Changes
1.33.0 (2026-07-23)
Features
1.32.0 (2026-07-13)
Features
1.31.0 (2026-05-07)
1.30.0 (2026-04-30)
1.29.0 (2026-04-13)
1.28.0 (2026-04-09)
1.27.0 (2026-04-02)
1.26.0 (2026-02-19)
Features
- Add KeyProjectResolutionMode to AutokeyConfig to support project-level configurations (d3eb851)
- Add more post-quantum (PQ) signature algorithms to CryptoKeyVersion (d3eb851)
- Add support for project level key usage tracking (d3eb851)
- Added DeleteCryptoKey and DeleteCryptoKeyVersion RPCs to permanently remove resources (d3eb851)
- Added ListRetiredResources and GetRetiredResource RPCs to manage and view these records (d3eb851)
- Introduced the RetiredResource resource to track records of deleted keys and prevent the reuse of their resource names (d3eb851)
Documentation
- Clarify supported resources for the crypto_key_backend field in ImportJob (d3eb851)
- Update documentation for AutokeyAdmin service and messages to support folder and project-level configurations (d3eb851)
1.25.0 (2026-01-22)
Features
- add the SingleTenantHsm functionality including the management API and resource types (8ddeca5)
Documentation
- A comment for enum value
MODIFIED_CUSTOMER_INITIATED_ACCESS in enum AccessReason is changed (8ddeca5) - A comment for enum value
MODIFIED_GOOGLE_INITIATED_SYSTEM_OPERATION in enum AccessReason is changed (8ddeca5) - A comment for field
crypto_key_backend in message .google.cloud.kms.v1.CryptoKey is expanded to include SingleTenantHsmInstances (8ddeca5)
1.24.0 (2026-01-15)
Documentation
- Marking MODIFIED_CUSTOMER_INITIATED_ACCESS and MODIFIED_GOOGLE_INITIATED_SYSTEM_OPERATION Key Access Justification codes as deprecated in favor of GOOGLE_RESPONSE_TO_PRODUCTION_ALERT (80379ed)
1.23.2 (2025-10-15)
Bug Fixes
- kms: Conditionally enable AllowHardBoundTokens (fc134e0)
1.23.1 (2025-10-07)
Bug Fixes
- kms: Upgrade gRPC service registration func (bc93e83)
1.23.0 (2025-09-11)
Features
- kms: Add PublicKeyFormat enums XWING_RAW_BYTES (used for KEM_XWING) and DER (d73f912)
- kms: Support KEY_ENCAPSULATION purpose and quantum-safe algorithms ML_KEM_768, ML_KEM_1024 and KEM_XWING (d73f912)
1.22.0 (2025-05-21)
Features
- kms: Adding eTag field to AutokeyConfig (2a9d8ee)
Documentation
- kms: A comment for enum value
DESTROYED in enum CryptoKeyVersionState is changed (2a9d8ee) - kms: Updating docs for total_size field in KMS List APIs (2a9d8ee)
1.21.2 (2025-04-15)
Bug Fixes
- kms: Update google.golang.org/api to 0.229.0 (3319672)
1.21.1 (2025-03-13)
Bug Fixes
- kms: Update golang.org/x/net to 0.37.0 (1144978)
1.21.0 (2025-02-20)
Features
- kms: Add a PublicKeyFormat enum to allow specifying the format the public is going to be exported in (c08d347)
- kms: Support PQC asymmetric signing algorithms ML_DSA_65 and SLH_DSA_SHA2_128s (c08d347)
1.20.5 (2025-01-08)
Documentation
1.20.4 (2025-01-02)
Bug Fixes
- kms: Update golang.org/x/net to v0.33.0 (e9b0b69)
1.20.3 (2024-12-18)
Documentation
- kms: Code documentation improvements (4254053)
1.20.2 (2024-12-04)
Documentation
- kms: A comment for enum
CryptoKeyVersionAlgorithm is changed (8dedb87)
1.20.1 (2024-10-23)
Bug Fixes
- kms: Update google.golang.org/api to v0.203.0 (8bb87d5)
- kms: WARNING: On approximately Dec 1, 2024, an update to Protobuf will change service registration function signatures to use an interface instead of a concrete type in generated .pb.go files. This change is expected to affect very few if any users of this client library. For more information, see https://togithub.com/googleapis/google-cloud-go/issues/11020. (8bb87d5)
1.20.0 (2024-09-19)
Features
- kms: Adding a state field for AutokeyConfig (fdb4ea9)
Bug Fixes
- kms: Pagination feature is introduced for method
ListKeyHandles in service Autokey (fdb4ea9)
Documentation
- kms: A comment for field
destroy_scheduled_duration in message .google.cloud.kms.v1.CryptoKey is updated for the default duration (fdb4ea9) - kms: Field service_resolvers in message .google.cloud.kms.v1.EkmConnection is Explicitly is marked as to have field behavior of Optional (fdb4ea9)
1.19.1 (2024-09-12)
Bug Fixes
1.19.0 (2024-08-20)
Features
- kms: Add support for Go 1.23 iterators (84461c0)
1.18.5 (2024-08-08)
Bug Fixes
- kms: Update google.golang.org/api to v0.191.0 (5b32644)
1.18.4 (2024-07-24)
Bug Fixes
1.18.3 (2024-07-10)
Bug Fixes
1.18.2 (2024-07-01)
Bug Fixes
1.18.1 (2024-06-26)
Bug Fixes
1.18.0 (2024-06-20)
Features
- kms: Support Key Access Justifications policy configuration (#10398) (4fa4308)
1.17.1 (2024-05-22)
Bug Fixes
1.17.0 (2024-05-16)
Features
- kms: Add client library for KMS Autokey service, which enables automated KMS key provision and management (292e812)
1.16.0 (2024-05-08)
Features
- kms: Introduce Long-Running Operations (LRO) for KMS (3e25053)
- kms: Support the ED25519 asymmetric signing algorithm (3e25053)
1.15.9 (2024-05-01)
Bug Fixes
- kms: Bump x/net to v0.24.0 (ba31ed5)
Documentation
- kms: In google.cloud.kms.v1.PublicKey, pem field is always populated (1d757c6)
1.15.8 (2024-03-14)
Bug Fixes
- kms: Update protobuf dep to v1.33.0 (30b038d)
1.15.7 (2024-02-06)
Documentation
1.15.6 (2024-01-30)
Bug Fixes
- kms: Enable universe domain resolution options (fd1d569)
1.15.5 (2023-11-01)
Bug Fixes
- kms: Bump google.golang.org/api to v0.149.0 (8d2ab9f)
1.15.4 (2023-10-26)
Bug Fixes
- kms: Update grpc-go to v1.59.0 (81a97b0)
1.15.3 (2023-10-12)
Bug Fixes
- kms: Update golang.org/x/net to v0.17.0 (174da47)
1.15.2 (2023-09-11)
Documentation
1.15.1 (2023-08-08)
Documentation
1.15.0 (2023-07-24)
Features
- kms: Add interoperable symmetric encryption system (432864c)
1.14.0 (2023-07-18)
Features
- kms/inventory: Add resource_types to SearchAllResources, to allow filtering by resource type (#8261) (9d55bab)
1.13.0 (2023-07-10)
Features
- kms: Add interoperable symmetric encryption system (14b95d3)
1.12.1 (2023-06-20)
Bug Fixes
- kms: REST query UpdateMask bug (df52820)
1.12.0 (2023-06-13)
Features
- kms/inventory: Promote to GA (3abdfa1)
1.11.0 (2023-05-30)
Features
- kms: Update all direct dependencies (b340d03)
1.10.2 (2023-05-08)
Bug Fixes
- kms: Update grpc to v1.55.0 (1147ce0)
1.10.1 (2023-04-04)
Documentation
- kms: Publish the API comment changes related to supporting different hash functions/values for ECDSA signing (#7619) (597ea0f)
1.10.0 (2023-03-15)
Features
- kms: Add support for Coordinated External Keys (#7517) (64c6a6f)
- kms: Update iam and longrunning deps (91a1f78)
1.9.0 (2023-03-01)
Features
1.8.0 (2023-01-04)
Features
1.7.0 (2022-12-01)
Features
- kms: add SHA-2 import methods (7231644)
- kms: add support for additional HMAC algorithms (2a0b1ae)
1.6.0 (2022-11-03)
Features
- kms: rewrite signatures in terms of new location (3c4b2b3)
1.5.0 (2022-10-25)
Features
- kms: enable generation of Locations mixin (caf4afa)
- kms: start generating stubs dir (de2d180)
1.4.0 (2022-02-23)
Features
- kms: set versionClient to module version (55f0d92)
1.3.0 (2022-02-14)
Features
- kms: add file for tracking version (17b36ea)
1.2.0 (2022-02-04)
Features
- kms: add a new EkmService API (7f48e6b)
1.1.0 (2021-10-18)
Features
- kms: add OAEP+SHA1 to the list of supported algorithms (8c5c6cf)
- kms: add RPC retry information for MacSign, MacVerify, and GenerateRandomBytes Committer: @bdhess (1a0720f)
- kms: add support for Raw PKCS#1 signing keys (58bea89)
1.0.0
Stabilize GA surface.
0.2.0 (2021-08-30)
Features
- kms: add support for Key Reimport (bf4378b)
v0.1.0
This is the first tag to carve out kms as its own module. See Add a module to a multi-module repository.