Releasesby GlyphAgent connectivity templates for VPC connectivity in Agent Gateway
Agent Gateway now uses agent connectivity templates ( agentConnectivityTemplate ) to configure and manage egress connectivity to VPC networks. Connectivity templates let you choose whether to route all outbound agent traffic ( ALL_TRAFFIC ) or only traffic to certain private IP address ranges ( PRIVATE_RANGES_ONLY ) into your VPC network.
Also shipped Sep 8, 2026Google Cloud in September 2026 →
Add and drop hybrid table constraints online (General availability)
With this release, you can add and drop UNIQUE and FOREIGN KEY constraints on an existing hybrid table by using alter table . Previously, you had to define these constraints when you created the table, so adding a foreign key to a table that was already serving a workload meant recreating and reloading the table.
Shadow traffic for gateways (Preview)
With this preview release, you can use a shadow traffic gateway to send all production requests to a primary service endpoint while mirroring a percentage of those requests to one or more shadow endpoints. Responses from shadow endpoints aren't returned to clients.
The partner-powered AI features setting will be removed
On November 1, 2026, Databricks will remove the account- and workspace-level toggle for partner-powered AI features. Each workspace will keep its current setting value: if the setting is enabled, it stays enabled, and if it's disabled, it stays disabled. Removing the toggle doesn't change any setting values.
Incremental ingestion for Salesforce formula fields in Lakeflow Connect will soon be generally available
Incremental ingestion for Salesforce formula fields in Lakeflow Connect will soon be generally available. Today, Lakeflow Connect ingests formula fields by taking a full snapshot on each pipeline run by default. When incremental formula field ingestion is generally available, full snapshots will no longer be the default.
ABAC DENY policies are in Beta
ABAC DENY policies are in Beta in Unity Catalog. DENY policies can be used to explicitly deny the MANAGE ACCESS CONTROL privilege to prevent specified principals, including object owners, from performing access-management operations. They always take precedence over any grant. For details, see ABAC DENY policies (Beta) .
See which chunks support each ai_search answer (Beta)
You can now turn on the generate_citations option in the ai_search function to see which retrieved chunks the model used to support each answer it generates. ai_search function
More from Gemini Enterprise Agent PlatformEvery Gemini Enterprise Agent Platform release →
Computer Use and Shell sandboxes are generally available
Computer Use and Shell sandboxes in Gemini Enterprise Agent Platform are now generally available (GA). This release also includes the following new features for Agent Platform sandboxes: Shell sandboxes : Run untrusted shell commands, install packages, and manipulate files in an isolated Linux container using direct API /exec calls.
Priority PayGo now supports the US and EU multi-region endpoints
You can send Priority PayGo requests to the us and eu multi-region endpoints, in addition to the global endpoint. For more information, see Priority PayGo .
Agent Gateway supports multiple Agent Registry instances
Agent Gateway now lets you associate up to two Agent Registry instances (one global registry and one regional or multi-region registry) with a single Agent Gateway instance. For more information, see Register your agents and destination resources .
Agent Gateway supports VPC Service Controls
Agent Gateway now enforces VPC Service Controls perimeter rules for agent communications. When you configure Agent Gateway with VPC connectivity , agent traffic is routed through your private VPC network, ensuring that your organization's VPC-SC perimeter rules are applied to all agent traffic as well.
Provisioned Throughput: Support for multiple pending orders and change requests
Provisioned Throughput now directly supports from the self service console the ability to schedule multiple new orders at the same time and change requests across multiple orders within the same project. For more information, see Purchase Provisioned Throughput .
Gemini model deprecation and retirement date updates
The retirement and deprecation dates for the following Gemini models have been updated: Gemini 2.5 Flash Image ( gemini-2.5-flash-image ) : Deprecated and scheduled for retirement on March 15, 2027 (extended from October 2, 2026). Migrate to Gemini 3.1 Flash-Lite Image ( gemini-3.1-flash-lite-image ).
Cyber Verification Program for Claude is available in Preview
Anthropic's Cyber Verification Program (CVP) is available in Preview on Gemini Enterprise Agent Platform. CVP enables verified organizations to use supported Claude models (Claude Opus 4.7, Claude Opus 4.8, Claude Sonnet 5, and Claude Opus 5) for legitimate defensive cybersecurity tasks with default dual-use restrictions lifted.
Gemini 3.8 Flash is generally available
Gemini 3.8 Flash is now generally available (GA) and available for production use. For more information on 3.8 Flash, see the model page .