Apigee API hub
Feature
MCP tools support for Agentic AI workflows (Preview)
API hub now exposes read-only APIs as Model Context Protocol (MCP) tools. Agentic AI applications can now use the standard MCP tools/list and tools/call methods to list and inspect API hub resources, including APIs, specs, versions, and deployments.
This feature is in Public Preview. For more information, see API hub MCP reference.
Apigee X
Announcement
On May 12th, 2026, we released an updated version of Apigee (1-17-0-apigee-7).
Security
| Bug ID | Description |
|---|---|
| 511325186, 505460952, 502250074, 491231600, 497357701, 509560467, 496969438, 495897297, 495033618, 511332617, 505183435, 500735547, 500890221 | Security fix for Apigee infrastructure. This addresses the following vulnerabilities: |
Fixed
| Bug ID | Description |
|---|---|
| 480260846 | Improved XML processing security to prevent external entity injection. |
| 505723451 | Fixed an issue where metadata could be shared across unrelated client sessions. |
| 505645076 | Fixed a security issue in OAuthV2 policy to prevent unauthorized token injection. |
| 503723862 | Fixed a security issue in OAuthV2 policy to prevent unauthorized token injection. |
| 503047744, 410026138, 496021751 | Improved security isolation for PythonScript policy execution. |
| 469694040 | Fixed an issue where custom security policies could intermittently fail to apply, and improved security policy resolution to ensure correct policy selection. |
| 502971220 | Fixed a concurrency issue in streaming response handling to improve stability under high load. |
| 509692565 | Fixed content-length header handling in external processing to prevent incorrect values. |
| 282207038 | Fixed inconsistent timeouts when querying apps by parallelizing credential lookup. |
| 501102321 | Fixed recurring fee calculation in monetization to correctly apply rate plan overrides. |
| 494469747 | Fixed content-length header to reflect actual response body size. |
| N/A | Updates to infrastructure and libraries. |
BigQuery
Feature
You can now use the
AI.COUNT_TOKENS function
to estimate the token count of text input that you provide. For some generative
AI functions, you can view
the total number of input, output, thought, and cache tokens for each modality
processed by the query. These features are in
Preview.
Buildpacks
Feature
The latest tag of generic builder
uses the google-24 stack.
Cloud SQL for MySQL
Change
The command for upgrading Cloud SQL instances to the new network architecture has been re-enabled.
For more information, see Upgrade an instance to the new network architecture.
Cloud SQL for PostgreSQL
Change
The command for upgrading Cloud SQL instances to the new network architecture has been re-enabled.
For more information, see Upgrade an instance to the new network architecture.
Cloud SQL for SQL Server
Change
The command for upgrading Cloud SQL instances to the new network architecture has been re-enabled.
For more information, see Upgrade an instance to the new network architecture.
Compute Engine
Security
A vulnerability in AMD firmware (CVE-2025-61971, CVE-2025-61972, CVE-2024-36315) that could compromise SEV-SNP guests has been addressed. For more information, see the GCP-2026-031 security bulletin.
Security
A vulnerability (CVE-2025-54518) about potential corruption within the micro-operation (OP) cache in Zen 2 microarchitecture processors was discovered and has been addressed. For more information, see the GCP-2026-032 security bulletin.
SAP on Google Cloud
Announcement
BigQuery Connector for SAP version 2.14
Version 2.14 of the BigQuery Connector for SAP is generally available (GA).
To protect configuration data, this version assigns the BigQuery Connector for SAP
configuration tables to the custom authorization group ZSGC.
You must ensure your user roles include authorization for this group to maintain access.
For more information, see What’s new with BigQuery Connector for SAP.
Source: Google Cloud Platform
