3.12.0 (2026-03-26)
- Allow Protobuf 7.x (1eb7c268482e55971966e284dac2cbeb903adcbb)
- Require Python 3.9 (1eb7c268482e55971966e284dac2cbeb903adcbb)
- Require google-api-core >= 2.11.0 (1eb7c268482e55971966e284dac2cbeb903adcbb)
- Improve type checking (1eb7c268482e55971966e284dac2cbeb903adcbb)
3.11.0 (2026-02-19)
- Update documentation for AutokeyAdmin service and messages to support folder and project-level configurations (4ca6f9e2f825c185d092f9879c05098659b1a871)
- Clarify supported resources for the crypto_key_backend field in ImportJob (4ca6f9e2f825c185d092f9879c05098659b1a871)
- Add KeyProjectResolutionMode to AutokeyConfig to support project-level configurations (4ca6f9e2f825c185d092f9879c05098659b1a871)
- Add more post-quantum (PQ) signature algorithms to CryptoKeyVersion (4ca6f9e2f825c185d092f9879c05098659b1a871)
- Added DeleteCryptoKey and DeleteCryptoKeyVersion RPCs to permanently remove resources (4ca6f9e2f825c185d092f9879c05098659b1a871)
- Added ListRetiredResources and GetRetiredResource RPCs to manage and view these records (4ca6f9e2f825c185d092f9879c05098659b1a871)
- Introduced the RetiredResource resource to track records of deleted keys and prevent the reuse of their resource names (4ca6f9e2f825c185d092f9879c05098659b1a871)
3.10.0 (2026-01-22)
- A comment for field
crypto_key_backendin message.google.cloud.kms.v1.CryptoKeyis expanded to include SingleTenantHsmInstances (13f6df001f44f652e84e787f2d67d0f894ed57c4) - A comment for enum value
MODIFIED_GOOGLE_INITIATED_SYSTEM_OPERATIONin enumAccessReasonis changed (13f6df001f44f652e84e787f2d67d0f894ed57c4) - A comment for enum value
MODIFIED_CUSTOMER_INITIATED_ACCESSin enumAccessReasonis changed (13f6df001f44f652e84e787f2d67d0f894ed57c4)
- add the SingleTenantHsm functionality including the management API and resource types (13f6df001f44f652e84e787f2d67d0f894ed57c4)
3.9.0 (2026-01-15)
- Marking MODIFIED_CUSTOMER_INITIATED_ACCESS and MODIFIED_GOOGLE_INITIATED_SYSTEM_OPERATION Key Access Justification codes as deprecated in favor of GOOGLE_RESPONSE_TO_PRODUCTION_ALERT (1a81689422520562771f36a58575d07e1ee18dd5)
3.8.0 (2026-01-08)
- auto-enable mTLS when supported certificates are detected (c353aa5bcc937ef9399c8efc90492dadbcf01aa2)
- check Python and dependency versions in generated GAPICs (c353aa5bcc937ef9399c8efc90492dadbcf01aa2)
3.7.0 (2025-10-16)
- Add support for Python 3.14 (98ee71abc0f97c88239b50bf0e0827df19630def)
- Deprecate credentials_file argument (98ee71abc0f97c88239b50bf0e0827df19630def)
3.6.0 (2025-09-22)
- Add PublicKeyFormat enums XWING_RAW_BYTES (used for KEM_XWING) and DER (186cef2)
- Support KEY_ENCAPSULATION purpose and quantum-safe algorithms ML_KEM_768, ML_KEM_1024 and KEM_XWING (186cef2)
3.5.1 (2025-05-20)
- [google-cloud-kms] A comment for enum value
DESTROYEDin enumCryptoKeyVersionStateis changed (#13913) (cdca657)
3.5.0 (2025-05-15)
- Adding eTag field to AutokeyConfig (5d7b972)
- Updating docs for total_size field in KMS List APIs (5d7b972)
3.4.1 (2025-03-15)
- [Many APIs] Allow Protobuf 6.x (e06ee32)
- remove setup.cfg configuration for creating universal wheels (#13659) (59bfd42)
3.4.0 (2025-02-24)
- [google-cloud-kms] Support PQC asymmetric signing algorithms ML_DSA_65 and SLH_DSA_SHA2_128s (#13538) (891365e)
- Add a PublicKeyFormat enum to allow specifying the format the (891365e)
3.3.1 (2025-02-18)
- deps: Require grpc-google-iam-v1>=0.14.0 (16e14c8)
3.3.0 (2025-02-12)
- Add REST Interceptors which support reading metadata (908d742)
- Add support for reading selective GAPIC generation methods from service YAML (908d742)
3.2.2 (2025-01-13)
3.2.1 (2024-12-18)
3.2.0 (2024-12-12)
- Add support for opt-in debug logging (feb5c03)
- Fix typing issue with gRPC metadata when key ends in -bin (feb5c03)
3.1.1 (2024-11-11)
3.1.0 (2024-10-24)
3.0.0 (2024-09-23)
- Pagination feature is introduced for method ListKeyHandles in service Autokey
- Adding a state field for AutokeyConfig (b4c9770)
- Pagination feature is introduced for method ListKeyHandles in service Autokey (b4c9770)
- A comment for field destroy_scheduled_duration in message .google.cloud.kms.v1.CryptoKey is updated for the default duration (b4c9770)
- Field service_resolvers in message .google.cloud.kms.v1.EkmConnection is Explicitly is marked as to have field behavior of Optional (b4c9770)
2.24.2 (2024-07-30)
- Retry and timeout values do not propagate in requests during pagination (189922a)
2.24.1 (2024-07-08)
2.24.0 (2024-06-24)
- support Key Access Justifications policy configuration (6945437)
2.23.0 (2024-05-16)
- add client library for KMS Autokey service, which enables automated KMS key provision and management (b74c6c2)
2.22.0 (2024-05-07)
- introduce Long-Running Operations (LRO) for KMS (18b3c0d)
2.21.4 (2024-04-17)
- [google-cloud-kms] in google.cloud.kms.v1.PublicKey, pem field is always populated (#12584) (1392da5)
2.21.3 (2024-03-05)
2.21.2 (2024-02-22)
- deps: [Many APIs] Require
google-api-core>=1.34.1(#12307) (be87bc4) - fix ValueError in test__validate_universe_domain (dd749df)
2.21.1 (2024-02-06)
- Add google-auth as a direct dependency (27dceb9)
- Add staticmethod decorator to _get_client_cert_source and _get_api_endpoint (27dceb9)
- Resolve AttributeError 'Credentials' object has no attribute 'universe_domain' (27dceb9)
2.21.0 (2024-02-01)
2.20.0 (2023-12-07)
- Add support for python 3.12 (5cd98aa)
- Introduce compatibility with native namespace packages (5cd98aa)
2.19.2 (2023-10-09)
2.19.1 (2023-08-02)
2.19.0 (2023-07-21)
2.18.0 (2023-07-04)
2.17.0 (2023-05-12)
2.16.1 (2023-03-28)
- Publish the API comment changes related to supporting different hash functions/values for ECDSA signing (#386) (c45e891)
2.16.0 (2023-03-23)
2.15.0 (2023-02-21)
2.14.1 (2023-01-20)
- Add context manager return types (8137467)
- Add documentation for enums (8137467)
2.14.0 (2023-01-10)
2.13.0 (2022-12-14)
- Add SHA-2 import methods (6311278)
- Add support for
google.cloud.kms.__version__(6311278) - Add support for additional HMAC algorithms (6311278)
- Add typing to proto.Message based class attributes (6311278)
- Add dict typing for client_options (6311278)
- deps: Require google-api-core >=1.34.0, >=2.11.0 (dbe2f96)
- Drop usage of pkg_resources (dbe2f96)
- Fix timeout default values (dbe2f96)
- samples: Snippetgen handling of repeated enum field (6311278)
- samples: Snippetgen should call await on the operation coroutine before calling result (dbe2f96)
2.12.3 (2022-10-07)
2.12.2 (2022-10-03)
2.12.1 (2022-08-11)
2.12.0 (2022-07-14)
- add audience parameter (06a4096)
2.11.2 (2022-06-03)
2.11.1 (2022-03-05)
- deps: require google-api-core>=1.31.5, >=2.3.2 (#247) (ef54503)
- deps: require proto-plus>=1.15.0 (ef54503)
- add generated snippets (#236) (314485f)
- samples: updated var name to avoid shadowing built-in (#238) (5bbf2c3)
2.11.0 (2022-02-03)
- resolve DuplicateCredentialArgs error when using credentials_file (97f7ea5)
2.10.1 (2021-11-01)
- list oneofs in docstring (6d7b8c1)
2.10.0 (2021-10-18)
2.9.0 (2021-10-08)
2.8.0 (2021-09-30)
2.7.0 (2021-09-30)
- improper types in pagers generation (8ff7501)
2.6.1 (2021-09-24)
- add 'dict' annotation type to 'request' (728e5e0)
2.6.0 (2021-08-30)
2.5.0 (2021-08-07)
2.4.3 (2021-07-29)
2.4.2 (2021-07-28)
2.4.1 (2021-07-20)
2.4.0 (2021-07-12)
- Include verify_attestation_chains.py help text to attestations README (#134) (2f2bb49)
- omit mention of Python 2.7 in 'CONTRIBUTING.rst' (#1127) (#124) (5c3e273), closes #1126
2.3.0 (2021-06-14)
- add
from_service_account_info(6d115ce) - add common resource path helpers (#74) (6d115ce)
- add ECDSA secp256k1 to the list of supported algorithms (#120) (65a453f)
- add script to verify attestations with certificate chains (#99) (7b0799f)
- expose client transport (6d115ce)
- deps: add packaging requirement (#114) (a6a894f)
- fix retryable errors (6d115ce)
- remove grpc send/recv limits (6d115ce)
- use correct retry deadline (6d115ce)
2.2.0 (2020-09-16)
2.1.0 (2020-08-27)
2.0.1 (2020-08-24)
2.0.0 (2020-07-30)
- migrate to microgenerator. (#16)
- migrate to microgenerator. See Migration Guide. (#16) (605f757)
1.4.0 (2020-04-14)
1.3.0 (2020-02-12)
- kms: add
ProtectionLevel.Externalenum; standardize use of 'optional' and 'required' in docstrings (via synth) (#10070) (add232f) - kms: undeprecate resource name helper methods, add 2.7 deprecation warning (via synth) (#10045) (23dca59)
08-12-2019 13:44 PDT
- Remove send/recv msg size limit (via synth). (#8959)
07-24-2019 16:42 PDT
- Accomodate new location of 'IAMPolicyStub' (via synth). (#8679)
- Add 'options_' argument to client's 'get_iam_policy'; pin black version (via synth). (#8656)
- Add 'client_options' support, update list method docstrings (via synth). (#8514)
- Bump minimum version for google-api-core to 1.14.0. (#8709)
- Update pin for 'grpc-google-iam-v1' to 0.12.3+. (#8647)
- Link to googleapis.dev documentation in READMEs. (#8705)
- Add compatibility check badges to READMEs. (#8288)
06-27-2019 12:32 PDT
- Allow kwargs to be passed to create_channel (via synth). (#8395)
- Add empty lines (via synth). (#8062)
- Remove classifier for Python 3.4 for end-of-life. (#7535)
- Add ability to create keys via import, add crypto algorithms (via synth). (#8356)
- Retry idempotent codes for Encyrpt, Decrypt, Asymmetric Decrypt, Asymmetric Sign (via synth). (#7715)
- Add CAVIUM_V2_COMPRESSED option to KeyOperationAttestation (via synth). (#7396)
- Add docs job to publish to googleapis.dev. (#8464)
- Add disclaimer to auto-generated template files (via synth). (#8318)
- Suppress checking 'cov-fail-under' in nox default session (via synth). (#8245)
- Fix coverage in 'types.py'; blacken 'noxfile.py' / 'setup.py' (via synth). (#8157)
- Add nox session
docs, reorder methods (via synth). (#7775) - Copy lintified proto files (via synth). (#7449)
02-13-2019 10:53 PST
- Updated client library documentation URLs. (#7307)
- Add KMS system test (#7304)
- Add protos as an artifact to library (#7205)
- Update copyright headers
- Protoc-generated serialization update. (#7086)
12-18-2018 09:24 PST
- Import
iam.policyfromgoogle.api_core. (#6741) - Pick up changes in GAPIC generator. (#6499)
- Fix
client_infobug, update docstrings. (#6414)
- Bump minimum
api_coreversion for all GAPIC libs to 1.4.1. (#6391) - Update IAM version in dependencies (#6362)
- Avoid broken 'google-common-apis 1.5.4' release. (#6355)
- Update noxfile.
- Blacken all gen'd libs (#6792)
- Omit local deps (#6701)
- Run black at end of synth.py (#6698)
- Run Black on Generated libraries (#6666)
- Add templates for flake8, coveragerc, noxfile, and black. (#6642)
- Add synth metadata. (#6569)
- Add 'mock' to unit test dependencies for autogen libs. (#6402)
- Add / fix badges for PyPI / versions. (#6158)
- Don't update nox in 'kms/synth.py'. (#6233)
- Use new Nox (#6175)
- Don't scribble on setup.py harder. (#6064)
- Harmonize / DRY 'README.rst' / 'docs/index.rst'. (#6021)
- Exclude 'setup.py' from synth. (#6038)
- Docs: Replace links to
/stable/with/latest/. (#5901)
- Re-generate library using kms/synth.py (#5977)
- Re-generate library using kms/synth.py (#5951)
- Remove synth fix for replacing
iam_policy_pb2_grpc(#5755)
- KMS v1