Google now recommends its latest Cloud Storage client libraries, which validate upload checksums end to end by default. This release adopts them. It’s a drop-in replacement for 1.6.0.

Improved

• Corrupted uploads are rejected before they’re stored. Object_Upload sends a CRC32C checksum of the exact file bytes, and Google rejects the upload if the data changed in transit.
  • Nothing is stored, and an existing file with the same name is never overwritten with bad data.
  • Before, the check ran after the file was stored, and an overwritten file could be lost.
• Clear error message. A rejected upload now explains that nothing was stored and that the upload can be retried.

Updated

• Google Cloud Storage client 5.0.0 (Google’s recommended minimum for .NET).
• The other Google client libraries, refreshed to their latest releases.

Good to know

• Uploads through signed URLs go directly from the browser to Google, so they aren’t covered by this automatic check.

Keyless authentication with Workload Identity Federation

Breaking change: the ProjectId, ClientEmail and PrivateKey inputs are removed from all actions and replaced by one mandatory Authentication input (a GCS_Authentication record) in GoogleCloudStorage_ext. After upgrading, refresh the dependency and pass the record on every call. Service account keys keep working exactly as before.

New

• Workload Identity Federation: set AuthenticationMethod to WorkloadIdentityFederation and no Google key is needed. The extension gets a JWT from your OIDC identity provider (Entra ID, Okta, Auth0, Keycloak and others) with the client-credentials grant, or uses a JWT you pass in SubjectToken, exchanges it with Google, and acts as your service account.
• Signed URLs in this mode are signed by the service account through Google's IAM API.
• New GCS_Authentication structure holding the settings for both methods.
• Clear error messages for missing fields, rejected identity provider credentials and missing Google permissions.

Updated dependencies

• Google.Apis / Google.Apis.Auth / Google.Apis.Core → 1.76.0
• Google.Apis.Storage.v1 → 1.76.0.4250
• Google.Api.Gax / Google.Api.Gax.Rest → 4.15.0