Releasesby IbisID-JAG token exchange across trust domains
UpdateyesterdayUnverifiedAdded Oct 10, 2026
Identity and Access Management now supports Identity Assertion JWT Authorization Grant (ID-JAG) token exchange. An ID-JAG is a short-lived, signed JSON Web Token (JWT) that enables identity handoff across trust domains. A source identity domain exchanges an ID token for an ID-JAG.
Topics: Security
More Oracle Cloud Infrastructure releases
Every Oracle Cloud Infrastructure releaseSupport for Kubernetes version 1.37.0 in a preview release of Kubernetes Engine
A preview release of OCI Kubernetes Engine now provides support for Kubernetes version 1.37.0 for early access testing and validation purposes. This preview release is not intended for production workloads, is only available in the OC1 realm, and might contain issues without known workarounds.
Use OAuth resource indicators with identity domains
Identity domains now support OAuth resource indicators. In a token request, an OAuth client can use the resource parameter to identify the target resource server and the required scope parameter to request permissions. The requested scopes must be allowed for the client and belong to the selected resource server.
Automatic Target Registration for Exadata Exascale in Oracle Data Safe
You can enable automatic target registration for an Exadata Exascale (ExaDB-XS) deployment at the CDB level instead of configuring each PDB individually. Oracle Data Safe then automatically registers all existing and future PDBs in the background and manages the required Data Safe service account and privileges.
Console AI Availability
Console AI is available to commercial OCI customers who are homed or subscribed in one of the following regions and have native access to Console AI: Ashburn Phoenix London Chicago Sao Paulo Osaka Hyderabad Riyadh Availability will expand over time.
Improve Iceberg External Table Query Performance with Partition Pruning
Autonomous AI Database can now use Apache Iceberg partition information to optimize queries on Iceberg external tables. Autonomous AI Database uses the Iceberg metadata to skip files that are not needed for a query.
Multidimensional Analytics with Oracle Essbase
Essbase is available as a managed tool in Autonomous AI Database Serverless. You can enable Essbase for an existing Autonomous AI Database instance and use its multidimensional analytics, modeling, planning, forecasting, and financial reporting capabilities without deploying or managing separate Essbase infrastructure.
OCI Kubernetes Engine (OKE) support for GPU host repair
You can now use OKE to coordinate the repair of eligible managed bare metal GPU worker nodes in response to specified hardware-related conditions. The optional GPU Health Monitoring add-on monitors supported GPU health conditions on eligible managed GPU worker nodes in enhanced clusters.
Support for Kubernetes version 1.36.4
OCI Kubernetes Engine (OKE) now supports Kubernetes version 1.36.4, in addition to versions 1.35.2 and 1.34.10. With the availability of support for Kubernetes version 1.36.4, OKE will cease support for Kubernetes version 1.36.1 on November 3, 2026. Oracle strongly recommends you immediately upgrade clusters to Kubernetes version 1.34.10, 1.35.2, or 1.36.4.
Also shipped on Oct 9, 2026
Oracle in October 2026Google Workspace connector is available in Beta
The managed Google Workspace connector is now available in Beta in Databricks Lakeflow Connect. Use the connector to ingest audit activity from Google Workspace applications and services into Databricks. The connector uses OAuth user authorization and supports incremental ingestion.
Agentic Marketplace Discovery (Public preview)
Agentic Marketplace Discovery is now available in public preview. On the public Snowflake Marketplace Discover page in Snowsight, you can switch between Agentic discovery and Marketplace search . Describe what you need to CoCo to find and compare matching listings, or search for providers and listings directly.
All AI Gateway models with prepaid credits, backend features with your coding agent, and new ways to send feedback release - Oct 09, 2026
All AI Gateway models now available with prepaid credits. You don't need to request access to frontier models in the Neon AI Gateway anymore. If you're on a pai...
Use request tags in Unity Gateway service policies (Beta)
Custom service policies in Unity Gateway can now check caller-supplied request tags, such as requiring a tag before a model request or MCP tool call proceeds. See Request tags .
Use OpenJev as the evaluator for LLM-as-a-judge service policies (Beta)
You can now select OpenJev (Qwen3.5 4B) as the evaluator model service of a custom LLM-as-a-judge service policy. OpenJev classifies content without generating output tokens, so it typically responds faster than a chat evaluator. See Use OpenJev as the evaluator .
Code execution in Genie One (Public Preview)
Genie One can now run code in a secure, isolated sandbox to take on work that goes beyond SQL, such as more advanced analyses. Code runs on your behalf using your existing permissions, so Unity Catalog governance and data access controls continue to apply. See Code execution in Genie One .