585.0.0 (2026-09-15)$$$Breaking Changes$$$(Cloud Storage) Deprecated ADMIT_ON_SECOND_MISS choice for --admission-policy flag in gcloud storage buckets anywhere-caches create and gcloud storage buckets anywhere-caches update.$$$Google Cloud CLI$$$Removed the legacy --tls-offload flag from gcloud auth enterprise-certificate-config create and deprecated the legacy C++ ECP TLS Offload Engine. Certificate-Based Access (CBA) requests now exclusively use the ECP HTTP Proxy (ecp_http_proxy).$$$Added support for ANSI escape sequences and colorization in tmux environments.$$$App Topology$$$Promoted gcloud app-topology to GA and beta.$$$BigLake$$$Added --cross-cloud-cache to gcloud biglake delta-sharing catalogs create and update commands to configure cross-cloud cache per catalog.$$$Cloud API Gateway$$$Added --enable-streaming to gcloud api-gateway gateways create; which creates a gateway that serves response streaming: server-sent events; HTTP chunked transfer; WebSockets; and gRPC/HTTP2 bidirectional streaming. The streaming mode can only be set when the gateway is created.$$$Cloud Backup DR$$$Added gcloud backup-dr auto-protection-policies command group in alpha and beta tracks.$$$Added gcloud backup-dr auto-protection-bindings command group in alpha and beta tracks.$$$Added gcloud backup-dr applied-auto-protection-policies command group in alpha and beta tracks.$$$Added gcloud backup-dr binding-matching-resources command group to manage Backup and DR Binding Matching Resources in alpha and beta tracks.$$$Cloud Dataflow$$$Added support for --additional-pipeline-options flag to gcloud dataflow jobs run command to support common runtime pipeline option assignments for classic Dataflow Templates.$$$Cloud Filestore$$$Added --psc-requested-ip-address flag to gcloud filestore instances create to allow specifying a desired IP address.$$$Cloud IAM$$$Promoted enabled-for-users-groups option for --scim-usage flag to GA in gcloud iam workforce-pools providers.$$$Cloud Memorystore$$$Promoted --tags flag of gcloud memcache instances create to GA.$$$Promote gcloud memorystore instances basic auth feature to the GA release track:$$$Promote --authorization-mode=token-auth flag in gcloud memorystore instances create and update commands.$$$Promote new command groups and commands:$$$gcloud memorystore instances create-token-auth-user$$$gcloud memorystore instances token-auth-users (commands: create-auth-token; delete; describe; list)$$$gcloud memorystore instances token-auth-users auth-tokens (commands: delete; describe; list)$$$Cloud Workstations$$$Added --disk-provisioned-iops and --disk-provisioned-throughput flags to gcloud beta workstations configs create and gcloud beta workstations configs update commands.$$$Added --console-base-url flag to gcloud beta workstations clusters create and gcloud beta workstations clusters update commands.$$$Compute Engine$$$Fixed an issue where updating labels on Interconnect Attachments using gcloud compute interconnects attachments [dedicated|partner|provider|l2-forwarding] update --update-labels failed.$$$Allowed using project numbers in command arguments.$$$Promoted gcloud compute image-views describe command to GA.$$$Promoted gcloud compute image-views list command to beta and GA.$$$Added --content-type; --http-status; --backend-bucket; and --backend-service flags to gcloud beta compute url-maps invalidate-cdn-cache to support extended invalidation matchers.$$$Added support for wildcard (*) matching in --host flag of gcloud beta compute url-maps invalidate-cdn-cache (e.g.; --host=*.example.com).$$$Compute OS Config$$$Added Regional Endpoints (REP) support for gcloud compute os-config commands via --endpoint-mode.$$$GKE Hub$$$Added --ignore-maintenance-policies; --ignore-cluster-disruption-budgets; --patch-only; --soak-duration-overrides-per-stage; and --soak-duration-override-all-stages flags to gcloud container fleet rolloutsequences upgrade.$$$Kubernetes Engine$$$Updated default kubectl from 1.35.7 to 1.35.8.$$$Added kubectl version 1.37.0 for the RA

584.0.0 (2026-09-09)$$$Breaking Changes$$$(Cloud Storage) Deprecated gcloud storage buckets anywhere-caches pause command.$$$Google Cloud CLI$$$Deprecated minikube component in Google Cloud CLI. The component will be removed after January 31; 2027. Existing local configurations and clusters in ~/.minikube will be preserved. Minikube is an open-source project and continues to be actively maintained. To avoid disruptions; please migrate to standard OSS Minikube installations: https://minikube.sigs.k8s.io/docs/start/.$$$Upgraded OpenSSL version to 3.5.8 in Linux bundled Python to resolve CVE-2026-42508.$$$AlloyDB$$$Added --edition flag in gcloud alloydb clusters create|update for alpha and beta tracks.$$$Apigee$$$Added gcloud apigee apis delete which deletes an API proxy and all of its revisions. Undeploy every deployed revision first with gcloud apigee apis undeploy.$$$Artifact Registry$$$Added gcloud artifacts files upload which allows user to upload Conda packages to a Conda repository.$$$BigLake$$$Added --cross-cloud-cache to gcloud biglake iceberg catalogs create and update commands to configure cross-cloud cache per catalog.$$$Added --kms-key flag to gcloud biglake iceberg catalogs create and update commands.$$$Added --kms-key flag to gcloud biglake delta-sharing catalogs create and update commands.$$$Cloud Backup DR$$$Added gcloud backup-dr auto-protection-policies command group in alpha and beta tracks.$$$Added gcloud backup-dr auto-protection-bindings command group in alpha and beta tracks.$$$Added gcloud beta backup-dr binding-matching-resources command group to manage Backup and DR BindingMatchingResources.$$$Cloud Firestore$$$Promoted gcloud firestore change-streams commands to beta.$$$Promoted search configuration options to GA for gcloud firestore indexes composite create.$$$Cloud Managed Kafka$$$Promoted --public-cluster and --allowed-source-ip-ranges flags to GA for gcloud managed-kafka clusters create and gcloud managed-kafka clusters update.$$$Cloud Memorystore$$$Promoted --tags flag of gcloud redis instance create.$$$Cloud SQL$$$Updated cloud-sql-proxy packaged component to use 2.25.4 of the Cloud SQL Proxy.$$$Cloud Services$$$API Keys: Added --[no-]check-existing-usage flag to gcloud services api-keys update and gcloud services api-keys delete to verify whether the key has recent incompatible traffic before updating or deleting the key (defaults to true).$$$Cluster Director$$$Fixed an issue in gcloud cluster-director clusters update help text and documentation where --update-slurm-partitions included an unsupported exclusive flag in examples.$$$Compute Engine$$$Promoted regex_rewrite support in url_rewrite block to GA for gcloud compute url-maps.$$$Added --network-endpoint-group flag to gcloud compute backend-services create command.$$$Added --ha-policy-fast-ip-move flag to gcloud compute backend-services create command.$$$Added --ha-policy-leader-backend-group and --ha-policy-leader-instance flags to gcloud compute backend-services update command.$$$Added --no-graceful-shutdown flag to gcloud compute instance-groups managed stop-instances command across all release tracks.$$$Added --no-graceful-shutdown flag to gcloud compute instance-groups managed delete-instances command across all release tracks.$$$Added --outlier-detection-* flags to gcloud compute backend-services create and update commands to configure outlier detection settings.$$$Promoted gcloud compute recoverable-snapshots recover to beta.$$$Promoted gcloud compute recoverable-snapshots delete to beta.$$$Promoted gcloud compute recoverable-snapshots describe to beta.$$$Promoted gcloud compute recoverable-snapshots list to beta.$$$Promoted gcloud compute recoverable-snapshots set-iam-policy to beta.$$$Promoted gcloud compute recoverable-snapshots test-iam-permissions to beta.$$$Promoted gcloud compute instances get-vm-extension-state to beta.$$$Promoted gcloud compute instances list-vm-extension-states to beta.$$$Promoted enable-vpc-scoped-dns sub-argument of --network-interface flag in gcloud

583.0.0 (2026-09-01)$$$AlloyDB$$$Added support for POSTGRES_19 as a version in alloydb clusters create for alpha and beta tracks.$$$Added support for POSTGRES_19 as a version in alloydb clusters migrate-cloud-sql for alpha and beta tracks.$$$Apigee$$$Fixed an issue where gcloud apigee apis import --from-template nested <FaultRule> and <DefaultFaultRule> steps inside a <Request> element; which caused the generated fault rules to run no steps. Steps are now emitted as direct children; and fault rules are read correctly in either form when importing a bundle.$$$Modified gcloud apigee apis import --from-template to ignore the mode field when it is set on a fault rule and to log a warning. The field applies only to flows.$$$BigQuery$$$Added support for --service_directory_service flag for bq mk --connection and bq update --connection commands for Azure connections.$$$Deprecated --s3_service_directory_service flag. Use --service_directory_service instead for bq mk --connection and bq update --connection commands for AWS connections.$$$Added creationTime and updateTime to be displayed in bq show for reservation group.$$$Added --precedence and --condition flags to bq mk and bq update for reservation assignments.$$$Cloud Access Context Manager$$$Promoted gcloud access-context-manager lookup-configured-perimeter to beta and GA.$$$Cloud Bigtable Emulator$$$Rebuilding cbt emulator with go version 1.25.9 which fixed CVE-2026-27140.$$$Cloud Composer$$$Added gcloud beta composer environments hibernate command to hibernate a Cloud Composer environment.$$$Added gcloud beta composer environments resume command to resume a Cloud Composer environment.$$$Added --enable-development-mode flag to gcloud beta composer environments create to enable development mode for environments.$$$Cloud Run$$$Added an interactive prompt when creating or updating Cloud Run jobs configured with GPUs and task timeouts greater than 1 hour in gcloud beta run jobs command group.$$$Added --identity-certificate; --identity-type; and --functional-type flags to the beta track for gcloud run deploy and gcloud run services update to configure workloads with Agent Registry and Agent Identity.$$$Added --identity-certificate; --identity-type; and --functional-type flags to gcloud beta run jobs command groups to configure workloads with Agent Registry and Agent Identity.$$$Cloud SQL$$$Updated cloud-sql-proxy packaged component to use 2.25.3 of the Cloud SQL Proxy.$$$Cloud Storage$$$Tuned download performance for gRPC bidi streaming used by RAPID storage in gcloud storage.$$$Cluster Director$$$Fixed an issue where creating a cluster using --quickstart-cluster (or any other reference architecture) would automatically inject default storage resources (such as managed Lustre) even when custom storage configurations (e.g. --filestores) were explicitly specified.$$$Promoted gcloud cluster-director to GA.$$$Compute Engine$$$Added --no-graceful-shutdown flag to gcloud compute instance-groups managed stop-instances command across all release tracks.$$$Added --no-graceful-shutdown flag to gcloud compute instance-groups managed delete-instances command across all release tracks.$$$Added --no-graceful-shutdown flag to gcloud compute instance-groups managed recreate-instances command across all release tracks.$$$Added --no-graceful-shutdown flag to gcloud compute instance-groups managed delete command across all release tracks.$$$Added --outlier-detection-* flags to gcloud compute backend-services create and update commands to configure outlier detection settings.$$$Promoted gcloud compute recoverable-snapshots recover to beta.$$$Promoted gcloud compute recoverable-snapshots delete to beta.$$$Promoted gcloud compute recoverable-snapshots describe to beta.$$$Promoted gcloud compute recoverable-snapshots list to beta.$$$Promoted gcloud compute recoverable-snapshots set-iam-policy to beta.$$$Promoted gcloud compute recoverable-snapshots test-iam-permissions to beta.$$$Promoted gcloud compute snapshot-recycle-bin-policy describe to beta

583.0.0 (2026-09-01)$$$AlloyDB$$$Added support for POSTGRES_19 as a version in alloydb clusters create for alpha and beta tracks.$$$Added support for POSTGRES_19 as a version in alloydb clusters migrate-cloud-sql for alpha and beta tracks.$$$Apigee$$$Fixed an issue where gcloud apigee apis import --from-template nested <FaultRule> and <DefaultFaultRule> steps inside a <Request> element; which caused the generated fault rules to run no steps. Steps are now emitted as direct children; and fault rules are read correctly in either form when importing a bundle.$$$Modified gcloud apigee apis import --from-template to ignore the mode field when it is set on a fault rule and to log a warning. The field applies only to flows.$$$BigQuery$$$Added support for --service_directory_service flag for bq mk --connection and bq update --connection commands for Azure connections.$$$Deprecated --s3_service_directory_service flag. Use --service_directory_service instead for bq mk --connection and bq update --connection commands for AWS connections.$$$Added creationTime and updateTime to be displayed in bq show for reservation group.$$$Added --precedence and --condition flags to bq mk and bq update for reservation assignments.$$$Cloud Access Context Manager$$$Promoted gcloud access-context-manager lookup-configured-perimeter to beta and GA.$$$Cloud Bigtable Emulator$$$Rebuilding cbt emulator with go version 1.25.9 which fixed CVE-2026-27140.$$$Cloud Composer$$$Added gcloud beta composer environments hibernate command to hibernate a Cloud Composer environment.$$$Added gcloud beta composer environments resume command to resume a Cloud Composer environment.$$$Added --enable-development-mode flag to gcloud beta composer environments create to enable development mode for environments.$$$Cloud Run$$$Added an interactive prompt when creating or updating Cloud Run jobs configured with GPUs and task timeouts greater than 1 hour in gcloud beta run jobs command group.$$$Added --identity-certificate; --identity-type; and --functional-type flags to the beta track for gcloud run deploy and gcloud run services update to configure workloads with Agent Registry and Agent Identity.$$$Added --identity-certificate; --identity-type; and --functional-type flags to gcloud beta run jobs command groups to configure workloads with Agent Registry and Agent Identity.$$$Cloud SQL$$$Updated cloud-sql-proxy packaged component to use 2.25.3 of the Cloud SQL Proxy.$$$Cloud Storage$$$Tuned download performance for gRPC bidi streaming used by RAPID storage in gcloud storage.$$$Cluster Director$$$Fixed an issue where creating a cluster using --quickstart-cluster (or any other reference architecture) would automatically inject default storage resources (such as managed Lustre) even when custom storage configurations (e.g. --filestores) were explicitly specified.$$$Promoted gcloud cluster-director to GA.$$$Compute Engine$$$Added --no-graceful-shutdown flag to gcloud compute instance-groups managed stop-instances command across all release tracks.$$$Added --no-graceful-shutdown flag to gcloud compute instance-groups managed delete-instances command across all release tracks.$$$Added --no-graceful-shutdown flag to gcloud compute instance-groups managed recreate-instances command across all release tracks.$$$Added --no-graceful-shutdown flag to gcloud compute instance-groups managed delete command across all release tracks.$$$Added --outlier-detection-* flags to gcloud compute backend-services create and update commands to configure outlier detection settings.$$$Promoted gcloud compute recoverable-snapshots recover to beta.$$$Promoted gcloud compute recoverable-snapshots delete to beta.$$$Promoted gcloud compute recoverable-snapshots describe to beta.$$$Promoted gcloud compute recoverable-snapshots list to beta.$$$Promoted gcloud compute recoverable-snapshots set-iam-policy to beta.$$$Promoted gcloud compute recoverable-snapshots test-iam-permissions to beta.$$$Promoted gcloud compute snapshot-recycle-bin-policy describe to beta

582.0.0 (2026-08-25)$$$Breaking Changes$$$(Google Cloud CLI) Removed the legacy Cloud SQL Proxy V1 component (cloud_sql_proxy) from the Google Cloud CLI. All connect commands now rely exclusively on Cloud SQL Auth Proxy V2 (cloud-sql-proxy).$$$(API Registry) Removed gcloud api-registry mcp servers list and gcloud api-registry mcp tools list. For similar functionality; see Agent Registry at <https://docs.cloud.google.com/sdk/gcloud/reference/alpha/agent-registry/mcp-servers>.$$$(Cloud Services) Removed gcloud beta services mcp policies get; gcloud beta services mcp policies get-effective; and gcloud beta services mcp policies test-enabled as MCP policies are not required and they have been functioning as no-ops.$$$Anthos$$$Updated anthos-cli with newer go version and library dependencies.$$$App Engine$$$Updated the Java SDK to version 5.1.0 build from the open source project https://github.com/GoogleCloudPlatform/appengine-java-standard/releases/tag/v5.1.0.$$$Upgraded Jetty 12.0 to 12.0.38 and Jetty 12.1 to 12.1.12.$$$Added gRPC support to the App Engine Images service for image transformations and composition.$$$App Lifecycle Manager$$$Added --flags flag to gcloud beta app-lifecycle-manager flags releases create to allow creating flag releases from a list of flag IDs.$$$Cloud Composer$$$Enabled Airflow CLI commands for Composer environments running new Airflow 3.3.x versions.$$$Cloud Firestore$$$Added support for search shorthands to gcloud beta firestore indexes composite create.$$$Cloud Key Management Service$$$Added --protection-level and --crypto-key-backend flags to gcloud kms keys versions update command.$$$Cloud Managed Kafka$$$Released broker-disk flags to GA.$$$Cloud Run$$$Promote gcloud run instances commands to the beta track.$$$Added --delay-execution flag to gcloud beta run jobs command groups to allow run job execution within a delay window.$$$Added --run-upload flag to gcloud beta run deploy to specify that the source should be uploaded via the Cloud Run UploadSource API.$$$Cloud SQL$$$Updated cloud-sql-proxy packaged component to use 2.25.2 of the Cloud SQL Proxy.$$$Cloud Spanner Emulator$$$Added --remote_functions_host_port flag to Spanner emulator start command. This flag allows Spanner emulator to connect to a Functions Framework instance that hosts implementation of Remote User Defined Functions.$$$Cloud Workstations$$$Changed the default value of --pool-size flag for gcloud workstations configs create and gcloud beta workstations configs create to 1. To explicitly create a configuration without a fast start pool; run with --pool-size=0.$$$Compute Engine$$$Added gcloud compute composite-health-checks test-iam-permissions command to test IAM permissions on a Compute Engine composite health check in alpha; beta; and GA.$$$Added --security-settings-client-tls-policy; --security-settings-subject-alt-names; and --security-settings-aws-v4-* flags to gcloud compute backend-services create and update commands.$$$Added allowed value asn to flags --enforce-on-key and --enforce-on-key-configs to gcloud compute security-policies rules create and update commands in alpha; beta; and GA.$$$Added gcloud beta compute service-attachments test-iam-permissions command to test IAM permissions on a service attachment.$$$Added --consistent-hash-http-header-name flag to gcloud compute backend-services create and update commands.$$$Added BMSAI support to --confidential-compute-type option in gcloud compute instances create and bulk create commands.$$$Promoted identity support for Backend Services to GA.$$$Design Center$$$Added gcloud design-center spaces application-templates export command to export IaC for an application template.$$$Added gcloud design-center spaces application-templates revisions export command to export IaC for an application template revision.$$$Developer Connect$$$Promoted gcloud developer-connect account-connectors commands to GA.$$$Orchestration Pipelines$$$Added gcloud beta orchestration-pipelines command group to manage Orchestration Pipeli

582.0.0 (2026-08-25)$$$Breaking Changes$$$(Google Cloud CLI) Removed the legacy Cloud SQL Proxy V1 component (cloud_sql_proxy) from the Google Cloud CLI. All connect commands now rely exclusively on Cloud SQL Auth Proxy V2 (cloud-sql-proxy).$$$(API Registry) Removed gcloud api-registry mcp servers list and gcloud api-registry mcp tools list. For similar functionality; see Agent Registry at <https://docs.cloud.google.com/sdk/gcloud/reference/alpha/agent-registry/mcp-servers>.$$$(Cloud Services) Removed gcloud beta services mcp policies get; gcloud beta services mcp policies get-effective; and gcloud beta services mcp policies test-enabled as MCP policies are not required and they have been functioning as no-ops.$$$Anthos$$$Updated anthos-cli with newer go version and library dependencies.$$$App Engine$$$Updated the Java SDK to version 5.1.0 build from the open source project https://github.com/GoogleCloudPlatform/appengine-java-standard/releases/tag/v5.1.0.$$$Upgraded Jetty 12.0 to 12.0.38 and Jetty 12.1 to 12.1.12.$$$Added gRPC support to the App Engine Images service for image transformations and composition.$$$App Lifecycle Manager$$$Added --flags flag to gcloud beta app-lifecycle-manager flags releases create to allow creating flag releases from a list of flag IDs.$$$Cloud Composer$$$Enabled Airflow CLI commands for Composer environments running new Airflow 3.3.x versions.$$$Cloud Firestore$$$Added support for search shorthands to gcloud beta firestore indexes composite create.$$$Cloud Key Management Service$$$Added --protection-level and --crypto-key-backend flags to gcloud kms keys versions update command.$$$Cloud Managed Kafka$$$Released broker-disk flags to GA.$$$Cloud Run$$$Promote gcloud run instances commands to the beta track.$$$Added --delay-execution flag to gcloud beta run jobs command groups to allow run job execution within a delay window.$$$Added --run-upload flag to gcloud beta run deploy to specify that the source should be uploaded via the Cloud Run UploadSource API.$$$Cloud SQL$$$Updated cloud-sql-proxy packaged component to use 2.25.2 of the Cloud SQL Proxy.$$$Cloud Spanner Emulator$$$Added --remote_functions_host_port flag to Spanner emulator start command. This flag allows Spanner emulator to connect to a Functions Framework instance that hosts implementation of Remote User Defined Functions.$$$Cloud Workstations$$$Changed the default value of --pool-size flag for gcloud workstations configs create and gcloud beta workstations configs create to 1. To explicitly create a configuration without a fast start pool; run with --pool-size=0.$$$Compute Engine$$$Added gcloud compute composite-health-checks test-iam-permissions command to test IAM permissions on a Compute Engine composite health check in alpha; beta; and GA.$$$Added --security-settings-client-tls-policy; --security-settings-subject-alt-names; and --security-settings-aws-v4-* flags to gcloud compute backend-services create and update commands.$$$Added allowed value asn to flags --enforce-on-key and --enforce-on-key-configs to gcloud compute security-policies rules create and update commands in alpha; beta; and GA.$$$Added gcloud beta compute service-attachments test-iam-permissions command to test IAM permissions on a service attachment.$$$Added --consistent-hash-http-header-name flag to gcloud compute backend-services create and update commands.$$$Added BMSAI support to --confidential-compute-type option in gcloud compute instances create and bulk create commands.$$$Promoted identity support for Backend Services to GA.$$$Design Center$$$Added gcloud design-center spaces application-templates export command to export IaC for an application template.$$$Added gcloud design-center spaces application-templates revisions export command to export IaC for an application template revision.$$$Developer Connect$$$Promoted gcloud developer-connect account-connectors commands to GA.$$$Orchestration Pipelines$$$Added gcloud beta orchestration-pipelines command group to manage Orchestration Pipeli

581.0.0 (2026-08-18)$$$Breaking Changes$$$(Cloud Services) Removed gcloud beta services mcp enable; gcloud beta services mcp disable; and gcloud beta services mcp list as MCP enablement is no longer required and they have been functioning as no-ops.$$$AI Platform$$$Added gcloud beta ai semantic-governance-policy-engine deprovision command to tear down a semantic governance policy engine; including its tenant project; GKE cluster; and PSC service attachments.$$$$$$Promoted gcloud ai semantic-governance-policies (create; describe; update; delete; list) and gcloud ai semantic-governance-policy-engine (describe; update; deprovision) commands from beta to GA.$$$$$$BigQuery$$$Added fields precedence and condition to the commands bq ls --reservation_assignment and bq show --reservation_assignment output.$$$Added the new AUTOMATIC_MATERIALIZED_VIEW_REFRESH job type for users to create reservation assignments with.$$$Cloud Auth$$$Enabled Enterprise Certificate Proxy (ECP) HTTP Proxy by default for context-aware mTLS requests.$$$Cloud Bigtable$$$Rebuilt cbt cli with newer version of bigtable client for CVE-2026-39883.$$$Cloud IAM$$$Updated gcloud iam workforce-pools create-cred-config and gcloud iam workforce-pools create-login-config to accept short-format provider audiences (<pool>/<provider>).$$$Added gcloud beta iam workforce-pools providers create-saml and gcloud beta iam workforce-pools providers update-saml commands.$$$Cloud Services$$$API Keys: Added --append flag to gcloud services api-keys update command to merge new application and API target restrictions with existing key restrictions instead of replacing them.$$$Cluster Director$$$Fixed gcloud cluster-director clusters create to not create default compute resources when they are overridden by the user.$$$Updated gcloud cluster-director clusters create to default to hyperdisk-balanced boot disks and restrict persistent disks (PD) for non-N2 and non-CT5P machine types.$$$Fixed a validation error during cluster updates that concurrently modified storage resources and Slurm node sets.$$$Compute Engine$$$Added gcloud compute target-ssl-proxies test-iam-permissions command to test IAM permissions on a Compute Engine target SSL proxy in beta; preview; and GA.$$$Added --max-stream-duration flag to gcloud compute backend-services create and update commands in beta; preview; and GA.$$$Added gcloud compute packet-mirrorings test-iam-permissions command for beta; preview and GA tracks.$$$Container$$$Fixed issue where gcloud CLI would crash on corrupted ~/.kube/config. Now you will now get a more detailed explanation about which section and line is wrong; to make troubleshooting easier. Corrupted kubeconfig will be backed up for further troubleshooting.$$$Database Migration$$$Added --reserved-public-ip and --reserved-public-ip-nat-ips-count flags to gcloud database-migration private-connections create.$$$Added --fetch-reserved-public-ips flag to gcloud database-migration connection-profiles fetch-static-ips.$$$Kubernetes Engine$$$Add --enable-slice-controller flag in gcloud container clusters create and gcloud container clusters update.$$$Oracle Database$$$Added --total-vm-storage-size-gb flag to gcloud oracle-database cloud-exadata-infrastructures configure-exascale and --properties-vm-backup-storage-type; --properties-vm-file-system-storage-type flags to gcloud oracle-database cloud-vm-clusters create to support Exascale VM storage options.

581.0.0 (2026-08-18)$$$Breaking Changes$$$(Cloud Services) Removed gcloud beta services mcp enable; gcloud beta services mcp disable; and gcloud beta services mcp list as MCP enablement is no longer required and they have been functioning as no-ops.$$$AI Platform$$$Added gcloud beta ai semantic-governance-policy-engine deprovision command to tear down a semantic governance policy engine; including its tenant project; GKE cluster; and PSC service attachments.$$$$$$Promoted gcloud ai semantic-governance-policies (create; describe; update; delete; list) and gcloud ai semantic-governance-policy-engine (describe; update; deprovision) commands from beta to GA.$$$$$$BigQuery$$$Added fields precedence and condition to the commands bq ls --reservation_assignment and bq show --reservation_assignment output.$$$Added the new AUTOMATIC_MATERIALIZED_VIEW_REFRESH job type for users to create reservation assignments with.$$$Cloud Auth$$$Enabled Enterprise Certificate Proxy (ECP) HTTP Proxy by default for context-aware mTLS requests.$$$Cloud Bigtable$$$Rebuilt cbt cli with newer version of bigtable client for CVE-2026-39883.$$$Cloud IAM$$$Updated gcloud iam workforce-pools create-cred-config and gcloud iam workforce-pools create-login-config to accept short-format provider audiences (<pool>/<provider>).$$$Added gcloud beta iam workforce-pools providers create-saml and gcloud beta iam workforce-pools providers update-saml commands.$$$Cloud Services$$$API Keys: Added --append flag to gcloud services api-keys update command to merge new application and API target restrictions with existing key restrictions instead of replacing them.$$$Cluster Director$$$Fixed gcloud cluster-director clusters create to not create default compute resources when they are overridden by the user.$$$Updated gcloud cluster-director clusters create to default to hyperdisk-balanced boot disks and restrict persistent disks (PD) for non-N2 and non-CT5P machine types.$$$Fixed a validation error during cluster updates that concurrently modified storage resources and Slurm node sets.$$$Compute Engine$$$Added gcloud compute target-ssl-proxies test-iam-permissions command to test IAM permissions on a Compute Engine target SSL proxy in beta; preview; and GA.$$$Added --max-stream-duration flag to gcloud compute backend-services create and update commands in beta; preview; and GA.$$$Added gcloud compute packet-mirrorings test-iam-permissions command for beta; preview and GA tracks.$$$Container$$$Fixed issue where gcloud CLI would crash on corrupted ~/.kube/config. Now you will now get a more detailed explanation about which section and line is wrong; to make troubleshooting easier. Corrupted kubeconfig will be backed up for further troubleshooting.$$$Database Migration$$$Added --reserved-public-ip and --reserved-public-ip-nat-ips-count flags to gcloud database-migration private-connections create.$$$Added --fetch-reserved-public-ips flag to gcloud database-migration connection-profiles fetch-static-ips.$$$Kubernetes Engine$$$Add --enable-slice-controller flag in gcloud container clusters create and gcloud container clusters update.$$$Oracle Database$$$Added --total-vm-storage-size-gb flag to gcloud oracle-database cloud-exadata-infrastructures configure-exascale and --properties-vm-backup-storage-type; --properties-vm-file-system-storage-type flags to gcloud oracle-database cloud-vm-clusters create to support Exascale VM storage options.

580.0.0 (2026-08-11)$$$Breaking Changes$$$(Google Cloud CLI) The google-cloud-sdk Snap package will be deprecated and removed on September 29th; 2026. Please migrate to the google-cloud-cli package. For more information; see https://docs.cloud.google.com/sdk/docs/downloads-snap.$$$Google Cloud CLI$$$Fixed Google Compute Engine residency detection to prevent authentication failures due to transient issues and command latency regressions in non-Google Cloud environments.$$$Apihub$$$Promoted gcloud apihub locations configure-and-deploy-server command to GA. This command configures and deploys an MCP (Model Context Protocol) server on Apigee X via API Hub.$$$Certificate Authority Service$$$Added first-party activation support to gcloud privateca subordinates activate via --issuer-pool; --issuer-location; and --issuer-ca flags.$$$Added suggestion to use gcloud privateca subordinates activate when gcloud privateca subordinates create with issuer flags fails due to an already existing subordinate CA.$$$Certificate Manager$$$Added --tags flag to gcloud certificate-manager create commands (certificates create; dns-authorizations create; issuance-configs create; maps create; and trust-configs create).$$$Cloud Backup DR$$$Added selective disk backup properties (boot-disk-only and disk-exclusion-labels) under --compute-instance-properties in gcloud backup-dr backup-plans create and update commands.$$$Added --source-instance-boot-disk and --source-instance-disk-device-name flags to gcloud backup-dr backups restore disk for individual disk restore from compute instance backup.$$$Cloud Composer$$$Enabled the backfill Airflow CLI sub-command for Composer environments running Airflow 3.$$$Enabled the config lint Airflow CLI sub-command for Composer environments running Airflow 2.11.0 or higher.$$$Cloud Dataflow$$$Added gcloud dataflow jobs pause and gcloud dataflow jobs resume commands.$$$Added --enable-turnkey-alerts flag to gcloud dataflow jobs run and gcloud dataflow flex-template run.$$$Cloud IAM$$$Added support for X.509 certificate-based credentials and locational mTLS endpoints to gcloud iam workload-identity-pools create-cred-config.$$$Cloud Spanner$$$Update gcloud spanner backups list command to display INSTANCE_PARTITIONS column in GA track.$$$Cloud Storage$$$gcloud storage rsync:$$$Skipping syncing files which goes outside of destination directory.$$$Cluster Director$$$Updated gcloud cluster-director clusters create to default to dynamic nodes when using flex start.$$$Compute Engine$$$Added gcloud compute resource-policies test-iam-permissions command to test IAM permissions on a Compute Engine resource policy in GA; beta; preview; and alpha.$$$Added gcloud compute snapshot-groups set-iam-policy command in beta.$$$Added --kms-key-service-account to gcloud compute disks create; gcloud compute images create; gcloud compute machine-images create and gcloud compute snapshots create for beta track.$$$Added --boot-disk-kms-key-service-account and --instance-kms-key-service-account to gcloud compute instances create and gcloud compute instance-templates create for beta track.$$$Added --consistent-hash-minimum-ring-size flag to gcloud compute backend-services create and update commands.$$$Added --circuit-breakers-max-requests flag to gcloud compute backend-services create and update commands.$$$Added gcloud compute backend-services test-iam-permissions command to test IAM permissions on a Compute Engine backend service in beta; preview; and GA.$$$Added gcloud compute ssl-policies test-iam-permissions command to test IAM permissions on a Compute Engine SSL policy in beta.$$$Added gcloud compute firewall-policies test-iam-permissions command.$$$Promoted --graceful-shutdown; --graceful-shutdown-max-duration; and --no-graceful-shutdown flags to the GA track for gcloud compute instances and gcloud compute instance-templates commands.$$$Added --identity-type flag to gcloud compute instances create; gcloud compute instances update; and gcloud compute instance-templates create in alp

580.0.0 (2026-08-11)$$$Breaking Changes$$$(Google Cloud CLI) The google-cloud-sdk Snap package will be deprecated and removed on September 29th; 2026. Please migrate to the google-cloud-cli package. For more information; see https://docs.cloud.google.com/sdk/docs/downloads-snap.$$$Google Cloud CLI$$$Fixed Google Compute Engine residency detection to prevent authentication failures due to transient issues and command latency regressions in non-Google Cloud environments.$$$Apihub$$$Promoted gcloud apihub locations configure-and-deploy-server command to GA. This command configures and deploys an MCP (Model Context Protocol) server on Apigee X via API Hub.$$$Certificate Authority Service$$$Added first-party activation support to gcloud privateca subordinates activate via --issuer-pool; --issuer-location; and --issuer-ca flags.$$$Added suggestion to use gcloud privateca subordinates activate when gcloud privateca subordinates create with issuer flags fails due to an already existing subordinate CA.$$$Certificate Manager$$$Added --tags flag to gcloud certificate-manager create commands (certificates create; dns-authorizations create; issuance-configs create; maps create; and trust-configs create).$$$Cloud Backup DR$$$Added selective disk backup properties (boot-disk-only and disk-exclusion-labels) under --compute-instance-properties in gcloud backup-dr backup-plans create and update commands.$$$Added --source-instance-boot-disk and --source-instance-disk-device-name flags to gcloud backup-dr backups restore disk for individual disk restore from compute instance backup.$$$Cloud Composer$$$Enabled the backfill Airflow CLI sub-command for Composer environments running Airflow 3.$$$Enabled the config lint Airflow CLI sub-command for Composer environments running Airflow 2.11.0 or higher.$$$Cloud Dataflow$$$Added gcloud dataflow jobs pause and gcloud dataflow jobs resume commands.$$$Added --enable-turnkey-alerts flag to gcloud dataflow jobs run and gcloud dataflow flex-template run.$$$Cloud IAM$$$Added support for X.509 certificate-based credentials and locational mTLS endpoints to gcloud iam workload-identity-pools create-cred-config.$$$Cloud Spanner$$$Update gcloud spanner backups list command to display INSTANCE_PARTITIONS column in GA track.$$$Cloud Storage$$$gcloud storage rsync:$$$Skipping syncing files which goes outside of destination directory.$$$Cluster Director$$$Updated gcloud cluster-director clusters create to default to dynamic nodes when using flex start.$$$Compute Engine$$$Added gcloud compute resource-policies test-iam-permissions command to test IAM permissions on a Compute Engine resource policy in GA; beta; preview; and alpha.$$$Added gcloud compute snapshot-groups set-iam-policy command in beta.$$$Added --kms-key-service-account to gcloud compute disks create; gcloud compute images create; gcloud compute machine-images create and gcloud compute snapshots create for beta track.$$$Added --boot-disk-kms-key-service-account and --instance-kms-key-service-account to gcloud compute instances create and gcloud compute instance-templates create for beta track.$$$Added --consistent-hash-minimum-ring-size flag to gcloud compute backend-services create and update commands.$$$Added --circuit-breakers-max-requests flag to gcloud compute backend-services create and update commands.$$$Added gcloud compute backend-services test-iam-permissions command to test IAM permissions on a Compute Engine backend service in beta; preview; and GA.$$$Added gcloud compute ssl-policies test-iam-permissions command to test IAM permissions on a Compute Engine SSL policy in beta.$$$Added gcloud compute firewall-policies test-iam-permissions command.$$$Promoted --graceful-shutdown; --graceful-shutdown-max-duration; and --no-graceful-shutdown flags to the GA track for gcloud compute instances and gcloud compute instance-templates commands.$$$Added --identity-type flag to gcloud compute instances create; gcloud compute instances update; and gcloud compute instance-templates create in alp

579.0.0 (2026-08-04)$$$Breaking Changes$$$(API Registry) Removed gcloud api-registry mcp enable and gcloud api-registry mcp disable. MCP server enablement is no longer required; enabling the underlying service is sufficient.$$$(Compute Engine) Removed PRESERVED_STATE column from gcloud compute instance-groups managed list-instances output in beta.$$$AI$$$Route gcloud ai requests for the us multi-region to the Vertex AI multi-regional (REP) endpoint.$$$Agent Identity$$$Added --three-legged-oauth-default-continue-uri flag to gcloud agent-identity auth-providers create and update commands.$$$Cloud Auth$$$Enabled ECP HTTP Proxy support for external users (disabled by default).$$$Added optional --ecp-http-proxy flag to gcloud auth enterprise-certificate-config create to support custom ECP HTTP proxy binary paths.$$$Cloud Dataproc$$$Promoted --master-instance-selection; --master-instance-flexibility-policy-file; --worker-instance-selection; --worker-instance-flexibility-policy-file; --secondary-worker-instance-selection; and --secondary-worker-instance-flexibility-policy-file flags to GA for gcloud dataproc clusters create and gcloud dataproc workflow-templates set-managed-cluster.$$$Cloud Firestore Emulator$$$Added support for --require-indexes and --index-file flags in gcloud emulators firestore start command.$$$Cloud Functions$$$Added all-traffic as an allowed value for --direct-vpc-egress flag in gcloud functions deploy.$$$Promoted gcloud functions upgrade command to GA.$$$Cloud NetApp$$$Added gcloud netapp volumes start-split and gcloud netapp volumes get-split-status commands to GA track.$$$Cloud Quotas$$$Promoted gcloud quotas surface (info; preferences; and adjuster settings) to General Availability (GA).$$$Cloud SQL$$$Modified gcloud sql instances reencrypt to support zero-downtime re-encryption for most Cloud SQL instances; removing the previous downtime warning. Instances using C4; C4A; or N4 machine types are not yet supported for zero-downtime re-encryption; they will still restart during this operation and prompt a downtime warning.$$$Cloud Services$$$Updated gcloud beta services mcp enable command to be a no-op; as MCP enablement is no longer required.$$$Cluster Director$$$Fixed an issue where the default zone for cluster resources (storage; network; etc.) was always set to the locations b zone; overriding the user-specified zone in compute flags.$$$Renamed --blueprint flag to --reference-architecture in gcloud beta cluster-director clusters create.$$$Compute Engine$$$Promoted gcloud compute hosts and gcloud compute reservations hosts to GA.$$$Updated gcloud compute reservations hosts list and gcloud compute reservations hosts describe to require --reservation when --reservation-block is specified.$$$Added support for 3500GB; and 7000GB partition sizes when creating local SSDs via gcloud compute instances create and gcloud compute instance-templates create.$$$Promoted --igmp-query flag in --network-interface of gcloud compute instance-templates create to GA.$$$Promoted --igmp-query flag in gcloud compute instances network-interfaces add to GA.$$$Promoted --igmp-query flag in --network-interface of gcloud compute instances bulk create to GA.* Added gcloud compute http-health-checks test-iam-permissions command.$$$Added --routing-mode flag to gcloud compute service-attachments create and update commands in beta.$$$Added gcloud compute snapshot-groups test-iam-permissions command in beta release track.$$$Added gcloud compute instances test-iam-permissions command to test IAM permissions on a Compute Engine virtual machine instance in GA; beta; and preview.$$$Added gcloud compute interconnects groups set-iam-policy command to set IAM policy on an interconnect group in beta; preview; and GA.$$$Added --exapool-capacity-optimized-capacity; --exapool-read-optimized-capacity; and --exapool-write-optimized-capacity flags to gcloud alpha compute storage-pools update for Exapool storage pools.$$$Added Arm CCA support to the confidential-compute-type option in gclo

579.0.0 (2026-08-04)$$$Breaking Changes$$$(API Registry) Removed gcloud api-registry mcp enable and gcloud api-registry mcp disable. MCP server enablement is no longer required; enabling the underlying service is sufficient.$$$(Compute Engine) Removed PRESERVED_STATE column from gcloud compute instance-groups managed list-instances output in beta.$$$AI$$$Route gcloud ai requests for the us multi-region to the Vertex AI multi-regional (REP) endpoint.$$$Agent Identity$$$Added --three-legged-oauth-default-continue-uri flag to gcloud agent-identity auth-providers create and update commands.$$$Cloud Auth$$$Enabled ECP HTTP Proxy support for external users (disabled by default).$$$Added optional --ecp-http-proxy flag to gcloud auth enterprise-certificate-config create to support custom ECP HTTP proxy binary paths.$$$Cloud Dataproc$$$Promoted --master-instance-selection; --master-instance-flexibility-policy-file; --worker-instance-selection; --worker-instance-flexibility-policy-file; --secondary-worker-instance-selection; and --secondary-worker-instance-flexibility-policy-file flags to GA for gcloud dataproc clusters create and gcloud dataproc workflow-templates set-managed-cluster.$$$Cloud Firestore Emulator$$$Added support for --require-indexes and --index-file flags in gcloud emulators firestore start command.$$$Cloud Functions$$$Added all-traffic as an allowed value for --direct-vpc-egress flag in gcloud functions deploy.$$$Promoted gcloud functions upgrade command to GA.$$$Cloud NetApp$$$Added gcloud netapp volumes start-split and gcloud netapp volumes get-split-status commands to GA track.$$$Cloud Quotas$$$Promoted gcloud quotas surface (info; preferences; and adjuster settings) to General Availability (GA).$$$Cloud SQL$$$Modified gcloud sql instances reencrypt to support zero-downtime re-encryption for most Cloud SQL instances; removing the previous downtime warning. Instances using C4; C4A; or N4 machine types are not yet supported for zero-downtime re-encryption; they will still restart during this operation and prompt a downtime warning.$$$Cloud Services$$$Updated gcloud beta services mcp enable command to be a no-op; as MCP enablement is no longer required.$$$Cluster Director$$$Fixed an issue where the default zone for cluster resources (storage; network; etc.) was always set to the locations b zone; overriding the user-specified zone in compute flags.$$$Renamed --blueprint flag to --reference-architecture in gcloud beta cluster-director clusters create.$$$Compute Engine$$$Promoted gcloud compute hosts and gcloud compute reservations hosts to GA.$$$Updated gcloud compute reservations hosts list and gcloud compute reservations hosts describe to require --reservation when --reservation-block is specified.$$$Added support for 3500GB; and 7000GB partition sizes when creating local SSDs via gcloud compute instances create and gcloud compute instance-templates create.$$$Promoted --igmp-query flag in --network-interface of gcloud compute instance-templates create to GA.$$$Promoted --igmp-query flag in gcloud compute instances network-interfaces add to GA.$$$Promoted --igmp-query flag in --network-interface of gcloud compute instances bulk create to GA.* Added gcloud compute http-health-checks test-iam-permissions command.$$$Added --routing-mode flag to gcloud compute service-attachments create and update commands in beta.$$$Added gcloud compute snapshot-groups test-iam-permissions command in beta release track.$$$Added gcloud compute instances test-iam-permissions command to test IAM permissions on a Compute Engine virtual machine instance in GA; beta; and preview.$$$Added gcloud compute interconnects groups set-iam-policy command to set IAM policy on an interconnect group in beta; preview; and GA.$$$Added --exapool-capacity-optimized-capacity; --exapool-read-optimized-capacity; and --exapool-write-optimized-capacity flags to gcloud alpha compute storage-pools update for Exapool storage pools.$$$Added Arm CCA support to the confidential-compute-type option in gclo

578.0.0 (2026-07-28)$$$Breaking Changes$$$(Database Migration) Made --auto-commit flag the default for gcloud database-migration conversion-workspaces seed|convert|import-rules operations. To disable auto-committing; use --no-auto-commit flag.$$$Google Cloud CLI$$$Fixed an issue where running gcloud init crashed when Enterprise Certificate Proxy (ECP) binaries were missing from configuration.$$$Updated macOS Python Virtualenv for the gcloud CLI to 3.14.6.$$$AlloyDB$$$Promote AlloyDB Backup DR restore flags (--backupdr-backup and --backupdr-data-source) to the GA track.$$$BigLake$$$Fixed a bug where gcloud biglake iceberg tables commands failed to send the X-Iceberg-Access-Delegation: vended-credentials header.$$$BigQuery$$$Added -f/--force support to bq rm --connection to ignore NOT_FOUND errors if the connection does not exist.$$$Fixed reading configuration from gcloud CLI with --nouse_google_auth flag.$$$Added a predefined label for jobs created in specific metrics environments.$$$Updated the help text for several global flags.$$$Updated command format in the user-agent HTTP header of API requests.$$$Cloud Backup DR$$$Added --log-retention-days flag across gcloud backup-dr backup-plans create and update across all release tracks to enable Point-in-Time Recovery (PITR) log retention configuration.$$$Cloud Bigtable$$$Added --ignore-warnings flag to gcloud bigtable instances tables update and gcloud bigtable tables update.$$$Promoted --ignore-warnings flag of gcloud bigtable materialized-views create to GA.$$$Cloud Composer$$$Enabled Airflow CLI commands for Composer environments running Airflow 3.2.$$$Cloud IAM$$$Promoted enabled-for-users-groups option for --scim-usage flag to beta in gcloud beta iam workforce-pools providers.$$$Cloud Run$$$Added --sandbox-launcher flag to gcloud beta run jobs and gcloud beta run worker-pools command groups to allow setting a container as sandbox launcher when creating or updating a Cloud Run job or a worker pool.$$$Cloud Workstations$$$Added --idle-action flag to gcloud alpha workstations configs create; gcloud alpha workstations configs update; gcloud beta workstations configs create; and gcloud beta workstations configs update commands.$$$Compute Engine$$$Added --network-tier flag to gcloud compute public-advertised-prefixes create in beta.$$$Added --metadata-filter flag to gcloud compute forwarding-rules create command across all release tracks.$$$Added --metadata-filter flag to gcloud compute forwarding-rules update commands across all release tracks.$$$Added gcloud compute machine-images test-iam-permissions command to test IAM permissions on a Compute Engine machine image in beta; preview; and GA.$$$Promoted regex_rewrite support in url_rewrite block to beta for gcloud compute url-maps.$$$Promoted the following gcloud compute routers command groups to GA: add-named-set; add-named-set-element; download-named-set; get-named-set; list-named-sets; remove-named-set; remove-named-set-element; and upload-named-set.$$$Added gcloud compute health-sources test-iam-permissions command to test IAM permissions on a health source.$$$Added gcloud compute instant-snapshot-groups set-iam-policy command to set the IAM policy for a Compute Engine instant snapshot group.$$$Added gcloud compute networks subnets test-iam-permissions command in beta; preview; and GA.$$$Added gcloud compute image-views describe command in beta.$$$Added gcloud compute snapshots test-iam-permissions to test IAM permissions for Compute Engine snapshots.$$$Added gcloud compute interconnects attachments groups set-iam-policy command to set IAM policy on an interconnect attachment group in beta; preview; and GA.$$$Added --internal-range flag to gcloud compute addresses create to support allocating global internal IP addresses from an Internal Range for Private Service Connect.$$$Updated gcloud compute reservations hosts list and gcloud compute reservations hosts describe to require --reservation when --reservation-block is specified.$$$Developer Connect$$$Updated gcloud beta

577.0.0 (2026-07-21)$$$Agent Identity$$$Promoted gcloud agent-identity auth-providers and gcloud agent-identity access-summaries to GA.$$$AlloyDB$$$Modify flag --no-enable-autoscaler of gcloud beta alloydb instances create|update commands to only set the enabled field to false and not clear autoscaling config.$$$Modify gcloud beta alloydb instances update command to only allow one of --autoscaler-delete-schedule; --autoscaler-disable-schedule; --autoscaler-enable-schedule; or --autoscaler-set-schedule to be specified.$$$Artifact Registry$$$Added connector-repository mode to gcloud artifacts repositories create.$$$BigQuery$$$Added support for --s3_service_directory_service flag to pass custom Service Directory endpoints for AWS connection make and update operations. This is used for routing traffic over a private network connection through Cross-Cloud Interconnect.$$$Updated the data source of agent name value set in the user agent HTTP header.$$$Stopped enforcing bq init when --oauth_access_token is provided.$$$Cloud Bigtable$$$fix: cbt cli escape row keys and column qualifiers in printRow.$$$Cloud Firestore Emulator$$$Release Cloud Firestore emulator v1.22.0$$$Added DML support for the Firestore Pipelines API$$$Added ability to model when composite indexes are required in Datastore mode using new --require-indexes and --index-file flags$$$Added depreciation warning for JRE versions <25$$$Cloud Key Management Service$$$(GA) Added --folder flag to gcloud kms autokey-config show-effective-config to retrieve the effective Cloud KMS Autokey configuration for folders. The --project and --folder flags are now optional; defaulting to the current project.$$$Cloud Workstations$$$Added gcloud beta workstations suspend and gcloud alpha workstations suspend commands.$$$Compute Engine$$$Added gcloud compute machine-images test-iam-permissions command to test IAM permissions on a Compute Engine machine image in beta; preview; and GA.$$$Promoted regex_rewrite support in url_rewrite block to beta for gcloud compute url-maps.$$$Promoted the following gcloud compute routers command groups to GA: add-named-set; add-named-set-element; download-named-set; get-named-set; list-named-sets; remove-named-set; remove-named-set-element; and upload-named-set

577.0.0 (2026-07-21)$$$Agent Identity$$$Promoted gcloud agent-identity auth-providers and gcloud agent-identity access-summaries to GA.$$$AlloyDB$$$Modify flag --no-enable-autoscaler of gcloud beta alloydb instances create|update commands to only set the enabled field to false and not clear autoscaling config.$$$Modify gcloud beta alloydb instances update command to only allow one of --autoscaler-delete-schedule; --autoscaler-disable-schedule; --autoscaler-enable-schedule; or --autoscaler-set-schedule to be specified.$$$Artifact Registry$$$Added connector-repository mode to gcloud artifacts repositories create.$$$BigQuery$$$Added support for --s3_service_directory_service flag to pass custom Service Directory endpoints for AWS connection make and update operations. This is used for routing traffic over a private network connection through Cross-Cloud Interconnect.$$$Updated the data source of agent name value set in the user agent HTTP header.$$$Stopped enforcing bq init when --oauth_access_token is provided.$$$Cloud Bigtable$$$fix: cbt cli escape row keys and column qualifiers in printRow.$$$Cloud Firestore Emulator$$$Release Cloud Firestore emulator v1.22.0$$$Added DML support for the Firestore Pipelines API$$$Added ability to model when composite indexes are required in Datastore mode using new --require-indexes and --index-file flags$$$Added depreciation warning for JRE versions <25$$$Cloud Key Management Service$$$(GA) Added --folder flag to gcloud kms autokey-config show-effective-config to retrieve the effective Cloud KMS Autokey configuration for folders. The --project and --folder flags are now optional; defaulting to the current project.$$$Cloud Workstations$$$Added gcloud beta workstations suspend and gcloud alpha workstations suspend commands.$$$Compute Engine$$$Added gcloud compute machine-images test-iam-permissions command to test IAM permissions on a Compute Engine machine image in beta; preview; and GA.$$$Promoted regex_rewrite support in url_rewrite block to beta for gcloud compute url-maps.$$$Promoted the following gcloud compute routers command groups to GA: add-named-set; add-named-set-element; download-named-set; get-named-set; list-named-sets; remove-named-set; remove-named-set-element; and upload-named-set

576.0.0 (2026-07-14)$$$Breaking Changes$$$(Cloud Storage) Updated gcloud storage rsync to default decompresses downloaded gzip files to match the behavior of gcloud storage cp. To retain the previous behavior; use the new --do-not-decompress flag.$$$Google Cloud CLI$$$Updated Linux bundled Python for the gcloud CLI to 3.14.6 to resolve CVE-2026-34182.$$$Artifact Registry$$$Fixed a performance regression in gcloud artifacts docker images list when listing a large number of image versions.

576.0.0 (2026-07-14)$$$Breaking Changes$$$(Cloud Storage) Updated gcloud storage rsync to default decompresses downloaded gzip files to match the behavior of gcloud storage cp. To retain the previous behavior; use the new --do-not-decompress flag.$$$Google Cloud CLI$$$Updated Linux bundled Python for the gcloud CLI to 3.14.6 to resolve CVE-2026-34182.$$$Artifact Registry$$$Fixed a performance regression in gcloud artifacts docker images list when listing a large number of image versions.

575.0.1 (2026-07-07)$$$Google Cloud CLI$$$Updated Windows bundled Python for the gcloud CLI to 3.14.6 to resolve CVE-2026-34182.

575.0.0 (2026-06-30)$$$Google Cloud CLI$$$Added any-reservation-then-fail argument for flag --reservation-affinity in gcloud container clusters node-pools create.$$$Agent Registry$$$Added gcloud agent-registry command group to manage Agent Registry resources.$$$AlloyDB$$$Added --failover flag to gcloud beta alloydb clusters promote to support cross-region failover.$$$Apigee$$$Added gcloud apigee apis import which allows customers to upload API Proxy bundles in archive ZIP or feature template YAML format.$$$Artifact Registry$$$Expose the Registry URL in the output of gcloud artifacts repositories describe and in the output of gcloud artifacts repositories create (upon synchronous creation).$$$Assured Workloads$$$Added SWITZERLAND_DATA_BOUNDARY_WITH_ACCESS_JUSTIFICATIONS option to --compliance-regime flag of gcloud assured workloads create.$$$BigLake$$$Added gcloud biglake hive tables create to beta.$$$Cloud Access Context Manager$$$Exposed --service-account and --service-account-project-number for gcloud access-context-manager cloud-bindings commands in the GA track.$$$Cloud Bigtable$$$Added support for --tags flag to gcloud bigtable instances create to allow binding tags on instance creation.$$$Cloud Data Lineage$$$Added gcloud datalineage processes command group to manage data lineage processes.$$$Cloud Dataproc$$$Added --master-machine-types flag in gcloud dataproc clusters create.$$$Cloud IAM$$$Updated gcloud iam service-accounts create to print the created service accounts email address.$$$Cloud Run$$$Made the FILE positional argument optional for all gcloud run * replace commands; defaulting to their respective standard filenames if not specified.$$$Promoted regional inference to beta for Cloud Run services; jobs; and worker pools. When --region or the run/region property is not specified; the command line looks for a resource with that name in all regions.$$$Added --sandbox-launcher flag to gcloud beta run deploy and gcloud beta run services update to allow setting a container as sandbox launcher.$$$Promoted --workdir flag for gcloud run commands to GA.$$$Promoted interactive project prompt when project is not specified in gcloud run deploy to GA.$$$Promoted suggesting project and region from Artifact Registry URL in gcloud run deploy to GA.$$$Added --tail flag to gcloud beta run jobs execute to tail logs of the running execution.$$$Added --dry-run flag to gcloud beta run deploy; gcloud beta run services update; gcloud beta run services delete; gcloud beta run worker-pools deploy; gcloud beta run worker-pools update; and gcloud beta run worker-pools delete to validate configuration without persisting changes.$$$Added gcloud run jobs executions describe-latest command to describe the latest execution of a job.$$$Call out proxy when deploying or updating services with gcloud run deploy or gcloud run services update that require authentication in all tracks.$$$Cloud SQL$$$Added --user and --password-secret-version to gcloud sql instances execute-sql.$$$Cloud Storage$$$Added download validation via MD5 hash and checksumming for streaming downloads in gcloud storage cp; gcloud storage mv and gcloud storage cat commands; see https://docs.cloud.google.com/storage/docs/streaming-downloads.$$$Updated gcloud storage cp command to support streaming uploads with objects in RAPID storage see https://docs.cloud.google.com/storage/docs/streaming-uploads.$$$Updated gcloud storage cp and gcloud storage mv commands to support streaming downloads with objects in RAPID storage see https://docs.cloud.google.com/storage/docs/streaming-downloads.$$$Updated gcloud storage cat to support Rapid Bucket see https://docs.cloud.google.com/storage/docs/rapid/rapid-bucket.$$$Cloud Workstations$$$Promoted --pd-disk-size flag of gcloud workstations update to GA.$$$Cluster Director$$$Users must supply a staticNodeCount if they want one. This no longer defaults to 1.$$$Compute Engine$$$Added gcloud alpha compute instance-groups managed configure-accelerator-topologies command to configure accelerator

574.0.0 (2026-06-23)$$$AI Platform$$$Added gcloud beta ai semantic-governance-policy-engine deprovision command to tear down a semantic governance policy engine; including its tenant project; GKE cluster; and PSC service attachments.$$$Agent Identity$$$Added gcloud beta agent-identity auth-providers get-iam-policy|set-iam-policy|add-iam-policy-binding|remove-iam-policy-binding|test-iam-permissions commands.$$$Agent Registry$$$Added gcloud agent-registry command group to manage Agent Registry resources.$$$Backup For GKE$$$Made gcloud container backup-restore command groups compatible with non-default universe domains.$$$BigQuery$$$Fixed a bug where stderr messages from gcloud CLI output would be printed to stdout.$$$Added --gcloud_config_cache flag to enable caching data retrieved from the gcloud CLI.$$$Added display of container request concurrency of BigQuery Python UDF in bq show --routine.$$$Added information about AI Agent in the execution environment to the user-agent HTTP header in the API request.$$$Cloud Datastream$$$Added Regional Endpoints (REP) support for all Datastream commands.$$$Cloud Memorystore$$$Added --zone-distribution-config-zones flag to gcloud memorystore instances create command. This flag lets users specify multiple zones when they create a MULTI_ZONE cluster.$$$Added --zone-distribution-config-zones flag to gcloud redis clusters create command. This flag lets users specify multiple zones when they create a MULTI_ZONE cluster.$$$Cluster Director$$$Added support for creating clusters using --quickstart-cluster in gcloud beta cluster-director clusters create.$$$Colab$$$Added Hyperdisk options to --disk-type of gcloud colab runtime-templates create: HYPERDISK_BALANCED.$$$Compute Engine$$$Fixed an issue where gcloud compute url-maps import reset custom timeout and retryPolicy (specifically numRetries) values to defaults when updating an existing URL map.$$$Added --vsock-mode flag to gcloud compute instances create; gcloud compute instance-templates create; gcloud compute instances bulk create; and gcloud compute queued-resources create in ALPHA to support enabling/disabling VSOCK mode.$$$Promoted --purpose flag to gcloud compute public-delegated-prefixes create in beta.$$$Database Migration$$$Added Regional Endpoints (REP) support for all Database Migration Service (DMS) commands.$$$Kubernetes Engine$$$Updated default kubectl from 1.35.3 to 1.35.6.$$$Added new kubectl version 1.36.2 for the RAPID channel.$$$Additional kubectl versions:$$$kubectl.1.30 (1.30.14)$$$kubectl.1.31 (1.31.14)$$$kubectl.1.32 (1.32.13)$$$kubectl.1.33 (1.33.13)$$$kubectl.1.34 (1.34.9)$$$kubectl.1.35 (1.35.6)$$$kubectl.1.36 (1.36.2)$$$Network Security$$$Promoted gcloud network-security ull-mirroring-engines and gcloud network-security ull-mirroring-collectors commands to beta.$$$Promoted gcloud network-security ull-mirroring-engines and gcloud network-security ull-mirroring-collectors commands to GA.

573.0.0 (2026-06-16)$$$Breaking Changes$$$(Anthos Multi-Cloud) Deprecated gcloud container attached clusters get-credentials. Use gcloud container fleet memberships get-credentials to get credentials for a running Attached cluster.$$$Google Cloud CLI$$$Updated Windows bundled Python for the gcloud CLI to 3.14.5.$$$AI$$$Added gcloud ai tuning-jobs command group to manage Vertex AI supervised fine-tuning jobs.$$$App Engine$$$Updated the Java SDK to version 5.0.4 build from the open source project https://github.com/GoogleCloudPlatform/appengine-java-standard/releases/tag/v5.0.4.$$$fixed https://github.com/GoogleCloudPlatform/appengine-java-standard/issues/506.$$$Artifact Registry$$$Added gcloud artifacts image-streaming-cache command group to manage image streaming caches per region. This group includes create; describe; delete; and list commands.$$$BigLake$$$Promoted --unity-service-principal-application-id flag for gcloud biglake iceberg catalogs create and update to BETA; making it publicly visible.$$$Promoted BigLake catalogs and arguments for gcloud biglake iceberg catalogs to GA.$$$Cloud Data Lineage$$$Added gcloud datalineage command group to manage Cloud Data Lineage resources.$$$Added gcloud datalineage config describe and gcloud datalineage config update commands to manage Data Lineage configurations.$$$Cloud Datastream$$$Added support for Dataverse; Salesforce Marketing Cloud; and ServiceNow connection profiles to gcloud datastream connection-profiles create and update commands.$$$Added support for Dataverse; Salesforce Marketing Cloud; and ServiceNow streams to gcloud datastream streams create and update commands.$$$Cloud Run$$$Promoted --readiness_probe in gcloud run deploy and gcloud run services update to GA.$$$Cloud Services$$$API Keys: Updated gcloud services api-keys create and update commands --api-target flag to accept a colon-separated list of methods inline (e.g. --api-target=service=foo;methods=m1:m2).$$$Cloud Storage$$$Promoted gcloud storage batch-operations bucket-operations commands to GA.$$$Cluster Director$$$Added support for creating clusters using blueprints in gcloud beta cluster-director clusters create.$$$Compute Engine$$$Promoted --action-on-vm-failed-health-check flag to GA for gcloud compute instance-groups managed create and gcloud compute instance-groups managed update.$$$Fixed an issue where waiting for asynchronous operations would fail for certain global nested resources (like cross-site-networks wire-groups).$$$Added any-reservation-then-fail choice to --reservation-affinity flag in beta for gcloud compute instances create; gcloud compute instances bulk create; gcloud compute instance-templates create; gcloud compute instances create-with-container; and gcloud compute instance-templates create-with-container commands.$$$Promoted --include-disks and --exclude-disks flags for gcloud compute machine-images create to the BETA release track.$$$Kubernetes Engine$$$Added --dataplane-optimization-mode flag to gcloud container clusters create to select scalability mode for Dataplane V2.$$$Deprecated None value of --release-channel flag from gcloud container clusters create and update command. Use RAPID; REGULAR; STABLE or EXTENDED instead.$$$Network Connectivity$$$Updated help text for --region flag in gcloud network-connectivity transports create to include supported regions list.$$$Network Security$$$Added gcloud network-security operations command group (describe; wait; list; cancel).$$$Promoted project scoping for gcloud network-security firewall-endpoints commands (create; delete; describe; list; update) to GA.$$$Promoted gcloud network-security security-profiles wildfire-analysis commands to BETA.$$$Promoted gcloud network-security firewall-endpoints wildfire-verdict-change-requests commands to beta.$$$Promoted WildFire-related flags in gcloud network-security firewall-endpoints create command to BETA.$$$Promoted WildFire-related flags in gcloud network-security firewall-endpoints update command to BETA.$$$Recaptcha$$$Fixed an is

572.0.0 (2026-06-09)$$$Google Cloud CLI$$$Updated macOS Python Virtualenv for the gcloud CLI to 3.14.5 with pyOpenSSL 26.0.0 and cryptography 46.0.7.$$$AI$$$Fixed gcloud ai endpoints deploy-model to honor --machine-type for Gemini on GDC connected deployments. Previously the flag was silently ignored.$$$App Engine$$$Updated the Java SDK to version 5.0.3 build from the open source project https://github.com/GoogleCloudPlatform/appengine-java-standard/releases/tag/v5.0.3.$$$Fixed for https://github.com/GoogleCloudPlatform/appengine-java-standard/issues/503.$$$App Lifecycle Manager$$$Added validation to enforce required sub-fields within arguments for releases; unit-kinds; and unit-operations commands.$$$Cloud Access Context Manager$$$Modified --group-key flag of gcloud access-context-manager cloud-bindings create to be optional.$$$Cloud IAM$$$Remove deprecated from Extended Attributes parameters. Extended Attributes are marked as restricted.$$$Cloud Workstations$$$Added gcloud beta workstations update command to update a workstations properties; such as its persistent directory disk size.$$$Cluster Director$$$Added support for updating Slurm prolog; epilog; task prolog; and task epilog scripts.$$$Compute Engine$$$Added EXTERNAL_PASSTHROUGH option to --load-balancing-scheme flag of gcloud compute forwarding-rules in beta.$$$Promoted --ip_addresses flag of gcloud compute forwarding-rules to beta.$$$Added EXTERNAL_PASSTHROUGH option to --load-balancing-scheme flag of gcloud compute backend-services in beta.$$$Added folder share support to gcloud compute reservations update.$$$Promoted --ncc-gateway flag to GA.$$$Database Migration$$$Added support for seeding a conversion workspace from a Cloud Storage bucket via --gcs-path flag in gcloud database-migration conversion-workspaces seed.$$$Added --dry-run flag to gcloud database-migration conversion-workspaces apply to allow validation of apply process by applying the draft version to a copy of the destination database.$$$Decoupled --host and --port requirements in gcloud database-migration connection-profiles create postgresql for destination connection profiles leveraging Cloud SQL or AlloyDB.$$$Kubernetes Engine$$$Added --maintenance-window-duration flag to gcloud container clusters create command as an alternative to --maintenance-window-end.$$$Added --maintenance-window-duration flag to gcloud container clusters update command as an alternative to --maintenance-window-end.$$$Network Connectivity$$$Promoted gcloud network-connectivity spokes gateways advertised-routes command group to GA; including create; delete; describe; and list commands.$$$Network Security$$$Promoted project scoping for gcloud network-security firewall-endpoints commands (create; delete; describe; list; update) to GA.$$$Security Command Center$$$Added external-exposure service to the SUPPORTED_SERVICES list.$$$Service Extensions$$$Updated import and export schemas for gcloud service-extensions authz-extensions.$$$Workbench$$$Added --image-family flag to gcloud workbench instances upgrade.$$$Added NVIDIA_RTX6000 to --accelerator-type choices on gcloud workbench instances create and update.$$$Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

572.0.0 (2026-06-09)$$$Google Cloud CLI$$$Updated macOS Python Virtualenv for the gcloud CLI to 3.14.5 with pyOpenSSL 26.0.0 and cryptography 46.0.7.$$$AI$$$Fixed gcloud ai endpoints deploy-model to honor --machine-type for Gemini on GDC connected deployments. Previously the flag was silently ignored.$$$App Engine$$$Updated the Java SDK to version 5.0.3 build from the open source project https://github.com/GoogleCloudPlatform/appengine-java-standard/releases/tag/v5.0.3.$$$Fixed for https://github.com/GoogleCloudPlatform/appengine-java-standard/issues/503.$$$App Lifecycle Manager$$$Added validation to enforce required sub-fields within arguments for releases; unit-kinds; and unit-operations commands.$$$Cloud Access Context Manager$$$Modified --group-key flag of gcloud access-context-manager cloud-bindings create to be optional.$$$Cloud IAM$$$Remove deprecated from Extended Attributes parameters. Extended Attributes are marked as restricted.$$$Cloud Workstations$$$Added gcloud beta workstations update command to update a workstations properties; such as its persistent directory disk size.$$$Cluster Director$$$Added support for updating Slurm prolog; epilog; task prolog; and task epilog scripts.$$$Compute Engine$$$Added EXTERNAL_PASSTHROUGH option to --load-balancing-scheme flag of gcloud compute forwarding-rules in beta.$$$Promoted --ip_addresses flag of gcloud compute forwarding-rules to beta.$$$Added EXTERNAL_PASSTHROUGH option to --load-balancing-scheme flag of gcloud compute backend-services in beta.$$$Added folder share support to gcloud compute reservations update.$$$Promoted --ncc-gateway flag to GA.$$$Database Migration$$$Added support for seeding a conversion workspace from a Cloud Storage bucket via --gcs-path flag in gcloud database-migration conversion-workspaces seed.$$$Added --dry-run flag to gcloud database-migration conversion-workspaces apply to allow validation of apply process by applying the draft version to a copy of the destination database.$$$Decoupled --host and --port requirements in gcloud database-migration connection-profiles create postgresql for destination connection profiles leveraging Cloud SQL or AlloyDB.$$$Kubernetes Engine$$$Added --maintenance-window-duration flag to gcloud container clusters create command as an alternative to --maintenance-window-end.$$$Added --maintenance-window-duration flag to gcloud container clusters update command as an alternative to --maintenance-window-end.$$$Network Connectivity$$$Promoted gcloud network-connectivity spokes gateways advertised-routes command group to GA; including create; delete; describe; and list commands.$$$Network Security$$$Promoted project scoping for gcloud network-security firewall-endpoints commands (create; delete; describe; list; update) to GA.$$$Security Command Center$$$Added external-exposure service to the SUPPORTED_SERVICES list.$$$Service Extensions$$$Updated import and export schemas for gcloud service-extensions authz-extensions.$$$Workbench$$$Added --image-family flag to gcloud workbench instances upgrade.$$$Added NVIDIA_RTX6000 to --accelerator-type choices on gcloud workbench instances create and update.$$$Subscribe to these release notes at https://groups.google.com/forum/#!forum/google-cloud-sdk-announce.

571.0.0 (2026-06-02)$$$Google Cloud CLI$$$Updated Windows PuTTY executables to version 0.83.$$$This includes a fix for the issue reported at https://issuetracker.google.com/issues/515628403.$$$Fixed issue where gcloud compute scp file transfers were extremely slow when using --tunnel-through-iap in PY 3.14.$$$AlloyDB$$$Added flag --labels to gcloud alloydb instances create|create-secondary commands to assign labels to an instance.$$$Added flags --update-labels; --remove-labels; and --clear-labels to gcloud alloydb instances update commands to update; remove; or clear labels for an instance.$$$BigLake$$$Promoted gcloud biglake hive tables to beta.$$$Cloud Dataproc$$$Added --confidential-compute-type flag to gcloud dataproc clusters create to allow specifying the Confidential Computing technology (e.g.; SEV; SEV_SNP; TDX).$$$Deprecated --confidential-compute flag for gcloud dataproc clusters create. Use --confidential-compute-type flag instead.$$$Cloud Datastream$$$Added --sql-where-clause flag to gcloud datastream objects start-backfill; which starts a partial backfill on the specified object.$$$Cloud NetApp$$$Added gcloud netapp volumes start-split and get-split-status commands to alpha and beta tracks of the volumes group.$$$Added gcloud netapp storage-pool update-backup-config command to GA track.$$$Added --ontap-source flag to gcloud netapp backup-vaults backups create GA track.$$$Added gcloud netapp storage-pools list-backup-configs command to the GA track of the storage-pools group.$$$Added gcloud netapp storage-pools restore-volume command to GA track.$$$Cloud Run$$$Added regional endpoint support for gcloud beta run worker-pools and gcloud beta run jobs executions tasks commands. Specify --endpoint-mode=regional or --endpoint-mode=regional-preferred to make API requests with regional endpoints.$$$Cloud SQL$$$Updated cloud-sql-proxy packaged component to use 2.22.0 of the Cloud SQL Proxy.$$$Cloud Storage$$$Added --set-object-acls-from-file flag to gcloud storage batch-operations jobs create.$$$Compute Engine$$$Promoted --source-machine-image and --source-machine-image-disk-device-name flags for gcloud compute disks create in beta.$$$Network Security$$$Promoted project scoping for gcloud network-security security-profiles commands (delete; describe; export; import; list) to GA.$$$Promoted project scoping for gcloud network-security security-profiles custom-intercept commands (create; delete; describe; list; update) to GA.$$$Promoted project scoping for gcloud network-security security-profiles custom-mirroring commands (create; delete; describe; list; update) to GA.$$$Promoted project scoping for gcloud network-security security-profiles threat-prevention commands (add-override; create; delete; delete-override; describe; list; list-overrides; update-override) to GA.$$$Promoted project scoping for gcloud network-security security-profiles url-filtering commands (create; delete; describe; list) to GA.$$$Promoted project scoping for gcloud network-security security-profile-groups commands (create; delete; describe; list; update) to GA.

571.0.0 (2026-06-02)$$$Google Cloud CLI$$$Updated Windows PuTTY executables to version 0.83.$$$This includes a fix for the issue reported at https://issuetracker.google.com/issues/515628403.$$$Fixed issue where gcloud compute scp file transfers were extremely slow when using --tunnel-through-iap in PY 3.14.$$$AlloyDB$$$Added flag --labels to gcloud alloydb instances create|create-secondary commands to assign labels to an instance.$$$Added flags --update-labels; --remove-labels; and --clear-labels to gcloud alloydb instances update commands to update; remove; or clear labels for an instance.$$$BigLake$$$Promoted gcloud biglake hive tables to beta.$$$Cloud Dataproc$$$Added --confidential-compute-type flag to gcloud dataproc clusters create to allow specifying the Confidential Computing technology (e.g.; SEV; SEV_SNP; TDX).$$$Deprecated --confidential-compute flag for gcloud dataproc clusters create. Use --confidential-compute-type flag instead.$$$Cloud Datastream$$$Added --sql-where-clause flag to gcloud datastream objects start-backfill; which starts a partial backfill on the specified object.$$$Cloud NetApp$$$Added gcloud netapp volumes start-split and get-split-status commands to alpha and beta tracks of the volumes group.$$$Added gcloud netapp storage-pool update-backup-config command to GA track.$$$Added --ontap-source flag to gcloud netapp backup-vaults backups create GA track.$$$Added gcloud netapp storage-pools list-backup-configs command to the GA track of the storage-pools group.$$$Added gcloud netapp storage-pools restore-volume command to GA track.$$$Cloud Run$$$Added regional endpoint support for gcloud beta run worker-pools and gcloud beta run jobs executions tasks commands. Specify --endpoint-mode=regional or --endpoint-mode=regional-preferred to make API requests with regional endpoints.$$$Cloud SQL$$$Updated cloud-sql-proxy packaged component to use 2.22.0 of the Cloud SQL Proxy.$$$Cloud Storage$$$Added --set-object-acls-from-file flag to gcloud storage batch-operations jobs create.$$$Compute Engine$$$Promoted --source-machine-image and --source-machine-image-disk-device-name flags for gcloud compute disks create in beta.$$$Network Security$$$Promoted project scoping for gcloud network-security security-profiles commands (delete; describe; export; import; list) to GA.$$$Promoted project scoping for gcloud network-security security-profiles custom-intercept commands (create; delete; describe; list; update) to GA.$$$Promoted project scoping for gcloud network-security security-profiles custom-mirroring commands (create; delete; describe; list; update) to GA.$$$Promoted project scoping for gcloud network-security security-profiles threat-prevention commands (add-override; create; delete; delete-override; describe; list; list-overrides; update-override) to GA.$$$Promoted project scoping for gcloud network-security security-profiles url-filtering commands (create; delete; describe; list) to GA.$$$Promoted project scoping for gcloud network-security security-profile-groups commands (create; delete; describe; list; update) to GA.

570.0.0 (2026-05-27)$$$Google Cloud CLI$$$Rebuilt Windows bundled Python for the gcloud CLI with cryptography 46.0.7 and pyOpenSSL 26.0.0.$$$Updated Linux bundled Python for the gcloud CLI to 3.14.5.$$$Updated the gcloud CLI authentication caching logic to natively store and refresh Regional Access Boundary (RAB) data.$$$Reverted Windows PuTTY executables to version 0.81 due to a breakage.$$$AlloyDB$$$Added flag --labels to gcloud beta alloydb instances create|create-secondary commands assign labels to an instance.$$$Added flags --update-labels; --remove-labels; and --clear-labels to gcloud beta alloydb instances update commands to update; remove; or clear labels for an instance.$$$Beyondcorp$$$Enabled IAM conditions support for add-iam-policy-binding and remove-iam-policy-binding commands under gcloud beyondcorp security-gateways and gcloud beyondcorp security-gateways applications. Added sample values for conditions in command help text.$$$BigLake$$$Promoted gcloud biglake hive catalogs to beta.$$$Promoted gcloud biglake hive databases to beta.$$$Promoted federated unity catalog flags of gcloud biglake iceberg catalogs to beta.$$$Promoted --primary-location flag of gcloud biglake iceberg catalogs to GA.$$$BigQuery$$$Remove --alpha=reservation_groups in bq mk; show; ls and rm --reservation_group operations.$$$Added support for table identifiers in the form of project.catalog.namespace.table.$$$Added support for dataset identifiers in the form of catalog.namespace.$$$Added support for showing and removing row access policies using the bq show and bq rm commands.$$$Fixed NoneType error handling and short assignment ID parsing in bq mk --reservation_assignment when reservation_id is not specified.$$$Added support for specifying a reservation assignment name in bq mk --reservation_assignment.$$$Added support for principal field for the bq mk; bq ls; and bq show commands with the flag --reservation_assignment.$$$Removed the frozen dependency on an old version of absl.$$$Cloud Alerting$$$Fixing List Alerts gcloud CLI example commands.$$$Cloud Backup DR$$$Added --use-project-service-account flag for gcloud backup-dr backups restore compute and gcloud backup-dr backups restore disk.$$$Cloud Dataplex$$$Added --all-schema-fields flag to gcloud dataplex context lookup to include all schema fields in the context.$$$Cloud Key Management Service$$$Added --project flag to gcloud kms autokey-config describe to support project-level Autokey configurations.$$$Updated gcloud kms autokey-config update to support project-level Autokey configurations.$$$Updated gcloud kms autokey-config update to support the key-project-resolution-mode field.$$$Cloud Run$$$Added interactive prompt instead of erroring out when project is not specified in gcloud beta run deploy.$$$Added support for suggesting project and region from Artifact Registry URL in gcloud beta run deploy.$$$Added --[no]--ssh flag to gcloud beta run deploy and gcloud beta run services update to enable or disable SSH access to the Cloud Run services container instances.$$$Added --domain flag to gcloud beta run deploy to create domain mappings on the fly during service deployment.$$$Cloud Spanner$$$Add --labels flag to gcloud spanner instances create command to support specifying labels during instance creation.$$$Add --update-labels; --clear-labels and --remove-labels flags to gcloud spanner instances update command to support updating labels.$$$Cloud Storage$$$Added --enable-ingest-on-write flag to gcloud storage buckets anywhere-caches update to support enabling cache ingest on write; and enabled rendering of the parsed property in the anywhere-caches describe command output.$$$Added --enable-ingest-on-write flag to gcloud storage buckets anywhere-caches create to support enabling cache ingest on write.$$$Cloud Workstations$$$Added --disk-archive-timeout flag to gcloud workstations configs create and gcloud workstations configs update commands.$$$Added --workstation-authorization-url and --workstation-launch-url flags to gcloud works

570.0.0 (2026-05-27)$$$Google Cloud CLI$$$Rebuilt Windows bundled Python for the gcloud CLI with cryptography 46.0.7 and pyOpenSSL 26.0.0.$$$Updated Linux bundled Python for the gcloud CLI to 3.14.5.$$$Updated the gcloud CLI authentication caching logic to natively store and refresh Regional Access Boundary (RAB) data.$$$Reverted Windows PuTTY executables to version 0.81 due to a breakage.$$$AlloyDB$$$Added flag --labels to gcloud beta alloydb instances create|create-secondary commands assign labels to an instance.$$$Added flags --update-labels; --remove-labels; and --clear-labels to gcloud beta alloydb instances update commands to update; remove; or clear labels for an instance.$$$Beyondcorp$$$Enabled IAM conditions support for add-iam-policy-binding and remove-iam-policy-binding commands under gcloud beyondcorp security-gateways and gcloud beyondcorp security-gateways applications. Added sample values for conditions in command help text.$$$BigLake$$$Promoted gcloud biglake hive catalogs to beta.$$$Promoted gcloud biglake hive databases to beta.$$$Promoted federated unity catalog flags of gcloud biglake iceberg catalogs to beta.$$$Promoted --primary-location flag of gcloud biglake iceberg catalogs to GA.$$$BigQuery$$$Remove --alpha=reservation_groups in bq mk; show; ls and rm --reservation_group operations.$$$Added support for table identifiers in the form of project.catalog.namespace.table.$$$Added support for dataset identifiers in the form of catalog.namespace.$$$Added support for showing and removing row access policies using the bq show and bq rm commands.$$$Fixed NoneType error handling and short assignment ID parsing in bq mk --reservation_assignment when reservation_id is not specified.$$$Added support for specifying a reservation assignment name in bq mk --reservation_assignment.$$$Added support for principal field for the bq mk; bq ls; and bq show commands with the flag --reservation_assignment.$$$Removed the frozen dependency on an old version of absl.$$$Cloud Alerting$$$Fixing List Alerts gcloud CLI example commands.$$$Cloud Backup DR$$$Added --use-project-service-account flag for gcloud backup-dr backups restore compute and gcloud backup-dr backups restore disk.$$$Cloud Dataplex$$$Added --all-schema-fields flag to gcloud dataplex context lookup to include all schema fields in the context.$$$Cloud Key Management Service$$$Added --project flag to gcloud kms autokey-config describe to support project-level Autokey configurations.$$$Updated gcloud kms autokey-config update to support project-level Autokey configurations.$$$Updated gcloud kms autokey-config update to support the key-project-resolution-mode field.$$$Cloud Run$$$Added interactive prompt instead of erroring out when project is not specified in gcloud beta run deploy.$$$Added support for suggesting project and region from Artifact Registry URL in gcloud beta run deploy.$$$Added --[no]--ssh flag to gcloud beta run deploy and gcloud beta run services update to enable or disable SSH access to the Cloud Run services container instances.$$$Added --domain flag to gcloud beta run deploy to create domain mappings on the fly during service deployment.$$$Cloud Spanner$$$Add --labels flag to gcloud spanner instances create command to support specifying labels during instance creation.$$$Add --update-labels; --clear-labels and --remove-labels flags to gcloud spanner instances update command to support updating labels.$$$Cloud Storage$$$Added --enable-ingest-on-write flag to gcloud storage buckets anywhere-caches update to support enabling cache ingest on write; and enabled rendering of the parsed property in the anywhere-caches describe command output.$$$Added --enable-ingest-on-write flag to gcloud storage buckets anywhere-caches create to support enabling cache ingest on write.$$$Cloud Workstations$$$Added --disk-archive-timeout flag to gcloud workstations configs create and gcloud workstations configs update commands.$$$Added --workstation-authorization-url and --workstation-launch-url flags to gcloud works

569.0.0 (2026-05-19)$$$Breaking Changes$$$(Google Cloud CLI) The anthoscli component is no longer included by default in Debian and RPM package installations to significantly reduce the default install size. Users who require anthoscli can install it manually by running gcloud components install anthoscli or sudo apt-get install google-cloud-cli-anthoscli.$$$Google Cloud CLI$$$Updated Windows PuTTY executables to version 0.83.$$$Updated Windows bundled Python for the gcloud CLI to 3.14.4.$$$AI$$$Fixed --format field selection in gcloud ai model-garden models list.$$$Anthos$$$Updated anthos-cli with newer go version and library dependencies.$$$App Engine$$$Updated the Java SDK to version 5.0.2 build from the open source project https://github.com/GoogleCloudPlatform/appengine-java-standard/releases/tag/v5.0.2.$$$Upgraded Java Eclipse Jetty Web Server version to 12.1.9.$$$Certificate Authority Service$$$Added support for allowing requesters to specify the certificate validity start time; configurable via the CA pools issuance policy.$$$Added --requested-not-before-time flag to gcloud privateca certificates create.$$$Cloud Dataproc$$$Added --resource-manager-tag flag to gcloud dataproc batches submit and gcloud dataproc sessions create commands to allow associating Resource Manager Tags with compute resources.$$$Cloud Key Management Service$$$Added --fallback-scope flag to gcloud kms inventory get-protected-resources-summary.$$$Updated gcloud kms inventory search-protected-resources to allow projects in scope flag while still supporting organization scopes.$$$Added --project flag to gcloud beta kms autokey-config describe and gcloud beta kms autokey-config update to support project-level Autokey configurations.$$$Updated gcloud beta kms autokey-config update to support the key-resolution-mode field.$$$Cloud SQL$$$Added MySQL 9.7 to supported database versions.$$$Cloud Storage$$$Promoted gcloud storage intelligence-findings commands to GA.$$$Compute Engine$$$Added --request-body-to-exclude flag to the alpha and beta levels of:$$$gcloud compute security-policies rules add-preconfig-waf-exclusion$$$gcloud compute security-policies rules remove-preconfig-waf-exclusion$$$gcloud compute org-security-policies rules add-preconfig-waf-exclusion$$$gcloud compute org-security-policies rules remove-preconfig-waf-exclusion$$$Promoted service-class-id sub-argument of --network-interface flag on gcloud compute instances create to GA.$$$Promoted service-class-id sub-argument of --network-interface flag on gcloud compute instance-templates create to GA.$$$Promoted --service-class-id flag on gcloud compute instances network-interfaces add to GA.$$$Promoted gcloud compute health-sources get-health and gcloud compute composite-health-checks get-health to beta and GA.$$$Removed client-side validation for --disks size field in gcloud compute sole-tenancy node-templates create. The API will now perform server-side validation for disk size.$$$Promoted flags related to in-flight balancing to v1:$$$--max-in-flight-requests of gcloud compute backend-service create.$$$--max-in-flight-requests-per-instance of gcloud compute backend-service create.$$$--max-in-flight-requests-per-endpoint of gcloud compute backend-service create.$$$--traffic-duration of gcloud compute backend-service create.$$$--max-in-flight-requests of gcloud compute backend-service update.$$$--max-in-flight-requests-per-instance of gcloud compute backend-service update.$$$--max-in-flight-requests-per-endpoint of gcloud compute backend-service update.$$$--traffic-duration of gcloud compute backend-service update.$$$Compute Firewall Policies$$$Promoted --target-type and --target-forwarding-rules flags of gcloud compute network-firewall-policies rules create and gcloud compute network-firewall-policies rules update to GA.$$$Database Migration$$$Allowed --ssl-type=REQUIRED without specifying certificates.$$$Kubernetes Engine$$$Added --add-maintenance-exclusion-until-end-of-support and --remove-maintenance-exclusion-until-end-of-support flag i

569.0.0 (2026-05-19)$$$Breaking Changes$$$(Google Cloud CLI) The anthoscli component is no longer included by default in Debian and RPM package installations to significantly reduce the default install size. Users who require anthoscli can install it manually by running gcloud components install anthoscli or sudo apt-get install google-cloud-cli-anthoscli.$$$Google Cloud CLI$$$Updated Windows PuTTY executables to version 0.83.$$$Updated Windows bundled Python for the gcloud CLI to 3.14.4.$$$AI$$$Fixed --format field selection in gcloud ai model-garden models list.$$$Anthos$$$Updated anthos-cli with newer go version and library dependencies.$$$App Engine$$$Updated the Java SDK to version 5.0.2 build from the open source project https://github.com/GoogleCloudPlatform/appengine-java-standard/releases/tag/v5.0.2.$$$Upgraded Java Eclipse Jetty Web Server version to 12.1.9.$$$Certificate Authority Service$$$Added support for allowing requesters to specify the certificate validity start time; configurable via the CA pools issuance policy.$$$Added --requested-not-before-time flag to gcloud privateca certificates create.$$$Cloud Dataproc$$$Added --resource-manager-tag flag to gcloud dataproc batches submit and gcloud dataproc sessions create commands to allow associating Resource Manager Tags with compute resources.$$$Cloud Key Management Service$$$Added --fallback-scope flag to gcloud kms inventory get-protected-resources-summary.$$$Updated gcloud kms inventory search-protected-resources to allow projects in scope flag while still supporting organization scopes.$$$Added --project flag to gcloud beta kms autokey-config describe and gcloud beta kms autokey-config update to support project-level Autokey configurations.$$$Updated gcloud beta kms autokey-config update to support the key-resolution-mode field.$$$Cloud SQL$$$Added MySQL 9.7 to supported database versions.$$$Cloud Storage$$$Promoted gcloud storage intelligence-findings commands to GA.$$$Compute Engine$$$Added --request-body-to-exclude flag to the alpha and beta levels of:$$$gcloud compute security-policies rules add-preconfig-waf-exclusion$$$gcloud compute security-policies rules remove-preconfig-waf-exclusion$$$gcloud compute org-security-policies rules add-preconfig-waf-exclusion$$$gcloud compute org-security-policies rules remove-preconfig-waf-exclusion$$$Promoted service-class-id sub-argument of --network-interface flag on gcloud compute instances create to GA.$$$Promoted service-class-id sub-argument of --network-interface flag on gcloud compute instance-templates create to GA.$$$Promoted --service-class-id flag on gcloud compute instances network-interfaces add to GA.$$$Promoted gcloud compute health-sources get-health and gcloud compute composite-health-checks get-health to beta and GA.$$$Removed client-side validation for --disks size field in gcloud compute sole-tenancy node-templates create. The API will now perform server-side validation for disk size.$$$Promoted flags related to in-flight balancing to v1:$$$--max-in-flight-requests of gcloud compute backend-service create.$$$--max-in-flight-requests-per-instance of gcloud compute backend-service create.$$$--max-in-flight-requests-per-endpoint of gcloud compute backend-service create.$$$--traffic-duration of gcloud compute backend-service create.$$$--max-in-flight-requests of gcloud compute backend-service update.$$$--max-in-flight-requests-per-instance of gcloud compute backend-service update.$$$--max-in-flight-requests-per-endpoint of gcloud compute backend-service update.$$$--traffic-duration of gcloud compute backend-service update.$$$Compute Firewall Policies$$$Promoted --target-type and --target-forwarding-rules flags of gcloud compute network-firewall-policies rules create and gcloud compute network-firewall-policies rules update to GA.$$$Database Migration$$$Allowed --ssl-type=REQUIRED without specifying certificates.$$$Kubernetes Engine$$$Added --add-maintenance-exclusion-until-end-of-support and --remove-maintenance-exclusion-until-end-of-support flag i

568.0.0 (2026-05-12)$$$Google Cloud CLI$$$Updated Linux bundled Python for the gcloud CLI to 3.14.4 with pyOpenSSL 26.0.0 and cryptography 46.0.7.$$$Apigee$$$Added support for DRZ endpoints for SA region.$$$App Optimize$$$Modified gcloud beta app-optimize reports read to show the Report data in a tabular format by default.$$$Cloud Backup DR$$$Added --compute-instance-properties flag to gcloud backup-dr backup-plans create and update to support workload-specific properties for Compute Engine instance backups.$$$Cloud Composer$$$Added --cloud-run-functions-routing flag to gcloud composer environments create and gcloud composer environments update (alpha and beta).$$$Cloud Firestore$$$Added search-config option to field-config flag in gcloud firestore indexes composite create in beta.$$$Added search-index-options option to gcloud firestore indexes composite create in beta.$$$Cloud Identity-Aware Proxy$$$Promoted gcloud iap tcp IAM commands to beta.$$$Compute Engine$$$Promoted gcloud compute global-vm-extension-policies to GA.$$$Promoted PASSTHROUGH_LOAD_BALANCER_AVAILABILITY_GROUP0 and PASSTHROUGH_LOAD_BALANCER_AVAILABILITY_GROUP1 values of --purpose flag on gcloud compute addresses create to beta.$$$Promoted --view flag on gcloud compute forwarding-rules describe to beta.$$$Added support for displaying dynamic fields (such as TERMINATION_TIMESTAMP) to gcloud compute instance-groups managed list-instances in beta.$$$Kpt$$$Updated kpt to v1.0.0-beta.62. See https://github.com/kptdev/kpt/releases/tag/v1.0.0-beta.62 for more details.$$$Kubernetes Engine$$$Added --node-pool-upgrade-concurrency-config flag in gcloud container clusters create/create-auto/update.$$$Added --node-architecture-taint-behavior flag to gcloud container clusters create; gcloud container node-pools create and gcloud container node-pools update to control architecture taints for nodes specifically for ARM nodes.$$$Added gcloud container container workload profiles manifests create command. This command Provides optimized deployment manifests for non-inference workloads running on GKE.$$$Pubsub Emulator$$$Add support for keep alive pings.$$$Workbench$$$Added --data-disk-resource-policies flag to gcloud workbench instances update to support attaching and updating snapshot schedule resource policies on data disks.

566.0.0 (2026-04-28)$$$Google Cloud CLI$$$Made gcloud-man-pages component optional. It is no longer included in the default installation for packaged distributions (Debian/RPM). Users should prefer using --help flag.$$$AI$$$Fixed region choice for custom weights deployment in gcloud ai model-garden models deploy.$$$AI Platform$$$Added gcloud beta ai semantic-governance-policies command group. Commands in this group allow users to manage natural-language governance policies for their agents and tools in Agent Registry. For more information; see Configure semantic governance policies.$$$$$$Added gcloud beta ai semantic-governance-policy-engine command group. Commands in this group allow users to manage the semantic governance policy engine configuration in Vertex AI.$$$$$$AlloyDB$$$Promoted --backupdr-backup-plan flag for gcloud alloydb clusters create to GA. This flag allows creating an association with a BackupDR backup plan during cluster creation.$$$Apigee$$$Added support for DRZ endpoints for US; IN and EU region.$$$App Engine$$$Updated the Java SDK to version 5.0.1 build from the open source project https://github.com/GoogleCloudPlatform/appengine-java-standard/releases/tag/v5.0.1.$$$App Lifecycle Manager$$$Added Application Design Center integration flags to gcloud app-lifecycle-manager commands.$$$Added --application-template; --application-template-revision; and --clear-application-template flags to gcloud app-lifecycle-manager saas create and update to manage Application Templates.$$$Added --app-params-group; --scope-type; and --clear-app-params flags to gcloud app-lifecycle-manager unit-kinds create and update to manage Application parameters.$$$Added --application and --clear-application flags to gcloud app-lifecycle-manager units create and update to manage Application references.$$$Added gcloud beta app-lifecycle-manager flags command group to support Feature Flags.$$$Assured Workloads$$$Added SPAIN_DATA_BOUNDARY_BY_TELEFONICA as option for --partner for gcloud assured workloads create.$$$Certificate Authority Service$$$Added --filter flag to gcloud privateca root list. The flag is able to allow filtering results based on specified boolean expression.$$$Cloud Backup DR$$$Promoted gcloud backup-dr to beta.$$$Cloud Bigtable$$$Rebuilt cbt cli with library-X version 1.25.2 which fixed CVE-2025-61726; CVE-2026-34986; CVE-2025-58181; and CVE-2026-24051.$$$Cloud Dataflow$$$Added --launcher-vm-timeout-secs flag to gcloud dataflow flex-template run command; allowing users to configure the timeout duration for the launcher VM.$$$Cloud Dataplex$$$Added gcloud dataplex entries modify command.$$$Added --use-user-credential and --service-account flags to gcloud dataplex datascans create data-quality command.$$$Cloud Dataproc$$$Removed legacy --tier flag from gcloud dataproc clusters create. Please use the new flag --engine to create clusters with Lightning Engine or the default engine.$$$Cloud Firestore$$$Added --concurrency-mode flag to gcloud firestore databases create and gcloud firestore databases update commands to allow configuring the concurrency control mode of a Firestore database.$$$Added --expiration-offset flag to gcloud firestore fields ttls update (when used with --enable-ttl) to allow an offset to be specified when updating TTL configuration.$$$Cloud Key Management Service$$$Updated gcloud kms single-tenant-hsm create to include --key-portability-enabled flag; allowing users to allow instances to use key portability features.$$$Cloud Logging$$$Added list command to gcloud logging recent-queries.$$$Added create; delete; describe; list; and update commands to gcloud logging saved-queries.$$$Cloud NetApp$$$Added --cross-project-vault to gcloud beta netapp backup-vaults create.$$$Cloud Run$$$Fixed an issue where GPU zonal redundancy setting is not cleared when --gpu=0 flag is specified to clear GPU settings.$$$Cloud SQL$$$Updated cloud-sql-proxy packaged component to use 2.21.3 of the Cloud SQL Proxy.$$$Cloud Storage$$$Updated gcloud-crc32c with latest version of go

566.0.0 (2026-04-28)$$$Google Cloud CLI$$$Made gcloud-man-pages component optional. It is no longer included in the default installation for packaged distributions (Debian/RPM). Users should prefer using --help flag.$$$AI$$$Fixed region choice for custom weights deployment in gcloud ai model-garden models deploy.$$$AI Platform$$$Added gcloud beta ai semantic-governance-policies command group. Commands in this group allow users to manage natural-language governance policies for their agents and tools in Agent Registry. For more information; see Configure semantic governance policies.$$$$$$Added gcloud beta ai semantic-governance-policy-engine command group. Commands in this group allow users to manage the semantic governance policy engine configuration in Vertex AI.$$$$$$AlloyDB$$$Promoted --backupdr-backup-plan flag for gcloud alloydb clusters create to GA. This flag allows creating an association with a BackupDR backup plan during cluster creation.$$$Apigee$$$Added support for DRZ endpoints for US; IN and EU region.$$$App Engine$$$Updated the Java SDK to version 5.0.1 build from the open source project https://github.com/GoogleCloudPlatform/appengine-java-standard/releases/tag/v5.0.1.$$$App Lifecycle Manager$$$Added Application Design Center integration flags to gcloud app-lifecycle-manager commands.$$$Added --application-template; --application-template-revision; and --clear-application-template flags to gcloud app-lifecycle-manager saas create and update to manage Application Templates.$$$Added --app-params-group; --scope-type; and --clear-app-params flags to gcloud app-lifecycle-manager unit-kinds create and update to manage Application parameters.$$$Added --application and --clear-application flags to gcloud app-lifecycle-manager units create and update to manage Application references.$$$Added gcloud beta app-lifecycle-manager flags command group to support Feature Flags.$$$Assured Workloads$$$Added SPAIN_DATA_BOUNDARY_BY_TELEFONICA as option for --partner for gcloud assured workloads create.$$$Certificate Authority Service$$$Added --filter flag to gcloud privateca root list. The flag is able to allow filtering results based on specified boolean expression.$$$Cloud Backup DR$$$Promoted gcloud backup-dr to beta.$$$Cloud Bigtable$$$Rebuilt cbt cli with library-X version 1.25.2 which fixed CVE-2025-61726; CVE-2026-34986; CVE-2025-58181; and CVE-2026-24051.$$$Cloud Dataflow$$$Added --launcher-vm-timeout-secs flag to gcloud dataflow flex-template run command; allowing users to configure the timeout duration for the launcher VM.$$$Cloud Dataplex$$$Added gcloud dataplex entries modify command.$$$Added --use-user-credential and --service-account flags to gcloud dataplex datascans create data-quality command.$$$Cloud Dataproc$$$Removed legacy --tier flag from gcloud dataproc clusters create. Please use the new flag --engine to create clusters with Lightning Engine or the default engine.$$$Cloud Firestore$$$Added --concurrency-mode flag to gcloud firestore databases create and gcloud firestore databases update commands to allow configuring the concurrency control mode of a Firestore database.$$$Added --expiration-offset flag to gcloud firestore fields ttls update (when used with --enable-ttl) to allow an offset to be specified when updating TTL configuration.$$$Cloud Key Management Service$$$Updated gcloud kms single-tenant-hsm create to include --key-portability-enabled flag; allowing users to allow instances to use key portability features.$$$Cloud Logging$$$Added list command to gcloud logging recent-queries.$$$Added create; delete; describe; list; and update commands to gcloud logging saved-queries.$$$Cloud NetApp$$$Added --cross-project-vault to gcloud beta netapp backup-vaults create.$$$Cloud Run$$$Fixed an issue where GPU zonal redundancy setting is not cleared when --gpu=0 flag is specified to clear GPU settings.$$$Cloud SQL$$$Updated cloud-sql-proxy packaged component to use 2.21.3 of the Cloud SQL Proxy.$$$Cloud Storage$$$Updated gcloud-crc32c with latest version of go

565.0.0 (2026-04-14)$$$AI Platform$$$Added gcloud beta ai semantic-governance-policies command group. Commands in this group allow users to manage natural-language governance policies for their agents and tools in Agent Registry. For more information; see Configure semantic governance policies.$$$Beyondcorp$$$Added add-iam-policy-binding and remove-iam-policy-binding commands to gcloud beyondcorp security-gateways and gcloud beyondcorp security-gateways applications.$$$BigLake$$$Promoted gcloud biglake iceberg tables to GA.$$$Cloud Bigtable$$$Added --edition flag to gcloud bigtable instances create and gcloud bigtable instances update to support Bigtable Editions.$$$Added gcloud beta bigtable memory-layers describe and gcloud beta bigtable memory-layers update commands to read; enable; or disable Cloud Bigtable memory layers.$$$Added --use-memory-layer and --no-use-memory-layer flags to gcloud beta bigtable app-profiles create and gcloud beta bigtable app-profiles update to support enabling and disabling memory layer usage for app profiles.$$$Cloud Dataproc$$$Added --master-attached-disks; --worker-attached-disks; and secondary-worker-attached-disks flags to gcloud dataproc clusters create to allow attaching non-boot disks to group of instances.$$$Added --engine flag to gcloud dataproc clusters create to allow creating clusters with Lightning Engine or the default engine.$$$Cloud Interconnect$$$Add a new section DEFAULTABLE PER-INTERCONNECT FLAGS for gcloud compute interconnects groups create-members.$$$Cloud Memorystore$$$Added new node types (redis-highcpu-medium; redis-standard-large; redis-highmem-2xlarge) for Memorystore for Redis Cluster.$$$Added new node types (custom-pico; custom-micro; custom-mini; highcpu-medium; standard-large; highmem-2xlarge) for Memorystore for Valkey.$$$Cloud NetApp$$$Added --scale-type flag to gcloud netapp storage-pools create to specify the storage pool scale-type (e.g.; SCALEOUT) upon creation.$$$Added --large-capacity-config flag to gcloud netapp volumes create to specify the large-capacity-config upon creation.$$$Added --mode flag to GA track for gcloud netapp storage-pools create.$$$Added gcloud netapp storage-pool execute command to GA track of the storage-pool group.$$$Cloud Run$$$Promoted volumes shortcut (allowing optional name parameter in --add-volume flag when mount-path is provided) to gcloud run command groups.$$$Promoted gcloud run flags --scaling-cpu-target and --scaling-concurrency-target to beta.$$$Promoted gcloud run worker-pools; gcloud run worker-pools revisions and gcloud run worker-pools logs to GA.$$$Cloud Storage$$$Updated gcloud-crc32c to support computing CRC32C checksums for data chunks.$$$Compute Engine$$$Promoted gcloud compute addresses update to GA.$$$Promoted regional backend buckets and aggregated list support in gcloud compute backend-buckets to GA.$$$Promoted regional backend bucket support in gcloud compute url-maps to GA.$$$Promoted gcloud compute zone-vm-extension-policies to GA.$$$Database Migration$$$Added --use-postgres-native flag to gcloud database-migration migration-jobs create command to allow users to create native postgres migrations.$$$Network Connectivity$$$promoting gcloud networkconnectivity transports from beta.$$$added transports create flag group in beta for NCC Hub fields.$$$set transports create --stack_type default value to ipv4-only because API requires it is set.$$$Network Security$$$Added describe command to gcloud network-security security-profiles threat-prevention.$$$Service Health$$$Added gcloud service-health command group to beta.$$$Vector Search$$$Added --encryption-spec-crypto-key-name flag to gcloud vector-search collections create to allow creating collections with CMEK encryption.

565.0.0 (2026-04-14)$$$AI Platform$$$Added gcloud beta ai semantic-governance-policies command group. Commands in this group allow users to manage natural-language governance policies for their agents and tools in Agent Registry. For more information; see Configure semantic governance policies.$$$Beyondcorp$$$Added add-iam-policy-binding and remove-iam-policy-binding commands to gcloud beyondcorp security-gateways and gcloud beyondcorp security-gateways applications.$$$BigLake$$$Promoted gcloud biglake iceberg tables to GA.$$$Cloud Bigtable$$$Added --edition flag to gcloud bigtable instances create and gcloud bigtable instances update to support Bigtable Editions.$$$Added gcloud beta bigtable memory-layers describe and gcloud beta bigtable memory-layers update commands to read; enable; or disable Cloud Bigtable memory layers.$$$Added --use-memory-layer and --no-use-memory-layer flags to gcloud beta bigtable app-profiles create and gcloud beta bigtable app-profiles update to support enabling and disabling memory layer usage for app profiles.$$$Cloud Dataproc$$$Added --master-attached-disks; --worker-attached-disks; and secondary-worker-attached-disks flags to gcloud dataproc clusters create to allow attaching non-boot disks to group of instances.$$$Added --engine flag to gcloud dataproc clusters create to allow creating clusters with Lightning Engine or the default engine.$$$Cloud Interconnect$$$Add a new section DEFAULTABLE PER-INTERCONNECT FLAGS for gcloud compute interconnects groups create-members.$$$Cloud Memorystore$$$Added new node types (redis-highcpu-medium; redis-standard-large; redis-highmem-2xlarge) for Memorystore for Redis Cluster.$$$Added new node types (custom-pico; custom-micro; custom-mini; highcpu-medium; standard-large; highmem-2xlarge) for Memorystore for Valkey.$$$Cloud NetApp$$$Added --scale-type flag to gcloud netapp storage-pools create to specify the storage pool scale-type (e.g.; SCALEOUT) upon creation.$$$Added --large-capacity-config flag to gcloud netapp volumes create to specify the large-capacity-config upon creation.$$$Added --mode flag to GA track for gcloud netapp storage-pools create.$$$Added gcloud netapp storage-pool execute command to GA track of the storage-pool group.$$$Cloud Run$$$Promoted volumes shortcut (allowing optional name parameter in --add-volume flag when mount-path is provided) to gcloud run command groups.$$$Promoted gcloud run flags --scaling-cpu-target and --scaling-concurrency-target to beta.$$$Promoted gcloud run worker-pools; gcloud run worker-pools revisions and gcloud run worker-pools logs to GA.$$$Cloud Storage$$$Updated gcloud-crc32c to support computing CRC32C checksums for data chunks.$$$Compute Engine$$$Promoted gcloud compute addresses update to GA.$$$Promoted regional backend buckets and aggregated list support in gcloud compute backend-buckets to GA.$$$Promoted regional backend bucket support in gcloud compute url-maps to GA.$$$Promoted gcloud compute zone-vm-extension-policies to GA.$$$Database Migration$$$Added --use-postgres-native flag to gcloud database-migration migration-jobs create command to allow users to create native postgres migrations.$$$Network Connectivity$$$promoting gcloud networkconnectivity transports from beta.$$$added transports create flag group in beta for NCC Hub fields.$$$set transports create --stack_type default value to ipv4-only because API requires it is set.$$$Network Security$$$Added describe command to gcloud network-security security-profiles threat-prevention.$$$Service Health$$$Added gcloud service-health command group to beta.$$$Vector Search$$$Added --encryption-spec-crypto-key-name flag to gcloud vector-search collections create to allow creating collections with CMEK encryption.

564.0.0 (2026-04-07)$$$Breaking Changes$$$(Saas Runtime) Deprecated gcloud saas-runtime command group. Use gcloud app-lifecycle-manager instead.$$$Google Cloud CLI$$$Updated Linux bundled Python for the gcloud CLI to 3.13.11 with grpcio v1.80.0.$$$Updated Windows bundled Python for the gcloud CLI with grpcio v1.80.0 and setuptools v80.10.2 which fixed CVE-2026-23949.$$$Added --check-certs flag to gcloud info --run-diagnostics to troubleshoot certificate validation failures when using proxy servers and custom CA certs.$$$For example; to troubleshoot certificate verification failures for compute.googleapis.com; run: gcloud info --run-diagnostics --check-certs=compute.googleapis.com$$$App Lifecycle Manager$$$Added gcloud app-lifecycle-manager command group to replace gcloud saas-runtime.$$$BigLake$$$Added list pagination to gcloud biglake iceberg catalogs.$$$Added --description flag to gcloud biglake iceberg catalogs create/update.$$$Cloud Data Fusion$$$Added regional endpoint support for gcloud beta data-fusion. Specify --endpoint-mode=regional or --endpoint-mode=regional-preferred to make API requests with regional endpoints.$$$Cloud Firestore$$$Added support for search indexes in gcloud firestore indexes composite and gcloud firestore indexes describe.$$$Cloud Run$$$Added support for volumes with type=ephemeral-disk to gcloud run deploy; gcloud run services update; gcloud run jobs deploy; gcloud run jobs update; gcloud run worker-pools deploy and gcloud run worker-pools update in beta.$$$Added regional endpoint support for the following gcloud beta run commands:$$$gcloud beta run deploy$$$gcloud beta run services$$$gcloud beta run revisions$$$gcloud beta run jobs$$$gcloud beta run executions Specify --endpoint-mode=regional or --endpoint-mode=regional-preferred to make API requests with regional endpoints.$$$Supported build arguments in gcloud run compose up.$$$Cloud Storage$$$Promoted --destination-kms-key-name flag of gcloud storage buckets relocate to GA.$$$Compute Engine$$$Promoted service-class-id sub-argument of --network-interface flag on gcloud compute instances create to GA.$$$Promoted service-class-id sub-argument of --network-interface flag on gcloud compute instance-templates create to GA.$$$Promoted --service-class-id flag on gcloud compute instances network-interfaces add to GA.$$$Promoted gcloud compute health-sources get-health and gcloud compute composite-health-checks get-health to beta and GA.$$$Removed client-side validation for --disks size field in gcloud compute sole-tenancy node-templates create. The API will now perform server-side validation for disk size.$$$Promoted --resource-manager-tags flag for gcloud compute reservations create to beta and GA.$$$Promoted gcloud compute reservations slots get-version to GA.$$$Promoted gcloud compute reservations sub-blocks get-version to GA.$$$Network Connectivity$$$Added --bandwidth=BANDWIDTH flag to gcloud beta network-connectivity transports update.$$$Added --stack-type=STACK_TYPE flag to gcloud beta network-connectivity transports update.$$$Removed default behaviour of --auto-accept flag for gcloud beta network-connectivity transports create

564.0.0 (2026-04-07)$$$Breaking Changes$$$(Saas Runtime) Deprecated gcloud saas-runtime command group. Use gcloud app-lifecycle-manager instead.$$$Google Cloud CLI$$$Updated Linux bundled Python for the gcloud CLI to 3.13.11 with grpcio v1.80.0.$$$Updated Windows bundled Python for the gcloud CLI with grpcio v1.80.0 and setuptools v80.10.2 which fixed CVE-2026-23949.$$$Added --check-certs flag to gcloud info --run-diagnostics to troubleshoot certificate validation failures when using proxy servers and custom CA certs.$$$For example; to troubleshoot certificate verification failures for compute.googleapis.com; run: gcloud info --run-diagnostics --check-certs=compute.googleapis.com$$$App Lifecycle Manager$$$Added gcloud app-lifecycle-manager command group to replace gcloud saas-runtime.$$$BigLake$$$Added list pagination to gcloud biglake iceberg catalogs.$$$Added --description flag to gcloud biglake iceberg catalogs create/update.$$$Cloud Data Fusion$$$Added regional endpoint support for gcloud beta data-fusion. Specify --endpoint-mode=regional or --endpoint-mode=regional-preferred to make API requests with regional endpoints.$$$Cloud Firestore$$$Added support for search indexes in gcloud firestore indexes composite and gcloud firestore indexes describe.$$$Cloud Run$$$Added support for volumes with type=ephemeral-disk to gcloud run deploy; gcloud run services update; gcloud run jobs deploy; gcloud run jobs update; gcloud run worker-pools deploy and gcloud run worker-pools update in beta.$$$Added regional endpoint support for the following gcloud beta run commands:$$$gcloud beta run deploy$$$gcloud beta run services$$$gcloud beta run revisions$$$gcloud beta run jobs$$$gcloud beta run executions Specify --endpoint-mode=regional or --endpoint-mode=regional-preferred to make API requests with regional endpoints.$$$Supported build arguments in gcloud run compose up.$$$Cloud Storage$$$Promoted --destination-kms-key-name flag of gcloud storage buckets relocate to GA.$$$Compute Engine$$$Promoted service-class-id sub-argument of --network-interface flag on gcloud compute instances create to GA.$$$Promoted service-class-id sub-argument of --network-interface flag on gcloud compute instance-templates create to GA.$$$Promoted --service-class-id flag on gcloud compute instances network-interfaces add to GA.$$$Promoted gcloud compute health-sources get-health and gcloud compute composite-health-checks get-health to beta and GA.$$$Removed client-side validation for --disks size field in gcloud compute sole-tenancy node-templates create. The API will now perform server-side validation for disk size.$$$Promoted --resource-manager-tags flag for gcloud compute reservations create to beta and GA.$$$Promoted gcloud compute reservations slots get-version to GA.$$$Promoted gcloud compute reservations sub-blocks get-version to GA.$$$Network Connectivity$$$Added --bandwidth=BANDWIDTH flag to gcloud beta network-connectivity transports update.$$$Added --stack-type=STACK_TYPE flag to gcloud beta network-connectivity transports update.$$$Removed default behaviour of --auto-accept flag for gcloud beta network-connectivity transports create

AI$$$- Added europe-north2 to online prediction supported regions.$$$Added us-west8 to online prediction supported regions.$$$AlloyDB$$$Added the --[no-]observability-config-track-active-query-plan flag to gcloud beta alloydb instances create and gcloud beta alloydb instances update to enable or disable the tracking of active query plans.$$$BigLake$$$Promoted gcloud biglake iceberg namespaces to beta. Create; Update; Delete; Describe; and List commands are now available in beta.$$$Promoted gcloud biglake iceberg tables to beta. Delete; Describe; Get-Iam-Policy; List; Register; and Set-Iam-Policy commands are now available in beta.$$$Cloud DNS$$$Added --skip-soa-update flag to gcloud dns record-sets transaction start and gcloud dns record-sets import to allow initiating transactions without automatically staging an SOA serial number increment.

AI$$$- Added europe-north2 to online prediction supported regions.$$$Added us-west8 to online prediction supported regions.$$$AlloyDB$$$Added the --[no-]observability-config-track-active-query-plan flag to gcloud beta alloydb instances create and gcloud beta alloydb instances update to enable or disable the tracking of active query plans.$$$BigLake$$$Promoted gcloud biglake iceberg namespaces to beta. Create; Update; Delete; Describe; and List commands are now available in beta.$$$Promoted gcloud biglake iceberg tables to beta. Delete; Describe; Get-Iam-Policy; List; Register; and Set-Iam-Policy commands are now available in beta.$$$Cloud DNS$$$Added --skip-soa-update flag to gcloud dns record-sets transaction start and gcloud dns record-sets import to allow initiating transactions without automatically staging an SOA serial number increment.

558.0.0 (2026-02-24)$$$AI$$$Modified --region flag of gcloud ai endpoints to include new online prediction regions.$$$Modified --region flag of gcloud ai models to include new online prediction regions.$$$AlloyDB$$$Added new value POSTGRES_18 to --version flag from gcloud alpha|beta alloydb clusters upgrade to support for upgrading AlloyDB clusters to PostgreSQL 18.$$$Apihub$$$Promoted gcloud apihub surface to GA which allows management of Apihub resources.$$$Cloud Functions$$$Promoted Direct VPC support for gcloud functions deploy to GA. Use flags --network; --subnet; --network-tags; and --direct-vpc-egress to configure Direct VPC egress for functions.$$$Cloud Identity-Aware Proxy$$$Promoted cloud-run resource-type support for IAP CLI to GA.$$$Cloud Key Management Service$$$Added gcloud kms keys versions delete command to support deletion of CryptoKey Versions.$$$Added gcloud kms keys delete command to support deletion of CryptoKeys.$$$Added gcloud kms retired-resources describe command to support retrieval of a RetiredResource.$$$Added gcloud kms retired-resources list command to support retrieval of RetiredResources.$$$Cloud NetApp$$$Added --mode flag to gcloud netapp storage-pools create.$$$Cloud Run$$$Promoted --[no-]iap flag to GA for commands gcloud run deploy; gcloud run services update and gcloud run multi-region-services update.$$$Cloud SQL$$$Added --data-api-access flag to gcloud sql instances create and patch in GA.$$$Cluster Director$$$Promoted gcloud alpha cluster-director to beta.$$$Compute Engine$$$Added --remove-obsolete-endpoint-accept-reject-entries flag to gcloud beta compute service-attachments update to remove entries for Private Service Connect endpoints that are no longer connected.$$$Promoted --resource-manager-tags flag for gcloud compute external-vpn-gateways create to beta.$$$Promoted --resource-manager-tags flag for gcloud compute target-vpn-gateways create to beta.$$$Promoted --resource-manager-tags flag for gcloud compute vpn-gateways create to beta.$$$Promoted --resource-manager-tags flag for gcloud compute vpn-tunnels create to beta.$$$Added --instance-flexibility-policy flag for gcloud compute instance-groups managed create and gcloud compute instance-groups managed update commands in beta.$$$Added CHIP_ERROR as a valid value for --fault-reasons in gcloud compute instances report-host-as-faulty in alpha; beta; and GA.$$$Promoted --target-service flag for gcloud compute service-attachments update to GA.$$$Added --resource-manager-tags flag to gcloud compute images create in beta and GA.$$$Promoted --network-ddos-adaptive-protection; --network-ddos-impacted-baseline-threshold; and --clear-network-ddos-impacted-baseline-threshold flags for gcloud compute security-policies update to beta.$$$Added --resource-manager-tags flag to gcloud compute disks create in beta and GA.$$$Added --resource-manager-tags flag to gcloud compute snapshots create in beta and GA.

558.0.0 (2026-02-24)$$$AI$$$Modified --region flag of gcloud ai endpoints to include new online prediction regions.$$$Modified --region flag of gcloud ai models to include new online prediction regions.$$$AlloyDB$$$Added new value POSTGRES_18 to --version flag from gcloud alpha|beta alloydb clusters upgrade to support for upgrading AlloyDB clusters to PostgreSQL 18.$$$Apihub$$$Promoted gcloud apihub surface to GA which allows management of Apihub resources.$$$Cloud Functions$$$Promoted Direct VPC support for gcloud functions deploy to GA. Use flags --network; --subnet; --network-tags; and --direct-vpc-egress to configure Direct VPC egress for functions.$$$Cloud Identity-Aware Proxy$$$Promoted cloud-run resource-type support for IAP CLI to GA.$$$Cloud Key Management Service$$$Added gcloud kms keys versions delete command to support deletion of CryptoKey Versions.$$$Added gcloud kms keys delete command to support deletion of CryptoKeys.$$$Added gcloud kms retired-resources describe command to support retrieval of a RetiredResource.$$$Added gcloud kms retired-resources list command to support retrieval of RetiredResources.$$$Cloud NetApp$$$Added --mode flag to gcloud netapp storage-pools create.$$$Cloud Run$$$Promoted --[no-]iap flag to GA for commands gcloud run deploy; gcloud run services update and gcloud run multi-region-services update.$$$Cloud SQL$$$Added --data-api-access flag to gcloud sql instances create and patch in GA.$$$Cluster Director$$$Promoted gcloud alpha cluster-director to beta.$$$Compute Engine$$$Added --remove-obsolete-endpoint-accept-reject-entries flag to gcloud beta compute service-attachments update to remove entries for Private Service Connect endpoints that are no longer connected.$$$Promoted --resource-manager-tags flag for gcloud compute external-vpn-gateways create to beta.$$$Promoted --resource-manager-tags flag for gcloud compute target-vpn-gateways create to beta.$$$Promoted --resource-manager-tags flag for gcloud compute vpn-gateways create to beta.$$$Promoted --resource-manager-tags flag for gcloud compute vpn-tunnels create to beta.$$$Added --instance-flexibility-policy flag for gcloud compute instance-groups managed create and gcloud compute instance-groups managed update commands in beta.$$$Added CHIP_ERROR as a valid value for --fault-reasons in gcloud compute instances report-host-as-faulty in alpha; beta; and GA.$$$Promoted --target-service flag for gcloud compute service-attachments update to GA.$$$Added --resource-manager-tags flag to gcloud compute images create in beta and GA.$$$Promoted --network-ddos-adaptive-protection; --network-ddos-impacted-baseline-threshold; and --clear-network-ddos-impacted-baseline-threshold flags for gcloud compute security-policies update to beta.$$$Added --resource-manager-tags flag to gcloud compute disks create in beta and GA.$$$Added --resource-manager-tags flag to gcloud compute snapshots create in beta and GA.