feat: Add KeyProjectResolutionMode to AutokeyConfig to support project-level configurations

google-cloud-kms-inventory-v1/proto_docs/google/cloud/kms/v1/resources.rb

@@ -570,13 +570,40 @@ module CryptoKeyVersionAlgorithm
             # datatracker.ietf.org/doc/draft-connolly-cfrg-xwing-kem/.
             KEM_XWING = 63
 
+            # The post-quantum Module-Lattice-Based Digital Signature Algorithm, at
+            # security level 1. Randomized version.
+            PQ_SIGN_ML_DSA_44 = 68
+
             # The post-quantum Module-Lattice-Based Digital Signature Algorithm, at
             # security level 3. Randomized version.
             PQ_SIGN_ML_DSA_65 = 56
 
+            # The post-quantum Module-Lattice-Based Digital Signature Algorithm, at
+            # security level 5. Randomized version.
+            PQ_SIGN_ML_DSA_87 = 69
+
             # The post-quantum stateless hash-based digital signature algorithm, at
             # security level 1. Randomized version.
             PQ_SIGN_SLH_DSA_SHA2_128S = 57
+
+            # The post-quantum stateless hash-based digital signature algorithm, at
+            # security level 1. Randomized pre-hash version supporting SHA256 digests.
+            PQ_SIGN_HASH_SLH_DSA_SHA2_128S_SHA256 = 60
+
+            # The post-quantum Module-Lattice-Based Digital Signature Algorithm, at
+            # security level 1. Randomized version supporting externally-computed
+            # message representatives.
+            PQ_SIGN_ML_DSA_44_EXTERNAL_MU = 70
+
+            # The post-quantum Module-Lattice-Based Digital Signature Algorithm, at
+            # security level 3. Randomized version supporting externally-computed
+            # message representatives.
+            PQ_SIGN_ML_DSA_65_EXTERNAL_MU = 67
+
+            # The post-quantum Module-Lattice-Based Digital Signature Algorithm, at
+            # security level 5. Randomized version supporting externally-computed
+            # message representatives.
+            PQ_SIGN_ML_DSA_87_EXTERNAL_MU = 71
           end
 
           # The state of a {::Google::Cloud::Kms::V1::CryptoKeyVersion CryptoKeyVersion},
@@ -879,8 +906,7 @@ module PublicKeyFormat
         #     operations are performed. Currently, this field is only populated for keys
         #     stored in HSM_SINGLE_TENANT. Note, this list is non-exhaustive and may
         #     apply to additional {::Google::Cloud::Kms::V1::ProtectionLevel ProtectionLevels}
-        #     in the future.
-        #     Supported resources:
+        #     in the future. Supported resources:
         #     * `"projects/*/locations/*/singleTenantHsmInstances/*"`
         class ImportJob
           include ::Google::Protobuf::MessageExts
@@ -1015,6 +1041,32 @@ class KeyAccessJustificationsPolicy
           extend ::Google::Protobuf::MessageExts::ClassMethods
         end
 
+        # A RetiredResource resource represents the record of a deleted
+        # {::Google::Cloud::Kms::V1::CryptoKey CryptoKey}. Its purpose is to provide
+        # visibility into retained user data and to prevent reuse of these names for
+        # new {::Google::Cloud::Kms::V1::CryptoKey CryptoKeys}.
+        # @!attribute [r] name
+        #   @return [::String]
+        #     Output only. Identifier. The resource name for this
+        #     {::Google::Cloud::Kms::V1::RetiredResource RetiredResource} in the format
+        #     `projects/*/locations/*/retiredResources/*`.
+        # @!attribute [r] original_resource
+        #   @return [::String]
+        #     Output only. The full resource name of the original
+        #     {::Google::Cloud::Kms::V1::CryptoKey CryptoKey} that was deleted in the format
+        #     `projects/*/locations/*/keyRings/*/cryptoKeys/*`.
+        # @!attribute [r] resource_type
+        #   @return [::String]
+        #     Output only. The resource type of the original deleted resource.
+        # @!attribute [r] delete_time
+        #   @return [::Google::Protobuf::Timestamp]
+        #     Output only. The time at which the original resource was deleted and this
+        #     RetiredResource record was created.
+        class RetiredResource
+          include ::Google::Protobuf::MessageExts
+          extend ::Google::Protobuf::MessageExts::ClassMethods
+        end
+
         # {::Google::Cloud::Kms::V1::ProtectionLevel ProtectionLevel} specifies how
         # cryptographic operations are performed. For more information, see [Protection
         # levels] (https://cloud.google.com/kms/docs/algorithms#protection_levels).