Releasesby GlyphAgent Gateway supports multiple Agent Registry instances
Agent Gateway now lets you associate up to two Agent Registry instances (one global registry and one regional or multi-region registry) with a single Agent Gateway instance. For more information, see Register your agents and destination resources .
Also shipped Sep 9, 2026Google Cloud in September 2026 →
Configurable retention for system tables is in Beta
Account admins can now set an account-wide retention period from 30 to 3,650 days for supported system tables. See Configure system table data retention .
External secrets in Unity Catalog (Beta)
External secrets connect a Unity Catalog schema to AWS Secrets Manager. The secrets appear in Unity Catalog as read-only securable objects that you govern with Unity Catalog privileges. Databricks reads their values from AWS Secrets Manager on demand. See External secrets in Unity Catalog .
Celigo connector (Beta)
The Celigo connector is now available in Lakeflow Connect in Beta . Workspace admins can control access to this feature from the Previews page. The connector ingests audit log events, such as create, update, and delete operations on resources, from Celigo (integrator.io) into Databricks. Authentication uses a Celigo integrator.io API token.
Anysphere Organization connector (Beta)
The Anysphere Organization connector is now available in Lakeflow Connect in Beta . Workspace admins can control access to this feature from the Previews page. The connector uses the Anysphere (Cursor) Organization Admin API to ingest organization members, groups, and group members into Databricks as daily snapshots.
Anaplan connector (Beta)
The Anaplan connector is now available in Lakeflow Connect in Beta . Workspace admins can control access to this feature from the Previews page. The connector ingests audit trail events and user account records from your Anaplan tenant into Databricks. Authentication uses an Anaplan CA certificate and its paired private key. See Anaplan connector .
Openflow gen 1 deployment creation retired
You can no longer create new first generation (gen 1) Openflow deployments (BYOC or Snowflake). All new deployments are second generation (gen 2), created with CREATE OPENFLOW DEPLOYMENT or the Openflow UI. Existing gen 1 deployments continue to work unchanged, and you can still create new gen 1 runtimes on an existing gen 1 deployment.
More from Gemini Enterprise Agent PlatformEvery Gemini Enterprise Agent Platform release →
Computer Use and Shell sandboxes are generally available
Computer Use and Shell sandboxes in Gemini Enterprise Agent Platform are now generally available (GA). This release also includes the following new features for Agent Platform sandboxes: Shell sandboxes : Run untrusted shell commands, install packages, and manipulate files in an isolated Linux container using direct API /exec calls.
Priority PayGo now supports the US and EU multi-region endpoints
You can send Priority PayGo requests to the us and eu multi-region endpoints, in addition to the global endpoint. For more information, see Priority PayGo .
Agent Gateway supports VPC Service Controls
Agent Gateway now enforces VPC Service Controls perimeter rules for agent communications. When you configure Agent Gateway with VPC connectivity , agent traffic is routed through your private VPC network, ensuring that your organization's VPC-SC perimeter rules are applied to all agent traffic as well.
Provisioned Throughput: Support for multiple pending orders and change requests
Provisioned Throughput now directly supports from the self service console the ability to schedule multiple new orders at the same time and change requests across multiple orders within the same project. For more information, see Purchase Provisioned Throughput .
Agent connectivity templates for VPC connectivity in Agent Gateway
Agent Gateway now uses agent connectivity templates ( agentConnectivityTemplate ) to configure and manage egress connectivity to VPC networks. Connectivity templates let you choose whether to route all outbound agent traffic ( ALL_TRAFFIC ) or only traffic to certain private IP address ranges ( PRIVATE_RANGES_ONLY ) into your VPC network.
Gemini model deprecation and retirement date updates
The retirement and deprecation dates for the following Gemini models have been updated: Gemini 2.5 Flash Image ( gemini-2.5-flash-image ) : Deprecated and scheduled for retirement on March 15, 2027 (extended from October 2, 2026). Migrate to Gemini 3.1 Flash-Lite Image ( gemini-3.1-flash-lite-image ).
Cyber Verification Program for Claude is available in Preview
Anthropic's Cyber Verification Program (CVP) is available in Preview on Gemini Enterprise Agent Platform. CVP enables verified organizations to use supported Claude models (Claude Opus 4.7, Claude Opus 4.8, Claude Sonnet 5, and Claude Opus 5) for legitimate defensive cybersecurity tasks with default dual-use restrictions lifted.
Reinforcement learning fine-tuning in the Google Cloud console (Preview)
You can create, monitor, and test reinforcement learning fine-tuning jobs for Gemini models in the Google Cloud console ( Preview ). From the Models > Tuning page, you can configure Python code or model-based reward functions, test reward logic against sample prompts before launching a job, track training and evaluation metrics in real time, and test tuned...