google-cloud-storage 1.56.0 → 1.58.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 37d818583b06d396a9b237a24187b677bb5261c31e3a139714ef4f8fd868e4ec
-  data.tar.gz: d8ed3812b144e20a747c79147fd26642a7f8d4c9a5e017e925144f9e33afa717
+  metadata.gz: d5702660db1aed635fecb508a9f704e9f42fab5aa79db322097e775fbe0c60eb
+  data.tar.gz: e4ce8ea28ef05a416e3f1f751365f7fef62b2599be2d5b22dcd91d5a735b0cd4
 SHA512:
-  metadata.gz: 519fe7bc2cf869c804bbfac6ce300b300f99f065a594673d36cf344b3cacff1ff1fb4eec086903ddcbc4a4be108c66082f05d539ef9508570d43ec9c678893be
-  data.tar.gz: a82b8ddd47b64d71c5035491a87021912419213538a0b2105de3facf4a09aac927379b1c980e5612629426cc7e0ec5de3590480fcdc265fb1bdf172f28d1be05
+  metadata.gz: e981b3eddd57eb932728eeb6f3e19d4442e4d88f190aba854e764d95b901e4756b164142b835088407e3993c7f989ccfd24aac17432f02aff87fe8c3b4ccf921
+  data.tar.gz: dbe8ece884a8bbb25416806c236098e279eadd3b8d3e223a3134de71f76f40fc307a1a54dcedcf45512ae1e0e925eec3adc90ba3831b5a436fd7a531e55c190d

data/AUTHENTICATION.md

@@ -28,6 +28,12 @@ providing **Project ID** and **Service Account Credentials** directly in code.
 
 **Credentials** are discovered in the following order:
 
+> [!WARNING]
+> If you accept a credential configuration (JSON file or Hash) from an
+> external source for authentication to Google Cloud, you must validate it before
+> providing it to a Google API client library. Providing an unvalidated credential
+> configuration to Google APIs can compromise the security of your systems and data.
+
 1. Specify credentials in method arguments
 2. Specify credentials in configuration
 3. Discover credentials path in environment variables
@@ -81,11 +87,17 @@ The **Project ID** and the path to the **Credentials JSON** file can be configur
 instead of placing them in environment variables or providing them as arguments.
 
 ```ruby
+require "googleauth"
 require "google/cloud/storage"
 
+credentials = ::Google::Auth::ServiceAccountCredentials.make_creds(
+  json_key_io: ::File.open("/path/to/keyfile.json"),
+  scope: "https://www.googleapis.com/auth/devstorage.full_control"
+)
+
 Google::Cloud::Storage.configure do |config|
   config.project_id  = "my-project-id"
-  config.credentials = "path/to/keyfile.json"
+  config.credentials = credentials
 end
 
 storage = Google::Cloud::Storage.new

data/CHANGELOG.md

@@ -1,5 +1,24 @@
 # Release History
 
+### 1.58.0 (2026-01-08)
+
+#### Features
+
+* Adding support for partial success bucket list  ([#32173](https://github.com/googleapis/google-cloud-ruby/issues/32173)) 
+
+### 1.57.1 (2025-11-04)
+
+#### Documentation
+
+* add warning about loading unvalidated credentials ([#31776](https://github.com/googleapis/google-cloud-ruby/issues/31776)) 
+
+### 1.57.0 (2025-08-15)
+
+#### Features
+
+* Require Ruby 3.1 or later ([#30765](https://github.com/googleapis/google-cloud-ruby/issues/30765)) 
+* Support for using Faraday for HTTP requests ([#30759](https://github.com/googleapis/google-cloud-ruby/issues/30759)) 
+
 ### 1.56.0 (2025-04-21)
 
 #### Features

data/OVERVIEW.md

@@ -14,11 +14,17 @@ your code or via environment variables. Read more about the options for
 connecting in the {file:AUTHENTICATION.md Authentication Guide}.
 
 ```ruby
+require "googleauth"
 require "google/cloud/storage"
 
+credentials = ::Google::Auth::ServiceAccountCredentials.make_creds(
+  json_key_io: ::File.open("/path/to/keyfile.json"),
+  scope: "https://www.googleapis.com/auth/devstorage.full_control"
+)
+
 storage = Google::Cloud::Storage.new(
   project_id: "my-project",
-  credentials: "/path/to/keyfile.json"
+  credentials: credentials
 )
 
 bucket = storage.bucket "my-bucket"
@@ -531,14 +537,23 @@ created and owns the topic.)
 require "google/cloud/pubsub"
 require "google/cloud/storage"
 
-pubsub = Google::Cloud::Pubsub.new
+pubsub = Google::Cloud::PubSub.new
 storage = Google::Cloud::Storage.new
 
-topic = pubsub.create_topic "my-topic"
-topic.policy do |p|
-  p.add "roles/pubsub.publisher",
-        "serviceAccount:#{storage.service_account_email}"
-end
+topic_admin = pubsub.topic_admin
+topic_path = pubsub.topic_path "my-topic"
+topic = topic_admin.create_topic name: topic_path
+
+policy = {
+  bindings: [
+    {
+      role: "roles/pubsub.publisher",
+      members: ["serviceAccount:#{storage.service_account_email}"]
+    }
+  ]
+}
+
+pubsub.iam.set_iam_policy resource: topic_path, policy: policy
 
 bucket = storage.bucket "my-bucket"
 

data/lib/google/cloud/storage/bucket/acl.rb

@@ -352,7 +352,7 @@ module Google
           def auth! if_metageneration_match: nil
             update_predefined_acl! "authenticatedRead", if_metageneration_match: if_metageneration_match
           end
-          alias authenticatedRead! auth!
+          alias authenticatedRead! auth! # rubocop:disable Naming/MethodName
           alias auth_read! auth!
           alias authenticated! auth!
           alias authenticated_read! auth!
@@ -390,7 +390,7 @@ module Google
           def project_private! if_metageneration_match: nil
             update_predefined_acl! "projectPrivate", if_metageneration_match: if_metageneration_match
           end
-          alias projectPrivate! project_private!
+          alias projectPrivate! project_private! # rubocop:disable Naming/MethodName
 
           ##
           # Convenience method to apply the `publicRead` predefined ACL
@@ -408,7 +408,7 @@ module Google
           def public! if_metageneration_match: nil
             update_predefined_acl! "publicRead", if_metageneration_match: if_metageneration_match
           end
-          alias publicRead! public!
+          alias publicRead! public! # rubocop:disable Naming/MethodName
           alias public_read! public!
 
           # Convenience method to apply the `publicReadWrite` predefined ACL
@@ -426,7 +426,7 @@ module Google
           def public_write! if_metageneration_match: nil
             update_predefined_acl! "publicReadWrite", if_metageneration_match: if_metageneration_match
           end
-          alias publicReadWrite! public_write!
+          alias publicReadWrite! public_write! # rubocop:disable Naming/MethodName
 
           protected
 
@@ -718,7 +718,7 @@ module Google
           def auth! if_metageneration_match: nil
             update_predefined_default_acl! "authenticatedRead", if_metageneration_match: if_metageneration_match
           end
-          alias authenticatedRead! auth!
+          alias authenticatedRead! auth! # rubocop:disable Naming/MethodName
           alias auth_read! auth!
           alias authenticated! auth!
           alias authenticated_read! auth!
@@ -739,7 +739,7 @@ module Google
           def owner_full! if_metageneration_match: nil
             update_predefined_default_acl! "bucketOwnerFullControl", if_metageneration_match: if_metageneration_match
           end
-          alias bucketOwnerFullControl! owner_full!
+          alias bucketOwnerFullControl! owner_full! # rubocop:disable Naming/MethodName
 
           ##
           # Convenience method to apply the default `bucketOwnerRead`
@@ -757,7 +757,7 @@ module Google
           def owner_read! if_metageneration_match: nil
             update_predefined_default_acl! "bucketOwnerRead", if_metageneration_match: if_metageneration_match
           end
-          alias bucketOwnerRead! owner_read!
+          alias bucketOwnerRead! owner_read! # rubocop:disable Naming/MethodName
 
           ##
           # Convenience method to apply the default `private`
@@ -792,7 +792,7 @@ module Google
           def project_private! if_metageneration_match: nil
             update_predefined_default_acl! "projectPrivate", if_metageneration_match: if_metageneration_match
           end
-          alias projectPrivate! project_private!
+          alias projectPrivate! project_private! # rubocop:disable Naming/MethodName
 
           ##
           # Convenience method to apply the default `publicRead`
@@ -810,7 +810,7 @@ module Google
           def public! if_metageneration_match: nil
             update_predefined_default_acl! "publicRead", if_metageneration_match: if_metageneration_match
           end
-          alias publicRead! public!
+          alias publicRead! public! # rubocop:disable Naming/MethodName
           alias public_read! public!
 
           protected

data/lib/google/cloud/storage/bucket/list.rb

@@ -27,6 +27,14 @@ module Google
           # that match the request and this value should be passed to
           # the next {Google::Cloud::Storage::Project#buckets} to continue.
           attr_accessor :token
+          ##
+          # Provides a list of bucket names that are unreachable.
+          #
+          # This is only populated when `return_partial_success` is set to `true`
+          # in the call to {Google::Cloud::Storage::Project#buckets}.
+          #
+          # @return [Array<String>]
+          attr_reader :unreachable
 
           ##
           # @private Create a new Bucket::List with an array of values.
@@ -147,7 +155,7 @@ module Google
           # @private New Bucket::List from a Google API Client
           # Google::Apis::StorageV1::Buckets object.
           def self.from_gapi gapi_list, service, prefix = nil, max = nil,
-                             user_project: nil, soft_deleted: nil
+                             user_project: nil, soft_deleted: nil, return_partial_success: nil
             buckets = new(Array(gapi_list.items).map do |gapi_object|
               Bucket.from_gapi gapi_object, service, user_project: user_project
             end)
@@ -157,6 +165,7 @@ module Google
             buckets.instance_variable_set :@max, max
             buckets.instance_variable_set :@user_project, user_project
             buckets.instance_variable_set :@soft_deleted, soft_deleted
+            buckets.instance_variable_set :@unreachable, Array(gapi_list.unreachable) if return_partial_success
             buckets
           end
 

data/lib/google/cloud/storage/credentials.rb

@@ -25,18 +25,29 @@ module Google
       # Storage API.
       #
       # @example
+      #   # The recommended way to provide credentials is to use the `make_creds` method
+      #   # on the appropriate credentials class for your environment.
+      #
+      #   require "googleauth"
       #   require "google/cloud/storage"
       #
-      #   keyfile = "/path/to/keyfile.json"
-      #   creds = Google::Cloud::Storage::Credentials.new keyfile
+      #   credentials = ::Google::Auth::ServiceAccountCredentials.make_creds(
+      #     json_key_io: ::File.open("/path/to/keyfile.json"),
+      #     scope: "https://www.googleapis.com/auth/devstorage.full_control"
+      #   )
       #
       #   storage = Google::Cloud::Storage.new(
       #     project_id: "my-project",
-      #     credentials: creds
+      #     credentials: credentials
       #   )
       #
       #   storage.project_id #=> "my-project"
       #
+      # @note Warning: If you accept a credential configuration (JSON file or Hash) from an
+      #   external source for authentication to Google Cloud, you must validate it before
+      #   providing it to a Google API client library. Providing an unvalidated credential
+      #   configuration to Google APIs can compromise the security of your systems and data.
+      #
       class Credentials < Google::Auth::Credentials
         SCOPE = ["https://www.googleapis.com/auth/devstorage.full_control"].freeze
         PATH_ENV_VARS = [

data/lib/google/cloud/storage/file/acl.rb

@@ -335,7 +335,7 @@ module Google
                                    if_metageneration_match: if_metageneration_match,
                                    if_metageneration_not_match: if_metageneration_not_match
           end
-          alias authenticatedRead! auth!
+          alias authenticatedRead! auth! # rubocop:disable Naming/MethodName
           alias auth_read! auth!
           alias authenticated! auth!
           alias authenticated_read! auth!
@@ -382,7 +382,7 @@ module Google
                                    if_metageneration_match: if_metageneration_match,
                                    if_metageneration_not_match: if_metageneration_not_match
           end
-          alias bucketOwnerFullControl! owner_full!
+          alias bucketOwnerFullControl! owner_full! # rubocop:disable Naming/MethodName
 
           ##
           # Convenience method to apply the `bucketOwnerRead` predefined ACL
@@ -426,7 +426,7 @@ module Google
                                    if_metageneration_match: if_metageneration_match,
                                    if_metageneration_not_match: if_metageneration_not_match
           end
-          alias bucketOwnerRead! owner_read!
+          alias bucketOwnerRead! owner_read! # rubocop:disable Naming/MethodName
 
           ##
           # Convenience method to apply the `private` predefined ACL
@@ -513,7 +513,7 @@ module Google
                                    if_metageneration_match: if_metageneration_match,
                                    if_metageneration_not_match: if_metageneration_not_match
           end
-          alias projectPrivate! project_private!
+          alias projectPrivate! project_private! # rubocop:disable Naming/MethodName
 
           ##
           # Convenience method to apply the `publicRead` predefined ACL
@@ -557,7 +557,7 @@ module Google
                                    if_metageneration_match: if_metageneration_match,
                                    if_metageneration_not_match: if_metageneration_not_match
           end
-          alias publicRead! public!
+          alias publicRead! public! # rubocop:disable Naming/MethodName
           alias public_read! public!
 
           protected

data/lib/google/cloud/storage/policy/bindings.rb

@@ -168,10 +168,10 @@ module Google
           #     puts binding.role
           #   end
           #
-          def each &block
+          def each(&)
             return enum_for :each unless block_given?
 
-            @bindings.each(&block)
+            @bindings.each(&)
           end
 
           ##

data/lib/google/cloud/storage/project.rb

@@ -158,6 +158,9 @@ module Google
         #   bucket instances and their files.
         #
         #   See also {Bucket#requester_pays=} and {Bucket#requester_pays}.
+        # @param [Boolean] return_partial_success
+        # If true, the response will contain a list of unreachable buckets.
+        # If false, ListBuckets will throw an error if there are any unreachable buckets.
         #
         # @return [Array<Google::Cloud::Storage::Bucket>] (See
         #   {Google::Cloud::Storage::Bucket::List})
@@ -201,11 +204,22 @@ module Google
         #   soft_deleted_buckets.each do |bucket|
         #     puts bucket.name
         #   end
-        def buckets prefix: nil, token: nil, max: nil, user_project: nil, soft_deleted: nil
+        # @example Retrieve list of unreachable buckets
+        #   require "google/cloud/storage"
+        #
+        #   storage = Google::Cloud::Storage.new
+        #
+        #   buckets = storage.buckets return_partial_success: true
+        #   buckets.unreachable.each do |unreachable_bucket_name|
+        #     puts unreachable_bucket_name
+        #   end
+        #  
+        def buckets prefix: nil, token: nil, max: nil, user_project: nil, soft_deleted: nil, return_partial_success: nil
           gapi = service.list_buckets \
-            prefix: prefix, token: token, max: max, user_project: user_project, soft_deleted: soft_deleted
+            prefix: prefix, token: token, max: max, user_project: user_project, soft_deleted: soft_deleted, return_partial_success: return_partial_success
           Bucket::List.from_gapi \
-            gapi, service, prefix, max, user_project: user_project, soft_deleted: soft_deleted
+            gapi, service, prefix, max, user_project: user_project, soft_deleted: soft_deleted, return_partial_success: return_partial_success
+          
         end
         alias find_buckets buckets
 

data/lib/google/cloud/storage/service.rb

@@ -96,12 +96,14 @@ module Google
 
         ##
         # Retrieves a list of buckets for the given project.
-        def list_buckets prefix: nil, token: nil, max: nil, user_project: nil, soft_deleted: nil, options: {}
+        def list_buckets prefix: nil, token: nil, max: nil, user_project: nil, soft_deleted: nil, return_partial_success: nil, options: {}
           execute do
             service.list_buckets \
               @project, prefix: prefix, page_token: token, max_results: max,
                         user_project: user_project(user_project),
-                        soft_deleted: soft_deleted, options: options
+                        soft_deleted: soft_deleted,
+                        return_partial_success: return_partial_success,
+                        options: options
           end
         end
 

data/lib/google/cloud/storage/version.rb

@@ -16,7 +16,7 @@
 module Google
   module Cloud
     module Storage
-      VERSION = "1.56.0".freeze
+      VERSION = "1.58.0".freeze
     end
   end
 end

data/lib/google/cloud/storage.rb

@@ -42,9 +42,12 @@ module Google
       # @param [String] project_id Project identifier for the Storage service
       #   you are connecting to. If not present, the default project for the
       #   credentials is used.
-      # @param [String, Hash, Google::Auth::Credentials] credentials The path to
-      #   the keyfile as a String, the contents of the keyfile as a Hash, or a
-      #   Google::Auth::Credentials object. (See {Storage::Credentials})
+      # @param [Google::Auth::Credentials] credentials A Google::Auth::Credentials
+      #   object. (See {Storage::Credentials})
+      # @note Warning: Passing a `String` to a keyfile path or a `Hash` of
+      #   credentials is deprecated. Providing an unvalidated credential
+      #   configuration to Google APIs can compromise the security of your
+      #   systems and data.
       # @param [String, Array<String>] scope The OAuth 2.0 scopes controlling
       #   the set of resources and operations that the connection can access.
       #   See [Using OAuth 2.0 to Access Google

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: google-cloud-storage
 version: !ruby/object:Gem::Version
-  version: 1.56.0
+  version: 1.58.0
 platform: ruby
 authors:
 - Mike Moore
 - Chris Smith
 bindir: bin
 cert_chain: []
-date: 2025-04-21 00:00:00.000000000 Z
+date: 1980-01-02 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: google-cloud-core
@@ -28,16 +28,22 @@ dependencies:
   name: google-apis-core
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0.18'
+    - - "<"
       - !ruby/object:Gem::Version
-        version: '0.13'
+        version: '2'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0.18'
+    - - "<"
       - !ruby/object:Gem::Version
-        version: '0.13'
+        version: '2'
 - !ruby/object:Gem::Dependency
   name: google-apis-iamcredentials_v1
   requirement: !ruby/object:Gem::Requirement
@@ -128,14 +134,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.30.0
+        version: 1.31.1
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 1.30.0
+        version: 1.31.1
 - !ruby/object:Gem::Dependency
   name: minitest
   requirement: !ruby/object:Gem::Requirement
@@ -331,14 +337,14 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: 3.0.0
+      version: 3.1.0
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.6.5
+rubygems_version: 3.6.9
 specification_version: 4
 summary: API Client library for Google Cloud Storage
 test_files: []