Changelog

PyPI History

3.11.0 (2026-02-19)

Documentation

• Update documentation for AutokeyAdmin service and messages to support folder and project-level configurations (4ca6f9e2f825c185d092f9879c05098659b1a871)

• Clarify supported resources for the crypto_key_backend field in ImportJob (4ca6f9e2f825c185d092f9879c05098659b1a871)

Features

• Add KeyProjectResolutionMode to AutokeyConfig to support project-level configurations (4ca6f9e2f825c185d092f9879c05098659b1a871)

• Add more post-quantum (PQ) signature algorithms to CryptoKeyVersion (4ca6f9e2f825c185d092f9879c05098659b1a871)

• Added DeleteCryptoKey and DeleteCryptoKeyVersion RPCs to permanently remove resources (4ca6f9e2f825c185d092f9879c05098659b1a871)

• Added ListRetiredResources and GetRetiredResource RPCs to manage and view these records (4ca6f9e2f825c185d092f9879c05098659b1a871)

• Introduced the RetiredResource resource to track records of deleted keys and prevent the reuse of their resource names (4ca6f9e2f825c185d092f9879c05098659b1a871)

3.10.0 (2026-01-22)

Documentation

• A comment for field crypto_key_backend in message .google.cloud.kms.v1.CryptoKey is expanded to include SingleTenantHsmInstances (13f6df001f44f652e84e787f2d67d0f894ed57c4)

• A comment for enum value MODIFIED_GOOGLE_INITIATED_SYSTEM_OPERATION in enum AccessReason is changed (13f6df001f44f652e84e787f2d67d0f894ed57c4)

• A comment for enum value MODIFIED_CUSTOMER_INITIATED_ACCESS in enum AccessReason is changed (13f6df001f44f652e84e787f2d67d0f894ed57c4)

Features

• add the SingleTenantHsm functionality including the management API and resource types (13f6df001f44f652e84e787f2d67d0f894ed57c4)

3.9.0 (2026-01-15)

Documentation

• Marking MODIFIED_CUSTOMER_INITIATED_ACCESS and MODIFIED_GOOGLE_INITIATED_SYSTEM_OPERATION Key Access Justification codes as deprecated in favor of GOOGLE_RESPONSE_TO_PRODUCTION_ALERT (1a81689422520562771f36a58575d07e1ee18dd5)

3.8.0 (2026-01-08)

Features

• auto-enable mTLS when supported certificates are detected (c353aa5bcc937ef9399c8efc90492dadbcf01aa2)

• check Python and dependency versions in generated GAPICs (c353aa5bcc937ef9399c8efc90492dadbcf01aa2)

3.7.0 (2025-10-16)

Features

• Add support for Python 3.14 (98ee71abc0f97c88239b50bf0e0827df19630def)

Bug Fixes

• Deprecate credentials_file argument (98ee71abc0f97c88239b50bf0e0827df19630def)

3.6.0 (2025-09-22)

Features

• Add PublicKeyFormat enums XWING_RAW_BYTES (used for KEM_XWING) and DER (186cef2)

• Support KEY_ENCAPSULATION purpose and quantum-safe algorithms ML_KEM_768, ML_KEM_1024 and KEM_XWING (186cef2)

3.5.1 (2025-05-20)

Documentation

• [google-cloud-kms] A comment for enum value DESTROYED in enum CryptoKeyVersionState is changed (#13913) (cdca657)

3.5.0 (2025-05-15)

Features

• Adding eTag field to AutokeyConfig (5d7b972)

Documentation

• Updating docs for total_size field in KMS List APIs (5d7b972)

3.4.1 (2025-03-15)

Bug Fixes

• [Many APIs] Allow Protobuf 6.x (e06ee32)

• remove setup.cfg configuration for creating universal wheels (#13659) (59bfd42)

3.4.0 (2025-02-24)

Features

• [google-cloud-kms] Support PQC asymmetric signing algorithms ML_DSA_65 and SLH_DSA_SHA2_128s (#13538) (891365e)

• Add a PublicKeyFormat enum to allow specifying the format the (891365e)

3.3.1 (2025-02-18)

Bug Fixes

• deps: Require grpc-google-iam-v1>=0.14.0 (16e14c8)

3.3.0 (2025-02-12)

Features

• Add REST Interceptors which support reading metadata (908d742)

• Add support for reading selective GAPIC generation methods from service YAML (908d742)

3.2.2 (2025-01-13)

Documentation

• [google-cloud-kms] modify enum comment (#13410) (129140e)

3.2.1 (2024-12-18)

Documentation

• [google-cloud-kms] code documentation improvements (#13366) (0c0f37d)

3.2.0 (2024-12-12)

Features

• Add support for opt-in debug logging (feb5c03)

Bug Fixes

• Fix typing issue with gRPC metadata when key ends in -bin (feb5c03)

Documentation

• [google-cloud-kms] A comment for enum CryptoKeyVersionAlgorithm is changed (#13305) (028a334)

3.1.1 (2024-11-11)

Bug Fixes

• disable universe-domain validation (#13243) (d794dec)

3.1.0 (2024-10-24)

Features

• Add support for Python 3.13 (#13207) (ceb9be8)

3.0.0 (2024-09-23)

⚠ BREAKING CHANGES

• Pagination feature is introduced for method ListKeyHandles in service Autokey

Features

• Adding a state field for AutokeyConfig (b4c9770)

Bug Fixes

• Pagination feature is introduced for method ListKeyHandles in service Autokey (b4c9770)

Documentation

• A comment for field destroy_scheduled_duration in message .google.cloud.kms.v1.CryptoKey is updated for the default duration (b4c9770)

• Field service_resolvers in message .google.cloud.kms.v1.EkmConnection is Explicitly is marked as to have field behavior of Optional (b4c9770)

2.24.2 (2024-07-30)

Bug Fixes

• Retry and timeout values do not propagate in requests during pagination (189922a)

2.24.1 (2024-07-08)

Bug Fixes

• Allow Protobuf 5.x (#12867) (3362176)

2.24.0 (2024-06-24)

Features

• support Key Access Justifications policy configuration (6945437)

2.23.0 (2024-05-16)

Features

• add client library for KMS Autokey service, which enables automated KMS key provision and management (b74c6c2)

2.22.0 (2024-05-07)

Features

• introduce Long-Running Operations (LRO) for KMS (18b3c0d)

2.21.4 (2024-04-17)

Documentation

• [google-cloud-kms] in google.cloud.kms.v1.PublicKey, pem field is always populated (#12584) (1392da5)

2.21.3 (2024-03-05)

Bug Fixes

• deps: Exclude google-auth 2.24.0 and 2.25.0 (#12385) (d50f4d0)

2.21.2 (2024-02-22)

Bug Fixes

• deps: [Many APIs] Require google-api-core>=1.34.1 (#12307) (be87bc4)

• fix ValueError in test__validate_universe_domain (dd749df)

2.21.1 (2024-02-06)

Bug Fixes

• Add google-auth as a direct dependency (27dceb9)

• Add staticmethod decorator to _get_client_cert_source and _get_api_endpoint (27dceb9)

• Resolve AttributeError ‘Credentials’ object has no attribute ‘universe_domain’ (27dceb9)

2.21.0 (2024-02-01)

Features

• Allow users to explicitly configure universe domain (#12241) (aae72f5)

Documentation

• [google-cloud-kms] update comments (#12232) (7caca2e)

2.20.0 (2023-12-07)

Features

• Add support for python 3.12 (5cd98aa)

• Introduce compatibility with native namespace packages (5cd98aa)

Bug Fixes

• Require proto-plus >= 1.22.3 (5cd98aa)

• Use retry_async instead of retry in async client (5cd98aa)

2.19.2 (2023-10-09)

Documentation

• Minor formatting (#416) (0a09d11)

2.19.1 (2023-08-02)

Documentation

• Minor formatting (#411) (ea4717c)

2.19.0 (2023-07-21)

Features

• Add interoperable symmetric encryption system (#403) (39ad43d)

2.18.0 (2023-07-04)

Features

• Add interoperable symmetric encryption system (#396) (57141c2)

Bug Fixes

• Add async context manager return types (#398) (cb7c193)

2.17.0 (2023-05-12)

Features

• Added VerifyConnectivity RPC (#388) (b265bd7)

2.16.1 (2023-03-28)

Documentation

• Publish the API comment changes related to supporting different hash functions/values for ECDSA signing (#386) (c45e891)

2.16.0 (2023-03-23)

Features

• Add support for Coordinated External Keys (#382) (3f68192)

Documentation

• Fix formatting of request arg in docstring (#385) (94d33c2)

2.15.0 (2023-02-21)

Features

• Enable “rest” transport in Python for services supporting numeric enums (#377) (ae74545)

2.14.1 (2023-01-20)

Bug Fixes

• Add context manager return types (8137467)

Documentation

• Add documentation for enums (8137467)

2.14.0 (2023-01-10)

Features

• Add support for python 3.11 (#368) (753aff8)

2.13.0 (2022-12-14)

Features

• Add SHA-2 import methods (6311278)

• Add support for google.cloud.kms.__version__ (6311278)

• Add support for additional HMAC algorithms (6311278)

• Add typing to proto.Message based class attributes (6311278)

Bug Fixes

• Add dict typing for client_options (6311278)

• deps: Require google-api-core >=1.34.0, >=2.11.0 (dbe2f96)

• Drop usage of pkg_resources (dbe2f96)

• Fix timeout default values (dbe2f96)

Documentation

• samples: Snippetgen handling of repeated enum field (6311278)

• samples: Snippetgen should call await on the operation coroutine before calling result (dbe2f96)

2.12.3 (2022-10-07)

Bug Fixes

• deps: Allow protobuf 3.19.5 (#350) (cfdad0a)

2.12.2 (2022-10-03)

Bug Fixes

• deps: Require protobuf >= 3.20.2 (#347) (9287a76)

2.12.1 (2022-08-11)

Bug Fixes

• deps: allow protobuf < 5.0.0 (#322) (229e0f5)

• deps: require proto-plus >= 1.22.0 (229e0f5)

2.12.0 (2022-07-14)

Features

• add audience parameter (06a4096)

Bug Fixes

• deps: require google-api-core>=1.32.0,>=2.8.0 (#315) (82ab556)

• require python 3.7+ (#313) (28d244f)

2.11.2 (2022-06-03)

Bug Fixes

• deps: require protobuf <4.0.0dev (#299) (45b97e8)

Documentation

• fix changelog header to consistent size (#298) (d3f7a5b)

2.11.1 (2022-03-05)

Bug Fixes

• deps: require google-api-core>=1.31.5, >=2.3.2 (#247) (ef54503)

• deps: require proto-plus>=1.15.0 (ef54503)

Documentation

• add generated snippets (#236) (314485f)

• samples: updated var name to avoid shadowing built-in (#238) (5bbf2c3)

2.11.0 (2022-02-03)

Features

• add a new EkmService API (#233) (eb532f5)

• add api key support (#230) (fdf62ae)

Bug Fixes

• resolve DuplicateCredentialArgs error when using credentials_file (97f7ea5)

Documentation

• samples: fix typo in verify_asymmetric_ec.py (#227) (3817d73)

2.10.1 (2021-11-01)

Bug Fixes

• deps: drop packaging dependency (6d7b8c1)

• deps: require google-api-core >= 1.28.0 (6d7b8c1)

Documentation

• list oneofs in docstring (6d7b8c1)

2.10.0 (2021-10-18)

Features

• add support for Raw PKCS#1 signing keys (#195) (9c4f997)

2.9.0 (2021-10-08)

Features

• add context manager support in client (#190) (6707e79)

2.8.0 (2021-09-30)

Features

• add RPC retry information for MacSign, MacVerify, and GenerateRandomBytes (#186) (62591c8)

2.7.0 (2021-09-30)

Features

• add OAEP+SHA1 to the list of supported algorithms (#181) (65b2c97)

Bug Fixes

• improper types in pagers generation (8ff7501)

2.6.1 (2021-09-24)

Bug Fixes

• add ‘dict’ annotation type to ‘request’ (728e5e0)

2.6.0 (2021-08-30)

Features

• add support for Key Reimport (#167) (1aaaea9)

Documentation

• kms: add samples for new hmac and rng apis (#161) (558b740)

2.5.0 (2021-08-07)

Features

• add support for HMAC, Variable Key Destruction, and GenerateRandom (#157) (4b7c9f9)

2.4.3 (2021-07-29)

Documentation

• update README for attestation verification scripts (#151) (a1a111d)

2.4.2 (2021-07-28)

Bug Fixes

• enable self signed jwt for grpc (#149) (211fe79)

Documentation

• add Samples section to CONTRIBUTING.rst (#144) (88fee3a)

Miscellaneous Chores

• release as 2.4.2 (#150) (6663190)

2.4.1 (2021-07-20)

Bug Fixes

• deps: pin ‘google-{api,cloud}-core’, ‘google-auth’ to allow 2.x versions (#143) (c1f33e1)

2.4.0 (2021-07-12)

Features

• add always_use_jwt_access (#129) (cfa0802)

Bug Fixes

• disable always_use_jwt_access (#133) (8007b81)

Documentation

• Include verify_attestation_chains.py help text to attestations README (#134) (2f2bb49)

• omit mention of Python 2.7 in ‘CONTRIBUTING.rst’ (#1127) (#124) (5c3e273), closes #1126

2.3.0 (2021-06-14)

Features

• add from_service_account_info (6d115ce)

• add common resource path helpers (#74) (6d115ce)

• add ECDSA secp256k1 to the list of supported algorithms (#120) (65a453f)

• add script to verify attestations with certificate chains (#99) (7b0799f)

• expose client transport (6d115ce)

Bug Fixes

• deps: add packaging requirement (#114) (a6a894f)

• fix retryable errors (6d115ce)

• remove grpc send/recv limits (6d115ce)

• use correct retry deadline (6d115ce)

2.2.0 (2020-09-16)

Features

• regenerate client lib to pick up new mtls env (#55) (4d62c19)

Documentation

• add crypto_key_path_path method rename to UPGRADING.md (#45) (81db5d9), closes #43

2.1.0 (2020-08-27)

Features

• accept custom client_info (#41) (6688e80)

2.0.1 (2020-08-24)

Bug Fixes

• add system test back (#39) (fc5a720)

Documentation

• Generate using new common.py_samples() synthtool functionality (#35) (90097bc)

2.0.0 (2020-07-30)

⚠ BREAKING CHANGES

• migrate to microgenerator. (#16)

Features

• migrate to microgenerator. See Migration Guide. (#16) (605f757)

1.4.0 (2020-04-14)

Features

• add support for external key manager (via synth) (#8) (4077fc8)

1.3.0 (2020-02-12)

Features

• kms: add ProtectionLevel.External enum; standardize use of ‘optional’ and ‘required’ in docstrings (via synth) (#10070) (add232f)

• kms: undeprecate resource name helper methods, add 2.7 deprecation warning (via synth) (#10045) (23dca59)

Bug Fixes

• kms: deprecate resource name helper methods (via synth) (#9836) (a3eca00)

1.2.1

08-12-2019 13:44 PDT

Implementation Changes

• Remove send/recv msg size limit (via synth). (#8959)

Documentation

• Fix links to googleapis.dev (#8998)

• Update intersphinx mapping for requests. (#8805)

1.2.0

07-24-2019 16:42 PDT

Implementation Changes

• Accomodate new location of ‘IAMPolicyStub’ (via synth). (#8679)

New Features

• Add ‘options_’ argument to client’s ‘get_iam_policy’; pin black version (via synth). (#8656)

• Add ‘client_options’ support, update list method docstrings (via synth). (#8514)

Dependencies

• Bump minimum version for google-api-core to 1.14.0. (#8709)

• Update pin for ‘grpc-google-iam-v1’ to 0.12.3+. (#8647)

Documentation

• Link to googleapis.dev documentation in READMEs. (#8705)

• Add compatibility check badges to READMEs. (#8288)

1.1.0

06-27-2019 12:32 PDT

Implementation Changes

• Allow kwargs to be passed to create_channel (via synth). (#8395)

• Add empty lines (via synth). (#8062)

• Remove classifier for Python 3.4 for end-of-life. (#7535)

New Features

• Add ability to create keys via import, add crypto algorithms (via synth). (#8356)

• Retry idempotent codes for Encyrpt, Decrypt, Asymmetric Decrypt, Asymmetric Sign (via synth). (#7715)

• Add CAVIUM_V2_COMPRESSED option to KeyOperationAttestation (via synth). (#7396)

Documentation

• Update docstrings. (#7868)

• Update information in READMEs to indicate KMS is GA. (#7840)

Internal / Testing Changes

• Add docs job to publish to googleapis.dev. (#8464)

• Add disclaimer to auto-generated template files (via synth). (#8318)

• Suppress checking ‘cov-fail-under’ in nox default session (via synth). (#8245)

• Fix coverage in ‘types.py’; blacken ‘noxfile.py’ / ‘setup.py’ (via synth). (#8157)

• Add nox session docs, reorder methods (via synth). (#7775)

• Copy lintified proto files (via synth). (#7449)

1.0.0

02-13-2019 10:53 PST

Implementation Changes

• Remove unused message exports. (#7270)

• Pick up stub docstring fix in GAPIC generator. (#6974)

Documentation

• Updated client library documentation URLs. (#7307)

Internal / Testing Changes

• Add KMS system test (#7304)

• Add protos as an artifact to library (#7205)

• Update copyright headers

• Protoc-generated serialization update. (#7086)

0.2.1

12-18-2018 09:24 PST

Implementation Changes

• Import iam.policy from google.api_core. (#6741)

• Pick up changes in GAPIC generator. (#6499)

• Fix client_info bug, update docstrings. (#6414)

Dependencies

• Bump minimum api_core version for all GAPIC libs to 1.4.1. (#6391)

• Update IAM version in dependencies (#6362)

• Avoid broken ‘google-common-apis 1.5.4’ release. (#6355)

Documentation

• Document Python 2 deprecation (#6910)

• Normalize use of support level badges (#6159)

Internal / Testing Changes

• Update noxfile.

• Blacken all gen’d libs (#6792)

• Omit local deps (#6701)

• Run black at end of synth.py (#6698)

• Run Black on Generated libraries (#6666)

• Add templates for flake8, coveragerc, noxfile, and black. (#6642)

• Add synth metadata. (#6569)

• Add ‘mock’ to unit test dependencies for autogen libs. (#6402)

• Add / fix badges for PyPI / versions. (#6158)

• Don’t update nox in ‘kms/synth.py’. (#6233)

• Use new Nox (#6175)

• Don’t scribble on setup.py harder. (#6064)

• Harmonize / DRY ‘README.rst’ / ‘docs/index.rst’. (#6021)

• Exclude ‘setup.py’ from synth. (#6038)

0.2.0

Documentation

• Docs: Replace links to /stable/ with /latest/. (#5901)

Internal / Testing Changes

• Re-generate library using kms/synth.py (#5977)

• Re-generate library using kms/synth.py (#5951)

• Remove synth fix for replacing iam_policy_pb2_grpc (#5755)

0.1.0

New Features

• KMS v1