gcp Google Cloud release notes ·

Apigee X Update 1-18-0-apigee-2: LLM Function Calling & Security Fixes

securitygcpgaengineer
security feature patch announcement

Google Cloud has released Apigee X version 1-18-0-apigee-2, introducing new capabilities for LLM function calling within its security policies. This update enhances Model Armor sanitization by extracting function call arguments and responses, improving security for AI-driven applications. It also includes critical security fixes for the Java Callout policy and underlying infrastructure. Rollouts of this version began on July 27th, 2026, and will complete over several business days.

Security (1)
  • Apigee X

    Bug ID Description 534852923 Security fix for Apigee. Fixed a security issue in the Java Callout policy. N/A Security fix for Apigee infrastructure.

Features (1)
  • Apigee X

    SanitizeUserPrompt and SanitizeModelResponse policies now support function calling The SanitizeUserPrompt and SanitizeModelResponse policies now handle LLM function calling (tool use) flows. Two new optional XML elements extract function calling content for Model Armor sanitization: <FunctionResponseSource> in SanitizeUserPrompt: extracts function/tool response data from user turns. Used as a fallback when <UserPromptSource> returns empty on function calling turns. <FunctionCallSource> in SanitizeModelResponse: extracts function call arguments from model responses. Used as a

Fixes (1)
  • Apigee X

    Bug ID Description N/A Updates to infrastructure and libraries.

Notes (1)
  • Apigee X

    On July 27th, 2026, we released an updated version of Apigee (1-18-0-apigee-2). Note: Rollouts of this release began today and may take four or more business days to be completed across all Google Cloud zones. Your instances may not have the features and fixes available until the rollout is complete.

Read the original announcement →

https://docs.cloud.google.com/release-notes#July_27_2026

Related releases