google-api-python-client 2.196.0__py3-none-any.whl → 2.198.0__py3-none-any.whl

googleapiclient/discovery_cache/documents/cloudidentity.v1.json

@@ -1483,7 +1483,7 @@
 ]
 },
 "searchDirectGroups": {
-"description": "Searches direct groups of a member.",
+"description": "Searches direct groups of a member. Groups for which the actor does not have the permission to view memberships are silently filtered out.",
 "flatPath": "v1/groups/{groupsId}/memberships:searchDirectGroups",
 "httpMethod": "GET",
 "id": "cloudidentity.groups.memberships.searchDirectGroups",
@@ -2178,6 +2178,49 @@
 },
 "policies": {
 "methods": {
+"create": {
+"description": "Create a policy.",
+"flatPath": "v1/policies",
+"httpMethod": "POST",
+"id": "cloudidentity.policies.create",
+"parameterOrder": [],
+"parameters": {},
+"path": "v1/policies",
+"request": {
+"$ref": "Policy"
+},
+"response": {
+"$ref": "Operation"
+},
+"scopes": [
+"https://www.googleapis.com/auth/cloud-identity.policies"
+]
+},
+"delete": {
+"description": "Delete a policy.",
+"flatPath": "v1/policies/{policiesId}",
+"httpMethod": "DELETE",
+"id": "cloudidentity.policies.delete",
+"parameterOrder": [
+"name"
+],
+"parameters": {
+"name": {
+"description": "Required. The name of the policy to delete. Format: `policies/{policy}`.",
+"location": "path",
+"pattern": "^policies/[^/]+$",
+"required": true,
+"type": "string"
+}
+},
+"path": "v1/{+name}",
+"response": {
+"$ref": "Operation"
+},
+"scopes": [
+"https://www.googleapis.com/auth/cloud-identity.policies"
+]
+},
 "get": {
 "description": "Get a policy.",
 "flatPath": "v1/policies/{policiesId}",
@@ -2212,12 +2255,12 @@
 "parameterOrder": [],
 "parameters": {
 "filter": {
-"description": "Optional. A CEL expression for filtering the results. Policies can be filtered by application with this expression: setting.type.matches('^settings/gmail\\\\..*$') Policies can be filtered by setting type with this expression: setting.type.matches('^.*\\\\.service_status$') A maximum of one of the above setting.type clauses can be used. Policies can be filtered by customer with this expression: customer == \"customers/{customer}\" Where `customer` is the `id` from the [Admin SDK `Customer` resource](https://developers.google.com/admin-sdk/directory/reference/rest/v1/customers). You may use `customers/my_customer` to specify your own organization. When no customer is mentioned it will be default to customers/my_customer. A maximum of one customer clause can be used. The above clauses can only be combined together in a single filter expression with the `&&` operator.",
+"description": "Optional. A CEL expression for filtering the results. Policies can be filtered using the expression in the following ways: - Filter by application: `setting.type.matches('^settings/gmail\\\\..*$')` - Filter by setting type: `setting.type.matches('^.*\\\\.service_status$')` - Filter by customer: `customer == \"customers/{customer}\"` Where `customer` is the `id` from the [Admin SDK `Customer` resource](https://developers.google.com/admin-sdk/directory/reference/rest/v1/customers). You may use `customers/my_customer` to specify your own organization. When no `customer` is mentioned it will be default to `customers/my_customer`. You may only filter on policies for a single customer at a time. The above clauses can be combined together in a single filter expression with the `&&` and `||` operators, like in the following example: `customer == \"customers/my_customer\" && ( setting.type.matches('^settings/gmail\\\\..*$') || setting.type.matches('^.*\\\\.service_status$') )`.",
 "location": "query",
 "type": "string"
 },
 "pageSize": {
-"description": "Optional. The maximum number of results to return. The service can return fewer than this number. If omitted or set to 0, the default is 50 results per page. The maximum allowed value is 100. `page_size` values greater than 100 default to 100.",
+"description": "Optional. The maximum number of results to return. The service can return fewer than this number. If omitted or set to `0`, the default is `50` results per page. The maximum allowed value is `100`. `page_size` values greater than `100` default to `100`.",
 "format": "int32",
 "location": "query",
 "type": "integer"
@@ -2236,11 +2279,39 @@
 "https://www.googleapis.com/auth/cloud-identity.policies",
 "https://www.googleapis.com/auth/cloud-identity.policies.readonly"
 ]
+},
+"patch": {
+"description": "Update a policy.",
+"flatPath": "v1/policies/{policiesId}",
+"httpMethod": "PATCH",
+"id": "cloudidentity.policies.patch",
+"parameterOrder": [
+"name"
+],
+"parameters": {
+"name": {
+"description": "Output only. Identifier. The [resource name](https://cloud.google.com/apis/design/resource_names) of the Policy. Format: policies/{policy}.",
+"location": "path",
+"pattern": "^policies/[^/]+$",
+"required": true,
+"type": "string"
+}
+},
+"path": "v1/{+name}",
+"request": {
+"$ref": "Policy"
+},
+"response": {
+"$ref": "Operation"
+},
+"scopes": [
+"https://www.googleapis.com/auth/cloud-identity.policies"
+]
 }
 }
 }
 },
-"revision": "20260113",
+"revision": "20260617",
 "rootUrl": "https://cloudidentity.googleapis.com/",
 "schemas": {
 "AddIdpCredentialOperationMetadata": {
@@ -4071,6 +4142,7 @@
 "GROUP",
 "SHARED_DRIVE",
 "CBCM_BROWSER",
+"CHROME_OS_DEVICE",
 "OTHER"
 ],
 "enumDescriptions": [
@@ -4080,6 +4152,7 @@
 "Represents group type.",
 "Represents Shared drive.",
 "Represents a CBCM-managed Chrome Browser type.",
+"Represents a ChromeOS-managed ChromeOS device type.",
 "Represents other type."
 ],
 "readOnly": true,
@@ -4373,7 +4446,7 @@
 "type": "string"
 },
 "query": {
-"description": "Immutable. The CEL query that defines which entities the Policy applies to (ex. a User entity). For details about CEL see https://opensource.google.com/projects/cel. The OrgUnits the Policy applies to are represented by a clause like so: entity.org_units.exists(org_unit, org_unit.org_unit_id == orgUnitId('{orgUnitId}')) The Group the Policy applies to are represented by a clause like so: entity.groups.exists(group, group.group_id == groupId('{groupId}')) The Licenses the Policy applies to are represented by a clause like so: entity.licenses.exists(license, license in ['/product/{productId}/sku/{skuId}']) The above clauses can be present in any combination, and used in conjunction with the &&, || and ! operators. The org_unit and group fields below are helper fields that contain the corresponding value(s) as the query to make the query easier to use.",
+"description": "Immutable. The CEL query that defines which entities the Policy applies to (ex. a User entity). For details about CEL see https://opensource.google.com/projects/cel. The OrgUnits the Policy applies to are represented by a clause like so: entity.org_units.exists(org_unit, org_unit.org_unit_id == orgUnitId('{orgUnitId}')) The Group the Policy applies to are represented by a clause like so: entity.groups.exists(group, group.group_id == groupId('{groupId}')) The Licenses the Policy applies to are represented by a clause like so: entity.licenses.exists(license, license in ['/product/{productId}/sku/{skuId}']) **Note:** The licenses clause is not supported in mutate endpoints. The above clauses can be present in any combination, and used in conjunction with the &&, || and ! operators. The org_unit and group fields below are helper fields that contain the corresponding value(s) as the query to make the query easier to use.",
 "type": "string"
 },
 "sortOrder": {

googleapiclient/discovery_cache/documents/cloudidentity.v1beta1.json

@@ -1438,7 +1438,7 @@
 ]
 },
 "searchDirectGroups": {
-"description": "Searches direct groups of a member.",
+"description": "Searches direct groups of a member. Groups for which the actor does not have the permission to view memberships are silently filtered out.",
 "flatPath": "v1beta1/groups/{groupsId}/memberships:searchDirectGroups",
 "httpMethod": "GET",
 "id": "cloudidentity.groups.memberships.searchDirectGroups",
@@ -2293,12 +2293,12 @@
 "parameterOrder": [],
 "parameters": {
 "filter": {
-"description": "Optional. A CEL expression for filtering the results. Policies can be filtered by application with this expression: setting.type.matches('^settings/gmail\\\\..*$') Policies can be filtered by setting type with this expression: setting.type.matches('^.*\\\\.service_status$') A maximum of one of the above setting.type clauses can be used. Policies can be filtered by customer with this expression: customer == \"customers/{customer}\" Where `customer` is the `id` from the [Admin SDK `Customer` resource](https://developers.google.com/admin-sdk/directory/reference/rest/v1/customers). You may use `customers/my_customer` to specify your own organization. When no customer is mentioned it will be default to customers/my_customer. A maximum of one customer clause can be used. The above clauses can only be combined together in a single filter expression with the `&&` operator.",
+"description": "Optional. A CEL expression for filtering the results. Policies can be filtered using the expression in the following ways: - Filter by application: `setting.type.matches('^settings/gmail\\\\..*$')` - Filter by setting type: `setting.type.matches('^.*\\\\.service_status$')` - Filter by customer: `customer == \"customers/{customer}\"` Where `customer` is the `id` from the [Admin SDK `Customer` resource](https://developers.google.com/admin-sdk/directory/reference/rest/v1/customers). You may use `customers/my_customer` to specify your own organization. When no `customer` is mentioned it will be default to `customers/my_customer`. You may only filter on policies for a single customer at a time. The above clauses can be combined together in a single filter expression with the `&&` and `||` operators, like in the following example: `customer == \"customers/my_customer\" && ( setting.type.matches('^settings/gmail\\\\..*$') || setting.type.matches('^.*\\\\.service_status$') )`.",
 "location": "query",
 "type": "string"
 },
 "pageSize": {
-"description": "Optional. The maximum number of results to return. The service can return fewer than this number. If omitted or set to 0, the default is 50 results per page. The maximum allowed value is 100. `page_size` values greater than 100 default to 100.",
+"description": "Optional. The maximum number of results to return. The service can return fewer than this number. If omitted or set to `0`, the default is `50` results per page. The maximum allowed value is `100`. `page_size` values greater than `100` default to `100`.",
 "format": "int32",
 "location": "query",
 "type": "integer"
@@ -2349,7 +2349,7 @@
 }
 }
 },
-"revision": "20260317",
+"revision": "20260617",
 "rootUrl": "https://cloudidentity.googleapis.com/",
 "schemas": {
 "AddIdpCredentialOperationMetadata": {
@@ -2425,6 +2425,42 @@
 },
 "type": "object"
 },
+"AntivirusInfo": {
+"description": "Resource representing the anti-virus information of a Device.",
+"id": "AntivirusInfo",
+"properties": {
+"displayName": {
+"description": "Output only. The display name of the anti-virus software.",
+"readOnly": true,
+"type": "string"
+},
+"productGuid": {
+"description": "Output only. The GUID of the anti-virus product.",
+"readOnly": true,
+"type": "string"
+},
+"productState": {
+"description": "Output only. The state of the anti-virus.",
+"enum": [
+"PRODUCT_STATE_UNSPECIFIED",
+"PRODUCT_STATE_ON",
+"PRODUCT_STATE_OFF",
+"PRODUCT_STATE_SNOOZED",
+"PRODUCT_STATE_EXPIRED"
+],
+"enumDescriptions": [
+"Default value",
+"The anti-virus is on.",
+"The anti-virus is off.",
+"The anti-virus is snoozed.",
+"The anti-virus is expired."
+],
+"readOnly": true,
+"type": "string"
+}
+},
+"type": "object"
+},
 "ApproveDeviceUserRequest": {
 "description": "Request message for approving the device to access user data.",
 "id": "ApproveDeviceUserRequest",
@@ -3017,6 +3053,14 @@
 "description": "Output only. Attributes specific to Android devices.",
 "readOnly": true
 },
+"antivirusInfo": {
+"description": "Output only. Anti-virus information for the device.",
+"items": {
+"$ref": "AntivirusInfo"
+},
+"readOnly": true,
+"type": "array"
+},
 "assetTag": {
 "description": "Asset tag of the device.",
 "type": "string"
@@ -3220,6 +3264,23 @@
 "readOnly": true,
 "type": "string"
 },
+"osFirewallStatus": {
+"description": "Output only. OS firewall status of the device.",
+"enum": [
+"OS_FIREWALL_STATUS_UNSPECIFIED",
+"OS_FIREWALL_STATUS_UNKNOWN",
+"OS_FIREWALL_STATUS_ENABLED",
+"OS_FIREWALL_STATUS_DISABLED"
+],
+"enumDescriptions": [
+"Default value",
+"OS firewall status is unknown.",
+"OS firewall is enabled.",
+"OS firewall is disabled."
+],
+"readOnly": true,
+"type": "string"
+},
 "osVersion": {
 "description": "Output only. OS version of the device. Example: Android 8.1.0.",
 "readOnly": true,
@@ -3274,6 +3335,11 @@
 "type": "string"
 },
 "type": "array"
+},
+"windowsSpecificDeviceAttributes": {
+"$ref": "WindowsSpecificDeviceAttributes",
+"description": "Output only. Attributes specific to Windows devices.",
+"readOnly": true
 }
 },
 "type": "object"
@@ -5067,6 +5133,7 @@
 "GROUP",
 "SHARED_DRIVE",
 "CBCM_BROWSER",
+"CHROME_OS_DEVICE",
 "OTHER"
 ],
 "enumDescriptions": [
@@ -5076,6 +5143,7 @@
 "Represents group type.",
 "Represents Shared drive.",
 "Represents a CBCM-managed Chrome Browser type.",
+"Represents a ChromeOS-managed ChromeOS device type.",
 "Represents other type."
 ],
 "readOnly": true,
@@ -5473,7 +5541,7 @@
 "type": "string"
 },
 "query": {
-"description": "Immutable. The CEL query that defines which entities the Policy applies to (ex. a User entity). For details about CEL see https://opensource.google.com/projects/cel. The OrgUnits the Policy applies to are represented by a clause like so: entity.org_units.exists(org_unit, org_unit.org_unit_id == orgUnitId('{orgUnitId}')) The Group the Policy applies to are represented by a clause like so: entity.groups.exists(group, group.group_id == groupId('{groupId}')) The Licenses the Policy applies to are represented by a clause like so: entity.licenses.exists(license, license in ['/product/{productId}/sku/{skuId}']) The above clauses can be present in any combination, and used in conjunction with the &&, || and ! operators. The org_unit and group fields below are helper fields that contain the corresponding value(s) as the query to make the query easier to use.",
+"description": "Immutable. The CEL query that defines which entities the Policy applies to (ex. a User entity). For details about CEL see https://opensource.google.com/projects/cel. The OrgUnits the Policy applies to are represented by a clause like so: entity.org_units.exists(org_unit, org_unit.org_unit_id == orgUnitId('{orgUnitId}')) The Group the Policy applies to are represented by a clause like so: entity.groups.exists(group, group.group_id == groupId('{groupId}')) The Licenses the Policy applies to are represented by a clause like so: entity.licenses.exists(license, license in ['/product/{productId}/sku/{skuId}']) **Note:** The licenses clause is not supported in mutate endpoints. The above clauses can be present in any combination, and used in conjunction with the &&, || and ! operators. The org_unit and group fields below are helper fields that contain the corresponding value(s) as the query to make the query easier to use.",
 "type": "string"
 },
 "sortOrder": {
@@ -5858,6 +5926,48 @@
 },
 "type": "object"
 },
+"WindowsSpecificDeviceAttributes": {
+"description": "Represents the Windows specific attributes of a Device.",
+"id": "WindowsSpecificDeviceAttributes",
+"properties": {
+"hotfixes": {
+"description": "Output only. The hotfixes installed on the device.",
+"items": {
+"type": "string"
+},
+"readOnly": true,
+"type": "array"
+},
+"secureBootMode": {
+"description": "Output only. Secure boot mode of the device.",
+"enum": [
+"SECURE_BOOT_MODE_UNSPECIFIED",
+"SECURE_BOOT_MODE_UNKNOWN",
+"SECURE_BOOT_MODE_ENABLED",
+"SECURE_BOOT_MODE_DISABLED"
+],
+"enumDescriptions": [
+"Default value",
+"Secure boot mode is unknown.",
+"Secure boot mode is enabled.",
+"Secure boot mode is disabled."
+],
+"readOnly": true,
+"type": "string"
+},
+"windowsMachineDomain": {
+"description": "Output only. The domain of the machine that the user is logged into. This is different from the windows_user_domain as the user could be logged into a domain different from the machine domain.",
+"readOnly": true,
+"type": "string"
+},
+"windowsUserDomain": {
+"description": "Output only. The domain of the user account that is logged into the machine.",
+"readOnly": true,
+"type": "string"
+}
+},
+"type": "object"
+},
 "WipeDeviceRequest": {
 "description": "Request message for wiping all data on the device.",
 "id": "WipeDeviceRequest",

googleapiclient/discovery_cache/documents/cloudkms.v1.json

@@ -26,88 +26,88 @@
 },
 {
 "description": "Regional Endpoint",
-"endpointUrl": "https://cloudkms.europe-west9.rep.googleapis.com/",
-"location": "europe-west9"
+"endpointUrl": "https://cloudkms.us-central1.rep.googleapis.com/",
+"location": "us-central1"
 },
 {
 "description": "Regional Endpoint",
-"endpointUrl": "https://cloudkms.me-central2.rep.googleapis.com/",
-"location": "me-central2"
+"endpointUrl": "https://cloudkms.us-west4.rep.googleapis.com/",
+"location": "us-west4"
 },
 {
 "description": "Regional Endpoint",
-"endpointUrl": "https://cloudkms.us-east1.rep.googleapis.com/",
-"location": "us-east1"
+"endpointUrl": "https://cloudkms.us-east5.rep.googleapis.com/",
+"location": "us-east5"
 },
 {
 "description": "Regional Endpoint",
-"endpointUrl": "https://cloudkms.us-east4.rep.googleapis.com/",
-"location": "us-east4"
+"endpointUrl": "https://cloudkms.us-south1.rep.googleapis.com/",
+"location": "us-south1"
 },
 {
 "description": "Regional Endpoint",
-"endpointUrl": "https://cloudkms.us-west2.rep.googleapis.com/",
-"location": "us-west2"
+"endpointUrl": "https://cloudkms.us-east7.rep.googleapis.com/",
+"location": "us-east7"
 },
 {
 "description": "Regional Endpoint",
-"endpointUrl": "https://cloudkms.us-west1.rep.googleapis.com/",
-"location": "us-west1"
+"endpointUrl": "https://cloudkms.europe-west3.rep.googleapis.com/",
+"location": "europe-west3"
 },
 {
 "description": "Regional Endpoint",
-"endpointUrl": "https://cloudkms.us-central1.rep.googleapis.com/",
-"location": "us-central1"
+"endpointUrl": "https://cloudkms.us-west8.rep.googleapis.com/",
+"location": "us-west8"
 },
 {
 "description": "Regional Endpoint",
-"endpointUrl": "https://cloudkms.us-west3.rep.googleapis.com/",
-"location": "us-west3"
+"endpointUrl": "https://cloudkms.europe-west9.rep.googleapis.com/",
+"location": "europe-west9"
 },
 {
 "description": "Regional Endpoint",
-"endpointUrl": "https://cloudkms.us-central2.rep.googleapis.com/",
-"location": "us-central2"
+"endpointUrl": "https://cloudkms.me-central2.rep.googleapis.com/",
+"location": "me-central2"
 },
 {
 "description": "Regional Endpoint",
-"endpointUrl": "https://cloudkms.us-west4.rep.googleapis.com/",
-"location": "us-west4"
+"endpointUrl": "https://cloudkms.us-east1.rep.googleapis.com/",
+"location": "us-east1"
 },
 {
 "description": "Regional Endpoint",
-"endpointUrl": "https://cloudkms.us-east5.rep.googleapis.com/",
-"location": "us-east5"
+"endpointUrl": "https://cloudkms.us-west1.rep.googleapis.com/",
+"location": "us-west1"
 },
 {
 "description": "Regional Endpoint",
-"endpointUrl": "https://cloudkms.us-south1.rep.googleapis.com/",
-"location": "us-south1"
+"endpointUrl": "https://cloudkms.us-west3.rep.googleapis.com/",
+"location": "us-west3"
 },
 {
 "description": "Regional Endpoint",
-"endpointUrl": "https://cloudkms.us-east7.rep.googleapis.com/",
-"location": "us-east7"
+"endpointUrl": "https://cloudkms.us-central2.rep.googleapis.com/",
+"location": "us-central2"
 },
 {
 "description": "Regional Endpoint",
-"endpointUrl": "https://cloudkms.northamerica-northeast1.rep.googleapis.com/",
-"location": "northamerica-northeast1"
+"endpointUrl": "https://cloudkms.us-east4.rep.googleapis.com/",
+"location": "us-east4"
 },
 {
 "description": "Regional Endpoint",
-"endpointUrl": "https://cloudkms.northamerica-northeast2.rep.googleapis.com/",
-"location": "northamerica-northeast2"
+"endpointUrl": "https://cloudkms.us-west2.rep.googleapis.com/",
+"location": "us-west2"
 },
 {
 "description": "Regional Endpoint",
-"endpointUrl": "https://cloudkms.europe-west3.rep.googleapis.com/",
-"location": "europe-west3"
+"endpointUrl": "https://cloudkms.northamerica-northeast1.rep.googleapis.com/",
+"location": "northamerica-northeast1"
 },
 {
 "description": "Regional Endpoint",
-"endpointUrl": "https://cloudkms.us-west8.rep.googleapis.com/",
-"location": "us-west8"
+"endpointUrl": "https://cloudkms.northamerica-northeast2.rep.googleapis.com/",
+"location": "northamerica-northeast2"
 },
 {
 "description": "Regional Endpoint",
@@ -227,7 +227,7 @@
 ],
 "parameters": {
 "name": {
-"description": "Required. Name of the AutokeyConfig resource, e.g. `folders/{FOLDER_NUMBER}/autokeyConfig` or `projects/{PROJECT_NUMBER}/autokeyConfig`.",
+"description": "Required. Name of the AutokeyConfig resource, e.g. `folders/{FOLDER_NUMBER}/autokeyConfig`, `projects/{PROJECT_NUMBER}/autokeyConfig`, or `projects/{PROJECT_ID}/autokeyConfig`.",
 "location": "path",
 "pattern": "^folders/[^/]+/autokeyConfig$",
 "required": true,
@@ -279,7 +279,7 @@
 ],
 "parameters": {
 "name": {
-"description": "Identifier. Name of the AutokeyConfig resource, e.g. `folders/{FOLDER_NUMBER}/autokeyConfig` or `projects/{PROJECT_NUMBER}/autokeyConfig`.",
+"description": "Identifier. Name of the AutokeyConfig resource, e.g. `folders/{FOLDER_NUMBER}/autokeyConfig`, `projects/{PROJECT_NUMBER}/autokeyConfig`, or `projects/{PROJECT_ID}/autokeyConfig`.",
 "location": "path",
 "pattern": "^folders/[^/]+/autokeyConfig$",
 "required": true,
@@ -418,7 +418,7 @@
 ],
 "parameters": {
 "name": {
-"description": "Required. Name of the AutokeyConfig resource, e.g. `folders/{FOLDER_NUMBER}/autokeyConfig` or `projects/{PROJECT_NUMBER}/autokeyConfig`.",
+"description": "Required. Name of the AutokeyConfig resource, e.g. `folders/{FOLDER_NUMBER}/autokeyConfig`, `projects/{PROJECT_NUMBER}/autokeyConfig`, or `projects/{PROJECT_ID}/autokeyConfig`.",
 "location": "path",
 "pattern": "^projects/[^/]+/autokeyConfig$",
 "required": true,
@@ -548,7 +548,7 @@
 ],
 "parameters": {
 "name": {
-"description": "Identifier. Name of the AutokeyConfig resource, e.g. `folders/{FOLDER_NUMBER}/autokeyConfig` or `projects/{PROJECT_NUMBER}/autokeyConfig`.",
+"description": "Identifier. Name of the AutokeyConfig resource, e.g. `folders/{FOLDER_NUMBER}/autokeyConfig`, `projects/{PROJECT_NUMBER}/autokeyConfig`, or `projects/{PROJECT_ID}/autokeyConfig`.",
 "location": "path",
 "pattern": "^projects/[^/]+/autokeyConfig$",
 "required": true,
@@ -2376,6 +2376,25 @@
 "pattern": "^projects/[^/]+/locations/[^/]+/keyRings/[^/]+/importJobs/[^/]+$",
 "required": true,
 "type": "string"
+},
+"publicKeyFormat": {
+"description": "Optional. Specifies the WrappingPublicKey format. If not specified: * For RSA-based import methods, the wrapping key will be returned in PEM format * For pure ML-KEM-based import methods, the wrapping key will be returned in the raw bytes format specified in FIPS-203 * For X-Wing-based import methods, the wrapping key will be returned in the raw bytes format specified in https://datatracker.ietf.org/doc/draft-connolly-cfrg-xwing-kem.",
+"enum": [
+"PUBLIC_KEY_FORMAT_UNSPECIFIED",
+"PEM",
+"DER",
+"NIST_PQC",
+"XWING_RAW_BYTES"
+],
+"enumDescriptions": [
+"If the public_key_format field is not specified: - For PQC algorithms, an error will be returned. - For non-PQC algorithms, the default format is PEM, and the field pem will be populated. Otherwise, the public key will be exported through the public_key field in the requested format.",
+"The returned public key will be encoded in PEM format. See the [RFC7468](https://tools.ietf.org/html/rfc7468) sections for [General Considerations](https://tools.ietf.org/html/rfc7468#section-2) and [Textual Encoding of Subject Public Key Info] (https://tools.ietf.org/html/rfc7468#section-13) for more information.",
+"The returned public key will be encoded in DER format (the PrivateKeyInfo structure from RFC 5208).",
+"This is supported only for PQC algorithms. The key material is returned in the format defined by NIST PQC standards (FIPS 203, FIPS 204, and FIPS 205).",
+"The returned public key is in raw bytes format defined in its standard https://datatracker.ietf.org/doc/draft-connolly-cfrg-xwing-kem."
+],
+"location": "query",
+"type": "string"
 }
 },
 "path": "v1/{+name}",
@@ -2948,7 +2967,7 @@
 }
 }
 },
-"revision": "20260423",
+"revision": "20260608",
 "rootUrl": "https://cloudkms.googleapis.com/",
 "schemas": {
 "AddQuorumMember": {
@@ -3193,7 +3212,7 @@
 "type": "string"
 },
 "name": {
-"description": "Identifier. Name of the AutokeyConfig resource, e.g. `folders/{FOLDER_NUMBER}/autokeyConfig` or `projects/{PROJECT_NUMBER}/autokeyConfig`.",
+"description": "Identifier. Name of the AutokeyConfig resource, e.g. `folders/{FOLDER_NUMBER}/autokeyConfig`, `projects/{PROJECT_NUMBER}/autokeyConfig`, or `projects/{PROJECT_ID}/autokeyConfig`.",
 "type": "string"
 },
 "state": {
@@ -3202,13 +3221,22 @@
 "STATE_UNSPECIFIED",
 "ACTIVE",
 "KEY_PROJECT_DELETED",
-"UNINITIALIZED"
+"UNINITIALIZED",
+"KEY_PROJECT_PERMISSION_DENIED"
+],
+"enumDeprecated": [
+false,
+false,
+false,
+false,
+true
 ],
 "enumDescriptions": [
 "The state of the AutokeyConfig is unspecified.",
 "The AutokeyConfig is currently active.",
 "A previously configured key project has been deleted and the current AutokeyConfig is unusable.",
-"The AutokeyConfig is not yet initialized or has been reset to its default uninitialized state."
+"The AutokeyConfig is not yet initialized or has been reset to its default uninitialized state.",
+"Deprecated: This state is not returned by the backend."
 ],
 "readOnly": true,
 "type": "string"
@@ -4408,7 +4436,10 @@
 "RSA_OAEP_3072_SHA256_AES_256",
 "RSA_OAEP_4096_SHA256_AES_256",
 "RSA_OAEP_3072_SHA256",
-"RSA_OAEP_4096_SHA256"
+"RSA_OAEP_4096_SHA256",
+"HPKE_KEM_ML_KEM_768_HKDF_SHA256_AES_256_GCM",
+"HPKE_KEM_ML_KEM_1024_HKDF_SHA256_AES_256_GCM",
+"HPKE_KEM_XWING_HKDF_SHA256_AES_256_GCM"
 ],
 "enumDescriptions": [
 "Not specified.",
@@ -4417,7 +4448,10 @@
 "This ImportMethod represents the CKM_RSA_AES_KEY_WRAP key wrapping scheme defined in the PKCS #11 standard. In summary, this involves wrapping the raw key with an ephemeral AES key, and wrapping the ephemeral AES key with a 3072 bit RSA key. For more details, see [RSA AES key wrap mechanism](http://docs.oasis-open.org/pkcs11/pkcs11-curr/v2.40/cos01/pkcs11-curr-v2.40-cos01.html#_Toc408226908).",
 "This ImportMethod represents the CKM_RSA_AES_KEY_WRAP key wrapping scheme defined in the PKCS #11 standard. In summary, this involves wrapping the raw key with an ephemeral AES key, and wrapping the ephemeral AES key with a 4096 bit RSA key. For more details, see [RSA AES key wrap mechanism](http://docs.oasis-open.org/pkcs11/pkcs11-curr/v2.40/cos01/pkcs11-curr-v2.40-cos01.html#_Toc408226908).",
 "This ImportMethod represents RSAES-OAEP with a 3072 bit RSA key. The key material to be imported is wrapped directly with the RSA key. Due to technical limitations of RSA wrapping, this method cannot be used to wrap RSA keys for import.",
-"This ImportMethod represents RSAES-OAEP with a 4096 bit RSA key. The key material to be imported is wrapped directly with the RSA key. Due to technical limitations of RSA wrapping, this method cannot be used to wrap RSA keys for import."
+"This ImportMethod represents RSAES-OAEP with a 4096 bit RSA key. The key material to be imported is wrapped directly with the RSA key. Due to technical limitations of RSA wrapping, this method cannot be used to wrap RSA keys for import.",
+"Represents the Hybrid Public Key Encryption (HPKE) Scheme originally defined in [RFC 9180](https://www.rfc-editor.org/rfc/rfc9180). It involves wrapping the raw key with an ephemeral AES key, derived with HKDF-SHA256 from an encryption context, that is, in turn obtained from the receiver\u2019s public key with the help of the ML-KEM-768 KEM. For more details, see the [ML-KEM HPKE standard](http://datatracker.ietf.org/doc/draft-ietf-hpke-pq/01/).",
+"Represents the Hybrid Public Key Encryption (HPKE) Scheme originally defined in [RFC 9180](https://www.rfc-editor.org/rfc/rfc9180). It involves wrapping the raw key with an ephemeral AES key, derived with HKDF-SHA256 from an encryption context, that is, in turn obtained from the receiver\u2019s public key with the help of the ML-KEM-1024 KEM. For more details, see the [ML-KEM HPKE standard](http://datatracker.ietf.org/doc/draft-ietf-hpke-pq/01/).",
+"Represents the Hybrid Public Key Encryption (HPKE) Scheme originally defined in [RFC 9180](https://www.rfc-editor.org/rfc/rfc9180). It involves wrapping the raw key with an ephemeral AES key, derived with HKDF-SHA256 from an encryption context, that is, in turn obtained from the receiver\u2019s public key with the help of the X-Wing hybrid KEM. For more details, see the [X-Wing standard](http://datatracker.ietf.org/doc/draft-connolly-cfrg-xwing-kem/09/)."
 ],
 "type": "string"
 },
@@ -4451,6 +4485,25 @@
 "description": "Output only. The public key with which to wrap key material prior to import. Only returned if state is ACTIVE.",
 "readOnly": true
 },
+"publicKeyFormat": {
+"description": "Output only. Specifies the WrappingPublicKey format provided by the customer in the KeyManagementService.GetImportJob request.",
+"enum": [
+"PUBLIC_KEY_FORMAT_UNSPECIFIED",
+"PEM",
+"DER",
+"NIST_PQC",
+"XWING_RAW_BYTES"
+],
+"enumDescriptions": [
+"If the public_key_format field is not specified: - For PQC algorithms, an error will be returned. - For non-PQC algorithms, the default format is PEM, and the field pem will be populated. Otherwise, the public key will be exported through the public_key field in the requested format.",
+"The returned public key will be encoded in PEM format. See the [RFC7468](https://tools.ietf.org/html/rfc7468) sections for [General Considerations](https://tools.ietf.org/html/rfc7468#section-2) and [Textual Encoding of Subject Public Key Info] (https://tools.ietf.org/html/rfc7468#section-13) for more information.",
+"The returned public key will be encoded in DER format (the PrivateKeyInfo structure from RFC 5208).",
+"This is supported only for PQC algorithms. The key material is returned in the format defined by NIST PQC standards (FIPS 203, FIPS 204, and FIPS 205).",
+"The returned public key is in raw bytes format defined in its standard https://datatracker.ietf.org/doc/draft-connolly-cfrg-xwing-kem."
+],
+"readOnly": true,
+"type": "string"
+},
 "state": {
 "description": "Output only. The current state of the ImportJob, indicating if it can be used.",
 "enum": [
@@ -6001,8 +6054,14 @@ false
 "description": "The public key component of the wrapping key. For details of the type of key this public key corresponds to, see the ImportMethod.",
 "id": "WrappingPublicKey",
 "properties": {
+"data": {
+"description": "Output only. Contains the public key, formatted according to the PublicKey.PublicKeyFormat specified in the KeyManagementService.GetImportJob request.",
+"format": "byte",
+"readOnly": true,
+"type": "string"
+},
 "pem": {
-"description": "The public key, encoded in PEM format. For more information, see the [RFC 7468](https://tools.ietf.org/html/rfc7468) sections for [General Considerations](https://tools.ietf.org/html/rfc7468#section-2) and [Textual Encoding of Subject Public Key Info] (https://tools.ietf.org/html/rfc7468#section-13).",
+"description": "The public key, encoded in PEM format. For more information, see the [RFC 7468](https://tools.ietf.org/html/rfc7468) sections for [General Considerations](https://tools.ietf.org/html/rfc7468#section-2) and [Textual Encoding of Subject Public Key Info] (https://tools.ietf.org/html/rfc7468#section-13). This field gets populated by default for RSA-based import methods, if no public_key_format is specified in the request. If you want to retrieve the wrapping key of an ImportJob in some other format, use KeyManagementService.GetImportJob and set the public_key_format to the desired public key format.",
 "type": "string"
 }
 },