Merge remote-tracking branch 'origin/main' into mpu-fixes

Author: Dhriti Chopra

.github/CODEOWNERS

@@ -4,15 +4,15 @@
 # For syntax help see:
 # https://help.github.com/en/github/creating-cloning-and-archiving-repositories/about-code-owners#codeowners-syntax
 
-# The @googleapis/gcs-sdk-team is the default owner for changes in this repo
-*                       @googleapis/yoshi-java @googleapis/gcs-sdk-team
+# The @googleapis/gcs-team is the default owner for changes in this repo
+*                       @googleapis/cloud-sdk-java-team @googleapis/gcs-team
 
 # for handwritten libraries, keep codeowner_team in .repo-metadata.json as owner
-**/*.java               @googleapis/gcs-sdk-team
+**/*.java               @googleapis/gcs-team
 
 
 # The java-samples-reviewers team is the default owner for samples changes
 samples/**/*.java       @googleapis/java-samples-reviewers
 
 # Generated snippets should not be owned by samples reviewers
-samples/snippets/generated/       @googleapis/yoshi-java
+samples/snippets/generated/       @googleapis/cloud-sdk-java-team

.github/release-please.yml

@@ -2,28 +2,35 @@ bumpMinorPreMajor: true
 handleGHRelease: true
 releaseType: java-yoshi
 extraFiles:
-    - README.md
-    - .readme-partials.yaml
+  - README.md
+  - .readme-partials.yaml
 branches:
-    - branch: 1.113.14-sp
-      releaseType: java-lts
-    - branch: 1.106.1-patch
-    - branch: 1.111.3-patch
-    - branch: java7
-    - branch: 2.1.x
-    - branch: 2.6.x
-      releaseType: java-backport
-    - branch: 2.15.x
-      releaseType: java-backport
-    - branch: 2.22.x
-      releaseType: java-backport
-    - branch: 2.30.x
-      releaseType: java-backport
-    - branch: 2.38.x
-      releaseType: java-backport
-    - branch: 2.47.x
-      releaseType: java-backport
-    - branch: 2.49.x
-      releaseType: java-backport
-    - branch: protobuf-4.x-rc
-      manifest: true
+  - branch: 1.113.14-sp
+    releaseType: java-lts
+  - branch: 1.106.1-patch
+  - branch: 1.111.3-patch
+  - branch: java7
+  - branch: 2.1.x
+  - branch: 2.6.x
+    releaseType: java-backport
+  - branch: 2.15.x
+    releaseType: java-backport
+  - branch: 2.22.x
+    releaseType: java-backport
+  - branch: 2.30.x
+    releaseType: java-backport
+  - branch: 2.38.x
+    releaseType: java-backport
+  - branch: 2.47.x
+    releaseType: java-backport
+  - branch: 2.49.x
+    releaseType: java-backport
+  - branch: protobuf-4.x-rc
+    manifest: true
+  - bumpMinorPreMajor: true
+    handleGHRelease: true
+    releaseType: java-backport
+    extraFiles:
+      - README.md
+      - .readme-partials.yaml
+    branch: 2.62.x

.github/sync-repo-settings.yaml

@@ -197,10 +197,27 @@ branchProtectionRules:
       - 'Kokoro - Test: Java 17 GraalVM Native Image'
       - javadoc
       - unmanaged_dependency_check
+  - pattern: 2.62.x
+    isAdminEnforced: true
+    requiredApprovingReviewCount: 1
+    requiresCodeOwnerReviews: true
+    requiresStrictStatusChecks: false
+    requiredStatusCheckContexts:
+      - dependencies (17)
+      - lint
+      - clirr
+      - units (8)
+      - units (11)
+      - 'Kokoro - Test: Integration'
+      - cla/google
+      - 'Kokoro - Test: Java GraalVM Native Image'
+      - 'Kokoro - Test: Java 17 GraalVM Native Image'
+      - javadoc
+      - unmanaged_dependency_check
 permissionRules:
   - team: yoshi-admins
     permission: admin
   - team: yoshi-java-admins
     permission: admin
-  - team: yoshi-java
+  - team: cloud-sdk-java-team
     permission: push

.github/workflows/hermetic_library_generation.yaml

@@ -38,6 +38,7 @@ jobs:
         fetch-depth: 0
         token: ${{ secrets.CLOUD_JAVA_BOT_GITHUB_TOKEN }}
     - name: is applicable
+      if: env.SHOULD_RUN == 'true' 
       env:
         # set our branch names to be the names in the "origin" remote since we aren't actually checking these branches out
         base_ref: origin/${{ github.base_ref }}
@@ -77,7 +78,7 @@ jobs:
           echo "SHOULD_RUN=false" >> $GITHUB_ENV
         fi
 
-    - uses: googleapis/sdk-platform-java/.github/scripts@v2.66.0
+    - uses: googleapis/sdk-platform-java/.github/scripts@v2.67.0
       if: env.SHOULD_RUN == 'true'
       with:
         base_ref: ${{ github.base_ref }}

.github/workflows/unmanaged_dependency_check.yaml

@@ -17,6 +17,6 @@ jobs:
           # repository
           .kokoro/build.sh
       - name: Unmanaged dependency check
-        uses: googleapis/sdk-platform-java/java-shared-dependencies/unmanaged-dependency-check@google-cloud-shared-dependencies/v3.56.0
+        uses: googleapis/sdk-platform-java/java-shared-dependencies/unmanaged-dependency-check@google-cloud-shared-dependencies/v3.57.0
         with:
           bom-path: google-cloud-storage-bom/pom.xml

.kokoro/presubmit/graalvm-native-a.cfg

@@ -3,7 +3,7 @@
 # Configure the docker image for kokoro-trampoline.
 env_vars: {
   key: "TRAMPOLINE_IMAGE"
-  value: "gcr.io/cloud-devrel-public-resources/graalvm_sdk_platform_a:3.56.0" # {x-version-update:google-cloud-shared-dependencies:current}
+  value: "gcr.io/cloud-devrel-public-resources/graalvm_sdk_platform_a:3.57.0" # {x-version-update:google-cloud-shared-dependencies:current}
 }
 
 env_vars: {

.kokoro/presubmit/graalvm-native-b.cfg

@@ -3,7 +3,7 @@
 # Configure the docker image for kokoro-trampoline.
 env_vars: {
   key: "TRAMPOLINE_IMAGE"
-  value: "gcr.io/cloud-devrel-public-resources/graalvm_sdk_platform_b:3.56.0" # {x-version-update:google-cloud-shared-dependencies:current}
+  value: "gcr.io/cloud-devrel-public-resources/graalvm_sdk_platform_b:3.57.0" # {x-version-update:google-cloud-shared-dependencies:current}
 }
 
 env_vars: {

.kokoro/presubmit/graalvm-native-c.cfg

@@ -3,7 +3,7 @@
 # Configure the docker image for kokoro-trampoline.
 env_vars: {
   key: "TRAMPOLINE_IMAGE"
-  value: "gcr.io/cloud-devrel-public-resources/graalvm_sdk_platform_c:3.56.0" # {x-version-update:google-cloud-shared-dependencies:current}
+  value: "gcr.io/cloud-devrel-public-resources/graalvm_sdk_platform_c:3.57.0" # {x-version-update:google-cloud-shared-dependencies:current}
 }
 
 env_vars: {

.repo-metadata.json

@@ -13,7 +13,7 @@
   "api_id": "storage.googleapis.com",
   "library_type": "GAPIC_COMBO",
   "requires_billing": true,
-  "codeowner_team": "@googleapis/gcs-sdk-team",
+  "codeowner_team": "@googleapis/gcs-team",
   "excluded_poms": "google-cloud-storage-bom,google-cloud-storage",
   "issue_tracker": "https://issuetracker.google.com/savedsearches/559782",
   "extra_versioned_modules": "gapic-google-cloud-storage-v2",

CHANGELOG.md

@@ -1,5 +1,45 @@
 # Changelog
 
+## [2.64.0](https://github.com/googleapis/java-storage/compare/v2.63.0...v2.64.0) (2026-02-27)
+
+
+### Features
+
+* Adding Otel for MPU ([#3387](https://github.com/googleapis/java-storage/issues/3387)) ([2fef010](https://github.com/googleapis/java-storage/commit/2fef01016bede7892340b3434e1c229ddfa83904))
+
+
+### Bug Fixes
+
+* **deps:** Update the Java code generator (gapic-generator-java) to 2.67.0 ([ce2e03a](https://github.com/googleapis/java-storage/commit/ce2e03a80ea4308ac1365697306071e3abd92a88))
+
+
+### Dependencies
+
+* Update dependency com.google.cloud:sdk-platform-java-config to v3.57.0 ([#3500](https://github.com/googleapis/java-storage/issues/3500)) ([1617b39](https://github.com/googleapis/java-storage/commit/1617b39bdca6bedb8a5e909794acb00eebcdbbcd))
+* Update dependency node to v24 ([#3492](https://github.com/googleapis/java-storage/issues/3492)) ([0ae3315](https://github.com/googleapis/java-storage/commit/0ae3315c1f06547de3308704c772a72645c9ab88))
+* Update googleapis/sdk-platform-java action to v2.67.0 ([#3501](https://github.com/googleapis/java-storage/issues/3501)) ([f1ff0c9](https://github.com/googleapis/java-storage/commit/f1ff0c9e061e38d2c0414bc6a82b53123e59c106))
+
+## [2.63.0](https://github.com/googleapis/java-storage/compare/v2.62.1...v2.63.0) (2026-02-12)
+
+
+### Features
+
+* Add a DeleteFolderRecursive API definition ([87642bd](https://github.com/googleapis/java-storage/commit/87642bd58759a61f5fdf04b1765b77297ea443ea))
+* Added a new field `ComposeObjectRequest.delete_source_objects` field ([87642bd](https://github.com/googleapis/java-storage/commit/87642bd58759a61f5fdf04b1765b77297ea443ea))
+* Next release from main branch is 2.63.0 ([#3486](https://github.com/googleapis/java-storage/issues/3486)) ([412b5fb](https://github.com/googleapis/java-storage/commit/412b5fbe7e724e1220561f04a59251746c8a99a2))
+
+
+### Bug Fixes
+
+* **deps:** Update the Java code generator (gapic-generator-java) to 2.66.1 ([87642bd](https://github.com/googleapis/java-storage/commit/87642bd58759a61f5fdf04b1765b77297ea443ea))
+* Validate blob paths to prevent directory traversal in TransferManager downloads ([#3455](https://github.com/googleapis/java-storage/issues/3455)) ([49abf75](https://github.com/googleapis/java-storage/commit/49abf7559028d890e1c4848a5a356f266f6788be))
+
+
+### Dependencies
+
+* Update dependency com.google.cloud:sdk-platform-java-config to v3.56.1 ([#3484](https://github.com/googleapis/java-storage/issues/3484)) ([3a5deee](https://github.com/googleapis/java-storage/commit/3a5deee364175fc8c879cb22f176354a62117d22))
+* Update dependency node to v24 ([#3368](https://github.com/googleapis/java-storage/issues/3368)) ([ed2ddb7](https://github.com/googleapis/java-storage/commit/ed2ddb79c215fb7a9400e4168d10a7516ca2e664))
+
 ## [2.62.1](https://github.com/googleapis/java-storage/compare/v2.62.0...v2.62.1) (2026-01-28)