Cloud SQL for PostgreSQL now supports authentication via Secret Manager when executing SQL statements using...
Cloud SQL for PostgreSQL now supports authentication via Secret Manager when executing SQL statements using the Data API ( executeSql ). You can store your database password in a regional secret in Secret Manager and pass the secret version resource name in your API request. For more information, see Execute SQL statements on a Cloud SQL instance .
Also shipped Jul 20, 2026Google Cloud in July 2026 →
OIDC federated authentication (Public Preview)
OpenID Connect (OIDC) security integrations for federated single sign-on (SSO) are available in Public Preview. Multiple OIDC integrations, or OIDC alongside an existing SAML2 integration, require identifier-first login . Without identifier-first login, only one SSO integration (SAML2 or OIDC) can be ENABLED=TRUE at a time.
DML into frozen regions of dynamic tables (General availability)
You can now use DML statements (INSERT, UPDATE, MERGE, DELETE) to modify rows directly in the frozen region of a dynamic table. This enables use cases such as GDPR-required row deletions or correcting specific records without triggering a full refresh of the active region. For more information, see DML into a frozen region .
Pass-through policies for dynamic tables with incremental refresh (General availability)
Dynamic tables that have base tables with arbitrary masking or row access policies can now maintain incremental refresh when the policy is pass-through for the role used during refresh (that is, when the refresh role has unrestricted access to all rows and columns regardless of the policy condition).
[In preview] Public Preview: Protect sensitive generative AI telemetry in Application Insights and Microsoft Foundry
Azure Monitor Application Insights now stores generative AI content in a dedicated GenAIContent table (AppGenAIContent in Log Analytics), making it possible to apply newly available access controls to sensitive AI telemetry. Because Application Insights p
AI credit pools for cost centers in the billing UI
You can now manage a cost center’s AI credit pool directly in the billing UI where you create and edit cost centers. Previously, you could only manage this through the GitHub REST API. This feature is available for Copilot Business and Copilot Enterprise on GitHub Enterprise Cloud. Toggle the AI credit pool on when you create or edit a cost center.
Copilot users can now see AI credits used per billing cycle
Copilot Business and Copilot Enterprise users can now see how many AI credits they’ve used this billing cycle, even without an individual budget. Find this on your GitHub Copilot usage page in your GitHub settings. Previously, the page showed usage only as a percentage of a budget.
More from Cloud SQLEvery Cloud SQL release →
Cloud SQL for PostgreSQL now supports logical replication using failover slot which you can use with advanced...
Cloud SQL for PostgreSQL now supports logical replication using failover slot which you can use with advanced disaster recovery (DR) switchover and replica failover operations to ensure business continuity. For more information, see Advanced disaster recovery (DR) with logical failover slot .
Cloud SQL for MySQL 8.4.8 is upgraded to MySQL 8.4.10
Cloud SQL for MySQL 8.4.8 is upgraded to MySQL 8.4.10. For more information, see the MySQL 8.4.10 Release Notes and Cloud SQL database versions .
You can now create and query parameterized secure views in Cloud SQL for MySQL
You can now create and query parameterized secure views in Cloud SQL for MySQL. Parameterized secure views let you create MySQL views in your MySQL database that reference session variables for managing data access.
Cloud SQL for MySQL now supports significantly faster re-encryption of instances and replicas protected by...
Cloud SQL for MySQL now supports significantly faster re-encryption of instances and replicas protected by customer-managed encryption keys (CMEKs), and re-encryption now completes with zero downtime.
Cloud SQL for PostgreSQL now supports significantly faster re-encryption of instances and replicas protected...
Cloud SQL for PostgreSQL now supports significantly faster re-encryption of instances and replicas protected by customer-managed encryption keys (CMEKs), and re-encryption now completes with zero downtime.
Cloud SQL for SQL Server now supports significantly faster re-encryption of instances and replicas protected...
Cloud SQL for SQL Server now supports significantly faster re-encryption of instances and replicas protected by customer-managed encryption keys (CMEKs), and re-encryption now completes with zero downtime.
Starting on August 1, 2026, when you create or clone a Cloud SQL instance enabled with Private Service...
Starting on August 1, 2026, when you create or clone a Cloud SQL instance enabled with Private Service Connect, or when you enable Private Service Connect for an existing instance, then connection reconciliation behavior is enabled by default and can't be disabled.
QueryData adds support for parameterized secure views (PSVs) to help secure applications that use natural...
QueryData adds support for parameterized secure views (PSVs) to help secure applications that use natural language queries. For more information, see Secure and control access to application data . This feature is in Preview . Cloud SQL for PostgreSQL