BigQuery
Feature
You can visualize your geospatial query results on an interactive map in BigQuery Studio. This feature is generally available (GA).
Feature
You can use the dbt-bigquery adapter to run Python code that’s defined in
BigQuery DataFrames. For more information, see
Use BigQuery DataFrames in dbt.
This feature is
generally available
(GA).
Cloud Service Mesh
Announcement
1.25.5-asm.7 is now available for in-cluster Cloud Service Mesh.
You can now download 1.25.5-asm.7 for in-cluster Cloud Service Mesh. It includes the features of Istio 1.25.5 subject to the list of supported features. Cloud Service Mesh version 1.25.5-asm.7 uses envoy v1.33.10-dev.
For details on upgrading Cloud Service Mesh, see Upgrade Cloud Service Mesh.
Fixed
1.25.5-asm.7 includes the fixes for the following CVEs:
| CVE | Proxy | Control Plane | CNI | Distroless |
|---|---|---|---|---|
| CVE-2025-6297 | Yes | Yes | Yes | – |
| CVE-2024-10963 | Yes | Yes | Yes | – |
| CVE-2025-4802 | – | – | – | Yes |
| CVE-2025-8058 | Yes | Yes | Yes | Yes |
Announcement
1.26.4-asm.7 is now available for in-cluster Cloud Service Mesh.
You can now download 1.26.4-asm.7 for in-cluster Cloud Service Mesh. It includes the features of Istio 1.26.4 subject to the list of supported features.
For details on upgrading Cloud Service Mesh, see Upgrade Cloud Service Mesh. Cloud Service Mesh version 1.26.4-asm.7 uses Envoy v1.34.8-dev.
Fixed
1.26.4-asm.7 includes the fixes for the following CVEs:
| CVE | Proxy | Control Plane | CNI | Distroless |
|---|---|---|---|---|
| CVE-2024-10963 | Yes | Yes | Yes | – |
| CVE-2025-8058 | Yes | Yes | Yes | Yes |
| CVE-2025-4802 | – | – | – | Yes |
Announcement
1.27.1-asm.5 is now available for in-cluster Cloud Service Mesh.
You can now download 1.27.1-asm.5 for in-cluster Cloud Service Mesh. It includes the features of Istio 1.27.1 subject to the list of supported features.
For details on upgrading Cloud Service Mesh, see Upgrade Cloud Service Mesh. Cloud Service Mesh version 1.27.1-asm.5 uses Envoy v1.35.4-dev.
Fixed
1.27.1-asm.5 includes the fixes for the following CVEs:
| CVE | Proxy | Control Plane | CNI | Distroless |
|---|---|---|---|---|
| CVE-2025-6297 | Yes | Yes | Yes | – |
| CVE-2024-10963 | Yes | Yes | Yes | – |
| CVE-2025-9230 | Yes | Yes | Yes | – |
| CVE-2025-8058 | Yes | Yes | Yes | Yes |
| CVE-2025-4802 | – | – | – | Yes |
Announcement
In-cluster Cloud Service Mesh 1.24 is no longer supported. For more information and to view the earliest end-of-life dates for other versions, see Supported versions.
Generative AI on Vertex AI
Feature
Anthropic’s Claude Haiku 4.5
You can use Anthropic’s Claude Haiku 4.5 in Model Garden.
Feature
Veo video generation
Veo 3.1 is available in Preview, and introduces the following models:
For more information, see the following:
- Generate videos with Veo on Vertex AI
- Generate Veo videos from text prompts
- Generate Veo videos from an image
- Generate Veo videos using first and last frames
- Direct Veo using a reference image
- Veo video generation API
Feature
Veo video generation
Veo 2 supports adding and removing objects from videos in Preview.
For more information about Veo 2, see Veo 2 Preview
For more information about adding and removing objects, see the following:
Google Cloud Armor
Feature
Cloud Armor’s Hierarchical security policies that facilitate centralized control, enhanced consistency, operational efficiency, and effective delegation of security policy management is Generally Available.
Google Distributed Cloud (software only) for VMware
Announcement
Google Distributed Cloud (software only) for VMware 1.31.1000-gke.44 is available for download. To upgrade, see Upgrade a cluster. Distributed Cloud 1.31.1000-gke.44 runs on Kubernetes v1.31.12-gke.600.
If you are using a third-party storage vendor, check the GDC Ready storage partners document to make sure the storage vendor has already passed the qualification for this release.
After a release, it takes approximately 7 to 14 days for the version to become available for use with GKE On-Prem API clients: the Google Cloud console, the gcloud CLI, and Terraform.
Fixed
The following issues were fixed in 1.31.1000-gke.44:
- Fixed vulnerabilities listed in Vulnerability fixes.
Google Distributed Cloud (software only) for bare metal
Announcement
Google Distributed Cloud for bare metal 1.31.1000-gke.44 is now available for download. To upgrade, see Upgrade clusters. Distributed Cloud for bare metal 1.31.1000-gke.44 runs on Kubernetes v1.31.12-gke.600.
After a release, it takes approximately 7 to 14 days for the version to become available for installations or upgrades with the GKE On-Prem API clients: the Google Cloud console, the gcloud CLI, and Terraform.
If you use a third-party storage vendor, check the Ready storage partners document to make sure the storage vendor has already passed the qualification for this release of Distributed Cloud for bare metal.
Fixed
The following issues were fixed in 1.31.1000-gke.44:
Fixed an issue where the cluster restore process leaves the Kubelet certificate files as regular files instead of symbolic links, preventing certificate rotation.
Fixed the
etcd-cleanupjob timeout issue caused by the use of incorrect certificates.Fixed vulnerabilities listed in Vulnerability fixes.
Issue
For information about the latest known issues, see Google Distributed Cloud for bare metal known issues in the Troubleshooting section.
Google SecOps
Deprecated
The Netskope v1 API feed has been deprecated by Netskope. If you are using the Netskope REST API v1 with Google SecOps, you must switch to the Netskope REST API v2.
Google SecOps SIEM
Deprecated
The Netskope v1 API feed has been deprecated by Netskope. If you are using the Netskope REST API v1 with Google SecOps, you must switch to the Netskope REST API v2.
Deprecated
The Netskope v1 API feed has been deprecated by Netskope. If you are using the Netskope REST API v1 with Google SecOps, you must switch to the Netskope REST API v2.
Virtual Private Cloud
Feature
Private Service Connect health is available in Preview.
Private Service Connect health lets service producers define health states to support automatic cross-region failover for consumers that use Private Service Connect backends. For more information, see About Private Service Connect health for automatic cross-region failover.
Source: Google Cloud Platform
