Support for Go 1.26 runtime is in General Availability.

Support for Go 1.26 runtime is in Preview.

Support for TLS version 1.2 and later, along with a corresponding secure set of cipher suites, is in General Availability (GA).

Support for Go 1.25 runtime is in General Availability (GA).

To increase security, starting in March 2025, support for Transport Layer Security (TLS) version 1.1 and earlier is deprecated. Update your application settings in the App Engine flexible environment to use TLS version 1.2 and later, along with a corresponding secure set of cipher suites (Preview).

Support for Go 1.25 runtime is in Preview. This runtime is available for early testers using existing release candidates.

Feature

Support for Go 1.24 runtime is in General Availability (GA).

Support for Go 1.24 runtime is in Preview.

Container Registry is now shut down. We recommend that you use Artifact Registry for storing and managing container images. By default, new deployments created after March 5, 2025, use Artifact Registry instead of Container Registry for storing application build images. For more information, see Migrate App Engine container images to Artifact Registry.

Go 1.23 is now generally available.

Go 1.23 is now available in preview.

In the App Engine page in the Google Cloud console, you can now filter your existing App Engine versions by runtime lifecycle stages. After you apply this filter, the console displays a warning icon for App Engine versions that are approaching end of support, have reached end of support, are deprecated, and are decomissioned.

Deployments for new projects might be impacted from the following changes to org policies:

• Starting in May 2024, Google Cloud enforces secure-by-default organization policies for all organization resources. This policy prevents App Engine from granting the Editor role to the App Engine default services accounts by default.
• Starting in June 2024, Cloud Build has changed the default behavior for how Cloud Build uses service accounts in new projects. This change is detailed in Cloud Build Service Account Change. As a result of this change, new projects deploying versions for the first time may be using the default App Engine service account with insufficient permissions for deploying versions.

If you are impacted by this change, you can do the following:

• Review the Cloud Build guidance on changes to the default service account and opt out of these changes.
• Grant the Editor role to the App Engine default service account.

Go version 1.19 and earlier have reached end of support. You cannot re-deploy versions that use runtimes after their end of support date. We recommend that you upgrade your app to use the latest version of Go.

Go 1.22 is now generally available.

Starting in Go version 1.22 and later:

• You can't use go get outside of a module in the legacy GOPATH mode (GO111MODULE=off).
• Go recommends that you use a go.mod file for managing dependencies.

For more information, see Specify dependencies.

Go 1.22 is now available in preview.

A warning message now appears before you publish a container image to a public repository.

Go 1.21 is now generally available.

Go 1.21 is now available in preview.

Accessing a service that's prohibited by the Internal or Internal and Cloud Load Balancing ingress setting now results in a 404 rather than 403 error code.

You can now specify version "1.20" in the runtime_version setting of your app.yaml file. Learn more.

You can now use ssh to log in to App Engine flexible environment instances that use only internal IP addresses.

Go 1.18 and 1.19 are now generally available. These versions require you to specify an operating system version in your app.yaml. Learn more.

The Go runtime versions 1.18 and 1.19 are now available in preview and are built on a modern and secure operating system (Ubuntu 22). These new runtime versions use Google Cloud's buildpacks and require updates to your app.yaml. Learn more.

You can now use any configured service account in your Cloud project as the app-level default service account, while creating and updating your App Engine applications.

The option to set IP mode to internal for App Engine flexible environment instances is now generally available.

You can now disable external ephemeral IP addresses for App Engine Flex services. Read our documentation to learn how. This feature is at the Preview launch stage.

Specifying a user-managed service account for each App Engine version during deployment is now generally available.

Specifying a user-managed service account for each App Engine version during deployment is now available in preview. This feature lets you grant different privileges to each version, based on the specific tasks it performs, and avoid granting more privileges than necessary.

Requests from internal services to the App Engine flexible environment no longer originate from 10.0.0.1. The IP ranges are as follows: - Cron requests from newly created or updated App Engine Cron jobs sent to the App Engine flexible environment now come from 0.1.0.2. For Cron jobs created with older gcloud versions (earlier than 326.0.0), Cron requests will come from 0.1.0.1. Previously, these requests only came from both 0.1.0.1 and 10.0.0.1. - For other Cloud Scheduler jobs and Cloud Tasks queues (including App Engine Task Queues), requests sent to the App Engine flexible environment now only come from 0.1.0.2. Previously, these requests came from both 0.1.0.2 and 10.0.0.1. - For URL Fetch, requests sent to the App Engine flexible environment now only come from 0.1.0.40. Previously, these requests came from both 0.1.0.40 and 10.0.0.1.

For more information, see Understanding the App Engine firewall.

App Engine is now available in the us-west1 (Oregon), asia-southeast1 (Singapore), and asia-east1 (Taiwan) regions.