Browser: Release Notes

Salesforce connector enhancements (Preview)

Modern Salesforce attacks increasingly abuse OAuth tokens, connected apps, sessions, and APIs, often bypassing MFA and traditional controls. The Salesforce connector for Microsoft Defender for Cloud Apps is now better equipped to detect these attacks. The connector ingests Salesforce Real-Time Event Monitoring data for near real-time detection of identity and OAuth threats with richer investigation context, and adds OAuth app governance for Salesforce Connected Apps and External Client Apps (ECAs).

We recommend that Salesforce administrators enable Real-Time Event Monitoring in the Salesforce console for the best detection coverage. Enabling it gives you better latency and more robust detections.

• Real-time event monitoring: When a Salesforce administrator enables Storing data for the relevant events in Salesforce Event Manager, the Salesforce connector ingests Salesforce Real-Time Event Monitoring data within minutes. This improves detection coverage for OAuth abuse, session hijacking, credential stuffing, and anomalous API activity, and the OAuth apps inventory includes Salesforce Connected Apps and External Client Apps (ECAs). For more information, see Enable Salesforce real-time event monitoring. …

For more information, see Identity inventory integration.

August 2026

Unified RBAC is enabled by default for new Defender for Cloud Apps customers

Starting in August 2026, Microsoft Defender unified role-based access control (RBAC) is automatically enabled for new Defender for Cloud Apps customers. No manual workload activation is required.

Unified RBAC provides a centralized experience for managing roles and permissions across Microsoft Defender products. For more information, see Microsoft Defender unified role-based access control and Configure admin access in Defender for Cloud Apps.

June 2026

Feature

Gemini Enterprise: Control access to Antigravity features

Administrators can control whether users in their organization have access to the following Google Antigravity features:

• Boost: Uses a tiered multi-agent hierarchy to solve complex algorithmic challenges and deep debugging tasks with the /boost command. This feature is generally available (GA) in Antigravity.
• Teamwork: Deploys a coordinated framework of autonomous subagents to execute large-scale, long-horizon projects using the /teamwork-preview command. This feature is in Preview in Antigravity.

These settings are generally available (GA) for administrators in Gemini Enterprise.

For more information, see Configure feature settings.

Fixed

CodeMender updates (v0.12.0)

This release introduces updates to CodeMender:

• Hidden file scanning: Added the --include-hidden flag to cm find (or include_hidden under scan in config.yaml) to include hidden directories and files, such as .github/ and .config/, in vulnerability scans.
• Larger file support: Raised the default file discovery size limit (max_file_size_kb) from 500 KB to 2 MiB so cm find no longer skips large source files. Existing configurations that use the previous 500 KB default are upgraded automatically, and --deep and --diff scans can now read beyond the inline preview of files larger than 64 KB.
• Report output for every scan mode: cm find --output now writes the scan report for standard, --deep, --parallel, and --diff scans.
• Scoped fixes: cm fix now prevents the agent from modifying CI/CD pipelines, static analysis configurations, build definitions, and repository configuration files that are outside the scope of the vulnerability being fixed.
• Accurate session token usage: cm now reports the total token usage across all turns of a session, instead of only the final turn, so token counts in cm stats and session exports match billed usage.
• Bug fixes:
  • Fixed duplicate findings in cm report and cm stats, and stopped merging distinct vulnerability types reported on the same line. …

App Store Connect update

You can now use creative assets to highlight your brand identity, promote seasonal updates, and showcase new app or game across the App Store—including product page headers, search results, and in-app events.

The new Asset Library brings together your app previews, screenshots, and creative assets into one central hub to manage and submit media across platforms, sizes, and placements. You can also preview your assets in real time to see exactly how they look on the product page and in search results.

Manage your App Store assets >

Showcase your apps with new assets on the App Store >

Creative assets specifications >

[1.20.0] - 2026-10-02

Added

• agent-framework-foundry-hosting: Host native workflows over Foundry Responses and Foundry Invocations (#8947, #8966)
• agent-framework-duckdb, agent-framework-sql-server, agent-framework-typesafe: Add DuckDB and SQL Server native vector-store connectors and the TypeSafe AI connector (#8675, #8686, #8592)
• agent-framework, agent-framework-core: Add response-stream gates and buffering, session-scoped file-access isolation, an AgentExecutor checkpoint-state TypedDict, and opt-in FunctionInvocationContext injection for skill scripts (#8829, #8542, #8284, #8749)
• agent-framework-foundry, agent-framework-foundry-hosting, agent-framework-openai: Add native computer-use support to Responses clients and Foundry project embeddings (#8751, #8454) …

Feature

Gemini Enterprise: Federated query mode for Data Cloud connectors and Knowledge Catalog integration (Preview)

Federated query mode is available in Preview for the following connectors:

• AlloyDB for PostgreSQL
• BigQuery
• Cloud SQL
• Spanner

Federated query mode allows Gemini Enterprise to query your operational and analytical data in place using the Model Context Protocol (MCP) and each user's own credentials, without copying or ingesting data into a data store.

In addition, the Knowledge Catalog integration is available in Preview. When you attach a Data Cloud connector in federated query mode, Knowledge Catalog is automatically enabled on the Assistant tab of your app to give the assistant read-only tools to search for data that the user has access to and retrieve technical and business context.

For more information, see the following resources: …

• Reverted farbling support for schemes with inherited HTTP/HTTPS origin. (#59276)
• Fix crash which occurred when using a Private Window to do calculations in the omnibox. (#59437)
• Upgraded Chromium to 154.0.8037.98. (#59587) (Changelog for 154.0.8037.98)

Origin Release Notes

• Reverted farbling support for schemes with inherited HTTP/HTTPS origin. (#59276)
• Fix crash which occurred when using a Private Window to do calculations in the omnibox. (#59437)
• Upgraded Chromium to 154.0.8037.98. (#59587) (Changelog for 154.0.8037.98)

If you encounter any issues, please report them on the issues page. Thanks everyone for your feedback! ❤️

Introducing Library! A better place to organize and access your history, media, downloads, spaces and more.

✓ Fixes

• Significant performance improvements on startups/new windows when there are lots of tabs open.
• Certain icon animations like the boost indicator or musical notes on the sidebar are now more performant. (#15299)
• Fixed status panel and glance controls not using the correct theme colors. (#15280)
• Fixed some HDR videos encoded in 8-bit color formats looking dull and gray on Windows instead of displaying in HDR.
• Improved audio and video synchronization when repeatedly changing the playback speed of videos, for example on YouTube.
• Fixed an issue on Windows where making a video full screen would leave the Windows taskbar showing over the video.

⭐ Features

• Introducing Library! A better place to organize and access your history, media, downloads, spaces and more.
• You can now resize the sidebar even when its hidden. If the sidebar is resized too small, it will automatically hide itself.
• Updated to Firefox 157.0
• WebRTC video calls can now use hardware AV1 decoding on devices that support it, instead of always decoding AV1 video in software.

Changes:

• be01deccaf3dd7b85e03620145bc1a757c857827 .NET: Add origin pinning to Foundry toolbox MCP client (#8721)
• 0d6d2bb6b0b58f3aabdf170320ab90fc300d4c99 .NET: fix: declarative workflow http variables (#8797)
• 2024d4df4c4dd01b904fb9daaf56f5759801654a .NET: Fix workflow topology edge multiplicity comparison (#8656)
• 37ce872a85fed62cedfd7fffa2e0bd43f7d32b92 .NET: Store created external input messages (#8606)
• 1370903bd8e6eb8871781cd1fcc74f674c022e0b .NET: [BREAKING] Better support tool changes between runs (#8754)

<details><summary><b>See More</b></summary>

• 3f1f3b50b57ccabe7725f8a60539622d5f1ca7b4 .NET: Propagate TextSearchProvider caller cancellation (#8796)
• 238d7e2e9bb9b469be172460e612c89840aad1cc .NET: Validate Foundry client headers before transport (#8715)
• c804f32c983df56bacc9a8698fde9d50edc2df3e .NET: [BREAKING] Bump Azure.AI.Projects to 3.0.0-beta.3, OpenAI to 2.14.0, and MEAI to 10.10.1 (#8730) [ dotnet/extensions#7760, dotnet/extensions#7761 ]
• 93cf98a042c0f4eb8e1e180beeab9474bcd96811 .NET: Update AGUI SDK packages to 1.0.0 (#8769)
• 109234952ad417b0e9368beed633e438eb2e389d Clarify CodeAct guest packages and host network access (#8781)
• 6f1522a50b66f117da34cc25ea299ba24a528b15 Temporarily skip OpenAI integration tests while the CI API key is invalid (#8767)
• 2c46deb91e70ea6d7bbc99263147e0f470d52546 .NET: Clarify hosting authentication, authorization, and isolation guidance (#8677) …

Announcement

Gemini Enterprise: Gemini 2.5 Pro removal in Canada and Japan on October 20, 2026

On October 20, 2026, Gemini 2.5 Pro will be removed from the Gemini Enterprise app in the Canada and Japan in-country regions. After this date, users in these regions can't select Gemini 2.5 Pro in the Gemini Enterprise app.

Gemini 2.5 Pro remains available in the global, us, and eu regions.

For more information, see Data residency for Gemini Enterprise.

Feature

Gemini Enterprise: Turn Gemini 2.5 Pro on or off in the web app

Administrators can turn Gemini 2.5 Pro on or off for the Gemini Enterprise web app in the global, us, and eu regions. Gemini 2.5 Pro remains turned on by default, so existing configurations aren't affected.

For more information, see Manage web app features.

Feature

Developer Preview: The Google Sheets Model Context Protocol (MCP) server now supports reading and managing spreadsheet comments:

• Include comments when retrieving a spreadsheet by setting the optional commentsIncluded field on the get_spreadsheet tool.
• Create, reply to, resolve or reopen, update, and delete comments and replies using the update_spreadsheet tool with the insertComment, addCommentReply, updateCommentPost, deleteComment, and deleteCommentReply operations.

To learn more, see Configure the Sheets MCP server and the Sheets MCP tool reference.

Feature

Developer Preview: The Google Sheets Model Context Protocol (MCP) server and its reference documentation include the following updates:

• Added the optional fields (field mask) and ranges (A1 or R1C1 notation) parameters to get_spreadsheet. …