Improved Google Cloud Storage query performance for credential-vended Iceberg tables

UpdateJul 21, 2026VerifiedAdded Sep 22, 2026

You can now set the VENDED_CREDENTIAL_STORAGE_REGION parameter on Google Cloud Storage-backed externally managed Iceberg tables that use catalog-vended credentials. Setting this parameter to your Google Cloud Storage bucket’s region can significantly improve query latency.

SQL Governance Apache Iceberg Observability Regions

Read Snowflake's release notes

https://docs.snowflake.com/en/release-notes/2026/other/2026-07-21-iceberg-vended-credentials-gcs-region-param

Summaries of vendors' own notes. Product names and logos belong to their owners; logos via logo.dev.

More Snowflake releases

SnowflakeJul 22, 2026

External OAuth and configurable scopes for MCP servers (General availability)

Two new hierarchical parameters let you bind MCP servers to your organization’s existing identity provider (IdP) and control which OAuth scopes MCP clients discover. This enables MCP clients such as Claude, Cursor, and ChatGPT to authenticate against your corporate IdP instead of Snowflake OAuth.

GALLMsMCPSecuritySource

SnowflakeJul 22, 2026

Refresh multiple dynamic tables in one ALTER statement

You can now refresh multiple dynamic tables in a single ALTER DYNAMIC TABLE ... REFRESH statement by supplying a comma-separated list of table names. Snowflake merges the upstream dependencies of every listed dynamic table into one pipeline and refreshes all of them at a single data timestamp. Shared upstreams refresh exactly once.

UpdateStreamingData integrationSource

SnowflakeJul 20, 2026

OIDC federated authentication (Public Preview)

OpenID Connect (OIDC) security integrations for federated single sign-on (SSO) are available in Public Preview. Multiple OIDC integrations, or OIDC alongside an existing SAML2 integration, require identifier-first login . Without identifier-first login, only one SSO integration (SAML2 or OIDC) can be ENABLED=TRUE at a time.

PreviewSecurityDeveloper toolsSource

SnowflakeJul 20, 2026

Built-in network rules for additional Microsoft applications

Snowflake now maintains built-in network rules for five additional Microsoft partner applications: Built-in network rules define the set of allowed IP addresses that a frequently used, third-party partner application uses to connect with Snowflake.

UpdateGovernanceSource

SnowflakeJul 20, 2026

DML into frozen regions of dynamic tables (General availability)

You can now use DML statements (INSERT, UPDATE, MERGE, DELETE) to modify rows directly in the frozen region of a dynamic table. This enables use cases such as GDPR-required row deletions or correcting specific records without triggering a full refresh of the active region. For more information, see DML into a frozen region .

GARegionsSource

SnowflakeJul 20, 2026

Pass-through policies for dynamic tables with incremental refresh (General availability)

Dynamic tables that have base tables with arbitrary masking or row access policies can now maintain incremental refresh when the policy is pass-through for the role used during refresh (that is, when the refresh role has unrestricted access to all rows and columns regardless of the policy condition).

GAGovernanceSource

SnowflakeJul 23, 2026

SQL environment variable and private Git package support for dbt Projects on Snowflake

Environment variable support for dbt Projects on Snowflake is now generally available. Manage per-developer schemas, dynamic runtime values, secrets, and multiple environments in a single, Git-versioned env.yml file that Snowflake resolves before each run.

GASQLSecuritySource

SnowflakeJul 23, 2026

Snowflake Data Clean Rooms updates

Clean room UI users: New updates are applied to the UI automatically when a user starts a new session after a new update is deployed. To ensure new updates are applied, make sure to log out and log back into the UI. Clean room API users: API updates are applied either manually or automatically to an account. Learn how to manage updates for Data Clean Rooms.

UpdateSQLObservabilityDeveloper toolsSource

Also shipped on Jul 21, 2026

Databricks Databricks SQLJul 21, 2026

Warehouse-level statement timeouts (Beta)

You can now set a statement timeout on a single SQL warehouse so that different warehouses can apply different timeouts to their queries. Set the timeout with the statement_timeout field in the Create or Update warehouse APIs. This feature is in Beta and is API-only. See Warehouse-level timeout .

BetaSQLDeveloper toolsSource

Databricks LakeflowJul 21, 2026

Reddit Ads connector is now available in Beta

The managed Reddit Ads connector in Lakeflow Connect is now available in Beta. You can use the connector to ingest advertising campaign data and performance metrics from Reddit Ads into Databricks. See Reddit Ads connector .

BetaData integrationObservabilityPerformanceSource

Databricks Databricks Data Intelligence PlatformJul 21, 2026

Context-based ingress control for workspaces public access is now generally available

Context-based ingress control for workspaces public access is now generally available. Control who can reach your workspace endpoints using allow and deny rules that allow you to combine identities, network sources, and request types. See Context-based ingress control .

GASource

Google Cloud Gemini Enterprise Agent PlatformJul 21, 2026

Gemini 3.6 Flash and 3.5 Flash-Lite are generally available (GA)

Gemini 3.6 Flash and Gemini 3.5 Flash-Lite are now generally available (GA) and available for production use. These models are designed to improve upon their predecessors' capabilities, including improved token usage and improved document understanding. See the linked model information pages for more information.

GALLMsDeveloper toolsSource

Google Cloud Gemini Enterprise Agent PlatformJul 21, 2026

CodeMender available in Public Preview

CodeMender is now available in Preview . CodeMender is an AI code security agent that can find, verify, and fix deep vulnerabilities in your codebase. CodeMender wraps a fine-tuned harness around a large language model (LLM), using Google DeepMind-engineered prompts, skills, and orchestration logic to turn the model into an agentic system specialized in...

PreviewAI agentsLLMsSecuritySource

Google Cloud Gemini Enterprise Agent PlatformJul 21, 2026

Open model endpoint deprecations

The following open model endpoints are deprecated and will be retired on October 21, 2026. For more information, see Open model deprecations . deepseek-ocr-maas deepseek-r1-0528-maas deepseek-v3.2-maas deepseek-v3.1-maas glm-5-maas glm-4.7-maas gpt-oss-20b-maas kimi-k2-thinking-maas llama-3.3-70b-instruct-maas minimax-m2-maas...

DeprecationLLMsSource