.grpc:proto-google-cloud-monitoring-v3 to v3.57.0 (#3592

(https://github.com/googleapis/java-spanner/issues/3592)) (a7542da
(https://github.com/googleapis/java-spanner/commit/a7542daff466226221eeb9a885a2e67a99adb678))

Update dependency com.google.cloud:sdk-platform-java-config to v3.41.1 (#3589

(https://github.com/googleapis/java-spanner/issues/3589)) (2cd4238
(https://github.com/googleapis/java-spanner/commit/2cd42388370dac004bfd807f6aede3ba45456706))

Update dependency com.google.cloud.opentelemetry:exporter-trace to v0.33.0 (#3455

(https://github.com/googleapis/java-spanner/issues/3455)) (70649dc
(https://github.com/googleapis/java-spanner/commit/70649dc2f64aa06404893cc6a36716fc366c83e7))

Update dependency com.google.re2j:re2j to v1.8 (#3594 (https://github.com/googleapis/java-spanner/issues/3594))

(0f2013d (https://github.com/googleapis/java-spanner/commit/0f2013d66d3fd14e6be019cda6745ddc32032091))

Update googleapis/sdk-platform-java action to v2.51.1 (#3591

(https://github.com/googleapis/java-spanner/issues/3591)) (3daa1a0
(https://github.com/googleapis/java-spanner/commit/3daa1a0c735000845558a1d3612257a7d0524350))

Vertex AI

https://cloud.google.com/release-notes 360/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

FEATURE Dedicated Public Endpoints (https://cloud.google.com/vertex-ai/docs/general/deployment#deploy_a_model_to_an_endpoint)and

Private Service Connect Endpoints (PSC-E) (https://cloud.google.com/vertex-ai/docs/predictions/private-service-connect) for Vertex
AI Prediction are generally available (GA).

January 30, 2025

Anthos Config Management

FIXED Fixed an issue that was causing Container Registry and Artifact Registry authentication tokens to expire before being
refreshed. For more information, see known issue Unable to generate access token for OCI source
(https://cloud.google.com/kubernetes-engine/enterprise/config-sync/docs/how-to/known-issues#oci-access-token).

FIXED Fixed an issue that incorrectly reported managed resources as "Not Found" when an API Service backend became
unhealthy. For more information, see known issue API discovery errors can cause managed objects to incorrectly be
marked as "Not Found"
(https://cloud.google.com/kubernetes-engine/enterprise/config-sync/docs/how-to/known-issues#api-discovery-errors).

Cloud Asset Inventory

FEATURE The following resource types are now publicly available through the ExportAssets
(https://cloud.google.com/asset-inventory/docs/reference/rest/v1/TopLevel/exportAssets), ListAssets
(https://cloud.google.com/asset-inventory/docs/listing-assets), BatchGetAssetsHistory
(https://cloud.google.com/asset-inventory/docs/reference/rest/v1/TopLevel/batchGetAssetsHistory), QueryAssets
(https://cloud.google.com/asset-inventory/docs/reference/rest/v1/TopLevel/queryAssets), Feed
(https://cloud.google.com/asset-inventory/docs/reference/rest/v1/feeds), and Search (SearchAllResources
(https://cloud.google.com/asset-inventory/docs/reference/rest/v1/TopLevel/searchAllResources), SearchAllIamPolicies
(https://cloud.google.com/asset-inventory/docs/reference/rest/v1/TopLevel/searchAllIamPolicies)) APIs.

https://cloud.google.com/release-notes 361/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Cloud Asset Inventory

cloudasset.googleapis.com/Feed

Firebase

firebaserules.googleapis.com/Release

firebaserules.googleapis.com/Ruleset

Identity-Aware Proxy

iap.googleapis.com/TunnelDestGroup
Cloud Composer

ANNOUNCEMENT At the beginning of February 2025, we will delete inactive environments that are non-recoverable in Cloud Composer 1,
Cloud Composer 2, and Cloud Composer 3. After this change, non-recoverable environments that have listed problems will
be deleted automatically.

Cloud Composer 1 and Cloud Composer 2 environments that have both of the following problems present at the same
time will be deleted:

The environment's underlying GKE cluster is deleted.

The environment is in the ERROR state for at least 60 days because of a disabled billing account or because the
Cloud Composer API service was deactivated in its project.

Cloud Composer 3 environments that have the following problem will be deleted:

The environment is in the ERROR state for at least 60 days because of a disabled billing account or because the
Cloud Composer API service was deactivated in its project.

https://cloud.google.com/release-notes 362/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

This change doesn't affect buckets of these environments. You can still recover your DAGs and other data from the
environment's bucket and then delete the bucket manually. See Delete environments
(https://cloud.google.com/composer/docs/composer-3/delete-environments#about-not-deleted) for information about data that is
not deleted automatically together with the environment.
Cloud DNS

FEATURE DNS64 (https://cloud.google.com/dns/docs/overview#dns64-overview) is now available in Preview

(https://cloud.google.com/products/#product-launch-stages).

Dataproc

ANNOUNCEMENT New Dataproc Serverless for Spark runtime versions

(https://cloud.google.com/dataproc-serverless/docs/concepts/versions/spark-runtime-versions):

1.1.89

1.2.33

2.2.33

CHANGE Dataproc on Compute Engine: Private Google Access (https://cloud.google.com/vpc/docs/private-google-access) is now

automatically enabled in the configured subnetwork when creating clusters with internal IP addresses
(https://cloud.google.com/dataproc/docs/concepts/configuring-clusters/network#create-a-dataproc-cluster-with-internal-IP-addresses-
only)
.

CHANGE Dataproc Serverless for Spark: Private Google Access (https://cloud.google.com/vpc/docs/private-google-access) is now
automatically enabled in the configured subnetwork
(https://cloud.google.com/dataproc-serverless/docs/concepts/network#private-google-access-requirement) when running batch
workloads and interactive sessions.

https://cloud.google.com/release-notes 363/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Gemini Code Assist

ANNOUNCEMENT For new customers with billing accounts that have never had a Gemini Code Assist subscription, we automatically apply up
to 50 license credits for the first month, regardless of Gemini Code Assist edition. For more information, see Set up Gemini
Code Assist (https://cloud.google.com/gemini/docs/discover/set-up-gemini).

Generative AI on Vertex AI

DEPRECATED Mistral Large (24.07) and Codestral (24.05) that are offered as a Model as a Service (MaaS) models in Model Garden are
deprecated. For details, see Generative AI on Vertex AI deprecations
(https://cloud.google.com/vertex-ai/generative-ai/docs/deprecations).

Google Cloud Architecture Center

FEATURE (New guide) Cross-Cloud Network inter-VPC connectivity using Network Connectivity Center
(https://cloud.google.com/architecture/ccn-distributed-apps-design/ccn-ncc-vpn-ra): Describes how to design the network
segmentation structure and connectivity of Cross-Cloud Network with Network Connectivity Center.

Google Kubernetes Engine

DEPRECATED Starting on January 28, 2025, the following Preview features are deprecated:

GKE threat detection

Supply chain concerns - Binary Authorization

GKE Compliance dashboard

For deprecation and removal dates, and for information about alternatives, see Posture management deprecations
(https://cloud.google.com/kubernetes-engine/docs/deprecations/posture-management-deprecation).

https://cloud.google.com/release-notes 364/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Network Connectivity Center

FEATURE Route exchange with VPC spokes

(https://cloud.google.com/network-connectivity/docs/network-connectivity-center/concepts/dynamic-route-exchange-with-vpc-spokes) is
generally available (https://cloud.google.com/products#product-launch-stages).

This feature lets you connect VPC spokes and hybrid spokes, such as Cloud Interconnect VLAN attachments, HA VPN
tunnels, and Router appliance VMs on the same hub.

Note that you are billed for Advanced Data Networking (ADN) for traffic originating from Google Cloud Platform egressing
through hybrid spokes.

ISSUE See the following known issues for dynamic route exchange:

Routing VPC networks that are also VPC spokes: A routing VPC network should typically contain hybrid spokes.
However, if you do configure a routing VPC network as a VPC spoke, the following limitations apply:

A routing VPC network can also be a VPC spoke only if there are no other routing VPC networks on the hub. A
hub supports two or more routing VPC networks only when none of the routing VPC networks are VPC spokes.

The site-to-site data transfer setting is not honored for hybrid spokes in a routing VPC network that is also a
VPC spoke.

Dynamic route interaction rules: Within a routing VPC network, for each unique dynamic route destination with a next
hop in a hybrid spoke, you must ensure that all other dynamic routes, regardless of priority, whose destinations
exactly match or fit within the unique dynamic route destination, have next hop Cloud VPN tunnels or VLAN
attachments also in a hybrid spoke. Further, you must ensure that those hybrid spokes use the same site-to-site data
transfer setting (either enabled or disabled).

https://cloud.google.com/release-notes 365/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

If only some next hops for dynamic routes with a common destination are in hybrid spokes, Network
Connectivity Center can't reliably exchange dynamic routes that use that destination with VPC spokes on the
hub. Consequently, VPC spokes might not receive those dynamic routes.

Network Connectivity Center doesn't perform ECMP among all next hops of hybrid spoke dynamic routes if
some hybrid spokes have site-to-site data transfer enabled but other hybrid spokes have site-to-site data
transfer disabled. If dynamic routes with a common destination are in hybrid spokes without matching site-to-
site data transfer settings, next hops for site-to-site data transfer or for connectivity between VPC spokes and
on-premises networks might not be what you expect.

Dynamic route and static route interaction rules: Within a routing VPC network, for each unique dynamic route
destination that has a next hop in a hybrid spoke, you must ensure that no local static routes exist, regardless of
priority, whose destinations exactly match or fit within the dynamic route destination.

If a local static route in the routing VPC network has the same destination as a hybrid spoke dynamic route,
VPC spokes might lose connectivity to the dynamic route destination.

If a local static route in a routing VPC network has a destination that fits within the destination of a hybrid
spoke dynamic route, VPC spokes lose connectivity to the static route destination.
Spanner

FEATURE The Spanner index advisor is Generally Available in both GoogleSQL and PostgreSQL-dialect databases. The index advisor
analyzes your queries to recommend new indexes or changes to existing indexes to improve the performance of your
queries. For more information, see Use the Spanner index advisor (https://cloud.google.com/spanner/docs/index-advisor).

FEATURE Spanner supports new SERIAL (https://cloud.google.com/spanner/docs/reference/postgresql/data-types#serial-types) and

AUTO_INCREMENT (https://cloud.google.com/spanner/docs/reference/standard-sql/data-definition-language#table_statements) DDL
syntax. SERIAL is available in PostgreSQL-dialect databases and AUTO_INCREMENT is available in GoogleSQL. They

https://cloud.google.com/release-notes 366/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

streamline the ability to generate IDENTITY columns as primary keys. For more information, see SERIAL and
AUTO_INCREMENT (https://cloud.google.com/spanner/docs/primary-key-default-value#serial-auto-increment).

January 29, 2025

Cloud Billing

FEATURE Tags data for BigTable instances is available in both the Standard usage cost export
(https://cloud.google.com/billing/docs/how-to/export-data-bigquery-tables/standard-usage) and the Detailed usage cost export
(https://cloud.google.com/billing/docs/how-to/export-data-bigquery-tables/detailed-usage).

To learn more about Tags, see Tags overview (https://cloud.google.com/resource-manager/docs/tags/tags-overview). To learn

about using Tags in your cost data exported to BigQuery, see more about tags
(https://cloud.google.com/billing/docs/how-to/export-data-bigquery-tables/standard-usage#tags) and query examples with tags
(https://cloud.google.com/billing/docs/how-to/export-data-bigquery-tables/standard-usage#query-with-tags).

Cloud Data Fusion

FIXED The SAP OData plugin (https://cloud.google.com/data-fusion/docs/how-to/use-sap-odata-plugin) version 0.11.6 is available in

Cloud Data Fusion version 6.8.0 and later. This release includes the following change:

Fixed an issue causing pipeline deployments to fail due to SAP memory dumps when processing large datasets with
macro filters: ERROR
Stage 'SAP OData' encountered : CDF_SAP_ODATA_01534 - Service validation failed.
Root Cause:Invalid parametertype used at function.

Compute Engine

https://cloud.google.com/release-notes 367/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

FEATURE Preview: You can now modify which machine types are recommended, so that the generated recommendations only
include your preferred machine series. You can also change the metrics used to generate memory recommendations to
improve the accuracy of the recommendations. For more information, see Configure machine type recommendations
(https://cloud.google.com/compute/docs/instances/configure-machine-type-recommendations).

Eventarc

FEATURE To help ensure CMEK usage across an organization, Eventarc Advanced

(https://cloud.google.com/eventarc/advanced/docs/use-cmek#org-policy) and Eventarc Standard
(https://cloud.google.com/eventarc/docs/use-cmek#org-policy) are integrated with two organization policy constraints.

Generative AI on Vertex AI

FEATURE New Imagen 3 image generation model available to users

A newer improved Imagen 3 image generation model is now available to all users:

imagen-3.0-generate-002

This image generation model supports the following additional features:

Prompt enhancement - The LLM-based prompt rewriter tool adds additional details and descriptive language to the
prompt you provide, generally resulting in higher quality generated images. This feature is configurable and is
enabled by default.

For more information, see Imagen on Vertex AI model versions and lifecycle
(https://cloud.google.com/vertex-ai/generative-ai/docs/image/model-versioning) and Generate images using text prompts
(https://cloud.google.com/vertex-ai/generative-ai/docs/image/generate-images).

Google Kubernetes Engine

https://cloud.google.com/release-notes 368/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

CHANGE (2025-R04) Version updates

GKE cluster versions have been updated.

New versions available for upgrades and new clusters.

The following Kubernetes versions are now available for new clusters and for opt-in control plane upgrades and node
upgrades for existing clusters. For more information on versioning and upgrades, see GKE versioning and support
(https://cloud.google.com/kubernetes-engine/versioning) and Upgrades (https://cloud.google.com/kubernetes-engine/upgrades).

Rapid channelRegular channel… Stable channel… Extended channel… No channel (#no-channel)

(#rapid-channel)

star Note: Your clusters might not have these versions available. Rollouts are already in progress when we publish the release notes, and
can take multiple days to complete across all Google Cloud zones.

Version 1.31.5-gke.1023000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1315) is now the default
version for cluster creation in the Rapid channel.

The following versions are now available in the Rapid channel:

1.28.15-gke.1673000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.28.md#v12815)

1.29.13-gke.1038000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12913)

1.30.9-gke.1027000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1309)

https://cloud.google.com/release-notes 369/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

1.30.9-gke.1046000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1309)

1.31.5-gke.1068000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1315)

1.32.1-gke.1200000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#v1321)

The following versions are no longer available in the Rapid channel:

1.28.15-gke.1503000

1.29.12-gke.1143000

1.30.8-gke.1261000

1.30.8-gke.1282000

1.31.4-gke.1256000

1.32.1-gke.1002000

Auto-upgrade targets are now available for the following minor versions:

Control planes and nodes with auto-upgrade enabled in the Rapid channel will be upgraded from version
1.27 to version 1.28.15-gke.1612000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.28.md#v12815) with this
release.

Control planes and nodes with auto-upgrade enabled in the Rapid channel will be upgraded from version
1.28 to version 1.29.12-gke.1270000

https://cloud.google.com/release-notes 370/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12912) with this

release.

Control planes and nodes with auto-upgrade enabled in the Rapid channel will be upgraded from version
1.29 to version 1.30.9-gke.1009000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1309) with this
release.

Control planes and nodes with auto-upgrade enabled in the Rapid channel will be upgraded from version
1.30 to version 1.31.4-gke.1372000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1314) with this
release.

The following patch-only version auto-upgrade targets are now available for clusters with maintenance
exclusions
(https://cloud.google.com/kubernetes-engine/docs/concepts/maintenance-windows-and-exclusions#exclusions) or other
factors preventing minor version upgrades:

Control planes and nodes with auto-upgrade enabled in the Rapid channel will be upgraded from version
1.28 to version 1.28.15-gke.1612000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.28.md#v12815) with this
release.

Control planes and nodes with auto-upgrade enabled in the Rapid channel will be upgraded from version
1.29 to version 1.29.12-gke.1270000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12912) with this
release.

Control planes and nodes with auto-upgrade enabled in the Rapid channel will be upgraded from version
1.30 to version 1.30.9-gke.1009000

https://cloud.google.com/release-notes 371/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1309) with this

release.

Control planes and nodes with auto-upgrade enabled in the Rapid channel will be upgraded from version
1.31 to version 1.31.4-gke.1372000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1314) with this
release.

CHANGE (2025-R04) Version updates

star Note: Your clusters might not have these versions available. Rollouts are already in progress when we publish the release notes, and can
take multiple days to complete across all Google Cloud zones.

Version 1.31.5-gke.1023000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1315) is now the default version
for cluster creation in the Rapid channel.

The following versions are now available in the Rapid channel:

1.28.15-gke.1673000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.28.md#v12815)

1.29.13-gke.1038000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12913)

1.30.9-gke.1027000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1309)

1.30.9-gke.1046000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1309)

https://cloud.google.com/release-notes 372/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

1.31.5-gke.1068000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1315)

1.32.1-gke.1200000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#v1321)

The following versions are no longer available in the Rapid channel:

1.28.15-gke.1503000

1.29.12-gke.1143000

1.30.8-gke.1261000

1.30.8-gke.1282000

1.31.4-gke.1256000

1.32.1-gke.1002000

Auto-upgrade targets are now available for the following minor versions:

Control planes and nodes with auto-upgrade enabled in the Rapid channel will be upgraded from version 1.27 to
version 1.28.15-gke.1612000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.28.md#v12815) with this release.

Control planes and nodes with auto-upgrade enabled in the Rapid channel will be upgraded from version 1.28 to
version 1.29.12-gke.1270000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12912) with this release.

Control planes and nodes with auto-upgrade enabled in the Rapid channel will be upgraded from version 1.29 to
version 1.30.9-gke.1009000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1309) with this release.

https://cloud.google.com/release-notes 373/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Control planes and nodes with auto-upgrade enabled in the Rapid channel will be upgraded from version 1.30 to
version 1.31.4-gke.1372000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1314) with this release.

The following patch-only version auto-upgrade targets are now available for clusters with maintenance exclusions
(https://cloud.google.com/kubernetes-engine/docs/concepts/maintenance-windows-and-exclusions#exclusions) or other factors
preventing minor version upgrades:

Control planes and nodes with auto-upgrade enabled in the Rapid channel will be upgraded from version 1.28 to
version 1.28.15-gke.1612000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.28.md#v12815) with this release.

Control planes and nodes with auto-upgrade enabled in the Rapid channel will be upgraded from version 1.29 to
version 1.29.12-gke.1270000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12912) with this release.

Control planes and nodes with auto-upgrade enabled in the Rapid channel will be upgraded from version 1.30 to
version 1.30.9-gke.1009000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1309) with this release.

Control planes and nodes with auto-upgrade enabled in the Rapid channel will be upgraded from version 1.31 to
version 1.31.4-gke.1372000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1314) with this release.

CHANGE (2025-R04) Version updates

star Note: Your clusters might not have these versions available. Rollouts are already in progress when we publish the release notes, and can
take multiple days to complete across all Google Cloud zones.

https://cloud.google.com/release-notes 374/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Version 1.31.4-gke.1256000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1314) is now the default version
for cluster creation in the Regular channel.

The following versions are now available in the Regular channel:

1.28.15-gke.1612000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.28.md#v12815)

1.29.12-gke.1143001
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12912)

1.29.12-gke.1270000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12912)

1.30.8-gke.1162001 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1308)

1.30.8-gke.1261000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1308)

1.31.4-gke.1372000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1314)

The following versions are no longer available in the Regular channel:

1.28.15-gke.1480000

1.29.12-gke.1120000

1.30.8-gke.1128000

1.31.4-gke.1183000

Auto-upgrade targets are now available for the following minor versions:

https://cloud.google.com/release-notes 375/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Control planes and nodes with auto-upgrade enabled in the Regular channel will be upgraded from version 1.27
to version 1.28.15-gke.1503000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.28.md#v12815) with this release.

Control planes and nodes with auto-upgrade enabled in the Regular channel will be upgraded from version 1.28
to version 1.29.12-gke.1143000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12912) with this release.

Control planes and nodes with auto-upgrade enabled in the Regular channel will be upgraded from version 1.29
to version 1.30.8-gke.1162000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1308) with this release.

The following patch-only version auto-upgrade targets are now available for clusters with maintenance exclusions
(https://cloud.google.com/kubernetes-engine/docs/concepts/maintenance-windows-and-exclusions#exclusions) or other factors
preventing minor version upgrades:

Control planes and nodes with auto-upgrade enabled in the Regular channel will be upgraded from version 1.28
to version 1.28.15-gke.1503000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.28.md#v12815) with this release.

Control planes and nodes with auto-upgrade enabled in the Regular channel will be upgraded from version 1.29
to version 1.29.12-gke.1143000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12912) with this release.

Control planes and nodes with auto-upgrade enabled in the Regular channel will be upgraded from version 1.30
to version 1.30.8-gke.1162000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1308) with this release.

Control planes and nodes with auto-upgrade enabled in the Regular channel will be upgraded from version 1.31
to version 1.31.4-gke.1256000

https://cloud.google.com/release-notes 376/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1314) with this release.

CHANGE (2025-R04) Version updates

star Note: Your clusters might not have these versions available. Rollouts are already in progress when we publish the release notes, and can
take multiple days to complete across all Google Cloud zones.

Version 1.30.8-gke.1051000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1308) is now the default version
for cluster creation in the Stable channel.

The following versions are now available in the Stable channel:

1.28.15-gke.1480000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.28.md#v12815)

1.29.12-gke.1055001
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12912)

1.29.12-gke.1120001
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12912)

1.30.8-gke.1051001 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1308)

1.30.8-gke.1128001 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1308)

1.31.4-gke.1183000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1314)

The following versions are no longer available in the Stable channel:

https://cloud.google.com/release-notes 377/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

1.28.15-gke.1342000

1.29.10-gke.1280000

1.30.5-gke.1713000

Auto-upgrade targets are now available for the following minor versions:

Control planes and nodes with auto-upgrade enabled in the Stable channel will be upgraded from version 1.27
to version 1.28.15-gke.1435000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.28.md#v12815) with this release.

Control planes and nodes with auto-upgrade enabled in the Stable channel will be upgraded from version 1.28
to version 1.29.12-gke.1055000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12912) with this release.

Control planes and nodes with auto-upgrade enabled in the Stable channel will be upgraded from version 1.29
to version 1.30.8-gke.1051000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1308) with this release.

The following patch-only version auto-upgrade targets are now available for clusters with maintenance exclusions
(https://cloud.google.com/kubernetes-engine/docs/concepts/maintenance-windows-and-exclusions#exclusions) or other factors
preventing minor version upgrades:

Control planes and nodes with auto-upgrade enabled in the Stable channel will be upgraded from version 1.28
to version 1.28.15-gke.1435000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.28.md#v12815) with this release.

Control planes and nodes with auto-upgrade enabled in the Stable channel will be upgraded from version 1.29
to version 1.29.12-gke.1055000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12912) with this release.

https://cloud.google.com/release-notes 378/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Control planes and nodes with auto-upgrade enabled in the Stable channel will be upgraded from version 1.30
to version 1.30.8-gke.1051000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1308) with this release.

Control planes and nodes with auto-upgrade enabled in the Stable channel will be upgraded from version 1.31
to version 1.31.4-gke.1183000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1314) with this release.

CHANGE (2025-R04) Version updates

star Note: Your clusters might not have these versions available. Rollouts are already in progress when we publish the release notes, and can
take multiple days to complete across all Google Cloud zones.

Version 1.31.4-gke.1256000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1314) is now the default version
for cluster creation in the Extended channel.

The following versions are now available in the Extended channel:

1.27.16-gke.2246000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.27.md#v12716)

1.27.16-gke.2296000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.27.md#v12716)

1.28.15-gke.1612000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.28.md#v12815)

https://cloud.google.com/release-notes 379/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

1.29.12-gke.1143001
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12912)

1.29.12-gke.1270000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12912)

1.30.8-gke.1162001 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1308)

1.30.8-gke.1261000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1308)

1.31.4-gke.1372000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1314)

The following versions are no longer available in the Extended channel:

1.27.16-gke.2122000

1.27.16-gke.2270000

1.28.15-gke.1480000

1.29.12-gke.1120000

1.30.8-gke.1128000

1.31.4-gke.1183000

The following patch-only version auto-upgrade targets are now available for clusters with maintenance exclusions
(https://cloud.google.com/kubernetes-engine/docs/concepts/maintenance-windows-and-exclusions#exclusions) or other factors
preventing minor version upgrades:

Control planes and nodes with auto-upgrade enabled in the Extended channel will be upgraded from version
1.27 to version 1.27.16-gke.2142000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.27.md#v12716) with this release.

https://cloud.google.com/release-notes 380/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Control planes and nodes with auto-upgrade enabled in the Extended channel will be upgraded from version
1.28 to version 1.28.15-gke.1503000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.28.md#v12815) with this release.

Control planes and nodes with auto-upgrade enabled in the Extended channel will be upgraded from version
1.29 to version 1.29.12-gke.1143000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12912) with this release.

Control planes and nodes with auto-upgrade enabled in the Extended channel will be upgraded from version
1.30 to version 1.30.8-gke.1162000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1308) with this release.

Control planes and nodes with auto-upgrade enabled in the Extended channel will be upgraded from version
1.31 to version 1.31.4-gke.1256000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1314) with this release.

CHANGE (2025-R04) Version updates

star Note: Your clusters might not have these versions available. Rollouts are already in progress when we publish the release notes, and can
take multiple days to complete across all Google Cloud zones.

Version 1.31.4-gke.1256000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1314) is now the default version
for cluster creation.

The following versions are now available:

https://cloud.google.com/release-notes 381/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

1.28.15-gke.1673000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.28.md#v12815)

1.29.12-gke.1055001
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12912)

1.29.12-gke.1120001
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12912)

1.29.12-gke.1143001
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12912)

1.29.13-gke.1038000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12913)

1.30.8-gke.1051001 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1308)

1.30.8-gke.1128001 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1308)

1.30.8-gke.1162001 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1308)

1.30.9-gke.1027000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1309)

1.30.9-gke.1046000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1309)

1.31.5-gke.1068000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1315)

The following node versions are now available:

1.27.16-gke.2296000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.27.md#v12716)

https://cloud.google.com/release-notes 382/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

1.28.15-gke.1673000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.28.md#v12815)

1.29.12-gke.1055001
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12912)

1.29.12-gke.1120001
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12912)

1.29.12-gke.1143001
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12912)

1.29.13-gke.1038000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12913)

1.30.8-gke.1051001 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1308)

1.30.8-gke.1128001 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1308)

1.30.8-gke.1162001 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1308)

1.30.9-gke.1027000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1309)

1.30.9-gke.1046000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1309)

1.31.5-gke.1068000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1315)

The following versions are no longer available:

1.28.15-gke.1342000

1.29.10-gke.1280000

1.29.12-gke.1120000

https://cloud.google.com/release-notes 383/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

1.30.5-gke.1699000

1.30.8-gke.1128000

1.30.8-gke.1282000

Auto-upgrade targets are now available for the following minor versions:

Control planes and nodes with auto-upgrade enabled will be upgraded from version 1.27 to version 1.28.15-
gke.1503000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.28.md#v12815) with
this release.

Control planes and nodes with auto-upgrade enabled will be upgraded from version 1.28 to version 1.29.12-
gke.1143000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12912) with
this release.

Control planes and nodes with auto-upgrade enabled will be upgraded from version 1.29 to version 1.30.8-
gke.1051000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1308) with
this release.

The following patch-only version auto-upgrade targets are now available for clusters with maintenance exclusions
(https://cloud.google.com/kubernetes-engine/docs/concepts/maintenance-windows-and-exclusions#exclusions) or other factors
preventing minor version upgrades:

Control planes and nodes with auto-upgrade enabled will be upgraded from version 1.28 to version 1.28.15-
gke.1503000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.28.md#v12815) with
this release.

Control planes and nodes with auto-upgrade enabled will be upgraded from version 1.29 to version 1.29.12-
gke.1143000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12912) with
this release.

https://cloud.google.com/release-notes 384/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Control planes and nodes with auto-upgrade enabled will be upgraded from version 1.30 to version 1.30.8-
gke.1051000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1308) with
this release.

Control planes and nodes with auto-upgrade enabled will be upgraded from version 1.31 to version 1.31.4-
gke.1256000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1314) with
this release.
reCAPTCHA

CHANGE reCAPTCHA Mobile SDK v18.7.0 is now available for Android.

This version contains a dependency on com.google.android.gms:play-services-recaptchabase for enhanced

detection.

January 28, 2025

Agent Assist

FEATURE Customer Managed Encryption Key (CMEK) is available in GA for all Agent Assist features. CMEK
(https://cloud.google.com/agent-assist/docs/cmek) lets you control details of your data encryption keys, view audit logs, and
control key lifecycles.

BigQuery

FEATURE You can now view stored column usage (https://cloud.google.com/bigquery/docs/reference/rest/v2/Job#StoredColumnsUsage)

information for a query job that performs vector search using stored columns. This feature is generally available
(https://cloud.google.com/products#product-launch-stages) (GA).

https://cloud.google.com/release-notes 385/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Cloud Composer

FEATURE Java Runtime in Airflow workers and schedulers is updated from version 17 (https://openjdk.org/projects/jdk/17/) to version
21 (https://openjdk.org/projects/jdk/17/).

FIXED Fixed a problem where synchronization between the environment's bucket and Airflow components failed because
incorrect objects in the bucket were not ignored.

FIXED (Cloud Composer 3) Fixed an issue with KubernetesPodOperator failing to run properly when do_xcom_push was set to
True.

CHANGE (Available without upgrading) Starting from Cloud Composer version 2.11.0 with Airflow 2.10.2 and 2.9.3, the
enable_task_context_logger Airflow configuration option is no longer blocked.

FIXED Terminating Airflow workers now generate log messages with information about still running tasks.

FIXED Fixed an issue where log messages were incorrectly formatted for non-string content, such as dictionaries and numbers.

CHANGE (Available without upgrading) In Cloud Composer 2 and Cloud Composer 1, a more meaningful error message is produced
when the Composer Service Agent account doesn't have necessary permissions to access the network during the
environment creation.

FIXED (Available without upgrading) In Cloud Composer 3, fixed an issue where deleting an environment with an attached VPC
network failed if the project accept list of the network attachment was cleared manually.

CHANGE (Cloud Composer 3) The zone in the Environment.config.node_config.location

(https://cloud.google.com/composer/docs/reference/rest/v1/projects.locations.environments#nodeconfig) field is no longer
populated in the Cloud Composer API.

https://cloud.google.com/release-notes 386/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

CHANGE (Airflow 2.10.2 and 2.9.3) The apache-airflow-providers-cncf-kubernetes package was upgraded to version 10.1.0 in
Cloud Composer 2 images and Cloud Composer 3 builds. For more information about changes, see the apache-airflow-
providers-cncf-kubernetes changelog
(https://airflow.apache.org/docs/apache-airflow-providers-cncf-kubernetes/stable/changelog.html) from version 10.0.1 to version
10.1.0.

CHANGE (Airflow 2.10.2 and 2.9.3) The following preinstalled provider packages were upgraded to new major versions:

apache-airflow-providers-apache-beam upgraded from 5.9.1 to 6.0.0

apache-airflow-providers-dbt-cloud upgraded from 3.11.2 to 4.0.0

apache-airflow-providers-hashicorp upgraded from 3.8.0 to 4.0.0

apache-airflow-providers-http upgraded from 4.13.3 to 5.0.0

apache-airflow-providers-mysql upgraded from 5.7.4 to 6.0.0

apache-airflow-providers-sendgrid upgraded from 3.6.0 to 4.0.0

apache-airflow-providers-sqlite upgraded from 3.9.1 to 4.0.0

apache-airflow-providers-ssh upgraded from 3.14.0 to 4.0.0

CHANGE (Airflow 2.10.2 and 2.9.3) The following preinstalled packages were downgraded:

certifi downgraded from 2024.12.14 to 2024.8.30.

charset-normalizer downgraded from 3.4.1 to 3.4.0.

cryptography downgraded from 44.0.0 to 43.0.3.

filelock downgraded from 3.16.1 to 3.15.4.

https://cloud.google.com/release-notes 387/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

google-auth downgraded from 2.37.0 to 2.35.0.

keyring downgraded from 25.6.0 to 25.5.0.

urllib3 downgraded from 2.3.0 to 2.2.3.

zipp downgraded from 3.21.0 to 3.20.2.

CHANGE New Airflow builds (https://cloud.google.com/composer/docs/concepts/versioning/composer-versions#images-composer-3) are

available in Cloud Composer 3:

composer-3-airflow-2.10.2-build.7 (default)

composer-3-airflow-2.9.3-build.14

CHANGE New images (https://cloud.google.com/composer/docs/concepts/versioning/composer-versions#images-composer-2) are available in

Cloud Composer 2:

composer-2.11.1-airflow-2.10.2 (default)

composer-2.11.1-airflow-2.9.3

DEPRECATED Cloud Composer version 2.5.5 has reached its end of support period
(https://cloud.google.com/composer/docs/concepts/versioning/composer-versioning-overview#version-deprecation-and-support).

Cortex Framework

LIBRARIES Updated the Cortex libraries for Meta to use v21.0 of the Meta Marketing API
(https://developers.facebook.com/docs/marketing-apis/).

Dataplex

https://cloud.google.com/release-notes 388/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

FEATURE Aspect-only metadata import for Dataplex Catalog metadata is generally available (GA
(https://cloud.google.com/products#product-launch-stages)). Use an aspect-only metadata job to incrementally modify aspects,
without modifying other metadata that belongs to entries in the job's scope. For more information, see Import metadata
using a custom pipeline (https://cloud.google.com/dataplex/docs/import-metadata).

Google SecOps

FEATURE Environment groups

This feature lets you group environments into logical categories, making it easier to manage your company or your
customers as an MSSP.

You can use environment groups for adding users, mapping IdP user groups, creating new playbooks, and applying case
filters on the platform.
For more information about how to create groups of environments, see Create environment groups
(https://cloud.google.com/chronicle/docs/soar/admin-tasks/environments/environment-groups).

CHANGE Adding individual emails to IdP group mapping page

Customers who use Cloud Identity Provider can map individual user emails on the IdP group mapping page.

ANNOUNCEMENT Added instructions on how to add SIEM-only or SOAR-only users to Google SecOps

For details about how to grant permission to specific users to use only the SIEM features in Google SecOps or only the
SOAR features of Google SecOps, see Add SIEM or SOAR users
(https://cloud.google.com/chronicle/docs/secops/adding_siem_or_soar_roles).

Google SecOps SIEM

FEATURE Environment groups

https://cloud.google.com/release-notes 389/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

This feature lets you group environments into logical categories, making it easier to manage your company or your
customers as an MSSP.

You can use environment groups for adding users, mapping IdP user groups, creating new playbooks, and applying case
filters on the platform.
For more information about how to create groups of environments, see Create environment groups
(https://cloud.google.com/chronicle/docs/soar/admin-tasks/environments/environment-groups).

CHANGE Adding individual emails to IdP group mapping page

Customers who use Cloud Identity Provider can map individual user emails on the IdP group mapping page.

ANNOUNCEMENT Added instructions on how to add SIEM-only or SOAR-only users to Google SecOps

For details about how to grant permission to specific users to use only the SIEM features in Google SecOps or only the
SOAR features of Google SecOps, see Add SIEM or SOAR users
(https://cloud.google.com/chronicle/docs/secops/adding_siem_or_soar_roles).

NetApp Volumes

CHANGE Google Cloud NetApp Volumes now supports Managed Service for Microsoft Active Directory. For more information, see
Connect to Managed Service for Microsoft Active Directory
(https://cloud.google.com/netapp/volumes/docs/configure-and-use/active-directory/connect-to-managed-service-for-microsoft-ad).

FEATURE Google Cloud NetApp Volumes now supports user and group quotas. For more information, see Volume user and group
quotas (https://cloud.google.com/netapp/volumes/docs/configure-and-use/volumes/overview#volume_user_and_group_quotas).

Spanner

https://cloud.google.com/release-notes 390/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

FEATURE You can now downgrade your Spanner instance to a lower-tier edition (https://cloud.google.com/spanner/docs/editions-overview)
. For more information, see Downgrade the edition
(https://cloud.google.com/spanner/docs/create-manage-instances#downgrade-edition).

Workflows

BREAKING Workflows doesn't support HTTP requests to the IP-based endpoints of Google Kubernetes Engine cluster control planes.
To ensure that your workflow functions as expected, you must access the DNS-based endpoints. For more information
about the scope and impact, see the service announcement
(https://cloud.google.com/workflows/docs/service-announcements#2025-01-28).

January 27, 2025

BigQuery

LIBRARIES A weekly digest of client library updates from across the Cloud SDK (https://cloud.google.com/sdk).

GoPython (#python)
(#go)

Changes for bigquery/storage/apiv1beta1

(https://github.com/googleapis/google-cloud-go/tree/main/bigquery/storage/apiv1beta1)

1.66.0 (https://github.com/googleapis/google-cloud-go/compare/bigquery/v1.65.0...bigquery/v1.66.0) (2025-01-20)

Features

https://cloud.google.com/release-notes 391/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

bigquery/storage/managedwriter: Graceful connection drains (#11463

(https://github.com/googleapis/google-cloud-go/issues/11463)) (b29912f
(https://github.com/googleapis/google-cloud-go/commit/b29912faab73a2e708127eeb2f729ae581e7a24e))

Bug Fixes

bigquery: Update golang.org/x/net to v0.33.0 (e9b0b69

(https://github.com/googleapis/google-cloud-go/commit/e9b0b69644ea5b276cacff0a707e8a5e87efafc9))

FEATURE The following BigQuery ML generative AI features are now available:

Creating a remote model

(https://cloud.google.com//bigquery/docs/reference/standard-sql/bigqueryml-syntax-create-remote-model-open) based on an
open model from Vertex Model Garden or Hugging Face that is deployed to Vertex AI
(https://cloud.google.com/bigquery/docs/reference/standard-sql/bigqueryml-syntax-create-remote-model-open). Options include
Llama, Gemma, and other leading open text generation models.

Using the ML.GENERATE_TEXT function

(https://cloud.google.com/bigquery/docs/reference/standard-sql/bigqueryml-syntax-generate-text) with this remote model to
perform a broad range of generative AI tasks.

Using the ML.EVALUATE function (https://cloud.google.com/bigquery/docs/reference/standard-sql/bigqueryml-syntax-evaluate)

to evaluate the remote model.

Try these features with the Generate text by using the ML.GENERATE_TEXT function
(https://cloud.google.com/bigquery/docs/generate-text) how-to topic and the
Generate text by using a Gemma open model and the ML.GENERATE_TEXT function
(https://cloud.google.com/bigquery/docs/generate-text-tutorial-gemma) tutorial.

https://cloud.google.com/release-notes 392/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

These features are generally available (https://cloud.google.com/products/#product-launch-stages) (GA).

ANNOUNCEMENT We previously communicated that after January 27, 2025, a purchase would be required to use Gemini in BigQuery
features (https://cloud.google.com/gemini/docs/bigquery/overview). We are temporarily delaying enforcement of these
procurement methods, and no purchase is required at this time. For more information, see Gemini for Google Cloud pricing
(https://cloud.google.com/products/gemini/pricing).

FEATURE You can now set conditional IAM access on BigQuery datasets (https://cloud.google.com/bigquery/docs/conditions) with access
control lists (ACLs). This feature is generally available (https://cloud.google.com/products#product-launch-stages) (GA).

Cloud Composer

ISSUE January 31, 2025 update: The issue is resolved (#January_31_2025).

(Cloud Composer 3 only) We are currently experiencing an issue with upgrading Airflow builds for Cloud Composer 3 in
asia-south1, asia-northeast2, europe-west1, europe-west3, europe-north1 regions.

The upgrades are temporarily disabled as we continue our work to restore the listed functionalities. We will release an
additional announcement after the issue is resolved.

Cloud SQL for SQL Server

CHANGE Transaction logs associated with point-in-time-recovery (PITR) (https://cloud.google.com/sql/docs/sqlserver/backup-recovery/pitr)

operations for all Cloud SQL for SQL Server instances are now stored in Cloud Storage. On May 31, 2024, Google Cloud
launched support for PITR transaction log storage in Cloud Storage. Since then, Google Cloud has run a transparent
migration of these transaction logs to Cloud Storage for all instances created prior to the launch date. This migration is
now complete.

Note: If your Cloud SQL for SQL Server instance is on the old network architecture, the transaction logs for PITR may still
remain on disk until migrated to the new network architecture. To verify the storage of your instance's transaction logs for

https://cloud.google.com/release-notes 393/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

PITR, see Check the storage location of transaction logs used for PITR
(https://cloud.google.com/sql/docs/sqlserver/backup-recovery/pitr#check-log-storage-location).
Container Optimized OS

CHANGE cos-105-17412-535-34

Kernel Docker ContainerdGPU Drivers

(https://cloud.goog
os/docs/how-to/run

COS-5.15.173 v23.0.3v1.7.23 See List

(https://cos.googlesource.com/third_party/kernel/+/8ecee723a27a310af5c1aaf68da0bf853463fda7) (https://storage.go
tools/17412.535.34

FEATURE Added NVIDIA GPU drivers R565 branch - Update R565, latest driver to v565.57.01.

FIXED Upgraded sys-apps/file to v5.46-r2.

SECURITY Update NVIDIA GPU drivers to v535.230.02 for R535 and v550.144.03 for R550 for all GPUs. This resolves CVE-2024-
53869, CVE-2024-0150, CVE-2024-0149, CVE-2024-0147 and CVE-2024-0131.

SECURITY Upgraded dev-go/crypto to v0.31.0. This fixes CVE-2024-45337.

SECURITY Fixed CVE-2024-45306 and CVE-2024-47814 in vim.

SECURITY Fixed CVE-2024-45306 and CVE-2024-47814 in vim-core.

SECURITY Fixed CVE-2024-49996 in the Linux kernel.

https://cloud.google.com/release-notes 394/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

SECURITY Fixed CVE-2024-50055 in the Linux kernel.

SECURITY Fixed CVE-2024-57841 in the Linux kernel.

SECURITY Fixed CVE-2024-57890 in the Linux kernel.

SECURITY Fixed CVE-2024-55916 in the Linux kernel.

SECURITY Fixed CVE-2024-56779 in the Linux kernel.

SECURITY Fixed CVE-2024-56615 in the Linux kernel.

SECURITY Fixed KCTF-5eb7de8 in the Linux kernel.

SECURITY Fixed KCTF-f8d4bc4 in the Linux kernel.

SECURITY Fixed CVE-2024-53206 in the Linux kernel.

SECURITY Fixed CVE-2024-50121 in the Linux kernel.

SECURITY Fixed CVE-2024-56601 in the Linux kernel.

SECURITY Fixed CVE-2024-56600 in the Linux kernel.

SECURITY Fixed CVE-2024-53173 in the Linux kernel.

SECURITY Fixed CVE-2024-53140 in the Linux kernel.

SECURITY Fixed CVE-2024-53136 in the Linux kernel.

SECURITY Fixed CVE-2024-53113 in the Linux kernel.

https://cloud.google.com/release-notes 395/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

SECURITY Fixed CVE-2024-53119 in the Linux kernel.

SECURITY Fixed CVE-2024-53121 in the Linux kernel.

SECURITY Fixed CVE-2024-53142 in the Linux kernel.

SECURITY Fixed CVE-2024-50275 in the Linux kernel.

SECURITY Fixed CVE-2024-56763 in the Linux kernel.

CHANGE Runtime sysctl changes:

Changed: fs.file-max: 812682 -> 812681

CHANGE cos-117-18613-164-4

Kernel Docker ContainerdGPU Drivers

(https://cloud.go
os/docs/how-to/r

COS-6.6.72 v24.0.9v1.7.24 See List

(https://cos.googlesource.com/third_party/kernel/+/1ded238e68070a254a2654d07643581c509b9a54) (https://storage.g
tools/18613.164.

ANNOUNCEMENT This is an LTS Refresh release (https://cloud.google.com/container-optimized-os/docs/concepts/versioning#lts_refresh_releases).

FEATURE Added NVIDIA GPU drivers R565 branch - Update R565, latest driver to v565.57.01.

FIXED Upgraded app-containers/docker-credential-gcr to v2.1.25.

https://cloud.google.com/release-notes 396/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

FIXED Upgraded app-admin/google-osconfig-agent to v20240927.00.

FIXED Upgraded app-emulation/cloud-init to v23.4.4.

FIXED Upgraded sys-apps/file to v5.46-r2.

FIXED Upgraded dev-python/configobj to v5.0.9.

FIXED Upgraded dev-libs/nss to v3.105.

FIXED Upgraded dev-db/sqlite to v3.46.1.

FIXED Upgraded app-arch/lz4 to v1.10.0-r1.

FIXED Upgraded sys-apps/gentoo-functions to v1.7.2.

FIXED Upgraded net-libs/libtirpc to v1.3.5.

SECURITY Update NVIDIA GPU drivers to v535.230.02 for default/R535 and v550.144.03 for R550 for all GPUs. This resolves CVE-
2024-53869, CVE-2024-0150, CVE-2024-0149, CVE-2024-0147 and CVE-2024-0131.

SECURITY Upgraded dev-libs/libxml2 to version 2.12.9. This fixes CVE-2024-40896.

SECURITY Fixed CVE-2024-45306 and CVE-2024-47814 in vim.

SECURITY Fixed CVE-2024-45306 and CVE-2024-47814 in vim-core.

SECURITY Fixed CVE-2024-53166 in the Linux kernel.

SECURITY Fixed CVE-2024-54683 in the Linux kernel.

SECURITY Fixed CVE-2024-57841 in the Linux kernel.

https://cloud.google.com/release-notes 397/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

SECURITY Fixed CVE-2024-57890 in the Linux kernel.

SECURITY Fixed CVE-2024-56369 in the Linux kernel.

SECURITY Fixed CVE-2024-56617 in the Linux kernel.

SECURITY Fixed CVE-2024-55916 in the Linux kernel.

SECURITY Fixed CVE-2024-56615 in the Linux kernel.

SECURITY Fixed CVE-2024-56779 in the Linux kernel.

CHANGE Runtime sysctl changes:

Changed: fs.file-max: 811796 -> 811776

CHANGE cos-dev-121-18849-0-0

Kernel Docker ContainerdGPU Drivers

(https://cloud.goog
os/docs/how-to/ru

COS-6.6.72 v25.0.7v2.0.2 See List

(https://cos.googlesource.com/third_party/kernel/+/45746b23a25fa0f5e0e88baa0ce3f8c20de70b4e) (https://storage.go
tools/18849.0.0/lak

CHANGE Updated google-osconfig-agent to v20250121.00.

CHANGE Updated app-containers/containerd to v2.0.2.

https://cloud.google.com/release-notes 398/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

CHANGE Updated app-admin/oslogin to v20241216.00.

CHANGE Updated app-containers/runc to v1.2.4.

CHANGE Upgraded dev-lang/go to v1.23.5.

CHANGE Upgraded net-misc/openssh to v9.9.

FEATURE Added support for nftables flow offload and the flowtable infrastructure.

FIXED Upgraded app-admin/google-guest-agent to v20250117.00.

FIXED Upgraded app-admin/google-guest-configs to v20250116.00.

FIXED Upgraded chromeos-base/chromeos-common-script to v0.0.1-r656.

FIXED Upgraded chromeos-base/debugd-client to v0.0.1-r2725.

FIXED Upgraded chromeos-base/session_manager-client to v0.0.1-r2816.

FIXED Upgraded chromeos-base/shill-client to v0.0.1-r4812.

FIXED Upgraded chromeos-base/power_manager-client to v0.0.1-r2960.

FIXED Upgraded chromeos-base/update_engine-client to v0.0.1-r2469.

FIXED Upgraded net-dns/c-ares to v1.34.4.

FIXED Upgraded sys-apps/file to v5.46-r2.

SECURITY Update NVIDIA GPU drivers to v535.230.02 for default/R535 and v550.144.03 for R550 for all GPUs. This resolves CVE-
2024-53869, CVE-2024-0150, CVE-2024-0149, CVE-2024-0147 and CVE-2024-0131.

https://cloud.google.com/release-notes 399/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

SECURITY Upgraded net-misc/curl to version 8.11.1-r2. This fixes CVE-2024-11053.

SECURITY Upgraded dev-libs/libxml2 to version 2.12.9. This fixes CVE-2024-40896.

SECURITY Fixed CVE-2024-45306 and CVE-2024-47814 in vim.

SECURITY Fixed CVE-2024-45306 and CVE-2024-47814 in vim-core.

CHANGE Runtime sysctl changes:

Changed: fs.file-max: 811767 -> 811821

CHANGE cos-113-18244-291-20

Kernel Docker ContainerdGPU Drivers

(https://cloud.goo
os/docs/how-to/r

COS-6.1.123 v24.0.9v1.7.24 See List

(https://cos.googlesource.com/third_party/kernel/+/0dd5bc4c25510da047b491176afe5008cee34753) (https://storage.g
tools/18244.291.2

FEATURE Added NVIDIA GPU drivers R565 branch - Update R565, latest driver to v565.57.01.

FIXED Upgraded sys-apps/file to v5.46-r2.

SECURITY Update NVIDIA GPU drivers to v535.230.02 for default/R535 and v550.144.03 for R550 for all GPUs. This resolves CVE-
2024-53869, CVE-2024-0150, CVE-2024-0149, CVE-2024-0147 and CVE-2024-0131.

SECURITY Upgraded dev-go/crypto to v0.31.0. This fixes CVE-2024-45337.

https://cloud.google.com/release-notes 400/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

SECURITY Upgraded net-misc/curl to version 8.11.1-r2. Fixes CVE-2024-11053.

SECURITY Upgraded dev-libs/libxml2 to version 2.12.9. This fixes CVE-2024-40896.

SECURITY Fixed CVE-2024-45306 and CVE-2024-47814 in vim.

SECURITY Fixed CVE-2024-45306 and CVE-2024-47814 in vim-core.

SECURITY Fixed KCTF-8ea6073 and CVE-2024-50164 in the Linux kernel.

SECURITY Fixed CVE-2024-49926 in the Linux kernel.

SECURITY Fixed CVE-2024-57841 in the Linux kernel.

SECURITY Fixed CVE-2024-57890 in the Linux kernel.

CHANGE Runtime sysctl changes:

Changed: fs.file-max: 812035 -> 812045

CHANGE cos-109-17800-436-14

Kernel Docker ContainerdGPU Drivers

(https://cloud.goo
os/docs/how-to/ru

COS-6.1.124 v24.0.9v1.7.24 See List

(https://cos.googlesource.com/third_party/kernel/+/e9c242e034a9c9cbde8ec42e6dc941cf8e4e27a5) (https://storage.go
tools/17800.436.1

https://cloud.google.com/release-notes 401/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

FEATURE Added NVIDIA GPU drivers R565 branch - Update R565, latest driver to v565.57.01.

FIXED Upgraded sys-apps/file to v5.46-r2.

SECURITY Update NVIDIA GPU drivers to v535.230.02 for default/R535 and v550.144.03 for R550 for all GPUs. This resolves CVE-
2024-53869, CVE-2024-0150, CVE-2024-0149, CVE-2024-0147 and CVE-2024-0131.

SECURITY Upgraded dev-go/crypto to v0.31.0. This fixes CVE-2024-45337.

SECURITY Fixed CVE-2024-45306 and CVE-2024-47814 in vim.

SECURITY Fixed CVE-2024-45306 and CVE-2024-47814 in vim-core.

SECURITY Fixed KCTF-8ea6073 and CVE-2024-50164 in the Linux kernel.

SECURITY Fixed CVE-2024-49926 in the Linux kernel.

SECURITY Fixed CVE-2024-53128 in the Linux kernel.

CHANGE Runtime sysctl changes:

Changed: fs.file-max: 812258 -> 812276

Document AI

FEATURE For processor versions pretrained-foundation-model-v1.2-2024-05-10 and pretrained-foundation-model-v1.3-

2024-08-31 custom extractors (https://cloud.google.com/document-ai/docs/custom-extractor-overview), customer-managed
encryption keys (https://cloud.google.com/document-ai/docs/cmek) (CMEK) is now supported when importing fine-tuned
processor versions.

https://cloud.google.com/release-notes 402/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

For more information, see Import processor versions

(https://cloud.google.com/document-ai/docs/manage-processor-versions#import).
NetApp Volumes

FEATURE Flex service level now supports Backups feature in Preview. For more information, see About NetApp Volumes
(https://cloud.google.com/netapp/volumes/docs/discover/overview#about).

Pub/Sub

LIBRARIES A weekly digest of client library updates from across the Cloud SDK (https://cloud.google.com/sdk).

Node.jsPython (#python)
(#node.js)

Changes for @google-cloud/pubsub (https://github.com/googleapis/nodejs-pubsub)

4.10.0 (https://github.com/googleapis/nodejs-pubsub/compare/v4.9.0...v4.10.0) (2025-01-13)

Features

Add Kafka-based sources to IngestionDataSourceSettings proto and IngestionFailureEvent proto (#2007

(https://github.com/googleapis/nodejs-pubsub/issues/2007)) (08d00a1
(https://github.com/googleapis/nodejs-pubsub/commit/08d00a1e7d30e2ab47f7582ff61b1eb73ad9d25e))

Bug Fixes

https://cloud.google.com/release-notes 403/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

deps: Update dependency @opentelemetry/semantic-conventions to ~1.28.0 (#2001

(https://github.com/googleapis/nodejs-pubsub/issues/2001)) (c8e5811
(https://github.com/googleapis/nodejs-pubsub/commit/c8e581124523edcac13d6d6c48d67342482959f3))

SAP on Google Cloud

ANNOUNCEMENT ABAP SDK for Google Cloud version 1.9 (On-premises or any cloud edition)

Version 1.9 of the on-premises or any cloud edition of the ABAP SDK for Google Cloud is generally available (GA). In
addition to supporting more Google Cloud APIs and few other enhancements, this version introduces the BigQuery Toolkit
for SAP – a dedicated tool to replicate data to BigQuery from within your SAP environment using ABAP.

For more information, see What's new with the on-premises or any cloud edition of the ABAP SDK for Google Cloud
(https://cloud.google.com/solutions/sap/docs/abap-sdk/on-premises-or-any-cloud/whats-new#version-1-9).

Spanner

FEATURE Spanner supports the SELECT…FOR UPDATE query syntax in GoogleSQL and PostgreSQL-dialect databases. When you use
the SELECT query to scan a table, add a FOR UPDATE clause to enable exclusive locks on the scanned data in order to
reduce aborts for workloads that operate on the same data concurrently. This is similar to the LOCK_SCANNED_RANGES hint
(GoogleSQL (https://cloud.google.com/spanner/docs/reference/standard-sql/query-syntax#statement_hints) and PostgreSQL
(https://cloud.google.com/spanner/docs/reference/postgresql/query-syntax#statement-hints)). For more information, see Use
SELECT… FOR UPDATE (https://cloud.google.com/spanner/docs/use-select-for-update).

Speech-to-Text

FEATURE Speech-to-Text is generally available (GA) in the Chirp 2 model in asia-southeast1, us-central1, and europe-west4.

https://cloud.google.com/release-notes 404/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

For more information about the Chirp 2 model, see Chirp 2: Enhanced multilingual accuracy
(https://cloud.google.com/speech-to-text/v2/docs/chirp_2-model?
_gl=1*la7eog*_ga*NzAyNzc4MTMxLjE3MzY5NjgxMTA.*_ga_4LYFWVHBEB*MTczODAxMTAzMy45My4xLjE3MzgwMTE2OTMuMC4wLjA.)
. For code samples, see Get started with Chirp 2 using Speech-to-Text V2 SDK in GitHub
(https://github.com/GoogleCloudPlatform/generative-ai/blob/main/audio/speech/getting-started/get_started_with_chirp_2_sdk.ipynb).
Virtual Private Cloud

FEATURE VPC Flow Logs metadata annotations include InstanceGroupDetails

(https://cloud.google.com/vpc/docs/about-flow-logs-records#instance-group-details). This feature is available in General
Availability.

ISSUE There is a known issue with global access endpoints that access services that are published by using internal passthrough
Network Load Balancers or internal protocol forwarding (target instances). Private Service Connect doesn't validate that
the global access setting on the endpoint matches the setting on the producer's load balancer. We recommend the
following:

If you're a service consumer, only enable global access on an endpoint if you know that the producer's load balancer
is configured for global access. For more information, see endpoint Known issues
(https://cloud.google.com/vpc/docs/configure-private-service-connect-services#global-access).

If you're a service producer whose services are hosted on internal passthrough Network Load Balancers or internal
protocol forwarding (target instances), and those services are accessed through global access endpoints, ensure
that global access is enabled on your services' load balancers. For more information, see published services Known
issues (https://cloud.google.com/vpc/docs/configure-private-service-connect-producer#global-access-service-attachments).

January 26, 2025

https://cloud.google.com/release-notes 405/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Google SecOps

DEPRECATED Security Enhancement

As of February 10, 2025, concurrent logins to Google SecOps with multiple user accounts using the same browser profile
will no longer be supported. Use separate browser profiles or an incognito/private window for each account.

Google SecOps SIEM

DEPRECATED Security Enhancement

As of February 10, 2025, concurrent logins to Google SecOps with multiple user accounts using the same browser profile
will no longer be supported. Use separate browser profiles or an incognito/private window for each account.

Google SecOps SOAR

ANNOUNCEMENT Release 6.3.31 is now in General Availability.

SAP on Google Cloud

FEATURE SAP HANA: support for deploying HA clusters with the SAPHanaSR-angi package

To enable you to use the SAPHanaSR Advanced Next Generation Interface (SAPHanaSR-angi) package with your SAP HANA
HA clusters on SLES 15 SP6 for SAP, or later, we've done the following:

Updated our manual deployment guides. For more information, see the following:

HA scale-up cluster configuration guide for SAP HANA on SLES

(https://cloud.google.com/solutions/sap/docs/sap-hana-ha-config-sles)

HA scale-up cluster configuration guide for SAP HANA on SLES

(https://cloud.google.com/solutions/sap/docs/sap-hana-ha-scaleout-config-sles)

https://cloud.google.com/release-notes 406/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

If you use the latest version (1.3.730053050) of our sap_hana_ha Terraform module to deploy SAP HANA scale-up
HA on SLES 15 SP6 for SAP, or later, then the SAPHanaSR-angi package is automatically installed and configured. For
more information, see Terraform: SAP HANA scale-up high-availability cluster configuration guide
(https://cloud.google.com/solutions/sap/docs/sap-hana-ha-tf-deployment).

January 25, 2025

Google SecOps SOAR

ANNOUNCEMENT Release 6.3.32 is currently in Preview. This release contains internal and customer bug fixes.

January 24, 2025

Apigee X

ANNOUNCEMENT On January 24, 2025, we released an updated version of Apigee (1-14-0-apigee-4).

star Note: Rollouts of this release to production instances will begin within two business days and may take four or more business days to be
completed across all Google Cloud zones. Your instances may not have the features and fixes available until the rollout is complete.

FIXED
Bug ID Description

372248577 Fixed issue causing system.pod.name flow variable to return null.

https://cloud.google.com/release-notes 407/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Bug ID Description

N/A Updates to security infrastructure and libraries.

App Hub

CHANGE App Hub support is available in the europe-southwest1 (Madrid, Spain) region
(https://cloud.google.com/app-hub/docs/locations).

Backup and DR

FEATURE For updates to the backup appliance, a default window now exists to schedule non disruptive patch updates. (Disruptive
updates do not get the default window.) You will now receive notifications 2 weeks , 1 week and 24 hours before the
scheduled update after which the appliance will be automatically updated. An option to reschedule non disruptive patch
updates is also available.

FIXED Fixes for SAP HANA Persistent Disk Snapshots

Enhancing imports of log images: Log images can now be imported correctly with the right recovery range. Enabled
importing log images without having to take the ownership of the images. Fixed the workflow for importing on the
source management server instance and another new management server instance.

UI fixes for point-in-time recovery from imported images: Imported images appear in the remote snapshot lane in
access view, populating correct recovery range for imported images, populating recovery time in restore operation
request, adding archive log mount point location in restore page, disabling Replace Original Application Identity for
remote images, mount page waiting indefinitely for imported image, adding import PD snapshot option in application
page, enabling host selection drop-downs for replication cluster etc.

BA fixes: Issues with uploading metadata for replication clusters and with point-in-time recovery from imported
images were fixed.

https://cloud.google.com/release-notes 408/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

FIXED Fixes for Oracle databases backed up to OnVault and backup vault

Hosts from both source and remote backup appliances are now listed in the restore page. For cases when no host is
reachable or the primary backup appliance is down, the UI was improved by showing a spinning wheel to avoid
waiting for longer than necessary while attempting to restore from an imported image.

A Replace Original Application Identity option has been added for Oracle traditional restore functionality.

SECURITY The following CVEs have been addressed in this release: CVE-2024-38286, CVE-2019-9636, CVE-2023-5178, CVE-2020-
14343, CVE-2021-29921, CVE-2019-7164, CVE-2020-27619, CVE-2018-20060, CVE-2019-20477, CVE-2019-9948, CVE-2020-
1747, CVE-2021-3177, CVE-2022-42919, CVE-2024-0565, CVE-2015-20107, CVE-2023-51042, CVE-2020-10878, CVE-2023-
6546, CVE-2022-0391, CVE-2022-45884, CVE-2021-33631, CVE-2020-10543, CVE-2019-20907, CVE-2023-3812, CVE-2019-
11324, CVE-2022-45919, CVE-2023-6931, CVE-2024-1086, CVE-2021-43818, CVE-2021-33503, CVE-2020-26116, CVE-2019-
20916, CVE-2023-2163, CVE-2021-42771, CVE-2022-45886, CVE-2021-3737, CVE-2023-52425, CVE-2018-18074, CVE-2021-
27291, CVE-2021-20270, CVE-2023-24329, CVE-2019-18874, CVE-2019-16056, CVE-2019-7548, CVE-2021-3572, CVE-2019-
9740, CVE-2021-23336, CVE-2020-14422, CVE-2021-3426, CVE-2023-1192, CVE-2022-38096, CVE-2023-6135, CVE-2020-
8492, CVE-2020-27783, CVE-2020-28493, CVE-2023-46218, CVE-2021-4189, CVE-2020-26137, CVE-2021-3733, CVE-2019-
16935, CVE-2021-28957, CVE-2018-20852, CVE-2019-11236, CVE-2019-9947, CVE-2020-28241, CVE-2023-5388, CVE-2023-
28322 CVE-2022-48624, CVE-2023-38546, CVE-2021-20095

Cloud Asset Inventory

FEATURE The following resource types are now publicly available through the ExportAssets
(https://cloud.google.com/asset-inventory/docs/reference/rest/v1/TopLevel/exportAssets), ListAssets
(https://cloud.google.com/asset-inventory/docs/listing-assets), BatchGetAssetsHistory
(https://cloud.google.com/asset-inventory/docs/reference/rest/v1/TopLevel/batchGetAssetsHistory), QueryAssets
(https://cloud.google.com/asset-inventory/docs/reference/rest/v1/TopLevel/queryAssets), Feed
(https://cloud.google.com/asset-inventory/docs/reference/rest/v1/feeds), Search (SearchAllResources

https://cloud.google.com/release-notes 409/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

(https://cloud.google.com/asset-inventory/docs/reference/rest/v1/TopLevel/searchAllResources), SearchAllIamPolicies
(https://cloud.google.com/asset-inventory/docs/reference/rest/v1/TopLevel/searchAllIamPolicies)), and analyze policy APIs
(https://cloud.google.com/asset-inventory/docs/analyzing-iam-policy) (AnalyzeIamPolicy
(https://cloud.google.com/asset-inventory/docs/reference/rest/v1/TopLevel/analyzeIamPolicy) and AnalyzeIamPolicyLongrunning
(https://cloud.google.com/asset-inventory/docs/reference/rest/v1/TopLevel/analyzeIamPolicyLongrunning)).

Cloud Storage

storageinsights.googleapis.com/ReportConfig

storageinsights.googleapis.com/ReportDetail
Cloud Composer

DEPRECATED The following recently released Cloud Composer 3 Airflow builds and Cloud Composer 2 versions are rolled back and
aren't available for creating and upgrading existing environments. We will roll out new builds in the next release.

composer-2.11.0-airflow-2.10.2

composer-2.11.0-airflow-2.9.3

composer-3-airflow-2.10.2-build.6

composer-3-airflow-2.9.3-build.13

Cloud Load Balancing

ANNOUNCEMENT Changes to RSA certificate requirements coming April 28, 2025

We're changing how Application Load Balancers establish TLS connections to backends. This change fixes a problem
where the keyUsage extension of RSA certificates is not being validated consistently and might allow a certificate that
should have been rejected based on the keyUsage configuration.

https://cloud.google.com/release-notes 410/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

What you need to do

Starting April 28, 2025, RSA certificates that don't meet the keyUsage configuration requirements will no longer be
considered valid for establishing TLS connections. We recommend that you check whether your backends' RSA
certificates are invalid, and replace them with valid certificates if needed.

A valid RSA certificate is one that has the X509v3 Key Usage extension and includes both the Digital Signature and Key
Encipherment parameters.

To identify an invalid RSA certificate, perform the following steps:

1. First confirm that the certificate type is RSA by running the following command.

openssl x509 -text -in cert.crt | grep "Public Key Algorithm".

For RSA certificates, this should output rsaEncryption. If it is a non-RSA certificate (for example, EC), you don't need
to take any more action at this time.

2. If it is an RSA certificate, examine the Key Usage configuration by running the following command:

openssl x509 -text -in cert.crt | grep -A1 "X509v3 Key Usage"

For a valid RSA certificate, the correct value is Digital Signature, Key Encipherment. If either of these values is
not present, the RSA certificate is invalid.

For more information about the X.509 certificate format, see RFC 5280 Key Usage
(https://datatracker.ietf.org/doc/html/rfc5280#section-4.2.1.3).
Cloud Run

FEATURE You can now use dual-stack subnets with internal IPv6 (https://cloud.google.com/run/docs/configuring/vpc-dual-stack-subnet) to
let your Cloud Run services and jobs send IPv4 and internal IPv6 traffic to a VPC network with Direct VPC egress. (Preview)

https://cloud.google.com/release-notes 411/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Cloud Trace

CHANGE The Trace Explorer page in the Google Cloud console has been refreshed. The new page aggregates and displays
information about spans using visualizations like heatmaps. You can use menus to apply filters and to group traces by
span and service name. You can also explore individual traces and share traces. For more information, see the following
documents:

Find and explore traces (https://cloud.google.com/trace/docs/finding-traces)

View traces across projects (https://cloud.google.com/trace/docs/cross-project-traces)

Share trace or span (https://cloud.google.com/trace/docs/share-trace-or-span)

FEATURE Introducing trace scopes. Trace scopes are persistent, project-level resources that the Trace Explorer page uses to
determine which projects to search for trace data. You can create, edit, and delete trace scopes. You can also set one trace
scope as the default trace scope, which determines the projects that the Trace Explorer searches when the page is
opened.

For more information, see the following documents:

Observability scopes overview (https://cloud.google.com/stackdriver/docs/scopes/configure)

Create and manage trace scopes (https://cloud.google.com//trace/docs/trace-scope/create-and-manage).

View traces across projects (https://cloud.google.com/trace/docs/cross-project-traces)

Compute Engine

FEATURE Preview: To prevent data loss or corruption when a compute instance is stopped, you can enable graceful shutdown in the
instance. This setting gives the guest OS up to one hour to finish running tasks. Gracefully shutting down an instance is

https://cloud.google.com/release-notes 412/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

helpful when, for example, your database needs time to complete active transactions, your multiplayer session needs time
to end properly, or you want to cleanly shutdown a high performance computing (HPC) job.

For more information, see the following pages:

Graceful shutdown overview (https://cloud.google.com/compute/docs/instances/graceful-shutdown-overview)

Enable graceful shutdown in a Compute Engine instance

(https://cloud.google.com/compute/docs/instances/enable-graceful-shutdown)

View graceful shutdown in a Compute Engine instance

(https://cloud.google.com/compute/docs/instances/view-graceful-shutdown)

Disable graceful shutdown in a Compute Engine instance

(https://cloud.google.com/compute/docs/instances/disable-graceful-shutdown)
Dataproc

ANNOUNCEMENT New Dataproc on Compute Engine subminor image versions:

(https://cloud.google.com/dataproc/docs/concepts/versioning/dataproc-version-clusters#supported_dataproc_versions)

2.0.129-debian10, 2.0.129-rocky8, 2.0.129-ubuntu18

2.1.77-debian11, 2.1.77-rocky8, 2.1.77-ubuntu20, 2.1.77-ubuntu20-arm

2.2.43-debian12, 2.2.43-rocky9, 2.2.43-ubuntu22

ANNOUNCEMENT Dataproc cluster caching (https://cloud.google.com/dataproc/docs/concepts/cluster-caching) now supports ARM images.

ANNOUNCEMENT Zeppelin component added to 2.1-Ubuntu20-arm images

(https://cloud.google.com/dataproc/docs/concepts/versioning/dataproc-release-2.1).

https://cloud.google.com/release-notes 413/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Google Distributed Cloud (software only) for bare metal

ANNOUNCEMENT
Release 1.28.1400-gke.79
Google Distributed Cloud for bare metal 1.28.1400-gke.79 is now available for download
(https://cloud.google.com/kubernetes-engine/distributed-cloud/bare-metal/docs/downloads). To upgrade, see Upgrade clusters
(https://cloud.google.com/kubernetes-engine/distributed-cloud/bare-metal/docs/how-to/upgrade). Google Distributed Cloud for bare
metal 1.28.1400-gke.79 runs on Kubernetes 1.28. This is the final patch for the 1.28 minor release.

After a release, it takes approximately 7 to 14 days for the version to become available for installations or upgrades with
the GKE On-Prem API clients
(https://cloud.google.com/kubernetes-engine/distributed-cloud/bare-metal/docs/installing/cluster-lifecycle-management-tools): the
Google Cloud console, the gcloud CLI, and Terraform.

If you use a third-party storage vendor, check the Ready storage partners
(https://cloud.google.com/anthos/docs/resources/partner-storage) document to make sure the storage vendor has already
passed the qualification for this release of Google Distributed Cloud for bare metal.

FIXED This release includes many vulnerability fixes. For a list of all vulnerabilities fixed in this release, see Vulnerability fixes
(https://cloud.google.com/kubernetes-engine/distributed-cloud/bare-metal/docs/vulnerabilities).

ISSUE For information about the latest known issues, see Google Distributed Cloud for bare metal known issues
(https://cloud.google.com/kubernetes-engine/distributed-cloud/bare-metal/docs/troubleshooting/known-issues) in the Troubleshooting
section.

Security Command Center

https://cloud.google.com/release-notes 414/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

FEATURE Risk Engine, which generates attack exposure scores and attack paths for your high-value resources, now supports the
spanner.googleapis.com/Instance resource type.

For more information, see Resource types supported in high-value resource sets
(https://cloud.google.com/security-command-center/docs/attack-exposure-supported-features#supported-high-value-resource-types).

Service Health

CHANGE Incident reports (https://cloud.google.com/service-health/docs/overview#incident) are available in Personalized Service Health.

Vertex AI Agent Builder

FEATURE Vertex AI Search: Identity mapping store (GA)

You can map your identity provider (IDP) to external identities from third-party applications that aren't managed by your
identity provider. This information allows Google to enforce access control correctly by syncing users from your IDP and
third-party applications. For more information, see the IdentityMappingStore
(https://cloud.google.com/generative-ai-app-builder/docs/reference/rest/v1/projects.locations.identityMappingStores.html) resource in
the API docs.

January 23, 2025

App Hub

FEATURE App Hub supports resources from Google Kubernetes Engine (GKE) services and workloads
(https://cloud.google.com/app-hub/docs/supported-resources) in Preview (https://cloud.google.com/products#product-launch-stages).

Application Integration

https://cloud.google.com/release-notes 415/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

DEPRECATED Deprecation of Rhino engine for JavaScript Task

Effective January 24, 2025, Application Integration will no longer support Rhino as the JavaScript execution engine. All
existing published JavaScript tasks will continue to use Rhino and can be migrated to V8 manually
(https://cloud.google.com/application-integration/docs/configure-javascript-task#migrate-javascript-tasks). Newly created JavaScript
tasks will exclusively use V8.

For more information, see JavaScript execution engine

(https://cloud.google.com/application-integration/docs/configure-javascript-task#javascript-execution-engine). This deprecation is
related with CVE-2025-0982 (https://www.cve.org/cverecord?id=CVE-2025-0982).

CHANGE You will not be able to use the Send email task (https://cloud.google.com/application-integration/docs/configure-send-email-task) in
your integrations if you have enabled VPC service perimeter for the Application Integration service.

Dataproc

ANNOUNCEMENT New Dataproc Serverless for Spark runtime versions

(https://cloud.google.com/dataproc-serverless/docs/concepts/versions/spark-runtime-versions):

1.1.88

1.2.32

2.2.32

Dialogflow

FEATURE The Conversational Agents console (https://cloud.google.com/dialogflow/cx/docs/concept/console-conversational-agents) has

launched for preview to create agents that can use a combination of generative and deterministic features. See how we
intend on migrating to this new console (https://cloud.google.com/dialogflow/cx/docs#consolidation).

https://cloud.google.com/release-notes 416/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Document AI

BREAKING Effective January 27, 2025, new and existing processors require explicit storage.objects.get permissions to access
Google Cloud Storage buckets for training dataset imports and offline/batch processing.

You will need to review your use of training dataset imports and offline/batch processing to verify that the users of these
APIs have appropriate permissions to access Google Cloud Storage buckets.

Ensure that users of these APIs have been granted one of the predefined
(https://cloud.google.com/storage/docs/access-control/iam-roles#standard-roles) or legacy
(https://cloud.google.com/storage/docs/access-control/iam-roles#legacy-roles) Cloud Storage roles that includes the
storage.objects.get permission (such as Storage Object Viewer
(https://cloud.google.com/storage/docs/access-control/iam-roles)). You can assign these roles in the Permissions tab of the
relevant Cloud Storage bucket.

We understand that this update requires planning, but we're here to support you during this process. If you have questions
or need assistance, contact Google Cloud support (https://cloud.google.com/support-hub).

Google Cloud VMware Engine

CHANGE Google Cloud VMware Engine Committed use discounts (CUD) are now managed exclusively in the VMware Engine
section of the Google Cloud console. For more details, see VMware Engine CUDs
(https://cloud.google.com/vmware-engine/docs/cud) documentation.

Google Kubernetes Engine

CHANGE (2025-R03) Version updates

GKE cluster versions have been updated.

https://cloud.google.com/release-notes 417/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

New versions available for upgrades and new clusters.

The following Kubernetes versions are now available for new clusters and for opt-in control plane upgrades and node
upgrades for existing clusters. For more information on versioning and upgrades, see GKE versioning and support
(https://cloud.google.com/kubernetes-engine/versioning) and Upgrades (https://cloud.google.com/kubernetes-engine/upgrades).

Rapid channelRegular channel… Stable channel… Extended channel… No channel (#no-channel)

(#rapid-channel)

star Note: Your clusters might not have these versions available. Rollouts are already in progress when we publish the release notes, and
can take multiple days to complete across all Google Cloud zones.

Version 1.31.4-gke.1372000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1314) is now the default
version for cluster creation in the Rapid channel.

The following versions are now available in the Rapid channel:

1.28.15-gke.1641000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.28.md#v12815)

1.29.13-gke.1006000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12913)

1.30.8-gke.1282000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1308)

1.30.9-gke.1009000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1309)

https://cloud.google.com/release-notes 418/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

1.31.5-gke.1023000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1315)

1.32.1-gke.1002000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#v1321)

The following versions are no longer available in the Rapid channel:

1.28.15-gke.1480000

1.29.12-gke.1120000

1.30.8-gke.1162000

1.30.8-gke.1224000

1.31.4-gke.1183000

1.32.0-gke.1709000

Auto-upgrade targets are now available for the following minor versions:

Control planes and nodes with auto-upgrade enabled in the Rapid channel will be upgraded from version
1.27 to version 1.28.15-gke.1503000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.28.md#v12815) with this
release.

Control planes and nodes with auto-upgrade enabled in the Rapid channel will be upgraded from version
1.28 to version 1.29.12-gke.1143000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12912) with this
release.

https://cloud.google.com/release-notes 419/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Control planes and nodes with auto-upgrade enabled in the Rapid channel will be upgraded from version
1.29 to version 1.30.8-gke.1261000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1308) with this
release.

Control planes and nodes with auto-upgrade enabled in the Rapid channel will be upgraded from version
1.30 to version 1.31.4-gke.1256000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1314) with this
release.

The following patch-only version auto-upgrade targets are now available for clusters with maintenance
exclusions
(https://cloud.google.com/kubernetes-engine/docs/concepts/maintenance-windows-and-exclusions#exclusions) or other
factors preventing minor version upgrades:

Control planes and nodes with auto-upgrade enabled in the Rapid channel will be upgraded from version
1.28 to version 1.28.15-gke.1503000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.28.md#v12815) with this
release.

Control planes and nodes with auto-upgrade enabled in the Rapid channel will be upgraded from version
1.29 to version 1.29.12-gke.1143000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12912) with this
release.

Control planes and nodes with auto-upgrade enabled in the Rapid channel will be upgraded from version
1.30 to version 1.30.8-gke.1261000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1308) with this
release.

https://cloud.google.com/release-notes 420/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Control planes and nodes with auto-upgrade enabled in the Rapid channel will be upgraded from version
1.31 to version 1.31.4-gke.1256000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1314) with this
release.

CHANGE Starting with GKE version 1.32.1-gke.1002000, the default OS image for Ubuntu is updated from Ubuntu 22.04 to Ubuntu
24.04.

FEATURE User-managed firewall rules for GKE LoadBalancer Services is now generally available on GKE clusters running version
1.31.3-gke.1056000 or later. By allowing user-managed firewall rules for GKE LoadBalancer Services, advanced firewall
policies can now be configured to control ingress traffic to your GKE Services exposed with passthrough network load
balancers. To learn more, see User-managed firewall rules for GKE LoadBalancer Services
(https://cloud.google.com/kubernetes-engine/docs/how-to/user-managed-firewall-rules).

FEATURE You can now customize a node system configuration

(https://cloud.google.com/kubernetes-engine/docs/how-to/node-system-config#kubelet-options) with the following new kubelet and
sysctl configuration options:

Kubelet

containerLogMaxSize

containerLogMaxFiles

imageGcLowThresholdPercent

imageGcHighThresholdPercent

imageMinimumGcAge

imageMaximumGcAge (1.30.7-gke.1076000 and later, 1.31.3-gke.1023000 and later)

https://cloud.google.com/release-notes 421/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

allowedUnsafeSysctls (1.32.0-gke.1448000 and later)

Sysctl

kernel.shmmni

kernel.shmmax

kernel.shmall

net.netfilter.nf_conntrack_acct (1.32.0-gke.1448000 and later)

net.netfilter.nf_conntrack_max (1.32.0-gke.1448000 and later)

net.netfilter.nf_conntrack_buckets (1.32.0-gke.1448000 and later)

net.netfilter.nf_conntrack_tcp_timeout_close_wait (1.32.0-gke.1448000 and later)

net.netfilter.nf_conntrack_tcp_timeout_established (1.32.0-gke.1448000 and later)

net.netfilter.nf_conntrack_tcp_timeout_time_wait (1.32.0-gke.1448000 and later)

To learn more, see Kubelet configuration options

(https://cloud.google.com/kubernetes-engine/docs/how-to/node-system-config#kubelet-options) and Sysctl configuration options
(https://cloud.google.com/kubernetes-engine/docs/how-to/node-system-config#sysctl-options).

CHANGE (2025-R03) Version updates

star Note: Your clusters might not have these versions available. Rollouts are already in progress when we publish the release notes, and can
take multiple days to complete across all Google Cloud zones.

https://cloud.google.com/release-notes 422/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Version 1.31.4-gke.1372000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1314) is now the default version
for cluster creation in the Rapid channel.

The following versions are now available in the Rapid channel:

1.28.15-gke.1641000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.28.md#v12815)

1.29.13-gke.1006000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12913)

1.30.8-gke.1282000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1308)

1.30.9-gke.1009000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1309)

1.31.5-gke.1023000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1315)

1.32.1-gke.1002000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.32.md#v1321)

The following versions are no longer available in the Rapid channel:

1.28.15-gke.1480000

1.29.12-gke.1120000

1.30.8-gke.1162000

1.30.8-gke.1224000

1.31.4-gke.1183000

1.32.0-gke.1709000

https://cloud.google.com/release-notes 423/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Auto-upgrade targets are now available for the following minor versions:

Control planes and nodes with auto-upgrade enabled in the Rapid channel will be upgraded from version 1.27 to
version 1.28.15-gke.1503000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.28.md#v12815) with this release.

Control planes and nodes with auto-upgrade enabled in the Rapid channel will be upgraded from version 1.28 to
version 1.29.12-gke.1143000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12912) with this release.

Control planes and nodes with auto-upgrade enabled in the Rapid channel will be upgraded from version 1.29 to
version 1.30.8-gke.1261000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1308) with this release.

Control planes and nodes with auto-upgrade enabled in the Rapid channel will be upgraded from version 1.30 to
version 1.31.4-gke.1256000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1314) with this release.

The following patch-only version auto-upgrade targets are now available for clusters with maintenance exclusions
(https://cloud.google.com/kubernetes-engine/docs/concepts/maintenance-windows-and-exclusions#exclusions) or other factors
preventing minor version upgrades:

Control planes and nodes with auto-upgrade enabled in the Rapid channel will be upgraded from version 1.28 to
version 1.28.15-gke.1503000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.28.md#v12815) with this release.

Control planes and nodes with auto-upgrade enabled in the Rapid channel will be upgraded from version 1.29 to
version 1.29.12-gke.1143000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12912) with this release.

https://cloud.google.com/release-notes 424/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Control planes and nodes with auto-upgrade enabled in the Rapid channel will be upgraded from version 1.30 to
version 1.30.8-gke.1261000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1308) with this release.

Control planes and nodes with auto-upgrade enabled in the Rapid channel will be upgraded from version 1.31 to
version 1.31.4-gke.1256000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1314) with this release.

CHANGE (2025-R03) Version updates

star Note: Your clusters might not have these versions available. Rollouts are already in progress when we publish the release notes, and can
take multiple days to complete across all Google Cloud zones.

Version 1.31.4-gke.1183000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1314) is now the default version
for cluster creation in the Regular channel.

The following versions are now available in the Regular channel:

1.28.15-gke.1503000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.28.md#v12815)

1.29.12-gke.1143000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12912)

1.30.8-gke.1162000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1308)

1.31.4-gke.1256000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1314)

https://cloud.google.com/release-notes 425/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

The following versions are no longer available in the Regular channel:

1.28.15-gke.1435000

1.29.12-gke.1055000

1.30.8-gke.1051000

1.31.3-gke.1162000

Auto-upgrade targets are now available for the following minor versions:

Control planes and nodes with auto-upgrade enabled in the Regular channel will be upgraded from version 1.27
to version 1.28.15-gke.1480000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.28.md#v12815) with this release.

Control planes and nodes with auto-upgrade enabled in the Regular channel will be upgraded from version 1.28
to version 1.29.12-gke.1120000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12912) with this release.

Control planes and nodes with auto-upgrade enabled in the Regular channel will be upgraded from version 1.29
to version 1.30.8-gke.1128000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1308) with this release.

The following patch-only version auto-upgrade targets are now available for clusters with maintenance exclusions
(https://cloud.google.com/kubernetes-engine/docs/concepts/maintenance-windows-and-exclusions#exclusions) or other factors
preventing minor version upgrades:

Control planes and nodes with auto-upgrade enabled in the Regular channel will be upgraded from version 1.28
to version 1.28.15-gke.1480000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.28.md#v12815) with this release.

https://cloud.google.com/release-notes 426/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Control planes and nodes with auto-upgrade enabled in the Regular channel will be upgraded from version 1.29
to version 1.29.12-gke.1120000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12912) with this release.

Control planes and nodes with auto-upgrade enabled in the Regular channel will be upgraded from version 1.30
to version 1.30.8-gke.1128000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1308) with this release.

Control planes and nodes with auto-upgrade enabled in the Regular channel will be upgraded from version 1.31
to version 1.31.4-gke.1183000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1314) with this release.

CHANGE (2025-R03) Version updates

star Note: Your clusters might not have these versions available. Rollouts are already in progress when we publish the release notes, and can
take multiple days to complete across all Google Cloud zones.

The following versions are now available in the Stable channel:

1.28.15-gke.1435000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.28.md#v12815)

1.29.12-gke.1055000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12912)

1.30.8-gke.1051000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1308)

Version 1.30.6-gke.1596000 is no longer available in the Stable channel.

https://cloud.google.com/release-notes 427/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

CHANGE (2025-R03) Version updates

star Note: Your clusters might not have these versions available. Rollouts are already in progress when we publish the release notes, and can
take multiple days to complete across all Google Cloud zones.

Version 1.31.4-gke.1183000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1314) is now the default version
for cluster creation in the Extended channel.

The following versions are now available in the Extended channel:

1.27.16-gke.2142000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.27.md#v12716)

1.27.16-gke.2270000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.27.md#v12716)

1.28.15-gke.1503000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.28.md#v12815)

1.29.12-gke.1143000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12912)

1.30.8-gke.1162000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1308)

1.31.4-gke.1256000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1314)

The following versions are no longer available in the Extended channel:

1.27.16-gke.2081000

https://cloud.google.com/release-notes 428/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

1.27.16-gke.2246000

1.28.15-gke.1435000

1.29.12-gke.1055000

1.30.8-gke.1051000

1.31.3-gke.1162000

The following patch-only version auto-upgrade targets are now available for clusters with maintenance exclusions
(https://cloud.google.com/kubernetes-engine/docs/concepts/maintenance-windows-and-exclusions#exclusions) or other factors
preventing minor version upgrades:

Control planes and nodes with auto-upgrade enabled in the Extended channel will be upgraded from version
1.27 to version 1.27.16-gke.2122000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.27.md#v12716) with this release.

Control planes and nodes with auto-upgrade enabled in the Extended channel will be upgraded from version
1.28 to version 1.28.15-gke.1480000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.28.md#v12815) with this release.

Control planes and nodes with auto-upgrade enabled in the Extended channel will be upgraded from version
1.29 to version 1.29.12-gke.1120000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12912) with this release.

Control planes and nodes with auto-upgrade enabled in the Extended channel will be upgraded from version
1.30 to version 1.30.8-gke.1128000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1308) with this release.

Control planes and nodes with auto-upgrade enabled in the Extended channel will be upgraded from version
1.31 to version 1.31.4-gke.1183000

https://cloud.google.com/release-notes 429/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1314) with this release.

CHANGE (2025-R03) Version updates

star Note: Your clusters might not have these versions available. Rollouts are already in progress when we publish the release notes, and can
take multiple days to complete across all Google Cloud zones.

Version 1.31.4-gke.1183000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1314) is now the default version
for cluster creation.

The following versions are now available:

1.28.15-gke.1641000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.28.md#v12815)

1.29.13-gke.1006000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12913)

1.30.8-gke.1282000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1308)

1.30.9-gke.1009000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1309)

1.31.5-gke.1023000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1315)

The following node versions are now available:

1.27.16-gke.2270000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.27.md#v12716)

https://cloud.google.com/release-notes 430/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

1.28.15-gke.1641000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.28.md#v12815)

1.29.13-gke.1006000
(https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12913)

1.30.8-gke.1282000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1308)

1.30.9-gke.1009000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.30.md#v1309)

1.31.5-gke.1023000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1315)

The following versions are no longer available:

1.30.6-gke.1596000

1.30.8-gke.1224000

1.31.3-gke.1006000

1.31.3-gke.1162000

Auto-upgrade targets are now available for the following minor versions:

Control planes and nodes with auto-upgrade enabled will be upgraded from version 1.27 to version 1.28.15-
gke.1480000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.28.md#v12815) with
this release.

Control planes and nodes with auto-upgrade enabled will be upgraded from version 1.28 to version 1.29.12-
gke.1120000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12912) with
this release.

https://cloud.google.com/release-notes 431/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

The following patch-only version auto-upgrade targets are now available for clusters with maintenance exclusions
(https://cloud.google.com/kubernetes-engine/docs/concepts/maintenance-windows-and-exclusions#exclusions) or other factors
preventing minor version upgrades:

Control planes and nodes with auto-upgrade enabled will be upgraded from version 1.28 to version 1.28.15-
gke.1480000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.28.md#v12815) with
this release.

Control planes and nodes with auto-upgrade enabled will be upgraded from version 1.29 to version 1.29.12-
gke.1120000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.29.md#v12912) with
this release.

Control planes and nodes with auto-upgrade enabled will be upgraded from version 1.31 to version 1.31.4-
gke.1183000 (https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.31.md#v1314) with
this release.
Google SecOps

CHANGE The Google SecOps team identified that a cloud threat detection rule pack (azure-defender-for-cloud-vm-extensions) was
inadvertently made available to all customers. The licensing requirements restrict the availability of this rule pack to only
Enterprise and Enterprise+ customers and this has been corrected.

This change should not remove any prior detections for customers who have enabled this rule pack and do not meet the
licensing requirements but the rules themselves will now be unavailable and no new detections will generate.

FEATURE The following new YARA-L 2.0 functions are available in Rules and Search:

arrays.concat

arrays.join_string

https://cloud.google.com/release-notes 432/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

arrays.max

arrays.min

arrays.size

arrays.index_to_int

cast.as_bool

cast.as_float

math.ceil

math.floor

math.geo_distance

math.is_increasing

math.pow

math.random

strings.contains

strings.count_substrings

strings.extract_domain

strings.extract_hostname

strings.from_hex

strings.ltrim

https://cloud.google.com/release-notes 433/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

strings.reverse

strings.rtrim

strings.trim

strings.url_decode

timestamp.as_unix_seconds

timestamp.now

The following new YARA-L 2.0 functions are available in Rules:

hash.sha256

window.avg

window.first

window.last

window.median

window.mode

window.stddev

window.variance

Details on function signatures and behavior can be found in YARA-L2.0 Function Syntax Reference Documentation
(https://cloud.google.com/chronicle/docs/detection/yara-l-2-0-syntax#functions_2)

https://cloud.google.com/release-notes 434/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

CHANGE The prioritization logic of Applied Threat Intelligence (ATI) rule set has been improved to remove alerts from events that
have a specified security result action of BLOCKED or QUARANTINED. This change only impacts the IP address indicator
types for both High and Active Breach priority. For more information, see View details about rule sets
(https://cloud.google.com/chronicle/docs/detection/curated-detections#enable-configure).

DEPRECATED After July 2025, the Enterprise Insights page and the CBN alerts will no longer be available. Use the Alerts and IOCs page
to view the alerts. We recommend that you migrate the existing CBN alerts to the YARA-L detection engine
(https://cloud.google.com/chronicle/docs/detection/migrate-cbn-alerts).

Looker Studio

ANNOUNCEMENT Correction

The Modern charts in preview feature description was removed from release notes on January 29, 2025.

FEATURE Pivot sort by any

Users can sort a pivot table (https://cloud.google.com/looker/docs/studio/pivot-table-reference#sorting) by any metric or

calculated field in a data source.

CHANGE Is Any filter condition option for Looker data sources

Previously, when the value of some filter parameters was left blank in a Looker data source's underlying LookML, Looker
Studio would interpret the blank value incorrectly. With the addition of the Is Any filter condition option, Looker Studio
treats blank LookML filter values as expected by assigning those filters a default condition that allows any value.

Learn more about how Looker Studio interprets LookML filters.

(https://cloud.google.com/looker/docs/studio/looker-explore-data-on-a-looker-studio-
report#more_about_filters_that_are_always_or_conditionally_required)

https://cloud.google.com/release-notes 435/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

NetApp Volumes

FEATURE Google Cloud NetApp Volumes now supports Customer Managed Encryption Keys (CMEK) for large capacity volumes. For
more information, see About CMEK
(https://cloud.google.com/netapp/volumes/docs/configure-and-use/cmek/cmek-overview#service_level).

January 22, 2025

BigQuery

FEATURE BigQuery metastore (https://cloud.google.com/bigquery/docs/about-bqms) lets you access and manage metadata from a variety
of processing engines, including BigQuery and Apache Spark. BigQuery metastore supports BigQuery tables and open
formats such as Apache Iceberg. This feature is in preview (https://cloud.google.com/products#product-launch-stages).

Cloud Interconnect

CHANGE Dedicated Interconnect and Cross-Cloud Interconnect VLAN attachments support maximum bandwidths up to 100 Gbps.
For more information, see Limits (https://cloud.google.com/network-connectivity/docs/interconnect/quotas#limits).

Cloud Run

FEATURE The Cloud Run Builder (https://cloud.google.com/run/docs/reference/iam/roles#run.builder) (roles/run.builder) IAM role is

now available in preview. When deploying a service or function from source
(https://cloud.google.com/run/docs/resource-model#source), grant this role to the Compute Engine default service account that
builds your Cloud Run resource.

Gemini Code Assist

https://cloud.google.com/release-notes 436/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

FEATURE IntelliJ Gemini Code Assist now provides citations in Gemini Chat. When you insert code from the Gemini Code Assist chat
pane, and the code has citations, those citations are displayed in the editor.

FEATURE Admins can now block all suggestions containing citations during code completion, generation, and chat conversation for
VS Code Gemini Code Assist. If the admin level citations block is enabled, the local citations size limit is set to 0.

Generative AI on Vertex AI

ANNOUNCEMENT LangChain on Vertex AI

Billing for LangChain on Vertex AI will start on March 4, 2025.

The pricing structure is based on vCPU hours and GiB hours used. This means that you will be charged for both the
compute (vCPU) and memory resources consumed by your LangChain on Vertex AI workloads.

You can review the pricing details in the table below.

Product SKU ID Price

ReasoningEngine vCPU 8A55-0B95-B7DC $0.0994/vCPU-Hr

ReasoningEngine Memory 0B45-6103-6EC1 $0.0105/GiB-Hr

Google Cloud Architecture Center

FEATURE (New guide) Optimize AI and ML workloads with Parallelstore

(https://cloud.google.com/architecture/optimize-ai-ml-workloads-parallelstore): Learn how to optimize performance for artificial
intelligence (AI) or machine learning (ML) workloads with parallel file system storage by using Parallelstore.

Memorystore for Redis Cluster

https://cloud.google.com/release-notes 437/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

FEATURE Added support for on-demand and automated backups (https://cloud.google.com/memorystore/docs/cluster/backups).

January 21, 2025

BigQuery

FEATURE In BigQuery ML, you can now evaluate Anthropic Claude models by using the ML.EVALUATE function
(https://cloud.google.com/bigquery/docs/reference/standard-sql/bigqueryml-syntax-evaluate). The quotas
(https://cloud.google.com/bigquery/quotas#cloud_ai_service_functions) for use of Anthropic Claude models in BigQuery ML have
also been brought into parity with Vertex AI quotas.

This feature is in preview (https://cloud.google.com/products/#product-launch-stages).

FEATURE You can use natural language to prepare data with Gemini in BigQuery
(https://cloud.google.com/bigquery/docs/data-prep-get-suggestions).

FEATURE Data preparation in BigQuery lets you test data preparations you're developing before you deploy and schedule runs in
production. For more information, see Develop a data preparation
(https://cloud.google.com/bigquery/docs/orchestrate-data-preparations#develop).

Cloud Build

FEATURE You can now map specific build log fields to log entry fields when the build log is sent to Cloud Logging. For more
information, see Map build log fields to log entry fields
(https://cloud.google.com/build/docs/securing-builds/store-manage-build-logs#config-structured-logs).

Cloud Data Fusion

https://cloud.google.com/release-notes 438/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

FEATURE You can use custom constraints with Organization Policy to provide more granular control over specific fields for some
Cloud Data Fusion resources. For more information, see Create custom organization policy constraints
(https://cloud.google.com/data-fusion/docs/how-to/create-custom-constraints).

Cloud Healthcare API

ANNOUNCEMENT A new release is available. This release may include some or all of the following: general performance improvements, bug
fixes, and updates to the API reference documentation.

Cloud Logging

ANNOUNCEMENT On April 22, 2025, Cloud Logging will replace the single, global quota for the number of calls to write log entries with a set
of volume-based regional quotas. For more information, see Logging API quotas and limits
(https://cloud.google.com/logging/quotas#api-limits).

Dataflow

FEATURE Managed I/O now supports automatic upgrades for supported I/O connectors. Using this feature, Dataflow pipelines
automatically use the latest reliable version of the connector. This feature is generally available
(https://cloud.google.com/products?e=48754805&hl=en#product-launch-stages) (GA). For more information, see Dataflow
managed I/O (https://cloud.google.com/dataflow/docs/guides/managed-io).

Generative AI on Vertex AI

DEPRECATED Anthropic's Claude 3 Sonnet that is offered as a Model as a Service (MaaS) model in Model Garden is deprecated. For
details, see Generative AI on Vertex AI deprecations (https://cloud.google.com/vertex-ai/generative-ai/docs/deprecations).

Google Kubernetes Engine

https://cloud.google.com/release-notes 439/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

FEATURE You can now use A3 Ultra VM powered by NVIDIA H200 Tensor Core GPUs with our new Titanium ML network adapter,
which delivers non-blocking 3.2 Tbps of GPU-to-GPU traffic with RDMA over Converged Ethernet (RoCE).

A3 Ultra VMs are generally available in the a3-ultragpu-8g machine type and can be used through both the modes of
operation in Google Kubernetes Engine (GKE):

GKE Standard supports A3 Ultra with GPUDirect RDMA on GKE version 1.31.4-gke.1183000 or higher. To get started,
see Create a Hypercompute Cluster with GKE with default configuration
(https://cloud.google.com/ai-hypercomputer/docs/create/gke-ai-hypercompute).

GKE Autopilot supports A3 Ultra without GPUDirect RDMA on GKE version 1.31.4-gke.1183000 or higher. To get
started, see Deploy GPU workloads in Autopilot (https://cloud.google.com/kubernetes-engine/docs/how-to/autopilot-gpus).
A3 Ultra with GPUDirect RDMA is not yet supported on GKE Autopilot.

Google SecOps

CHANGE The following rules have been moved from "Precise" to "Broad" in their associated rule packs due to high alert volume
across the Google SecOps customer base.

GCP Workspace Data Exfil Drive:

Suspicious Workspace Actions Observed after a Successful Suspicious Login

GCP Suspicious Infrastructure Change:

Replacement of Existing Compute Machine Image

Replacement of Existing Compute Disk

GCP Cloud SQL Ransom:

Base64 Encoded Cloud SQL Command

https://cloud.google.com/release-notes 440/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

CIDR SCC Persistence:

SCC: Persistence: New API Method

SCC: Persistence: IAM Anomalous Grant

SCC: Persistence: GCE Admin Added SSH Key

CIDR SCC Malware:

SCC: Added Library Loaded

SCC: Added Binary Executed

CIDR SCC Cloud IDS Low:

SCC: Cloud IDS: Low Threat Finding

CIDR SCC Cloud Armor Medium:

SCC: Cloud Armor: Medium - Increasing Deny Ratio

SCC: Cloud Armor: Medium - Allowed Traffic Spike

Azure Identity:

Azure External User Invitation

Azure Defender for Cloud Windows and Linux VM:

Azure Defender for Cloud: Anonymous IP access

AWS GuardDuty Discovery:

AWS GuardDuty: Recon:EC2/PortProbeUnprotectedPort

https://cloud.google.com/release-notes 441/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Google SecOps SIEM

CHANGE The following rules have been moved from "Precise" to "Broad" in their associated rule packs due to high alert volume
across the Google SecOps customer base.

GCP Workspace Data Exfil Drive:

Suspicious Workspace Actions Observed after a Successful Suspicious Login

GCP Suspicious Infrastructure Change:

Replacement of Existing Compute Machine Image

Replacement of Existing Compute Disk

GCP Cloud SQL Ransom:

Base64 Encoded Cloud SQL Command

CIDR SCC Persistence:

SCC: Persistence: New API Method

SCC: Persistence: IAM Anomalous Grant

SCC: Persistence: GCE Admin Added SSH Key

CIDR SCC Malware:

SCC: Added Library Loaded

SCC: Added Binary Executed

CIDR SCC Cloud IDS Low:

https://cloud.google.com/release-notes 442/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

SCC: Cloud IDS: Low Threat Finding

CIDR SCC Cloud Armor Medium:

SCC: Cloud Armor: Medium - Increasing Deny Ratio

SCC: Cloud Armor: Medium - Allowed Traffic Spike

Azure Identity:

Azure External User Invitation

Azure Defender for Cloud Windows and Linux VM:

Azure Defender for Cloud: Anonymous IP access

AWS GuardDuty Discovery:

AWS GuardDuty: Recon:EC2/PortProbeUnprotectedPort

Organization Policy

FEATURE You can use custom constraints with Organization Policy to provide more granular control over specific fields for some
Cloud Data Fusion resources. For more information, see Create custom organization policy constraints
(https://cloud.google.com/data-fusion/docs/how-to/create-custom-constraints).

Resource Manager

FEATURE You can use custom constraints with Organization Policy to provide more granular control over specific fields for some
Cloud Data Fusion resources. For more information, see Create custom organization policy constraints
(https://cloud.google.com/data-fusion/docs/how-to/create-custom-constraints).

Workload Manager

https://cloud.google.com/release-notes 443/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

FEATURE Generally available: You can define organizational best practices for your workloads using custom rules written in the Rego
policy language. Workload Manager evaluates your workloads against these rules and creates reports for any violation and
helps you prioritize remediation. This helps you continuously improve the quality, reliability, and performance of your
workloads. For more information, see Implementing best practices using custom rules
(https://cloud.google.com/workload-manager/docs/evaluate/custom-rules/about-custom-rules).

January 20, 2025

BigQuery

LIBRARIES A weekly digest of client library updates from across the Cloud SDK (https://cloud.google.com/sdk).

JavaPython (#python)
(#java)

Changes for google-cloud-bigquery (https://github.com/googleapis/java-bigquery)

2.46.0 (https://github.com/googleapis/java-bigquery/compare/v2.45.0...v2.46.0) (2025-01-11)

Features

bigquery: Support IAM conditions in datasets in Java client. (#3602

(https://github.com/googleapis/java-bigquery/issues/3602)) (6696a9c
(https://github.com/googleapis/java-bigquery/commit/6696a9c7d42970e3c24bda4da713a855dbe40ce5))

Bug Fixes

https://cloud.google.com/release-notes 444/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

NPE when reading BigQueryResultSet from empty tables (#3627

(https://github.com/googleapis/java-bigquery/issues/3627)) (9a0b05a
(https://github.com/googleapis/java-bigquery/commit/9a0b05a3b57797b7cdd8ca9739699fc018dbd868))

test: Force usage of ReadAPI (#3625 (https://github.com/googleapis/java-bigquery/issues/3625)) (5ca7d4a

(https://github.com/googleapis/java-bigquery/commit/5ca7d4acbbc40d6ef337732464b3bbd130c86430))

Dependencies

Update actions/upload-artifact action to v4.5.0 (#3620 (https://github.com/googleapis/java-bigquery/issues/3620))

(cc25099 (https://github.com/googleapis/java-bigquery/commit/cc25099f81cbf94e9e2ee9db03a7d9ecd913c176))

Update actions/upload-artifact action to v4.6.0 (#3633 (https://github.com/googleapis/java-bigquery/issues/3633))

(ca20aa4 (https://github.com/googleapis/java-bigquery/commit/ca20aa47ea7826594975ab6aeb8498e2377f8553))

Update dependency com.google.api.grpc:proto-google-cloud-bigqueryconnection-v1 to v2.57.0 (#3617

(https://github.com/googleapis/java-bigquery/issues/3617)) (51370a9
(https://github.com/googleapis/java-bigquery/commit/51370a92e7ab29dfce91199666f23576d2d1b64a))

Update dependency com.google.api.grpc:proto-google-cloud-bigqueryconnection-v1 to v2.58.0 (#3631

(https://github.com/googleapis/java-bigquery/issues/3631)) (b0ea0d5
(https://github.com/googleapis/java-bigquery/commit/b0ea0d5bc4ac730b0e2eaf47e8a7441dc113686b))

Update dependency com.google.apis:google-api-services-bigquery to v2-rev20241222-2.0.0 (#3623

(https://github.com/googleapis/java-bigquery/issues/3623)) (4061922
(https://github.com/googleapis/java-bigquery/commit/4061922e46135d673bfa48c00bbf284efa46e065))

Update dependency com.google.cloud:google-cloud-datacatalog-bom to v1.61.0 (#3618

(https://github.com/googleapis/java-bigquery/issues/3618)) (6cba626
(https://github.com/googleapis/java-bigquery/commit/6cba626ff14cebbc04fa4f6058b273de0c5dd96e))

https://cloud.google.com/release-notes 445/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Update dependency com.google.cloud:google-cloud-datacatalog-bom to v1.62.0 (#3632

(https://github.com/googleapis/java-bigquery/issues/3632)) (e9ff265
(https://github.com/googleapis/java-bigquery/commit/e9ff265041f6771a71c8c378ed3ff5fdec6e837b))

Update dependency com.google.cloud:sdk-platform-java-config to v3.41.1 (#3628

(https://github.com/googleapis/java-bigquery/issues/3628)) (442d217
(https://github.com/googleapis/java-bigquery/commit/442d217606b7d93d26887344a7a4a01303b18b8c))

Update dependency com.google.oauth-client:google-oauth-client-java6 to v1.37.0 (#3614

(https://github.com/googleapis/java-bigquery/issues/3614)) (f5faa69
(https://github.com/googleapis/java-bigquery/commit/f5faa69bc5b6fdae137724df5693f8aecf27d609))

Update dependency com.google.oauth-client:google-oauth-client-jetty to v1.37.0 (#3615

(https://github.com/googleapis/java-bigquery/issues/3615)) (a6c7944
(https://github.com/googleapis/java-bigquery/commit/a6c79443a5e675a01ecb91e362e261a6f6ecc055))

Update github/codeql-action action to v2.27.9 (#3608 (https://github.com/googleapis/java-bigquery/issues/3608))

(567ce01 (https://github.com/googleapis/java-bigquery/commit/567ce01ed77d44760ddcd872a0d61abdd6a09832))

Update github/codeql-action action to v2.28.0 (#3621 (https://github.com/googleapis/java-bigquery/issues/3621))

(e0e09ec (https://github.com/googleapis/java-bigquery/commit/e0e09ec4954f5b5e2f094e4c67600f38353f453c))
Bigtable

LIBRARIES A weekly digest of client library updates from across the Cloud SDK (https://cloud.google.com/sdk).

Python
(#python)

Changes for google-cloud-bigtable (https://github.com/googleapis/python-bigtable)

https://cloud.google.com/release-notes 446/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

2.28.1 (https://github.com/googleapis/python-bigtable/compare/v2.28.0...v2.28.1) (2025-01-17)

Bug Fixes

Allow empty headers for btql routing (#1072 (https://github.com/googleapis/python-bigtable/issues/1072)) (e7ecfeb

(https://github.com/googleapis/python-bigtable/commit/e7ecfeb8984a45c880d9483305964fff347eb4b8))

Cloud Logging

LIBRARIES A weekly digest of client library updates from across the Cloud SDK (https://cloud.google.com/sdk).

Java
(#java)

Changes for google-cloud-logging (https://github.com/googleapis/java-logging)

3.21.1 (https://github.com/googleapis/java-logging/compare/v3.21.0...v3.21.1) (2025-01-13)

Bug Fixes

deps: Update the Java code generator (gapic-generator-java) to 2.51.1 (705dba2

(https://github.com/googleapis/java-logging/commit/705dba2d6c12bd9f9e281c962cfb232ab28b31a9))

Dependencies

Update dependency com.google.cloud:sdk-platform-java-config to v3.41.1 (#1745

(https://github.com/googleapis/java-logging/issues/1745)) (6a7280d
(https://github.com/googleapis/java-logging/commit/6a7280d0851024c1b44457fa7064a7f3d6fc2d5b))

Update dependency org.easymock:easymock to v5.5.0 (#1639

(https://github.com/googleapis/java-logging/issues/1639)) (f559d89

https://cloud.google.com/release-notes 447/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

(https://github.com/googleapis/java-logging/commit/f559d89bf36201fce609ef752f27baa0c5f6f1c1))

Update googleapis/sdk-platform-java action to v2.51.1 (#1742

(https://github.com/googleapis/java-logging/issues/1742)) (3c7a2c7
(https://github.com/googleapis/java-logging/commit/3c7a2c70fd46cc7196ef7b037d6017971e8a020a))

Compute Engine

FEATURE Generally available: Managed instance groups (MIGs) let you create pools of suspended and stopped virtual machine
(VM) instances. You can manually suspend and stop VMs in a MIG to save on costs, or use suspended and stopped pools
to speed up scale out operations of your MIG. For more information, see About suspending and stopping VMs in a MIG
(https://cloud.google.com/compute/docs/instance-groups/suspended-and-stopped-vms-in-mig).

Dataplex

FEATURE Data lineage path visualization is available in preview (https://cloud.google.com/products#product-launch-stages). Lineage path
visualizations help you to understand the lineage links between two selected resources. For more information, see Lineage
path visualization (https://cloud.google.com/data-catalog/docs/concepts/about-data-lineage#visualize-path).

Google SecOps

DEPRECATED Python 3.7 is being deprecated and will be fully removed on June 1, 2025.

For information on how to update Marketplace integrations to Python 3.11, refer to Upgrade the Python versions
(https://cloud.google.com/chronicle/docs/soar/respond/integrations-setup/upgrade-python-versions).

Google SecOps SOAR

DEPRECATED Python 3.7 is being deprecated and will be fully removed on June 1, 2025.

https://cloud.google.com/release-notes 448/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

For information on how to update Marketplace integrations to Python 3.11, refer to Upgrade the Python versions
(https://cloud.google.com/chronicle/docs/soar/respond/integrations-setup/upgrade-python-versions).

January 19, 2025

Google SecOps

CHANGE The individual parser documents have been put into one page
(https://cloud.google.com/chronicle/docs/ingestion/default-parsers/default-parser-configuration) with an easy-to-use search bar. This
reorganization helps you find all the information you need in one place.

Google SecOps SIEM

CHANGE The individual parser documents have been put into one page
(https://cloud.google.com/chronicle/docs/ingestion/default-parsers/default-parser-configuration) with an easy-to-use search bar. This
reorganization helps you find all the information you need in one place.

Google SecOps SOAR

ANNOUNCEMENT Release 6.3.31 is currently in Preview. This release contains internal and customer bug fixes.

January 18, 2025

Google SecOps SOAR

ANNOUNCEMENT Release 6.3.30 (https://cloud.google.com/chronicle/docs/soar/release-notes#January_11_2025) is still in Preview.

https://cloud.google.com/release-notes 449/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

January 17, 2025

BigQuery

FEATURE The BigQuery Data Transfer Service can now transfer data from the following data sources:

MySQL (https://cloud.google.com/bigquery/docs/mysql-transfer)

PostgreSQL (https://cloud.google.com/bigquery/docs/postgresql-transfer)

Transfers from these data sources are supported in Preview (https://cloud.google.com/products#product-launch-stages).

FEATURE In the navigation menu (https://cloud.google.com/bigquery/docs/bigquery-web-ui#navigation_menu), you can now go to the

Settings page to set default settings that are applied when you start a session in BigQuery Studio. This feature is in
preview (https://cloud.google.com/products#product-launch-stages).

Cloud Build

FEATURE You can now use Cloud Build to push Go modules to Artifact Registry. For more information, see Build and test Go
applications (https://cloud.google.com/build/docs/building/build-go).

Cloud SQL for PostgreSQL

FEATURE Cloud SQL for PostgreSQL version 17 adds support for the following extensions and plugins:

Extensions and plugins

ip4r

oracle_fdw

https://cloud.google.com/release-notes 450/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

orafce

pg_background

pg_bigm

pgfincore

pg_hint_plan

pg_partman

pg_proctab

pgrouting

pg_similarity

pgtap

pgtt

pg_wait_sampling

PL/Proxy

plv8

postgresql_anonymizer

postgresql_hll

prefix

temporal_tables

https://cloud.google.com/release-notes 451/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Cloud SQL for PostgreSQL version 17 doesn't support:

rdkit

pg_squeeze

To use these extensions and plugins in your PostgreSQL 17 instance, update your instance to the
POSTGRES_17_2.R20241011.00_11 maintenance version.

To learn how to check your maintenance version, see Self service maintenance
(https://cloud.google.com/sql/docs/postgres/self-service-maintenance#before_you_begin/self-service-maintenance). To find your
maintenance window or to manage maintenance updates, see Find and set maintenance windows
(https://cloud.google.com/sql/docs/postgres/set-maintenance-window).

To start using PostgreSQL 17, see Create instances (https://cloud.google.com/sql/docs/postgres/create-instance).

Cloud SQL for SQL Server

FEATURE Control the file size of the tempdb database. For more information, see Manage a tempdb database
(https://cloud.google.com/sql/docs/sqlserver/managing-tempdb).

Compute Engine

FEATURE Compute Engine is enabled for use with Cloud KMS Autokey.

Using keys generated by Autokey can help you consistently align with industry standards and recommended practices for
data security, including the HSM protection level, separation of duties, key rotation, location, and key specificity. Keys
requested using Autokey function identically to other Cloud HSM keys with the same settings.

For more information, see About disk encryption (https://cloud.google.com/compute/docs/disks/disk-encryption). To learn more
about Cloud KMS Autokey, see Autokey overview (https://cloud.google.com/kms/docs/autokey-overview).

https://cloud.google.com/release-notes 452/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Container Optimized OS

CHANGE cos-117-18613-75-114

Kernel Docker ContainerdGPU Drivers

(https://cloud.goo
os/docs/how-to/ru

COS-6.6.56 v24.0.9v1.7.24 See List

(https://cos.googlesource.com/third_party/kernel/+/ee966a6b584adbdfa0b208564e9c69b1828511f3) (https://storage.go
tools/18613.75.11

SECURITY Upgraded rsync to version 3.3.0-r2. This fixes CVE-2024-12084, CVE-2024-12085, CVE-2024-12086, CVE-2024-12087, CVE-
2024-12088, and CVE-2024-12747.

SECURITY Fixed CVE-2024-53173 in the Linux kernel.

SECURITY Fixed CVE-2024-56600 in the Linux kernel.

SECURITY Fixed CVE-2024-56601 in the Linux kernel.

SECURITY Fixed CVE-2024-53202 in the Linux kernel.

SECURITY Fixed CVE-2024-53206 in the Linux kernel.

SECURITY Fixed CVE-2024-56786 in the Linux kernel.

SECURITY Fixed CVE-2024-56780 in the Linux kernel.

SECURITY Fixed CVE-2024-56720 in the Linux kernel.

https://cloud.google.com/release-notes 453/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

SECURITY Fixed CVE-2024-56783 in the Linux kernel.

SECURITY Fixed CVE-2024-56672 in the Linux kernel.

SECURITY Fixed CVE-2024-56675 in the Linux kernel.

SECURITY Fixed CVE-2024-53185 in the Linux kernel.

SECURITY Fixed CVE-2024-56664 in the Linux kernel.

SECURITY Fixed CVE-2024-56755 in the Linux kernel.

SECURITY Fixed CVE-2024-56756 in the Linux kernel.

SECURITY Fixed CVE-2024-56658 in the Linux kernel.

SECURITY Fixed CVE-2024-53128 in the Linux kernel.

CHANGE Runtime sysctl changes:

Changed: fs.file-max: 811744 -> 811796

CHANGE cos-109-17800-436-4

Kernel Docker ContainerdGPU Drivers

(https://cloud.goo
os/docs/how-to/ru

https://cloud.google.com/release-notes 454/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

COS-6.1.124 v24.0.9v1.7.24 See List

(https://cos.googlesource.com/third_party/kernel/+/0b0e4f165e43daca51e046597e5cd52783f2caca) (https://storage.go
tools/17800.436.4/

ANNOUNCEMENT This is an LTS Refresh release (https://cloud.google.com/container-optimized-os/docs/concepts/versioning#lts_refresh_releases).

FEATURE Added NVIDIA GPU drivers R560 branch. Updates both the the LATEST and R560 GPU driver label to v560.35.03.

SECURITY Upgraded rsync to version 3.3.0-r2. This fixes CVE-2024-12084, CVE-2024-12085, CVE-2024-12086, CVE-2024-12087, CVE-
2024-12088, and CVE-2024-12747.

SECURITY Fixed KCTF-35f56c5 in the Linux kernel.

SECURITY Fixed CVE-2024-56720 in the Linux kernel.

SECURITY Fixed CVE-2024-56783 in the Linux kernel.

SECURITY Fixed CVE-2024-50146 in the Linux kernel.

SECURITY Fixed CVE-2024-56756 in the Linux kernel.

SECURITY Fixed CVE-2024-56675 in the Linux kernel.

SECURITY Fixed CVE-2024-56755 in the Linux kernel.

SECURITY Fixed CVE-2024-56672 in the Linux kernel.

SECURITY Fixed CVE-2024-56658 in the Linux kernel.

CHANGE Runtime sysctl changes:

https://cloud.google.com/release-notes 455/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Changed: fs.file-max: 812257 -> 812258

CHANGE cos-105-17412-535-16

Kernel Docker ContainerdGPU Drivers

(https://cloud.goog
os/docs/how-to/ru

COS-5.15.173 v23.0.3v1.7.23 See List

(https://cos.googlesource.com/third_party/kernel/+/58d3cd4d7459221c42f001549cb9ecf6fd78202f) (https://storage.go
tools/17412.535.16

SECURITY Upgraded rsync to version 3.3.0-r2. This fixes CVE-2024-12084, CVE-2024-12085, CVE-2024-12086, CVE-2024-12087, CVE-
2024-12088, and CVE-2024-12747.

SECURITY Fixed KCTF-35f56c5 in the Linux kernel.

SECURITY Fixed CVE-2024-56745 in the Linux kernel.

SECURITY Fixed CVE-2024-56720 in the Linux kernel.

SECURITY Fixed CVE-2024-56780 in the Linux kernel.

SECURITY Fixed CVE-2024-56694 in the Linux kernel.

SECURITY Fixed CVE-2024-56739 in the Linux kernel.

SECURITY Fixed CVE-2024-53151 in the Linux kernel.

SECURITY Fixed CVE-2024-53146 in the Linux kernel.

https://cloud.google.com/release-notes 456/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

SECURITY Fixed CVE-2024-56606 in the Linux kernel.

SECURITY Fixed CVE-2024-56614 in the Linux kernel.

CHANGE Runtime sysctl changes:

Changed: fs.file-max: 812690 -> 812682

CHANGE cos-dev-121-18828-0-0

Kernel Docker ContainerdGPU Drivers

(https://cloud.goog
os/docs/how-to/run

COS-6.6.71 v25.0.7v2.0.0 See List

(https://cos.googlesource.com/third_party/kernel/+/1e1305d15b21c35accf5fe110df86908fa95e7af) (https://storage.goo
tools/18828.0.0/lak

SECURITY Upgraded rsync to version 3.3.0-r2. This fixes CVE-2024-12084, CVE-2024-12085, CVE-2024-12086, CVE-2024-12087, CVE-
2024-12088, and CVE-2024-12747.

CHANGE Runtime sysctl changes:

Changed: fs.file-max: 811795 -> 811767

CHANGE cos-113-18244-291-9

https://cloud.google.com/release-notes 457/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Kernel Docker ContainerdGPU Drivers

(https://cloud.goog
os/docs/how-to/ru

COS-6.1.123 v24.0.9v1.7.24 See List

(https://cos.googlesource.com/third_party/kernel/+/e55bf22ffd8898012c8f3265949ead1ab34ed684) (https://storage.go
tools/18244.291.9/

SECURITY Upgraded rsync to version 3.3.0-r2. This fixes CVE-2024-12084, CVE-2024-12085, CVE-2024-12086, CVE-2024-12087, CVE-
2024-12088, and CVE-2024-12747.

CHANGE Runtime sysctl changes:

Changed: fs.file-max: 812027 -> 812035

Dataproc

ANNOUNCEMENT New Dataproc on Compute Engine subminor image versions:

(https://cloud.google.com/dataproc/docs/concepts/versioning/dataproc-version-clusters#supported_dataproc_versions)

2.0.128-debian10, 2.0.128-rocky8, 2.0.128-ubuntu18

2.1.76-debian11, 2.1.76-rocky8, 2.1.76-ubuntu20, 2.1.76-ubuntu20-arm

2.2.42-debian12, 2.2.42-rocky9, 2.2.42-ubuntu22

ANNOUNCEMENT New Dataproc Serverless for Spark runtime versions

(https://cloud.google.com/dataproc-serverless/docs/concepts/versions/spark-runtime-versions):

1.1.87

https://cloud.google.com/release-notes 458/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

1.2.31

2.2.31

CHANGE Dataproc Serverless for Spark:

Added support for XGBoost (https://github.com/dmlc/xgboost) 2.1 in 2.2

(https://cloud.google.com/dataproc-serverless/docs/concepts/versions/spark-runtime-2.2#xgboost_libraries) runtime.

Change spark.sql.maxMetadataStringLength default value to 5000 for 1.2

(https://cloud.google.com/dataproc-serverless/docs/concepts/versions/spark-runtime-1.2) and 2.2
(https://cloud.google.com/dataproc-serverless/docs/concepts/versions/spark-runtime-2.2) runtimes

Generative AI on Vertex AI

FEATURE Agent evaluation (https://cloud.google.com/vertex-ai/generative-ai/docs/models/evaluation-agents) using the Gen AI evaluation

service (https://cloud.google.com/vertex-ai/generative-ai/docs/models/evaluation-overview) is available in Preview
(https://cloud.google.com/products#product-launch-stages).

Google Cloud Architecture Center

CHANGE Cross-Cloud Network for distributed applications (https://cloud.google.com/architecture/ccn-distributed-apps-design): Updates to

the document set to reflect feature releases over the past months.

Memorystore for Redis Cluster

FEATURE You can now create a Memorystore for Redis Cluster instance that uses customer-managed encryption keys (CMEK). You
can also manage instances that use CMEK.

For more information about CMEK for Memorystore for Redis Cluster, see About customer-managed encryption keys
(CMEK) (https://cloud.google.com/memorystore/docs/cluster/about-cmek).

https://cloud.google.com/release-notes 459/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Security Command Center

FEATURE Security Command Center now displays the number of resources scanned for a specific security compliance standard.
This information appears as a column in the table on the Compliance detail page of the Google Cloud console for a given
compliance standard.

To view the number of resources scanned against a security compliance standard, see Assess compliance against a
specific standard
(https://cloud.google.com/security-command-center/docs/compliance-management#assess_compliance_against_a_specific_standard).

January 16, 2025

BigQuery

FEATURE The BigQuery migration assessment for Oracle (https://cloud.google.com/bigquery/docs/migration-assessment) now includes a
total cost of ownership (TCO) calculator that provides an estimation of compute and storage costs for migrating your
Oracle data warehouse to BigQuery. This feature is in preview (https://cloud.google.com/products#product-launch-stages).

FEATURE We have rearranged the navigation menu (https://cloud.google.com/bigquery/docs/bigquery-web-ui#navigation_menu) into new

categories. This feature is generally available (https://cloud.google.com/products#product-launch-stages) (GA).

Cloud Asset Inventory

FEATURE The following resource types are now publicly available through the analyze policy APIs
(https://cloud.google.com/asset-inventory/docs/analyzing-iam-policy) (AnalyzeIamPolicy
(https://cloud.google.com/asset-inventory/docs/reference/rest/v1/TopLevel/analyzeIamPolicy) and AnalyzeIamPolicyLongrunning
(https://cloud.google.com/asset-inventory/docs/reference/rest/v1/TopLevel/analyzeIamPolicyLongrunning)).

https://cloud.google.com/release-notes 460/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Identity Platform

identitytoolkit.googleapis.com/Config

KRM API Hosting

krmapihosting.googleapis.com/KrmApiHost
Cloud Service Mesh

ANNOUNCEMENT 1.24.2-asm.1 is now available for in-cluster Cloud Service Mesh.

You can now download 1.24.2-asm.1 for in-cluster Cloud Service Mesh. It includes the features of Istio 1.24.2
(https://istio.io/latest/news/releases/1.24.x/announcing-1.24.2/) subject to the list of supported features
(https://cloud.google.com/service-mesh/docs/supported-features-in-cluster).

Istio's dual-stack is not supported

Istio's experimental feature to enable lazy subset creation of envoy statistics is not supported.

For details on upgrading Cloud Service Mesh, see Upgrade Cloud Service Mesh
(https://cloud.google.com/service-mesh/docs/upgrade/upgrade). Cloud Service Mesh version 1.24.2-asm.1 uses Envoy v1.32.3.

Compute Engine

FEATURE Generally available: Google Axion Processor-based C4A VMs

(https://cloud.google.com/compute/docs/general-purpose-machines#c4a_series) with Titanium SSD
(https://cloud.google.com/compute/docs/disks/local-ssd#local_ssd_types) are now generally available. Part of our general-
purpose machine family, these instances come with up to 6 TiB of Titanium SSD disks. Titanium SSD is our latest
generation of Local SSD. It uses Titanium I/O offload processing (https://cloud.google.com/titanium) and offers enhanced SSD
security, performance, and management.

https://cloud.google.com/release-notes 461/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Container Optimized OS

CHANGE cos-dev-121-18827-0-0

Kernel Docker ContainerdGPU Drivers

(https://cloud.goog
os/docs/how-to/run

COS-6.6.71 v25.0.7v2.0.0 See List

(https://cos.googlesource.com/third_party/kernel/+/1e1305d15b21c35accf5fe110df86908fa95e7af) (https://storage.goo
tools/18827.0.0/lak

CHANGE Upgraded nvidia-container-toolkit to v1.17.3.

CHANGE Updated the Linux kernel to v6.6.71.

FEATURE Added NVIDIA GPU drivers R565 branch - Updated R565 latest driver to v565.57.01.

FIXED Upgraded app-containers/docker to v25.0.7, Upgraded app-containers/docker-test to v25.0.7, Upgraded app-

containers/docker-cli to v25.0.7.

FIXED Upgraded app-containers/cni-plugins to v1.6.2.

FIXED Upgraded app-admin/fluent-bit to v3.2.4.

FIXED Upgraded app-admin/google-guest-configs to v20250107.00.

FIXED Upgraded chromeos-base/update_engine-client to v0.0.1-r2467.

FIXED Upgraded chromeos-base/power_manager-client to v0.0.1-r2958.

https://cloud.google.com/release-notes 462/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

FIXED Upgraded chromeos-base/shill-client to v0.0.1-r4804.

FIXED Upgraded chromeos-base/session_manager-client to v0.0.1-r2814.

FIXED Upgraded chromeos-base/debugd-client to v0.0.1-r2723.

FIXED Upgraded chromeos-base/chromeos-common-script to v0.0.1-r654.

FIXED Upgraded dev-db/sqlite to v3.47.2.

FIXED Upgraded sys-apps/pv to v1.9.25.

FIXED Upgraded sys-apps/file to v5.46-r1.

FIXED Upgraded net-misc/socat to v1.8.0.2.

CHANGE Runtime sysctl changes:

Changed: fs.file-max: 811786 -> 811795

CHANGE cos-109-17800-372-99

Kernel Docker ContainerdGPU Drivers

(https://cloud.goog
os/docs/how-to/ru

COS-6.1.112 v24.0.9v1.7.24 See List

(https://cos.googlesource.com/third_party/kernel/+/d09bcf996f5a6550b9f52e55a73218ee71ae9e1a) (https://storage.go
tools/17800.372.99

https://cloud.google.com/release-notes 463/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

CHANGE Upgraded nvidia-container-toolkit to v1.17.3.

FIXED Upgraded sys-apps/file to v5.46-r1.

SECURITY Fixed CVE-2024-56780 in the Linux kernel.

SECURITY Fixed CVE-2024-56763 in the Linux kernel.

SECURITY Fixed CVE-2024-53146 in the Linux kernel.

SECURITY Fixed CVE-2024-56694 in the Linux kernel.

SECURITY Fixed CVE-2024-53151 in the Linux kernel.

SECURITY Fixed CVE-2024-56688 in the Linux kernel.

SECURITY Fixed CVE-2024-56745 in the Linux kernel.

SECURITY Fixed CVE-2024-56739 in the Linux kernel.

SECURITY Fixed CVE-2024-56606 in the Linux kernel.

SECURITY Fixed CVE-2024-56614 in the Linux kernel.

SECURITY Fixed CVE-2024-53096 in the Linux kernel.

SECURITY Fixed CVE-2024-53052 in the Linux kernel.

SECURITY Fixed CVE-2024-53093 in the Linux kernel.

Deep Learning Containers

https://cloud.google.com/release-notes 464/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

FEATURE M127 release

The following framework versions have reached their end of patch and support dates:

Tensorflow versions 2.15 and earlier

PyTorch versions 2.1 and earlier

Base versions with CUDA 12.1 and earlier

To view the end of patch and support dates, see Supported framework versions
(https://cloud.google.com/deep-learning-containers/docs/choosing-container). Framework versions remain available for use
until their end of availability date, but recent versions are strongly recommended.

Deep Learning VM Images

FEATURE M127 release

Fixed an issue related to ownership of the home directory when using authorized ssh keys.

The following framework versions have reached their end of patch and support dates:

Tensorflow versions 2.15 and earlier

PyTorch versions 2.1 and earlier

Base versions with CUDA 12.2 and earlier

To view the end of patch and support dates, see Supported framework versions
(https://cloud.google.com/deep-learning-vm/docs/images#supported-frameworks). To create a VM instance using an image
family that has reached its end of patch and support date, you must specify an image from the image family when
you create the VM instance. To list images from an image family name after its end of patch and support date,

https://cloud.google.com/release-notes 465/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

include the --show-deprecated flag in your gcloud compute images list command, or select Show deprecated
images when creating an instance in the Google Cloud console.
Google Cloud Architecture Center

FEATURE (New guide) Implement two-tower retrieval for large-scale candidate generation
(https://cloud.google.com/architecture/implement-two-tower-retrieval-large-scale-candidate-generation): Describes how to implement
an end-to-end two-tower candidate generation workflow with Vertex AI.

Google Kubernetes Engine

DEPRECATED With minor version 1.33, GKE nodes use containerd 2.0, which removes support for Docker Schema 1 images and the CRI
v1alpha2 API. GKE pauses automatic upgrades to 1.33 when it detects that a cluster uses the deprecated features. To
prepare for this change, see Migrate nodes to containerd 2
(https://cloud.google.com/kubernetes-engine/docs/deprecations/migrate-containerd-2).

Looker

FEATURE You can now provision, configure, and manage non-production instances
(https://cloud.google.com/looker/docs/looker-core-overview#staging_environments_and_testing) of the Standard, Enterprise, and
Embed Looker (Google Cloud core) editions for staging and testing. The functionalities that are available for each non-
production edition are the same as the functionalities that are available for the production editions. Non-production Looker
instances also can have the same network connection types
(https://cloud.google.com/looker/docs/looker-core-feature-differences#feature_compatibility_by_network_connection_type) as
production instances.

Security Command Center

FEATURE A new Risk Overview page is the default view for Security Command Center Enterprise customers. It serves as your first
contact security dashboard for the highest priority risks in your cloud environments. From here you can quickly assess

https://cloud.google.com/release-notes 466/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

toxic combinations, threats, compliance issues, and high impact vulnerabilities.

CHANGE The Postures section in the SecOps console has been renamed to Risk, and moved to the top of the navigation for Security
Command Center Enterprise customers. You can find the Vulnerabilities and Data Security dashboards here, along with
the Findings and Resources pages.

Vertex AI Workbench

FEATURE M127 release

The M127 release of Vertex AI Workbench user-managed notebooks includes the following:

Fixed an issue related to ownership of the home directory when using authorized ssh keys.

FEATURE The M127 release of Vertex AI Workbench managed notebooks includes the following:

Fixed an issue related to ownership of the home directory when using authorized ssh keys.

FEATURE M127 release

The M127 release of Vertex AI Workbench instances includes the following:

Fixed an issue related to ownership of the home directory when using authorized ssh keys.

Virtual Private Cloud

FEATURE Private Service Connect endpoints for regional Google APIs

(https://cloud.google.com/vpc/docs/access-regional-google-apis-endpoints) can be configured with IPv6 addresses
(https://cloud.google.com/vpc/docs/access-regional-google-apis-endpoints#create-regional-endpoint) to support access from IPv6
clients. This feature is available in General Availability.

https://cloud.google.com/release-notes 467/468
3/17/25, 8:52 AM Google Cloud release notes | Documentation

Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License (https://creativecommons.org/licenses/by/4.0/),
and code samples are licensed under the Apache 2.0 License (https://www.apache.org/licenses/LICENSE-2.0). For details, see the Google Developers Site Policies
(https://developers.google.com/site-policies). Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2025-03-16 UTC.

https://cloud.google.com/release-notes 468/468