GCP Release Note: July 04, 2025

Dataproc

Announcement

New Dataproc on Compute Engine subminor image versions:

2.3.5-debian12, 2.3.5-ubuntu22, and 2.3.5-rocky9.

Changed

Serverless for Apache Spark (formerly known as Dataproc Serverless for Spark) now supports OS Login organization policy. Organizations, folders, and projects that enforce the OS Login policy can now use Serverless for Apache Spark.

Document AI

Feature

Document AI now supports Identity and Access Management (IAM) deny policies. These policies allow you to define deny rules that prevent certain principals from using certain permissions to access Google Cloud resources, regardless of the roles they're granted.

For more information, read Deny policy overview and Document AI security and compliance.

Feature

Document AI VPC service controls (VPC-SC) integration now supports identity groups.

For more information on setting up VPC-SC identity groups, read Configure identity groups and third-party identities in ingress and egress rules.

Sensitive Data Protection

Feature

Sensitive Data Protection can detect and redact the following object infoTypes in images:

• OBJECT_TYPE/BARCODE
• OBJECT_TYPE/LICENSE_PLATE
• OBJECT_TYPE/PERSON
• OBJECT_TYPE/WHITEBOARD

For more information, see the following:

• Inspect an image for sensitive objects
• Object redaction

Source: Google Cloud Platform