diff --git a/clients/google-api-services-gkehub/v2/2.0.0/README.md b/clients/google-api-services-gkehub/v2/2.0.0/README.md
index 3b51daf1f78..983df0a2533 100644
--- a/clients/google-api-services-gkehub/v2/2.0.0/README.md
+++ b/clients/google-api-services-gkehub/v2/2.0.0/README.md
@@ -22,7 +22,7 @@ Add the following lines to your `pom.xml` file:
     <dependency>
       <groupId>com.google.apis</groupId>
       <artifactId>google-api-services-gkehub</artifactId>
-      <version>v2-rev20260719-2.0.0</version>
+      <version>v2-rev20261008-2.0.0</version>
     </dependency>
   </dependencies>
 </project>
@@ -35,7 +35,7 @@ repositories {
   mavenCentral()
 }
 dependencies {
-  implementation 'com.google.apis:google-api-services-gkehub:v2-rev20260719-2.0.0'
+  implementation 'com.google.apis:google-api-services-gkehub:v2-rev20261008-2.0.0'
 }
 ```
 
diff --git a/clients/google-api-services-gkehub/v2/2.0.0/com/google/api/services/gkehub/v2/model/ConfigManagementConfigSync.java b/clients/google-api-services-gkehub/v2/2.0.0/com/google/api/services/gkehub/v2/model/ConfigManagementConfigSync.java
index 54427c69e6b..a47188bc156 100644
--- a/clients/google-api-services-gkehub/v2/2.0.0/com/google/api/services/gkehub/v2/model/ConfigManagementConfigSync.java
+++ b/clients/google-api-services-gkehub/v2/2.0.0/com/google/api/services/gkehub/v2/model/ConfigManagementConfigSync.java
@@ -89,8 +89,8 @@ public final class ConfigManagementConfigSync extends com.google.api.client.json
   private java.lang.Boolean preventDrift;
 
   /**
-   * Optional. Specifies whether the Config Sync repo is in `hierarchical` or `unstructured` mode.
-   * Defaults to `hierarchical`. See https://docs.cloud.google.com/kubernetes-engine/config-
+   * Optional. Specifies whether the Config Sync repo is in `hierarchy` or `unstructured` mode.
+   * Defaults to `hierarchy`. See https://docs.cloud.google.com/kubernetes-engine/config-
    * sync/docs/concepts/configs#organize-configs for an explanation.
    * The value may be {@code null}.
    */
@@ -241,8 +241,8 @@ public ConfigManagementConfigSync setPreventDrift(java.lang.Boolean preventDrift
   }
 
   /**
-   * Optional. Specifies whether the Config Sync repo is in `hierarchical` or `unstructured` mode.
-   * Defaults to `hierarchical`. See https://docs.cloud.google.com/kubernetes-engine/config-
+   * Optional. Specifies whether the Config Sync repo is in `hierarchy` or `unstructured` mode.
+   * Defaults to `hierarchy`. See https://docs.cloud.google.com/kubernetes-engine/config-
    * sync/docs/concepts/configs#organize-configs for an explanation.
    * @return value or {@code null} for none
    */
@@ -251,8 +251,8 @@ public java.lang.String getSourceFormat() {
   }
 
   /**
-   * Optional. Specifies whether the Config Sync repo is in `hierarchical` or `unstructured` mode.
-   * Defaults to `hierarchical`. See https://docs.cloud.google.com/kubernetes-engine/config-
+   * Optional. Specifies whether the Config Sync repo is in `hierarchy` or `unstructured` mode.
+   * Defaults to `hierarchy`. See https://docs.cloud.google.com/kubernetes-engine/config-
    * sync/docs/concepts/configs#organize-configs for an explanation.
    * @param sourceFormat sourceFormat or {@code null} for none
    */
diff --git a/clients/google-api-services-gkehub/v2/2.0.0/com/google/api/services/gkehub/v2/model/ConfigManagementGitConfig.java b/clients/google-api-services-gkehub/v2/2.0.0/com/google/api/services/gkehub/v2/model/ConfigManagementGitConfig.java
index bacd8458889..3418eb29384 100644
--- a/clients/google-api-services-gkehub/v2/2.0.0/com/google/api/services/gkehub/v2/model/ConfigManagementGitConfig.java
+++ b/clients/google-api-services-gkehub/v2/2.0.0/com/google/api/services/gkehub/v2/model/ConfigManagementGitConfig.java
@@ -31,15 +31,19 @@ public final class ConfigManagementGitConfig extends com.google.api.client.json.
 
   /**
    * Optional. The Google Cloud Service Account Email used for auth when secret_type is
-   * `gcpserviceaccount`.
+   * `gcpserviceaccount`. Annotates the `RootSync` or `RepoSync` controller's Kubernetes Service
+   * Account.
    * The value may be {@code null}.
    */
   @com.google.api.client.util.Key
   private java.lang.String gcpServiceAccountEmail;
 
   /**
-   * Optional. URL for the HTTPS proxy to be used when communicating with the Git repo. Only specify
-   * when secret_type is `cookiefile`, `token`, or `none`.
+   * Optional. URL for the HTTPS proxy to be used when communicating with the Git repo. Defines an
+   * HTTPS_PROXY environment variable and only accepts `https` or unadorned URLs. For example,
+   * `https://proxy.internal.business.co:443` or `proxy.internal.business.co:443`. If using an
+   * unadorned URL, make sure the communication between your proxy server and Git host is secure.
+   * Rejects `http://` URLs. Only specify when secret_type is `cookiefile`, `token`, or `none`.
    * The value may be {@code null}.
    */
   @com.google.api.client.util.Key
@@ -77,7 +81,9 @@ public final class ConfigManagementGitConfig extends com.google.api.client.json.
   private java.lang.String syncRepo;
 
   /**
-   * Optional. Git revision (tag or hash) to check out. Default HEAD.
+   * Optional. Git revision (tag or hash) or branch to sync from. Default `HEAD`. If not `HEAD`,
+   * takes precedence over `sync_branch` field. When using a hash, must be a full hash, and not an
+   * abbreviated form.
    * The value may be {@code null}.
    */
   @com.google.api.client.util.Key
@@ -92,7 +98,8 @@ public final class ConfigManagementGitConfig extends com.google.api.client.json.
 
   /**
    * Optional. The Google Cloud Service Account Email used for auth when secret_type is
-   * `gcpserviceaccount`.
+   * `gcpserviceaccount`. Annotates the `RootSync` or `RepoSync` controller's Kubernetes Service
+   * Account.
    * @return value or {@code null} for none
    */
   public java.lang.String getGcpServiceAccountEmail() {
@@ -101,7 +108,8 @@ public java.lang.String getGcpServiceAccountEmail() {
 
   /**
    * Optional. The Google Cloud Service Account Email used for auth when secret_type is
-   * `gcpserviceaccount`.
+   * `gcpserviceaccount`. Annotates the `RootSync` or `RepoSync` controller's Kubernetes Service
+   * Account.
    * @param gcpServiceAccountEmail gcpServiceAccountEmail or {@code null} for none
    */
   public ConfigManagementGitConfig setGcpServiceAccountEmail(java.lang.String gcpServiceAccountEmail) {
@@ -110,8 +118,11 @@ public ConfigManagementGitConfig setGcpServiceAccountEmail(java.lang.String gcpS
   }
 
   /**
-   * Optional. URL for the HTTPS proxy to be used when communicating with the Git repo. Only specify
-   * when secret_type is `cookiefile`, `token`, or `none`.
+   * Optional. URL for the HTTPS proxy to be used when communicating with the Git repo. Defines an
+   * HTTPS_PROXY environment variable and only accepts `https` or unadorned URLs. For example,
+   * `https://proxy.internal.business.co:443` or `proxy.internal.business.co:443`. If using an
+   * unadorned URL, make sure the communication between your proxy server and Git host is secure.
+   * Rejects `http://` URLs. Only specify when secret_type is `cookiefile`, `token`, or `none`.
    * @return value or {@code null} for none
    */
   public java.lang.String getHttpsProxy() {
@@ -119,8 +130,11 @@ public java.lang.String getHttpsProxy() {
   }
 
   /**
-   * Optional. URL for the HTTPS proxy to be used when communicating with the Git repo. Only specify
-   * when secret_type is `cookiefile`, `token`, or `none`.
+   * Optional. URL for the HTTPS proxy to be used when communicating with the Git repo. Defines an
+   * HTTPS_PROXY environment variable and only accepts `https` or unadorned URLs. For example,
+   * `https://proxy.internal.business.co:443` or `proxy.internal.business.co:443`. If using an
+   * unadorned URL, make sure the communication between your proxy server and Git host is secure.
+   * Rejects `http://` URLs. Only specify when secret_type is `cookiefile`, `token`, or `none`.
    * @param httpsProxy httpsProxy or {@code null} for none
    */
   public ConfigManagementGitConfig setHttpsProxy(java.lang.String httpsProxy) {
@@ -203,7 +217,9 @@ public ConfigManagementGitConfig setSyncRepo(java.lang.String syncRepo) {
   }
 
   /**
-   * Optional. Git revision (tag or hash) to check out. Default HEAD.
+   * Optional. Git revision (tag or hash) or branch to sync from. Default `HEAD`. If not `HEAD`,
+   * takes precedence over `sync_branch` field. When using a hash, must be a full hash, and not an
+   * abbreviated form.
    * @return value or {@code null} for none
    */
   public java.lang.String getSyncRev() {
@@ -211,7 +227,9 @@ public java.lang.String getSyncRev() {
   }
 
   /**
-   * Optional. Git revision (tag or hash) to check out. Default HEAD.
+   * Optional. Git revision (tag or hash) or branch to sync from. Default `HEAD`. If not `HEAD`,
+   * takes precedence over `sync_branch` field. When using a hash, must be a full hash, and not an
+   * abbreviated form.
    * @param syncRev syncRev or {@code null} for none
    */
   public ConfigManagementGitConfig setSyncRev(java.lang.String syncRev) {
diff --git a/clients/google-api-services-gkehub/v2/2.0.0/com/google/api/services/gkehub/v2/model/ConfigManagementOciConfig.java b/clients/google-api-services-gkehub/v2/2.0.0/com/google/api/services/gkehub/v2/model/ConfigManagementOciConfig.java
index c925806ef0b..0e23529b0c9 100644
--- a/clients/google-api-services-gkehub/v2/2.0.0/com/google/api/services/gkehub/v2/model/ConfigManagementOciConfig.java
+++ b/clients/google-api-services-gkehub/v2/2.0.0/com/google/api/services/gkehub/v2/model/ConfigManagementOciConfig.java
@@ -31,7 +31,8 @@ public final class ConfigManagementOciConfig extends com.google.api.client.json.
 
   /**
    * Optional. The Google Cloud Service Account Email used for auth when secret_type is
-   * `gcpserviceaccount`.
+   * `gcpserviceaccount`. Annotates the `RootSync` or `RepoSync` controller's Kubernetes Service
+   * Account.
    * The value may be {@code null}.
    */
   @com.google.api.client.util.Key
@@ -70,7 +71,8 @@ public final class ConfigManagementOciConfig extends com.google.api.client.json.
 
   /**
    * Optional. The Google Cloud Service Account Email used for auth when secret_type is
-   * `gcpserviceaccount`.
+   * `gcpserviceaccount`. Annotates the `RootSync` or `RepoSync` controller's Kubernetes Service
+   * Account.
    * @return value or {@code null} for none
    */
   public java.lang.String getGcpServiceAccountEmail() {
@@ -79,7 +81,8 @@ public java.lang.String getGcpServiceAccountEmail() {
 
   /**
    * Optional. The Google Cloud Service Account Email used for auth when secret_type is
-   * `gcpserviceaccount`.
+   * `gcpserviceaccount`. Annotates the `RootSync` or `RepoSync` controller's Kubernetes Service
+   * Account.
    * @param gcpServiceAccountEmail gcpServiceAccountEmail or {@code null} for none
    */
   public ConfigManagementOciConfig setGcpServiceAccountEmail(java.lang.String gcpServiceAccountEmail) {
diff --git a/clients/google-api-services-gkehub/v2/2.0.0/pom.xml b/clients/google-api-services-gkehub/v2/2.0.0/pom.xml
index c756bc7ea5d..4bf17e38d59 100644
--- a/clients/google-api-services-gkehub/v2/2.0.0/pom.xml
+++ b/clients/google-api-services-gkehub/v2/2.0.0/pom.xml
@@ -8,8 +8,8 @@
 
   <groupId>com.google.apis</groupId>
   <artifactId>google-api-services-gkehub</artifactId>
-  <version>v2-rev20260719-2.0.0</version>
-  <name>GKE Hub API v2-rev20260719-2.0.0</name>
+  <version>v2-rev20261008-2.0.0</version>
+  <name>GKE Hub API v2-rev20261008-2.0.0</name>
   <packaging>jar</packaging>
 
   <inceptionYear>2011</inceptionYear>
diff --git a/clients/google-api-services-gkehub/v2/README.md b/clients/google-api-services-gkehub/v2/README.md
index 3b51daf1f78..983df0a2533 100644
--- a/clients/google-api-services-gkehub/v2/README.md
+++ b/clients/google-api-services-gkehub/v2/README.md
@@ -22,7 +22,7 @@ Add the following lines to your `pom.xml` file:
     <dependency>
       <groupId>com.google.apis</groupId>
       <artifactId>google-api-services-gkehub</artifactId>
-      <version>v2-rev20260719-2.0.0</version>
+      <version>v2-rev20261008-2.0.0</version>
     </dependency>
   </dependencies>
 </project>
@@ -35,7 +35,7 @@ repositories {
   mavenCentral()
 }
 dependencies {
-  implementation 'com.google.apis:google-api-services-gkehub:v2-rev20260719-2.0.0'
+  implementation 'com.google.apis:google-api-services-gkehub:v2-rev20261008-2.0.0'
 }
 ```
 
diff --git a/clients/google-api-services-gkehub/v2beta/2.0.0/README.md b/clients/google-api-services-gkehub/v2beta/2.0.0/README.md
index 45a1c114aeb..384e175bd16 100644
--- a/clients/google-api-services-gkehub/v2beta/2.0.0/README.md
+++ b/clients/google-api-services-gkehub/v2beta/2.0.0/README.md
@@ -22,7 +22,7 @@ Add the following lines to your `pom.xml` file:
     <dependency>
       <groupId>com.google.apis</groupId>
       <artifactId>google-api-services-gkehub</artifactId>
-      <version>v2beta-rev20260719-2.0.0</version>
+      <version>v2beta-rev20261008-2.0.0</version>
     </dependency>
   </dependencies>
 </project>
@@ -35,7 +35,7 @@ repositories {
   mavenCentral()
 }
 dependencies {
-  implementation 'com.google.apis:google-api-services-gkehub:v2beta-rev20260719-2.0.0'
+  implementation 'com.google.apis:google-api-services-gkehub:v2beta-rev20261008-2.0.0'
 }
 ```
 
diff --git a/clients/google-api-services-gkehub/v2beta/2.0.0/com/google/api/services/gkehub/v2beta/model/ConfigManagementConfigSync.java b/clients/google-api-services-gkehub/v2beta/2.0.0/com/google/api/services/gkehub/v2beta/model/ConfigManagementConfigSync.java
index 12af7106278..4189437a041 100644
--- a/clients/google-api-services-gkehub/v2beta/2.0.0/com/google/api/services/gkehub/v2beta/model/ConfigManagementConfigSync.java
+++ b/clients/google-api-services-gkehub/v2beta/2.0.0/com/google/api/services/gkehub/v2beta/model/ConfigManagementConfigSync.java
@@ -89,8 +89,8 @@ public final class ConfigManagementConfigSync extends com.google.api.client.json
   private java.lang.Boolean preventDrift;
 
   /**
-   * Optional. Specifies whether the Config Sync repo is in `hierarchical` or `unstructured` mode.
-   * Defaults to `hierarchical`. See https://docs.cloud.google.com/kubernetes-engine/config-
+   * Optional. Specifies whether the Config Sync repo is in `hierarchy` or `unstructured` mode.
+   * Defaults to `hierarchy`. See https://docs.cloud.google.com/kubernetes-engine/config-
    * sync/docs/concepts/configs#organize-configs for an explanation.
    * The value may be {@code null}.
    */
@@ -241,8 +241,8 @@ public ConfigManagementConfigSync setPreventDrift(java.lang.Boolean preventDrift
   }
 
   /**
-   * Optional. Specifies whether the Config Sync repo is in `hierarchical` or `unstructured` mode.
-   * Defaults to `hierarchical`. See https://docs.cloud.google.com/kubernetes-engine/config-
+   * Optional. Specifies whether the Config Sync repo is in `hierarchy` or `unstructured` mode.
+   * Defaults to `hierarchy`. See https://docs.cloud.google.com/kubernetes-engine/config-
    * sync/docs/concepts/configs#organize-configs for an explanation.
    * @return value or {@code null} for none
    */
@@ -251,8 +251,8 @@ public java.lang.String getSourceFormat() {
   }
 
   /**
-   * Optional. Specifies whether the Config Sync repo is in `hierarchical` or `unstructured` mode.
-   * Defaults to `hierarchical`. See https://docs.cloud.google.com/kubernetes-engine/config-
+   * Optional. Specifies whether the Config Sync repo is in `hierarchy` or `unstructured` mode.
+   * Defaults to `hierarchy`. See https://docs.cloud.google.com/kubernetes-engine/config-
    * sync/docs/concepts/configs#organize-configs for an explanation.
    * @param sourceFormat sourceFormat or {@code null} for none
    */
diff --git a/clients/google-api-services-gkehub/v2beta/2.0.0/com/google/api/services/gkehub/v2beta/model/ConfigManagementGitConfig.java b/clients/google-api-services-gkehub/v2beta/2.0.0/com/google/api/services/gkehub/v2beta/model/ConfigManagementGitConfig.java
index f383bc5df02..bd1ff2339bb 100644
--- a/clients/google-api-services-gkehub/v2beta/2.0.0/com/google/api/services/gkehub/v2beta/model/ConfigManagementGitConfig.java
+++ b/clients/google-api-services-gkehub/v2beta/2.0.0/com/google/api/services/gkehub/v2beta/model/ConfigManagementGitConfig.java
@@ -31,15 +31,19 @@ public final class ConfigManagementGitConfig extends com.google.api.client.json.
 
   /**
    * Optional. The Google Cloud Service Account Email used for auth when secret_type is
-   * `gcpserviceaccount`.
+   * `gcpserviceaccount`. Annotates the `RootSync` or `RepoSync` controller's Kubernetes Service
+   * Account.
    * The value may be {@code null}.
    */
   @com.google.api.client.util.Key
   private java.lang.String gcpServiceAccountEmail;
 
   /**
-   * Optional. URL for the HTTPS proxy to be used when communicating with the Git repo. Only specify
-   * when secret_type is `cookiefile`, `token`, or `none`.
+   * Optional. URL for the HTTPS proxy to be used when communicating with the Git repo. Defines an
+   * HTTPS_PROXY environment variable and only accepts `https` or unadorned URLs. For example,
+   * `https://proxy.internal.business.co:443` or `proxy.internal.business.co:443`. If using an
+   * unadorned URL, make sure the communication between your proxy server and Git host is secure.
+   * Rejects `http://` URLs. Only specify when secret_type is `cookiefile`, `token`, or `none`.
    * The value may be {@code null}.
    */
   @com.google.api.client.util.Key
@@ -77,7 +81,9 @@ public final class ConfigManagementGitConfig extends com.google.api.client.json.
   private java.lang.String syncRepo;
 
   /**
-   * Optional. Git revision (tag or hash) to check out. Default HEAD.
+   * Optional. Git revision (tag or hash) or branch to sync from. Default `HEAD`. If not `HEAD`,
+   * takes precedence over `sync_branch` field. When using a hash, must be a full hash, and not an
+   * abbreviated form.
    * The value may be {@code null}.
    */
   @com.google.api.client.util.Key
@@ -92,7 +98,8 @@ public final class ConfigManagementGitConfig extends com.google.api.client.json.
 
   /**
    * Optional. The Google Cloud Service Account Email used for auth when secret_type is
-   * `gcpserviceaccount`.
+   * `gcpserviceaccount`. Annotates the `RootSync` or `RepoSync` controller's Kubernetes Service
+   * Account.
    * @return value or {@code null} for none
    */
   public java.lang.String getGcpServiceAccountEmail() {
@@ -101,7 +108,8 @@ public java.lang.String getGcpServiceAccountEmail() {
 
   /**
    * Optional. The Google Cloud Service Account Email used for auth when secret_type is
-   * `gcpserviceaccount`.
+   * `gcpserviceaccount`. Annotates the `RootSync` or `RepoSync` controller's Kubernetes Service
+   * Account.
    * @param gcpServiceAccountEmail gcpServiceAccountEmail or {@code null} for none
    */
   public ConfigManagementGitConfig setGcpServiceAccountEmail(java.lang.String gcpServiceAccountEmail) {
@@ -110,8 +118,11 @@ public ConfigManagementGitConfig setGcpServiceAccountEmail(java.lang.String gcpS
   }
 
   /**
-   * Optional. URL for the HTTPS proxy to be used when communicating with the Git repo. Only specify
-   * when secret_type is `cookiefile`, `token`, or `none`.
+   * Optional. URL for the HTTPS proxy to be used when communicating with the Git repo. Defines an
+   * HTTPS_PROXY environment variable and only accepts `https` or unadorned URLs. For example,
+   * `https://proxy.internal.business.co:443` or `proxy.internal.business.co:443`. If using an
+   * unadorned URL, make sure the communication between your proxy server and Git host is secure.
+   * Rejects `http://` URLs. Only specify when secret_type is `cookiefile`, `token`, or `none`.
    * @return value or {@code null} for none
    */
   public java.lang.String getHttpsProxy() {
@@ -119,8 +130,11 @@ public java.lang.String getHttpsProxy() {
   }
 
   /**
-   * Optional. URL for the HTTPS proxy to be used when communicating with the Git repo. Only specify
-   * when secret_type is `cookiefile`, `token`, or `none`.
+   * Optional. URL for the HTTPS proxy to be used when communicating with the Git repo. Defines an
+   * HTTPS_PROXY environment variable and only accepts `https` or unadorned URLs. For example,
+   * `https://proxy.internal.business.co:443` or `proxy.internal.business.co:443`. If using an
+   * unadorned URL, make sure the communication between your proxy server and Git host is secure.
+   * Rejects `http://` URLs. Only specify when secret_type is `cookiefile`, `token`, or `none`.
    * @param httpsProxy httpsProxy or {@code null} for none
    */
   public ConfigManagementGitConfig setHttpsProxy(java.lang.String httpsProxy) {
@@ -203,7 +217,9 @@ public ConfigManagementGitConfig setSyncRepo(java.lang.String syncRepo) {
   }
 
   /**
-   * Optional. Git revision (tag or hash) to check out. Default HEAD.
+   * Optional. Git revision (tag or hash) or branch to sync from. Default `HEAD`. If not `HEAD`,
+   * takes precedence over `sync_branch` field. When using a hash, must be a full hash, and not an
+   * abbreviated form.
    * @return value or {@code null} for none
    */
   public java.lang.String getSyncRev() {
@@ -211,7 +227,9 @@ public java.lang.String getSyncRev() {
   }
 
   /**
-   * Optional. Git revision (tag or hash) to check out. Default HEAD.
+   * Optional. Git revision (tag or hash) or branch to sync from. Default `HEAD`. If not `HEAD`,
+   * takes precedence over `sync_branch` field. When using a hash, must be a full hash, and not an
+   * abbreviated form.
    * @param syncRev syncRev or {@code null} for none
    */
   public ConfigManagementGitConfig setSyncRev(java.lang.String syncRev) {
diff --git a/clients/google-api-services-gkehub/v2beta/2.0.0/com/google/api/services/gkehub/v2beta/model/ConfigManagementOciConfig.java b/clients/google-api-services-gkehub/v2beta/2.0.0/com/google/api/services/gkehub/v2beta/model/ConfigManagementOciConfig.java
index 0c32f30e033..0800081ea48 100644
--- a/clients/google-api-services-gkehub/v2beta/2.0.0/com/google/api/services/gkehub/v2beta/model/ConfigManagementOciConfig.java
+++ b/clients/google-api-services-gkehub/v2beta/2.0.0/com/google/api/services/gkehub/v2beta/model/ConfigManagementOciConfig.java
@@ -31,7 +31,8 @@ public final class ConfigManagementOciConfig extends com.google.api.client.json.
 
   /**
    * Optional. The Google Cloud Service Account Email used for auth when secret_type is
-   * `gcpserviceaccount`.
+   * `gcpserviceaccount`. Annotates the `RootSync` or `RepoSync` controller's Kubernetes Service
+   * Account.
    * The value may be {@code null}.
    */
   @com.google.api.client.util.Key
@@ -70,7 +71,8 @@ public final class ConfigManagementOciConfig extends com.google.api.client.json.
 
   /**
    * Optional. The Google Cloud Service Account Email used for auth when secret_type is
-   * `gcpserviceaccount`.
+   * `gcpserviceaccount`. Annotates the `RootSync` or `RepoSync` controller's Kubernetes Service
+   * Account.
    * @return value or {@code null} for none
    */
   public java.lang.String getGcpServiceAccountEmail() {
@@ -79,7 +81,8 @@ public java.lang.String getGcpServiceAccountEmail() {
 
   /**
    * Optional. The Google Cloud Service Account Email used for auth when secret_type is
-   * `gcpserviceaccount`.
+   * `gcpserviceaccount`. Annotates the `RootSync` or `RepoSync` controller's Kubernetes Service
+   * Account.
    * @param gcpServiceAccountEmail gcpServiceAccountEmail or {@code null} for none
    */
   public ConfigManagementOciConfig setGcpServiceAccountEmail(java.lang.String gcpServiceAccountEmail) {
diff --git a/clients/google-api-services-gkehub/v2beta/2.0.0/pom.xml b/clients/google-api-services-gkehub/v2beta/2.0.0/pom.xml
index 1ff5b99b361..6be5d4de8e0 100644
--- a/clients/google-api-services-gkehub/v2beta/2.0.0/pom.xml
+++ b/clients/google-api-services-gkehub/v2beta/2.0.0/pom.xml
@@ -8,8 +8,8 @@
 
   <groupId>com.google.apis</groupId>
   <artifactId>google-api-services-gkehub</artifactId>
-  <version>v2beta-rev20260719-2.0.0</version>
-  <name>GKE Hub API v2beta-rev20260719-2.0.0</name>
+  <version>v2beta-rev20261008-2.0.0</version>
+  <name>GKE Hub API v2beta-rev20261008-2.0.0</name>
   <packaging>jar</packaging>
 
   <inceptionYear>2011</inceptionYear>
diff --git a/clients/google-api-services-gkehub/v2beta/README.md b/clients/google-api-services-gkehub/v2beta/README.md
index 45a1c114aeb..384e175bd16 100644
--- a/clients/google-api-services-gkehub/v2beta/README.md
+++ b/clients/google-api-services-gkehub/v2beta/README.md
@@ -22,7 +22,7 @@ Add the following lines to your `pom.xml` file:
     <dependency>
       <groupId>com.google.apis</groupId>
       <artifactId>google-api-services-gkehub</artifactId>
-      <version>v2beta-rev20260719-2.0.0</version>
+      <version>v2beta-rev20261008-2.0.0</version>
     </dependency>
   </dependencies>
 </project>
@@ -35,7 +35,7 @@ repositories {
   mavenCentral()
 }
 dependencies {
-  implementation 'com.google.apis:google-api-services-gkehub:v2beta-rev20260719-2.0.0'
+  implementation 'com.google.apis:google-api-services-gkehub:v2beta-rev20261008-2.0.0'
 }
 ```