Gemini Enterprise Agent Platform Updates & Release Notes

Feature

CodeMender updates (v0.5.0)

This release introduces updates to CodeMender:

• Model support: Support for Gemini 3.6 Flash (gemini-3.6-flash) and Gemini 3.7 Flash (gemini-3.7-flash, default).
• Unrestricted verification: Added the --unrestricted flag to cm verify to bypass command policy restrictions during exploit verification in isolated environments.
• Bug fixes:
  • Improved reliability of long sessions.
  • Improved shell resolution across operating environments.
  • Clearer permission denied error messages.
  • Fixed an issue where the CodeMender sandbox would fail to initialize with an error due to relative paths.

For more information, see CodeMender documentation.

Feature

Gemini Omni 1.1 Flash is available in Public Preview

Gemini Omni 1.1 Flash (gemini-omni-1.1-flash-preview) is available in Preview. Gemini Omni 1.1 Flash is a multimodal model designed for video, image, and text tasks, optimized for high-speed video generation that supports audio and video editing.

Feature

Monitor semantic governance policies with built-in metrics (Preview)

Built-in Cloud Monitoring metrics for the semantic governance policy engine are available in Preview. You can now observe request throughput, evaluation counts, latencies, verdict distribution (ALLOW versus DENY), and LLM token consumption for the policy engine directly in Metrics Explorer, query them through the Cloud Monitoring v3 API and PromQL, and use them in alerting policies.

For more information, see Monitor semantic governance policies.

Feature

AlphaFold 3 is generally available

AlphaFold 3 is now generally available (GA) and available for approved users for commercial research use.

AlphaFold 3 Google DeepMind's and Isomorphic Labs' deep learning model to predict the 3D structures and interactions of proteins, DNA, RNA, ligands, and ions. For more information, see AlphaFold 3.

Feature

Gemini 3.7 Flash is generally available

Gemini 3.7 Flash is now generally available (GA) and available for production use.

For more information on 3.7 Flash, see the model page.

Feature

Agent Runtime: ADK telemetry metrics

Agents deployed to Agent Runtime with Agent Development Kit (ADK) 2.6.0 or later can emit gen_ai application metrics that follow OpenTelemetry's generative AI semantic conventions. Set the GOOGLE_CLOUD_AGENT_ENGINE_ENABLE_TELEMETRY environment variable to export these metrics to Cloud Monitoring as user-defined metrics, alongside agent traces and logs.

For more information, see Set up monitoring.

Feature

Process-level sandboxing and auto-updates (Preview)

This release introduces process-level sandboxing, automatic update checks, and other improvements to the CodeMender CLI (Preview):

• Process-level sandboxing: To safeguard your workstation against unintended file modifications or unexpected tool side effects, you can now execute all agent-proposed tools (such as compiling code, running tests, or executing shell scripts) inside an OS-level sandbox. Sandboxing is disabled by default to allow seamless dependency resolution, but can be enabled persistently in config.yaml or per-command using the new --sandbox flag.
• Automatic updates: The CLI now automatically checks for updates in the background (at most once every 24 hours) when running in an interactive terminal. You can also run cm update to forcefully check for and apply updates immediately.
• Token usage statistics: You can now use the cm stats subcommand to view a summary of token usage (input, output, cached, thought, tool-use) for your local sessions.
• Improved Windows support: The standalone CLI now has improved support for running on Windows.

For more information, see Install the CLI and configure.

Feature

Gemini 3.6 Flash and 3.5 Flash-Lite are generally available (GA)

Gemini 3.6 Flash and Gemini 3.5 Flash-Lite are now generally available (GA) and available for production use. These models are designed to improve upon their predecessors' capabilities, including improved token usage and improved document understanding. See the linked model information pages for more information.

This release includes some potentially breaking changes from previous Flash and Flash-Lite models:

• Sampling parameters: Custom values for temperature, top-K, and top-P are not supported and will be ignored if set.
• Penalty parameters: Custom values for frequency and presence penalty parameters are not supported. Setting these will result in an API error.
• API turn structure: API requests where the last input turn has a role of Model are no longer supported and will return an error:
  • Interactions API: Requests where the last object in the input array has "type": "model_output" will fail.
  • GenerateContent API: Requests where the last object in the contents array has "role": "model" will fail.

Deprecated

Open model endpoint deprecations …

Security

Security update for Server-Side Request Forgery (SSRF) in Agent Studio

This release fixes a Server-Side Request Forgery (SSRF) vulnerability in the auto-generated /api-proxy backend endpoint for web applications created before July 1, 2026, using Agent Studio.

If you downloaded, generated, or deployed web application code from Agent Studio before July 1, 2026, regenerate the app from Agent Studio and deploy the new version. For more information, see Quickstart: Deploy your Agent Studio prompt as a web application

The updated backend code includes strict domain allowlist validation, ensuring that destination hostnames for the /api-proxy endpoint end with allowed Google Cloud domains, such as *-aiplatform.clients6.google.com

Deprecated

Grok 4.1 models deprecation

The Grok 4.1 model family (including xai/grok-4.1-fast-reasoning and xai/grok-4.1-fast-non-reasoning) on the Gemini Enterprise Agent Platform is deprecated and will be shut down on August 20, 2026. After this date, Google Agent Platform Model as a Service (MaaS) will no longer serve these models. Specifically, API requests directed to the https://aiplatform.googleapis.com/v1/projects/<your-project>/locations/global/endpoints/openapi/chat/completions endpoint using the Grok 4.1 model IDs will fail and return a 400 error. To maintain service, migrate your applications to newer xAI models (such as Grok 4.2 or Grok 4.3) or choose an alternative model from the Google Cloud Model Garden.

Feature

Memory Bank IngestEvents is generally available (GA)

The Memory Bank IngestEvents API is generally available. The IngestEvents API decouples event ingestion from memory generation, letting you continuously stream content to Memory Bank and configure when memory generation is triggered.

This GA release includes the following features:

• Carry over context between generation windows: Use the overlap_event_count parameter to re-include already-processed events at the start of the next window to keep memories coherent.
• Configure memory revisions for ingested events: Use revision_labels, revision_ttl, or disable_memory_revisions to customize how generated revisions are managed. …