Merge branch 'nodejs-error-reporting-migration' of https://github.com/googleapis/google-cloud-node into nodejs-error-reporting-migration

Author: gcf-owl-bot[bot]

.release-please-manifest.json

@@ -67,7 +67,7 @@
   "packages/google-cloud-configdelivery": "0.1.1",
   "packages/google-cloud-connectors": "0.5.1",
   "packages/google-cloud-contactcenterinsights": "4.1.1",
-  "packages/google-cloud-contentwarehouse": "2.3.0",
+  "packages/google-cloud-contentwarehouse": "2.4.0",
   "packages/google-cloud-datacatalog": "5.2.1",
   "packages/google-cloud-datacatalog-lineage": "2.1.1",
   "packages/google-cloud-dataform": "2.2.1",

changelog.json

@@ -1,6 +1,23 @@
 {
   "repository": "googleapis/google-cloud-node",
   "entries": [
+    {
+      "changes": [
+        {
+          "type": "feat",
+          "sha": "7eb5628e05f7592c7c3857035f82e9f44d8d4ef4",
+          "message": "[contentwarehouse] Added a field for enabling image and table annotation for layout parser processor",
+          "issues": [
+            "7319"
+          ]
+        }
+      ],
+      "version": "2.4.0",
+      "language": "JAVASCRIPT",
+      "artifactName": "@google-cloud/contentwarehouse",
+      "id": "cfb064a7-0554-4ef7-ae1e-824c41504a8a",
+      "createTime": "2026-03-04T19:33:12.038Z"
+    },
     {
       "changes": [
         {
@@ -68685,5 +68702,5 @@
       "createTime": "2023-01-28T04:18:24.718Z"
     }
   ],
-  "updateTime": "2026-03-02T16:41:40.032Z"
+  "updateTime": "2026-03-04T19:33:12.038Z"
 }

handwritten/storage/system-test/fixtures/index-cjs.js

@@ -12,10 +12,11 @@
 // See the License for the specific language governing permissions and
 // limitations under the License.
 
-/* eslint-disable node/no-missing-require, no-unused-vars, no-undef */
+// eslint-disable-next-line no-undef
 const {Storage} = require('@google-cloud/storage');
 
 function main() {
+  // eslint-disable-next-line no-unused-vars
   const storage = new Storage();
 }
 

handwritten/storage/system-test/fixtures/index-esm.js

@@ -12,10 +12,11 @@
 // See the License for the specific language governing permissions and
 // limitations under the License.
 
-/* eslint-disable node/no-missing-import, no-unused-vars */
-import {Storage} from '@google-cloud/storage';
+// eslint-disable-next-line no-undef
+const {Storage} = require('@google-cloud/storage');
 
 function main() {
+  // eslint-disable-next-line no-unused-vars
   const storage = new Storage();
 }
 

packages/google-cloud-ces/README.md

@@ -139,6 +139,7 @@ Samples are in the [`samples/`][homepage_samples] directory. Each sample's `READ
 | get deployment | [source code](https://github.com/googleapis/google-cloud-node/blob/main/packages/google-cloud-ces/samples/generated/v1beta/agent_service.get_deployment.js) |
 | get example | [source code](https://github.com/googleapis/google-cloud-node/blob/main/packages/google-cloud-ces/samples/generated/v1beta/agent_service.get_example.js) |
 | get guardrail | [source code](https://github.com/googleapis/google-cloud-node/blob/main/packages/google-cloud-ces/samples/generated/v1beta/agent_service.get_guardrail.js) |
+| get security settings | [source code](https://github.com/googleapis/google-cloud-node/blob/main/packages/google-cloud-ces/samples/generated/v1beta/agent_service.get_security_settings.js) |
 | get tool | [source code](https://github.com/googleapis/google-cloud-node/blob/main/packages/google-cloud-ces/samples/generated/v1beta/agent_service.get_tool.js) |
 | get toolset | [source code](https://github.com/googleapis/google-cloud-node/blob/main/packages/google-cloud-ces/samples/generated/v1beta/agent_service.get_toolset.js) |
 | import app | [source code](https://github.com/googleapis/google-cloud-node/blob/main/packages/google-cloud-ces/samples/generated/v1beta/agent_service.import_app.js) |
@@ -158,6 +159,7 @@ Samples are in the [`samples/`][homepage_samples] directory. Each sample's `READ
 | update deployment | [source code](https://github.com/googleapis/google-cloud-node/blob/main/packages/google-cloud-ces/samples/generated/v1beta/agent_service.update_deployment.js) |
 | update example | [source code](https://github.com/googleapis/google-cloud-node/blob/main/packages/google-cloud-ces/samples/generated/v1beta/agent_service.update_example.js) |
 | update guardrail | [source code](https://github.com/googleapis/google-cloud-node/blob/main/packages/google-cloud-ces/samples/generated/v1beta/agent_service.update_guardrail.js) |
+| update security settings | [source code](https://github.com/googleapis/google-cloud-node/blob/main/packages/google-cloud-ces/samples/generated/v1beta/agent_service.update_security_settings.js) |
 | update tool | [source code](https://github.com/googleapis/google-cloud-node/blob/main/packages/google-cloud-ces/samples/generated/v1beta/agent_service.update_tool.js) |
 | update toolset | [source code](https://github.com/googleapis/google-cloud-node/blob/main/packages/google-cloud-ces/samples/generated/v1beta/agent_service.update_toolset.js) |
 | create evaluation | [source code](https://github.com/googleapis/google-cloud-node/blob/main/packages/google-cloud-ces/samples/generated/v1beta/evaluation_service.create_evaluation.js) |

packages/google-cloud-ces/protos/google/cloud/ces/v1beta/agent_service.proto

@@ -29,6 +29,7 @@ import "google/cloud/ces/v1beta/deployment.proto";
 import "google/cloud/ces/v1beta/evaluation.proto";
 import "google/cloud/ces/v1beta/example.proto";
 import "google/cloud/ces/v1beta/guardrail.proto";
+import "google/cloud/ces/v1beta/security_settings.proto";
 import "google/cloud/ces/v1beta/tool.proto";
 import "google/cloud/ces/v1beta/toolset.proto";
 import "google/longrunning/operations.proto";
@@ -130,6 +131,25 @@ service AgentService {
     };
   }
 
+  // Retrieves the security settings for the project and location.
+  rpc GetSecuritySettings(GetSecuritySettingsRequest)
+      returns (SecuritySettings) {
+    option (google.api.http) = {
+      get: "/v1beta/{name=projects/*/locations/*/securitySettings}"
+    };
+    option (google.api.method_signature) = "name";
+  }
+
+  // Updates the security settings for the project and location.
+  rpc UpdateSecuritySettings(UpdateSecuritySettingsRequest)
+      returns (SecuritySettings) {
+    option (google.api.http) = {
+      patch: "/v1beta/{security_settings.name=projects/*/locations/*/securitySettings}"
+      body: "security_settings"
+    };
+    option (google.api.method_signature) = "security_settings,update_mask";
+  }
+
   // Lists agents in the given app.
   rpc ListAgents(ListAgentsRequest) returns (ListAgentsResponse) {
     option (google.api.http) = {
@@ -1754,3 +1774,29 @@ message GetChangelogRequest {
     (google.api.resource_reference) = { type: "ces.googleapis.com/Changelog" }
   ];
 }
+
+// Request message for
+// [AgentService.GetSecuritySettings][google.cloud.ces.v1beta.AgentService.GetSecuritySettings].
+message GetSecuritySettingsRequest {
+  // Required. The resource name of the security settings to retrieve.
+  // Format: `projects/{project}/locations/{location}/securitySettings`
+  string name = 1 [
+    (google.api.field_behavior) = REQUIRED,
+    (google.api.resource_reference) = {
+      type: "ces.googleapis.com/SecuritySettings"
+    }
+  ];
+}
+
+// Request message for
+// [AgentService.UpdateSecuritySettings][google.cloud.ces.v1beta.AgentService.UpdateSecuritySettings].
+message UpdateSecuritySettingsRequest {
+  // Required. The security settings to update.
+  SecuritySettings security_settings = 1
+      [(google.api.field_behavior) = REQUIRED];
+
+  // Optional. Field mask is used to control which fields get updated. If the
+  // mask is not present, all fields will be updated.
+  google.protobuf.FieldMask update_mask = 2
+      [(google.api.field_behavior) = OPTIONAL];
+}

packages/google-cloud-ces/protos/google/cloud/ces/v1beta/agent_tool.proto

@@ -0,0 +1,41 @@
+// Copyright 2026 Google LLC
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+syntax = "proto3";
+
+package google.cloud.ces.v1beta;
+
+import "google/api/field_behavior.proto";
+import "google/api/resource.proto";
+
+option go_package = "cloud.google.com/go/ces/apiv1beta/cespb;cespb";
+option java_multiple_files = true;
+option java_outer_classname = "AgentToolProto";
+option java_package = "com.google.cloud.ces.v1beta";
+
+// Represents a tool that allows the agent to call another agent.
+message AgentTool {
+  // Required. The name of the agent tool.
+  string name = 1 [(google.api.field_behavior) = REQUIRED];
+
+  // Optional. Description of the tool's purpose.
+  string description = 2 [(google.api.field_behavior) = OPTIONAL];
+
+  // Optional. The resource name of the root agent that is the entry point of
+  // the tool. Format: `projects/{project}/locations/{location}/agents/{agent}`
+  string root_agent = 3 [
+    (google.api.field_behavior) = OPTIONAL,
+    (google.api.resource_reference) = { type: "ces.googleapis.com/Agent" }
+  ];
+}

packages/google-cloud-ces/protos/google/cloud/ces/v1beta/common.proto

@@ -148,11 +148,14 @@ message TlsConfig {
     // is empty or unspecified, CES will use Google's default trust
     // store to verify certificates. N.B. Make sure the HTTPS server
     // certificates are signed with "subject alt name". For instance a
-    // certificate can be self-signed using the following command,
+    // certificate can be self-signed using the following command:
+    //
+    // ```
     //    openssl x509 -req -days 200 -in example.com.csr \
     //      -signkey example.com.key \
     //      -out example.com.crt \
     //      -extfile <(printf "\nsubjectAltName='DNS:www.example.com'")
+    // ```
     bytes cert = 2 [(google.api.field_behavior) = REQUIRED];
   }
 

packages/google-cloud-ces/protos/google/cloud/ces/v1beta/evaluation_service.proto

@@ -61,10 +61,10 @@ service EvaluationService {
   rpc UploadEvaluationAudio(UploadEvaluationAudioRequest)
       returns (UploadEvaluationAudioResponse) {
     option (google.api.http) = {
-      post: "/v1beta/{app=projects/*/locations/*/apps/*}:uploadEvaluationAudio"
+      post: "/v1beta/{name=projects/*/locations/*/apps/*/evaluations/*}:uploadEvaluationAudio"
       body: "*"
     };
-    option (google.api.method_signature) = "app,audio_content";
+    option (google.api.method_signature) = "name,audio_content";
   }
 
   // Creates an evaluation.
@@ -1044,17 +1044,22 @@ message TestPersonaVoiceRequest {
 // Request message for
 // [EvaluationService.UploadEvaluationAudio][google.cloud.ces.v1beta.EvaluationService.UploadEvaluationAudio].
 message UploadEvaluationAudioRequest {
-  // Required. The resource name of the App for which to upload the evaluation
-  // audio. Format: `projects/{project}/locations/{location}/apps/{app}`
-  string app = 1 [
+  // Required. The resource name of the Evaluation for which to upload the
+  // evaluation audio. Format:
+  // `projects/{project}/locations/{location}/apps/{app}/evaluations/{evaluation}`
+  string name = 1 [
     (google.api.field_behavior) = REQUIRED,
-    (google.api.resource_reference) = { type: "ces.googleapis.com/App" }
+    (google.api.resource_reference) = { type: "ces.googleapis.com/Evaluation" }
   ];
 
   // Required. The raw audio bytes.
   // The format of the audio must be single-channel LINEAR16 with a sample
   // rate of 16kHz (default InputAudioConfig).
   bytes audio_content = 2 [(google.api.field_behavior) = REQUIRED];
+
+  // Optional. The Google Cloud Storage URI of the previously uploaded audio
+  // file to be deleted. Format: `gs://<bucket-name>/<object-name>`
+  string previous_audio_gcs_uri = 3 [(google.api.field_behavior) = OPTIONAL];
 }
 
 // Response message for
@@ -1064,11 +1069,11 @@ message UploadEvaluationAudioResponse {
   // Format: `gs://<bucket-name>/<object-name>`
   string audio_gcs_uri = 1;
 
-  // The transcribed text from the audio, generated by Cloud Speech-to-Text.
-  string audio_transcript = 2;
+  // The transcript of the audio, generated by Cloud Speech-to-Text.
+  string transcript = 2;
 
   // The duration of the audio.
-  google.protobuf.Duration audio_duration = 3;
+  google.protobuf.Duration duration = 3;
 }
 
 // Response message for

packages/google-cloud-ces/protos/google/cloud/ces/v1beta/security_settings.proto

@@ -0,0 +1,85 @@
+// Copyright 2026 Google LLC
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+syntax = "proto3";
+
+package google.cloud.ces.v1beta;
+
+import "google/api/field_behavior.proto";
+import "google/api/resource.proto";
+import "google/protobuf/timestamp.proto";
+
+option go_package = "cloud.google.com/go/ces/apiv1beta/cespb;cespb";
+option java_multiple_files = true;
+option java_outer_classname = "SecuritySettingsProto";
+option java_package = "com.google.cloud.ces.v1beta";
+
+// Project/Location level security settings for CES.
+message SecuritySettings {
+  option (google.api.resource) = {
+    type: "ces.googleapis.com/SecuritySettings"
+    pattern: "projects/{project}/locations/{location}/securitySettings"
+    plural: "securitySettings"
+    singular: "securitySettings"
+  };
+
+  // Identifier. The unique identifier of the security settings.
+  // Format: `projects/{project}/locations/{location}/securitySettings`
+  string name = 1 [(google.api.field_behavior) = IDENTIFIER];
+
+  // Optional. Endpoint control related settings.
+  EndpointControlPolicy endpoint_control_policy = 2
+      [(google.api.field_behavior) = OPTIONAL];
+
+  // Output only. Create time of the security settings.
+  google.protobuf.Timestamp create_time = 3
+      [(google.api.field_behavior) = OUTPUT_ONLY];
+
+  // Output only. Last update time of the security settings.
+  google.protobuf.Timestamp update_time = 4
+      [(google.api.field_behavior) = OUTPUT_ONLY];
+
+  // Output only. Etag of the security settings.
+  string etag = 5 [(google.api.field_behavior) = OUTPUT_ONLY];
+}
+
+// Defines project/location level endpoint control policy.
+message EndpointControlPolicy {
+  // Defines the scope in which this policy's allowed_origins list is
+  // enforced.
+  enum EnforcementScope {
+    // Unspecified. This policy will be treated as VPCSC_ONLY.
+    ENFORCEMENT_SCOPE_UNSPECIFIED = 0;
+
+    // This policy applies only when VPC-SC is active.
+    VPCSC_ONLY = 1;
+
+    // This policy ALWAYS applies, regardless of VPC-SC status.
+    ALWAYS = 2;
+  }
+
+  // Optional. The scope in which this policy's allowed_origins list is
+  // enforced.
+  EnforcementScope enforcement_scope = 1
+      [(google.api.field_behavior) = OPTIONAL];
+
+  // Optional. The allowed HTTP(s) origins that tools in the App are able to
+  // directly call. The enforcement depends on the value of
+  // enforcement_scope and the VPC-SC status of the project.
+  // If a port number is not provided, all ports will be allowed. Otherwise,
+  // the port number must match exactly. For example, "https://example.com"
+  // will match "https://example.com:443" and any other port.
+  // "https://example.com:443" will only match "https://example.com:443".
+  repeated string allowed_origins = 2 [(google.api.field_behavior) = OPTIONAL];
+}