Gemini Enterprise Agent Platform Updates & Release Notes

Fixed

CodeMender updates (v0.12.0)

This release introduces updates to CodeMender:

• Hidden file scanning: Added the --include-hidden flag to cm find (or include_hidden under scan in config.yaml) to include hidden directories and files, such as .github/ and .config/, in vulnerability scans.
• Larger file support: Raised the default file discovery size limit (max_file_size_kb) from 500 KB to 2 MiB so cm find no longer skips large source files. Existing configurations that use the previous 500 KB default are upgraded automatically, and --deep and --diff scans can now read beyond the inline preview of files larger than 64 KB.
• Report output for every scan mode: cm find --output now writes the scan report for standard, --deep, --parallel, and --diff scans.
• Scoped fixes: cm fix now prevents the agent from modifying CI/CD pipelines, static analysis configurations, build definitions, and repository configuration files that are outside the scope of the vulnerability being fixed.
• Accurate session token usage: cm now reports the total token usage across all turns of a session, instead of only the final turn, so token counts in cm stats and session exports match billed usage.
• Bug fixes:
  • Fixed duplicate findings in cm report and cm stats, and stopped merging distinct vulnerability types reported on the same line. …

Feature

Cloud Trace integration with Agent Gateway (Preview)

Agent Gateway integrates with Cloud Trace in Preview to provide end-to-end request observability for agent workloads. Enabling Cloud Trace gives you visibility into how requests travel from your agents through the gateway and across Google Cloud services, tools, agents, and MCP servers.

For more information, see Use Cloud Trace.

Feature

xAI's Grok 4.7

Grok 4.7 is available in Preview in Model Garden.

Fixed

CodeMender updates (v0.11.0)

This release introduces updates to CodeMender:

• Tiered location configuration: Added support for configuring the service location using the CM_LOCATION environment variable or location in config.yaml (defaulting to global), replacing the --location command-line flag.
• CI gate severity validation: Updated cm find to validate --fail-on severity values (CRITICAL, HIGH, MEDIUM, LOW, or NONE) up front instead of silently ignoring misspelled severities. …

Feature

Custom denial messages for semantic governance policies

You can now configure a fixed Denial message on a semantic governance policy to show end users when the policy denies a request, in place of the policy denial rationale. The message can be up to 1,000 characters and is configurable in the Google Cloud console on the policy create or edit page, or by setting agentResponseCustomization.denialMessage on the policy resource using the REST API.

When a single request triggers denials from more than one policy, the policy engine combines the configured Denial messages, deduplicates them, and falls back to a generic message for firing policies that don't have one configured.

For more information, see Configure a semantic governance policy and Information exposure risk.

Feature

Anthropic's Claude Sonnet 5.5

Claude Sonnet 5.5 is available in Model Garden.

Feature

Provisioned Throughput: Support for changing order scope and increasing term

Provisioned Throughput now directly supports from the self service console the ability to change the scope or increase the term of an order through a supersede and replace operation.

For more information, see Restructure an order.

Feature

Gemini 3 models supported by the Interactions API in Preview

Gemini 3 models are supported by the Interactions API in Preview on Gemini Enterprise Agent Platform.

For more information, see the Interactions API overview.

Feature

Gemini 3.8 Flash TTS and Gemini 3.8 Flash-Lite TTS (Preview) …

Feature

Gemini 3.8 Live

Gemini 3.8 Live is generally available. This release introduces improvements in voice quality, model reliability, and agent orchestration.

For more information, see the following:

• Gemini 3.8 Live
• Gemini Live API overview

Feature

Muse Spark 1.3 from Meta

Muse Spark 1.3 from Meta is available in Preview. Muse Spark 1.3 from Meta is a reasoning model trained for agentic workflows and competitive coding. It delivers higher first-attempt accuracy, reliable built-in tool calling with MCP support, and 1M-token long context for multi-step tasks.

Fixed

CodeMender updates (v0.10.0)

This release introduces updates to CodeMender:

• Impact-aware PR delta scanning: Added --diff and --staged flags to cm find to audit modified pull request hunks and 1-hop neighbor files while suppressing pre-existing vulnerabilities.
• SARIF report export and CI gating: Added SARIF v2.1.0 export (--format sarif, --output) and severity-based CI gating (--fail-on) to cm report to integrate scan results into CI/CD pipelines and code scanning tools. …

Fixed

CodeMender updates (v0.9.0)

This release introduces updates to CodeMender:

• Interactive HTML security reports: Overhauled cm report --format html to provide a modern, interactive dashboard featuring severity metric cards, syntax-highlighted code snippets with line numbers, and an inline patch diff viewer. Added the --open (-o) flag to automatically open the generated report in the default browser.
• Expanded language support: Added out-of-the-box vulnerability scanning support for C# (.cs), Rust (.rs), Kotlin (.kt, .kts), Ruby (.rb), and PHP (.php) to the default discovery configuration and initialization templates.
• Per-turn latency metrics: Enhanced cm stats and session exports to report per-turn latency breakdowns, distinguishing time spent waiting on model inference from local tool execution.
• Bug fixes:
  • Improved session reliability and error recovery during long-running repository scans.
  • Fixed local workspace state compatibility issues when upgrading from earlier CLI versions.

For more information, see the CodeMender documentation.

Feature

xAI's Grok 4.6 is generally available

Grok 4.6 is now generally available (GA) and available for production use on the global endpoint and the US multi-region endpoint.

Breaking

Agent Platform SDK for Python version 2.0.1 is available

Version 2.0.1 of the Agent Platform SDK for Python (google-cloud-agentplatform) is now available. This release migrates generative AI modules to the Google Gen AI SDK, decouples the agent surface from google-cloud-aiplatform into a dedicated package, and introduces restructured namespaces.

For details and migration instructions from google-cloud-aiplatform, see the Agent Platform SDK for Python version 2.0.1 migration guide.

Feature

CodeMender updates (v0.8.0)

This release introduces updates to CodeMender:

• Gemini 3.8 Flash default: Gemini 3.8 Flash (gemini-3.8-flash) is now supported and enabled as the default model for CodeMender CLI sessions, delivering faster inference and improved reasoning. A one-time notice in the CLI informs users when the new default is active.
• Tool payload guardrails: Introduced safe output limits for file reading (2 MiB) and codebase grep search (512 KiB) with centered match context windows, eliminating payload overflow errors and improving stability during large repository scans.
• Bug fixes:
  • Fixed an issue where shell detection and command execution on Windows could fail during repository resets and exploit verification when Git Bash was installed in standard registry or non-PATH locations.
  • Fixed an issue in cm verify where verified findings could report "not found" or fail to persist confidence and status upon session completion or resumption.
  • Fixed syntax errors in generated verification scripts caused by invalid regex escaping in grep assertions during cm verify.
  • Prevented HTTP 409 lease conflict errors during long-running sessions by ensuring streaming HTTP connections are promptly released.

For more information, see CodeMender documentation.

Feature

Gemini 3.8 Flash Cyber available in allowlisted GA …

Feature

Reinforcement learning fine-tuning in the Google Cloud console (Preview)

You can create, monitor, and test reinforcement learning fine-tuning jobs for Gemini models in the Google Cloud console (Preview). From the Models > Tuning page, you can configure Python code or model-based reward functions, test reward logic against sample prompts before launching a job, track training and evaluation metrics in real time, and test tuned checkpoints in Agent Studio.

For more information, see Quick start: Reinforcement learning fine-tuning using the console.

Deprecated

Gemini model deprecation and retirement date updates

The retirement and deprecation dates for the following Gemini models have been updated:

• Gemini 2.5 Flash Image (gemini-2.5-flash-image): Deprecated and scheduled for retirement on March 15, 2027 (extended from October 2, 2026). Migrate to Gemini 3.1 Flash-Lite Image (gemini-3.1-flash-lite-image).
• Gemini 3.1 Flash-Lite Image (gemini-3.1-flash-lite-image): Retirement date is scheduled for June 28, 2027 or later.

For more information, see Gemini model versions and lifecycle.

Fixed

CodeMender updates (v0.7.0)

This release introduces updates to CodeMender:

• Network stream resilience: Improved CLI session stability with automatic reconnection and transient error recovery during long-running scans and remediation workflows.
• Configuration uniformity: Standardized directory exclusion rules across configuration files and CLI scanning flags under scan_config.exclude_dirs.
• Bug fixes:
  • Fixed an issue where cm report incorrectly categorized DISMISSED findings as OPEN in the summary table.
  • Resolved sandbox permission denial errors by preventing child worker processes from attempting to create internal session logs on disk. …

Feature

Standard PayGo adds Tier 4

Tier 4 is added to the Standard PayGo usage tiers, for spend above $50,000 per 30-day period, and Tier 3 is bounded at $2,000 to $50,000 per 30-day period. For details, see Standard PayGo usage tiers.

Change

Priority PayGo removes ramp limits

Priority PayGo throughput limits are available immediately, with no ramp-up period, and traffic above the limit is downgraded to Standard PayGo only when there isn't spare capacity to serve it at priority. For details, see Priority PayGo throughput limits.

Feature

Provisioned Throughput: Support for multiple pending orders and change requests

Provisioned Throughput now directly supports from the self service console the ability to schedule multiple new orders at the same time and change requests across multiple orders within the same project.

For more information, see Purchase Provisioned Throughput.

Feature

Computer Use and Shell sandboxes are generally available

Computer Use and Shell sandboxes in Gemini Enterprise Agent Platform are now generally available (GA). This release also includes the following new features for Agent Platform sandboxes:

• Shell sandboxes: Run untrusted shell commands, install packages, and manipulate files in an isolated Linux container using direct API /exec calls. For more information, see the Shell sandbox quickstart.

• VPC Service Controls & Private Service Connect: Protect sandbox data and isolate network boundaries with VPC Service Controls, private ingress endpoints (PSC-E), and private egress routing (PSC-I). For more information, see Configure VPC Service Controls and Private Service Connect with sandboxes.

• Customer-Managed Encryption Keys (CMEK): Protect sandbox data at rest, including disk storage and snapshot checkpoints, using Cloud KMS keys. For more information, see Configure customer-managed encryption keys (CMEK) for sandboxes. …

Feature

Gemini 3.8 Flash is generally available

Gemini 3.8 Flash is now generally available (GA) and available for production use.

For more information on 3.8 Flash, see the model page.

Feature

Provisioned Throughput support for Gemini Omni

Provisioned Throughput supports Gemini Omni. To learn more, see supported models.

Fixed

CodeMender updates (v0.6.0)

This release introduces updates to CodeMender:

• Machine-readable metrics: Added the --json flag to cm stats to export aggregate and per-session metrics (CACHE_HIT%, THINK_RATIO%, TOOL_CALLS, DURATION).
• Session drill-down: Added cm stats --session <id> to inspect turn-by-turn token consumption for specific sessions.
• Bug fixes:
  • Improved codebase search reliability by skipping binary archives and non-regular files during traversal.
  • Fixed an issue where cm report import failed on native JSON reports or findings referencing new files.
  • Fixed an issue where preview mode could create empty directories on disk before user confirmation.
  • Prevented erroneous verification verdicts when workspace reset fails.

For more information, see CodeMender documentation.

Feature …

Feature

Anthropic's Claude Fable 5.1 is now available

Claude Fable 5.1 is available in Model Garden.

Change

Embedding SKUs are changing

Memory bank uses the following embedding model SKUs:

• 6E46-5623-C0B6
• C15D-A68F-5C1E
• 2D07-D52C-A93B

For detailed information about individual SKUs, see Google Cloud Platform SKUs.

Feature

Agentic video processing now available in Preview

Gemini 3.5 Pro and later models now support agentic video processing, where the model dynamically navigates video content instead of extracting frames at a fixed rate. This reduces token usage for long-form video and improves answer quality. Set processing: "agentic" (Interactions API) or media_processing: "AGENTIC" (GenerateContent API) on video inputs, or use the model default.

See Video understanding for details.

Change

Pricing updates for agent metering

Session and memory bank compute metering is in effect for the Agent Platform compute SKU. For more information, see Gemini Agent Platform Pricing.

Feature

Gemini 3.1 Flash Image and Gemini 3 Pro Image updates

This release introduces feature updates and expanded endpoint availability for Gemini 3.1 Flash Image and Gemini 3 Pro Image:

• Multi-region endpoint support: Gemini 3.1 Flash Image (gemini-3.1-flash-image) is now available on US (us) and EU (eu) multi-region endpoints for model availability, ML processing, Provisioned Throughput, and PayGo Standard.

• 4K image output in GA: Generating 4K resolution images is now Generally Available (GA) for both Gemini 3.1 Flash Image and Gemini 3 Pro Image.

• Video inputs in GA: Image generation from video inputs is now Generally Available (GA) for Gemini 3.1 Flash Image.

For more information, see the following:

• Gemini 3.1 Flash Image
• Gemini 3 Pro Image
• Model locations

Feature

IAM Unified Access Policies are generally available (GA) …