GCP Release Notes: November 07, 2025

Compute Engine

Feature

Generally available: N4D VMs are powered by the fifth generation AMD EPYC Turin processor and Titanium I/O offload processing. N4D machine types have up to 96 vCPUs and up to 768 GB of DDR5 memory, and a max-boost frequency of 4.1 GHz. They are offered in predefined, and custom machine types and are available in select regions and zones.

N4D VM instances support standard networking with up to 50 Gbps of networking bandwidth and Hyperdisk storage. For more information, see General-purpose machine types.

Dataproc

Announcement

Serverless for Apache Spark: Apache Spark upgrade to version 3.5.3 for the 1.2 and 2.2 Serverless for Apache Spark runtime versions announced on October 13, 2025 has been rolled back.

Document AI

Feature

Gemini layout parser is in Preview. The Gemini layout parser gives better layout quality on table recognition, reading order and text recognition on PDF files. You can enable the feature by default by selecting layout parser processor version pretrained-layout-parser-v1.4-2024-08-25, pretrained-layout-parser-v1.5-2025-08-25 or pretrained-layout-parser-v1.5-pro-2025-08-25 for your processor.

Generative AI on Vertex AI

Feature

Vertex AI Agent Engine

The following features are now available in Preview:

• Configure, manage, and view observability features such as sessions, traces, logs, and events for your agent in the Google Cloud console.

• Use the playground to test and interact with your agent in the Google Cloud console.

• Evaluate your agents using the Gen AI evaluation service’s GenAI Client in Vertex AI SDK.

• Create and manage memory revisions for Memory Bank.

• Use Identity Access Management (IAM) to create an agent identity to manage access and authentication when using agents on Vertex AI Agent Engine Runtime.

The following features are now available in GA:

• Express mode support for Vertex AI Agent Engine Runtime.

• Use the new free tier with Vertex AI Agent Engine Runtime. For more information, see Pricing.

Google Kubernetes Engine

Feature

In GKE version 1.34.1-gke.2037001 and later, the GKE logging agent in your clusters can process logs up to two times faster per node than in version 1.33 and earlier. The logging agent also uses less node resources, which improves efficiency especially if you use high-throughput logging. These improvements to the logging agent are automatically enabled in version 1.34.1-gke.2037001 and later.

Feature

In version 1.34.1-gke.1829001 and later, GKE can auto-create multiple node pools concurrently to improve the speed with which multiple new node pools become ready.

Feature

In GKE version 1.35 and later, GKE rejects anonymous requests to cluster endpoints (except for the livez, /healthz, and /readyz health check endpoints) by default for all new Autopilot or Standard clusters. Existing clusters aren’t affected by this change. To allow anonymous requests to cluster endpoints, explicitly specify a value of ENABLED in the --anonymous-authentication-config flag or the AnonymousAuthenticationConfig.mode API field. For more information, see Restrict anonymous access to cluster endpoints.

Changed

(2025-R46) Version updates

GKE cluster versions have been updated.

New versions available for upgrades and new clusters.

The following versions are now available for new GKE clusters, and for manual control plane upgrades and node upgrades for existing clusters. For more information about versioning and upgrades, see GKE versioning and support and About GKE cluster upgrades.

Security

(2025-R46) Security updates

This release includes new GKE versions that use updated Container-Optimized OS images. These updated images are cumulative, incorporating security fixes from all Container-Optimized OS versions released since the previous GKE release.

To identify the specific vulnerabilities that were resolved in each updated Container-Optimized OS image, see the Security release notes for that image. The following table includes links to the release notes for each updated Container-Optimized OS image:

GKE version	Container-Optimized OS version	Details
1.28.15-gke.2966000	cos-113-18244-521-7	cos-113-18244-521-7 release notes
1.29.15-gke.2236000	cos-113-18244-448-79	cos-113-18244-448-79 release notes
1.30.14-gke.1525000	cos-113-18244-521-7	cos-113-18244-521-7 release notes
1.31.13-gke.1231000	cos-117-18613-439-9	cos-117-18613-439-9 release notes
1.32.9-gke.1330000	cos-117-18613-439-9	cos-117-18613-439-9 release notes
1.33.5-gke.1521000	cos-121-18867-294-2	cos-121-18867-294-2 release notes
1.34.1-gke.2037001	cos-125-19216-0-94	cos-125-19216-0-94 release notes
1.34.1-gke.2541000	cos-125-19216-0-115	cos-125-19216-0-115 release notes

Changed

(2025-R46) Version updates

• Version 1.33.5-gke.1201000 is now the default version for cluster creation in the Extended channel.
• The following versions are now available in the Extended channel:
  • 1.28.15-gke.2793000
  • 1.28.15-gke.2966000
  • 1.29.15-gke.2085000
  • 1.29.15-gke.2236000
  • 1.30.14-gke.1408000
  • 1.30.14-gke.1525000
  • 1.31.13-gke.1123000
  • 1.32.9-gke.1207000
  • 1.33.5-gke.1308000
• The following versions are no longer available in the Extended channel:
  • 1.28.15-gke.2751000
  • 1.28.15-gke.2857000
  • 1.29.15-gke.1989000
  • 1.29.15-gke.2109000
  • 1.30.14-gke.1336000
  • 1.30.14-gke.1426000
  • 1.31.13-gke.1023000
  • 1.32.9-gke.1108000
  • 1.33.5-gke.1162000
• Clusters in this channel running the listed minor version have new general auto-upgrade targets. GKE can upgrade control planes and nodes to the following new versions with this release:
  • GKE upgrades clusters to the following new minor versions if there are no factors, such as maintenance exclusions or deprecated APIs, preventing upgrades:
    • 1.27 to 1.28.15-gke.2767000
  • GKE upgrades clusters to the following new patch versions if no minor version upgrade is available, or if the cluster has maintenance exclusions or other factors preventing minor version upgrades:
    • 1.28 to 1.28.15-gke.2767000
    • 1.29 to 1.29.15-gke.2002000
    • 1.30 to 1.30.14-gke.1349000
    • 1.31 to 1.31.13-gke.1040000
    • 1.32 to 1.32.9-gke.1130000
    • 1.33 to 1.33.5-gke.1201000

Changed

(2025-R46) Version updates

• Version 1.33.5-gke.1201000 is now the default version for cluster creation.
• The following versions are now available:
  • 1.31.13-gke.1231000
  • 1.32.9-gke.1330000
  • 1.33.5-gke.1521000
• The following node versions are now available:
  • 1.28.15-gke.2966000
  • 1.29.15-gke.2236000
  • 1.30.14-gke.1525000
  • 1.31.13-gke.1231000
  • 1.32.9-gke.1330000
  • 1.33.5-gke.1521000
• The following versions are no longer available:
  • 1.31.12-gke.1265000
  • 1.32.9-gke.1072000
  • 1.33.4-gke.1350000
• Clusters in this channel running the listed minor version have new general auto-upgrade targets. GKE can upgrade control planes and nodes to the following new versions with this release:
  • GKE upgrades clusters to the following new minor versions if there are no factors, such as maintenance exclusions or deprecated APIs, preventing upgrades:
    • 1.30 to 1.31.13-gke.1040000
    • 1.31 to 1.32.9-gke.1130000
    • 1.32 to 1.33.5-gke.1125000
  • GKE upgrades clusters to the following new patch versions if no minor version upgrade is available, or if the cluster has maintenance exclusions or other factors preventing minor version upgrades:
    • 1.31 to 1.31.13-gke.1040000
    • 1.32 to 1.32.9-gke.1130000
    • 1.33 to 1.33.5-gke.1125000

Changed

(2025-R46) Version updates

• Version 1.34.1-gke.2037001 is now the default version for cluster creation in the Rapid channel.
• The following versions are now available in the Rapid channel:
  • 1.31.13-gke.1231000
  • 1.32.9-gke.1330000
  • 1.33.5-gke.1521000
  • 1.34.1-gke.2037001
  • 1.34.1-gke.2541000
• The following versions are no longer available in the Rapid channel:
  • 1.31.13-gke.1123000
  • 1.32.9-gke.1207000
  • 1.33.5-gke.1308000
  • 1.34.1-gke.2037000
• Clusters in this channel running the listed minor version have new general auto-upgrade targets. GKE can upgrade control planes and nodes to the following new versions with this release:
  • GKE upgrades clusters to the following new minor versions if there are no factors, such as maintenance exclusions or deprecated APIs, preventing upgrades:
    • 1.30 to 1.31.13-gke.1139000
    • 1.31 to 1.32.9-gke.1239000
    • 1.32 to 1.33.5-gke.1350000
    • 1.33 to 1.34.1-gke.2037001
  • GKE upgrades clusters to the following new patch versions if no minor version upgrade is available, or if the cluster has maintenance exclusions or other factors preventing minor version upgrades:
    • 1.31 to 1.31.13-gke.1139000
    • 1.32 to 1.32.9-gke.1239000
    • 1.33 to 1.33.5-gke.1350000
    • 1.34 to 1.34.1-gke.2037001

Changed

(2025-R46) Version updates

• Version 1.33.5-gke.1201000 is now the default version for cluster creation in the Regular channel.
• The following versions are now available in the Regular channel:
  • 1.31.13-gke.1123000
  • 1.32.9-gke.1207000
  • 1.33.5-gke.1308000
• The following versions are no longer available in the Regular channel:
  • 1.31.13-gke.1023000
  • 1.32.9-gke.1108000
  • 1.33.5-gke.1162000
• Clusters in this channel running the listed minor version have new general auto-upgrade targets. GKE can upgrade control planes and nodes to the following new versions with this release:
  • GKE upgrades clusters to the following new minor versions if there are no factors, such as maintenance exclusions or deprecated APIs, preventing upgrades:
    • 1.30 to 1.31.13-gke.1040000
    • 1.31 to 1.32.9-gke.1130000
    • 1.32 to 1.33.5-gke.1201000
  • GKE upgrades clusters to the following new patch versions if no minor version upgrade is available, or if the cluster has maintenance exclusions or other factors preventing minor version upgrades:
    • 1.31 to 1.31.13-gke.1040000
    • 1.32 to 1.32.9-gke.1130000
    • 1.33 to 1.33.5-gke.1201000

Changed

(2025-R46) Version updates

• Version 1.33.5-gke.1125000 is now the default version for cluster creation in the Stable channel.
• The following versions are now available in the Stable channel:
  • 1.31.13-gke.1023000
  • 1.32.9-gke.1108000
  • 1.33.5-gke.1162000
• The following versions are no longer available in the Stable channel:
  • 1.31.12-gke.1265000
  • 1.32.9-gke.1072000
  • 1.33.5-gke.1080000
• Clusters in this channel running the listed minor version have new general auto-upgrade targets. GKE can upgrade control planes and nodes to the following new versions with this release:
  • GKE upgrades clusters to the following new minor versions if there are no factors, such as maintenance exclusions or deprecated APIs, preventing upgrades:
    • 1.30 to 1.31.13-gke.1008000
    • 1.31 to 1.32.9-gke.1092000
    • 1.32 to 1.33.5-gke.1125000
  • GKE upgrades clusters to the following new patch versions if no minor version upgrade is available, or if the cluster has maintenance exclusions or other factors preventing minor version upgrades:
    • 1.31 to 1.31.13-gke.1008000
    • 1.32 to 1.32.9-gke.1092000
    • 1.33 to 1.33.5-gke.1125000

Google SecOps

Changed

MITRE ATT&CK coverage dashboard is now available

The new MITRE ATT&CK coverage dashboard lets you measure your security posture against the MITRE ATT&CK framework, helping you:

• Assess threat coverage
• Identify gaps
• Prioritize security efforts

Google SecOps SIEM

Changed

MITRE ATT&CK coverage dashboard is now available

The new MITRE ATT&CK coverage dashboard lets you measure your security posture against the MITRE ATT&CK framework, helping you:

• Assess threat coverage
• Identify gaps
• Prioritize security efforts

Changed

MITRE ATT&CK coverage dashboard is now available

The new MITRE ATT&CK coverage dashboard lets you measure your security posture against the MITRE ATT&CK framework, helping you:

• Assess threat coverage
• Identify gaps
• Prioritize security efforts

Security Command Center

Feature

You can use customer-managed encryption keys (CMEK) organization policies with Security Command Center. For more information see Use CMEK organization policies with Security Command Center.

Feature

The monitoring and auditing capabilities for Compliance Manager have been released to General Availability.

Sensitive Data Protection

Feature

The following infoType detectors are available in global and the europe and us multi-regions:

• DOCUMENT_TYPE/CONTEXT/FINANCE
• DOCUMENT_TYPE/CONTEXT/HEALTH
• DOCUMENT_TYPE/CONTEXT/LEGAL
• DOCUMENT_TYPE/CONTEXT/OBSCENE
• DOCUMENT_TYPE/CONTEXT/OFFENSIVE
• DOCUMENT_TYPE/CONTEXT/POLITICS
• DOCUMENT_TYPE/CONTEXT/RELIGION
• DOCUMENT_TYPE/CONTEXT/SEXUAL

For more information about all infoTypes, see InfoType detector reference.

Text-to-Speech

Changed

Gemini TTS now supports relaxing safety filters for accounts with monthly invoiced billing. For more information, see the Gemini TTS page.

Vertex AI Agent Builder

Feature

Vertex AI Agent Engine

The following features are now available in Preview:

• Configure, manage, and view observability features such as sessions, traces, logs, and events for your agent in the Google Cloud console.

• Use the playground to test and interact with your agent in the Google Cloud console.

• Evaluate your agents using the Gen AI evaluation service’s GenAI Client in Vertex AI SDK.

• Create and manage memory revisions for Memory Bank.

• Use Identity Access Management (IAM) to create an agent identity to manage access and authentication when using agents on Vertex AI Agent Engine Runtime.

The following features are now available in GA:

• Express mode support for Vertex AI Agent Engine Runtime.

• Use the new free tier with Vertex AI Agent Engine Runtime. For more information, see Pricing.

Source: Google Cloud Platform