- AlloyDB introduces preview IAM group authentication (enable via flags) and Spanner now allows tables without explicit primary keys, using a hidden rowid.
- GKE adds opt‑out of the default Arm‑architecture taint for Arm nodes and preview support for CORS on GKE Gateway and Inference Gateway resources.
- Container‑Optimized OS releases include extensive security patches (multiple CVE fixes) and a note on potential boot/performance impacts for Confidential VMs using AMD SEV‑SNP.