Require approval to enable a backend in a project
Enterprise plans can now require admin approval before members enable backend services in a project. This provides centralized control over database and storage provisioning.
Enterprise plans can now require admin approval before members enable backend services in a project. This provides centralized control over database and storage provisioning.
OpenRouter released the Auto Router and Auto Code router. These tools evaluate factors like live pricing, provider health, and benchmarks to select an appropriate model based on governance policies.
Databricks account admins can now restore a deleted Unity Catalog metastore by ID using the REST API for up to 5 days after deletion in public preview.
Users can now define custom organization policies to allow or deny specific operations on models within BigQuery. This feature is currently in preview.
Users can now create, configure, and inspect Agent Platform Memory Bank instances through a dedicated page in the Google Cloud console. The update provides centralized memory management, including structured and unstructured memory filtering and revision history.
Gemini Enterprise model availability now respects organization-level resource location policies. If a project does not allow global locations, models requiring global endpoints will be disabled.
Users can now request access to internally published apps. Admins can approve or decline these requests directly from their inbox.
Members with the Manage Oncall role can now edit responders and incident settings without requiring Manage Automations permissions.
Gradium updated Studio to allow admins on paid plans to configure data residency settings under Organization controls.
Audit Explorer is a new governance application available in beta for searching and reviewing audit.3 logs. It features search and filtering by user or resource, activity charts, standardized log details, and session tracking to support security investigations and compliance reviews.
Snowflake introduced organization users and user groups in public preview within the Organization Command Center.
Oracle Cloud Infrastructure added a Privilege Analysis tab to Database Management, enabling database administrators to analyze database privilege usage and schedule analysis policies.
Databricks Marketplace now generally supports publishing governed metric views, allowing Databricks recipients to consume shared business metrics.
Databricks updated context-based ingress policies to allow traffic from Power BI, Tableau Cloud, dbt Cloud, and Genie apps for Slack and Microsoft Teams. This allows users to manage access without tracking individual IP addresses.
Retool workflows can now run as service users, allowing them to execute against resources with data access enforcement enabled. This feature is available on Business and Enterprise plans and does not count toward user seats.
The BigQuery Metadata curation console page has been deprecated. Users should now use Knowledge Catalog for data discovery, profiling, and governance tasks.
Direct Iceberg access in AlloyDB for PostgreSQL is available for PostgreSQL 18 and later ( in Preview ). This feature lets you query Apache Iceberg tables in Cloud Storage or Lakehouse runtime catalog and accelerate analytical queries using the AlloyDB columnar engine. For more information, see Access Iceberg data from AlloyDB .
IQ Share allows organizations to share Fabric data items and context across different Fabric tenants without creating data copies. Producers retain control over access while recipients work within their own workspaces.
Netlify published updated legal and privacy terms taking effect December 4, 2026, introducing rules for domain verification and account consolidation under organization accounts.
MLflow 3.18.0 helps you reuse agent expertise, find regressions before shipping, and monitor quality in production. Major New Features Automatic Issue Detection: Turn recurring agent failures into issues you can investigate and fix.
On-demand table creation for catalog-linked databases is now generally available.
Snowflake CoCo for Excel and Snowflake CoCo for Google Sheets are now available in preview. Each one adds CoCo as a chat pane inside your spreadsheet, connected to your live Snowflake data. From the pane, you can query data with natural language or SQL; build pivot tables, charts, and formulas; and use the semantic views your role can access.
Governance workflows in Knowledge Catalog support batch metadata change requests. You can group up to 250 create, update, and delete operations for entries and entry links into a single change request and curate batch proposals generated by the enrichment agent before approval. This feature is available in preview .
You can now run read queries on tables protected by row filters, column masks, and attribute-based access control (ABAC) policies with Lakehouse//RT. See Fine-grained access control .
You can now run a Lakeflow Job when one or more upstream jobs complete, including across workspaces attached to the same Unity Catalog metastore. Configure dependencies on the downstream job. See Trigger jobs when upstream jobs complete .
Vercel Security Review is now in public beta for Pro and Enterprise teams. Once enabled, every push to a connected GitHub repository is automatically reviewed for vulnerabilities, and findings are reported in the Vulnerabilities dashboard . What triggers a review Security Review runs automatically when code is pushed to a connected GitHub repository.
Admins can now connect Claude to the Mixpanel MCP Server for every member at once. When members open Claude, Mixpanel is already connected, with no sign-in or consent screen. With this update: One-time setup: A Claude admin and a Mixpanel organization admin connect the two. In Claude, use the connector's Managed authorization settings.
Account Abuse Protection now shows when a recognized AI assistant makes a login or sign up request, and which account it was acting for. Population overview : See which AI assistants are active across your users and how many accounts use them. Account activity : Every login and sign up event shows whether an AI assistant made the request, and which one.
Lakehouse supports the following remote catalog providers for cross-cloud data access. This feature is generally available (GA). Databricks Unity Catalog on Amazon Web Services (AWS), Microsoft Azure, or Google Cloud AWS Glue Data Catalog on AWS Snowflake Horizon Catalog on AWS, Microsoft Azure, or Google Cloud Workday Data Lake on AWS or Google Cloud This...
Knowledge Studio in Knowledge Catalog is available in Preview . Knowledge Studio lets you explore data assets and semantic relationships using natural language and an interactive context graph, run automated enrichment tasks to generate and curate metadata from schemas, query logs, and enterprise knowledge signals, and package curated domain knowledge into...
Training Serverless Training deprecation: DeepSeek V4 Flash (0731) DeepSeek V4 Flash (0731) is removed from the shared Serverless Training pool effective November 2, 2026. Migrate Serverless Training workloads to DeepSeek V4.1 Flash 1017 . This change applies only to Serverless Training.
Starting today, Amazon Aurora MySQL-Compatible Edition 3 (compatible with MySQL 8.0) supports MySQL 8.0.46, which includes community MySQL fixes and Aurora-specific improvements.
With this release, you can assign tags to secrets when you create or alter a secret. You can use tags on secrets to track sensitive objects, manage governance workflows, and organize secrets consistently with other tagged Snowflake objects.
- v1.9.0 - agents workflow diagram draws an agent workflow in the terminal, or prints it as Mermaid with --format mermaid or --format mermaid-md. agents graph shows how agents, tools, tests, knowledge base documents and handoffs connect across the agents in agents.json, and --uses lists the agents that reference a given tool or document.
You can now assign key-value tags to Access service tokens and use those tags to organize credentials or control application access. Each token supports up to five tags, such as environment: production or team: payments . Add or edit tags when you create or update a token in the dashboard or service token API.
The Automations settings page gets an Automations icon, empty states, a default-policy setup flow and consistent row actions; the intro dialog adds a Preflight checks step; and network-policy edits now apply to the automation's already-running sessions.
A schema can now hold up to 1,000 Unity Catalog secrets, and a metastore up to 10,000, up from 100 and 1,000. The limits apply to Databricks-managed secrets and secrets backed by AWS Secrets Manager.
Starting December 2, 2026, GitHub Actions will block pull_request_target events by default in all public repositories, unless an applicable Actions event policy explicitly allows them. Enforcement was previously scheduled for November 2, 2026. GitHub introduced this default rule through workflow execution protections.
With this release, you can read and write Apache Iceberg™ tables managed by another Snowflake account without creating, storing, or rotating secrets. This capability is generally available through catalog integrations for Snowflake Horizon Catalog. The accounts access the same table data without copying it.
Governed mode allows workspace admins to define specific rules for data source access by the Hex agent. Admins can restrict the agent to use only semantic models, specific projects, or curated warehouse tables instead of relying on the Endorsed classification.
Snowflake introduced a public preview of DEFINE SECRET and environment variables for DCM Projects, enabling declarative secret management and parameter masking.
The new DNS records management experience is now the default for all Cloudflare users, with support for changing record types directly.
Users can now track Unity Gateway Skill usage through audit logs and a dedicated dashboard. The dashboard provides visibility into downloads, loads, and user activity.
Admins can now configure organization-wide limits independently from workspace defaults. This allows for granular control over budgets and model access.
A new tutorial for OCI Generative AI shows how to explore the model catalog with the Python SDK and REST API. Learn step by step how to authenticate with OCI IAM request signing, filter models by region, capability, serving mode, and lifecycle status, and inspect API compatibility and configuration parameters.
Enterprises that have not configured a PAT policy now default to approval required: members can request a PAT and an enterprise admin approves it. Admins can still switch to self-serve or disable PATs.
You can now apply attribute-based access control (ABAC) row filters and column masks to views, materialized views, and streaming tables shared through OpenSharing. Shared views are in Beta and require the ABAC on views preview. See OpenSharing and ABAC .
Starting in December 2026, Databricks-provided MCP connectors in Genie One and Genie Code will be enabled by default for workspaces with the compliance security profile enabled. The connectors include Google Drive, Gmail, Google Calendar, Microsoft 365, Atlassian, Slack, and GitHub.
Horizon Iceberg REST Catalog telemetry is generally available, logging external query engine HTTP API calls to Snowflake account event tables.
Snowflake has released updates for its Data Clean Rooms product.
The data engineering agent for Fabric helps teams manage complex data transformations. It is designed to handle large datasets, schema context, and business rules while maintaining data quality and governance.
Cloudflare added a Data Localization Suite Overview page to consolidate Regional Services, Customer Metadata Boundary, and Geo Key Manager settings into one view.
Amazon SageMaker Unified Studio introduced domain-level custom designations, enabling administrators to configure fine-grained role permissions across catalog, connection, and notebook resources.
Looker Continuous Integration now supports hub-and-spoke projects, allowing automated testing of downstream spoke projects when changes are made to an upstream hub.
Monte Carlo now allows filtering dbt Cloud events by environment. This enables production accounts to ingest only production runs, ensuring that alerts and lineage accurately reflect the production state.
Request for access is now generally available. Users can request privileges on Unity Catalog objects from anywhere in Databricks and track request status in Catalog Explorer. See Access requests .
Workspace admins can now deliver serverless job application logs to a Unity Catalog volume for retention and analysis. See Deliver serverless logs to Unity Catalog volumes .
GitHub Copilot repository plugin defaults and enterprise-managed plugin controls are generally available across VS Code, Copilot CLI, and the Copilot app.
The Request Access feature in Workspaces is now generally available, allowing users to request access to resources directly within the interface.
Microsoft Fabric has released the Govern experience in the OneLake catalog and Govern Skills. These tools provide centralized governance for data estates and allow AI agents to assist with auditing, investigation, and remediation of governance issues.