Updated the bundled Ruby gems rexml and net-imap to patched versions, addressing known vulnerabilities.
Updated aiohttp, joblib and cryptography to patched versions, addressing known vulnerabilities including CVE-2022-21797 and CVE-2025-69223.
Installed latest packages from upstream dependencies.
Updated the CUDA base image from 12.8.1 to 12.9.2 (CUDA 12.9, cuDNN 9.10). This is a minor CUDA 12 update, binary compatible with the previous image, and also addresses known vulnerabilities in a bundled NVIDIA profiler component.
Updated the bundled Ruby gems rexml and net-imap to patched versions, addressing known vulnerabilities.
Removed the JupyterLab 3 environment from the Python 3.12 custom container; JupyterLab 4 is now the only JupyterLab environment and is always used. The Python 3.10 images are unaffected.
Updated aiohttp, joblib and cryptography to patched versions, addressing known vulnerabilities including CVE-2022-21797 and CVE-2025-69223.
Installed latest packages from upstream dependencies.
Installed latest packages from upstream dependencies.
Installed latest packages from upstream dependencies.
Installed latest packages from upstream dependencies.
Installed latest packages from upstream dependencies.
Fixed the Git panel's grayed out buttons, which were disabled due to an issue with the Jupyter Lab's Git plugin introduced in version 0.54.0.
Installed latest packages from upstream dependencies.
Installed latest packages from upstream dependencies.
Fixed the Git panel's grayed out buttons which were disabled due to an issue with the Jupyter Lab's Git plugin introduced in version 0.54.0.
Installed latest packages from upstream dependencies.
Fixed the Git panel's grayed out buttons which were disabled due to an issue with the Jupyter Lab's Git plugin introduced in version 0.54.0.
Installed latest packages from upstream dependencies.
Updated the NVIDIA GPU driver on Workbench Debian 12 images from 580.65.06 to 580.126.20 for compatibility with the Debian 12 6.1.0-52 kernel.
Installed latest packages from upstream dependencies.
Fixed the Git panel's grayed out buttons which were disabled due to an issue with the Jupyter Lab's Git plugin introduced in version 0.54.0.
]]>Fixed issue with JupyterLab UI silently reverting file changes and interrupting kernels due to Gemini CLI's auto reload extension.
The JupyterLab last-active and auto-reload extensions are now enabled only when Gemini CLI is configured, preventing them from affecting the native JupyterLab UI otherwise.
Installed latest packages from upstream dependencies.
Fixed issue with JupyterLab UI silently reverting file changes and interrupting kernels due to Gemini CLI's auto reload extension.
The JupyterLab last-active and auto-reload extensions are now enabled only when Gemini CLI is configured, preventing them from affecting the native JupyterLab UI otherwise.
Installed latest packages from upstream dependencies.
Fixed an error that could prevent creating new micromamba environments at runtime due to package cache permissions.
Fixed an error that could prevent creating new micromamba environments at runtime due to package cache permissions.
Fixed issue with JupyterLab UI silently reverting file changes and interrupting kernels due to Gemini CLI's auto reload extension.
The JupyterLab last-active and auto-reload extensions are now enabled only when Gemini CLI is configured, preventing them from affecting the native JupyterLab UI otherwise.
Installed latest packages from upstream dependencies.
Fixed issue with JupyterLab UI silently reverting file changes and interrupting kernels due to Gemini CLI's auto reload extension.
The JupyterLab last-active and auto-reload extensions are now enabled only when Gemini CLI is configured, preventing them from affecting the native JupyterLab UI otherwise.
Installed latest packages from upstream dependencies.
]]>Installed latest packages from upstream dependencies.
Installed latest packages from upstream dependencies.
Fixed issue with JupyterLab UI silently reverting file changes and interrupting kernels due to Gemini CLI's auto reload extension.
The JupyterLab last-active and auto-reload extensions are now enabled only when Gemini CLI is configured, preventing them from affecting the native JupyterLab UI otherwise.
Fixed the JupyterLab Git extension's Pull and Push buttons being disabled by pinning jupyterlab-git to 0.53.0.
Fixed the JupyterLab Git extension's Pull and Push buttons being disabled by pinning jupyterlab-git to 0.53.0.
Fixed an error that could prevent creating new micromamba environments at runtime due to package cache permissions.
Fixed an error that could prevent creating new micromamba environments at runtime due to package cache permissions.
Workbench internal agents now trust custom and enterprise CA certificates installed on the host operating system, fixing TLS certificate verification failures for connections routed through the instance proxy.
Workbench internal agents now trust custom and enterprise CA certificates installed on the host operating system, fixing TLS certificate verification failures for connections routed through the instance proxy.
Files created by the post-startup script are now owned by the jupyter user, and git safe.directory is configured so that root-owned repositories continue to work.
Files created by the post-startup script are now owned by the jupyter user, and git safe.directory is configured so that root-owned repositories continue to work.
Fixed issue with JupyterLab UI silently reverting file changes and interrupting kernels due to Gemini CLI's auto reload extension.
The JupyterLab last-active and auto-reload extensions are now enabled only when Gemini CLI is configured, preventing them from affecting the native JupyterLab UI otherwise.
The JupyterLab last-active and auto-reload extensions are now enabled only when Gemini CLI is configured, preventing them from affecting the native JupyterLab UI otherwise.
]]>Agent Platform Workbench image release
The following Agent Platform Workbench instances image releases are available:
workbench-instances-2603 - Debian 12)
workbench-instances - Debian 11)
Installed latest packages from upstream dependencies.
Installed latest packages from upstream dependencies.
Fixed a race condition that could cause JupyterLab to be unreachable (HTTP 524) on GPU instances.
Fixed broken cupy installation.
Secure Boot is compatible with GPUs
You can now enable Secure Boot on Agent Platform Workbench instances that have a
GPU attached. Secure Boot with GPUs is supported on the workbench-instances-2603
VM image and the workbench-container-2606 custom container, which include a
Secure Boot-signed NVIDIA GPU driver so the driver loads under Secure Boot. For
more information, see Create an
instance.
Secure Boot is compatible with GPUs
You can now enable Secure Boot on Agent Platform Workbench instances that have a
GPU attached. Secure Boot with GPUs is supported on the workbench-instances-2603
VM image and the workbench-container-2606 custom container, which include a
Secure Boot-signed NVIDIA GPU driver so the driver loads under Secure Boot. For
more information, see Create an
instance.
Secure Boot is compatible with GPUs
You can now enable Secure Boot on Agent Platform Workbench instances that have a
GPU attached. Secure Boot with GPUs is supported on the workbench-instances-2603
VM image and the workbench-container-2606 custom container, which include a
Secure Boot-signed NVIDIA GPU driver so the driver loads under Secure Boot. For
more information, see Create an
instance.
Agent Platform Workbench image release
The following Agent Platform Workbench instances image release is available:
workbench-instances-2603 - Debian 12)
Installed latest packages from upstream dependencies.
Fixed a race condition that could cause JupyterLab to be unreachable (HTTP 524) on GPU instances.
Fixed an issue where long-running requests (for example, streaming or long-poll connections) could be terminated after about 60 seconds.
]]>Python 3.12 base containers for Agent Platform Workbench custom containers
You can build custom containers for Agent Platform Workbench instances using Python 3.12 base containers, in addition to the default Python 3.10 base containers. The Python 3.12 standard and slim base containers are available at the following URIs:
us-docker.pkg.dev/workbench-images/gcr.io/workbench-container-2606:latestus-docker.pkg.dev/workbench-images/gcr.io/workbench-container-slim-2606:latestPython 3.12 base containers for Agent Platform Workbench custom containers
You can build custom containers for Agent Platform Workbench instances using Python 3.12 base containers, in addition to the default Python 3.10 base containers. The Python 3.12 standard and slim base containers are available at the following URIs:
us-docker.pkg.dev/workbench-images/gcr.io/workbench-container-2606:latestus-docker.pkg.dev/workbench-images/gcr.io/workbench-container-slim-2606:latestPython 3.12 base containers for Agent Platform Workbench custom containers
You can build custom containers for Agent Platform Workbench instances using Python 3.12 base containers, in addition to the default Python 3.10 base containers. The Python 3.12 standard and slim base containers are available at the following URIs:
us-docker.pkg.dev/workbench-images/gcr.io/workbench-container-2606:latestus-docker.pkg.dev/workbench-images/gcr.io/workbench-container-slim-2606:latestAgent Platform Workbench image release
The following Agent Platform Workbench instances image release is available:
workbench-instances-2603 - Debian 12)
Installed latest packages from upstream dependencies.
Installed TensorFlow and PyTorch packages to the default kernel.
]]>Agent Platform Workbench image release
The following Agent Platform Workbench instances image release is available:
workbench-instances-2603 - Debian 12)
Installed latest packages from upstream dependencies.
Fixed an issue where notebook kernels could become unavailable if the Dataproc plugin failed to load.
]]>Agent Platform Workbench image release
The following Agent Platform Workbench instances image releases are available:
workbench-instances-2603 - Debian 12)
workbench-instances - Debian 11)
Installed latest packages from upstream dependencies.
Installed latest packages from upstream dependencies.
Fixed a duplicate "Python 3 (ipykernel)" kernel appearing in the launcher.
]]>Agent Platform Workbench image release
The following Agent Platform Workbench instances image release is available:
workbench-instances-2603 - Debian 12)
Installed latest packages from upstream dependencies.
]]>Agent Platform Workbench image release
The following Agent Platform Workbench instances image release is available:
workbench-instances - Debian 11)
Installed latest packages from upstream dependencies.
Fixed pip availability in the base environment.
Hardened JupyterLab authentication configuration.
]]>Agent Platform Workbench image release
The following Agent Platform Workbench instances image release is available:
workbench-instances-2603 - Debian 12)
Installed latest packages from upstream dependencies.
Fixed a Python 3.12 compatibility issue in the JupyterLab server configuration.
Hardened JupyterLab authentication configuration.
]]>Agent Platform Workbench image release
The following Agent Platform Workbench instances image release is available:
workbench-instances-2603 - Debian 12)
Installed latest packages from upstream dependencies.
]]>Agent Platform Workbench image release
The following Agent Platform Workbench instances image release is available:
workbench-instances-2603 - Debian 12)
Installed latest packages from upstream dependencies.
Improved metadata server resolution reliability on Debian 12 by using the recommended metadata.google.internal name.
]]>Agent Platform Workbench image release
The following Agent Platform Workbench instances image release is available:
workbench-instances-2603 - Debian 12)
Installed latest packages from upstream dependencies.
]]>Agent Platform Workbench image release
The following Agent Platform Workbench instances image releases are available:
workbench-instances-2603 - Debian 12)
workbench-instances - Debian 11)
Installed latest packages from upstream dependencies.
Installed latest packages from upstream dependencies.
Fixed intermittent connectivity failures caused by proxy TLS certificate rotation.
Fixed intermittent connectivity failures caused by proxy TLS certificate rotation.
The post-startup script now re-runs after an instance auto-upgrade.
The post-startup script now re-runs after an instance auto-upgrade.
]]>M140 release
The M140 release of Vertex AI Workbench instances includes the following:
Workbench Image Release 26.03
Released the new 26.03 image version under the following image family workbench-instances-2603. This major update introduces:
Gemini CLI Update: Minor updates to Gemini CLI's dependencies.
]]>Fixed a vulnerability in Vertex AI Workbench for users utilizing managed credentials.
]]>M139 release
The M139 release of Vertex AI Workbench instances includes the following:
gs://dl-platform-public-configs.Removed a startup script dependency on gs://dl-platform-public-configs.
Preview: The Gemini CLI is available in Vertex AI Workbench instances. The Gemini CLI is an open source AI agent that provides access to Gemini directly in a terminal. You can use the Gemini CLI to do tasks like the following:
To get started, see Use the Gemini CLI.
]]>M138 release
The M138 release of Vertex AI Workbench instances includes the following:
Fixed an issue where daemon processes launched by post-startup scripts, such as gcsfuse mounts, did not persist after the script finished executing.
]]>The following features are now generally available (GA):
Using post-startup scripts for new instances with user credential access is now available in private GA. For information about access to this release, see the access request page. For more information, see Create instances with post-startup scripts.
M137 release
The M137 release of Vertex AI Workbench instances includes the following:
sudo prompts for a password when a custom Jupyter user
name is specified.Patched an issue where sudo prompts for a password when a custom Jupyter user
name is specified.
Generally available (GA): Encrypt your data-in-use by using Confidential Computing. You can enable the Confidential VM service when you create a Vertex AI Workbench instance. To get started, see Create an instance with Confidential Computing.
]]>M136 release
The M136 release of Vertex AI Workbench instances includes the following:
Patched an issue where image outputs aren't displayed properly.
]]>M135 release
The M135 release of Vertex AI Workbench instances includes the following:
Patched an issue where user-triggered OS shutdowns aren't reported to the Notebooks API.
]]>M134 release
The M134 release of Vertex AI Workbench instances includes the following:
jupyterlab_kernels and docker_status metrics).dataproc-jupyter-plugin) to
version 0.1.92.project and region properties
are preset.Patched a regression with custom notebook metrics reporting (for example,
jupyterlab_kernels and docker_status metrics).
Updated the Dataproc JupyterLab plugin (dataproc-jupyter-plugin) to version
0.1.92.
When using Google Cloud CLI commands, the project and region properties are
preset.
Generally available (GA): You can use Workforce Identity Federation with Vertex AI Workbench instances. Workforce Identity Federation lets you create and manage Vertex AI Workbench instances with credentials provided by an external identity provider (IdP). For more information, see Create an instance with third party credentials.
]]>M133 release
The M133 release of Vertex AI Workbench instances includes the following:
dataproc-jupyter-plugin) and instances with end-user credentials enabled.Patched an incompatibility with the Dataproc JupyterLab plugin
(dataproc-jupyter-plugin) and instances with end-user credentials enabled.