Merge remote-tracking branch 'origin/agentic-identities-bound-token' into HEAD

Author: macastelaz

.cloud/helpers/common.sh

@@ -27,9 +27,14 @@ function listAllModules() {
   popd >/dev/null
 }
 
-# Replaces '-' with '_' to get a Terraform output-friendly label
+# Replaces '-' with '_' to get a Terraform output-friendly label.
+# Uses Bash parameter expansion '${parameter//pattern/replacement}':
+# - '$1': The input module name string.
+# - '//': Global pattern replacement operator (matches all occurrences).
+# - '-': Search pattern to match (hyphen).
+# - '_': Replacement character (underscore).
 function getFriendlyOutputName() {
-  echo "$1" | tr '-' _
+  echo "${1//-/_}"
 }
 
 # Get the output object in JSON format for the given module.
@@ -48,9 +53,13 @@ function getModuleOutput() {
   getOutput "$1" | parseJson "$2"
 }
 
+# Checks if whitespace-delimited or newline-delimited list $1 contains entry $2.
 # @returns exit code 0 if list $1 contains entry $2.
 function contains() {
-  echo "$1" | grep -w -q "$2"
+  # Normalize newlines and carriage returns into spaces with boundary padding:
+  local list=" ${1//[$'\r\n']/ } "
+  # Use native glob pattern matching '*" $2 "*' with boundary spaces to ensure exact token match:
+  [[ -n "$2" && "${list}" == *" $2 "* ]]
 }
 
 # @returns a "new line"-delimited list of active terraform modules

.github/CODEOWNERS

@@ -3,22 +3,22 @@
 # For syntax help see:
 # https://help.github.com/en/github/creating-cloning-and-archiving-repositories/about-code-owners#codeowners-syntax
 
-*   @googleapis/cloud-sdk-java-team @googleapis/cloud-sdk-librarian-team
+*   @googleapis/cloud-sdk-java-team
 
 # java-vertexai has maintainers
-/java-vertexai/   @googleapis/vertexai-team @googleapis/cloud-sdk-java-team @googleapis/cloud-sdk-librarian-team
-/java-bigquerystorage/ @googleapis/bigquery-team @googleapis/cloud-sdk-java-team @googleapis/cloud-sdk-librarian-team
-/java-bigquery/ @googleapis/bigquery-team @googleapis/cloud-sdk-java-team @googleapis/cloud-sdk-librarian-team
-/java-bigquery-jdbc/ @googleapis/bigquery-developer-tools-team @googleapis/bigquery-team @googleapis/cloud-sdk-java-team @googleapis/cloud-sdk-librarian-team
-/grpc-gcp-java/ @googleapis/spanner-team @googleapis/cloud-sdk-java-team @googleapis/cloud-sdk-librarian-team
-/java-spanner/ @googleapis/spanner-team @googleapis/cloud-sdk-java-team @googleapis/cloud-sdk-librarian-team
-/java-spanner-jdbc/ @googleapis/spanner-team @googleapis/cloud-sdk-java-team @googleapis/cloud-sdk-librarian-team
-/google-auth-library-java/ @googleapis/cloud-sdk-auth-team @googleapis/cloud-sdk-java-team @googleapis/aion-team @googleapis/cloud-sdk-librarian-team
-/java-storage/ @googleapis/gcs-team @googleapis/cloud-sdk-java-team @googleapis/cloud-sdk-librarian-team
-/java-storage-nio/ @googleapis/gcs-team @googleapis/cloud-sdk-java-team @googleapis/cloud-sdk-librarian-team
-/java-pubsub/ @googleapis/pubsub-team @googleapis/cloud-sdk-java-team @googleapis/cloud-sdk-librarian-team
-/java-bigtable/ @googleapis/bigtable-team @googleapis/cloud-sdk-java-team @googleapis/cloud-sdk-librarian-team
-/java-firestore/ @googleapis/firestore-team @googleapis/cloud-sdk-java-team @googleapis/cloud-sdk-librarian-team
+/java-vertexai/   @googleapis/vertexai-team @googleapis/cloud-sdk-java-team
+/java-bigquerystorage/ @googleapis/bigquery-team @googleapis/cloud-sdk-java-team
+/java-bigquery/ @googleapis/bigquery-team @googleapis/cloud-sdk-java-team
+/java-bigquery-jdbc/ @googleapis/bigquery-developer-tools-team @googleapis/bigquery-team @googleapis/cloud-sdk-java-team
+/grpc-gcp-java/ @googleapis/spanner-team @googleapis/cloud-sdk-java-team
+/java-spanner/ @googleapis/spanner-team @googleapis/cloud-sdk-java-team
+/java-spanner-jdbc/ @googleapis/spanner-team @googleapis/cloud-sdk-java-team
+/google-auth-library-java/ @googleapis/cloud-sdk-auth-team @googleapis/cloud-sdk-java-team @googleapis/aion-team
+/java-storage/ @googleapis/gcs-team @googleapis/cloud-sdk-java-team
+/java-storage-nio/ @googleapis/gcs-team @googleapis/cloud-sdk-java-team
+/java-pubsub/ @googleapis/pubsub-team @googleapis/cloud-sdk-java-team
+/java-bigtable/ @googleapis/bigtable-team @googleapis/cloud-sdk-java-team
+/java-firestore/ @googleapis/firestore-team @googleapis/cloud-sdk-java-team
 /librarian.yaml @googleapis/cloud-sdk-java-team @googleapis/cloud-sdk-librarian-team
 /java-cloud-bom/ @googleapis/cloud-sdk-java-team
-/java-shared-config/ @googleapis/cloud-sdk-java-team @googleapis/cloud-sdk-librarian-team
+/java-shared-config/ @googleapis/cloud-sdk-java-team

.github/requirements.txt

@@ -108,7 +108,7 @@ requests==2.33.0 \
     --hash=sha256:3324635456fa185245e24865e810cecec7b4caf933d7eb133dcde67d48cee69b \
     --hash=sha256:c7ebc5e8b0f21837386ad0e1c8fe8b829fa5f544d8df3b2253bff14ef29d7652
     # via -r requirements.in
-urllib3==2.6.3 \
-    --hash=sha256:1b62b6884944a57dbe321509ab94fd4d3b307075e0c2eae991ac71ee15ad38ed \
-    --hash=sha256:bf272323e553dfb2e87d9bfd225ca7b0f467b919d7bbd355436d3fd37cb0acd4
+urllib3==2.8.0 \
+    --hash=sha256:0cf3cae568d36aa9576b28dfb35f11328f1cb974ca7647d9475ebb86c75ac6e3 \
+    --hash=sha256:63bf2ead4c879426ebf22ef2a781eeb4aa3b4ae798a0435506f8687fd5bb9b63
     # via requests