feat: update bucket encryption enforcement config samples

- Update copyright headers to 2026 for GetEncryptionEnforcementConfig and SetBucketEncryptionEnforcementConfig
- Delete RemoveAllEncryptionEnforcementConfig
- Add UpdateBucketEncryptionEnforcementConfig to demonstrate updating encryption enforcement policies

Co-authored-by: nidhiii-27 <224584462+nidhiii-27@users.noreply.github.com>

Author: google-labs-jules[bot]

.github/CODEOWNERS

@@ -4,15 +4,15 @@
 # For syntax help see:
 # https://help.github.com/en/github/creating-cloning-and-archiving-repositories/about-code-owners#codeowners-syntax
 
-# The @googleapis/gcs-team is the default owner for changes in this repo
-*                       @googleapis/cloud-sdk-java-team @googleapis/gcs-team
+# The @googleapis/gcs-sdk-team is the default owner for changes in this repo
+*                       @googleapis/yoshi-java @googleapis/gcs-sdk-team
 
 # for handwritten libraries, keep codeowner_team in .repo-metadata.json as owner
-**/*.java               @googleapis/gcs-team
+**/*.java               @googleapis/gcs-sdk-team
 
 
 # The java-samples-reviewers team is the default owner for samples changes
 samples/**/*.java       @googleapis/java-samples-reviewers
 
 # Generated snippets should not be owned by samples reviewers
-samples/snippets/generated/       @googleapis/cloud-sdk-java-team
+samples/snippets/generated/       @googleapis/yoshi-java

.github/release-please.yml

@@ -5,32 +5,64 @@ extraFiles:
   - README.md
   - .readme-partials.yaml
 branches:
-  - branch: 1.113.14-sp
+  - bumpMinorPreMajor: true
+    handleGHRelease: true
     releaseType: java-lts
-  - branch: 1.106.1-patch
-  - branch: 1.111.3-patch
-  - branch: java7
-  - branch: 2.1.x
-  - branch: 2.6.x
-    releaseType: java-backport
-  - branch: 2.15.x
+    branch: 1.113.14-sp
+  - bumpMinorPreMajor: true
+    handleGHRelease: true
+    releaseType: java-yoshi
+    branch: 1.106.1-patch
+  - bumpMinorPreMajor: true
+    handleGHRelease: true
+    releaseType: java-yoshi
+    branch: 1.111.3-patch
+  - bumpMinorPreMajor: true
+    handleGHRelease: true
+    releaseType: java-yoshi
+    branch: java7
+  - bumpMinorPreMajor: true
+    handleGHRelease: true
+    releaseType: java-yoshi
+    branch: 2.1.x
+  - bumpMinorPreMajor: true
+    handleGHRelease: true
     releaseType: java-backport
-  - branch: 2.22.x
+    branch: 2.6.x
+  - bumpMinorPreMajor: true
+    handleGHRelease: true
     releaseType: java-backport
-  - branch: 2.30.x
+    branch: 2.15.x
+  - bumpMinorPreMajor: true
+    handleGHRelease: true
     releaseType: java-backport
-  - branch: 2.38.x
+    extraFiles:
+      - README.md
+    branch: 2.22.x
+  - bumpMinorPreMajor: true
+    handleGHRelease: true
     releaseType: java-backport
-  - branch: 2.47.x
+    extraFiles:
+      - README.md
+    branch: 2.30.x
+  - bumpMinorPreMajor: true
+    handleGHRelease: true
     releaseType: java-backport
-  - branch: 2.49.x
+    extraFiles:
+      - README.md
+      - .readme-partials.yaml
+    branch: 2.38.x
+  - bumpMinorPreMajor: true
+    handleGHRelease: true
     releaseType: java-backport
-  - branch: protobuf-4.x-rc
-    manifest: true
+    extraFiles:
+      - README.md
+      - .readme-partials.yaml
+    branch: 2.47.x
   - bumpMinorPreMajor: true
     handleGHRelease: true
     releaseType: java-backport
     extraFiles:
       - README.md
       - .readme-partials.yaml
-    branch: 2.62.x
+    branch: 2.49.x

.github/scripts/update_generation_config.sh

@@ -18,17 +18,7 @@ function get_latest_released_version() {
     group_id_url_path="$(sed 's|\.|/|g' <<< "${group_id}")"
     url="https://repo1.maven.org/maven2/${group_id_url_path}/${artifact_id}/maven-metadata.xml"
     xml_content=$(curl -s --fail "${url}")
-    
-    # 1. Extract all version tags
-    # 2. Strip the XML tags to leave just the version numbers
-    # 3. Filter for strictly numbers.numbers.numbers (e.g., 2.54.0)
-    # 4. Sort by version (V) and take the last one (tail -n 1)
-    latest=$(echo "${xml_content}" \
-      | grep -oE '<version>[0-9]+\.[0-9]+\.[0-9]+</version>' \
-      | sed -E 's/<[^>]+>//g' \
-      | sort -V \
-      | tail -n 1)
-    
+    latest=$(xmllint --xpath 'metadata/versioning/latest/text()' - <<< "${xml_content}")
     if [[ -z "${latest}" ]]; then
         echo "The latest version of ${group_id}:${artifact_id} is empty."
         echo "The returned json from maven.org is invalid: ${json_content}"

.github/sync-repo-settings.yaml

@@ -197,27 +197,10 @@ branchProtectionRules:
       - 'Kokoro - Test: Java 17 GraalVM Native Image'
       - javadoc
       - unmanaged_dependency_check
-  - pattern: 2.62.x
-    isAdminEnforced: true
-    requiredApprovingReviewCount: 1
-    requiresCodeOwnerReviews: true
-    requiresStrictStatusChecks: false
-    requiredStatusCheckContexts:
-      - dependencies (17)
-      - lint
-      - clirr
-      - units (8)
-      - units (11)
-      - 'Kokoro - Test: Integration'
-      - cla/google
-      - 'Kokoro - Test: Java GraalVM Native Image'
-      - 'Kokoro - Test: Java 17 GraalVM Native Image'
-      - javadoc
-      - unmanaged_dependency_check
 permissionRules:
   - team: yoshi-admins
     permission: admin
   - team: yoshi-java-admins
     permission: admin
-  - team: cloud-sdk-java-team
+  - team: yoshi-java
     permission: push

.github/workflows/hermetic_library_generation.yaml

@@ -16,6 +16,12 @@
 name: Hermetic library generation upon generation config change through pull requests
 on:
   pull_request:
+    paths:
+      - 'generation_config.yaml'
+      - '.readme-partials.yaml'
+      - 'owlbot.py'
+      - 'versions.txt'
+      - '.github/.OwlBot-hermetic.yaml'
 
 env:
   REPO_FULL_NAME: ${{ github.event.pull_request.head.repo.full_name }}
@@ -32,55 +38,14 @@ jobs:
         else
           echo "SHOULD_RUN=true" >> $GITHUB_ENV
         fi
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v5
       if: env.SHOULD_RUN == 'true'
       with:
         fetch-depth: 0
-        token: ${{ secrets.CLOUD_JAVA_BOT_GITHUB_TOKEN }}
-    - name: is applicable
-      if: env.SHOULD_RUN == 'true' 
-      env:
-        # set our branch names to be the names in the "origin" remote since we aren't actually checking these branches out
-        base_ref: origin/${{ github.base_ref }}
-        head_ref: origin/${{ github.head_ref }}
-      run: |
-        #!/bin/bash -x
-        
-        # verify we have refs so error messages are clearer
-        git rev-parse --verify "$base_ref"
-        git rev-parse --verify "$head_ref"
-        
-        # list all paths that are changed between before and after
-        changed_paths=$(git diff --name-only "$base_ref" "$head_ref")
-        
-        # define our array of paths that are included
-        include_list=()
-        
-        # push our include regex values onto the array
-        include_list+=("^.github/workflows/hermetic_library_generation.yaml$")
-        include_list+=("^generation_config.yaml$")
-        include_list+=("^.readme-partials.yaml$")
-        include_list+=("^owlbot.py$")
-        include_list+=("^versions.txt$")
-        include_list+=("^.github/.OwlBot-hermetic.yaml$")
-        
-        # join all the paths into a single regex
-        pattern="$(IFS=$'|' ; echo "${include_list[*]}")"
-        
-        # check if we have any paths that match our include list
-        match=0
-        echo -e "${changed_paths}" | grep -E "${pattern}" 2>&1 || match=1
-        
-        if [[ $match == 0 ]]; then
-          echo "SHOULD_RUN=true" >> $GITHUB_ENV
-        else
-          echo "This PR does not match the include list"
-          echo "SHOULD_RUN=false" >> $GITHUB_ENV
-        fi
-
-    - uses: googleapis/sdk-platform-java/.github/scripts@v2.67.0
+        token: ${{ secrets.CLOUD_JAVA_BOT_TOKEN }}
+    - uses: googleapis/sdk-platform-java/.github/scripts@v2.64.0
       if: env.SHOULD_RUN == 'true'
       with:
         base_ref: ${{ github.base_ref }}
         head_ref: ${{ github.head_ref }}
-        token: ${{ secrets.CLOUD_JAVA_BOT_GITHUB_TOKEN }}
+        token: ${{ secrets.CLOUD_JAVA_BOT_TOKEN }}

.github/workflows/unmanaged_dependency_check.yaml

@@ -5,7 +5,7 @@ jobs:
   unmanaged_dependency_check:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v5
       - uses: actions/setup-java@v3
         with:
           distribution: temurin
@@ -17,6 +17,6 @@ jobs:
           # repository
           .kokoro/build.sh
       - name: Unmanaged dependency check
-        uses: googleapis/sdk-platform-java/java-shared-dependencies/unmanaged-dependency-check@google-cloud-shared-dependencies/v3.57.0
+        uses: googleapis/sdk-platform-java/java-shared-dependencies/unmanaged-dependency-check@google-cloud-shared-dependencies/v3.53.0
         with:
           bom-path: google-cloud-storage-bom/pom.xml

.github/workflows/update_generation_config.yaml

@@ -29,7 +29,7 @@ jobs:
     - uses: actions/checkout@v4
       with:
         fetch-depth: 0
-        token: ${{ secrets.CLOUD_JAVA_BOT_GITHUB_TOKEN }}
+        token: ${{ secrets.CLOUD_JAVA_BOT_TOKEN }}
     - name: Install Dependencies
       shell: bash
       run: sudo apt-get update && sudo apt-get install -y libxml2-utils
@@ -43,5 +43,5 @@ jobs:
           --base_branch "${base_branch}" \
           --repo ${{ github.repository }}
       env:
-        GH_TOKEN: ${{ secrets.CLOUD_JAVA_BOT_GITHUB_TOKEN }}
+        GH_TOKEN: ${{ secrets.CLOUD_JAVA_BOT_TOKEN }}
 

.kokoro/presubmit/graalvm-native-a.cfg

@@ -3,7 +3,7 @@
 # Configure the docker image for kokoro-trampoline.
 env_vars: {
   key: "TRAMPOLINE_IMAGE"
-  value: "gcr.io/cloud-devrel-public-resources/graalvm_sdk_platform_a:3.57.0" # {x-version-update:google-cloud-shared-dependencies:current}
+  value: "gcr.io/cloud-devrel-public-resources/graalvm_sdk_platform_a:3.53.0" # {x-version-update:google-cloud-shared-dependencies:current}
 }
 
 env_vars: {

.kokoro/presubmit/graalvm-native-b.cfg

@@ -3,7 +3,7 @@
 # Configure the docker image for kokoro-trampoline.
 env_vars: {
   key: "TRAMPOLINE_IMAGE"
-  value: "gcr.io/cloud-devrel-public-resources/graalvm_sdk_platform_b:3.57.0" # {x-version-update:google-cloud-shared-dependencies:current}
+  value: "gcr.io/cloud-devrel-public-resources/graalvm_sdk_platform_b:3.53.0" # {x-version-update:google-cloud-shared-dependencies:current}
 }
 
 env_vars: {

.kokoro/presubmit/graalvm-native-c.cfg

@@ -3,7 +3,7 @@
 # Configure the docker image for kokoro-trampoline.
 env_vars: {
   key: "TRAMPOLINE_IMAGE"
-  value: "gcr.io/cloud-devrel-public-resources/graalvm_sdk_platform_c:3.57.0" # {x-version-update:google-cloud-shared-dependencies:current}
+  value: "gcr.io/cloud-devrel-public-resources/graalvm_sdk_platform_c:3.53.0" # {x-version-update:google-cloud-shared-dependencies:current}
 }
 
 env_vars: {