Skip to content

Conversation

@app-token-modules
Copy link
Contributor

New managed modules references found. Please review.

@app-token-modules app-token-modules bot requested a review from a team December 8, 2025 12:08
"digest": "95fa2477a54154432754b3d2d9da1a54d4ad9bb2ce711bcb20894976f7a91a5bb4658caf1d3ab404537a8d05ad7b69fa55fa88b84453d55dae5fa0b082e85ee3"
},
{
"name": "abdfd56b2637ca5a625e7890908fd1298523d51d",
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Diff:

8 files changed: 0 removed, 0 renamed, 0 added, 8 changed content

Files changed content:

--- shake256:0652aef4653774d12c4004958cde4c8acccb461389b64b32d8bcecf7293a69bfcd2c3a6663069d95b63f446740cf07c41183ee4d50e16668dfcbfd9de7e1cfe1  google/cloud/run/v2/build.proto
+++ shake256:7449f609e920f16a826dc53767db8252a90dbd8e20585398d7ae2ec3281f79f3e68a620b80886081efcd2ee64968b0a17814e52f8ea54d64f0bddee9b38c28fa  google/cloud/run/v2/build.proto
@@ -19,6 +19,7 @@
 import "google/api/annotations.proto";
 import "google/api/client.proto";
 import "google/api/field_behavior.proto";
+import "google/api/launch_stage.proto";
 import "google/api/resource.proto";
 import "google/longrunning/operations.proto";
 
@@ -128,6 +129,18 @@
 
   // Optional. Additional tags to annotate the build.
   repeated string tags = 8 [(google.api.field_behavior) = OPTIONAL];
+
+  // Optional. The machine type from default pool to use for the build. If left
+  // blank, cloudbuild will use a sensible default. Currently only E2_HIGHCPU_8
+  // is supported. If worker_pool is set, this field will be ignored.
+  string machine_type = 9 [(google.api.field_behavior) = OPTIONAL];
+
+  // Optional. The release track of the client that initiated the build request.
+  google.api.LaunchStage release_track = 10
+      [(google.api.field_behavior) = OPTIONAL];
+
+  // Optional. The client that initiated the build request.
+  string client = 11 [(google.api.field_behavior) = OPTIONAL];
 }
 
 // Response message for submitting a Build.

--- shake256:336cfdfaea47554df8ae4e0babf159ecbff075769787e89762430d78f9a01c960f3684b30f6492a8957dd07beefb0c3b9526bfab9c40b5e19d1885a9aab9c6cf  google/cloud/run/v2/condition.proto
+++ shake256:e7c10387a9c944f0c44a0969ab663cef88e5fad6a7c9100a2e45e955be8cef4a3ecdcaa6d7c14675e66f78a5b0c6e5de775c6e654acaae73e15dae5176166879  google/cloud/run/v2/condition.proto
@@ -179,6 +179,9 @@
 
     // The execution was deleted.
     DELETED = 5;
+
+    // A delayed execution is waiting for a start time.
+    DELAYED_START_PENDING = 6;
   }
 
   // type is used to communicate the status of the reconciliation process.

--- shake256:d7bb3f74ae0efa66a0462ca44cc52f286a0852a973ef06d1904017cad21a1c6b0f8842ccd9498fba00fd1d5d00b2461f82eb1be1c368db804bc6eb0d5a837433  google/cloud/run/v2/job.proto
+++ shake256:5597425933649ec0ac94c7e1982388193c8927999404a10ad360c8a86932bc804f97adf185c4cd4b3d8fb47148ddbbbbf5579f964f9fb98943a0f79b55fd4270  google/cloud/run/v2/job.proto
@@ -491,9 +491,9 @@
     string run_execution_token = 27;
   }
 
-  // Output only. A system-generated fingerprint for this version of the
+  // Optional. A system-generated fingerprint for this version of the
   // resource. May be used to detect modification conflict during updates.
-  string etag = 99 [(google.api.field_behavior) = OUTPUT_ONLY];
+  string etag = 99 [(google.api.field_behavior) = OPTIONAL];
 }
 
 // Reference to an Execution. Use /Executions.GetExecution with the given name

--- shake256:4a558b5147990727d9049aeef2491d23fd0657ef46423d4452868503dc256db920a81ba26b5a5b7d2f1a8087ee145189e089731296434334f80e972e750ca2a4  google/cloud/run/v2/k8s.min.proto
+++ shake256:9e0d914051958b914d0f7240581bcc797e56502dabcc5f014ac04529bb64fb95606574d1e206df944123a6552e08aae05e57ae5e119f4463b5004c7a2d791ad8  google/cloud/run/v2/k8s.min.proto
@@ -54,6 +54,9 @@
   // Dockerhub is assumed.
   string image = 2 [(google.api.field_behavior) = REQUIRED];
 
+  // Optional. Location of the source.
+  SourceCode source_code = 17 [(google.api.field_behavior) = OPTIONAL];
+
   // Entrypoint array. Not executed within a shell.
   // The docker image's ENTRYPOINT is used if this is not provided.
   repeated string command = 3;
@@ -107,7 +110,7 @@
 
 // ResourceRequirements describes the compute resource requirements.
 message ResourceRequirements {
-  // Only `memory` and `cpu` keys in the map are supported.
+  // Only `memory`, `cpu` and `nvidia.com/gpu` keys in the map are supported.
   //
   // <p>Notes:
   //  * The only supported values for CPU are '1', '2', '4', and '8'. Setting 4
@@ -115,6 +118,7 @@
   // https://cloud.google.com/run/docs/configuring/cpu.
   //   * For supported 'memory' values and syntax, go to
   //  https://cloud.google.com/run/docs/configuring/memory-limits
+  //  * The only supported 'nvidia.com/gpu' value is '1'.
   map<string, string> limits = 1;
 
   // Determines whether CPU is only allocated during requests (true by default).
@@ -194,6 +198,10 @@
   // available as `/cloudsql/[instance]`. For more information on Cloud SQL
   // volumes, visit https://cloud.google.com/sql/docs/mysql/connect-run
   string mount_path = 3 [(google.api.field_behavior) = REQUIRED];
+
+  // Optional. Path within the volume from which the container's volume should
+  // be mounted. Defaults to "" (volume's root).
+  string sub_path = 4 [(google.api.field_behavior) = OPTIONAL];
 }
 
 // Volume represents a named volume in a container.
@@ -232,7 +240,7 @@
   string secret = 1 [(google.api.field_behavior) = REQUIRED];
 
   // If unspecified, the volume will expose a file whose name is the
-  // secret, relative to VolumeMount.mount_path.
+  // secret, relative to VolumeMount.mount_path + VolumeMount.sub_path.
   // If specified, the key will be used as the version to fetch from Cloud
   // Secret Manager and the path will be the name of the file exposed in the
   // volume. When items are defined, they must specify a path and a version.
@@ -449,3 +457,24 @@
   // Output only. Source code location of the image.
   string source_location = 2 [(google.api.field_behavior) = OUTPUT_ONLY];
 }
+
+// Source type for the container.
+message SourceCode {
+  // Cloud Storage source.
+  message CloudStorageSource {
+    // Required. The Cloud Storage bucket name.
+    string bucket = 1 [(google.api.field_behavior) = REQUIRED];
+
+    // Required. The Cloud Storage object name.
+    string object = 2 [(google.api.field_behavior) = REQUIRED];
+
+    // Optional. The Cloud Storage object generation.
+    int64 generation = 3 [(google.api.field_behavior) = OPTIONAL];
+  }
+
+  // The source type.
+  oneof source_type {
+    // The source is a Cloud Storage bucket.
+    CloudStorageSource cloud_storage_source = 1;
+  }
+}

--- shake256:c4797a5ead210cb7387dd6515eceae9e8f28d0119a9bc0be268782ece6a10a22adeb880fd574c6abb41a898575f57abf4034296cc46385bb2f39da781ee2efab  google/cloud/run/v2/service.proto
+++ shake256:858be081a47991cb84500ab9e1b9e4b16810dba2fc3ecea39ca6c21989b3d029962619fc8e617e5785330ac8ff0a9728b7543c6dc7e43e263f7b4f587e5be150  google/cloud/run/v2/service.proto
@@ -240,6 +240,10 @@
   // A token indicating there are more items than page_size. Use it in the next
   // ListServices request to continue.
   string next_page_token = 2;
+
+  // Output only. For global requests, returns the list of regions that could
+  // not be reached within the deadline.
+  repeated string unreachable = 3 [(google.api.field_behavior) = OUTPUT_ONLY];
 }
 
 // Request message for obtaining a Service by its full name.
@@ -284,13 +288,22 @@
     style: DECLARATIVE_FRIENDLY
   };
 
-  // The fully qualified name of this Service. In CreateServiceRequest, this
-  // field is ignored, and instead composed from CreateServiceRequest.parent and
-  // CreateServiceRequest.service_id.
+  // Settings for multi-region deployment.
+  message MultiRegionSettings {
+    // Required. List of regions to deploy to, including primary region.
+    repeated string regions = 1 [(google.api.field_behavior) = REQUIRED];
+
+    // Optional. System-generated unique id for the multi-region Service.
+    string multi_region_id = 2 [(google.api.field_behavior) = OPTIONAL];
+  }
+
+  // Identifier. The fully qualified name of this Service. In
+  // CreateServiceRequest, this field is ignored, and instead composed from
+  // CreateServiceRequest.parent and CreateServiceRequest.service_id.
   //
   // Format:
   // projects/{project}/locations/{location}/services/{service_id}
-  string name = 1;
+  string name = 1 [(google.api.field_behavior) = IDENTIFIER];
 
   // User-provided description of the Service. This field currently has a
   // 512-character limit.
@@ -397,8 +410,7 @@
   ServiceScaling scaling = 20 [(google.api.field_behavior) = OPTIONAL];
 
   // Optional. Disables IAM permission check for run.routes.invoke for callers
-  // of this service. This feature is available by invitation only. For more
-  // information, visit
+  // of this service. For more information, visit
   // https://cloud.google.com/run/docs/securing/managing-access#invoker_check.
   bool invoker_iam_disabled = 21 [(google.api.field_behavior) = OPTIONAL];
 
@@ -408,6 +420,13 @@
   // Output only. All URLs serving traffic for this Service.
   repeated string urls = 24 [(google.api.field_behavior) = OUTPUT_ONLY];
 
+  // Optional. IAP settings on the Service.
+  bool iap_enabled = 25 [(google.api.field_behavior) = OPTIONAL];
+
+  // Optional. Settings for multi-region deployment.
+  MultiRegionSettings multi_region_settings = 26
+      [(google.api.field_behavior) = OPTIONAL];
+
   // One or more custom audiences that you want this service to support. Specify
   // each custom audience as the full URL in a string. The custom audiences are
   // encoded in the token and used to authenticate requests. For more
@@ -463,6 +482,11 @@
   // Output only. Reserved for future use.
   bool satisfies_pzs = 38 [(google.api.field_behavior) = OUTPUT_ONLY];
 
+  // Output only. True if Cloud Run Threat Detection monitoring is enabled for
+  // the parent project of this Service.
+  bool threat_detection_enabled = 40
+      [(google.api.field_behavior) = OUTPUT_ONLY];
+
   // Optional. Configuration for building a Cloud Run function.
   BuildConfig build_config = 41 [(google.api.field_behavior) = OPTIONAL];
 
@@ -490,7 +514,7 @@
   // can be found in `terminal_condition` and `conditions`.
   bool reconciling = 98 [(google.api.field_behavior) = OUTPUT_ONLY];
 
-  // Output only. A system-generated fingerprint for this version of the
+  // Optional. A system-generated fingerprint for this version of the
   // resource. May be used to detect modification conflict during updates.
-  string etag = 99 [(google.api.field_behavior) = OUTPUT_ONLY];
+  string etag = 99 [(google.api.field_behavior) = OPTIONAL];
 }

--- shake256:698b9063ecb2a150d4b082d925f5519094f2f7fadf44008a9b35da579a20da9e673739efa3326ed7b7f794ecbfba02a92e3ae35eb163d9c8ec99d4c1cc5b6d36  google/cloud/run/v2/vendor_settings.proto
+++ shake256:29441927cb2267573d9a1b999fcf5891f2f487ca87a958b3e743e50dfaa348f8536a936325d8ac8006a625d94611cf68846996eada27b16bf7209bbe0e15ba6b  google/cloud/run/v2/vendor_settings.proto
@@ -163,6 +163,11 @@
   // Optional. The scaling mode for the service.
   ScalingMode scaling_mode = 3 [(google.api.field_behavior) = OPTIONAL];
 
+  // Optional. total max instances for the service. This number of instances is
+  // divided among all revisions with specified traffic based on the percent
+  // of traffic they are receiving.
+  int32 max_instance_count = 4 [(google.api.field_behavior) = OPTIONAL];
+
   // Optional. total instance count for the service in manual scaling mode. This
   // number of instances is divided among all revisions with specified traffic
   // based on the percent of traffic they are receiving.

--- shake256:07f2ea0a73925fc06319477c8aaa0ccac3c49714536220896fe60d04b2e92ebf4cbc31aae947dad4ef88c7d13de02a5cd45b9b47f3fef902efd4c22602ee77f1  google/cloud/run/v2/worker_pool.proto
+++ shake256:c4532a062b4e34009919c494edff7d876597a553289f375414f191e29522c4eb9d56b87ad7776067965b00481ac3f14d033fc9bf2ca62bb180ff55e78c5122f3  google/cloud/run/v2/worker_pool.proto
@@ -409,7 +409,7 @@
   // Optional. Specifies worker-pool-level scaling settings
   WorkerPoolScaling scaling = 20 [(google.api.field_behavior) = OPTIONAL];
 
-  // Output only. The generation of this WorkerPool currently serving traffic.
+  // Output only. The generation of this WorkerPool currently serving workloads.
   // See comments in `reconciling` for additional information on reconciliation
   // process in Cloud Run. Please note that unlike v1, this is an int64 value.
   // As with most Google APIs, its JSON representation will be a `string`
@@ -429,7 +429,7 @@
   repeated Condition conditions = 32
       [(google.api.field_behavior) = OUTPUT_ONLY];
 
-  // Output only. Name of the latest revision that is serving traffic. See
+  // Output only. Name of the latest revision that is serving workloads. See
   // comments in `reconciling` for additional information on reconciliation
   // process in Cloud Run.
   string latest_ready_revision = 33 [
@@ -451,11 +451,12 @@
   repeated InstanceSplitStatus instance_split_statuses = 27
       [(google.api.field_behavior) = OUTPUT_ONLY];
 
-  // One or more custom audiences that you want this worker pool to support.
-  // Specify each custom audience as the full URL in a string. The custom
-  // audiences are encoded in the token and used to authenticate requests. For
-  // more information, see
-  // https://cloud.google.com/run/docs/configuring/custom-audiences.
+  // Output only. Indicates whether Cloud Run Threat Detection monitoring is
+  // enabled for the parent project of this worker pool.
+  bool threat_detection_enabled = 28
+      [(google.api.field_behavior) = OUTPUT_ONLY];
+
+  // Not supported, and ignored by Cloud Run.
   repeated string custom_audiences = 37;
 
   // Output only. Reserved for future use.
@@ -468,24 +469,24 @@
   // will asynchronously perform all necessary steps to bring the WorkerPool to
   // the desired serving state. This process is called reconciliation. While
   // reconciliation is in process, `observed_generation`,
-  // `latest_ready_revison`, `traffic_statuses`, and `uri` will have transient
-  // values that might mismatch the intended state: Once reconciliation is over
-  // (and this field is false), there are two possible outcomes: reconciliation
-  // succeeded and the serving state matches the WorkerPool, or there was an
-  // error, and reconciliation failed. This state can be found in
-  // `terminal_condition.state`.
-  //
-  // If reconciliation succeeded, the following fields will match: `traffic` and
-  // `traffic_statuses`, `observed_generation` and `generation`,
-  // `latest_ready_revision` and `latest_created_revision`.
+  // `latest_ready_revison`, `instance_split_statuses`, and `uri` will have
+  // transient values that might mismatch the intended state: Once
+  // reconciliation is over (and this field is false), there are two possible
+  // outcomes: reconciliation succeeded and the serving state matches the
+  // WorkerPool, or there was an error, and reconciliation failed. This state
+  // can be found in `terminal_condition.state`.
   //
-  // If reconciliation failed, `traffic_statuses`, `observed_generation`, and
-  // `latest_ready_revision` will have the state of the last serving revision,
-  // or empty for newly created WorkerPools. Additional information on the
-  // failure can be found in `terminal_condition` and `conditions`.
+  // If reconciliation succeeded, the following fields will match:
+  // `instance_splits` and `instance_split_statuses`, `observed_generation` and
+  // `generation`, `latest_ready_revision` and `latest_created_revision`.
+  //
+  // If reconciliation failed, `instance_split_statuses`, `observed_generation`,
+  // and `latest_ready_revision` will have the state of the last serving
+  // revision, or empty for newly created WorkerPools. Additional information on
+  // the failure can be found in `terminal_condition` and `conditions`.
   bool reconciling = 98 [(google.api.field_behavior) = OUTPUT_ONLY];
 
-  // Output only. A system-generated fingerprint for this version of the
+  // Optional. A system-generated fingerprint for this version of the
   // resource. May be used to detect modification conflict during updates.
-  string etag = 99 [(google.api.field_behavior) = OUTPUT_ONLY];
+  string etag = 99 [(google.api.field_behavior) = OPTIONAL];
 }

--- shake256:e58bdae6ad420f062f649d75ddbe7f6de4e17d4bcf3a9c990d41e02df5e5200fdd57458da589e84c10b596bce40c93e624734af8d84ff49ec3145344b237ada2  google/cloud/run/v2/worker_pool_revision_template.proto
+++ shake256:5dd04504ac50d2b2cd2f448f5ff5d20c1e321970c62da6a4b51ab824697f2d67d0337166d68ffc28bf0156ad1a3287b817cfdeb6142326efd5474129e806dc94  google/cloud/run/v2/worker_pool_revision_template.proto
@@ -102,4 +102,8 @@
 
   // Optional. The node selector for the revision template.
   NodeSelector node_selector = 13 [(google.api.field_behavior) = OPTIONAL];
+
+  // Optional. True if GPU zonal redundancy is disabled on this worker pool.
+  optional bool gpu_zonal_redundancy_disabled = 16
+      [(google.api.field_behavior) = OPTIONAL];
 }

},
{
"name": "v33.2",
"digest": "7535ac337929b4cfdd12d52bef75155277e715bdc364fcb41556a95fa0d3f58510b4e210f609cb91f9a47363a59c1643b6b1059d7702d0e900059271fde1c03a"
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Diff:

1 files changed: 0 removed, 0 renamed, 0 added, 1 changed content

Files changed content:

--- shake256:7e550defb267c9883ff6dcba8508103a6afa788695de0b3344103ab8f233e3dc457792a9d6f8dd439107e66a3439cd87b7c138f53a16432216a465cffab6720a  google/protobuf/descriptor.proto
+++ shake256:2d4c664294ebf2759e1c7460e0f4b69d3835d7ff8fce4b8fde4a5fd87d55e794764834715eb91525ccbda422f7d3f24fca89428da044eb37e2be43c60c8e10a4  google/protobuf/descriptor.proto
@@ -85,6 +85,9 @@
   // comparison.
   EDITION_2023 = 1000;
   EDITION_2024 = 1001;
+
+  // A placeholder edition for developing and testing unscheduled features.
+  EDITION_UNSTABLE = 9999;
 
   // Placeholder editions for testing feature resolution.  These should not be
   // used or relied on outside of tests.
@@ -1184,6 +1187,11 @@
       number: 1003,
       full_name: ".pb.python",
       type: ".pb.PythonFeatures"
+    },
+    declaration = {
+      number: 1100,
+      full_name: ".imp.impress_feature_set",
+      type: ".imp.ImpressFeatureSet"
     },
     declaration = {
       number: 9989,

@pkwarren pkwarren merged commit 44c84e9 into main Dec 8, 2025
5 checks passed
@pkwarren pkwarren deleted the fetch-modules branch December 8, 2025 19:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants