Merge branch 'main' into fix-billing-quickstart-docs

Author: scotthart

.bazelversion

@@ -1 +1 @@
-8.4.2
+8.7.0

.gemini/styleguide.md

@@ -3,7 +3,7 @@ https://google.github.io/styleguide/cppguide.html.
 
 This repository differs from the Google C++ style guide in the following ways:
 
-- supports C++14 as its minimum C++ standard version.
+- supports C++17 as its minimum C++ standard version.
 - lists local includes first, then system includes.
 - uses std::mutex instead of absl::mutex.
 - uses google::cloud::future and google::cloud::promise instead of std::future

.github/workflows/external-account-integration.yml

@@ -7,6 +7,11 @@ on:
         required: true
         description: "The ref we want to compile"
         type: string
+  push:
+    branches:
+      - "ci-gha-*"
+  schedule:
+    - cron: '0 4 * * *'
 
 permissions:
   contents: read
@@ -28,56 +33,25 @@ jobs:
     steps:
     - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5
       with:
-        ref: ${{ inputs.checkout-ref }}
-    - id: auth
-      uses: google-github-actions/auth@v2
-      with:
-        create_credentials_file: true
-        credentials_json: ${{ secrets.BUILD_CACHE_KEY }}
-    - name: Set up Cloud SDK
-      uses: google-github-actions/setup-gcloud@v2
-    - name: vcpkg-version
-      id: vcpkg-version
-      run: |
-        echo "version=$(cat ci/etc/vcpkg-version.txt)" >> "${GITHUB_OUTPUT}"
-      shell: bash
-    - name: install ninja and CMake
-      run: |
-        rm /usr/local/bin/cmake
-        sudo apt install ninja-build cmake
-    - name: download-sccache
-      working-directory: "${{runner.temp}}"
-      run: |
-        curl -fsSL https://github.com/mozilla/sccache/releases/download/v0.7.1/sccache-v0.7.1-x86_64-unknown-linux-musl.tar.gz | \
-          tar -zxf - --strip-components=1 && \
-        sudo mv sccache /usr/bin/sccache && \
-        sudo chmod +x /usr/bin/sccache
-    - name: download-vcpkg
-      working-directory: "${{runner.temp}}"
-      run: |
-        mkdir -p vcpkg
-        curl -fsSL "https://github.com/microsoft/vcpkg/archive/${STEPS_VCPKG_VERSION_OUTPUTS_VERSION}.tar.gz" |
-            tar -C vcpkg --strip-components=1 -zxf -
-        vcpkg/bootstrap-vcpkg.sh -disableMetrics
-      env:
-        STEPS_VCPKG_VERSION_OUTPUTS_VERSION: ${{ steps.vcpkg-version.outputs.version }}
-    # First compile the code using the identity with access to the build cache
-    - run: |
-        env VCPKG_ROOT="${{ runner.temp }}/vcpkg" ci/gha/builds/external-account.sh
-    # Then switch to the BYOID identity and run the integration test
+        ref: ${{ inputs.checkout-ref || github.sha }}
+    # Use BYOID identity and run the integration test
     - id: byoid-auth
       if: '!github.event.pull_request.head.repo.fork'
       name: 'Authenticate to GCP'
-      uses: 'google-github-actions/auth@v2'
+      uses: 'google-github-actions/auth@v3'
       with:
         create_credentials_file: true
         workload_identity_provider: 'projects/49427430084/locations/global/workloadIdentityPools/github-wif-pool/providers/github-wif-provider'
         service_account: 'github-actions@cloud-cpp-identity-federation.iam.gserviceaccount.com'
-    - run: |
-        ctest --test-dir cmake-out --output-on-failure -R common_internal_external_account_integration_test
-    env:
-      SCCACHE_GCS_BUCKET: cloud-cpp-gha-cache
-      SCCACHE_GCS_KEY_PREFIX: sccache/ubuntu-22.04/${{ github.job }}
-      SCCACHE_GCS_RW_MODE: READ_WRITE
-      SCCACHE_IGNORE_SERVER_IO_ERROR: 1
-      VCPKG_BINARY_SOURCES: x-gcs,gs://cloud-cpp-gha-cache/vcpkg-cache/ubuntu-22.04/${{ github.job }},readwrite
+    - name: Run integration tests
+      if: '!github.event.pull_request.head.repo.fork'
+      run: |
+        bazelisk test \
+          --test_output=all \
+          --verbose_failures=true \
+          --keep_going \
+          --experimental_convenience_symlinks=ignore \
+          --remote_upload_local_results=false \
+          --test_env=GOOGLE_APPLICATION_CREDENTIALS="${GOOGLE_APPLICATION_CREDENTIALS}" \
+          --test_env=GOOGLE_CLOUD_CPP_TEST_WIF_BUCKET="cloud-cpp-wif-test-bucket" \
+          //google/cloud:internal_external_account_integration_test

.github/workflows/macos-cmake.yml

@@ -70,7 +70,7 @@ jobs:
     - uses: actions/setup-python@v5
       id: py311
       with:
-        python-version: '3.13'
+        python-version: '3.14'
     - uses: google-github-actions/setup-gcloud@v2
       env:
         CLOUDSDK_PYTHON: ${{ steps.py311.outputs.python-path }}

.github/workflows/test-runner.yml

@@ -63,8 +63,15 @@ jobs:
   # the additional jobs inherit any secrets needed to use the remote caches and
   # receive what version to checkout as an input.
   macos-bazel:
-    # Disabled
-    if: false
+    # Build the full matrix only on push events to the default branch, or
+    # when PR gets the has a `gha:full-build` label, or when it had the
+    # label already and it gets a new commit.
+    if: |-
+      ${{
+        github.event_name == 'schedule' ||
+        github.event_name == 'push' ||
+        contains(github.event.pull_request.labels.*.name, 'gha:full-build')
+      }}
     name: macOS-Bazel
     needs: [pre-flight]
     uses: ./.github/workflows/macos-bazel.yml

.github/workflows/windows-cmake.yml

@@ -76,7 +76,7 @@ jobs:
     - uses: actions/setup-python@v5
       id: py311
       with:
-        python-version: '3.13'
+        python-version: '3.14'
     - uses: google-github-actions/setup-gcloud@v2
       env:
         CLOUDSDK_PYTHON: ${{ steps.py311.outputs.python-path }}

.typos.toml

@@ -33,6 +33,7 @@ extend-exclude = [
     "google/cloud/resourcemanager/v3/projects_client.h",
     "google/cloud/securesourcemanager/v1/secure_source_manager_client.h",
     "google/cloud/visionai/v1/warehouse_client.h",
+    "google/cloud/datacatalog/lineage/v1/lineage_client.h",
     # The tool complains about `FIELDs` :shrug:
     "/google/cloud/aiplatform/v1/featurestore_client.h",
     # Files with binary blobs in base64 format. These are usually invalidated

CHANGELOG.md

@@ -7,7 +7,71 @@ breaking changes in the upcoming 4.x release. This release is scheduled for
 **NOTE**: Please refer to the [V3 Migration Guide](/doc/v3-migration-guide.md) 
 for details on updating existing applications using v1.x.y or v2.x.y.
 
-## v3.4.0 - TBD
+## v3.6.0 - TBD
+
+### New Libraries
+
+We are happy to announce the following GA libraries. Unless specifically noted,
+the APIs in these libraries are stable, and are ready for production use.
+
+- [Data Analytics API with Gemini](/google/cloud/geminidataanalytics/README.md)
+
+### Updated Libraries
+
+- [Network Security API] has been updated with several additional services ([#16122](https://github.com/googleapis/google-cloud-cpp/pull/16122)) 
+
+### Auth
+
+- [Google Distributed Cloud Hosting (GDCH) Service Account credentials](https://docs.cloud.google.com/distributed-cloud/hosted/docs/latest/gdcag/platform/pa-user/service-identity)
+  are now supported for REST endpoints. Support for gRPC endpoints will be
+  available in a future release.
+
+
+## v3.5.0 - 2026-05
+
+### [Bigtable](/google/cloud/bigtable/README.md)
+
+- fix(bigtable): treat NOT_FOUND and PERMISSION_DENIED on channel refresh as success ([#16086](https://github.com/googleapis/google-cloud-cpp/pull/16086))
+- feat(bigtable): add DeadlineOption ([#16085](https://github.com/googleapis/google-cloud-cpp/pull/16085))
+
+### [Storage](/google/cloud/storage/README.md)
+
+- fix(storage): Reset write offset on gRPC BidiWriteObject resumable uploads ([#16083](https://github.com/googleapis/google-cloud-cpp/pull/16083))
+- fix(storage): Handle request transformation after gRPC BidiWriteObject redirects ([#16073](https://github.com/googleapis/google-cloud-cpp/pull/16073))
+
+### [Google APIs interface definitions](https://github.com/googleapis/googleapis)
+
+- This release is based on definitions as of [2026-04-22T13:12:27-07:00](https://github.com/googleapis/googleapis/tree/20ac242a6b3a723cb10c1a0201209261addaf7d8)
+
+## v3.4.0 - 2026-04
+
+### [Bigtable](/google/cloud/bigtable/README.md)
+
+- Dynamic Channel Pool support has been added as an opt-in feature. It can be
+  enabled via the [InstanceChannelAffinityOption](https://github.com/googleapis/google-cloud-cpp/blob/f3de489be4caaaf17e589c7fd7e427488c474f61/google/cloud/bigtable/options.h#L186)
+  and configured via the [DynamicChannelPoolSizingPolicyOption](https://github.com/googleapis/google-cloud-cpp/blob/f3de489be4caaaf17e589c7fd7e427488c474f61/google/cloud/bigtable/options.h#L222).
+
+### [Data Catalog](/google/cloud/datacatalog/README.md)
+
+- Added Data Lineage Config Management library.([#16069](https://github.com/googleapis/google-cloud-cpp/pull/16069))
+
+### [Dataplex](/google/cloud/dataplex/README.md)
+
+- Added Business Glossary library.([#16072](https://github.com/googleapis/google-cloud-cpp/pull/16072))
+- Added CMEK library.([#16072](https://github.com/googleapis/google-cloud-cpp/pull/16072))
+- Added Data Products library.([#16072](https://github.com/googleapis/google-cloud-cpp/pull/16072))
+
+### [Spanner](/google/cloud/spanner/README.md)
+
+- feat(spanner): set read lock mode at client level ([#16068](https://github.com/googleapis/google-cloud-cpp/pull/16068))
+
+### [Storage](/google/cloud/storage/README.md)
+
+- feat(storage): add IsOpen API for zonal read operation ([#16063](https://github.com/googleapis/google-cloud-cpp/pull/16063))
+
+### [Google APIs interface definitions](https://github.com/googleapis/googleapis)
+
+- This release is based on definitions as of [2026-04-02T09:44:56-07:00](https://github.com/googleapis/googleapis/tree/c8ca5bce5cbabac76b8619bd8d63ac10bb0561a9)
 
 ## v3.3.0 - 2026-03
 
@@ -16,9 +80,9 @@ for details on updating existing applications using v1.x.y or v2.x.y.
 We are happy to announce the following GA libraries. Unless specifically noted,
 the APIs in these libraries are stable, and are ready for production use.
 
-- [Gemini Enterprise for Customer Experience API](google/cloud/ces/README.md)
-- [Cluster Director API](google/cloud/hypercomputecluster/README.md)
-- [Vector Search API](google/cloud/vectorsearch/README.md)
+- [Gemini Enterprise for Customer Experience API](/google/cloud/ces/README.md)
+- [Cluster Director API](/google/cloud/hypercomputecluster/README.md)
+- [Vector Search API](/google/cloud/vectorsearch/README.md)
 - [Vision AI API](/google/cloud/visionai/README.md)
 - [Workload Manager](/google/cloud/workloadmanager/README.md)
 

CMakeLists.txt

@@ -21,7 +21,7 @@ set(PACKAGE_BUGREPORT "https://github.com/googleapis/google-cloud-cpp/issues")
 
 project(
     google-cloud-cpp
-    VERSION 3.4.0
+    VERSION 3.6.0
     LANGUAGES CXX)
 set(PROJECT_VERSION_PRE_RELEASE "rc")
 

MODULE.bazel

@@ -16,20 +16,20 @@
 
 module(
     name = "google_cloud_cpp",
-    version = "3.4.0-rc",  # Updated by CMake
+    version = "3.6.0-rc",  # Updated by CMake
     compatibility_level = 3,  # Updated by CMake
 )
 
 bazel_dep(name = "platforms", version = "1.0.0")
 bazel_dep(name = "bazel_skylib", version = "1.9.0")
-bazel_dep(name = "rules_cc", version = "0.2.14")
+bazel_dep(name = "rules_cc", version = "0.2.15")
 bazel_dep(name = "abseil-cpp", version = "20250814.2")
 
 # For backwards compatibility with WORKSPACE.
 # The name "com_google_protobuf" is internally used by @bazel_tools,
 # a native repository we cannot override.
 # See https://github.com/googleapis/google-cloud-cpp/issues/15393
-bazel_dep(name = "protobuf", version = "33.1", repo_name = "com_google_protobuf")
+bazel_dep(name = "protobuf", version = "33.5", repo_name = "com_google_protobuf")
 bazel_dep(name = "boringssl", version = "0.20251124.0")
 bazel_dep(name = "nlohmann_json", version = "3.12.0.bcr.1")
 bazel_dep(name = "curl", version = "8.8.0.bcr.3")
@@ -44,15 +44,15 @@ bazel_dep(name = "yaml-cpp", version = "0.9.0", dev_dependency = True, repo_name
 bazel_dep(name = "pugixml", version = "1.15", dev_dependency = True, repo_name = "com_github_zeux_pugixml")
 
 # Pin this to fix a break in bazel/deps-cache.py
-bazel_dep(name = "protoc-gen-validate", version = "1.2.1.bcr.2", dev_dependency = True, repo_name = "com_envoyproxy_protoc_gen_validate")
+bazel_dep(name = "protoc-gen-validate", version = "1.3.3", dev_dependency = True, repo_name = "com_envoyproxy_protoc_gen_validate")
 
 python = use_extension("@rules_python//python/extensions:python.bzl", "python")
 python.toolchain(
     ignore_root_user_error = True,
     python_version = "3.11",
 )
 
-bazel_dep(name = "grpc", version = "1.76.0.bcr.1")
-bazel_dep(name = "googleapis", version = "0.0.0-20260323-0b3dec84")
-bazel_dep(name = "googleapis-cc", version = "1.0.0")
-bazel_dep(name = "googleapis-grpc-cc", version = "1.0.0")
+bazel_dep(name = "grpc", version = "1.81.0")
+bazel_dep(name = "googleapis", version = "0.0.0-20260525-ef19b7b7")
+bazel_dep(name = "googleapis-cc", version = "1.1.5")
+bazel_dep(name = "googleapis-grpc-cc", version = "1.1.5")