google-api-python-client 2.187.0__py3-none-any.whl → 2.189.0__py3-none-any.whl

googleapiclient/discovery_cache/documents/bigquery.v2.json

@@ -61,6 +61,11 @@
 },
 {
 "description": "Regional Endpoint",
+"endpointUrl": "https://bigquery.europe-west4.rep.googleapis.com/",
+"location": "europe-west4"
+},
+{
+"description": "Regional Endpoint",
 "endpointUrl": "https://bigquery.europe-west6.rep.googleapis.com/",
 "location": "europe-west6"
 },
@@ -81,6 +86,16 @@
 },
 {
 "description": "Regional Endpoint",
+"endpointUrl": "https://bigquery.northamerica-northeast1.rep.googleapis.com/",
+"location": "northamerica-northeast1"
+},
+{
+"description": "Regional Endpoint",
+"endpointUrl": "https://bigquery.northamerica-northeast2.rep.googleapis.com/",
+"location": "northamerica-northeast2"
+},
+{
+"description": "Regional Endpoint",
 "endpointUrl": "https://bigquery.us-central1.rep.googleapis.com/",
 "location": "us-central1"
 },
@@ -2375,7 +2390,7 @@
 }
 }
 },
-"revision": "20251012",
+"revision": "20260118",
 "rootUrl": "https://bigquery.googleapis.com/",
 "schemas": {
 "AggregateClassificationMetrics": {
@@ -3039,7 +3054,7 @@
 "id": "BigtableColumn",
 "properties": {
 "encoding": {
-"description": "Optional. The encoding of the values when the type is not STRING. Acceptable encoding values are: TEXT - indicates values are alphanumeric text strings. BINARY - indicates values are encoded using HBase Bytes.toBytes family of functions. 'encoding' can also be set at the column family level. However, the setting at this level takes precedence if 'encoding' is set at both levels.",
+"description": "Optional. The encoding of the values when the type is not STRING. Acceptable encoding values are: TEXT - indicates values are alphanumeric text strings. BINARY - indicates values are encoded using HBase Bytes.toBytes family of functions. PROTO_BINARY - indicates values are encoded using serialized proto messages. This can only be used in combination with JSON type. 'encoding' can also be set at the column family level. However, the setting at this level takes precedence if 'encoding' is set at both levels.",
 "type": "string"
 },
 "fieldName": {
@@ -3050,6 +3065,10 @@
 "description": "Optional. If this is set, only the latest version of value in this column are exposed. 'onlyReadLatest' can also be set at the column family level. However, the setting at this level takes precedence if 'onlyReadLatest' is set at both levels.",
 "type": "boolean"
 },
+"protoConfig": {
+"$ref": "BigtableProtoConfig",
+"description": "Optional. Protobuf-specific configurations, only takes effect when the encoding is PROTO_BINARY."
+},
 "qualifierEncoded": {
 "description": "[Required] Qualifier of the column. Columns in the parent column family that has this exact qualifier are exposed as `.` field. If the qualifier is valid UTF-8 string, it can be specified in the qualifier_string field. Otherwise, a base-64 encoded value must be set to qualifier_encoded. The column field name is the same as the column qualifier. However, if the qualifier is not a valid BigQuery field identifier i.e. does not match a-zA-Z*, a valid identifier must be provided as field_name.",
 "format": "byte",
@@ -3078,7 +3097,7 @@
 "type": "array"
 },
 "encoding": {
-"description": "Optional. The encoding of the values when the type is not STRING. Acceptable encoding values are: TEXT - indicates values are alphanumeric text strings. BINARY - indicates values are encoded using HBase Bytes.toBytes family of functions. This can be overridden for a specific column by listing that column in 'columns' and specifying an encoding for it.",
+"description": "Optional. The encoding of the values when the type is not STRING. Acceptable encoding values are: TEXT - indicates values are alphanumeric text strings. BINARY - indicates values are encoded using HBase Bytes.toBytes family of functions. PROTO_BINARY - indicates values are encoded using serialized proto messages. This can only be used in combination with JSON type. This can be overridden for a specific column by listing that column in 'columns' and specifying an encoding for it.",
 "type": "string"
 },
 "familyId": {
@@ -3089,6 +3108,10 @@
 "description": "Optional. If this is set only the latest version of value are exposed for all columns in this column family. This can be overridden for a specific column by listing that column in 'columns' and specifying a different setting for that column.",
 "type": "boolean"
 },
+"protoConfig": {
+"$ref": "BigtableProtoConfig",
+"description": "Optional. Protobuf-specific configurations, only takes effect when the encoding is PROTO_BINARY."
+},
 "type": {
 "description": "Optional. The type to convert the value in cells of this column family. The values are expected to be encoded using HBase Bytes.toBytes function when using the BINARY encoding value. Following BigQuery types are allowed (case-sensitive): * BYTES * STRING * INTEGER * FLOAT * BOOLEAN * JSON Default type is BYTES. This can be overridden for a specific column by listing that column in 'columns' and specifying a type for it.",
 "type": "string"
@@ -3122,6 +3145,21 @@
 },
 "type": "object"
 },
+"BigtableProtoConfig": {
+"description": "Information related to a Bigtable protobuf column.",
+"id": "BigtableProtoConfig",
+"properties": {
+"protoMessageName": {
+"description": "Optional. The fully qualified proto message name of the protobuf. In the format of \"foo.bar.Message\".",
+"type": "string"
+},
+"schemaBundleId": {
+"description": "Optional. The ID of the Bigtable SchemaBundle resource associated with this protobuf. The ID should be referred to within the parent table, e.g., `foo` rather than `projects/{project}/instances/{instance}/tables/{table}/schemaBundles/foo`. See [more details on Bigtable SchemaBundles](https://docs.cloud.google.com/bigtable/docs/create-manage-protobuf-schemas).",
+"type": "string"
+}
+},
+"type": "object"
+},
 "BinaryClassificationMetrics": {
 "description": "Evaluation metrics for binary classification/classifier models.",
 "id": "BinaryClassificationMetrics",
@@ -5153,25 +5191,30 @@
 "id": "IncrementalResultStats",
 "properties": {
 "disabledReason": {
-"description": "Reason why incremental query results are/were not written by the query.",
+"description": "Output only. Reason why incremental query results are/were not written by the query.",
 "enum": [
 "DISABLED_REASON_UNSPECIFIED",
-"OTHER"
+"OTHER",
+"UNSUPPORTED_OPERATOR"
 ],
 "enumDescriptions": [
 "Disabled reason not specified.",
-"Some other reason."
+"Incremental results are/were disabled for reasons not covered by the other enum values, e.g. runtime issues.",
+"Query includes an operation that is not supported."
 ],
+"readOnly": true,
 "type": "string"
 },
 "resultSetLastModifyTime": {
-"description": "The time at which the result table's contents were modified. May be absent if no results have been written or the query has completed.",
+"description": "Output only. The time at which the result table's contents were modified. May be absent if no results have been written or the query has completed.",
 "format": "google-datetime",
+"readOnly": true,
 "type": "string"
 },
 "resultSetLastReplaceTime": {
-"description": "The time at which the result table's contents were completely replaced. May be absent if no results have been written or the query has completed.",
+"description": "Output only. The time at which the result table's contents were completely replaced. May be absent if no results have been written or the query has completed.",
 "format": "google-datetime",
+"readOnly": true,
 "type": "string"
 }
 },
@@ -5969,7 +6012,7 @@
 },
 "useLegacySql": {
 "default": "true",
-"description": "Optional. Specifies whether to use BigQuery's legacy SQL dialect for this query. The default value is true. If set to false, the query will use BigQuery's GoogleSQL: https://cloud.google.com/bigquery/sql-reference/ When useLegacySql is set to false, the value of flattenResults is ignored; query will be run as if flattenResults is false.",
+"description": "Optional. Specifies whether to use BigQuery's legacy SQL dialect for this query. The default value is true. If set to false, the query uses BigQuery's [GoogleSQL](https://docs.cloud.google.com/bigquery/docs/introduction-sql). When useLegacySql is set to false, the value of flattenResults is ignored; query will be run as if flattenResults is false.",
 "type": "boolean"
 },
 "useQueryCache": {
@@ -7949,7 +7992,7 @@
 },
 "useLegacySql": {
 "default": "true",
-"description": "Specifies whether to use BigQuery's legacy SQL dialect for this query. The default value is true. If set to false, the query will use BigQuery's GoogleSQL: https://cloud.google.com/bigquery/sql-reference/ When useLegacySql is set to false, the value of flattenResults is ignored; query will be run as if flattenResults is false.",
+"description": "Specifies whether to use BigQuery's legacy SQL dialect for this query. The default value is true. If set to false, the query uses BigQuery's [GoogleSQL](https://docs.cloud.google.com/bigquery/docs/introduction-sql). When useLegacySql is set to false, the value of flattenResults is ignored; query will be run as if flattenResults is false.",
 "type": "boolean"
 },
 "useQueryCache": {
@@ -11311,7 +11354,7 @@
 "type": "boolean"
 },
 "useLegacySql": {
-"description": "Specifies whether to use BigQuery's legacy SQL for this view. The default value is true. If set to false, the view will use BigQuery's GoogleSQL: https://cloud.google.com/bigquery/sql-reference/ Queries and views that reference this view must use the same flag value. A wrapper is used here because the default value is True.",
+"description": "Specifies whether to use BigQuery's legacy SQL for this view. The default value is true. If set to false, the view uses BigQuery's [GoogleSQL](https://docs.cloud.google.com/bigquery/docs/introduction-sql). Queries and views that reference this view must use the same flag value. A wrapper is used here because the default value is True.",
 "type": "boolean"
 },
 "userDefinedFunctionResources": {

googleapiclient/discovery_cache/documents/bigquerydatapolicy.v1.json

@@ -405,7 +405,7 @@
 }
 }
 },
-"revision": "20250317",
+"revision": "20260114",
 "rootUrl": "https://bigquerydatapolicy.googleapis.com/",
 "schemas": {
 "AuditConfig": {
@@ -492,7 +492,8 @@
 "LAST_FOUR_CHARACTERS",
 "FIRST_FOUR_CHARACTERS",
 "EMAIL_MASK",
-"DATE_YEAR_MASK"
+"DATE_YEAR_MASK",
+"RANDOM_HASH"
 ],
 "enumDescriptions": [
 "Default, unspecified predefined expression. No masking will take place since no expression is specified.",
@@ -502,7 +503,8 @@
 "Masking expression shows the last four characters of text. The masking behavior is as follows: * If text length > 4 characters: Replace text with XXXXX, append last four characters of original text. * If text length <= 4 characters: Apply SHA-256 hash.",
 "Masking expression shows the first four characters of text. The masking behavior is as follows: * If text length > 4 characters: Replace text with XXXXX, prepend first four characters of original text. * If text length <= 4 characters: Apply SHA-256 hash.",
 "Masking expression for email addresses. The masking behavior is as follows: * Syntax-valid email address: Replace username with XXXXX. For example, cloudysanfrancisco@gmail.com becomes XXXXX@gmail.com. * Syntax-invalid email address: Apply SHA-256 hash. For more information, see Email mask.",
-"Masking expression to only show the *year* of `Date`, `DateTime` and `TimeStamp`. For example, with the year 2076: * DATE : 2076-01-01 * DATETIME : 2076-01-01T00:00:00 * TIMESTAMP : 2076-01-01 00:00:00 UTC Truncation occurs according to the UTC time zone. To change this, adjust the default time zone using the `time_zone` system variable. For more information, see the System variables reference."
+"Masking expression to only show the *year* of `Date`, `DateTime` and `TimeStamp`. For example, with the year 2076: * DATE : 2076-01-01 * DATETIME : 2076-01-01T00:00:00 * TIMESTAMP : 2076-01-01 00:00:00 UTC Truncation occurs according to the UTC time zone. To change this, adjust the default time zone using the `time_zone` system variable. For more information, see the System variables reference.",
+"A masking expression that uses hashing to mask column data. It differs from SHA-256 in that a unique random value is generated for each query and is added to the hash input, resulting in a different masked result for each query. Creating and updating a data policy with a `RANDOM_HASH` masking expression is only supported for the Data Policy v2 API."
 ],
 "type": "string"
 },

googleapiclient/discovery_cache/documents/bigquerydatatransfer.v1.json

@@ -49,6 +49,11 @@
 },
 {
 "description": "Regional Endpoint",
+"endpointUrl": "https://bigquerydatatransfer.europe-west4.rep.googleapis.com/",
+"location": "europe-west4"
+},
+{
+"description": "Regional Endpoint",
 "endpointUrl": "https://bigquerydatatransfer.europe-west6.rep.googleapis.com/",
 "location": "europe-west6"
 },
@@ -69,6 +74,16 @@
 },
 {
 "description": "Regional Endpoint",
+"endpointUrl": "https://bigquerydatatransfer.northamerica-northeast1.rep.googleapis.com/",
+"location": "northamerica-northeast1"
+},
+{
+"description": "Regional Endpoint",
+"endpointUrl": "https://bigquerydatatransfer.northamerica-northeast2.rep.googleapis.com/",
+"location": "northamerica-northeast2"
+},
+{
+"description": "Regional Endpoint",
 "endpointUrl": "https://bigquerydatatransfer.us-central1.rep.googleapis.com/",
 "location": "us-central1"
 },
@@ -418,7 +433,7 @@
 ],
 "parameters": {
 "extraLocationTypes": {
-"description": "Optional. Unless explicitly documented otherwise, don't use this unsupported field which is primarily intended for internal usage.",
+"description": "Optional. Do not use this field. It is unsupported and is ignored unless explicitly documented otherwise. This is primarily for internal usage.",
 "location": "query",
 "repeated": true,
 "type": "string"
@@ -1488,7 +1503,7 @@
 }
 }
 },
-"revision": "20251020",
+"revision": "20260112",
 "rootUrl": "https://bigquerydatatransfer.googleapis.com/",
 "schemas": {
 "CheckValidCredsRequest": {

googleapiclient/discovery_cache/documents/bigqueryreservation.v1.json

@@ -46,6 +46,11 @@
 },
 {
 "description": "Regional Endpoint",
+"endpointUrl": "https://bigqueryreservation.europe-west4.rep.googleapis.com/",
+"location": "europe-west4"
+},
+{
+"description": "Regional Endpoint",
 "endpointUrl": "https://bigqueryreservation.europe-west6.rep.googleapis.com/",
 "location": "europe-west6"
 },
@@ -66,6 +71,16 @@
 },
 {
 "description": "Regional Endpoint",
+"endpointUrl": "https://bigqueryreservation.northamerica-northeast1.rep.googleapis.com/",
+"location": "northamerica-northeast1"
+},
+{
+"description": "Regional Endpoint",
+"endpointUrl": "https://bigqueryreservation.northamerica-northeast2.rep.googleapis.com/",
+"location": "northamerica-northeast2"
+},
+{
+"description": "Regional Endpoint",
 "endpointUrl": "https://bigqueryreservation.us-central1.rep.googleapis.com/",
 "location": "us-central1"
 },
@@ -1267,7 +1282,7 @@
 }
 }
 },
-"revision": "20251009",
+"revision": "20260109",
 "rootUrl": "https://bigqueryreservation.googleapis.com/",
 "schemas": {
 "Assignment": {
@@ -1279,7 +1294,8 @@
 "type": "string"
 },
 "enableGeminiInBigquery": {
-"description": "Optional. This field controls if \"Gemini in BigQuery\" (https://cloud.google.com/gemini/docs/bigquery/overview) features should be enabled for this reservation assignment, which is not on by default. \"Gemini in BigQuery\" has a distinct compliance posture from BigQuery. If this field is set to true, the assignment job type is QUERY, and the parent reservation edition is ENTERPRISE_PLUS, then the assignment will give the grantee project/organization access to \"Gemini in BigQuery\" features.",
+"deprecated": true,
+"description": "Optional. Deprecated: \"Gemini in BigQuery\" is now available by default for all BigQuery editions and should not be explicitly set. Controls if \"Gemini in BigQuery\" (https://cloud.google.com/gemini/docs/bigquery/overview) features should be enabled for this reservation assignment.",
 "type": "boolean"
 },
 "jobType": {

googleapiclient/discovery_cache/documents/bigtableadmin.v2.json

@@ -201,7 +201,7 @@
 "type": "string"
 },
 "returnPartialSuccess": {
-"description": "When set to `true`, operations that are reachable are returned as normal, and those that are unreachable are returned in the [ListOperationsResponse.unreachable] field. This can only be `true` when reading across collections e.g. when `parent` is set to `\"projects/example/locations/-\"`. This field is not by default supported and will result in an `UNIMPLEMENTED` error if set unless explicitly documented otherwise in service or product specific documentation.",
+"description": "When set to `true`, operations that are reachable are returned as normal, and those that are unreachable are returned in the ListOperationsResponse.unreachable field. This can only be `true` when reading across collections. For example, when `parent` is set to `\"projects/example/locations/-\"`. This field is not supported by default and will result in an `UNIMPLEMENTED` error if set unless explicitly documented otherwise in service or product specific documentation.",
 "location": "query",
 "type": "boolean"
 }
@@ -3118,7 +3118,7 @@
 }
 }
 },
-"revision": "20251026",
+"revision": "20251209",
 "rootUrl": "https://bigtableadmin.googleapis.com/",
 "schemas": {
 "AppProfile": {
@@ -4942,7 +4942,7 @@
 "type": "array"
 },
 "unreachable": {
-"description": "Unordered list. Unreachable resources. Populated when the request sets `ListOperationsRequest.return_partial_success` and reads across collections e.g. when attempting to list all resources across all supported locations.",
+"description": "Unordered list. Unreachable resources. Populated when the request sets `ListOperationsRequest.return_partial_success` and reads across collections. For example, when attempting to list all resources across all supported locations.",
 "items": {
 "type": "string"
 },

googleapiclient/discovery_cache/documents/calendar.v3.json

@@ -736,7 +736,7 @@
 ]
 },
 "insert": {
-"description": "Creates a secondary calendar.",
+"description": "Creates a secondary calendar.\nThe authenticated user for the request is made the data owner of the new calendar.\n\nNote: We recommend to authenticate as the intended data owner of the calendar. You can use domain-wide delegation of authority to allow applications to act on behalf of a specific user. Don't use a service account for authentication. If you use a service account for authentication, the service account is the data owner, which can lead to unexpected behavior. For example, if a service account is the data owner, data ownership cannot be transferred.",
 "httpMethod": "POST",
 "id": "calendar.calendars.insert",
 "path": "calendars",
@@ -1890,7 +1890,7 @@
 }
 }
 },
-"revision": "20250404",
+"revision": "20251207",
 "rootUrl": "https://www.googleapis.com/",
 "schemas": {
 "Acl": {
@@ -1945,7 +1945,7 @@
 "calendar.acl.insert"
 ]
 },
-"description": "The role assigned to the scope. Possible values are:  \n- \"none\" - Provides no access. \n- \"freeBusyReader\" - Provides read access to free/busy information. \n- \"reader\" - Provides read access to the calendar. Private events will appear to users with reader access, but event details will be hidden. \n- \"writer\" - Provides read and write access to the calendar. Private events will appear to users with writer access, and event details will be visible. Provides read access to the calendar's ACLs. \n- \"owner\" - Provides ownership of the calendar. This role has all of the permissions of the writer role with the additional ability to manipulate ACLs.",
+"description": "The role assigned to the scope. Possible values are:  \n- \"none\" - Provides no access. \n- \"freeBusyReader\" - Provides read access to free/busy information. \n- \"reader\" - Provides read access to the calendar. Private events will appear to users with reader access, but event details will be hidden. \n- \"writer\" - Provides read and write access to the calendar. Private events will appear to users with writer access, and event details will be visible. Provides read access to the calendar's ACLs. \n- \"owner\" - Provides manager access to the calendar. This role has all of the permissions of the writer role with the additional ability to modify access levels of other users.\nImportant: the owner role is different from the calendar's data owner. A calendar has a single data owner, but can have multiple users with owner role.",
 "type": "string"
 },
 "scope": {
@@ -1980,10 +1980,18 @@
 "Calendar": {
 "id": "Calendar",
 "properties": {
+"autoAcceptInvitations": {
+"description": "Whether this calendar automatically accepts invitations. Only valid for resource calendars.",
+"type": "boolean"
+},
 "conferenceProperties": {
 "$ref": "ConferenceProperties",
 "description": "Conferencing properties for this calendar, for example what types of conferences are allowed."
 },
+"dataOwner": {
+"description": "The email of the owner of the calendar. Set only for secondary calendars. Read-only.",
+"type": "string"
+},
 "description": {
 "description": "Description of the calendar. Optional.",
 "type": "string"
@@ -2055,9 +2063,13 @@
 "id": "CalendarListEntry",
 "properties": {
 "accessRole": {
-"description": "The effective access role that the authenticated user has on the calendar. Read-only. Possible values are:  \n- \"freeBusyReader\" - Provides read access to free/busy information. \n- \"reader\" - Provides read access to the calendar. Private events will appear to users with reader access, but event details will be hidden. \n- \"writer\" - Provides read and write access to the calendar. Private events will appear to users with writer access, and event details will be visible. \n- \"owner\" - Provides ownership of the calendar. This role has all of the permissions of the writer role with the additional ability to see and manipulate ACLs.",
+"description": "The effective access role that the authenticated user has on the calendar. Read-only. Possible values are:  \n- \"freeBusyReader\" - Provides read access to free/busy information. \n- \"reader\" - Provides read access to the calendar. Private events will appear to users with reader access, but event details will be hidden. \n- \"writer\" - Provides read and write access to the calendar. Private events will appear to users with writer access, and event details will be visible. \n- \"owner\" - Provides manager access to the calendar. This role has all of the permissions of the writer role with the additional ability to see and modify access levels of other users.\nImportant: the owner role is different from the calendar's data owner. A calendar has a single data owner, but can have multiple users with owner role.",
 "type": "string"
 },
+"autoAcceptInvitations": {
+"description": "Whether this calendar automatically accepts invitations. Only valid for resource calendars. Read-only.",
+"type": "boolean"
+},
 "backgroundColor": {
 "description": "The main color of the calendar in the hexadecimal format \"#0088aa\". This property supersedes the index-based colorId property. To set or change this property, you need to specify colorRgbFormat=true in the parameters of the insert, update and patch methods. Optional.",
 "type": "string"
@@ -2070,6 +2082,10 @@
 "$ref": "ConferenceProperties",
 "description": "Conferencing properties for this calendar, for example what types of conferences are allowed."
 },
+"dataOwner": {
+"description": "The email of the owner of the calendar. Set only for secondary calendars. Read-only.",
+"type": "string"
+},
 "defaultReminders": {
 "description": "The default reminders that the authenticated user has for this calendar.",
 "items": {
@@ -3015,7 +3031,7 @@
 "id": "Events",
 "properties": {
 "accessRole": {
-"description": "The user's access role for this calendar. Read-only. Possible values are:  \n- \"none\" - The user has no access. \n- \"freeBusyReader\" - The user has read access to free/busy information. \n- \"reader\" - The user has read access to the calendar. Private events will appear to users with reader access, but event details will be hidden. \n- \"writer\" - The user has read and write access to the calendar. Private events will appear to users with writer access, and event details will be visible. \n- \"owner\" - The user has ownership of the calendar. This role has all of the permissions of the writer role with the additional ability to see and manipulate ACLs.",
+"description": "The user's access role for this calendar. Read-only. Possible values are:  \n- \"none\" - The user has no access. \n- \"freeBusyReader\" - The user has read access to free/busy information. \n- \"reader\" - The user has read access to the calendar. Private events will appear to users with reader access, but event details will be hidden. \n- \"writer\" - The user has read and write access to the calendar. Private events will appear to users with writer access, and event details will be visible. \n- \"owner\" - The user has manager access to the calendar. This role has all of the permissions of the writer role with the additional ability to see and modify access levels of other users.\nImportant: the owner role is different from the calendar's data owner. A calendar has a single data owner, but can have multiple users with owner role.",
 "type": "string"
 },
 "defaultReminders": {

googleapiclient/discovery_cache/documents/certificatemanager.v1.json

@@ -144,7 +144,7 @@
 ],
 "parameters": {
 "extraLocationTypes": {
-"description": "Optional. Unless explicitly documented otherwise, don't use this unsupported field which is primarily intended for internal usage.",
+"description": "Optional. Do not use this field. It is unsupported and is ignored unless explicitly documented otherwise. This is primarily for internal usage.",
 "location": "query",
 "repeated": true,
 "type": "string"
@@ -1133,7 +1133,7 @@
 "type": "string"
 },
 "returnPartialSuccess": {
-"description": "When set to `true`, operations that are reachable are returned as normal, and those that are unreachable are returned in the [ListOperationsResponse.unreachable] field. This can only be `true` when reading across collections e.g. when `parent` is set to `\"projects/example/locations/-\"`. This field is not by default supported and will result in an `UNIMPLEMENTED` error if set unless explicitly documented otherwise in service or product specific documentation.",
+"description": "When set to `true`, operations that are reachable are returned as normal, and those that are unreachable are returned in the ListOperationsResponse.unreachable field. This can only be `true` when reading across collections. For example, when `parent` is set to `\"projects/example/locations/-\"`. This field is not supported by default and will result in an `UNIMPLEMENTED` error if set unless explicitly documented otherwise in service or product specific documentation.",
 "location": "query",
 "type": "boolean"
 }
@@ -1325,7 +1325,7 @@
 }
 }
 },
-"revision": "20250924",
+"revision": "20251204",
 "rootUrl": "https://certificatemanager.googleapis.com/",
 "schemas": {
 "AllowlistedCertificate": {
@@ -1463,6 +1463,10 @@
 "$ref": "ManagedCertificate",
 "description": "If set, contains configuration and state of a managed certificate."
 },
+"managedIdentity": {
+"$ref": "ManagedIdentityCertificate",
+"description": "If set, contains configuration and state of a managed identity certificate."
+},
 "name": {
 "description": "Identifier. A user-defined name of the certificate. Certificate names must be unique globally and match pattern `projects/*/locations/*/certificates/*`.",
 "type": "string"
@@ -2047,7 +2051,7 @@
 "type": "array"
 },
 "unreachable": {
-"description": "Unordered list. Unreachable resources. Populated when the request sets `ListOperationsRequest.return_partial_success` and reads across collections e.g. when attempting to list all resources across all supported locations.",
+"description": "Unordered list. Unreachable resources. Populated when the request sets `ListOperationsRequest.return_partial_success` and reads across collections. For example, when attempting to list all resources across all supported locations.",
 "items": {
 "type": "string"
 },
@@ -2170,6 +2174,39 @@
 },
 "type": "object"
 },
+"ManagedIdentityCertificate": {
+"description": "Configuration and state of a Managed Identity Certificate. Certificate Manager provisions and renews Managed Identity Certificates automatically, for as long as it's authorized to do so.",
+"id": "ManagedIdentityCertificate",
+"properties": {
+"identity": {
+"description": "Required. Immutable. SPIFFE ID of the Managed Identity used for this certificate.",
+"type": "string"
+},
+"provisioningIssue": {
+"$ref": "ProvisioningIssue",
+"description": "Output only. Information about issues with provisioning a managed certificate.",
+"readOnly": true
+},
+"state": {
+"description": "Output only. State of the managed certificate resource.",
+"enum": [
+"STATE_UNSPECIFIED",
+"PROVISIONING",
+"FAILED",
+"ACTIVE"
+],
+"enumDescriptions": [
+"State is unspecified.",
+"Certificate Manager attempts to provision or renew the certificate. If the process takes longer than expected, consult the `provisioning_issue` field.",
+"Multiple certificate provisioning attempts failed and Certificate Manager gave up. To try again, delete and create a new managed Certificate resource. For details see the `provisioning_issue` field.",
+"The certificate management is working, and a certificate has been provisioned."
+],
+"readOnly": true,
+"type": "string"
+}
+},
+"type": "object"
+},
 "Operation": {
 "description": "This resource represents a long-running operation that is the result of a network API call.",
 "id": "Operation",
@@ -2399,6 +2436,13 @@
 "description": "Identifier. A user-defined name of the trust config. TrustConfig names must be unique globally and match pattern `projects/*/locations/*/trustConfigs/*`.",
 "type": "string"
 },
+"spiffeTrustStores": {
+"additionalProperties": {
+"$ref": "TrustStore"
+},
+"description": "Optional. Defines a mapping from a trust domain to a TrustStore. This is used for SPIFFE certificate validation.",
+"type": "object"
+},
 "trustStores": {
 "description": "Optional. Set of trust stores to perform validation against. This field is supported when TrustConfig is configured with Load Balancers, currently not supported for SPIFFE certificate validation. Only one TrustStore specified is currently allowed.",
 "items": {