Installed latest packages from upstream dependencies.
Installed latest packages from upstream dependencies.
Installed latest packages from upstream dependencies.
Installed latest packages from upstream dependencies.
Scheduled notebook executions now report their final status when the execution user's credentials stop working part way through a run, instead of continuing until the execution timeout.
Installed latest packages from upstream dependencies.
Scheduled notebook executions now report their final status when the execution user's credentials stop working part way through a run, instead of continuing until the execution timeout.
Installed latest packages from upstream dependencies.
Updated the bundled Ruby gems rexml and net-imap to patched versions, addressing known vulnerabilities.
Updated aiohttp, joblib and cryptography to patched versions, addressing known vulnerabilities including CVE-2022-21797 and CVE-2025-69223.
Installed latest packages from upstream dependencies.
Updated the CUDA base image from 12.8.1 to 12.9.2 (CUDA 12.9, cuDNN 9.10). This is a minor CUDA 12 update, binary compatible with the previous image, and also addresses known vulnerabilities in a bundled NVIDIA profiler component.
Updated the bundled Ruby gems rexml and net-imap to patched versions, addressing known vulnerabilities.
Removed the JupyterLab 3 environment from the Python 3.12 custom container; JupyterLab 4 is now the only JupyterLab environment and is always used. The Python 3.10 images are unaffected.
Updated aiohttp, joblib and cryptography to patched versions, addressing known vulnerabilities including CVE-2022-21797 and CVE-2025-69223.
Installed latest packages from upstream dependencies.
Installed latest packages from upstream dependencies.
Installed latest packages from upstream dependencies.
Installed latest packages from upstream dependencies.
Installed latest packages from upstream dependencies.
Fixed the Git panel's grayed out buttons, which were disabled due to an issue with the Jupyter Lab's Git plugin introduced in version 0.54.0.
Installed latest packages from upstream dependencies.
Installed latest packages from upstream dependencies.
Fixed the Git panel's grayed out buttons which were disabled due to an issue with the Jupyter Lab's Git plugin introduced in version 0.54.0.
Installed latest packages from upstream dependencies.
Fixed the Git panel's grayed out buttons which were disabled due to an issue with the Jupyter Lab's Git plugin introduced in version 0.54.0.
Installed latest packages from upstream dependencies.
Updated the NVIDIA GPU driver on Workbench Debian 12 images from 580.65.06 to 580.126.20 for compatibility with the Debian 12 6.1.0-52 kernel.
Installed latest packages from upstream dependencies.
Fixed the Git panel's grayed out buttons which were disabled due to an issue with the Jupyter Lab's Git plugin introduced in version 0.54.0.
]]>Fixed issue with JupyterLab UI silently reverting file changes and interrupting kernels due to Gemini CLI's auto reload extension.
The JupyterLab last-active and auto-reload extensions are now enabled only when Gemini CLI is configured, preventing them from affecting the native JupyterLab UI otherwise.
Installed latest packages from upstream dependencies.
Fixed issue with JupyterLab UI silently reverting file changes and interrupting kernels due to Gemini CLI's auto reload extension.
The JupyterLab last-active and auto-reload extensions are now enabled only when Gemini CLI is configured, preventing them from affecting the native JupyterLab UI otherwise.
Installed latest packages from upstream dependencies.
Fixed an error that could prevent creating new micromamba environments at runtime due to package cache permissions.
Fixed an error that could prevent creating new micromamba environments at runtime due to package cache permissions.
Fixed issue with JupyterLab UI silently reverting file changes and interrupting kernels due to Gemini CLI's auto reload extension.
The JupyterLab last-active and auto-reload extensions are now enabled only when Gemini CLI is configured, preventing them from affecting the native JupyterLab UI otherwise.
Installed latest packages from upstream dependencies.
Fixed issue with JupyterLab UI silently reverting file changes and interrupting kernels due to Gemini CLI's auto reload extension.
The JupyterLab last-active and auto-reload extensions are now enabled only when Gemini CLI is configured, preventing them from affecting the native JupyterLab UI otherwise.
Installed latest packages from upstream dependencies.
]]>Installed latest packages from upstream dependencies.
Installed latest packages from upstream dependencies.
Fixed issue with JupyterLab UI silently reverting file changes and interrupting kernels due to Gemini CLI's auto reload extension.
The JupyterLab last-active and auto-reload extensions are now enabled only when Gemini CLI is configured, preventing them from affecting the native JupyterLab UI otherwise.
Fixed the JupyterLab Git extension's Pull and Push buttons being disabled by pinning jupyterlab-git to 0.53.0.
Fixed the JupyterLab Git extension's Pull and Push buttons being disabled by pinning jupyterlab-git to 0.53.0.
Fixed an error that could prevent creating new micromamba environments at runtime due to package cache permissions.
Fixed an error that could prevent creating new micromamba environments at runtime due to package cache permissions.
Workbench internal agents now trust custom and enterprise CA certificates installed on the host operating system, fixing TLS certificate verification failures for connections routed through the instance proxy.
Workbench internal agents now trust custom and enterprise CA certificates installed on the host operating system, fixing TLS certificate verification failures for connections routed through the instance proxy.
Files created by the post-startup script are now owned by the jupyter user, and git safe.directory is configured so that root-owned repositories continue to work.
Files created by the post-startup script are now owned by the jupyter user, and git safe.directory is configured so that root-owned repositories continue to work.
Fixed issue with JupyterLab UI silently reverting file changes and interrupting kernels due to Gemini CLI's auto reload extension.
The JupyterLab last-active and auto-reload extensions are now enabled only when Gemini CLI is configured, preventing them from affecting the native JupyterLab UI otherwise.
The JupyterLab last-active and auto-reload extensions are now enabled only when Gemini CLI is configured, preventing them from affecting the native JupyterLab UI otherwise.
]]>Agent Platform Workbench image release
The following Agent Platform Workbench instances image releases are available:
workbench-instances-2603 - Debian 12)
workbench-instances - Debian 11)
Installed latest packages from upstream dependencies.
Installed latest packages from upstream dependencies.
Fixed a race condition that could cause JupyterLab to be unreachable (HTTP 524) on GPU instances.
Fixed broken cupy installation.
Secure Boot is compatible with GPUs
You can now enable Secure Boot on Agent Platform Workbench instances that have a
GPU attached. Secure Boot with GPUs is supported on the workbench-instances-2603
VM image and the workbench-container-2606 custom container, which include a
Secure Boot-signed NVIDIA GPU driver so the driver loads under Secure Boot. For
more information, see Create an
instance.
Secure Boot is compatible with GPUs
You can now enable Secure Boot on Agent Platform Workbench instances that have a
GPU attached. Secure Boot with GPUs is supported on the workbench-instances-2603
VM image and the workbench-container-2606 custom container, which include a
Secure Boot-signed NVIDIA GPU driver so the driver loads under Secure Boot. For
more information, see Create an
instance.
Secure Boot is compatible with GPUs
You can now enable Secure Boot on Agent Platform Workbench instances that have a
GPU attached. Secure Boot with GPUs is supported on the workbench-instances-2603
VM image and the workbench-container-2606 custom container, which include a
Secure Boot-signed NVIDIA GPU driver so the driver loads under Secure Boot. For
more information, see Create an
instance.
A Missing Authorization vulnerability was discovered in repositories in BigQuery, Dataform, and Colab Enterprise. An authenticated attacker could potentially escalate permissions and perform cross-tenant repository takeover. For more information, see the GCP-2026-047 security bulletin.
]]>Agent Platform Workbench image release
The following Agent Platform Workbench instances image release is available:
workbench-instances-2603 - Debian 12)
Installed latest packages from upstream dependencies.
Fixed a race condition that could cause JupyterLab to be unreachable (HTTP 524) on GPU instances.
Fixed an issue where long-running requests (for example, streaming or long-poll connections) could be terminated after about 60 seconds.
]]>Python 3.12 base containers for Agent Platform Workbench custom containers
You can build custom containers for Agent Platform Workbench instances using Python 3.12 base containers, in addition to the default Python 3.10 base containers. The Python 3.12 standard and slim base containers are available at the following URIs:
us-docker.pkg.dev/workbench-images/gcr.io/workbench-container-2606:latestus-docker.pkg.dev/workbench-images/gcr.io/workbench-container-slim-2606:latestPython 3.12 base containers for Agent Platform Workbench custom containers
You can build custom containers for Agent Platform Workbench instances using Python 3.12 base containers, in addition to the default Python 3.10 base containers. The Python 3.12 standard and slim base containers are available at the following URIs:
us-docker.pkg.dev/workbench-images/gcr.io/workbench-container-2606:latestus-docker.pkg.dev/workbench-images/gcr.io/workbench-container-slim-2606:latestPython 3.12 base containers for Agent Platform Workbench custom containers
You can build custom containers for Agent Platform Workbench instances using Python 3.12 base containers, in addition to the default Python 3.10 base containers. The Python 3.12 standard and slim base containers are available at the following URIs:
us-docker.pkg.dev/workbench-images/gcr.io/workbench-container-2606:latestus-docker.pkg.dev/workbench-images/gcr.io/workbench-container-slim-2606:latestAgent Platform Workbench image release
The following Agent Platform Workbench instances image release is available:
workbench-instances-2603 - Debian 12)
Installed latest packages from upstream dependencies.
Installed TensorFlow and PyTorch packages to the default kernel.
]]>Agent Platform Workbench image release
The following Agent Platform Workbench instances image release is available:
workbench-instances-2603 - Debian 12)
Installed latest packages from upstream dependencies.
Fixed an issue where notebook kernels could become unavailable if the Dataproc plugin failed to load.
]]>Agent Platform Workbench image release
The following Agent Platform Workbench instances image releases are available:
workbench-instances-2603 - Debian 12)
workbench-instances - Debian 11)
Installed latest packages from upstream dependencies.
Installed latest packages from upstream dependencies.
Fixed a duplicate "Python 3 (ipykernel)" kernel appearing in the launcher.
]]>Agent Platform Workbench image release
The following Agent Platform Workbench instances image release is available:
workbench-instances-2603 - Debian 12)
Installed latest packages from upstream dependencies.
]]>Agent Platform Workbench image release
The following Agent Platform Workbench instances image release is available:
workbench-instances - Debian 11)
Installed latest packages from upstream dependencies.
Fixed pip availability in the base environment.
Hardened JupyterLab authentication configuration.
]]>Data Science Agent
Generally available: Use the Data Science Agent to automate exploratory data analysis, perform machine learning tasks, and deliver insights from within a Colab Enterprise notebook. To get started, see Use the Data Science Agent.
Vertex AI Extensions deprecation
Vertex AI Extensions is deprecated and will be shut down after November 26, 2026. We recommend migrating to Agent Platform to avoid service disruption.
]]>Agent Platform Workbench image release
The following Agent Platform Workbench instances image release is available:
workbench-instances-2603 - Debian 12)
Installed latest packages from upstream dependencies.
Fixed a Python 3.12 compatibility issue in the JupyterLab server configuration.
Hardened JupyterLab authentication configuration.
]]>Agent Platform Workbench image release
The following Agent Platform Workbench instances image release is available:
workbench-instances-2603 - Debian 12)
Installed latest packages from upstream dependencies.
]]>Agent Platform Workbench image release
The following Agent Platform Workbench instances image release is available:
workbench-instances-2603 - Debian 12)
Installed latest packages from upstream dependencies.
Improved metadata server resolution reliability on Debian 12 by using the recommended metadata.google.internal name.
]]>Agent Platform Workbench image release
The following Agent Platform Workbench instances image release is available:
workbench-instances-2603 - Debian 12)
Installed latest packages from upstream dependencies.
]]>Agent Platform Workbench image release
The following Agent Platform Workbench instances image releases are available:
workbench-instances-2603 - Debian 12)
workbench-instances - Debian 11)
Installed latest packages from upstream dependencies.
Installed latest packages from upstream dependencies.
Fixed intermittent connectivity failures caused by proxy TLS certificate rotation.
Fixed intermittent connectivity failures caused by proxy TLS certificate rotation.
The post-startup script now re-runs after an instance auto-upgrade.
The post-startup script now re-runs after an instance auto-upgrade.
]]>RAG Cross Corpus Retrieval
RAG Cross Corpus Retrieval is available in public preview. This feature allows you to retrieve relevant contexts or generate answers from multiple RAG corpora simultaneously using the AsyncRetrieveContexts and AskContexts APIs.
For more information, see RAG Cross Corpus Retrieval.
]]>Anthropic's Claude Opus 4.7
Claude Opus 4.7 is available in Model Garden.
]]>Visualization cells
Generally available: You can use visualization cells to generate interactive and editable visualizations from within a Colab Enterprise notebook. You can configure the chart type, aggregation, colors, labels, and other aspects of the visualization to help you explore data and discover insights. For more information, see Use visualization cells.
]]>SQL cells
Generally available: You can use SQL cells to write, edit, and run SQL queries directly from your Colab Enterprise notebooks. For more information, see Use SQL cells.
]]>Metadata search for RAG Engine
Use schema-based metadata search in Vertex AI RAG Engine. You can define a metadata schema for a corpus, attach metadata to files within that corpus, and use this metadata to filter contexts during retrieval. For more information, see Filter with metadata search.
]]>Gemma 4 26B A4B IT is available as an experimental launch in Model Garden. This is an open model built by Google DeepMind. Gemma 4 models are multimodal, handling text and image input and generating text output. Gemma 4 26B A4B IT is available as a managed API in Model Garden. To learn more, see Gemma 4 26B A4B IT.
Vertex AI RAG Engine Serverless mode
Vertex AI RAG Engine Serverless mode is now available in public preview. Serverless mode provides a fully managed database for storing RAG resources that abstracts away database provisioning and scaling. You can seamlessly switch between Serverless mode and Spanner mode, which provides dedicated, isolated database instances.
For more information, see the following:
]]>Veo 3.1 Lite
Veo 3.1 Lite is available in public preview. This release is our most cost-efficient Veo on Vertex AI model.
For more information, see 3.1 Lite Generate
Gemini 2.5 model retirement dates updated
The retirement dates for Gemini 2.5 Pro, Gemini 2.5 Flash-Lite, and Gemini 2.5 Flash have been updated to October 16, 2026. For more information, see Model versions and lifecycle.
]]>M140 release
The M140 release of Vertex AI Workbench instances includes the following:
Workbench Image Release 26.03
Released the new 26.03 image version under the following image family workbench-instances-2603. This major update introduces:
Gemini CLI Update: Minor updates to Gemini CLI's dependencies.
]]>Lyria 3
Lyria is available in public
preview. You can use
lyria-3-pro-preview to generate 184 seconds of audio, or
lyria-3-clip-preview to generate 30 seconds of audio.
For more information, see the following:
]]>Imagen generation GA endpoints deprecation
The following table describes image generation endpoints that are deprecated and their replacements. We recommend updating your model endpoints before June 30, 2026, to avoid service disruption.
| Discontinued endpoints | Recommended endpoint migration |
|---|---|
imagegeneration@002 |
gemini-2.5-flash-image |
imagegeneration@003 |
gemini-2.5-flash-image |
imagegeneration@004 |
gemini-2.5-flash-image |
imagegeneration@005 |
gemini-2.5-flash-image |
imagegeneration@006 |
gemini-2.5-flash-image |
imagetext@001 |
gemini-2.5-flash-image |
imagen-3.0-capability-001 |
gemini-2.5-flash-image |
imagen-3.0-capability-002 |
gemini-2.5-flash-image |
imagen-3.0-fast-generate-001 |
gemini-2.5-flash-image |
imagen-3.0-generate-001 |
gemini-2.5-flash-image |
imagen-3.0-generate-002 |
gemini-2.5-flash-image |
imagen-4.0-fast-generate-001 |
gemini-2.5-flash-image |
imagen-4.0-generate-001 |
gemini-2.5-flash-image |
imagen-4.0-ultra-generate-001 |
gemini-2.5-flash-image |
Video generation GA endpoints deprecation
The following table describes video generation endpoints that are deprecated and their replacements. We recommend updating your model endpoints before June 30, 2026, to avoid service disruption.
| Discontinued endpoints | Recommended endpoint migration |
|---|---|
veo-3.0-generate-001 |
veo-3.1-generate-001 |
veo-3.0-fast-generate-001 |
veo-3.1-fast-generate-001 |
veo-2.0-generate-001 |
veo-3.1-generate-001 |
Vertex Explainable AI is deprecated. For details, see Vertex AI deprecations.
]]>