fix(networksecurity): update the API

#### networksecurity:v1beta1

The following keys were changed:
- schemas.AuthzPolicyAuthzRuleFromRequestSource.properties.ipBlocks.description
- schemas.AuthzPolicyAuthzRuleFromRequestSource.properties.principals.description
- schemas.AuthzPolicyAuthzRuleFromRequestSource.properties.resources.description
- schemas.AuthzPolicyAuthzRulePrincipal.properties.principalSelector.enumDescriptions
- schemas.AuthzPolicyAuthzRuleRequestResourceTagValueIdSet.properties.ids.description
- schemas.AuthzPolicyAuthzRuleToRequestOperation.properties.hosts.description
- schemas.AuthzPolicyAuthzRuleToRequestOperation.properties.methods.description
- schemas.AuthzPolicyAuthzRuleToRequestOperation.properties.paths.description
- schemas.AuthzPolicyAuthzRuleToRequestOperationHeaderSet.properties.headers.description
- schemas.DnsThreatDetector.description
- schemas.ListDnsThreatDetectorsResponse.description

#### networksecurity:v1

The following keys were changed:
- schemas.AuthzPolicyAuthzRuleFromRequestSource.properties.ipBlocks.description
- schemas.AuthzPolicyAuthzRuleFromRequestSource.properties.principals.description
- schemas.AuthzPolicyAuthzRuleFromRequestSource.properties.resources.description
- schemas.AuthzPolicyAuthzRulePrincipal.properties.principalSelector.enumDescriptions
- schemas.AuthzPolicyAuthzRuleRequestResourceTagValueIdSet.properties.ids.description
- schemas.AuthzPolicyAuthzRuleToRequestOperation.properties.hosts.description
- schemas.AuthzPolicyAuthzRuleToRequestOperation.properties.methods.description
- schemas.AuthzPolicyAuthzRuleToRequestOperation.properties.paths.description
- schemas.AuthzPolicyAuthzRuleToRequestOperationHeaderSet.properties.headers.description

Author: yoshi-automation

discovery/networksecurity-v1.json

@@ -5070,7 +5070,7 @@
       }
     }
   },
-  "revision": "20250714",
+  "revision": "20250804",
   "rootUrl": "https://networksecurity.googleapis.com/",
   "schemas": {
     "AddAddressGroupItemsRequest": {
@@ -5387,21 +5387,21 @@
       "id": "AuthzPolicyAuthzRuleFromRequestSource",
       "properties": {
         "ipBlocks": {
-          "description": "Optional. A list of IP addresses or IP address ranges to match against the source IP address of the request. Limited to 5 ip_blocks.",
+          "description": "Optional. A list of IP addresses or IP address ranges to match against the source IP address of the request. Limited to 10 ip_blocks per Authorization Policy",
           "items": {
             "$ref": "AuthzPolicyAuthzRuleIpBlock"
           },
           "type": "array"
         },
         "principals": {
-          "description": "Optional. A list of identities derived from the client's certificate. This field will not match on a request unless frontend mutual TLS is enabled for the forwarding rule or Gateway and the client certificate has been successfully validated by mTLS. Each identity is a string whose value is matched against a list of URI SANs, DNS Name SANs, or the common name in the client's certificate. A match happens when any principal matches with the rule. Limited to 5 principals.",
+          "description": "Optional. A list of identities derived from the client's certificate. This field will not match on a request unless frontend mutual TLS is enabled for the forwarding rule or Gateway and the client certificate has been successfully validated by mTLS. Each identity is a string whose value is matched against a list of URI SANs, DNS Name SANs, or the common name in the client's certificate. A match happens when any principal matches with the rule. Limited to 50 principals per Authorization Policy for Regional Internal Application Load Balancer, Regional External Application Load Balancer, Cross-region Internal Application Load Balancer, and Cloud Service Mesh. Limited to 25 principals per Authorization Policy for Global External Application Load Balancer.",
           "items": {
             "$ref": "AuthzPolicyAuthzRulePrincipal"
           },
           "type": "array"
         },
         "resources": {
-          "description": "Optional. A list of resources to match against the resource of the source VM of a request. Limited to 5 resources.",
+          "description": "Optional. A list of resources to match against the resource of the source VM of a request. Limited to 10 resources per Authorization Policy.",
           "items": {
             "$ref": "AuthzPolicyAuthzRuleRequestResource"
           },
@@ -5459,9 +5459,9 @@
           ],
           "enumDescriptions": [
             "Unspecified principal selector. It will be treated as CLIENT_CERT_URI_SAN by default.",
-            "The principal rule is matched against a list of URI SANs in the validated client’s certificate. A match happens when there is any exact URI SAN value match. This is the default principal selector.",
-            "The principal rule is matched against a list of DNS Name SANs in the validated client’s certificate. A match happens when there is any exact DNS Name SAN value match.",
-            "The principal rule is matched against the common name in the client’s certificate. Authorization against multiple common names in the client certificate is not supported. Requests with multiple common names in the client certificate will be rejected if CLIENT_CERT_COMMON_NAME is set as the principal selector. A match happens when there is an exact common name value match. This is only applicable for Application Load Balancers except for classic Global External Application load balancer. CLIENT_CERT_COMMON_NAME is not supported for INTERNAL_SELF_MANAGED load balancing scheme."
+            "The principal rule is matched against a list of URI SANs in the validated client's certificate. A match happens when there is any exact URI SAN value match. This is the default principal selector.",
+            "The principal rule is matched against a list of DNS Name SANs in the validated client's certificate. A match happens when there is any exact DNS Name SAN value match.",
+            "The principal rule is matched against the common name in the client's certificate. Authorization against multiple common names in the client certificate is not supported. Requests with multiple common names in the client certificate will be rejected if CLIENT_CERT_COMMON_NAME is set as the principal selector. A match happens when there is an exact common name value match. This is only applicable for Application Load Balancers except for classic Global External Application load balancer. CLIENT_CERT_COMMON_NAME is not supported for INTERNAL_SELF_MANAGED load balancing scheme."
           ],
           "type": "string"
         }
@@ -5488,7 +5488,7 @@
       "id": "AuthzPolicyAuthzRuleRequestResourceTagValueIdSet",
       "properties": {
         "ids": {
-          "description": "Required. A list of resource tag value permanent IDs to match against the resource manager tags value associated with the source VM of a request. The match follows AND semantics which means all the ids must match. Limited to 5 matches.",
+          "description": "Required. A list of resource tag value permanent IDs to match against the resource manager tags value associated with the source VM of a request. The match follows AND semantics which means all the ids must match. Limited to 5 ids in the Tag value id set.",
           "items": {
             "format": "int64",
             "type": "string"
@@ -5555,21 +5555,21 @@
           "description": "Optional. A list of headers to match against in http header."
         },
         "hosts": {
-          "description": "Optional. A list of HTTP Hosts to match against. The match can be one of exact, prefix, suffix, or contains (substring match). Matches are always case sensitive unless the ignoreCase is set. Limited to 5 matches.",
+          "description": "Optional. A list of HTTP Hosts to match against. The match can be one of exact, prefix, suffix, or contains (substring match). Matches are always case sensitive unless the ignoreCase is set. Limited to 10 hosts per Authorization Policy.",
           "items": {
             "$ref": "AuthzPolicyAuthzRuleStringMatch"
           },
           "type": "array"
         },
         "methods": {
-          "description": "Optional. A list of HTTP methods to match against. Each entry must be a valid HTTP method name (GET, PUT, POST, HEAD, PATCH, DELETE, OPTIONS). It only allows exact match and is always case sensitive.",
+          "description": "Optional. A list of HTTP methods to match against. Each entry must be a valid HTTP method name (GET, PUT, POST, HEAD, PATCH, DELETE, OPTIONS). It only allows exact match and is always case sensitive. Limited to 10 methods per Authorization Policy.",
           "items": {
             "type": "string"
           },
           "type": "array"
         },
         "paths": {
-          "description": "Optional. A list of paths to match against. The match can be one of exact, prefix, suffix, or contains (substring match). Matches are always case sensitive unless the ignoreCase is set. Limited to 5 matches. Note that this path match includes the query parameters. For gRPC services, this should be a fully-qualified name of the form /package.service/method.",
+          "description": "Optional. A list of paths to match against. The match can be one of exact, prefix, suffix, or contains (substring match). Matches are always case sensitive unless the ignoreCase is set. Limited to 10 paths per Authorization Policy. Note that this path match includes the query parameters. For gRPC services, this should be a fully-qualified name of the form /package.service/method.",
           "items": {
             "$ref": "AuthzPolicyAuthzRuleStringMatch"
           },
@@ -5583,7 +5583,7 @@
       "id": "AuthzPolicyAuthzRuleToRequestOperationHeaderSet",
       "properties": {
         "headers": {
-          "description": "Required. A list of headers to match against in http header. The match can be one of exact, prefix, suffix, or contains (substring match). The match follows AND semantics which means all the headers must match. Matches are always case sensitive unless the ignoreCase is set. Limited to 5 matches.",
+          "description": "Required. A list of headers to match against in http header. The match can be one of exact, prefix, suffix, or contains (substring match). The match follows AND semantics which means all the headers must match. Matches are always case sensitive unless the ignoreCase is set. Limited to 10 headers per Authorization Policy.",
           "items": {
             "$ref": "AuthzPolicyAuthzRuleHeaderMatch"
           },

discovery/networksecurity-v1beta1.json

@@ -5513,7 +5513,7 @@
       }
     }
   },
-  "revision": "20250721",
+  "revision": "20250804",
   "rootUrl": "https://networksecurity.googleapis.com/",
   "schemas": {
     "AddAddressGroupItemsRequest": {
@@ -5830,21 +5830,21 @@
       "id": "AuthzPolicyAuthzRuleFromRequestSource",
       "properties": {
         "ipBlocks": {
-          "description": "Optional. A list of IP addresses or IP address ranges to match against the source IP address of the request. Limited to 5 ip_blocks.",
+          "description": "Optional. A list of IP addresses or IP address ranges to match against the source IP address of the request. Limited to 10 ip_blocks per Authorization Policy",
           "items": {
             "$ref": "AuthzPolicyAuthzRuleIpBlock"
           },
           "type": "array"
         },
         "principals": {
-          "description": "Optional. A list of identities derived from the client's certificate. This field will not match on a request unless frontend mutual TLS is enabled for the forwarding rule or Gateway and the client certificate has been successfully validated by mTLS. Each identity is a string whose value is matched against a list of URI SANs, DNS Name SANs, or the common name in the client's certificate. A match happens when any principal matches with the rule. Limited to 5 principals.",
+          "description": "Optional. A list of identities derived from the client's certificate. This field will not match on a request unless frontend mutual TLS is enabled for the forwarding rule or Gateway and the client certificate has been successfully validated by mTLS. Each identity is a string whose value is matched against a list of URI SANs, DNS Name SANs, or the common name in the client's certificate. A match happens when any principal matches with the rule. Limited to 50 principals per Authorization Policy for Regional Internal Application Load Balancer, Regional External Application Load Balancer, Cross-region Internal Application Load Balancer, and Cloud Service Mesh. Limited to 25 principals per Authorization Policy for Global External Application Load Balancer.",
           "items": {
             "$ref": "AuthzPolicyAuthzRulePrincipal"
           },
           "type": "array"
         },
         "resources": {
-          "description": "Optional. A list of resources to match against the resource of the source VM of a request. Limited to 5 resources.",
+          "description": "Optional. A list of resources to match against the resource of the source VM of a request. Limited to 10 resources per Authorization Policy.",
           "items": {
             "$ref": "AuthzPolicyAuthzRuleRequestResource"
           },
@@ -5902,9 +5902,9 @@
           ],
           "enumDescriptions": [
             "Unspecified principal selector. It will be treated as CLIENT_CERT_URI_SAN by default.",
-            "The principal rule is matched against a list of URI SANs in the validated client’s certificate. A match happens when there is any exact URI SAN value match. This is the default principal selector.",
-            "The principal rule is matched against a list of DNS Name SANs in the validated client’s certificate. A match happens when there is any exact DNS Name SAN value match.",
-            "The principal rule is matched against the common name in the client’s certificate. Authorization against multiple common names in the client certificate is not supported. Requests with multiple common names in the client certificate will be rejected if CLIENT_CERT_COMMON_NAME is set as the principal selector. A match happens when there is an exact common name value match. This is only applicable for Application Load Balancers except for classic Global External Application load balancer. CLIENT_CERT_COMMON_NAME is not supported for INTERNAL_SELF_MANAGED load balancing scheme."
+            "The principal rule is matched against a list of URI SANs in the validated client's certificate. A match happens when there is any exact URI SAN value match. This is the default principal selector.",
+            "The principal rule is matched against a list of DNS Name SANs in the validated client's certificate. A match happens when there is any exact DNS Name SAN value match.",
+            "The principal rule is matched against the common name in the client's certificate. Authorization against multiple common names in the client certificate is not supported. Requests with multiple common names in the client certificate will be rejected if CLIENT_CERT_COMMON_NAME is set as the principal selector. A match happens when there is an exact common name value match. This is only applicable for Application Load Balancers except for classic Global External Application load balancer. CLIENT_CERT_COMMON_NAME is not supported for INTERNAL_SELF_MANAGED load balancing scheme."
           ],
           "type": "string"
         }
@@ -5931,7 +5931,7 @@
       "id": "AuthzPolicyAuthzRuleRequestResourceTagValueIdSet",
       "properties": {
         "ids": {
-          "description": "Required. A list of resource tag value permanent IDs to match against the resource manager tags value associated with the source VM of a request. The match follows AND semantics which means all the ids must match. Limited to 5 matches.",
+          "description": "Required. A list of resource tag value permanent IDs to match against the resource manager tags value associated with the source VM of a request. The match follows AND semantics which means all the ids must match. Limited to 5 ids in the Tag value id set.",
           "items": {
             "format": "int64",
             "type": "string"
@@ -5998,21 +5998,21 @@
           "description": "Optional. A list of headers to match against in http header."
         },
         "hosts": {
-          "description": "Optional. A list of HTTP Hosts to match against. The match can be one of exact, prefix, suffix, or contains (substring match). Matches are always case sensitive unless the ignoreCase is set. Limited to 5 matches.",
+          "description": "Optional. A list of HTTP Hosts to match against. The match can be one of exact, prefix, suffix, or contains (substring match). Matches are always case sensitive unless the ignoreCase is set. Limited to 10 hosts per Authorization Policy.",
           "items": {
             "$ref": "AuthzPolicyAuthzRuleStringMatch"
           },
           "type": "array"
         },
         "methods": {
-          "description": "Optional. A list of HTTP methods to match against. Each entry must be a valid HTTP method name (GET, PUT, POST, HEAD, PATCH, DELETE, OPTIONS). It only allows exact match and is always case sensitive.",
+          "description": "Optional. A list of HTTP methods to match against. Each entry must be a valid HTTP method name (GET, PUT, POST, HEAD, PATCH, DELETE, OPTIONS). It only allows exact match and is always case sensitive. Limited to 10 methods per Authorization Policy.",
           "items": {
             "type": "string"
           },
           "type": "array"
         },
         "paths": {
-          "description": "Optional. A list of paths to match against. The match can be one of exact, prefix, suffix, or contains (substring match). Matches are always case sensitive unless the ignoreCase is set. Limited to 5 matches. Note that this path match includes the query parameters. For gRPC services, this should be a fully-qualified name of the form /package.service/method.",
+          "description": "Optional. A list of paths to match against. The match can be one of exact, prefix, suffix, or contains (substring match). Matches are always case sensitive unless the ignoreCase is set. Limited to 10 paths per Authorization Policy. Note that this path match includes the query parameters. For gRPC services, this should be a fully-qualified name of the form /package.service/method.",
           "items": {
             "$ref": "AuthzPolicyAuthzRuleStringMatch"
           },
@@ -6026,7 +6026,7 @@
       "id": "AuthzPolicyAuthzRuleToRequestOperationHeaderSet",
       "properties": {
         "headers": {
-          "description": "Required. A list of headers to match against in http header. The match can be one of exact, prefix, suffix, or contains (substring match). The match follows AND semantics which means all the headers must match. Matches are always case sensitive unless the ignoreCase is set. Limited to 5 matches.",
+          "description": "Required. A list of headers to match against in http header. The match can be one of exact, prefix, suffix, or contains (substring match). The match follows AND semantics which means all the headers must match. Matches are always case sensitive unless the ignoreCase is set. Limited to 10 headers per Authorization Policy.",
           "items": {
             "$ref": "AuthzPolicyAuthzRuleHeaderMatch"
           },
@@ -6298,7 +6298,7 @@
       "type": "object"
     },
     "DnsThreatDetector": {
-      "description": "Message describing DnsThreatDetector object",
+      "description": "Message describing DnsThreatDetector object.",
       "id": "DnsThreatDetector",
       "properties": {
         "createTime": {
@@ -7456,7 +7456,7 @@
       "type": "object"
     },
     "ListDnsThreatDetectorsResponse": {
-      "description": "Message for response to listing DnsThreatDetectors",
+      "description": "Message for response to listing DnsThreatDetectors.",
       "id": "ListDnsThreatDetectorsResponse",
       "properties": {
         "dnsThreatDetectors": {