googleapis
diff --git a/‎discovery/accessapproval-v1.json‎
Lines changed: 5 additions & 3 deletions b/‎discovery/accessapproval-v1.json‎
Lines changed: 5 additions & 3 deletions
diff --git a/‎discovery/accesscontextmanager-v1.json‎
Lines changed: 111 additions & 2 deletions b/‎discovery/accesscontextmanager-v1.json‎
Lines changed: 111 additions & 2 deletions
diff --git a/‎discovery/adexchangebuyer2-v2beta1.json‎
Lines changed: 10 additions & 2 deletions b/‎discovery/adexchangebuyer2-v2beta1.json‎
Lines changed: 10 additions & 2 deletions
diff --git a/‎discovery/admin-directory_v1.json‎
Lines changed: 11 additions & 1 deletion b/‎discovery/admin-directory_v1.json‎
Lines changed: 11 additions & 1 deletion
diff --git a/‎discovery/admin-reports_v1.json‎
Lines changed: 74 additions & 1 deletion b/‎discovery/admin-reports_v1.json‎
Lines changed: 74 additions & 1 deletion
@@ -913,7 +913,7 @@
       }
     }
   },
-  "revision": "20260126",
+  "revision": "20260703",
   "rootUrl": "https://accessapproval.googleapis.com/",
   "schemas": {
     "AccessApprovalServiceAccount": {
@@ -1351,7 +1351,8 @@
             "PQ_SIGN_HASH_SLH_DSA_SHA2_128S_SHA256",
             "PQ_SIGN_ML_DSA_44_EXTERNAL_MU",
             "PQ_SIGN_ML_DSA_65_EXTERNAL_MU",
-            "PQ_SIGN_ML_DSA_87_EXTERNAL_MU"
+            "PQ_SIGN_ML_DSA_87_EXTERNAL_MU",
+            "AES_256_KWP"
           ],
           "enumDescriptions": [
             "Not specified.",
@@ -1400,7 +1401,8 @@
             "The post-quantum stateless hash-based digital signature algorithm, at security level 1. Randomized pre-hash version supporting SHA256 digests.",
             "The post-quantum Module-Lattice-Based Digital Signature Algorithm, at security level 1. Randomized version supporting externally-computed message representatives.",
             "The post-quantum Module-Lattice-Based Digital Signature Algorithm, at security level 3. Randomized version supporting externally-computed message representatives.",
-            "The post-quantum Module-Lattice-Based Digital Signature Algorithm, at security level 5. Randomized version supporting externally-computed message representatives."
+            "The post-quantum Module-Lattice-Based Digital Signature Algorithm, at security level 5. Randomized version supporting externally-computed message representatives.",
+            "AES key wrap with zero padding algorithm (RFC 5649). Can only be used by keys with purpose AES_WRAPPING."
           ],
           "type": "string"
         },
 
@@ -1331,7 +1331,7 @@
       }
     }
   },
-  "revision": "20260506",
+  "revision": "20260722",
   "rootUrl": "https://accesscontextmanager.googleapis.com/",
   "schemas": {
     "AccessContextManagerOperationMetadata": {
@@ -1427,6 +1427,21 @@
       },
       "type": "object"
     },
+    "AddRequestHeader": {
+      "description": "Adds a request header to the API.",
+      "id": "AddRequestHeader",
+      "properties": {
+        "key": {
+          "description": "HTTP header key.",
+          "type": "string"
+        },
+        "value": {
+          "description": "HTTP header value.",
+          "type": "string"
+        }
+      },
+      "type": "object"
+    },
     "ApiOperation": {
       "description": "Identification for an API Operation.",
       "id": "ApiOperation",
@@ -1859,6 +1874,10 @@
           "description": "An AccessLevel resource name that allows protected resources inside the ServicePerimeters to access outside the ServicePerimeter boundaries. AccessLevels listed must be in the same policy as this ServicePerimeter. Referencing a nonexistent AccessLevel will cause an error. If an AccessLevel name is not specified, only resources within the perimeter can be accessed through Google Cloud calls with request origins within the perimeter. Example: `accessPolicies/MY_POLICY/accessLevels/MY_LEVEL`. If a single `*` is specified for `access_level`, then all EgressSources will be allowed.",
           "type": "string"
         },
+        "pscEndpoint": {
+          "$ref": "PrivateServiceConnectEndpoint",
+          "description": "A PrivateServiceConnectEndpoint that is allowed to access data outside the perimeter. The Private Service Connect endpoint may be in any organization, not just the organization that the perimeter is defined in."
+        },
         "resource": {
           "description": "A Google Cloud resource from the service perimeter that you want to allow to access data outside the perimeter. This field supports only projects. The project format is `projects/{project_number}`. You can't use `*` in this field to allow all Google Cloud resources.",
           "type": "string"
@@ -1956,8 +1975,13 @@
           "description": "Immutable. Assigned by the server during creation. The last segment has an arbitrary length and has only URI unreserved characters (as defined by [RFC 3986 Section 2.3](https://tools.ietf.org/html/rfc3986#section-2.3)). Should not be specified by the client during creation. Example: \"organizations/256/gcpUserAccessBindings/b3-BhcX_Ud5N\"",
           "type": "string"
         },
+        "principal": {
+          "$ref": "Principal",
+          "description": "Optional. Immutable. The principal that is subject to the access policies in this policy binding."
+        },
         "restrictedClientApplications": {
-          "description": "Optional. A list of applications that are subject to this binding's restrictions. If the list is empty, the binding restrictions will universally apply to all applications.",
+          "deprecated": true,
+          "description": "Optional. Deprecated: use scoped_access_settings instead. A list of applications that are subject to this binding's restrictions. If the list is empty, the binding restrictions will universally apply to all applications.",
           "items": {
             "$ref": "Application"
           },
@@ -2070,6 +2094,10 @@
           "description": "An AccessLevel resource name that allow resources within the ServicePerimeters to be accessed from the internet. AccessLevels listed must be in the same policy as this ServicePerimeter. Referencing a nonexistent AccessLevel will cause an error. If no AccessLevel names are listed, resources within the perimeter can only be accessed via Google Cloud calls with request origins within the perimeter. Example: `accessPolicies/MY_POLICY/accessLevels/MY_LEVEL`. If a single `*` is specified for `access_level`, then all IngressSources will be allowed.",
           "type": "string"
         },
+        "pscEndpoint": {
+          "$ref": "PrivateServiceConnectEndpoint",
+          "description": "A PrivateServiceConnectEndpoint that is allowed to access the perimeter. The Private Service Connect endpoint may be in any organization, not just the organization that the perimeter is defined in."
+        },
         "resource": {
           "description": "A Google Cloud resource that is allowed to ingress the perimeter. Requests from these resources will be allowed to access perimeter data. Currently only projects and VPCs are allowed. Project format: `projects/{project_number}` VPC network format: `//compute.googleapis.com/projects/{PROJECT_ID}/global/networks/{NAME}`. The project may be in any Google Cloud organization, not just the organization that the perimeter is defined in. `*` is not allowed, the case of allowing all Google Cloud resources only is not supported.",
           "type": "string"
@@ -2271,6 +2299,17 @@
       },
       "type": "object"
     },
+    "Modifier": {
+      "description": "Modifier to apply to the API requests.",
+      "id": "Modifier",
+      "properties": {
+        "addRequestHeader": {
+          "$ref": "AddRequestHeader",
+          "description": "Adds additional HTTP request headers."
+        }
+      },
+      "type": "object"
+    },
     "Operation": {
       "description": "This resource represents a long-running operation that is the result of a network API call.",
       "id": "Operation",
@@ -2374,6 +2413,32 @@
       },
       "type": "object"
     },
+    "Principal": {
+      "description": "The comprehensive identity container supporting identities including groups, service accounts and federated identities. Only one of them can be set to create an access binding.",
+      "id": "Principal",
+      "properties": {
+        "serviceAccount": {
+          "description": "Immutable. Service account email used to assign policies to a specific service account. If a service account is subject to multiple policies (e.g., if there is a policy for all service accounts in a project and a policy for the service account), the closest (i.e. the most specific) dry-run policy will be used for the dry-run functionality and the closest policy will be used for the enforcement.",
+          "type": "string"
+        },
+        "serviceAccountProjectNumber": {
+          "description": "Immutable. Cloud project number used to assign policies to all service accounts owned by the project.",
+          "type": "string"
+        }
+      },
+      "type": "object"
+    },
+    "PrivateServiceConnectEndpoint": {
+      "description": "Specifies the Private Service Connect endpoint that an API call refers to.",
+      "id": "PrivateServiceConnectEndpoint",
+      "properties": {
+        "forwardingRule": {
+          "description": "The full resource name of the global forwarding rule that identifies a Private Service Connect endpoint. Forwarding rule format: `//compute.googleapis.com/projects/{PROJECT_ID}/global/forwardingRules/{FORWARDING_RULE_ID}`.",
+          "type": "string"
+        }
+      },
+      "type": "object"
+    },
     "ReplaceAccessLevelsRequest": {
       "description": "A request to replace all existing Access Levels in an Access Policy with the Access Levels provided. This is done atomically.",
       "id": "ReplaceAccessLevelsRequest",
@@ -2457,6 +2522,28 @@
       },
       "type": "object"
     },
+    "ServicePattern": {
+      "description": "Service patterns used to allow access.",
+      "id": "ServicePattern",
+      "properties": {
+        "modifiers": {
+          "description": "Modifiers to apply to the requests that match the URL pattern.",
+          "items": {
+            "$ref": "Modifier"
+          },
+          "type": "array"
+        },
+        "pattern": {
+          "description": "URL pattern to allow. Only patterns of \".googleapis.com/*\", \"www.googleapis.com//*\" and \"*.appspot.com/* forms are supported, where should be alphanumerical name.",
+          "type": "string"
+        },
+        "service": {
+          "description": "Supported service to allow.",
+          "type": "string"
+        }
+      },
+      "type": "object"
+    },
     "ServicePerimeter": {
       "description": "`ServicePerimeter` describes a set of Google Cloud resources which can freely import and export data amongst themselves, but not export outside of the `ServicePerimeter`. If a request with a source within this `ServicePerimeter` has a target outside of the `ServicePerimeter`, the request will be blocked. Otherwise the request is allowed. There are two types of Service Perimeter - Regular and Bridge. Regular Service Perimeters cannot overlap, a single Google Cloud project or VPC network can only belong to a single regular Service Perimeter. Service Perimeter Bridges can contain only Google Cloud projects as members, a single Google Cloud project may belong to multiple Service Perimeter Bridges.",
       "id": "ServicePerimeter",
@@ -2736,6 +2823,13 @@
       "description": "Specifies how APIs are allowed to communicate within the Service Perimeter.",
       "id": "VpcAccessibleServices",
       "properties": {
+        "allowedServicePatterns": {
+          "description": "Specifies which Google services are allowed to be accessed from VPC networks in the service perimeter.",
+          "items": {
+            "$ref": "ServicePattern"
+          },
+          "type": "array"
+        },
         "allowedServices": {
           "description": "The list of APIs usable within the Service Perimeter. Must be empty unless 'enable_restriction' is True. You can specify a list of individual services, as well as include the 'RESTRICTED-SERVICES' value, which automatically includes all of the services protected by the perimeter.",
           "items": {
@@ -2746,6 +2840,21 @@
         "enableRestriction": {
           "description": "Whether to restrict API calls within the Service Perimeter to the list of APIs specified in 'allowed_services'.",
           "type": "boolean"
+        },
+        "servicePatternsEnforcementScopes": {
+          "description": "Defines the enforcement scopes of service patterns.",
+          "items": {
+            "enum": [
+              "SERVICE_PATTERNS_ENFORCEMENT_SCOPE_UNSPECIFIED",
+              "GOOGLE_APIS_VIA_PRIVATE_PATH"
+            ],
+            "enumDescriptions": [
+              "Default value. This can not be used.",
+              "Enables VPC Accessible Services enforcement for all APIs (including unsupported APIs) for Private Google Access configured with Private VIP and Private Service Connect Endpoint for Global Google APIs that uses 'all-apis' bundle."
+            ],
+            "type": "string"
+          },
+          "type": "array"
         }
       },
       "type": "object"
 
@@ -3115,7 +3115,7 @@
       }
     }
   },
-  "revision": "20260319",
+  "revision": "20260602",
   "rootUrl": "https://adexchangebuyer.googleapis.com/",
   "schemas": {
     "AbsoluteDateRange": {
@@ -3514,7 +3514,15 @@
     "CompleteSetupRequest": {
       "description": "Request message for indicating that the proposal's setup step is complete.",
       "id": "CompleteSetupRequest",
-      "properties": {},
+      "properties": {
+        "externalDealIds": {
+          "description": "The external deal ids of the deals to mark as setup completed. If empty, all the deals in the proposal will be marked as setup completed.",
+          "items": {
+            "type": "string"
+          },
+          "type": "array"
+        }
+      },
       "type": "object"
     },
     "ContactInformation": {
 
@@ -4729,7 +4729,7 @@
       }
     }
   },
-  "revision": "20260522",
+  "revision": "20260531",
   "rootUrl": "https://admin.googleapis.com/",
   "schemas": {
     "Alias": {
@@ -8008,6 +8008,11 @@
           "readOnly": true,
           "type": "array"
         },
+        "archivalTime": {
+          "description": "Output only. User's account archival time. (Read-only)",
+          "readOnly": true,
+          "type": "string"
+        },
         "archived": {
           "description": "Indicates if user is archived.",
           "type": "boolean"
@@ -8213,6 +8218,11 @@
           "readOnly": true,
           "type": "string"
         },
+        "suspensionTime": {
+          "description": "Output only. User's account suspension time. (Read-only)",
+          "readOnly": true,
+          "type": "string"
+        },
         "thumbnailPhotoEtag": {
           "description": "Output only. ETag of the user's photo (Read-only)",
           "readOnly": true,
 
@@ -126,6 +126,11 @@
               "location": "query",
               "type": "string"
             },
+            "agentInfoFilter": {
+              "description": "Optional. Filters on agent info fields in the activity. This filter gets applied in conjunction(AND) with other filters. Example: \"agentInfoFilter=agentId=\\\"agent-id\\\" AND agentName=\\\"agent-name\\\" AND agentOwnerEmail=\\\"agent-owner-email\\\"\"",
+              "location": "query",
+              "type": "string"
+            },
             "applicationInfoFilter": {
               "description": "Optional. Used to filter on the `oAuthClientId` field present in [`ApplicationInfo`](#applicationinfo) message. **Usage** ``` GET...&applicationInfoFilter=oAuthClientId=\"clientId\" GET...&applicationInfoFilter=oAuthClientId=%22clientId%22 ```",
               "location": "query",
@@ -690,7 +695,7 @@
       }
     }
   },
-  "revision": "20260504",
+  "revision": "20260724",
   "rootUrl": "https://admin.googleapis.com/",
   "schemas": {
     "Activities": {
@@ -727,6 +732,10 @@
         "actor": {
           "description": "User doing the action.",
           "properties": {
+            "agentAttributionInfo": {
+              "$ref": "AgentAttributionInfo",
+              "description": "Details of the AI agent that was the actor for the activity."
+            },
             "applicationInfo": {
               "description": "Details of the application that was the actor for the activity.",
               "properties": {
@@ -964,6 +973,10 @@
           "description": "IP address of the user doing the action. This is the Internet Protocol (IP) address of the user when logging into Google Workspace, which may or may not reflect the user's physical location. For example, the IP address can be the user's proxy server's address or a virtual private network (VPN) address. The API supports IPv4 and IPv6.",
           "type": "string"
         },
+        "isAgenticAction": {
+          "description": "Whether the activity was performed by an agent.",
+          "type": "boolean"
+        },
         "kind": {
           "default": "admin#reports#activity",
           "description": "The type of API resource. For an activity report, the value is `audit#activity`.",
@@ -983,6 +996,10 @@
             "$ref": "ResourceDetails"
           },
           "type": "array"
+        },
+        "userDeviceInfo": {
+          "$ref": "ActivityUserDeviceInfo",
+          "description": "Device details of the user doing the action."
         }
       },
       "type": "object"
@@ -1034,6 +1051,62 @@
       },
       "type": "object"
     },
+    "ActivityUserDeviceInfo": {
+      "description": "Device details of the user doing the action.",
+      "id": "ActivityUserDeviceInfo",
+      "properties": {
+        "deviceId": {
+          "description": "Output only. Device ID of the user's device.",
+          "readOnly": true,
+          "type": "string"
+        },
+        "deviceOsVersion": {
+          "description": "Output only. Device OS version of the user's device.",
+          "readOnly": true,
+          "type": "string"
+        },
+        "deviceType": {
+          "description": "Output only. The type of the user's device.",
+          "readOnly": true,
+          "type": "string"
+        }
+      },
+      "type": "object"
+    },
+    "AgentAttributionInfo": {
+      "description": "Details of the AI agent that was the actor for the activity.",
+      "id": "AgentAttributionInfo",
+      "properties": {
+        "agentId": {
+          "description": "The ID of the agent.",
+          "type": "string"
+        },
+        "agentName": {
+          "description": "The user visible name of the agent.",
+          "type": "string"
+        },
+        "agentOwner": {
+          "$ref": "AgentAttributionInfoAgentOwner",
+          "description": "The owner of the agent."
+        },
+        "agentType": {
+          "description": "Type of the agent.",
+          "type": "string"
+        }
+      },
+      "type": "object"
+    },
+    "AgentAttributionInfoAgentOwner": {
+      "description": "Details of the owner of the AI agent.",
+      "id": "AgentAttributionInfoAgentOwner",
+      "properties": {
+        "email": {
+          "description": "The email of the agent owner.",
+          "type": "string"
+        }
+      },
+      "type": "object"
+    },
     "AppliedLabel": {
       "description": "Details of the label applied on the resource.",
       "id": "AppliedLabel",