diff --git a/java-secretmanager/README.md b/java-secretmanager/README.md
index 21f1c0d57659..391de1111203 100644
--- a/java-secretmanager/README.md
+++ b/java-secretmanager/README.md
@@ -19,20 +19,20 @@ If you are using Maven, add this to your pom.xml file:
 <dependency>
   <groupId>com.google.cloud</groupId>
   <artifactId>google-cloud-secretmanager</artifactId>
-  <version>2.6.0</version>
+  <version>2.7.0</version>
 </dependency>
 ```
 
 If you are using Gradle without BOM, add this to your dependencies:
 
 ```Groovy
-implementation 'com.google.cloud:google-cloud-secretmanager:2.6.0'
+implementation 'com.google.cloud:google-cloud-secretmanager:2.7.0'
 ```
 
 If you are using SBT, add this to your dependencies:
 
 ```Scala
-libraryDependencies += "com.google.cloud" % "google-cloud-secretmanager" % "2.6.0"
+libraryDependencies += "com.google.cloud" % "google-cloud-secretmanager" % "2.7.0"
 ```
 
 ## Authentication
diff --git a/java-secretmanager/google-cloud-secretmanager/src/test/java/com/google/cloud/secretmanager/v1/SecretManagerServiceClientHttpJsonTest.java b/java-secretmanager/google-cloud-secretmanager/src/test/java/com/google/cloud/secretmanager/v1/SecretManagerServiceClientHttpJsonTest.java
index 4ed8e5b5d9f4..219b7f9d6939 100644
--- a/java-secretmanager/google-cloud-secretmanager/src/test/java/com/google/cloud/secretmanager/v1/SecretManagerServiceClientHttpJsonTest.java
+++ b/java-secretmanager/google-cloud-secretmanager/src/test/java/com/google/cloud/secretmanager/v1/SecretManagerServiceClientHttpJsonTest.java
@@ -202,6 +202,7 @@ public void createSecretTest() throws Exception {
             .setEtag("etag3123477")
             .setRotation(Rotation.newBuilder().build())
             .putAllVersionAliases(new HashMap<String, Long>())
+            .putAllAnnotations(new HashMap<String, String>())
             .build();
     mockService.addResponse(expectedResponse);
 
@@ -257,6 +258,7 @@ public void createSecretTest2() throws Exception {
             .setEtag("etag3123477")
             .setRotation(Rotation.newBuilder().build())
             .putAllVersionAliases(new HashMap<String, Long>())
+            .putAllAnnotations(new HashMap<String, String>())
             .build();
     mockService.addResponse(expectedResponse);
 
@@ -414,6 +416,7 @@ public void getSecretTest() throws Exception {
             .setEtag("etag3123477")
             .setRotation(Rotation.newBuilder().build())
             .putAllVersionAliases(new HashMap<String, Long>())
+            .putAllAnnotations(new HashMap<String, String>())
             .build();
     mockService.addResponse(expectedResponse);
 
@@ -465,6 +468,7 @@ public void getSecretTest2() throws Exception {
             .setEtag("etag3123477")
             .setRotation(Rotation.newBuilder().build())
             .putAllVersionAliases(new HashMap<String, Long>())
+            .putAllAnnotations(new HashMap<String, String>())
             .build();
     mockService.addResponse(expectedResponse);
 
@@ -516,6 +520,7 @@ public void updateSecretTest() throws Exception {
             .setEtag("etag3123477")
             .setRotation(Rotation.newBuilder().build())
             .putAllVersionAliases(new HashMap<String, Long>())
+            .putAllAnnotations(new HashMap<String, String>())
             .build();
     mockService.addResponse(expectedResponse);
 
@@ -529,6 +534,7 @@ public void updateSecretTest() throws Exception {
             .setEtag("etag3123477")
             .setRotation(Rotation.newBuilder().build())
             .putAllVersionAliases(new HashMap<String, Long>())
+            .putAllAnnotations(new HashMap<String, String>())
             .build();
     FieldMask updateMask = FieldMask.newBuilder().build();
 
@@ -568,6 +574,7 @@ public void updateSecretExceptionTest() throws Exception {
               .setEtag("etag3123477")
               .setRotation(Rotation.newBuilder().build())
               .putAllVersionAliases(new HashMap<String, Long>())
+              .putAllAnnotations(new HashMap<String, String>())
               .build();
       FieldMask updateMask = FieldMask.newBuilder().build();
       client.updateSecret(secret, updateMask);
diff --git a/java-secretmanager/google-cloud-secretmanager/src/test/java/com/google/cloud/secretmanager/v1/SecretManagerServiceClientTest.java b/java-secretmanager/google-cloud-secretmanager/src/test/java/com/google/cloud/secretmanager/v1/SecretManagerServiceClientTest.java
index f9ece048c2b0..44fd2995c2f9 100644
--- a/java-secretmanager/google-cloud-secretmanager/src/test/java/com/google/cloud/secretmanager/v1/SecretManagerServiceClientTest.java
+++ b/java-secretmanager/google-cloud-secretmanager/src/test/java/com/google/cloud/secretmanager/v1/SecretManagerServiceClientTest.java
@@ -193,6 +193,7 @@ public void createSecretTest() throws Exception {
             .setEtag("etag3123477")
             .setRotation(Rotation.newBuilder().build())
             .putAllVersionAliases(new HashMap<String, Long>())
+            .putAllAnnotations(new HashMap<String, String>())
             .build();
     mockSecretManagerService.addResponse(expectedResponse);
 
@@ -244,6 +245,7 @@ public void createSecretTest2() throws Exception {
             .setEtag("etag3123477")
             .setRotation(Rotation.newBuilder().build())
             .putAllVersionAliases(new HashMap<String, Long>())
+            .putAllAnnotations(new HashMap<String, String>())
             .build();
     mockSecretManagerService.addResponse(expectedResponse);
 
@@ -387,6 +389,7 @@ public void getSecretTest() throws Exception {
             .setEtag("etag3123477")
             .setRotation(Rotation.newBuilder().build())
             .putAllVersionAliases(new HashMap<String, Long>())
+            .putAllAnnotations(new HashMap<String, String>())
             .build();
     mockSecretManagerService.addResponse(expectedResponse);
 
@@ -432,6 +435,7 @@ public void getSecretTest2() throws Exception {
             .setEtag("etag3123477")
             .setRotation(Rotation.newBuilder().build())
             .putAllVersionAliases(new HashMap<String, Long>())
+            .putAllAnnotations(new HashMap<String, String>())
             .build();
     mockSecretManagerService.addResponse(expectedResponse);
 
@@ -477,6 +481,7 @@ public void updateSecretTest() throws Exception {
             .setEtag("etag3123477")
             .setRotation(Rotation.newBuilder().build())
             .putAllVersionAliases(new HashMap<String, Long>())
+            .putAllAnnotations(new HashMap<String, String>())
             .build();
     mockSecretManagerService.addResponse(expectedResponse);
 
diff --git a/java-secretmanager/proto-google-cloud-secretmanager-v1/src/main/java/com/google/cloud/secretmanager/v1/CustomerManagedEncryption.java b/java-secretmanager/proto-google-cloud-secretmanager-v1/src/main/java/com/google/cloud/secretmanager/v1/CustomerManagedEncryption.java
index 8ee3478a9320..08fe04603210 100644
--- a/java-secretmanager/proto-google-cloud-secretmanager-v1/src/main/java/com/google/cloud/secretmanager/v1/CustomerManagedEncryption.java
+++ b/java-secretmanager/proto-google-cloud-secretmanager-v1/src/main/java/com/google/cloud/secretmanager/v1/CustomerManagedEncryption.java
@@ -74,13 +74,15 @@ public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
    *
    *
    * <pre>
-   * Required. The resource name of the Cloud KMS CryptoKey used to encrypt secret
-   * payloads.
-   * For secrets using the [UserManaged][google.cloud.secretmanager.v1.Replication.UserManaged] replication
-   * policy type, Cloud KMS CryptoKeys must reside in the same location as the
-   * [replica location][Secret.UserManaged.Replica.location].
-   * For secrets using the [Automatic][google.cloud.secretmanager.v1.Replication.Automatic] replication policy
-   * type, Cloud KMS CryptoKeys must reside in `global`.
+   * Required. The resource name of the Cloud KMS CryptoKey used to encrypt
+   * secret payloads.
+   * For secrets using the
+   * [UserManaged][google.cloud.secretmanager.v1.Replication.UserManaged]
+   * replication policy type, Cloud KMS CryptoKeys must reside in the same
+   * location as the [replica location][Secret.UserManaged.Replica.location].
+   * For secrets using the
+   * [Automatic][google.cloud.secretmanager.v1.Replication.Automatic]
+   * replication policy type, Cloud KMS CryptoKeys must reside in `global`.
    * The expected format is `projects/&#42;&#47;locations/&#42;&#47;keyRings/&#42;&#47;cryptoKeys/&#42;`.
    * </pre>
    *
@@ -104,13 +106,15 @@ public java.lang.String getKmsKeyName() {
    *
    *
    * <pre>
-   * Required. The resource name of the Cloud KMS CryptoKey used to encrypt secret
-   * payloads.
-   * For secrets using the [UserManaged][google.cloud.secretmanager.v1.Replication.UserManaged] replication
-   * policy type, Cloud KMS CryptoKeys must reside in the same location as the
-   * [replica location][Secret.UserManaged.Replica.location].
-   * For secrets using the [Automatic][google.cloud.secretmanager.v1.Replication.Automatic] replication policy
-   * type, Cloud KMS CryptoKeys must reside in `global`.
+   * Required. The resource name of the Cloud KMS CryptoKey used to encrypt
+   * secret payloads.
+   * For secrets using the
+   * [UserManaged][google.cloud.secretmanager.v1.Replication.UserManaged]
+   * replication policy type, Cloud KMS CryptoKeys must reside in the same
+   * location as the [replica location][Secret.UserManaged.Replica.location].
+   * For secrets using the
+   * [Automatic][google.cloud.secretmanager.v1.Replication.Automatic]
+   * replication policy type, Cloud KMS CryptoKeys must reside in `global`.
    * The expected format is `projects/&#42;&#47;locations/&#42;&#47;keyRings/&#42;&#47;cryptoKeys/&#42;`.
    * </pre>
    *
@@ -468,13 +472,15 @@ public Builder mergeFrom(
      *
      *
      * <pre>
-     * Required. The resource name of the Cloud KMS CryptoKey used to encrypt secret
-     * payloads.
-     * For secrets using the [UserManaged][google.cloud.secretmanager.v1.Replication.UserManaged] replication
-     * policy type, Cloud KMS CryptoKeys must reside in the same location as the
-     * [replica location][Secret.UserManaged.Replica.location].
-     * For secrets using the [Automatic][google.cloud.secretmanager.v1.Replication.Automatic] replication policy
-     * type, Cloud KMS CryptoKeys must reside in `global`.
+     * Required. The resource name of the Cloud KMS CryptoKey used to encrypt
+     * secret payloads.
+     * For secrets using the
+     * [UserManaged][google.cloud.secretmanager.v1.Replication.UserManaged]
+     * replication policy type, Cloud KMS CryptoKeys must reside in the same
+     * location as the [replica location][Secret.UserManaged.Replica.location].
+     * For secrets using the
+     * [Automatic][google.cloud.secretmanager.v1.Replication.Automatic]
+     * replication policy type, Cloud KMS CryptoKeys must reside in `global`.
      * The expected format is `projects/&#42;&#47;locations/&#42;&#47;keyRings/&#42;&#47;cryptoKeys/&#42;`.
      * </pre>
      *
@@ -497,13 +503,15 @@ public java.lang.String getKmsKeyName() {
      *
      *
      * <pre>
-     * Required. The resource name of the Cloud KMS CryptoKey used to encrypt secret
-     * payloads.
-     * For secrets using the [UserManaged][google.cloud.secretmanager.v1.Replication.UserManaged] replication
-     * policy type, Cloud KMS CryptoKeys must reside in the same location as the
-     * [replica location][Secret.UserManaged.Replica.location].
-     * For secrets using the [Automatic][google.cloud.secretmanager.v1.Replication.Automatic] replication policy
-     * type, Cloud KMS CryptoKeys must reside in `global`.
+     * Required. The resource name of the Cloud KMS CryptoKey used to encrypt
+     * secret payloads.
+     * For secrets using the
+     * [UserManaged][google.cloud.secretmanager.v1.Replication.UserManaged]
+     * replication policy type, Cloud KMS CryptoKeys must reside in the same
+     * location as the [replica location][Secret.UserManaged.Replica.location].
+     * For secrets using the
+     * [Automatic][google.cloud.secretmanager.v1.Replication.Automatic]
+     * replication policy type, Cloud KMS CryptoKeys must reside in `global`.
      * The expected format is `projects/&#42;&#47;locations/&#42;&#47;keyRings/&#42;&#47;cryptoKeys/&#42;`.
      * </pre>
      *
@@ -526,13 +534,15 @@ public com.google.protobuf.ByteString getKmsKeyNameBytes() {
      *
      *
      * <pre>
-     * Required. The resource name of the Cloud KMS CryptoKey used to encrypt secret
-     * payloads.
-     * For secrets using the [UserManaged][google.cloud.secretmanager.v1.Replication.UserManaged] replication
-     * policy type, Cloud KMS CryptoKeys must reside in the same location as the
-     * [replica location][Secret.UserManaged.Replica.location].
-     * For secrets using the [Automatic][google.cloud.secretmanager.v1.Replication.Automatic] replication policy
-     * type, Cloud KMS CryptoKeys must reside in `global`.
+     * Required. The resource name of the Cloud KMS CryptoKey used to encrypt
+     * secret payloads.
+     * For secrets using the
+     * [UserManaged][google.cloud.secretmanager.v1.Replication.UserManaged]
+     * replication policy type, Cloud KMS CryptoKeys must reside in the same
+     * location as the [replica location][Secret.UserManaged.Replica.location].
+     * For secrets using the
+     * [Automatic][google.cloud.secretmanager.v1.Replication.Automatic]
+     * replication policy type, Cloud KMS CryptoKeys must reside in `global`.
      * The expected format is `projects/&#42;&#47;locations/&#42;&#47;keyRings/&#42;&#47;cryptoKeys/&#42;`.
      * </pre>
      *
@@ -554,13 +564,15 @@ public Builder setKmsKeyName(java.lang.String value) {
      *
      *
      * <pre>
-     * Required. The resource name of the Cloud KMS CryptoKey used to encrypt secret
-     * payloads.
-     * For secrets using the [UserManaged][google.cloud.secretmanager.v1.Replication.UserManaged] replication
-     * policy type, Cloud KMS CryptoKeys must reside in the same location as the
-     * [replica location][Secret.UserManaged.Replica.location].
-     * For secrets using the [Automatic][google.cloud.secretmanager.v1.Replication.Automatic] replication policy
-     * type, Cloud KMS CryptoKeys must reside in `global`.
+     * Required. The resource name of the Cloud KMS CryptoKey used to encrypt
+     * secret payloads.
+     * For secrets using the
+     * [UserManaged][google.cloud.secretmanager.v1.Replication.UserManaged]
+     * replication policy type, Cloud KMS CryptoKeys must reside in the same
+     * location as the [replica location][Secret.UserManaged.Replica.location].
+     * For secrets using the
+     * [Automatic][google.cloud.secretmanager.v1.Replication.Automatic]
+     * replication policy type, Cloud KMS CryptoKeys must reside in `global`.
      * The expected format is `projects/&#42;&#47;locations/&#42;&#47;keyRings/&#42;&#47;cryptoKeys/&#42;`.
      * </pre>
      *
@@ -578,13 +590,15 @@ public Builder clearKmsKeyName() {
      *
      *
      * <pre>
-     * Required. The resource name of the Cloud KMS CryptoKey used to encrypt secret
-     * payloads.
-     * For secrets using the [UserManaged][google.cloud.secretmanager.v1.Replication.UserManaged] replication
-     * policy type, Cloud KMS CryptoKeys must reside in the same location as the
-     * [replica location][Secret.UserManaged.Replica.location].
-     * For secrets using the [Automatic][google.cloud.secretmanager.v1.Replication.Automatic] replication policy
-     * type, Cloud KMS CryptoKeys must reside in `global`.
+     * Required. The resource name of the Cloud KMS CryptoKey used to encrypt
+     * secret payloads.
+     * For secrets using the
+     * [UserManaged][google.cloud.secretmanager.v1.Replication.UserManaged]
+     * replication policy type, Cloud KMS CryptoKeys must reside in the same
+     * location as the [replica location][Secret.UserManaged.Replica.location].
+     * For secrets using the
+     * [Automatic][google.cloud.secretmanager.v1.Replication.Automatic]
+     * replication policy type, Cloud KMS CryptoKeys must reside in `global`.
      * The expected format is `projects/&#42;&#47;locations/&#42;&#47;keyRings/&#42;&#47;cryptoKeys/&#42;`.
      * </pre>
      *
diff --git a/java-secretmanager/proto-google-cloud-secretmanager-v1/src/main/java/com/google/cloud/secretmanager/v1/CustomerManagedEncryptionOrBuilder.java b/java-secretmanager/proto-google-cloud-secretmanager-v1/src/main/java/com/google/cloud/secretmanager/v1/CustomerManagedEncryptionOrBuilder.java
index 726412bfbe67..e36c11bc2ac2 100644
--- a/java-secretmanager/proto-google-cloud-secretmanager-v1/src/main/java/com/google/cloud/secretmanager/v1/CustomerManagedEncryptionOrBuilder.java
+++ b/java-secretmanager/proto-google-cloud-secretmanager-v1/src/main/java/com/google/cloud/secretmanager/v1/CustomerManagedEncryptionOrBuilder.java
@@ -27,13 +27,15 @@ public interface CustomerManagedEncryptionOrBuilder
    *
    *
    * <pre>
-   * Required. The resource name of the Cloud KMS CryptoKey used to encrypt secret
-   * payloads.
-   * For secrets using the [UserManaged][google.cloud.secretmanager.v1.Replication.UserManaged] replication
-   * policy type, Cloud KMS CryptoKeys must reside in the same location as the
-   * [replica location][Secret.UserManaged.Replica.location].
-   * For secrets using the [Automatic][google.cloud.secretmanager.v1.Replication.Automatic] replication policy
-   * type, Cloud KMS CryptoKeys must reside in `global`.
+   * Required. The resource name of the Cloud KMS CryptoKey used to encrypt
+   * secret payloads.
+   * For secrets using the
+   * [UserManaged][google.cloud.secretmanager.v1.Replication.UserManaged]
+   * replication policy type, Cloud KMS CryptoKeys must reside in the same
+   * location as the [replica location][Secret.UserManaged.Replica.location].
+   * For secrets using the
+   * [Automatic][google.cloud.secretmanager.v1.Replication.Automatic]
+   * replication policy type, Cloud KMS CryptoKeys must reside in `global`.
    * The expected format is `projects/&#42;&#47;locations/&#42;&#47;keyRings/&#42;&#47;cryptoKeys/&#42;`.
    * </pre>
    *
@@ -46,13 +48,15 @@ public interface CustomerManagedEncryptionOrBuilder
    *
    *
    * <pre>
-   * Required. The resource name of the Cloud KMS CryptoKey used to encrypt secret
-   * payloads.
-   * For secrets using the [UserManaged][google.cloud.secretmanager.v1.Replication.UserManaged] replication
-   * policy type, Cloud KMS CryptoKeys must reside in the same location as the
-   * [replica location][Secret.UserManaged.Replica.location].
-   * For secrets using the [Automatic][google.cloud.secretmanager.v1.Replication.Automatic] replication policy
-   * type, Cloud KMS CryptoKeys must reside in `global`.
+   * Required. The resource name of the Cloud KMS CryptoKey used to encrypt
+   * secret payloads.
+   * For secrets using the
+   * [UserManaged][google.cloud.secretmanager.v1.Replication.UserManaged]
+   * replication policy type, Cloud KMS CryptoKeys must reside in the same
+   * location as the [replica location][Secret.UserManaged.Replica.location].
+   * For secrets using the
+   * [Automatic][google.cloud.secretmanager.v1.Replication.Automatic]
+   * replication policy type, Cloud KMS CryptoKeys must reside in `global`.
    * The expected format is `projects/&#42;&#47;locations/&#42;&#47;keyRings/&#42;&#47;cryptoKeys/&#42;`.
    * </pre>
    *
diff --git a/java-secretmanager/proto-google-cloud-secretmanager-v1/src/main/java/com/google/cloud/secretmanager/v1/CustomerManagedEncryptionStatus.java b/java-secretmanager/proto-google-cloud-secretmanager-v1/src/main/java/com/google/cloud/secretmanager/v1/CustomerManagedEncryptionStatus.java
index 4d75422917dd..ace7587f7d7d 100644
--- a/java-secretmanager/proto-google-cloud-secretmanager-v1/src/main/java/com/google/cloud/secretmanager/v1/CustomerManagedEncryptionStatus.java
+++ b/java-secretmanager/proto-google-cloud-secretmanager-v1/src/main/java/com/google/cloud/secretmanager/v1/CustomerManagedEncryptionStatus.java
@@ -74,8 +74,8 @@ public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
    *
    *
    * <pre>
-   * Required. The resource name of the Cloud KMS CryptoKeyVersion used to encrypt the
-   * secret payload, in the following format:
+   * Required. The resource name of the Cloud KMS CryptoKeyVersion used to
+   * encrypt the secret payload, in the following format:
    * `projects/&#42;&#47;locations/&#42;&#47;keyRings/&#42;&#47;cryptoKeys/&#42;&#47;versions/&#42;`.
    * </pre>
    *
@@ -99,8 +99,8 @@ public java.lang.String getKmsKeyVersionName() {
    *
    *
    * <pre>
-   * Required. The resource name of the Cloud KMS CryptoKeyVersion used to encrypt the
-   * secret payload, in the following format:
+   * Required. The resource name of the Cloud KMS CryptoKeyVersion used to
+   * encrypt the secret payload, in the following format:
    * `projects/&#42;&#47;locations/&#42;&#47;keyRings/&#42;&#47;cryptoKeys/&#42;&#47;versions/&#42;`.
    * </pre>
    *
@@ -462,8 +462,8 @@ public Builder mergeFrom(
      *
      *
      * <pre>
-     * Required. The resource name of the Cloud KMS CryptoKeyVersion used to encrypt the
-     * secret payload, in the following format:
+     * Required. The resource name of the Cloud KMS CryptoKeyVersion used to
+     * encrypt the secret payload, in the following format:
      * `projects/&#42;&#47;locations/&#42;&#47;keyRings/&#42;&#47;cryptoKeys/&#42;&#47;versions/&#42;`.
      * </pre>
      *
@@ -486,8 +486,8 @@ public java.lang.String getKmsKeyVersionName() {
      *
      *
      * <pre>
-     * Required. The resource name of the Cloud KMS CryptoKeyVersion used to encrypt the
-     * secret payload, in the following format:
+     * Required. The resource name of the Cloud KMS CryptoKeyVersion used to
+     * encrypt the secret payload, in the following format:
      * `projects/&#42;&#47;locations/&#42;&#47;keyRings/&#42;&#47;cryptoKeys/&#42;&#47;versions/&#42;`.
      * </pre>
      *
@@ -510,8 +510,8 @@ public com.google.protobuf.ByteString getKmsKeyVersionNameBytes() {
      *
      *
      * <pre>
-     * Required. The resource name of the Cloud KMS CryptoKeyVersion used to encrypt the
-     * secret payload, in the following format:
+     * Required. The resource name of the Cloud KMS CryptoKeyVersion used to
+     * encrypt the secret payload, in the following format:
      * `projects/&#42;&#47;locations/&#42;&#47;keyRings/&#42;&#47;cryptoKeys/&#42;&#47;versions/&#42;`.
      * </pre>
      *
@@ -533,8 +533,8 @@ public Builder setKmsKeyVersionName(java.lang.String value) {
      *
      *
      * <pre>
-     * Required. The resource name of the Cloud KMS CryptoKeyVersion used to encrypt the
-     * secret payload, in the following format:
+     * Required. The resource name of the Cloud KMS CryptoKeyVersion used to
+     * encrypt the secret payload, in the following format:
      * `projects/&#42;&#47;locations/&#42;&#47;keyRings/&#42;&#47;cryptoKeys/&#42;&#47;versions/&#42;`.
      * </pre>
      *
@@ -552,8 +552,8 @@ public Builder clearKmsKeyVersionName() {
      *
      *
      * <pre>
-     * Required. The resource name of the Cloud KMS CryptoKeyVersion used to encrypt the
-     * secret payload, in the following format:
+     * Required. The resource name of the Cloud KMS CryptoKeyVersion used to
+     * encrypt the secret payload, in the following format:
      * `projects/&#42;&#47;locations/&#42;&#47;keyRings/&#42;&#47;cryptoKeys/&#42;&#47;versions/&#42;`.
      * </pre>
      *
diff --git a/java-secretmanager/proto-google-cloud-secretmanager-v1/src/main/java/com/google/cloud/secretmanager/v1/CustomerManagedEncryptionStatusOrBuilder.java b/java-secretmanager/proto-google-cloud-secretmanager-v1/src/main/java/com/google/cloud/secretmanager/v1/CustomerManagedEncryptionStatusOrBuilder.java
index 21b36579b8f1..f120b7133959 100644
--- a/java-secretmanager/proto-google-cloud-secretmanager-v1/src/main/java/com/google/cloud/secretmanager/v1/CustomerManagedEncryptionStatusOrBuilder.java
+++ b/java-secretmanager/proto-google-cloud-secretmanager-v1/src/main/java/com/google/cloud/secretmanager/v1/CustomerManagedEncryptionStatusOrBuilder.java
@@ -27,8 +27,8 @@ public interface CustomerManagedEncryptionStatusOrBuilder
    *
    *
    * <pre>
-   * Required. The resource name of the Cloud KMS CryptoKeyVersion used to encrypt the
-   * secret payload, in the following format:
+   * Required. The resource name of the Cloud KMS CryptoKeyVersion used to
+   * encrypt the secret payload, in the following format:
    * `projects/&#42;&#47;locations/&#42;&#47;keyRings/&#42;&#47;cryptoKeys/&#42;&#47;versions/&#42;`.
    * </pre>
    *
@@ -41,8 +41,8 @@ public interface CustomerManagedEncryptionStatusOrBuilder
    *
    *
    * <pre>
-   * Required. The resource name of the Cloud KMS CryptoKeyVersion used to encrypt the
-   * secret payload, in the following format:
+   * Required. The resource name of the Cloud KMS CryptoKeyVersion used to
+   * encrypt the secret payload, in the following format:
    * `projects/&#42;&#47;locations/&#42;&#47;keyRings/&#42;&#47;cryptoKeys/&#42;&#47;versions/&#42;`.
    * </pre>
    *
diff --git a/java-secretmanager/proto-google-cloud-secretmanager-v1/src/main/java/com/google/cloud/secretmanager/v1/Replication.java b/java-secretmanager/proto-google-cloud-secretmanager-v1/src/main/java/com/google/cloud/secretmanager/v1/Replication.java
index 4a9f2ad744ef..f34f97ac1472 100644
--- a/java-secretmanager/proto-google-cloud-secretmanager-v1/src/main/java/com/google/cloud/secretmanager/v1/Replication.java
+++ b/java-secretmanager/proto-google-cloud-secretmanager-v1/src/main/java/com/google/cloud/secretmanager/v1/Replication.java
@@ -74,11 +74,14 @@ public interface AutomaticOrBuilder
      *
      *
      * <pre>
-     * Optional. The customer-managed encryption configuration of the [Secret][google.cloud.secretmanager.v1.Secret]. If no
-     * configuration is provided, Google-managed default encryption is used.
-     * Updates to the [Secret][google.cloud.secretmanager.v1.Secret] encryption configuration only apply to
-     * [SecretVersions][google.cloud.secretmanager.v1.SecretVersion] added afterwards. They do not apply
-     * retroactively to existing [SecretVersions][google.cloud.secretmanager.v1.SecretVersion].
+     * Optional. The customer-managed encryption configuration of the
+     * [Secret][google.cloud.secretmanager.v1.Secret]. If no configuration is
+     * provided, Google-managed default encryption is used.
+     * Updates to the [Secret][google.cloud.secretmanager.v1.Secret] encryption
+     * configuration only apply to
+     * [SecretVersions][google.cloud.secretmanager.v1.SecretVersion] added
+     * afterwards. They do not apply retroactively to existing
+     * [SecretVersions][google.cloud.secretmanager.v1.SecretVersion].
      * </pre>
      *
      * <code>
@@ -92,11 +95,14 @@ public interface AutomaticOrBuilder
      *
      *
      * <pre>
-     * Optional. The customer-managed encryption configuration of the [Secret][google.cloud.secretmanager.v1.Secret]. If no
-     * configuration is provided, Google-managed default encryption is used.
-     * Updates to the [Secret][google.cloud.secretmanager.v1.Secret] encryption configuration only apply to
-     * [SecretVersions][google.cloud.secretmanager.v1.SecretVersion] added afterwards. They do not apply
-     * retroactively to existing [SecretVersions][google.cloud.secretmanager.v1.SecretVersion].
+     * Optional. The customer-managed encryption configuration of the
+     * [Secret][google.cloud.secretmanager.v1.Secret]. If no configuration is
+     * provided, Google-managed default encryption is used.
+     * Updates to the [Secret][google.cloud.secretmanager.v1.Secret] encryption
+     * configuration only apply to
+     * [SecretVersions][google.cloud.secretmanager.v1.SecretVersion] added
+     * afterwards. They do not apply retroactively to existing
+     * [SecretVersions][google.cloud.secretmanager.v1.SecretVersion].
      * </pre>
      *
      * <code>
@@ -110,11 +116,14 @@ public interface AutomaticOrBuilder
      *
      *
      * <pre>
-     * Optional. The customer-managed encryption configuration of the [Secret][google.cloud.secretmanager.v1.Secret]. If no
-     * configuration is provided, Google-managed default encryption is used.
-     * Updates to the [Secret][google.cloud.secretmanager.v1.Secret] encryption configuration only apply to
-     * [SecretVersions][google.cloud.secretmanager.v1.SecretVersion] added afterwards. They do not apply
-     * retroactively to existing [SecretVersions][google.cloud.secretmanager.v1.SecretVersion].
+     * Optional. The customer-managed encryption configuration of the
+     * [Secret][google.cloud.secretmanager.v1.Secret]. If no configuration is
+     * provided, Google-managed default encryption is used.
+     * Updates to the [Secret][google.cloud.secretmanager.v1.Secret] encryption
+     * configuration only apply to
+     * [SecretVersions][google.cloud.secretmanager.v1.SecretVersion] added
+     * afterwards. They do not apply retroactively to existing
+     * [SecretVersions][google.cloud.secretmanager.v1.SecretVersion].
      * </pre>
      *
      * <code>
@@ -128,7 +137,8 @@ public interface AutomaticOrBuilder
    *
    *
    * <pre>
-   * A replication policy that replicates the [Secret][google.cloud.secretmanager.v1.Secret] payload without any
+   * A replication policy that replicates the
+   * [Secret][google.cloud.secretmanager.v1.Secret] payload without any
    * restrictions.
    * </pre>
    *
@@ -178,11 +188,14 @@ public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
      *
      *
      * <pre>
-     * Optional. The customer-managed encryption configuration of the [Secret][google.cloud.secretmanager.v1.Secret]. If no
-     * configuration is provided, Google-managed default encryption is used.
-     * Updates to the [Secret][google.cloud.secretmanager.v1.Secret] encryption configuration only apply to
-     * [SecretVersions][google.cloud.secretmanager.v1.SecretVersion] added afterwards. They do not apply
-     * retroactively to existing [SecretVersions][google.cloud.secretmanager.v1.SecretVersion].
+     * Optional. The customer-managed encryption configuration of the
+     * [Secret][google.cloud.secretmanager.v1.Secret]. If no configuration is
+     * provided, Google-managed default encryption is used.
+     * Updates to the [Secret][google.cloud.secretmanager.v1.Secret] encryption
+     * configuration only apply to
+     * [SecretVersions][google.cloud.secretmanager.v1.SecretVersion] added
+     * afterwards. They do not apply retroactively to existing
+     * [SecretVersions][google.cloud.secretmanager.v1.SecretVersion].
      * </pre>
      *
      * <code>
@@ -199,11 +212,14 @@ public boolean hasCustomerManagedEncryption() {
      *
      *
      * <pre>
-     * Optional. The customer-managed encryption configuration of the [Secret][google.cloud.secretmanager.v1.Secret]. If no
-     * configuration is provided, Google-managed default encryption is used.
-     * Updates to the [Secret][google.cloud.secretmanager.v1.Secret] encryption configuration only apply to
-     * [SecretVersions][google.cloud.secretmanager.v1.SecretVersion] added afterwards. They do not apply
-     * retroactively to existing [SecretVersions][google.cloud.secretmanager.v1.SecretVersion].
+     * Optional. The customer-managed encryption configuration of the
+     * [Secret][google.cloud.secretmanager.v1.Secret]. If no configuration is
+     * provided, Google-managed default encryption is used.
+     * Updates to the [Secret][google.cloud.secretmanager.v1.Secret] encryption
+     * configuration only apply to
+     * [SecretVersions][google.cloud.secretmanager.v1.SecretVersion] added
+     * afterwards. They do not apply retroactively to existing
+     * [SecretVersions][google.cloud.secretmanager.v1.SecretVersion].
      * </pre>
      *
      * <code>
@@ -223,11 +239,14 @@ public boolean hasCustomerManagedEncryption() {
      *
      *
      * <pre>
-     * Optional. The customer-managed encryption configuration of the [Secret][google.cloud.secretmanager.v1.Secret]. If no
-     * configuration is provided, Google-managed default encryption is used.
-     * Updates to the [Secret][google.cloud.secretmanager.v1.Secret] encryption configuration only apply to
-     * [SecretVersions][google.cloud.secretmanager.v1.SecretVersion] added afterwards. They do not apply
-     * retroactively to existing [SecretVersions][google.cloud.secretmanager.v1.SecretVersion].
+     * Optional. The customer-managed encryption configuration of the
+     * [Secret][google.cloud.secretmanager.v1.Secret]. If no configuration is
+     * provided, Google-managed default encryption is used.
+     * Updates to the [Secret][google.cloud.secretmanager.v1.Secret] encryption
+     * configuration only apply to
+     * [SecretVersions][google.cloud.secretmanager.v1.SecretVersion] added
+     * afterwards. They do not apply retroactively to existing
+     * [SecretVersions][google.cloud.secretmanager.v1.SecretVersion].
      * </pre>
      *
      * <code>
@@ -413,7 +432,8 @@ protected Builder newBuilderForType(
      *
      *
      * <pre>
-     * A replication policy that replicates the [Secret][google.cloud.secretmanager.v1.Secret] payload without any
+     * A replication policy that replicates the
+     * [Secret][google.cloud.secretmanager.v1.Secret] payload without any
      * restrictions.
      * </pre>
      *
@@ -603,11 +623,14 @@ public Builder mergeFrom(
        *
        *
        * <pre>
-       * Optional. The customer-managed encryption configuration of the [Secret][google.cloud.secretmanager.v1.Secret]. If no
-       * configuration is provided, Google-managed default encryption is used.
-       * Updates to the [Secret][google.cloud.secretmanager.v1.Secret] encryption configuration only apply to
-       * [SecretVersions][google.cloud.secretmanager.v1.SecretVersion] added afterwards. They do not apply
-       * retroactively to existing [SecretVersions][google.cloud.secretmanager.v1.SecretVersion].
+       * Optional. The customer-managed encryption configuration of the
+       * [Secret][google.cloud.secretmanager.v1.Secret]. If no configuration is
+       * provided, Google-managed default encryption is used.
+       * Updates to the [Secret][google.cloud.secretmanager.v1.Secret] encryption
+       * configuration only apply to
+       * [SecretVersions][google.cloud.secretmanager.v1.SecretVersion] added
+       * afterwards. They do not apply retroactively to existing
+       * [SecretVersions][google.cloud.secretmanager.v1.SecretVersion].
        * </pre>
        *
        * <code>
@@ -623,11 +646,14 @@ public boolean hasCustomerManagedEncryption() {
        *
        *
        * <pre>
-       * Optional. The customer-managed encryption configuration of the [Secret][google.cloud.secretmanager.v1.Secret]. If no
-       * configuration is provided, Google-managed default encryption is used.
-       * Updates to the [Secret][google.cloud.secretmanager.v1.Secret] encryption configuration only apply to
-       * [SecretVersions][google.cloud.secretmanager.v1.SecretVersion] added afterwards. They do not apply
-       * retroactively to existing [SecretVersions][google.cloud.secretmanager.v1.SecretVersion].
+       * Optional. The customer-managed encryption configuration of the
+       * [Secret][google.cloud.secretmanager.v1.Secret]. If no configuration is
+       * provided, Google-managed default encryption is used.
+       * Updates to the [Secret][google.cloud.secretmanager.v1.Secret] encryption
+       * configuration only apply to
+       * [SecretVersions][google.cloud.secretmanager.v1.SecretVersion] added
+       * afterwards. They do not apply retroactively to existing
+       * [SecretVersions][google.cloud.secretmanager.v1.SecretVersion].
        * </pre>
        *
        * <code>
@@ -650,11 +676,14 @@ public boolean hasCustomerManagedEncryption() {
        *
        *
        * <pre>
-       * Optional. The customer-managed encryption configuration of the [Secret][google.cloud.secretmanager.v1.Secret]. If no
-       * configuration is provided, Google-managed default encryption is used.
-       * Updates to the [Secret][google.cloud.secretmanager.v1.Secret] encryption configuration only apply to
-       * [SecretVersions][google.cloud.secretmanager.v1.SecretVersion] added afterwards. They do not apply
-       * retroactively to existing [SecretVersions][google.cloud.secretmanager.v1.SecretVersion].
+       * Optional. The customer-managed encryption configuration of the
+       * [Secret][google.cloud.secretmanager.v1.Secret]. If no configuration is
+       * provided, Google-managed default encryption is used.
+       * Updates to the [Secret][google.cloud.secretmanager.v1.Secret] encryption
+       * configuration only apply to
+       * [SecretVersions][google.cloud.secretmanager.v1.SecretVersion] added
+       * afterwards. They do not apply retroactively to existing
+       * [SecretVersions][google.cloud.secretmanager.v1.SecretVersion].
        * </pre>
        *
        * <code>
@@ -679,11 +708,14 @@ public Builder setCustomerManagedEncryption(
        *
        *
        * <pre>
-       * Optional. The customer-managed encryption configuration of the [Secret][google.cloud.secretmanager.v1.Secret]. If no
-       * configuration is provided, Google-managed default encryption is used.
-       * Updates to the [Secret][google.cloud.secretmanager.v1.Secret] encryption configuration only apply to
-       * [SecretVersions][google.cloud.secretmanager.v1.SecretVersion] added afterwards. They do not apply
-       * retroactively to existing [SecretVersions][google.cloud.secretmanager.v1.SecretVersion].
+       * Optional. The customer-managed encryption configuration of the
+       * [Secret][google.cloud.secretmanager.v1.Secret]. If no configuration is
+       * provided, Google-managed default encryption is used.
+       * Updates to the [Secret][google.cloud.secretmanager.v1.Secret] encryption
+       * configuration only apply to
+       * [SecretVersions][google.cloud.secretmanager.v1.SecretVersion] added
+       * afterwards. They do not apply retroactively to existing
+       * [SecretVersions][google.cloud.secretmanager.v1.SecretVersion].
        * </pre>
        *
        * <code>
@@ -705,11 +737,14 @@ public Builder setCustomerManagedEncryption(
        *
        *
        * <pre>
-       * Optional. The customer-managed encryption configuration of the [Secret][google.cloud.secretmanager.v1.Secret]. If no
-       * configuration is provided, Google-managed default encryption is used.
-       * Updates to the [Secret][google.cloud.secretmanager.v1.Secret] encryption configuration only apply to
-       * [SecretVersions][google.cloud.secretmanager.v1.SecretVersion] added afterwards. They do not apply
-       * retroactively to existing [SecretVersions][google.cloud.secretmanager.v1.SecretVersion].
+       * Optional. The customer-managed encryption configuration of the
+       * [Secret][google.cloud.secretmanager.v1.Secret]. If no configuration is
+       * provided, Google-managed default encryption is used.
+       * Updates to the [Secret][google.cloud.secretmanager.v1.Secret] encryption
+       * configuration only apply to
+       * [SecretVersions][google.cloud.secretmanager.v1.SecretVersion] added
+       * afterwards. They do not apply retroactively to existing
+       * [SecretVersions][google.cloud.secretmanager.v1.SecretVersion].
        * </pre>
        *
        * <code>
@@ -739,11 +774,14 @@ public Builder mergeCustomerManagedEncryption(
        *
        *
        * <pre>
-       * Optional. The customer-managed encryption configuration of the [Secret][google.cloud.secretmanager.v1.Secret]. If no
-       * configuration is provided, Google-managed default encryption is used.
-       * Updates to the [Secret][google.cloud.secretmanager.v1.Secret] encryption configuration only apply to
-       * [SecretVersions][google.cloud.secretmanager.v1.SecretVersion] added afterwards. They do not apply
-       * retroactively to existing [SecretVersions][google.cloud.secretmanager.v1.SecretVersion].
+       * Optional. The customer-managed encryption configuration of the
+       * [Secret][google.cloud.secretmanager.v1.Secret]. If no configuration is
+       * provided, Google-managed default encryption is used.
+       * Updates to the [Secret][google.cloud.secretmanager.v1.Secret] encryption
+       * configuration only apply to
+       * [SecretVersions][google.cloud.secretmanager.v1.SecretVersion] added
+       * afterwards. They do not apply retroactively to existing
+       * [SecretVersions][google.cloud.secretmanager.v1.SecretVersion].
        * </pre>
        *
        * <code>
@@ -765,11 +803,14 @@ public Builder clearCustomerManagedEncryption() {
        *
        *
        * <pre>
-       * Optional. The customer-managed encryption configuration of the [Secret][google.cloud.secretmanager.v1.Secret]. If no
-       * configuration is provided, Google-managed default encryption is used.
-       * Updates to the [Secret][google.cloud.secretmanager.v1.Secret] encryption configuration only apply to
-       * [SecretVersions][google.cloud.secretmanager.v1.SecretVersion] added afterwards. They do not apply
-       * retroactively to existing [SecretVersions][google.cloud.secretmanager.v1.SecretVersion].
+       * Optional. The customer-managed encryption configuration of the
+       * [Secret][google.cloud.secretmanager.v1.Secret]. If no configuration is
+       * provided, Google-managed default encryption is used.
+       * Updates to the [Secret][google.cloud.secretmanager.v1.Secret] encryption
+       * configuration only apply to
+       * [SecretVersions][google.cloud.secretmanager.v1.SecretVersion] added
+       * afterwards. They do not apply retroactively to existing
+       * [SecretVersions][google.cloud.secretmanager.v1.SecretVersion].
        * </pre>
        *
        * <code>
@@ -786,11 +827,14 @@ public Builder clearCustomerManagedEncryption() {
        *
        *
        * <pre>
-       * Optional. The customer-managed encryption configuration of the [Secret][google.cloud.secretmanager.v1.Secret]. If no
-       * configuration is provided, Google-managed default encryption is used.
-       * Updates to the [Secret][google.cloud.secretmanager.v1.Secret] encryption configuration only apply to
-       * [SecretVersions][google.cloud.secretmanager.v1.SecretVersion] added afterwards. They do not apply
-       * retroactively to existing [SecretVersions][google.cloud.secretmanager.v1.SecretVersion].
+       * Optional. The customer-managed encryption configuration of the
+       * [Secret][google.cloud.secretmanager.v1.Secret]. If no configuration is
+       * provided, Google-managed default encryption is used.
+       * Updates to the [Secret][google.cloud.secretmanager.v1.Secret] encryption
+       * configuration only apply to
+       * [SecretVersions][google.cloud.secretmanager.v1.SecretVersion] added
+       * afterwards. They do not apply retroactively to existing
+       * [SecretVersions][google.cloud.secretmanager.v1.SecretVersion].
        * </pre>
        *
        * <code>
@@ -811,11 +855,14 @@ public Builder clearCustomerManagedEncryption() {
        *
        *
        * <pre>
-       * Optional. The customer-managed encryption configuration of the [Secret][google.cloud.secretmanager.v1.Secret]. If no
-       * configuration is provided, Google-managed default encryption is used.
-       * Updates to the [Secret][google.cloud.secretmanager.v1.Secret] encryption configuration only apply to
-       * [SecretVersions][google.cloud.secretmanager.v1.SecretVersion] added afterwards. They do not apply
-       * retroactively to existing [SecretVersions][google.cloud.secretmanager.v1.SecretVersion].
+       * Optional. The customer-managed encryption configuration of the
+       * [Secret][google.cloud.secretmanager.v1.Secret]. If no configuration is
+       * provided, Google-managed default encryption is used.
+       * Updates to the [Secret][google.cloud.secretmanager.v1.Secret] encryption
+       * configuration only apply to
+       * [SecretVersions][google.cloud.secretmanager.v1.SecretVersion] added
+       * afterwards. They do not apply retroactively to existing
+       * [SecretVersions][google.cloud.secretmanager.v1.SecretVersion].
        * </pre>
        *
        * <code>
@@ -912,7 +959,8 @@ public interface UserManagedOrBuilder
      *
      *
      * <pre>
-     * Required. The list of Replicas for this [Secret][google.cloud.secretmanager.v1.Secret].
+     * Required. The list of Replicas for this
+     * [Secret][google.cloud.secretmanager.v1.Secret].
      * Cannot be empty.
      * </pre>
      *
@@ -926,7 +974,8 @@ public interface UserManagedOrBuilder
      *
      *
      * <pre>
-     * Required. The list of Replicas for this [Secret][google.cloud.secretmanager.v1.Secret].
+     * Required. The list of Replicas for this
+     * [Secret][google.cloud.secretmanager.v1.Secret].
      * Cannot be empty.
      * </pre>
      *
@@ -939,7 +988,8 @@ public interface UserManagedOrBuilder
      *
      *
      * <pre>
-     * Required. The list of Replicas for this [Secret][google.cloud.secretmanager.v1.Secret].
+     * Required. The list of Replicas for this
+     * [Secret][google.cloud.secretmanager.v1.Secret].
      * Cannot be empty.
      * </pre>
      *
@@ -952,7 +1002,8 @@ public interface UserManagedOrBuilder
      *
      *
      * <pre>
-     * Required. The list of Replicas for this [Secret][google.cloud.secretmanager.v1.Secret].
+     * Required. The list of Replicas for this
+     * [Secret][google.cloud.secretmanager.v1.Secret].
      * Cannot be empty.
      * </pre>
      *
@@ -967,7 +1018,8 @@ public interface UserManagedOrBuilder
      *
      *
      * <pre>
-     * Required. The list of Replicas for this [Secret][google.cloud.secretmanager.v1.Secret].
+     * Required. The list of Replicas for this
+     * [Secret][google.cloud.secretmanager.v1.Secret].
      * Cannot be empty.
      * </pre>
      *
@@ -982,8 +1034,9 @@ com.google.cloud.secretmanager.v1.Replication.UserManaged.ReplicaOrBuilder getRe
    *
    *
    * <pre>
-   * A replication policy that replicates the [Secret][google.cloud.secretmanager.v1.Secret] payload into the
-   * locations specified in [Secret.replication.user_managed.replicas][]
+   * A replication policy that replicates the
+   * [Secret][google.cloud.secretmanager.v1.Secret] payload into the locations
+   * specified in [Secret.replication.user_managed.replicas][]
    * </pre>
    *
    * Protobuf type {@code google.cloud.secretmanager.v1.Replication.UserManaged}
@@ -1064,12 +1117,14 @@ public interface ReplicaOrBuilder
        *
        *
        * <pre>
-       * Optional. The customer-managed encryption configuration of the [User-Managed
-       * Replica][Replication.UserManaged.Replica]. If no configuration is
-       * provided, Google-managed default encryption is used.
-       * Updates to the [Secret][google.cloud.secretmanager.v1.Secret] encryption configuration only apply to
-       * [SecretVersions][google.cloud.secretmanager.v1.SecretVersion] added afterwards. They do not apply
-       * retroactively to existing [SecretVersions][google.cloud.secretmanager.v1.SecretVersion].
+       * Optional. The customer-managed encryption configuration of the
+       * [User-Managed Replica][Replication.UserManaged.Replica]. If no
+       * configuration is provided, Google-managed default encryption is used.
+       * Updates to the [Secret][google.cloud.secretmanager.v1.Secret]
+       * encryption configuration only apply to
+       * [SecretVersions][google.cloud.secretmanager.v1.SecretVersion] added
+       * afterwards. They do not apply retroactively to existing
+       * [SecretVersions][google.cloud.secretmanager.v1.SecretVersion].
        * </pre>
        *
        * <code>
@@ -1083,12 +1138,14 @@ public interface ReplicaOrBuilder
        *
        *
        * <pre>
-       * Optional. The customer-managed encryption configuration of the [User-Managed
-       * Replica][Replication.UserManaged.Replica]. If no configuration is
-       * provided, Google-managed default encryption is used.
-       * Updates to the [Secret][google.cloud.secretmanager.v1.Secret] encryption configuration only apply to
-       * [SecretVersions][google.cloud.secretmanager.v1.SecretVersion] added afterwards. They do not apply
-       * retroactively to existing [SecretVersions][google.cloud.secretmanager.v1.SecretVersion].
+       * Optional. The customer-managed encryption configuration of the
+       * [User-Managed Replica][Replication.UserManaged.Replica]. If no
+       * configuration is provided, Google-managed default encryption is used.
+       * Updates to the [Secret][google.cloud.secretmanager.v1.Secret]
+       * encryption configuration only apply to
+       * [SecretVersions][google.cloud.secretmanager.v1.SecretVersion] added
+       * afterwards. They do not apply retroactively to existing
+       * [SecretVersions][google.cloud.secretmanager.v1.SecretVersion].
        * </pre>
        *
        * <code>
@@ -1102,12 +1159,14 @@ public interface ReplicaOrBuilder
        *
        *
        * <pre>
-       * Optional. The customer-managed encryption configuration of the [User-Managed
-       * Replica][Replication.UserManaged.Replica]. If no configuration is
-       * provided, Google-managed default encryption is used.
-       * Updates to the [Secret][google.cloud.secretmanager.v1.Secret] encryption configuration only apply to
-       * [SecretVersions][google.cloud.secretmanager.v1.SecretVersion] added afterwards. They do not apply
-       * retroactively to existing [SecretVersions][google.cloud.secretmanager.v1.SecretVersion].
+       * Optional. The customer-managed encryption configuration of the
+       * [User-Managed Replica][Replication.UserManaged.Replica]. If no
+       * configuration is provided, Google-managed default encryption is used.
+       * Updates to the [Secret][google.cloud.secretmanager.v1.Secret]
+       * encryption configuration only apply to
+       * [SecretVersions][google.cloud.secretmanager.v1.SecretVersion] added
+       * afterwards. They do not apply retroactively to existing
+       * [SecretVersions][google.cloud.secretmanager.v1.SecretVersion].
        * </pre>
        *
        * <code>
@@ -1121,7 +1180,8 @@ public interface ReplicaOrBuilder
      *
      *
      * <pre>
-     * Represents a Replica for this [Secret][google.cloud.secretmanager.v1.Secret].
+     * Represents a Replica for this
+     * [Secret][google.cloud.secretmanager.v1.Secret].
      * </pre>
      *
      * Protobuf type {@code google.cloud.secretmanager.v1.Replication.UserManaged.Replica}
@@ -1224,12 +1284,14 @@ public com.google.protobuf.ByteString getLocationBytes() {
        *
        *
        * <pre>
-       * Optional. The customer-managed encryption configuration of the [User-Managed
-       * Replica][Replication.UserManaged.Replica]. If no configuration is
-       * provided, Google-managed default encryption is used.
-       * Updates to the [Secret][google.cloud.secretmanager.v1.Secret] encryption configuration only apply to
-       * [SecretVersions][google.cloud.secretmanager.v1.SecretVersion] added afterwards. They do not apply
-       * retroactively to existing [SecretVersions][google.cloud.secretmanager.v1.SecretVersion].
+       * Optional. The customer-managed encryption configuration of the
+       * [User-Managed Replica][Replication.UserManaged.Replica]. If no
+       * configuration is provided, Google-managed default encryption is used.
+       * Updates to the [Secret][google.cloud.secretmanager.v1.Secret]
+       * encryption configuration only apply to
+       * [SecretVersions][google.cloud.secretmanager.v1.SecretVersion] added
+       * afterwards. They do not apply retroactively to existing
+       * [SecretVersions][google.cloud.secretmanager.v1.SecretVersion].
        * </pre>
        *
        * <code>
@@ -1246,12 +1308,14 @@ public boolean hasCustomerManagedEncryption() {
        *
        *
        * <pre>
-       * Optional. The customer-managed encryption configuration of the [User-Managed
-       * Replica][Replication.UserManaged.Replica]. If no configuration is
-       * provided, Google-managed default encryption is used.
-       * Updates to the [Secret][google.cloud.secretmanager.v1.Secret] encryption configuration only apply to
-       * [SecretVersions][google.cloud.secretmanager.v1.SecretVersion] added afterwards. They do not apply
-       * retroactively to existing [SecretVersions][google.cloud.secretmanager.v1.SecretVersion].
+       * Optional. The customer-managed encryption configuration of the
+       * [User-Managed Replica][Replication.UserManaged.Replica]. If no
+       * configuration is provided, Google-managed default encryption is used.
+       * Updates to the [Secret][google.cloud.secretmanager.v1.Secret]
+       * encryption configuration only apply to
+       * [SecretVersions][google.cloud.secretmanager.v1.SecretVersion] added
+       * afterwards. They do not apply retroactively to existing
+       * [SecretVersions][google.cloud.secretmanager.v1.SecretVersion].
        * </pre>
        *
        * <code>
@@ -1271,12 +1335,14 @@ public boolean hasCustomerManagedEncryption() {
        *
        *
        * <pre>
-       * Optional. The customer-managed encryption configuration of the [User-Managed
-       * Replica][Replication.UserManaged.Replica]. If no configuration is
-       * provided, Google-managed default encryption is used.
-       * Updates to the [Secret][google.cloud.secretmanager.v1.Secret] encryption configuration only apply to
-       * [SecretVersions][google.cloud.secretmanager.v1.SecretVersion] added afterwards. They do not apply
-       * retroactively to existing [SecretVersions][google.cloud.secretmanager.v1.SecretVersion].
+       * Optional. The customer-managed encryption configuration of the
+       * [User-Managed Replica][Replication.UserManaged.Replica]. If no
+       * configuration is provided, Google-managed default encryption is used.
+       * Updates to the [Secret][google.cloud.secretmanager.v1.Secret]
+       * encryption configuration only apply to
+       * [SecretVersions][google.cloud.secretmanager.v1.SecretVersion] added
+       * afterwards. They do not apply retroactively to existing
+       * [SecretVersions][google.cloud.secretmanager.v1.SecretVersion].
        * </pre>
        *
        * <code>
@@ -1473,7 +1539,8 @@ protected Builder newBuilderForType(
        *
        *
        * <pre>
-       * Represents a Replica for this [Secret][google.cloud.secretmanager.v1.Secret].
+       * Represents a Replica for this
+       * [Secret][google.cloud.secretmanager.v1.Secret].
        * </pre>
        *
        * Protobuf type {@code google.cloud.secretmanager.v1.Replication.UserManaged.Replica}
@@ -1792,12 +1859,14 @@ public Builder setLocationBytes(com.google.protobuf.ByteString value) {
          *
          *
          * <pre>
-         * Optional. The customer-managed encryption configuration of the [User-Managed
-         * Replica][Replication.UserManaged.Replica]. If no configuration is
-         * provided, Google-managed default encryption is used.
-         * Updates to the [Secret][google.cloud.secretmanager.v1.Secret] encryption configuration only apply to
-         * [SecretVersions][google.cloud.secretmanager.v1.SecretVersion] added afterwards. They do not apply
-         * retroactively to existing [SecretVersions][google.cloud.secretmanager.v1.SecretVersion].
+         * Optional. The customer-managed encryption configuration of the
+         * [User-Managed Replica][Replication.UserManaged.Replica]. If no
+         * configuration is provided, Google-managed default encryption is used.
+         * Updates to the [Secret][google.cloud.secretmanager.v1.Secret]
+         * encryption configuration only apply to
+         * [SecretVersions][google.cloud.secretmanager.v1.SecretVersion] added
+         * afterwards. They do not apply retroactively to existing
+         * [SecretVersions][google.cloud.secretmanager.v1.SecretVersion].
          * </pre>
          *
          * <code>
@@ -1813,12 +1882,14 @@ public boolean hasCustomerManagedEncryption() {
          *
          *
          * <pre>
-         * Optional. The customer-managed encryption configuration of the [User-Managed
-         * Replica][Replication.UserManaged.Replica]. If no configuration is
-         * provided, Google-managed default encryption is used.
-         * Updates to the [Secret][google.cloud.secretmanager.v1.Secret] encryption configuration only apply to
-         * [SecretVersions][google.cloud.secretmanager.v1.SecretVersion] added afterwards. They do not apply
-         * retroactively to existing [SecretVersions][google.cloud.secretmanager.v1.SecretVersion].
+         * Optional. The customer-managed encryption configuration of the
+         * [User-Managed Replica][Replication.UserManaged.Replica]. If no
+         * configuration is provided, Google-managed default encryption is used.
+         * Updates to the [Secret][google.cloud.secretmanager.v1.Secret]
+         * encryption configuration only apply to
+         * [SecretVersions][google.cloud.secretmanager.v1.SecretVersion] added
+         * afterwards. They do not apply retroactively to existing
+         * [SecretVersions][google.cloud.secretmanager.v1.SecretVersion].
          * </pre>
          *
          * <code>
@@ -1841,12 +1912,14 @@ public boolean hasCustomerManagedEncryption() {
          *
          *
          * <pre>
-         * Optional. The customer-managed encryption configuration of the [User-Managed
-         * Replica][Replication.UserManaged.Replica]. If no configuration is
-         * provided, Google-managed default encryption is used.
-         * Updates to the [Secret][google.cloud.secretmanager.v1.Secret] encryption configuration only apply to
-         * [SecretVersions][google.cloud.secretmanager.v1.SecretVersion] added afterwards. They do not apply
-         * retroactively to existing [SecretVersions][google.cloud.secretmanager.v1.SecretVersion].
+         * Optional. The customer-managed encryption configuration of the
+         * [User-Managed Replica][Replication.UserManaged.Replica]. If no
+         * configuration is provided, Google-managed default encryption is used.
+         * Updates to the [Secret][google.cloud.secretmanager.v1.Secret]
+         * encryption configuration only apply to
+         * [SecretVersions][google.cloud.secretmanager.v1.SecretVersion] added
+         * afterwards. They do not apply retroactively to existing
+         * [SecretVersions][google.cloud.secretmanager.v1.SecretVersion].
          * </pre>
          *
          * <code>
@@ -1871,12 +1944,14 @@ public Builder setCustomerManagedEncryption(
          *
          *
          * <pre>
-         * Optional. The customer-managed encryption configuration of the [User-Managed
-         * Replica][Replication.UserManaged.Replica]. If no configuration is
-         * provided, Google-managed default encryption is used.
-         * Updates to the [Secret][google.cloud.secretmanager.v1.Secret] encryption configuration only apply to
-         * [SecretVersions][google.cloud.secretmanager.v1.SecretVersion] added afterwards. They do not apply
-         * retroactively to existing [SecretVersions][google.cloud.secretmanager.v1.SecretVersion].
+         * Optional. The customer-managed encryption configuration of the
+         * [User-Managed Replica][Replication.UserManaged.Replica]. If no
+         * configuration is provided, Google-managed default encryption is used.
+         * Updates to the [Secret][google.cloud.secretmanager.v1.Secret]
+         * encryption configuration only apply to
+         * [SecretVersions][google.cloud.secretmanager.v1.SecretVersion] added
+         * afterwards. They do not apply retroactively to existing
+         * [SecretVersions][google.cloud.secretmanager.v1.SecretVersion].
          * </pre>
          *
          * <code>
@@ -1898,12 +1973,14 @@ public Builder setCustomerManagedEncryption(
          *
          *
          * <pre>
-         * Optional. The customer-managed encryption configuration of the [User-Managed
-         * Replica][Replication.UserManaged.Replica]. If no configuration is
-         * provided, Google-managed default encryption is used.
-         * Updates to the [Secret][google.cloud.secretmanager.v1.Secret] encryption configuration only apply to
-         * [SecretVersions][google.cloud.secretmanager.v1.SecretVersion] added afterwards. They do not apply
-         * retroactively to existing [SecretVersions][google.cloud.secretmanager.v1.SecretVersion].
+         * Optional. The customer-managed encryption configuration of the
+         * [User-Managed Replica][Replication.UserManaged.Replica]. If no
+         * configuration is provided, Google-managed default encryption is used.
+         * Updates to the [Secret][google.cloud.secretmanager.v1.Secret]
+         * encryption configuration only apply to
+         * [SecretVersions][google.cloud.secretmanager.v1.SecretVersion] added
+         * afterwards. They do not apply retroactively to existing
+         * [SecretVersions][google.cloud.secretmanager.v1.SecretVersion].
          * </pre>
          *
          * <code>
@@ -1933,12 +2010,14 @@ public Builder mergeCustomerManagedEncryption(
          *
          *
          * <pre>
-         * Optional. The customer-managed encryption configuration of the [User-Managed
-         * Replica][Replication.UserManaged.Replica]. If no configuration is
-         * provided, Google-managed default encryption is used.
-         * Updates to the [Secret][google.cloud.secretmanager.v1.Secret] encryption configuration only apply to
-         * [SecretVersions][google.cloud.secretmanager.v1.SecretVersion] added afterwards. They do not apply
-         * retroactively to existing [SecretVersions][google.cloud.secretmanager.v1.SecretVersion].
+         * Optional. The customer-managed encryption configuration of the
+         * [User-Managed Replica][Replication.UserManaged.Replica]. If no
+         * configuration is provided, Google-managed default encryption is used.
+         * Updates to the [Secret][google.cloud.secretmanager.v1.Secret]
+         * encryption configuration only apply to
+         * [SecretVersions][google.cloud.secretmanager.v1.SecretVersion] added
+         * afterwards. They do not apply retroactively to existing
+         * [SecretVersions][google.cloud.secretmanager.v1.SecretVersion].
          * </pre>
          *
          * <code>
@@ -1960,12 +2039,14 @@ public Builder clearCustomerManagedEncryption() {
          *
          *
          * <pre>
-         * Optional. The customer-managed encryption configuration of the [User-Managed
-         * Replica][Replication.UserManaged.Replica]. If no configuration is
-         * provided, Google-managed default encryption is used.
-         * Updates to the [Secret][google.cloud.secretmanager.v1.Secret] encryption configuration only apply to
-         * [SecretVersions][google.cloud.secretmanager.v1.SecretVersion] added afterwards. They do not apply
-         * retroactively to existing [SecretVersions][google.cloud.secretmanager.v1.SecretVersion].
+         * Optional. The customer-managed encryption configuration of the
+         * [User-Managed Replica][Replication.UserManaged.Replica]. If no
+         * configuration is provided, Google-managed default encryption is used.
+         * Updates to the [Secret][google.cloud.secretmanager.v1.Secret]
+         * encryption configuration only apply to
+         * [SecretVersions][google.cloud.secretmanager.v1.SecretVersion] added
+         * afterwards. They do not apply retroactively to existing
+         * [SecretVersions][google.cloud.secretmanager.v1.SecretVersion].
          * </pre>
          *
          * <code>
@@ -1982,12 +2063,14 @@ public Builder clearCustomerManagedEncryption() {
          *
          *
          * <pre>
-         * Optional. The customer-managed encryption configuration of the [User-Managed
-         * Replica][Replication.UserManaged.Replica]. If no configuration is
-         * provided, Google-managed default encryption is used.
-         * Updates to the [Secret][google.cloud.secretmanager.v1.Secret] encryption configuration only apply to
-         * [SecretVersions][google.cloud.secretmanager.v1.SecretVersion] added afterwards. They do not apply
-         * retroactively to existing [SecretVersions][google.cloud.secretmanager.v1.SecretVersion].
+         * Optional. The customer-managed encryption configuration of the
+         * [User-Managed Replica][Replication.UserManaged.Replica]. If no
+         * configuration is provided, Google-managed default encryption is used.
+         * Updates to the [Secret][google.cloud.secretmanager.v1.Secret]
+         * encryption configuration only apply to
+         * [SecretVersions][google.cloud.secretmanager.v1.SecretVersion] added
+         * afterwards. They do not apply retroactively to existing
+         * [SecretVersions][google.cloud.secretmanager.v1.SecretVersion].
          * </pre>
          *
          * <code>
@@ -2008,12 +2091,14 @@ public Builder clearCustomerManagedEncryption() {
          *
          *
          * <pre>
-         * Optional. The customer-managed encryption configuration of the [User-Managed
-         * Replica][Replication.UserManaged.Replica]. If no configuration is
-         * provided, Google-managed default encryption is used.
-         * Updates to the [Secret][google.cloud.secretmanager.v1.Secret] encryption configuration only apply to
-         * [SecretVersions][google.cloud.secretmanager.v1.SecretVersion] added afterwards. They do not apply
-         * retroactively to existing [SecretVersions][google.cloud.secretmanager.v1.SecretVersion].
+         * Optional. The customer-managed encryption configuration of the
+         * [User-Managed Replica][Replication.UserManaged.Replica]. If no
+         * configuration is provided, Google-managed default encryption is used.
+         * Updates to the [Secret][google.cloud.secretmanager.v1.Secret]
+         * encryption configuration only apply to
+         * [SecretVersions][google.cloud.secretmanager.v1.SecretVersion] added
+         * afterwards. They do not apply retroactively to existing
+         * [SecretVersions][google.cloud.secretmanager.v1.SecretVersion].
          * </pre>
          *
          * <code>
@@ -2111,7 +2196,8 @@ public com.google.protobuf.Parser<Replica> getParserForType() {
      *
      *
      * <pre>
-     * Required. The list of Replicas for this [Secret][google.cloud.secretmanager.v1.Secret].
+     * Required. The list of Replicas for this
+     * [Secret][google.cloud.secretmanager.v1.Secret].
      * Cannot be empty.
      * </pre>
      *
@@ -2128,7 +2214,8 @@ public com.google.protobuf.Parser<Replica> getParserForType() {
      *
      *
      * <pre>
-     * Required. The list of Replicas for this [Secret][google.cloud.secretmanager.v1.Secret].
+     * Required. The list of Replicas for this
+     * [Secret][google.cloud.secretmanager.v1.Secret].
      * Cannot be empty.
      * </pre>
      *
@@ -2146,7 +2233,8 @@ public com.google.protobuf.Parser<Replica> getParserForType() {
      *
      *
      * <pre>
-     * Required. The list of Replicas for this [Secret][google.cloud.secretmanager.v1.Secret].
+     * Required. The list of Replicas for this
+     * [Secret][google.cloud.secretmanager.v1.Secret].
      * Cannot be empty.
      * </pre>
      *
@@ -2162,7 +2250,8 @@ public int getReplicasCount() {
      *
      *
      * <pre>
-     * Required. The list of Replicas for this [Secret][google.cloud.secretmanager.v1.Secret].
+     * Required. The list of Replicas for this
+     * [Secret][google.cloud.secretmanager.v1.Secret].
      * Cannot be empty.
      * </pre>
      *
@@ -2179,7 +2268,8 @@ public com.google.cloud.secretmanager.v1.Replication.UserManaged.Replica getRepl
      *
      *
      * <pre>
-     * Required. The list of Replicas for this [Secret][google.cloud.secretmanager.v1.Secret].
+     * Required. The list of Replicas for this
+     * [Secret][google.cloud.secretmanager.v1.Secret].
      * Cannot be empty.
      * </pre>
      *
@@ -2360,8 +2450,9 @@ protected Builder newBuilderForType(
      *
      *
      * <pre>
-     * A replication policy that replicates the [Secret][google.cloud.secretmanager.v1.Secret] payload into the
-     * locations specified in [Secret.replication.user_managed.replicas][]
+     * A replication policy that replicates the
+     * [Secret][google.cloud.secretmanager.v1.Secret] payload into the locations
+     * specified in [Secret.replication.user_managed.replicas][]
      * </pre>
      *
      * Protobuf type {@code google.cloud.secretmanager.v1.Replication.UserManaged}
@@ -2601,7 +2692,8 @@ private void ensureReplicasIsMutable() {
        *
        *
        * <pre>
-       * Required. The list of Replicas for this [Secret][google.cloud.secretmanager.v1.Secret].
+       * Required. The list of Replicas for this
+       * [Secret][google.cloud.secretmanager.v1.Secret].
        * Cannot be empty.
        * </pre>
        *
@@ -2621,7 +2713,8 @@ private void ensureReplicasIsMutable() {
        *
        *
        * <pre>
-       * Required. The list of Replicas for this [Secret][google.cloud.secretmanager.v1.Secret].
+       * Required. The list of Replicas for this
+       * [Secret][google.cloud.secretmanager.v1.Secret].
        * Cannot be empty.
        * </pre>
        *
@@ -2640,7 +2733,8 @@ public int getReplicasCount() {
        *
        *
        * <pre>
-       * Required. The list of Replicas for this [Secret][google.cloud.secretmanager.v1.Secret].
+       * Required. The list of Replicas for this
+       * [Secret][google.cloud.secretmanager.v1.Secret].
        * Cannot be empty.
        * </pre>
        *
@@ -2660,7 +2754,8 @@ public com.google.cloud.secretmanager.v1.Replication.UserManaged.Replica getRepl
        *
        *
        * <pre>
-       * Required. The list of Replicas for this [Secret][google.cloud.secretmanager.v1.Secret].
+       * Required. The list of Replicas for this
+       * [Secret][google.cloud.secretmanager.v1.Secret].
        * Cannot be empty.
        * </pre>
        *
@@ -2686,7 +2781,8 @@ public Builder setReplicas(
        *
        *
        * <pre>
-       * Required. The list of Replicas for this [Secret][google.cloud.secretmanager.v1.Secret].
+       * Required. The list of Replicas for this
+       * [Secret][google.cloud.secretmanager.v1.Secret].
        * Cannot be empty.
        * </pre>
        *
@@ -2711,7 +2807,8 @@ public Builder setReplicas(
        *
        *
        * <pre>
-       * Required. The list of Replicas for this [Secret][google.cloud.secretmanager.v1.Secret].
+       * Required. The list of Replicas for this
+       * [Secret][google.cloud.secretmanager.v1.Secret].
        * Cannot be empty.
        * </pre>
        *
@@ -2737,7 +2834,8 @@ public Builder addReplicas(
        *
        *
        * <pre>
-       * Required. The list of Replicas for this [Secret][google.cloud.secretmanager.v1.Secret].
+       * Required. The list of Replicas for this
+       * [Secret][google.cloud.secretmanager.v1.Secret].
        * Cannot be empty.
        * </pre>
        *
@@ -2763,7 +2861,8 @@ public Builder addReplicas(
        *
        *
        * <pre>
-       * Required. The list of Replicas for this [Secret][google.cloud.secretmanager.v1.Secret].
+       * Required. The list of Replicas for this
+       * [Secret][google.cloud.secretmanager.v1.Secret].
        * Cannot be empty.
        * </pre>
        *
@@ -2787,7 +2886,8 @@ public Builder addReplicas(
        *
        *
        * <pre>
-       * Required. The list of Replicas for this [Secret][google.cloud.secretmanager.v1.Secret].
+       * Required. The list of Replicas for this
+       * [Secret][google.cloud.secretmanager.v1.Secret].
        * Cannot be empty.
        * </pre>
        *
@@ -2812,7 +2912,8 @@ public Builder addReplicas(
        *
        *
        * <pre>
-       * Required. The list of Replicas for this [Secret][google.cloud.secretmanager.v1.Secret].
+       * Required. The list of Replicas for this
+       * [Secret][google.cloud.secretmanager.v1.Secret].
        * Cannot be empty.
        * </pre>
        *
@@ -2837,7 +2938,8 @@ public Builder addAllReplicas(
        *
        *
        * <pre>
-       * Required. The list of Replicas for this [Secret][google.cloud.secretmanager.v1.Secret].
+       * Required. The list of Replicas for this
+       * [Secret][google.cloud.secretmanager.v1.Secret].
        * Cannot be empty.
        * </pre>
        *
@@ -2859,7 +2961,8 @@ public Builder clearReplicas() {
        *
        *
        * <pre>
-       * Required. The list of Replicas for this [Secret][google.cloud.secretmanager.v1.Secret].
+       * Required. The list of Replicas for this
+       * [Secret][google.cloud.secretmanager.v1.Secret].
        * Cannot be empty.
        * </pre>
        *
@@ -2881,7 +2984,8 @@ public Builder removeReplicas(int index) {
        *
        *
        * <pre>
-       * Required. The list of Replicas for this [Secret][google.cloud.secretmanager.v1.Secret].
+       * Required. The list of Replicas for this
+       * [Secret][google.cloud.secretmanager.v1.Secret].
        * Cannot be empty.
        * </pre>
        *
@@ -2897,7 +3001,8 @@ public Builder removeReplicas(int index) {
        *
        *
        * <pre>
-       * Required. The list of Replicas for this [Secret][google.cloud.secretmanager.v1.Secret].
+       * Required. The list of Replicas for this
+       * [Secret][google.cloud.secretmanager.v1.Secret].
        * Cannot be empty.
        * </pre>
        *
@@ -2917,7 +3022,8 @@ public Builder removeReplicas(int index) {
        *
        *
        * <pre>
-       * Required. The list of Replicas for this [Secret][google.cloud.secretmanager.v1.Secret].
+       * Required. The list of Replicas for this
+       * [Secret][google.cloud.secretmanager.v1.Secret].
        * Cannot be empty.
        * </pre>
        *
@@ -2938,7 +3044,8 @@ public Builder removeReplicas(int index) {
        *
        *
        * <pre>
-       * Required. The list of Replicas for this [Secret][google.cloud.secretmanager.v1.Secret].
+       * Required. The list of Replicas for this
+       * [Secret][google.cloud.secretmanager.v1.Secret].
        * Cannot be empty.
        * </pre>
        *
@@ -2957,7 +3064,8 @@ public Builder removeReplicas(int index) {
        *
        *
        * <pre>
-       * Required. The list of Replicas for this [Secret][google.cloud.secretmanager.v1.Secret].
+       * Required. The list of Replicas for this
+       * [Secret][google.cloud.secretmanager.v1.Secret].
        * Cannot be empty.
        * </pre>
        *
@@ -2977,7 +3085,8 @@ public Builder removeReplicas(int index) {
        *
        *
        * <pre>
-       * Required. The list of Replicas for this [Secret][google.cloud.secretmanager.v1.Secret].
+       * Required. The list of Replicas for this
+       * [Secret][google.cloud.secretmanager.v1.Secret].
        * Cannot be empty.
        * </pre>
        *
@@ -3124,7 +3233,8 @@ public ReplicationCase getReplicationCase() {
    *
    *
    * <pre>
-   * The [Secret][google.cloud.secretmanager.v1.Secret] will automatically be replicated without any restrictions.
+   * The [Secret][google.cloud.secretmanager.v1.Secret] will automatically be
+   * replicated without any restrictions.
    * </pre>
    *
    * <code>.google.cloud.secretmanager.v1.Replication.Automatic automatic = 1;</code>
@@ -3139,7 +3249,8 @@ public boolean hasAutomatic() {
    *
    *
    * <pre>
-   * The [Secret][google.cloud.secretmanager.v1.Secret] will automatically be replicated without any restrictions.
+   * The [Secret][google.cloud.secretmanager.v1.Secret] will automatically be
+   * replicated without any restrictions.
    * </pre>
    *
    * <code>.google.cloud.secretmanager.v1.Replication.Automatic automatic = 1;</code>
@@ -3157,7 +3268,8 @@ public com.google.cloud.secretmanager.v1.Replication.Automatic getAutomatic() {
    *
    *
    * <pre>
-   * The [Secret][google.cloud.secretmanager.v1.Secret] will automatically be replicated without any restrictions.
+   * The [Secret][google.cloud.secretmanager.v1.Secret] will automatically be
+   * replicated without any restrictions.
    * </pre>
    *
    * <code>.google.cloud.secretmanager.v1.Replication.Automatic automatic = 1;</code>
@@ -3175,7 +3287,8 @@ public com.google.cloud.secretmanager.v1.Replication.AutomaticOrBuilder getAutom
    *
    *
    * <pre>
-   * The [Secret][google.cloud.secretmanager.v1.Secret] will only be replicated into the locations specified.
+   * The [Secret][google.cloud.secretmanager.v1.Secret] will only be
+   * replicated into the locations specified.
    * </pre>
    *
    * <code>.google.cloud.secretmanager.v1.Replication.UserManaged user_managed = 2;</code>
@@ -3190,7 +3303,8 @@ public boolean hasUserManaged() {
    *
    *
    * <pre>
-   * The [Secret][google.cloud.secretmanager.v1.Secret] will only be replicated into the locations specified.
+   * The [Secret][google.cloud.secretmanager.v1.Secret] will only be
+   * replicated into the locations specified.
    * </pre>
    *
    * <code>.google.cloud.secretmanager.v1.Replication.UserManaged user_managed = 2;</code>
@@ -3208,7 +3322,8 @@ public com.google.cloud.secretmanager.v1.Replication.UserManaged getUserManaged(
    *
    *
    * <pre>
-   * The [Secret][google.cloud.secretmanager.v1.Secret] will only be replicated into the locations specified.
+   * The [Secret][google.cloud.secretmanager.v1.Secret] will only be
+   * replicated into the locations specified.
    * </pre>
    *
    * <code>.google.cloud.secretmanager.v1.Replication.UserManaged user_managed = 2;</code>
@@ -3644,7 +3759,8 @@ public Builder clearReplication() {
      *
      *
      * <pre>
-     * The [Secret][google.cloud.secretmanager.v1.Secret] will automatically be replicated without any restrictions.
+     * The [Secret][google.cloud.secretmanager.v1.Secret] will automatically be
+     * replicated without any restrictions.
      * </pre>
      *
      * <code>.google.cloud.secretmanager.v1.Replication.Automatic automatic = 1;</code>
@@ -3659,7 +3775,8 @@ public boolean hasAutomatic() {
      *
      *
      * <pre>
-     * The [Secret][google.cloud.secretmanager.v1.Secret] will automatically be replicated without any restrictions.
+     * The [Secret][google.cloud.secretmanager.v1.Secret] will automatically be
+     * replicated without any restrictions.
      * </pre>
      *
      * <code>.google.cloud.secretmanager.v1.Replication.Automatic automatic = 1;</code>
@@ -3684,7 +3801,8 @@ public com.google.cloud.secretmanager.v1.Replication.Automatic getAutomatic() {
      *
      *
      * <pre>
-     * The [Secret][google.cloud.secretmanager.v1.Secret] will automatically be replicated without any restrictions.
+     * The [Secret][google.cloud.secretmanager.v1.Secret] will automatically be
+     * replicated without any restrictions.
      * </pre>
      *
      * <code>.google.cloud.secretmanager.v1.Replication.Automatic automatic = 1;</code>
@@ -3706,7 +3824,8 @@ public Builder setAutomatic(com.google.cloud.secretmanager.v1.Replication.Automa
      *
      *
      * <pre>
-     * The [Secret][google.cloud.secretmanager.v1.Secret] will automatically be replicated without any restrictions.
+     * The [Secret][google.cloud.secretmanager.v1.Secret] will automatically be
+     * replicated without any restrictions.
      * </pre>
      *
      * <code>.google.cloud.secretmanager.v1.Replication.Automatic automatic = 1;</code>
@@ -3726,7 +3845,8 @@ public Builder setAutomatic(
      *
      *
      * <pre>
-     * The [Secret][google.cloud.secretmanager.v1.Secret] will automatically be replicated without any restrictions.
+     * The [Secret][google.cloud.secretmanager.v1.Secret] will automatically be
+     * replicated without any restrictions.
      * </pre>
      *
      * <code>.google.cloud.secretmanager.v1.Replication.Automatic automatic = 1;</code>
@@ -3759,7 +3879,8 @@ public Builder mergeAutomatic(com.google.cloud.secretmanager.v1.Replication.Auto
      *
      *
      * <pre>
-     * The [Secret][google.cloud.secretmanager.v1.Secret] will automatically be replicated without any restrictions.
+     * The [Secret][google.cloud.secretmanager.v1.Secret] will automatically be
+     * replicated without any restrictions.
      * </pre>
      *
      * <code>.google.cloud.secretmanager.v1.Replication.Automatic automatic = 1;</code>
@@ -3784,7 +3905,8 @@ public Builder clearAutomatic() {
      *
      *
      * <pre>
-     * The [Secret][google.cloud.secretmanager.v1.Secret] will automatically be replicated without any restrictions.
+     * The [Secret][google.cloud.secretmanager.v1.Secret] will automatically be
+     * replicated without any restrictions.
      * </pre>
      *
      * <code>.google.cloud.secretmanager.v1.Replication.Automatic automatic = 1;</code>
@@ -3796,7 +3918,8 @@ public com.google.cloud.secretmanager.v1.Replication.Automatic.Builder getAutoma
      *
      *
      * <pre>
-     * The [Secret][google.cloud.secretmanager.v1.Secret] will automatically be replicated without any restrictions.
+     * The [Secret][google.cloud.secretmanager.v1.Secret] will automatically be
+     * replicated without any restrictions.
      * </pre>
      *
      * <code>.google.cloud.secretmanager.v1.Replication.Automatic automatic = 1;</code>
@@ -3817,7 +3940,8 @@ public com.google.cloud.secretmanager.v1.Replication.Automatic.Builder getAutoma
      *
      *
      * <pre>
-     * The [Secret][google.cloud.secretmanager.v1.Secret] will automatically be replicated without any restrictions.
+     * The [Secret][google.cloud.secretmanager.v1.Secret] will automatically be
+     * replicated without any restrictions.
      * </pre>
      *
      * <code>.google.cloud.secretmanager.v1.Replication.Automatic automatic = 1;</code>
@@ -3857,7 +3981,8 @@ public com.google.cloud.secretmanager.v1.Replication.Automatic.Builder getAutoma
      *
      *
      * <pre>
-     * The [Secret][google.cloud.secretmanager.v1.Secret] will only be replicated into the locations specified.
+     * The [Secret][google.cloud.secretmanager.v1.Secret] will only be
+     * replicated into the locations specified.
      * </pre>
      *
      * <code>.google.cloud.secretmanager.v1.Replication.UserManaged user_managed = 2;</code>
@@ -3872,7 +3997,8 @@ public boolean hasUserManaged() {
      *
      *
      * <pre>
-     * The [Secret][google.cloud.secretmanager.v1.Secret] will only be replicated into the locations specified.
+     * The [Secret][google.cloud.secretmanager.v1.Secret] will only be
+     * replicated into the locations specified.
      * </pre>
      *
      * <code>.google.cloud.secretmanager.v1.Replication.UserManaged user_managed = 2;</code>
@@ -3897,7 +4023,8 @@ public com.google.cloud.secretmanager.v1.Replication.UserManaged getUserManaged(
      *
      *
      * <pre>
-     * The [Secret][google.cloud.secretmanager.v1.Secret] will only be replicated into the locations specified.
+     * The [Secret][google.cloud.secretmanager.v1.Secret] will only be
+     * replicated into the locations specified.
      * </pre>
      *
      * <code>.google.cloud.secretmanager.v1.Replication.UserManaged user_managed = 2;</code>
@@ -3919,7 +4046,8 @@ public Builder setUserManaged(com.google.cloud.secretmanager.v1.Replication.User
      *
      *
      * <pre>
-     * The [Secret][google.cloud.secretmanager.v1.Secret] will only be replicated into the locations specified.
+     * The [Secret][google.cloud.secretmanager.v1.Secret] will only be
+     * replicated into the locations specified.
      * </pre>
      *
      * <code>.google.cloud.secretmanager.v1.Replication.UserManaged user_managed = 2;</code>
@@ -3939,7 +4067,8 @@ public Builder setUserManaged(
      *
      *
      * <pre>
-     * The [Secret][google.cloud.secretmanager.v1.Secret] will only be replicated into the locations specified.
+     * The [Secret][google.cloud.secretmanager.v1.Secret] will only be
+     * replicated into the locations specified.
      * </pre>
      *
      * <code>.google.cloud.secretmanager.v1.Replication.UserManaged user_managed = 2;</code>
@@ -3973,7 +4102,8 @@ public Builder mergeUserManaged(
      *
      *
      * <pre>
-     * The [Secret][google.cloud.secretmanager.v1.Secret] will only be replicated into the locations specified.
+     * The [Secret][google.cloud.secretmanager.v1.Secret] will only be
+     * replicated into the locations specified.
      * </pre>
      *
      * <code>.google.cloud.secretmanager.v1.Replication.UserManaged user_managed = 2;</code>
@@ -3998,7 +4128,8 @@ public Builder clearUserManaged() {
      *
      *
      * <pre>
-     * The [Secret][google.cloud.secretmanager.v1.Secret] will only be replicated into the locations specified.
+     * The [Secret][google.cloud.secretmanager.v1.Secret] will only be
+     * replicated into the locations specified.
      * </pre>
      *
      * <code>.google.cloud.secretmanager.v1.Replication.UserManaged user_managed = 2;</code>
@@ -4011,7 +4142,8 @@ public Builder clearUserManaged() {
      *
      *
      * <pre>
-     * The [Secret][google.cloud.secretmanager.v1.Secret] will only be replicated into the locations specified.
+     * The [Secret][google.cloud.secretmanager.v1.Secret] will only be
+     * replicated into the locations specified.
      * </pre>
      *
      * <code>.google.cloud.secretmanager.v1.Replication.UserManaged user_managed = 2;</code>
@@ -4032,7 +4164,8 @@ public Builder clearUserManaged() {
      *
      *
      * <pre>
-     * The [Secret][google.cloud.secretmanager.v1.Secret] will only be replicated into the locations specified.
+     * The [Secret][google.cloud.secretmanager.v1.Secret] will only be
+     * replicated into the locations specified.
      * </pre>
      *
      * <code>.google.cloud.secretmanager.v1.Replication.UserManaged user_managed = 2;</code>
diff --git a/java-secretmanager/proto-google-cloud-secretmanager-v1/src/main/java/com/google/cloud/secretmanager/v1/ReplicationOrBuilder.java b/java-secretmanager/proto-google-cloud-secretmanager-v1/src/main/java/com/google/cloud/secretmanager/v1/ReplicationOrBuilder.java
index 0c4c002d409a..f167d4bb6a9c 100644
--- a/java-secretmanager/proto-google-cloud-secretmanager-v1/src/main/java/com/google/cloud/secretmanager/v1/ReplicationOrBuilder.java
+++ b/java-secretmanager/proto-google-cloud-secretmanager-v1/src/main/java/com/google/cloud/secretmanager/v1/ReplicationOrBuilder.java
@@ -27,7 +27,8 @@ public interface ReplicationOrBuilder
    *
    *
    * <pre>
-   * The [Secret][google.cloud.secretmanager.v1.Secret] will automatically be replicated without any restrictions.
+   * The [Secret][google.cloud.secretmanager.v1.Secret] will automatically be
+   * replicated without any restrictions.
    * </pre>
    *
    * <code>.google.cloud.secretmanager.v1.Replication.Automatic automatic = 1;</code>
@@ -39,7 +40,8 @@ public interface ReplicationOrBuilder
    *
    *
    * <pre>
-   * The [Secret][google.cloud.secretmanager.v1.Secret] will automatically be replicated without any restrictions.
+   * The [Secret][google.cloud.secretmanager.v1.Secret] will automatically be
+   * replicated without any restrictions.
    * </pre>
    *
    * <code>.google.cloud.secretmanager.v1.Replication.Automatic automatic = 1;</code>
@@ -51,7 +53,8 @@ public interface ReplicationOrBuilder
    *
    *
    * <pre>
-   * The [Secret][google.cloud.secretmanager.v1.Secret] will automatically be replicated without any restrictions.
+   * The [Secret][google.cloud.secretmanager.v1.Secret] will automatically be
+   * replicated without any restrictions.
    * </pre>
    *
    * <code>.google.cloud.secretmanager.v1.Replication.Automatic automatic = 1;</code>
@@ -62,7 +65,8 @@ public interface ReplicationOrBuilder
    *
    *
    * <pre>
-   * The [Secret][google.cloud.secretmanager.v1.Secret] will only be replicated into the locations specified.
+   * The [Secret][google.cloud.secretmanager.v1.Secret] will only be
+   * replicated into the locations specified.
    * </pre>
    *
    * <code>.google.cloud.secretmanager.v1.Replication.UserManaged user_managed = 2;</code>
@@ -74,7 +78,8 @@ public interface ReplicationOrBuilder
    *
    *
    * <pre>
-   * The [Secret][google.cloud.secretmanager.v1.Secret] will only be replicated into the locations specified.
+   * The [Secret][google.cloud.secretmanager.v1.Secret] will only be
+   * replicated into the locations specified.
    * </pre>
    *
    * <code>.google.cloud.secretmanager.v1.Replication.UserManaged user_managed = 2;</code>
@@ -86,7 +91,8 @@ public interface ReplicationOrBuilder
    *
    *
    * <pre>
-   * The [Secret][google.cloud.secretmanager.v1.Secret] will only be replicated into the locations specified.
+   * The [Secret][google.cloud.secretmanager.v1.Secret] will only be
+   * replicated into the locations specified.
    * </pre>
    *
    * <code>.google.cloud.secretmanager.v1.Replication.UserManaged user_managed = 2;</code>
diff --git a/java-secretmanager/proto-google-cloud-secretmanager-v1/src/main/java/com/google/cloud/secretmanager/v1/ReplicationStatus.java b/java-secretmanager/proto-google-cloud-secretmanager-v1/src/main/java/com/google/cloud/secretmanager/v1/ReplicationStatus.java
index 46c7945ddb46..755727391b2f 100644
--- a/java-secretmanager/proto-google-cloud-secretmanager-v1/src/main/java/com/google/cloud/secretmanager/v1/ReplicationStatus.java
+++ b/java-secretmanager/proto-google-cloud-secretmanager-v1/src/main/java/com/google/cloud/secretmanager/v1/ReplicationStatus.java
@@ -22,7 +22,8 @@
  *
  *
  * <pre>
- * The replication status of a [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
+ * The replication status of a
+ * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
  * </pre>
  *
  * Protobuf type {@code google.cloud.secretmanager.v1.ReplicationStatus}
@@ -74,7 +75,8 @@ public interface AutomaticStatusOrBuilder
      *
      *
      * <pre>
-     * Output only. The customer-managed encryption status of the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion]. Only
+     * Output only. The customer-managed encryption status of the
+     * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion]. Only
      * populated if customer-managed encryption is used.
      * </pre>
      *
@@ -89,7 +91,8 @@ public interface AutomaticStatusOrBuilder
      *
      *
      * <pre>
-     * Output only. The customer-managed encryption status of the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion]. Only
+     * Output only. The customer-managed encryption status of the
+     * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion]. Only
      * populated if customer-managed encryption is used.
      * </pre>
      *
@@ -105,7 +108,8 @@ public interface AutomaticStatusOrBuilder
      *
      *
      * <pre>
-     * Output only. The customer-managed encryption status of the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion]. Only
+     * Output only. The customer-managed encryption status of the
+     * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion]. Only
      * populated if customer-managed encryption is used.
      * </pre>
      *
@@ -120,9 +124,11 @@ public interface AutomaticStatusOrBuilder
    *
    *
    * <pre>
-   * The replication status of a [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] using automatic replication.
-   * Only populated if the parent [Secret][google.cloud.secretmanager.v1.Secret] has an automatic replication
-   * policy.
+   * The replication status of a
+   * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] using
+   * automatic replication.
+   * Only populated if the parent [Secret][google.cloud.secretmanager.v1.Secret]
+   * has an automatic replication policy.
    * </pre>
    *
    * Protobuf type {@code google.cloud.secretmanager.v1.ReplicationStatus.AutomaticStatus}
@@ -172,7 +178,8 @@ public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
      *
      *
      * <pre>
-     * Output only. The customer-managed encryption status of the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion]. Only
+     * Output only. The customer-managed encryption status of the
+     * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion]. Only
      * populated if customer-managed encryption is used.
      * </pre>
      *
@@ -190,7 +197,8 @@ public boolean hasCustomerManagedEncryption() {
      *
      *
      * <pre>
-     * Output only. The customer-managed encryption status of the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion]. Only
+     * Output only. The customer-managed encryption status of the
+     * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion]. Only
      * populated if customer-managed encryption is used.
      * </pre>
      *
@@ -211,7 +219,8 @@ public boolean hasCustomerManagedEncryption() {
      *
      *
      * <pre>
-     * Output only. The customer-managed encryption status of the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion]. Only
+     * Output only. The customer-managed encryption status of the
+     * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion]. Only
      * populated if customer-managed encryption is used.
      * </pre>
      *
@@ -399,9 +408,11 @@ protected Builder newBuilderForType(
      *
      *
      * <pre>
-     * The replication status of a [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] using automatic replication.
-     * Only populated if the parent [Secret][google.cloud.secretmanager.v1.Secret] has an automatic replication
-     * policy.
+     * The replication status of a
+     * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] using
+     * automatic replication.
+     * Only populated if the parent [Secret][google.cloud.secretmanager.v1.Secret]
+     * has an automatic replication policy.
      * </pre>
      *
      * Protobuf type {@code google.cloud.secretmanager.v1.ReplicationStatus.AutomaticStatus}
@@ -596,7 +607,8 @@ public Builder mergeFrom(
        *
        *
        * <pre>
-       * Output only. The customer-managed encryption status of the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion]. Only
+       * Output only. The customer-managed encryption status of the
+       * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion]. Only
        * populated if customer-managed encryption is used.
        * </pre>
        *
@@ -613,7 +625,8 @@ public boolean hasCustomerManagedEncryption() {
        *
        *
        * <pre>
-       * Output only. The customer-managed encryption status of the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion]. Only
+       * Output only. The customer-managed encryption status of the
+       * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion]. Only
        * populated if customer-managed encryption is used.
        * </pre>
        *
@@ -638,7 +651,8 @@ public boolean hasCustomerManagedEncryption() {
        *
        *
        * <pre>
-       * Output only. The customer-managed encryption status of the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion]. Only
+       * Output only. The customer-managed encryption status of the
+       * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion]. Only
        * populated if customer-managed encryption is used.
        * </pre>
        *
@@ -664,7 +678,8 @@ public Builder setCustomerManagedEncryption(
        *
        *
        * <pre>
-       * Output only. The customer-managed encryption status of the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion]. Only
+       * Output only. The customer-managed encryption status of the
+       * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion]. Only
        * populated if customer-managed encryption is used.
        * </pre>
        *
@@ -688,7 +703,8 @@ public Builder setCustomerManagedEncryption(
        *
        *
        * <pre>
-       * Output only. The customer-managed encryption status of the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion]. Only
+       * Output only. The customer-managed encryption status of the
+       * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion]. Only
        * populated if customer-managed encryption is used.
        * </pre>
        *
@@ -719,7 +735,8 @@ public Builder mergeCustomerManagedEncryption(
        *
        *
        * <pre>
-       * Output only. The customer-managed encryption status of the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion]. Only
+       * Output only. The customer-managed encryption status of the
+       * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion]. Only
        * populated if customer-managed encryption is used.
        * </pre>
        *
@@ -742,7 +759,8 @@ public Builder clearCustomerManagedEncryption() {
        *
        *
        * <pre>
-       * Output only. The customer-managed encryption status of the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion]. Only
+       * Output only. The customer-managed encryption status of the
+       * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion]. Only
        * populated if customer-managed encryption is used.
        * </pre>
        *
@@ -760,7 +778,8 @@ public Builder clearCustomerManagedEncryption() {
        *
        *
        * <pre>
-       * Output only. The customer-managed encryption status of the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion]. Only
+       * Output only. The customer-managed encryption status of the
+       * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion]. Only
        * populated if customer-managed encryption is used.
        * </pre>
        *
@@ -783,7 +802,8 @@ public Builder clearCustomerManagedEncryption() {
        *
        *
        * <pre>
-       * Output only. The customer-managed encryption status of the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion]. Only
+       * Output only. The customer-managed encryption status of the
+       * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion]. Only
        * populated if customer-managed encryption is used.
        * </pre>
        *
@@ -884,7 +904,8 @@ public interface UserManagedStatusOrBuilder
      *
      *
      * <pre>
-     * Output only. The list of replica statuses for the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
+     * Output only. The list of replica statuses for the
+     * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
      * </pre>
      *
      * <code>
@@ -898,7 +919,8 @@ public interface UserManagedStatusOrBuilder
      *
      *
      * <pre>
-     * Output only. The list of replica statuses for the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
+     * Output only. The list of replica statuses for the
+     * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
      * </pre>
      *
      * <code>
@@ -911,7 +933,8 @@ com.google.cloud.secretmanager.v1.ReplicationStatus.UserManagedStatus.ReplicaSta
      *
      *
      * <pre>
-     * Output only. The list of replica statuses for the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
+     * Output only. The list of replica statuses for the
+     * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
      * </pre>
      *
      * <code>
@@ -923,7 +946,8 @@ com.google.cloud.secretmanager.v1.ReplicationStatus.UserManagedStatus.ReplicaSta
      *
      *
      * <pre>
-     * Output only. The list of replica statuses for the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
+     * Output only. The list of replica statuses for the
+     * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
      * </pre>
      *
      * <code>
@@ -939,7 +963,8 @@ com.google.cloud.secretmanager.v1.ReplicationStatus.UserManagedStatus.ReplicaSta
      *
      *
      * <pre>
-     * Output only. The list of replica statuses for the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
+     * Output only. The list of replica statuses for the
+     * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
      * </pre>
      *
      * <code>
@@ -953,10 +978,11 @@ com.google.cloud.secretmanager.v1.ReplicationStatus.UserManagedStatus.ReplicaSta
    *
    *
    * <pre>
-   * The replication status of a [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] using user-managed
-   * replication.
-   * Only populated if the parent [Secret][google.cloud.secretmanager.v1.Secret] has a user-managed replication
-   * policy.
+   * The replication status of a
+   * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] using
+   * user-managed replication.
+   * Only populated if the parent [Secret][google.cloud.secretmanager.v1.Secret]
+   * has a user-managed replication policy.
    * </pre>
    *
    * Protobuf type {@code google.cloud.secretmanager.v1.ReplicationStatus.UserManagedStatus}
@@ -1037,7 +1063,8 @@ public interface ReplicaStatusOrBuilder
        *
        *
        * <pre>
-       * Output only. The customer-managed encryption status of the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion]. Only
+       * Output only. The customer-managed encryption status of the
+       * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion]. Only
        * populated if customer-managed encryption is used.
        * </pre>
        *
@@ -1052,7 +1079,8 @@ public interface ReplicaStatusOrBuilder
        *
        *
        * <pre>
-       * Output only. The customer-managed encryption status of the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion]. Only
+       * Output only. The customer-managed encryption status of the
+       * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion]. Only
        * populated if customer-managed encryption is used.
        * </pre>
        *
@@ -1068,7 +1096,8 @@ public interface ReplicaStatusOrBuilder
        *
        *
        * <pre>
-       * Output only. The customer-managed encryption status of the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion]. Only
+       * Output only. The customer-managed encryption status of the
+       * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion]. Only
        * populated if customer-managed encryption is used.
        * </pre>
        *
@@ -1083,7 +1112,8 @@ public interface ReplicaStatusOrBuilder
      *
      *
      * <pre>
-     * Describes the status of a user-managed replica for the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
+     * Describes the status of a user-managed replica for the
+     * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
      * </pre>
      *
      * Protobuf type {@code
@@ -1189,7 +1219,8 @@ public com.google.protobuf.ByteString getLocationBytes() {
        *
        *
        * <pre>
-       * Output only. The customer-managed encryption status of the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion]. Only
+       * Output only. The customer-managed encryption status of the
+       * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion]. Only
        * populated if customer-managed encryption is used.
        * </pre>
        *
@@ -1207,7 +1238,8 @@ public boolean hasCustomerManagedEncryption() {
        *
        *
        * <pre>
-       * Output only. The customer-managed encryption status of the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion]. Only
+       * Output only. The customer-managed encryption status of the
+       * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion]. Only
        * populated if customer-managed encryption is used.
        * </pre>
        *
@@ -1228,7 +1260,8 @@ public boolean hasCustomerManagedEncryption() {
        *
        *
        * <pre>
-       * Output only. The customer-managed encryption status of the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion]. Only
+       * Output only. The customer-managed encryption status of the
+       * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion]. Only
        * populated if customer-managed encryption is used.
        * </pre>
        *
@@ -1448,7 +1481,8 @@ protected Builder newBuilderForType(
        *
        *
        * <pre>
-       * Describes the status of a user-managed replica for the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
+       * Describes the status of a user-managed replica for the
+       * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
        * </pre>
        *
        * Protobuf type {@code
@@ -1781,7 +1815,8 @@ public Builder setLocationBytes(com.google.protobuf.ByteString value) {
          *
          *
          * <pre>
-         * Output only. The customer-managed encryption status of the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion]. Only
+         * Output only. The customer-managed encryption status of the
+         * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion]. Only
          * populated if customer-managed encryption is used.
          * </pre>
          *
@@ -1798,7 +1833,8 @@ public boolean hasCustomerManagedEncryption() {
          *
          *
          * <pre>
-         * Output only. The customer-managed encryption status of the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion]. Only
+         * Output only. The customer-managed encryption status of the
+         * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion]. Only
          * populated if customer-managed encryption is used.
          * </pre>
          *
@@ -1823,7 +1859,8 @@ public boolean hasCustomerManagedEncryption() {
          *
          *
          * <pre>
-         * Output only. The customer-managed encryption status of the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion]. Only
+         * Output only. The customer-managed encryption status of the
+         * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion]. Only
          * populated if customer-managed encryption is used.
          * </pre>
          *
@@ -1849,7 +1886,8 @@ public Builder setCustomerManagedEncryption(
          *
          *
          * <pre>
-         * Output only. The customer-managed encryption status of the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion]. Only
+         * Output only. The customer-managed encryption status of the
+         * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion]. Only
          * populated if customer-managed encryption is used.
          * </pre>
          *
@@ -1873,7 +1911,8 @@ public Builder setCustomerManagedEncryption(
          *
          *
          * <pre>
-         * Output only. The customer-managed encryption status of the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion]. Only
+         * Output only. The customer-managed encryption status of the
+         * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion]. Only
          * populated if customer-managed encryption is used.
          * </pre>
          *
@@ -1904,7 +1943,8 @@ public Builder mergeCustomerManagedEncryption(
          *
          *
          * <pre>
-         * Output only. The customer-managed encryption status of the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion]. Only
+         * Output only. The customer-managed encryption status of the
+         * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion]. Only
          * populated if customer-managed encryption is used.
          * </pre>
          *
@@ -1927,7 +1967,8 @@ public Builder clearCustomerManagedEncryption() {
          *
          *
          * <pre>
-         * Output only. The customer-managed encryption status of the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion]. Only
+         * Output only. The customer-managed encryption status of the
+         * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion]. Only
          * populated if customer-managed encryption is used.
          * </pre>
          *
@@ -1945,7 +1986,8 @@ public Builder clearCustomerManagedEncryption() {
          *
          *
          * <pre>
-         * Output only. The customer-managed encryption status of the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion]. Only
+         * Output only. The customer-managed encryption status of the
+         * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion]. Only
          * populated if customer-managed encryption is used.
          * </pre>
          *
@@ -1968,7 +2010,8 @@ public Builder clearCustomerManagedEncryption() {
          *
          *
          * <pre>
-         * Output only. The customer-managed encryption status of the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion]. Only
+         * Output only. The customer-managed encryption status of the
+         * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion]. Only
          * populated if customer-managed encryption is used.
          * </pre>
          *
@@ -2072,7 +2115,8 @@ public com.google.protobuf.Parser<ReplicaStatus> getParserForType() {
      *
      *
      * <pre>
-     * Output only. The list of replica statuses for the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
+     * Output only. The list of replica statuses for the
+     * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
      * </pre>
      *
      * <code>
@@ -2089,7 +2133,8 @@ public com.google.protobuf.Parser<ReplicaStatus> getParserForType() {
      *
      *
      * <pre>
-     * Output only. The list of replica statuses for the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
+     * Output only. The list of replica statuses for the
+     * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
      * </pre>
      *
      * <code>
@@ -2108,7 +2153,8 @@ public com.google.protobuf.Parser<ReplicaStatus> getParserForType() {
      *
      *
      * <pre>
-     * Output only. The list of replica statuses for the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
+     * Output only. The list of replica statuses for the
+     * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
      * </pre>
      *
      * <code>
@@ -2123,7 +2169,8 @@ public int getReplicasCount() {
      *
      *
      * <pre>
-     * Output only. The list of replica statuses for the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
+     * Output only. The list of replica statuses for the
+     * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
      * </pre>
      *
      * <code>
@@ -2139,7 +2186,8 @@ public int getReplicasCount() {
      *
      *
      * <pre>
-     * Output only. The list of replica statuses for the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
+     * Output only. The list of replica statuses for the
+     * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
      * </pre>
      *
      * <code>
@@ -2321,10 +2369,11 @@ protected Builder newBuilderForType(
      *
      *
      * <pre>
-     * The replication status of a [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] using user-managed
-     * replication.
-     * Only populated if the parent [Secret][google.cloud.secretmanager.v1.Secret] has a user-managed replication
-     * policy.
+     * The replication status of a
+     * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] using
+     * user-managed replication.
+     * Only populated if the parent [Secret][google.cloud.secretmanager.v1.Secret]
+     * has a user-managed replication policy.
      * </pre>
      *
      * Protobuf type {@code google.cloud.secretmanager.v1.ReplicationStatus.UserManagedStatus}
@@ -2579,7 +2628,8 @@ private void ensureReplicasIsMutable() {
        *
        *
        * <pre>
-       * Output only. The list of replica statuses for the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
+       * Output only. The list of replica statuses for the
+       * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
        * </pre>
        *
        * <code>
@@ -2599,7 +2649,8 @@ private void ensureReplicasIsMutable() {
        *
        *
        * <pre>
-       * Output only. The list of replica statuses for the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
+       * Output only. The list of replica statuses for the
+       * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
        * </pre>
        *
        * <code>
@@ -2617,7 +2668,8 @@ public int getReplicasCount() {
        *
        *
        * <pre>
-       * Output only. The list of replica statuses for the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
+       * Output only. The list of replica statuses for the
+       * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
        * </pre>
        *
        * <code>
@@ -2636,7 +2688,8 @@ public int getReplicasCount() {
        *
        *
        * <pre>
-       * Output only. The list of replica statuses for the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
+       * Output only. The list of replica statuses for the
+       * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
        * </pre>
        *
        * <code>
@@ -2663,7 +2716,8 @@ public Builder setReplicas(
        *
        *
        * <pre>
-       * Output only. The list of replica statuses for the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
+       * Output only. The list of replica statuses for the
+       * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
        * </pre>
        *
        * <code>
@@ -2688,7 +2742,8 @@ public Builder setReplicas(
        *
        *
        * <pre>
-       * Output only. The list of replica statuses for the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
+       * Output only. The list of replica statuses for the
+       * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
        * </pre>
        *
        * <code>
@@ -2714,7 +2769,8 @@ public Builder addReplicas(
        *
        *
        * <pre>
-       * Output only. The list of replica statuses for the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
+       * Output only. The list of replica statuses for the
+       * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
        * </pre>
        *
        * <code>
@@ -2741,7 +2797,8 @@ public Builder addReplicas(
        *
        *
        * <pre>
-       * Output only. The list of replica statuses for the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
+       * Output only. The list of replica statuses for the
+       * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
        * </pre>
        *
        * <code>
@@ -2765,7 +2822,8 @@ public Builder addReplicas(
        *
        *
        * <pre>
-       * Output only. The list of replica statuses for the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
+       * Output only. The list of replica statuses for the
+       * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
        * </pre>
        *
        * <code>
@@ -2790,7 +2848,8 @@ public Builder addReplicas(
        *
        *
        * <pre>
-       * Output only. The list of replica statuses for the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
+       * Output only. The list of replica statuses for the
+       * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
        * </pre>
        *
        * <code>
@@ -2816,7 +2875,8 @@ public Builder addAllReplicas(
        *
        *
        * <pre>
-       * Output only. The list of replica statuses for the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
+       * Output only. The list of replica statuses for the
+       * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
        * </pre>
        *
        * <code>
@@ -2837,7 +2897,8 @@ public Builder clearReplicas() {
        *
        *
        * <pre>
-       * Output only. The list of replica statuses for the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
+       * Output only. The list of replica statuses for the
+       * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
        * </pre>
        *
        * <code>
@@ -2858,7 +2919,8 @@ public Builder removeReplicas(int index) {
        *
        *
        * <pre>
-       * Output only. The list of replica statuses for the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
+       * Output only. The list of replica statuses for the
+       * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
        * </pre>
        *
        * <code>
@@ -2874,7 +2936,8 @@ public Builder removeReplicas(int index) {
        *
        *
        * <pre>
-       * Output only. The list of replica statuses for the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
+       * Output only. The list of replica statuses for the
+       * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
        * </pre>
        *
        * <code>
@@ -2894,7 +2957,8 @@ public Builder removeReplicas(int index) {
        *
        *
        * <pre>
-       * Output only. The list of replica statuses for the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
+       * Output only. The list of replica statuses for the
+       * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
        * </pre>
        *
        * <code>
@@ -2916,7 +2980,8 @@ public Builder removeReplicas(int index) {
        *
        *
        * <pre>
-       * Output only. The list of replica statuses for the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
+       * Output only. The list of replica statuses for the
+       * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
        * </pre>
        *
        * <code>
@@ -2935,7 +3000,8 @@ public Builder removeReplicas(int index) {
        *
        *
        * <pre>
-       * Output only. The list of replica statuses for the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
+       * Output only. The list of replica statuses for the
+       * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
        * </pre>
        *
        * <code>
@@ -2955,7 +3021,8 @@ public Builder removeReplicas(int index) {
        *
        *
        * <pre>
-       * Output only. The list of replica statuses for the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
+       * Output only. The list of replica statuses for the
+       * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
        * </pre>
        *
        * <code>
@@ -3111,10 +3178,12 @@ public ReplicationStatusCase getReplicationStatusCase() {
    *
    *
    * <pre>
-   * Describes the replication status of a [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] with
+   * Describes the replication status of a
+   * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] with
    * automatic replication.
-   * Only populated if the parent [Secret][google.cloud.secretmanager.v1.Secret] has an automatic replication
-   * policy.
+   * Only populated if the parent
+   * [Secret][google.cloud.secretmanager.v1.Secret] has an automatic
+   * replication policy.
    * </pre>
    *
    * <code>.google.cloud.secretmanager.v1.ReplicationStatus.AutomaticStatus automatic = 1;</code>
@@ -3129,10 +3198,12 @@ public boolean hasAutomatic() {
    *
    *
    * <pre>
-   * Describes the replication status of a [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] with
+   * Describes the replication status of a
+   * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] with
    * automatic replication.
-   * Only populated if the parent [Secret][google.cloud.secretmanager.v1.Secret] has an automatic replication
-   * policy.
+   * Only populated if the parent
+   * [Secret][google.cloud.secretmanager.v1.Secret] has an automatic
+   * replication policy.
    * </pre>
    *
    * <code>.google.cloud.secretmanager.v1.ReplicationStatus.AutomaticStatus automatic = 1;</code>
@@ -3151,10 +3222,12 @@ public com.google.cloud.secretmanager.v1.ReplicationStatus.AutomaticStatus getAu
    *
    *
    * <pre>
-   * Describes the replication status of a [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] with
+   * Describes the replication status of a
+   * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] with
    * automatic replication.
-   * Only populated if the parent [Secret][google.cloud.secretmanager.v1.Secret] has an automatic replication
-   * policy.
+   * Only populated if the parent
+   * [Secret][google.cloud.secretmanager.v1.Secret] has an automatic
+   * replication policy.
    * </pre>
    *
    * <code>.google.cloud.secretmanager.v1.ReplicationStatus.AutomaticStatus automatic = 1;</code>
@@ -3174,10 +3247,12 @@ public com.google.cloud.secretmanager.v1.ReplicationStatus.AutomaticStatus getAu
    *
    *
    * <pre>
-   * Describes the replication status of a [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] with
+   * Describes the replication status of a
+   * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] with
    * user-managed replication.
-   * Only populated if the parent [Secret][google.cloud.secretmanager.v1.Secret] has a user-managed replication
-   * policy.
+   * Only populated if the parent
+   * [Secret][google.cloud.secretmanager.v1.Secret] has a user-managed
+   * replication policy.
    * </pre>
    *
    * <code>.google.cloud.secretmanager.v1.ReplicationStatus.UserManagedStatus user_managed = 2;
@@ -3193,10 +3268,12 @@ public boolean hasUserManaged() {
    *
    *
    * <pre>
-   * Describes the replication status of a [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] with
+   * Describes the replication status of a
+   * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] with
    * user-managed replication.
-   * Only populated if the parent [Secret][google.cloud.secretmanager.v1.Secret] has a user-managed replication
-   * policy.
+   * Only populated if the parent
+   * [Secret][google.cloud.secretmanager.v1.Secret] has a user-managed
+   * replication policy.
    * </pre>
    *
    * <code>.google.cloud.secretmanager.v1.ReplicationStatus.UserManagedStatus user_managed = 2;
@@ -3217,10 +3294,12 @@ public com.google.cloud.secretmanager.v1.ReplicationStatus.UserManagedStatus get
    *
    *
    * <pre>
-   * Describes the replication status of a [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] with
+   * Describes the replication status of a
+   * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] with
    * user-managed replication.
-   * Only populated if the parent [Secret][google.cloud.secretmanager.v1.Secret] has a user-managed replication
-   * policy.
+   * Only populated if the parent
+   * [Secret][google.cloud.secretmanager.v1.Secret] has a user-managed
+   * replication policy.
    * </pre>
    *
    * <code>.google.cloud.secretmanager.v1.ReplicationStatus.UserManagedStatus user_managed = 2;
@@ -3439,7 +3518,8 @@ protected Builder newBuilderForType(com.google.protobuf.GeneratedMessageV3.Build
    *
    *
    * <pre>
-   * The replication status of a [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
+   * The replication status of a
+   * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
    * </pre>
    *
    * Protobuf type {@code google.cloud.secretmanager.v1.ReplicationStatus}
@@ -3667,10 +3747,12 @@ public Builder clearReplicationStatus() {
      *
      *
      * <pre>
-     * Describes the replication status of a [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] with
+     * Describes the replication status of a
+     * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] with
      * automatic replication.
-     * Only populated if the parent [Secret][google.cloud.secretmanager.v1.Secret] has an automatic replication
-     * policy.
+     * Only populated if the parent
+     * [Secret][google.cloud.secretmanager.v1.Secret] has an automatic
+     * replication policy.
      * </pre>
      *
      * <code>.google.cloud.secretmanager.v1.ReplicationStatus.AutomaticStatus automatic = 1;</code>
@@ -3685,10 +3767,12 @@ public boolean hasAutomatic() {
      *
      *
      * <pre>
-     * Describes the replication status of a [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] with
+     * Describes the replication status of a
+     * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] with
      * automatic replication.
-     * Only populated if the parent [Secret][google.cloud.secretmanager.v1.Secret] has an automatic replication
-     * policy.
+     * Only populated if the parent
+     * [Secret][google.cloud.secretmanager.v1.Secret] has an automatic
+     * replication policy.
      * </pre>
      *
      * <code>.google.cloud.secretmanager.v1.ReplicationStatus.AutomaticStatus automatic = 1;</code>
@@ -3716,10 +3800,12 @@ public com.google.cloud.secretmanager.v1.ReplicationStatus.AutomaticStatus getAu
      *
      *
      * <pre>
-     * Describes the replication status of a [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] with
+     * Describes the replication status of a
+     * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] with
      * automatic replication.
-     * Only populated if the parent [Secret][google.cloud.secretmanager.v1.Secret] has an automatic replication
-     * policy.
+     * Only populated if the parent
+     * [Secret][google.cloud.secretmanager.v1.Secret] has an automatic
+     * replication policy.
      * </pre>
      *
      * <code>.google.cloud.secretmanager.v1.ReplicationStatus.AutomaticStatus automatic = 1;</code>
@@ -3742,10 +3828,12 @@ public Builder setAutomatic(
      *
      *
      * <pre>
-     * Describes the replication status of a [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] with
+     * Describes the replication status of a
+     * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] with
      * automatic replication.
-     * Only populated if the parent [Secret][google.cloud.secretmanager.v1.Secret] has an automatic replication
-     * policy.
+     * Only populated if the parent
+     * [Secret][google.cloud.secretmanager.v1.Secret] has an automatic
+     * replication policy.
      * </pre>
      *
      * <code>.google.cloud.secretmanager.v1.ReplicationStatus.AutomaticStatus automatic = 1;</code>
@@ -3766,10 +3854,12 @@ public Builder setAutomatic(
      *
      *
      * <pre>
-     * Describes the replication status of a [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] with
+     * Describes the replication status of a
+     * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] with
      * automatic replication.
-     * Only populated if the parent [Secret][google.cloud.secretmanager.v1.Secret] has an automatic replication
-     * policy.
+     * Only populated if the parent
+     * [Secret][google.cloud.secretmanager.v1.Secret] has an automatic
+     * replication policy.
      * </pre>
      *
      * <code>.google.cloud.secretmanager.v1.ReplicationStatus.AutomaticStatus automatic = 1;</code>
@@ -3805,10 +3895,12 @@ public Builder mergeAutomatic(
      *
      *
      * <pre>
-     * Describes the replication status of a [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] with
+     * Describes the replication status of a
+     * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] with
      * automatic replication.
-     * Only populated if the parent [Secret][google.cloud.secretmanager.v1.Secret] has an automatic replication
-     * policy.
+     * Only populated if the parent
+     * [Secret][google.cloud.secretmanager.v1.Secret] has an automatic
+     * replication policy.
      * </pre>
      *
      * <code>.google.cloud.secretmanager.v1.ReplicationStatus.AutomaticStatus automatic = 1;</code>
@@ -3833,10 +3925,12 @@ public Builder clearAutomatic() {
      *
      *
      * <pre>
-     * Describes the replication status of a [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] with
+     * Describes the replication status of a
+     * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] with
      * automatic replication.
-     * Only populated if the parent [Secret][google.cloud.secretmanager.v1.Secret] has an automatic replication
-     * policy.
+     * Only populated if the parent
+     * [Secret][google.cloud.secretmanager.v1.Secret] has an automatic
+     * replication policy.
      * </pre>
      *
      * <code>.google.cloud.secretmanager.v1.ReplicationStatus.AutomaticStatus automatic = 1;</code>
@@ -3849,10 +3943,12 @@ public Builder clearAutomatic() {
      *
      *
      * <pre>
-     * Describes the replication status of a [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] with
+     * Describes the replication status of a
+     * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] with
      * automatic replication.
-     * Only populated if the parent [Secret][google.cloud.secretmanager.v1.Secret] has an automatic replication
-     * policy.
+     * Only populated if the parent
+     * [Secret][google.cloud.secretmanager.v1.Secret] has an automatic
+     * replication policy.
      * </pre>
      *
      * <code>.google.cloud.secretmanager.v1.ReplicationStatus.AutomaticStatus automatic = 1;</code>
@@ -3875,10 +3971,12 @@ public Builder clearAutomatic() {
      *
      *
      * <pre>
-     * Describes the replication status of a [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] with
+     * Describes the replication status of a
+     * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] with
      * automatic replication.
-     * Only populated if the parent [Secret][google.cloud.secretmanager.v1.Secret] has an automatic replication
-     * policy.
+     * Only populated if the parent
+     * [Secret][google.cloud.secretmanager.v1.Secret] has an automatic
+     * replication policy.
      * </pre>
      *
      * <code>.google.cloud.secretmanager.v1.ReplicationStatus.AutomaticStatus automatic = 1;</code>
@@ -3920,10 +4018,12 @@ public Builder clearAutomatic() {
      *
      *
      * <pre>
-     * Describes the replication status of a [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] with
+     * Describes the replication status of a
+     * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] with
      * user-managed replication.
-     * Only populated if the parent [Secret][google.cloud.secretmanager.v1.Secret] has a user-managed replication
-     * policy.
+     * Only populated if the parent
+     * [Secret][google.cloud.secretmanager.v1.Secret] has a user-managed
+     * replication policy.
      * </pre>
      *
      * <code>.google.cloud.secretmanager.v1.ReplicationStatus.UserManagedStatus user_managed = 2;
@@ -3939,10 +4039,12 @@ public boolean hasUserManaged() {
      *
      *
      * <pre>
-     * Describes the replication status of a [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] with
+     * Describes the replication status of a
+     * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] with
      * user-managed replication.
-     * Only populated if the parent [Secret][google.cloud.secretmanager.v1.Secret] has a user-managed replication
-     * policy.
+     * Only populated if the parent
+     * [Secret][google.cloud.secretmanager.v1.Secret] has a user-managed
+     * replication policy.
      * </pre>
      *
      * <code>.google.cloud.secretmanager.v1.ReplicationStatus.UserManagedStatus user_managed = 2;
@@ -3971,10 +4073,12 @@ public com.google.cloud.secretmanager.v1.ReplicationStatus.UserManagedStatus get
      *
      *
      * <pre>
-     * Describes the replication status of a [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] with
+     * Describes the replication status of a
+     * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] with
      * user-managed replication.
-     * Only populated if the parent [Secret][google.cloud.secretmanager.v1.Secret] has a user-managed replication
-     * policy.
+     * Only populated if the parent
+     * [Secret][google.cloud.secretmanager.v1.Secret] has a user-managed
+     * replication policy.
      * </pre>
      *
      * <code>.google.cloud.secretmanager.v1.ReplicationStatus.UserManagedStatus user_managed = 2;
@@ -3998,10 +4102,12 @@ public Builder setUserManaged(
      *
      *
      * <pre>
-     * Describes the replication status of a [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] with
+     * Describes the replication status of a
+     * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] with
      * user-managed replication.
-     * Only populated if the parent [Secret][google.cloud.secretmanager.v1.Secret] has a user-managed replication
-     * policy.
+     * Only populated if the parent
+     * [Secret][google.cloud.secretmanager.v1.Secret] has a user-managed
+     * replication policy.
      * </pre>
      *
      * <code>.google.cloud.secretmanager.v1.ReplicationStatus.UserManagedStatus user_managed = 2;
@@ -4023,10 +4129,12 @@ public Builder setUserManaged(
      *
      *
      * <pre>
-     * Describes the replication status of a [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] with
+     * Describes the replication status of a
+     * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] with
      * user-managed replication.
-     * Only populated if the parent [Secret][google.cloud.secretmanager.v1.Secret] has a user-managed replication
-     * policy.
+     * Only populated if the parent
+     * [Secret][google.cloud.secretmanager.v1.Secret] has a user-managed
+     * replication policy.
      * </pre>
      *
      * <code>.google.cloud.secretmanager.v1.ReplicationStatus.UserManagedStatus user_managed = 2;
@@ -4063,10 +4171,12 @@ public Builder mergeUserManaged(
      *
      *
      * <pre>
-     * Describes the replication status of a [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] with
+     * Describes the replication status of a
+     * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] with
      * user-managed replication.
-     * Only populated if the parent [Secret][google.cloud.secretmanager.v1.Secret] has a user-managed replication
-     * policy.
+     * Only populated if the parent
+     * [Secret][google.cloud.secretmanager.v1.Secret] has a user-managed
+     * replication policy.
      * </pre>
      *
      * <code>.google.cloud.secretmanager.v1.ReplicationStatus.UserManagedStatus user_managed = 2;
@@ -4092,10 +4202,12 @@ public Builder clearUserManaged() {
      *
      *
      * <pre>
-     * Describes the replication status of a [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] with
+     * Describes the replication status of a
+     * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] with
      * user-managed replication.
-     * Only populated if the parent [Secret][google.cloud.secretmanager.v1.Secret] has a user-managed replication
-     * policy.
+     * Only populated if the parent
+     * [Secret][google.cloud.secretmanager.v1.Secret] has a user-managed
+     * replication policy.
      * </pre>
      *
      * <code>.google.cloud.secretmanager.v1.ReplicationStatus.UserManagedStatus user_managed = 2;
@@ -4109,10 +4221,12 @@ public Builder clearUserManaged() {
      *
      *
      * <pre>
-     * Describes the replication status of a [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] with
+     * Describes the replication status of a
+     * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] with
      * user-managed replication.
-     * Only populated if the parent [Secret][google.cloud.secretmanager.v1.Secret] has a user-managed replication
-     * policy.
+     * Only populated if the parent
+     * [Secret][google.cloud.secretmanager.v1.Secret] has a user-managed
+     * replication policy.
      * </pre>
      *
      * <code>.google.cloud.secretmanager.v1.ReplicationStatus.UserManagedStatus user_managed = 2;
@@ -4136,10 +4250,12 @@ public Builder clearUserManaged() {
      *
      *
      * <pre>
-     * Describes the replication status of a [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] with
+     * Describes the replication status of a
+     * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] with
      * user-managed replication.
-     * Only populated if the parent [Secret][google.cloud.secretmanager.v1.Secret] has a user-managed replication
-     * policy.
+     * Only populated if the parent
+     * [Secret][google.cloud.secretmanager.v1.Secret] has a user-managed
+     * replication policy.
      * </pre>
      *
      * <code>.google.cloud.secretmanager.v1.ReplicationStatus.UserManagedStatus user_managed = 2;
diff --git a/java-secretmanager/proto-google-cloud-secretmanager-v1/src/main/java/com/google/cloud/secretmanager/v1/ReplicationStatusOrBuilder.java b/java-secretmanager/proto-google-cloud-secretmanager-v1/src/main/java/com/google/cloud/secretmanager/v1/ReplicationStatusOrBuilder.java
index 4cc51dbd2ec2..f708cdb2c42f 100644
--- a/java-secretmanager/proto-google-cloud-secretmanager-v1/src/main/java/com/google/cloud/secretmanager/v1/ReplicationStatusOrBuilder.java
+++ b/java-secretmanager/proto-google-cloud-secretmanager-v1/src/main/java/com/google/cloud/secretmanager/v1/ReplicationStatusOrBuilder.java
@@ -27,10 +27,12 @@ public interface ReplicationStatusOrBuilder
    *
    *
    * <pre>
-   * Describes the replication status of a [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] with
+   * Describes the replication status of a
+   * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] with
    * automatic replication.
-   * Only populated if the parent [Secret][google.cloud.secretmanager.v1.Secret] has an automatic replication
-   * policy.
+   * Only populated if the parent
+   * [Secret][google.cloud.secretmanager.v1.Secret] has an automatic
+   * replication policy.
    * </pre>
    *
    * <code>.google.cloud.secretmanager.v1.ReplicationStatus.AutomaticStatus automatic = 1;</code>
@@ -42,10 +44,12 @@ public interface ReplicationStatusOrBuilder
    *
    *
    * <pre>
-   * Describes the replication status of a [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] with
+   * Describes the replication status of a
+   * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] with
    * automatic replication.
-   * Only populated if the parent [Secret][google.cloud.secretmanager.v1.Secret] has an automatic replication
-   * policy.
+   * Only populated if the parent
+   * [Secret][google.cloud.secretmanager.v1.Secret] has an automatic
+   * replication policy.
    * </pre>
    *
    * <code>.google.cloud.secretmanager.v1.ReplicationStatus.AutomaticStatus automatic = 1;</code>
@@ -57,10 +61,12 @@ public interface ReplicationStatusOrBuilder
    *
    *
    * <pre>
-   * Describes the replication status of a [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] with
+   * Describes the replication status of a
+   * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] with
    * automatic replication.
-   * Only populated if the parent [Secret][google.cloud.secretmanager.v1.Secret] has an automatic replication
-   * policy.
+   * Only populated if the parent
+   * [Secret][google.cloud.secretmanager.v1.Secret] has an automatic
+   * replication policy.
    * </pre>
    *
    * <code>.google.cloud.secretmanager.v1.ReplicationStatus.AutomaticStatus automatic = 1;</code>
@@ -72,10 +78,12 @@ public interface ReplicationStatusOrBuilder
    *
    *
    * <pre>
-   * Describes the replication status of a [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] with
+   * Describes the replication status of a
+   * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] with
    * user-managed replication.
-   * Only populated if the parent [Secret][google.cloud.secretmanager.v1.Secret] has a user-managed replication
-   * policy.
+   * Only populated if the parent
+   * [Secret][google.cloud.secretmanager.v1.Secret] has a user-managed
+   * replication policy.
    * </pre>
    *
    * <code>.google.cloud.secretmanager.v1.ReplicationStatus.UserManagedStatus user_managed = 2;
@@ -88,10 +96,12 @@ public interface ReplicationStatusOrBuilder
    *
    *
    * <pre>
-   * Describes the replication status of a [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] with
+   * Describes the replication status of a
+   * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] with
    * user-managed replication.
-   * Only populated if the parent [Secret][google.cloud.secretmanager.v1.Secret] has a user-managed replication
-   * policy.
+   * Only populated if the parent
+   * [Secret][google.cloud.secretmanager.v1.Secret] has a user-managed
+   * replication policy.
    * </pre>
    *
    * <code>.google.cloud.secretmanager.v1.ReplicationStatus.UserManagedStatus user_managed = 2;
@@ -104,10 +114,12 @@ public interface ReplicationStatusOrBuilder
    *
    *
    * <pre>
-   * Describes the replication status of a [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] with
+   * Describes the replication status of a
+   * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] with
    * user-managed replication.
-   * Only populated if the parent [Secret][google.cloud.secretmanager.v1.Secret] has a user-managed replication
-   * policy.
+   * Only populated if the parent
+   * [Secret][google.cloud.secretmanager.v1.Secret] has a user-managed
+   * replication policy.
    * </pre>
    *
    * <code>.google.cloud.secretmanager.v1.ReplicationStatus.UserManagedStatus user_managed = 2;
diff --git a/java-secretmanager/proto-google-cloud-secretmanager-v1/src/main/java/com/google/cloud/secretmanager/v1/ResourcesProto.java b/java-secretmanager/proto-google-cloud-secretmanager-v1/src/main/java/com/google/cloud/secretmanager/v1/ResourcesProto.java
index 3bfa4519cb3e..404b7fb6e27c 100644
--- a/java-secretmanager/proto-google-cloud-secretmanager-v1/src/main/java/com/google/cloud/secretmanager/v1/ResourcesProto.java
+++ b/java-secretmanager/proto-google-cloud-secretmanager-v1/src/main/java/com/google/cloud/secretmanager/v1/ResourcesProto.java
@@ -39,6 +39,10 @@ public static void registerAllExtensions(com.google.protobuf.ExtensionRegistry r
       internal_static_google_cloud_secretmanager_v1_Secret_VersionAliasesEntry_descriptor;
   static final com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
       internal_static_google_cloud_secretmanager_v1_Secret_VersionAliasesEntry_fieldAccessorTable;
+  static final com.google.protobuf.Descriptors.Descriptor
+      internal_static_google_cloud_secretmanager_v1_Secret_AnnotationsEntry_descriptor;
+  static final com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
+      internal_static_google_cloud_secretmanager_v1_Secret_AnnotationsEntry_fieldAccessorTable;
   static final com.google.protobuf.Descriptors.Descriptor
       internal_static_google_cloud_secretmanager_v1_SecretVersion_descriptor;
   static final com.google.protobuf.GeneratedMessageV3.FieldAccessorTable
@@ -109,7 +113,7 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
           + "google/api/field_behavior.proto\032\031google/"
           + "api/resource.proto\032\036google/protobuf/dura"
           + "tion.proto\032\037google/protobuf/timestamp.pr"
-          + "oto\"\356\005\n\006Secret\022\021\n\004name\030\001 \001(\tB\003\340A\003\022G\n\013rep"
+          + "oto\"\364\006\n\006Secret\022\021\n\004name\030\001 \001(\tB\003\340A\003\022G\n\013rep"
           + "lication\030\002 \001(\0132*.google.cloud.secretmana"
           + "ger.v1.ReplicationB\006\340A\005\340A\002\0224\n\013create_tim"
           + "e\030\003 \001(\0132\032.google.protobuf.TimestampB\003\340A\003"
@@ -123,71 +127,74 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
           + "d.secretmanager.v1.RotationB\003\340A\001\022W\n\017vers"
           + "ion_aliases\030\013 \003(\01329.google.cloud.secretm"
           + "anager.v1.Secret.VersionAliasesEntryB\003\340A"
-          + "\001\032-\n\013LabelsEntry\022\013\n\003key\030\001 \001(\t\022\r\n\005value\030\002"
-          + " \001(\t:\0028\001\0325\n\023VersionAliasesEntry\022\013\n\003key\030\001"
-          + " \001(\t\022\r\n\005value\030\002 \001(\003:\0028\001:M\352AJ\n#secretmana"
-          + "ger.googleapis.com/Secret\022#projects/{pro"
-          + "ject}/secrets/{secret}B\014\n\nexpiration\"\242\004\n"
-          + "\rSecretVersion\022\021\n\004name\030\001 \001(\tB\003\340A\003\0224\n\013cre"
-          + "ate_time\030\002 \001(\0132\032.google.protobuf.Timesta"
-          + "mpB\003\340A\003\0225\n\014destroy_time\030\003 \001(\0132\032.google.p"
-          + "rotobuf.TimestampB\003\340A\003\022F\n\005state\030\004 \001(\01622."
-          + "google.cloud.secretmanager.v1.SecretVers"
-          + "ion.StateB\003\340A\003\022L\n\022replication_status\030\005 \001"
-          + "(\01320.google.cloud.secretmanager.v1.Repli"
-          + "cationStatus\022\021\n\004etag\030\006 \001(\tB\003\340A\003\022.\n!clien"
-          + "t_specified_payload_checksum\030\007 \001(\010B\003\340A\003\""
-          + "H\n\005State\022\025\n\021STATE_UNSPECIFIED\020\000\022\013\n\007ENABL"
-          + "ED\020\001\022\014\n\010DISABLED\020\002\022\r\n\tDESTROYED\020\003:n\352Ak\n*"
-          + "secretmanager.googleapis.com/SecretVersi"
-          + "on\022=projects/{project}/secrets/{secret}/"
-          + "versions/{secret_version}\"\220\004\n\013Replicatio"
-          + "n\022I\n\tautomatic\030\001 \001(\01324.google.cloud.secr"
-          + "etmanager.v1.Replication.AutomaticH\000\022N\n\014"
-          + "user_managed\030\002 \001(\01326.google.cloud.secret"
-          + "manager.v1.Replication.UserManagedH\000\032o\n\t"
-          + "Automatic\022b\n\033customer_managed_encryption"
-          + "\030\001 \001(\01328.google.cloud.secretmanager.v1.C"
-          + "ustomerManagedEncryptionB\003\340A\001\032\345\001\n\013UserMa"
-          + "naged\022U\n\010replicas\030\001 \003(\0132>.google.cloud.s"
-          + "ecretmanager.v1.Replication.UserManaged."
-          + "ReplicaB\003\340A\002\032\177\n\007Replica\022\020\n\010location\030\001 \001("
-          + "\t\022b\n\033customer_managed_encryption\030\002 \001(\01328"
-          + ".google.cloud.secretmanager.v1.CustomerM"
-          + "anagedEncryptionB\003\340A\001B\r\n\013replication\"6\n\031"
-          + "CustomerManagedEncryption\022\031\n\014kms_key_nam"
-          + "e\030\001 \001(\tB\003\340A\002\"\353\004\n\021ReplicationStatus\022U\n\tau"
-          + "tomatic\030\001 \001(\0132@.google.cloud.secretmanag"
-          + "er.v1.ReplicationStatus.AutomaticStatusH"
-          + "\000\022Z\n\014user_managed\030\002 \001(\0132B.google.cloud.s"
-          + "ecretmanager.v1.ReplicationStatus.UserMa"
-          + "nagedStatusH\000\032{\n\017AutomaticStatus\022h\n\033cust"
-          + "omer_managed_encryption\030\001 \001(\0132>.google.c"
-          + "loud.secretmanager.v1.CustomerManagedEnc"
-          + "ryptionStatusB\003\340A\003\032\217\002\n\021UserManagedStatus"
-          + "\022g\n\010replicas\030\001 \003(\0132P.google.cloud.secret"
-          + "manager.v1.ReplicationStatus.UserManaged"
-          + "Status.ReplicaStatusB\003\340A\003\032\220\001\n\rReplicaSta"
-          + "tus\022\025\n\010location\030\001 \001(\tB\003\340A\003\022h\n\033customer_m"
-          + "anaged_encryption\030\002 \001(\0132>.google.cloud.s"
-          + "ecretmanager.v1.CustomerManagedEncryptio"
-          + "nStatusB\003\340A\003B\024\n\022replication_status\"D\n\037Cu"
-          + "stomerManagedEncryptionStatus\022!\n\024kms_key"
-          + "_version_name\030\001 \001(\tB\003\340A\002\"_\n\005Topic\022\021\n\004nam"
-          + "e\030\001 \001(\tB\003\340A\002:C\352A@\n\033pubsub.googleapis.com"
-          + "/Topic\022!projects/{project}/topics/{topic"
-          + "}\"\200\001\n\010Rotation\022;\n\022next_rotation_time\030\001 \001"
-          + "(\0132\032.google.protobuf.TimestampB\003\340A\001\0227\n\017r"
-          + "otation_period\030\002 \001(\0132\031.google.protobuf.D"
-          + "urationB\003\340A\004\"L\n\rSecretPayload\022\014\n\004data\030\001 "
-          + "\001(\014\022\035\n\013data_crc32c\030\002 \001(\003B\003\340A\001H\000\210\001\001B\016\n\014_d"
-          + "ata_crc32cB\355\001\n!com.google.cloud.secretma"
-          + "nager.v1B\016ResourcesProtoP\001ZJgoogle.golan"
-          + "g.org/genproto/googleapis/cloud/secretma"
-          + "nager/v1;secretmanager\370\001\001\242\002\003GSM\252\002\035Google"
-          + ".Cloud.SecretManager.V1\312\002\035Google\\Cloud\\S"
-          + "ecretManager\\V1\352\002 Google::Cloud::SecretM"
-          + "anager::V1b\006proto3"
+          + "\001\022P\n\013annotations\030\r \003(\01326.google.cloud.se"
+          + "cretmanager.v1.Secret.AnnotationsEntryB\003"
+          + "\340A\001\032-\n\013LabelsEntry\022\013\n\003key\030\001 \001(\t\022\r\n\005value"
+          + "\030\002 \001(\t:\0028\001\0325\n\023VersionAliasesEntry\022\013\n\003key"
+          + "\030\001 \001(\t\022\r\n\005value\030\002 \001(\003:\0028\001\0322\n\020Annotations"
+          + "Entry\022\013\n\003key\030\001 \001(\t\022\r\n\005value\030\002 \001(\t:\0028\001:M\352"
+          + "AJ\n#secretmanager.googleapis.com/Secret\022"
+          + "#projects/{project}/secrets/{secret}B\014\n\n"
+          + "expiration\"\242\004\n\rSecretVersion\022\021\n\004name\030\001 \001"
+          + "(\tB\003\340A\003\0224\n\013create_time\030\002 \001(\0132\032.google.pr"
+          + "otobuf.TimestampB\003\340A\003\0225\n\014destroy_time\030\003 "
+          + "\001(\0132\032.google.protobuf.TimestampB\003\340A\003\022F\n\005"
+          + "state\030\004 \001(\01622.google.cloud.secretmanager"
+          + ".v1.SecretVersion.StateB\003\340A\003\022L\n\022replicat"
+          + "ion_status\030\005 \001(\01320.google.cloud.secretma"
+          + "nager.v1.ReplicationStatus\022\021\n\004etag\030\006 \001(\t"
+          + "B\003\340A\003\022.\n!client_specified_payload_checks"
+          + "um\030\007 \001(\010B\003\340A\003\"H\n\005State\022\025\n\021STATE_UNSPECIF"
+          + "IED\020\000\022\013\n\007ENABLED\020\001\022\014\n\010DISABLED\020\002\022\r\n\tDEST"
+          + "ROYED\020\003:n\352Ak\n*secretmanager.googleapis.c"
+          + "om/SecretVersion\022=projects/{project}/sec"
+          + "rets/{secret}/versions/{secret_version}\""
+          + "\220\004\n\013Replication\022I\n\tautomatic\030\001 \001(\01324.goo"
+          + "gle.cloud.secretmanager.v1.Replication.A"
+          + "utomaticH\000\022N\n\014user_managed\030\002 \001(\01326.googl"
+          + "e.cloud.secretmanager.v1.Replication.Use"
+          + "rManagedH\000\032o\n\tAutomatic\022b\n\033customer_mana"
+          + "ged_encryption\030\001 \001(\01328.google.cloud.secr"
+          + "etmanager.v1.CustomerManagedEncryptionB\003"
+          + "\340A\001\032\345\001\n\013UserManaged\022U\n\010replicas\030\001 \003(\0132>."
+          + "google.cloud.secretmanager.v1.Replicatio"
+          + "n.UserManaged.ReplicaB\003\340A\002\032\177\n\007Replica\022\020\n"
+          + "\010location\030\001 \001(\t\022b\n\033customer_managed_encr"
+          + "yption\030\002 \001(\01328.google.cloud.secretmanage"
+          + "r.v1.CustomerManagedEncryptionB\003\340A\001B\r\n\013r"
+          + "eplication\"6\n\031CustomerManagedEncryption\022"
+          + "\031\n\014kms_key_name\030\001 \001(\tB\003\340A\002\"\353\004\n\021Replicati"
+          + "onStatus\022U\n\tautomatic\030\001 \001(\0132@.google.clo"
+          + "ud.secretmanager.v1.ReplicationStatus.Au"
+          + "tomaticStatusH\000\022Z\n\014user_managed\030\002 \001(\0132B."
+          + "google.cloud.secretmanager.v1.Replicatio"
+          + "nStatus.UserManagedStatusH\000\032{\n\017Automatic"
+          + "Status\022h\n\033customer_managed_encryption\030\001 "
+          + "\001(\0132>.google.cloud.secretmanager.v1.Cust"
+          + "omerManagedEncryptionStatusB\003\340A\003\032\217\002\n\021Use"
+          + "rManagedStatus\022g\n\010replicas\030\001 \003(\0132P.googl"
+          + "e.cloud.secretmanager.v1.ReplicationStat"
+          + "us.UserManagedStatus.ReplicaStatusB\003\340A\003\032"
+          + "\220\001\n\rReplicaStatus\022\025\n\010location\030\001 \001(\tB\003\340A\003"
+          + "\022h\n\033customer_managed_encryption\030\002 \001(\0132>."
+          + "google.cloud.secretmanager.v1.CustomerMa"
+          + "nagedEncryptionStatusB\003\340A\003B\024\n\022replicatio"
+          + "n_status\"D\n\037CustomerManagedEncryptionSta"
+          + "tus\022!\n\024kms_key_version_name\030\001 \001(\tB\003\340A\002\"_"
+          + "\n\005Topic\022\021\n\004name\030\001 \001(\tB\003\340A\002:C\352A@\n\033pubsub."
+          + "googleapis.com/Topic\022!projects/{project}"
+          + "/topics/{topic}\"\200\001\n\010Rotation\022;\n\022next_rot"
+          + "ation_time\030\001 \001(\0132\032.google.protobuf.Times"
+          + "tampB\003\340A\001\0227\n\017rotation_period\030\002 \001(\0132\031.goo"
+          + "gle.protobuf.DurationB\003\340A\004\"L\n\rSecretPayl"
+          + "oad\022\014\n\004data\030\001 \001(\014\022\035\n\013data_crc32c\030\002 \001(\003B\003"
+          + "\340A\001H\000\210\001\001B\016\n\014_data_crc32cB\355\001\n!com.google."
+          + "cloud.secretmanager.v1B\016ResourcesProtoP\001"
+          + "ZJgoogle.golang.org/genproto/googleapis/"
+          + "cloud/secretmanager/v1;secretmanager\370\001\001\242"
+          + "\002\003GSM\252\002\035Google.Cloud.SecretManager.V1\312\002\035"
+          + "Google\\Cloud\\SecretManager\\V1\352\002 Google::"
+          + "Cloud::SecretManager::V1b\006proto3"
     };
     descriptor =
         com.google.protobuf.Descriptors.FileDescriptor.internalBuildGeneratedFileFrom(
@@ -214,6 +221,7 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
               "Etag",
               "Rotation",
               "VersionAliases",
+              "Annotations",
               "Expiration",
             });
     internal_static_google_cloud_secretmanager_v1_Secret_LabelsEntry_descriptor =
@@ -232,6 +240,14 @@ public static com.google.protobuf.Descriptors.FileDescriptor getDescriptor() {
             new java.lang.String[] {
               "Key", "Value",
             });
+    internal_static_google_cloud_secretmanager_v1_Secret_AnnotationsEntry_descriptor =
+        internal_static_google_cloud_secretmanager_v1_Secret_descriptor.getNestedTypes().get(2);
+    internal_static_google_cloud_secretmanager_v1_Secret_AnnotationsEntry_fieldAccessorTable =
+        new com.google.protobuf.GeneratedMessageV3.FieldAccessorTable(
+            internal_static_google_cloud_secretmanager_v1_Secret_AnnotationsEntry_descriptor,
+            new java.lang.String[] {
+              "Key", "Value",
+            });
     internal_static_google_cloud_secretmanager_v1_SecretVersion_descriptor =
         getDescriptor().getMessageTypes().get(1);
     internal_static_google_cloud_secretmanager_v1_SecretVersion_fieldAccessorTable =
diff --git a/java-secretmanager/proto-google-cloud-secretmanager-v1/src/main/java/com/google/cloud/secretmanager/v1/Rotation.java b/java-secretmanager/proto-google-cloud-secretmanager-v1/src/main/java/com/google/cloud/secretmanager/v1/Rotation.java
index 2c097a78290c..3fb69555988d 100644
--- a/java-secretmanager/proto-google-cloud-secretmanager-v1/src/main/java/com/google/cloud/secretmanager/v1/Rotation.java
+++ b/java-secretmanager/proto-google-cloud-secretmanager-v1/src/main/java/com/google/cloud/secretmanager/v1/Rotation.java
@@ -22,9 +22,11 @@
  *
  *
  * <pre>
- * The rotation time and period for a [Secret][google.cloud.secretmanager.v1.Secret]. At next_rotation_time, Secret
+ * The rotation time and period for a
+ * [Secret][google.cloud.secretmanager.v1.Secret]. At next_rotation_time, Secret
  * Manager will send a Pub/Sub notification to the topics configured on the
- * Secret. [Secret.topics][google.cloud.secretmanager.v1.Secret.topics] must be set to configure rotation.
+ * Secret. [Secret.topics][google.cloud.secretmanager.v1.Secret.topics] must be
+ * set to configure rotation.
  * </pre>
  *
  * Protobuf type {@code google.cloud.secretmanager.v1.Rotation}
@@ -73,10 +75,14 @@ public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
    *
    *
    * <pre>
-   * Optional. Timestamp in UTC at which the [Secret][google.cloud.secretmanager.v1.Secret] is scheduled to rotate. Cannot be
-   * set to less than 300s (5 min) in the future and at most 3153600000s (100
-   * years).
-   * [next_rotation_time][google.cloud.secretmanager.v1.Rotation.next_rotation_time] MUST  be set if [rotation_period][google.cloud.secretmanager.v1.Rotation.rotation_period] is set.
+   * Optional. Timestamp in UTC at which the
+   * [Secret][google.cloud.secretmanager.v1.Secret] is scheduled to rotate.
+   * Cannot be set to less than 300s (5 min) in the future and at most
+   * 3153600000s (100 years).
+   * [next_rotation_time][google.cloud.secretmanager.v1.Rotation.next_rotation_time]
+   * MUST  be set if
+   * [rotation_period][google.cloud.secretmanager.v1.Rotation.rotation_period]
+   * is set.
    * </pre>
    *
    * <code>
@@ -93,10 +99,14 @@ public boolean hasNextRotationTime() {
    *
    *
    * <pre>
-   * Optional. Timestamp in UTC at which the [Secret][google.cloud.secretmanager.v1.Secret] is scheduled to rotate. Cannot be
-   * set to less than 300s (5 min) in the future and at most 3153600000s (100
-   * years).
-   * [next_rotation_time][google.cloud.secretmanager.v1.Rotation.next_rotation_time] MUST  be set if [rotation_period][google.cloud.secretmanager.v1.Rotation.rotation_period] is set.
+   * Optional. Timestamp in UTC at which the
+   * [Secret][google.cloud.secretmanager.v1.Secret] is scheduled to rotate.
+   * Cannot be set to less than 300s (5 min) in the future and at most
+   * 3153600000s (100 years).
+   * [next_rotation_time][google.cloud.secretmanager.v1.Rotation.next_rotation_time]
+   * MUST  be set if
+   * [rotation_period][google.cloud.secretmanager.v1.Rotation.rotation_period]
+   * is set.
    * </pre>
    *
    * <code>
@@ -115,10 +125,14 @@ public com.google.protobuf.Timestamp getNextRotationTime() {
    *
    *
    * <pre>
-   * Optional. Timestamp in UTC at which the [Secret][google.cloud.secretmanager.v1.Secret] is scheduled to rotate. Cannot be
-   * set to less than 300s (5 min) in the future and at most 3153600000s (100
-   * years).
-   * [next_rotation_time][google.cloud.secretmanager.v1.Rotation.next_rotation_time] MUST  be set if [rotation_period][google.cloud.secretmanager.v1.Rotation.rotation_period] is set.
+   * Optional. Timestamp in UTC at which the
+   * [Secret][google.cloud.secretmanager.v1.Secret] is scheduled to rotate.
+   * Cannot be set to less than 300s (5 min) in the future and at most
+   * 3153600000s (100 years).
+   * [next_rotation_time][google.cloud.secretmanager.v1.Rotation.next_rotation_time]
+   * MUST  be set if
+   * [rotation_period][google.cloud.secretmanager.v1.Rotation.rotation_period]
+   * is set.
    * </pre>
    *
    * <code>
@@ -138,9 +152,14 @@ public com.google.protobuf.TimestampOrBuilder getNextRotationTimeOrBuilder() {
    * <pre>
    * Input only. The Duration between rotation notifications. Must be in seconds
    * and at least 3600s (1h) and at most 3153600000s (100 years).
-   * If [rotation_period][google.cloud.secretmanager.v1.Rotation.rotation_period] is set, [next_rotation_time][google.cloud.secretmanager.v1.Rotation.next_rotation_time] must be set.
-   * [next_rotation_time][google.cloud.secretmanager.v1.Rotation.next_rotation_time] will be advanced by this period when the service
-   * automatically sends rotation notifications.
+   * If
+   * [rotation_period][google.cloud.secretmanager.v1.Rotation.rotation_period]
+   * is set,
+   * [next_rotation_time][google.cloud.secretmanager.v1.Rotation.next_rotation_time]
+   * must be set.
+   * [next_rotation_time][google.cloud.secretmanager.v1.Rotation.next_rotation_time]
+   * will be advanced by this period when the service automatically sends
+   * rotation notifications.
    * </pre>
    *
    * <code>
@@ -159,9 +178,14 @@ public boolean hasRotationPeriod() {
    * <pre>
    * Input only. The Duration between rotation notifications. Must be in seconds
    * and at least 3600s (1h) and at most 3153600000s (100 years).
-   * If [rotation_period][google.cloud.secretmanager.v1.Rotation.rotation_period] is set, [next_rotation_time][google.cloud.secretmanager.v1.Rotation.next_rotation_time] must be set.
-   * [next_rotation_time][google.cloud.secretmanager.v1.Rotation.next_rotation_time] will be advanced by this period when the service
-   * automatically sends rotation notifications.
+   * If
+   * [rotation_period][google.cloud.secretmanager.v1.Rotation.rotation_period]
+   * is set,
+   * [next_rotation_time][google.cloud.secretmanager.v1.Rotation.next_rotation_time]
+   * must be set.
+   * [next_rotation_time][google.cloud.secretmanager.v1.Rotation.next_rotation_time]
+   * will be advanced by this period when the service automatically sends
+   * rotation notifications.
    * </pre>
    *
    * <code>
@@ -182,9 +206,14 @@ public com.google.protobuf.Duration getRotationPeriod() {
    * <pre>
    * Input only. The Duration between rotation notifications. Must be in seconds
    * and at least 3600s (1h) and at most 3153600000s (100 years).
-   * If [rotation_period][google.cloud.secretmanager.v1.Rotation.rotation_period] is set, [next_rotation_time][google.cloud.secretmanager.v1.Rotation.next_rotation_time] must be set.
-   * [next_rotation_time][google.cloud.secretmanager.v1.Rotation.next_rotation_time] will be advanced by this period when the service
-   * automatically sends rotation notifications.
+   * If
+   * [rotation_period][google.cloud.secretmanager.v1.Rotation.rotation_period]
+   * is set,
+   * [next_rotation_time][google.cloud.secretmanager.v1.Rotation.next_rotation_time]
+   * must be set.
+   * [next_rotation_time][google.cloud.secretmanager.v1.Rotation.next_rotation_time]
+   * will be advanced by this period when the service automatically sends
+   * rotation notifications.
    * </pre>
    *
    * <code>
@@ -378,9 +407,11 @@ protected Builder newBuilderForType(com.google.protobuf.GeneratedMessageV3.Build
    *
    *
    * <pre>
-   * The rotation time and period for a [Secret][google.cloud.secretmanager.v1.Secret]. At next_rotation_time, Secret
+   * The rotation time and period for a
+   * [Secret][google.cloud.secretmanager.v1.Secret]. At next_rotation_time, Secret
    * Manager will send a Pub/Sub notification to the topics configured on the
-   * Secret. [Secret.topics][google.cloud.secretmanager.v1.Secret.topics] must be set to configure rotation.
+   * Secret. [Secret.topics][google.cloud.secretmanager.v1.Secret.topics] must be
+   * set to configure rotation.
    * </pre>
    *
    * Protobuf type {@code google.cloud.secretmanager.v1.Rotation}
@@ -584,10 +615,14 @@ public Builder mergeFrom(
      *
      *
      * <pre>
-     * Optional. Timestamp in UTC at which the [Secret][google.cloud.secretmanager.v1.Secret] is scheduled to rotate. Cannot be
-     * set to less than 300s (5 min) in the future and at most 3153600000s (100
-     * years).
-     * [next_rotation_time][google.cloud.secretmanager.v1.Rotation.next_rotation_time] MUST  be set if [rotation_period][google.cloud.secretmanager.v1.Rotation.rotation_period] is set.
+     * Optional. Timestamp in UTC at which the
+     * [Secret][google.cloud.secretmanager.v1.Secret] is scheduled to rotate.
+     * Cannot be set to less than 300s (5 min) in the future and at most
+     * 3153600000s (100 years).
+     * [next_rotation_time][google.cloud.secretmanager.v1.Rotation.next_rotation_time]
+     * MUST  be set if
+     * [rotation_period][google.cloud.secretmanager.v1.Rotation.rotation_period]
+     * is set.
      * </pre>
      *
      * <code>
@@ -603,10 +638,14 @@ public boolean hasNextRotationTime() {
      *
      *
      * <pre>
-     * Optional. Timestamp in UTC at which the [Secret][google.cloud.secretmanager.v1.Secret] is scheduled to rotate. Cannot be
-     * set to less than 300s (5 min) in the future and at most 3153600000s (100
-     * years).
-     * [next_rotation_time][google.cloud.secretmanager.v1.Rotation.next_rotation_time] MUST  be set if [rotation_period][google.cloud.secretmanager.v1.Rotation.rotation_period] is set.
+     * Optional. Timestamp in UTC at which the
+     * [Secret][google.cloud.secretmanager.v1.Secret] is scheduled to rotate.
+     * Cannot be set to less than 300s (5 min) in the future and at most
+     * 3153600000s (100 years).
+     * [next_rotation_time][google.cloud.secretmanager.v1.Rotation.next_rotation_time]
+     * MUST  be set if
+     * [rotation_period][google.cloud.secretmanager.v1.Rotation.rotation_period]
+     * is set.
      * </pre>
      *
      * <code>
@@ -628,10 +667,14 @@ public com.google.protobuf.Timestamp getNextRotationTime() {
      *
      *
      * <pre>
-     * Optional. Timestamp in UTC at which the [Secret][google.cloud.secretmanager.v1.Secret] is scheduled to rotate. Cannot be
-     * set to less than 300s (5 min) in the future and at most 3153600000s (100
-     * years).
-     * [next_rotation_time][google.cloud.secretmanager.v1.Rotation.next_rotation_time] MUST  be set if [rotation_period][google.cloud.secretmanager.v1.Rotation.rotation_period] is set.
+     * Optional. Timestamp in UTC at which the
+     * [Secret][google.cloud.secretmanager.v1.Secret] is scheduled to rotate.
+     * Cannot be set to less than 300s (5 min) in the future and at most
+     * 3153600000s (100 years).
+     * [next_rotation_time][google.cloud.secretmanager.v1.Rotation.next_rotation_time]
+     * MUST  be set if
+     * [rotation_period][google.cloud.secretmanager.v1.Rotation.rotation_period]
+     * is set.
      * </pre>
      *
      * <code>
@@ -655,10 +698,14 @@ public Builder setNextRotationTime(com.google.protobuf.Timestamp value) {
      *
      *
      * <pre>
-     * Optional. Timestamp in UTC at which the [Secret][google.cloud.secretmanager.v1.Secret] is scheduled to rotate. Cannot be
-     * set to less than 300s (5 min) in the future and at most 3153600000s (100
-     * years).
-     * [next_rotation_time][google.cloud.secretmanager.v1.Rotation.next_rotation_time] MUST  be set if [rotation_period][google.cloud.secretmanager.v1.Rotation.rotation_period] is set.
+     * Optional. Timestamp in UTC at which the
+     * [Secret][google.cloud.secretmanager.v1.Secret] is scheduled to rotate.
+     * Cannot be set to less than 300s (5 min) in the future and at most
+     * 3153600000s (100 years).
+     * [next_rotation_time][google.cloud.secretmanager.v1.Rotation.next_rotation_time]
+     * MUST  be set if
+     * [rotation_period][google.cloud.secretmanager.v1.Rotation.rotation_period]
+     * is set.
      * </pre>
      *
      * <code>
@@ -679,10 +726,14 @@ public Builder setNextRotationTime(com.google.protobuf.Timestamp.Builder builder
      *
      *
      * <pre>
-     * Optional. Timestamp in UTC at which the [Secret][google.cloud.secretmanager.v1.Secret] is scheduled to rotate. Cannot be
-     * set to less than 300s (5 min) in the future and at most 3153600000s (100
-     * years).
-     * [next_rotation_time][google.cloud.secretmanager.v1.Rotation.next_rotation_time] MUST  be set if [rotation_period][google.cloud.secretmanager.v1.Rotation.rotation_period] is set.
+     * Optional. Timestamp in UTC at which the
+     * [Secret][google.cloud.secretmanager.v1.Secret] is scheduled to rotate.
+     * Cannot be set to less than 300s (5 min) in the future and at most
+     * 3153600000s (100 years).
+     * [next_rotation_time][google.cloud.secretmanager.v1.Rotation.next_rotation_time]
+     * MUST  be set if
+     * [rotation_period][google.cloud.secretmanager.v1.Rotation.rotation_period]
+     * is set.
      * </pre>
      *
      * <code>
@@ -710,10 +761,14 @@ public Builder mergeNextRotationTime(com.google.protobuf.Timestamp value) {
      *
      *
      * <pre>
-     * Optional. Timestamp in UTC at which the [Secret][google.cloud.secretmanager.v1.Secret] is scheduled to rotate. Cannot be
-     * set to less than 300s (5 min) in the future and at most 3153600000s (100
-     * years).
-     * [next_rotation_time][google.cloud.secretmanager.v1.Rotation.next_rotation_time] MUST  be set if [rotation_period][google.cloud.secretmanager.v1.Rotation.rotation_period] is set.
+     * Optional. Timestamp in UTC at which the
+     * [Secret][google.cloud.secretmanager.v1.Secret] is scheduled to rotate.
+     * Cannot be set to less than 300s (5 min) in the future and at most
+     * 3153600000s (100 years).
+     * [next_rotation_time][google.cloud.secretmanager.v1.Rotation.next_rotation_time]
+     * MUST  be set if
+     * [rotation_period][google.cloud.secretmanager.v1.Rotation.rotation_period]
+     * is set.
      * </pre>
      *
      * <code>
@@ -735,10 +790,14 @@ public Builder clearNextRotationTime() {
      *
      *
      * <pre>
-     * Optional. Timestamp in UTC at which the [Secret][google.cloud.secretmanager.v1.Secret] is scheduled to rotate. Cannot be
-     * set to less than 300s (5 min) in the future and at most 3153600000s (100
-     * years).
-     * [next_rotation_time][google.cloud.secretmanager.v1.Rotation.next_rotation_time] MUST  be set if [rotation_period][google.cloud.secretmanager.v1.Rotation.rotation_period] is set.
+     * Optional. Timestamp in UTC at which the
+     * [Secret][google.cloud.secretmanager.v1.Secret] is scheduled to rotate.
+     * Cannot be set to less than 300s (5 min) in the future and at most
+     * 3153600000s (100 years).
+     * [next_rotation_time][google.cloud.secretmanager.v1.Rotation.next_rotation_time]
+     * MUST  be set if
+     * [rotation_period][google.cloud.secretmanager.v1.Rotation.rotation_period]
+     * is set.
      * </pre>
      *
      * <code>
@@ -754,10 +813,14 @@ public com.google.protobuf.Timestamp.Builder getNextRotationTimeBuilder() {
      *
      *
      * <pre>
-     * Optional. Timestamp in UTC at which the [Secret][google.cloud.secretmanager.v1.Secret] is scheduled to rotate. Cannot be
-     * set to less than 300s (5 min) in the future and at most 3153600000s (100
-     * years).
-     * [next_rotation_time][google.cloud.secretmanager.v1.Rotation.next_rotation_time] MUST  be set if [rotation_period][google.cloud.secretmanager.v1.Rotation.rotation_period] is set.
+     * Optional. Timestamp in UTC at which the
+     * [Secret][google.cloud.secretmanager.v1.Secret] is scheduled to rotate.
+     * Cannot be set to less than 300s (5 min) in the future and at most
+     * 3153600000s (100 years).
+     * [next_rotation_time][google.cloud.secretmanager.v1.Rotation.next_rotation_time]
+     * MUST  be set if
+     * [rotation_period][google.cloud.secretmanager.v1.Rotation.rotation_period]
+     * is set.
      * </pre>
      *
      * <code>
@@ -777,10 +840,14 @@ public com.google.protobuf.TimestampOrBuilder getNextRotationTimeOrBuilder() {
      *
      *
      * <pre>
-     * Optional. Timestamp in UTC at which the [Secret][google.cloud.secretmanager.v1.Secret] is scheduled to rotate. Cannot be
-     * set to less than 300s (5 min) in the future and at most 3153600000s (100
-     * years).
-     * [next_rotation_time][google.cloud.secretmanager.v1.Rotation.next_rotation_time] MUST  be set if [rotation_period][google.cloud.secretmanager.v1.Rotation.rotation_period] is set.
+     * Optional. Timestamp in UTC at which the
+     * [Secret][google.cloud.secretmanager.v1.Secret] is scheduled to rotate.
+     * Cannot be set to less than 300s (5 min) in the future and at most
+     * 3153600000s (100 years).
+     * [next_rotation_time][google.cloud.secretmanager.v1.Rotation.next_rotation_time]
+     * MUST  be set if
+     * [rotation_period][google.cloud.secretmanager.v1.Rotation.rotation_period]
+     * is set.
      * </pre>
      *
      * <code>
@@ -816,9 +883,14 @@ public com.google.protobuf.TimestampOrBuilder getNextRotationTimeOrBuilder() {
      * <pre>
      * Input only. The Duration between rotation notifications. Must be in seconds
      * and at least 3600s (1h) and at most 3153600000s (100 years).
-     * If [rotation_period][google.cloud.secretmanager.v1.Rotation.rotation_period] is set, [next_rotation_time][google.cloud.secretmanager.v1.Rotation.next_rotation_time] must be set.
-     * [next_rotation_time][google.cloud.secretmanager.v1.Rotation.next_rotation_time] will be advanced by this period when the service
-     * automatically sends rotation notifications.
+     * If
+     * [rotation_period][google.cloud.secretmanager.v1.Rotation.rotation_period]
+     * is set,
+     * [next_rotation_time][google.cloud.secretmanager.v1.Rotation.next_rotation_time]
+     * must be set.
+     * [next_rotation_time][google.cloud.secretmanager.v1.Rotation.next_rotation_time]
+     * will be advanced by this period when the service automatically sends
+     * rotation notifications.
      * </pre>
      *
      * <code>
@@ -836,9 +908,14 @@ public boolean hasRotationPeriod() {
      * <pre>
      * Input only. The Duration between rotation notifications. Must be in seconds
      * and at least 3600s (1h) and at most 3153600000s (100 years).
-     * If [rotation_period][google.cloud.secretmanager.v1.Rotation.rotation_period] is set, [next_rotation_time][google.cloud.secretmanager.v1.Rotation.next_rotation_time] must be set.
-     * [next_rotation_time][google.cloud.secretmanager.v1.Rotation.next_rotation_time] will be advanced by this period when the service
-     * automatically sends rotation notifications.
+     * If
+     * [rotation_period][google.cloud.secretmanager.v1.Rotation.rotation_period]
+     * is set,
+     * [next_rotation_time][google.cloud.secretmanager.v1.Rotation.next_rotation_time]
+     * must be set.
+     * [next_rotation_time][google.cloud.secretmanager.v1.Rotation.next_rotation_time]
+     * will be advanced by this period when the service automatically sends
+     * rotation notifications.
      * </pre>
      *
      * <code>
@@ -862,9 +939,14 @@ public com.google.protobuf.Duration getRotationPeriod() {
      * <pre>
      * Input only. The Duration between rotation notifications. Must be in seconds
      * and at least 3600s (1h) and at most 3153600000s (100 years).
-     * If [rotation_period][google.cloud.secretmanager.v1.Rotation.rotation_period] is set, [next_rotation_time][google.cloud.secretmanager.v1.Rotation.next_rotation_time] must be set.
-     * [next_rotation_time][google.cloud.secretmanager.v1.Rotation.next_rotation_time] will be advanced by this period when the service
-     * automatically sends rotation notifications.
+     * If
+     * [rotation_period][google.cloud.secretmanager.v1.Rotation.rotation_period]
+     * is set,
+     * [next_rotation_time][google.cloud.secretmanager.v1.Rotation.next_rotation_time]
+     * must be set.
+     * [next_rotation_time][google.cloud.secretmanager.v1.Rotation.next_rotation_time]
+     * will be advanced by this period when the service automatically sends
+     * rotation notifications.
      * </pre>
      *
      * <code>
@@ -890,9 +972,14 @@ public Builder setRotationPeriod(com.google.protobuf.Duration value) {
      * <pre>
      * Input only. The Duration between rotation notifications. Must be in seconds
      * and at least 3600s (1h) and at most 3153600000s (100 years).
-     * If [rotation_period][google.cloud.secretmanager.v1.Rotation.rotation_period] is set, [next_rotation_time][google.cloud.secretmanager.v1.Rotation.next_rotation_time] must be set.
-     * [next_rotation_time][google.cloud.secretmanager.v1.Rotation.next_rotation_time] will be advanced by this period when the service
-     * automatically sends rotation notifications.
+     * If
+     * [rotation_period][google.cloud.secretmanager.v1.Rotation.rotation_period]
+     * is set,
+     * [next_rotation_time][google.cloud.secretmanager.v1.Rotation.next_rotation_time]
+     * must be set.
+     * [next_rotation_time][google.cloud.secretmanager.v1.Rotation.next_rotation_time]
+     * will be advanced by this period when the service automatically sends
+     * rotation notifications.
      * </pre>
      *
      * <code>
@@ -915,9 +1002,14 @@ public Builder setRotationPeriod(com.google.protobuf.Duration.Builder builderFor
      * <pre>
      * Input only. The Duration between rotation notifications. Must be in seconds
      * and at least 3600s (1h) and at most 3153600000s (100 years).
-     * If [rotation_period][google.cloud.secretmanager.v1.Rotation.rotation_period] is set, [next_rotation_time][google.cloud.secretmanager.v1.Rotation.next_rotation_time] must be set.
-     * [next_rotation_time][google.cloud.secretmanager.v1.Rotation.next_rotation_time] will be advanced by this period when the service
-     * automatically sends rotation notifications.
+     * If
+     * [rotation_period][google.cloud.secretmanager.v1.Rotation.rotation_period]
+     * is set,
+     * [next_rotation_time][google.cloud.secretmanager.v1.Rotation.next_rotation_time]
+     * must be set.
+     * [next_rotation_time][google.cloud.secretmanager.v1.Rotation.next_rotation_time]
+     * will be advanced by this period when the service automatically sends
+     * rotation notifications.
      * </pre>
      *
      * <code>
@@ -947,9 +1039,14 @@ public Builder mergeRotationPeriod(com.google.protobuf.Duration value) {
      * <pre>
      * Input only. The Duration between rotation notifications. Must be in seconds
      * and at least 3600s (1h) and at most 3153600000s (100 years).
-     * If [rotation_period][google.cloud.secretmanager.v1.Rotation.rotation_period] is set, [next_rotation_time][google.cloud.secretmanager.v1.Rotation.next_rotation_time] must be set.
-     * [next_rotation_time][google.cloud.secretmanager.v1.Rotation.next_rotation_time] will be advanced by this period when the service
-     * automatically sends rotation notifications.
+     * If
+     * [rotation_period][google.cloud.secretmanager.v1.Rotation.rotation_period]
+     * is set,
+     * [next_rotation_time][google.cloud.secretmanager.v1.Rotation.next_rotation_time]
+     * must be set.
+     * [next_rotation_time][google.cloud.secretmanager.v1.Rotation.next_rotation_time]
+     * will be advanced by this period when the service automatically sends
+     * rotation notifications.
      * </pre>
      *
      * <code>
@@ -973,9 +1070,14 @@ public Builder clearRotationPeriod() {
      * <pre>
      * Input only. The Duration between rotation notifications. Must be in seconds
      * and at least 3600s (1h) and at most 3153600000s (100 years).
-     * If [rotation_period][google.cloud.secretmanager.v1.Rotation.rotation_period] is set, [next_rotation_time][google.cloud.secretmanager.v1.Rotation.next_rotation_time] must be set.
-     * [next_rotation_time][google.cloud.secretmanager.v1.Rotation.next_rotation_time] will be advanced by this period when the service
-     * automatically sends rotation notifications.
+     * If
+     * [rotation_period][google.cloud.secretmanager.v1.Rotation.rotation_period]
+     * is set,
+     * [next_rotation_time][google.cloud.secretmanager.v1.Rotation.next_rotation_time]
+     * must be set.
+     * [next_rotation_time][google.cloud.secretmanager.v1.Rotation.next_rotation_time]
+     * will be advanced by this period when the service automatically sends
+     * rotation notifications.
      * </pre>
      *
      * <code>
@@ -993,9 +1095,14 @@ public com.google.protobuf.Duration.Builder getRotationPeriodBuilder() {
      * <pre>
      * Input only. The Duration between rotation notifications. Must be in seconds
      * and at least 3600s (1h) and at most 3153600000s (100 years).
-     * If [rotation_period][google.cloud.secretmanager.v1.Rotation.rotation_period] is set, [next_rotation_time][google.cloud.secretmanager.v1.Rotation.next_rotation_time] must be set.
-     * [next_rotation_time][google.cloud.secretmanager.v1.Rotation.next_rotation_time] will be advanced by this period when the service
-     * automatically sends rotation notifications.
+     * If
+     * [rotation_period][google.cloud.secretmanager.v1.Rotation.rotation_period]
+     * is set,
+     * [next_rotation_time][google.cloud.secretmanager.v1.Rotation.next_rotation_time]
+     * must be set.
+     * [next_rotation_time][google.cloud.secretmanager.v1.Rotation.next_rotation_time]
+     * will be advanced by this period when the service automatically sends
+     * rotation notifications.
      * </pre>
      *
      * <code>
@@ -1017,9 +1124,14 @@ public com.google.protobuf.DurationOrBuilder getRotationPeriodOrBuilder() {
      * <pre>
      * Input only. The Duration between rotation notifications. Must be in seconds
      * and at least 3600s (1h) and at most 3153600000s (100 years).
-     * If [rotation_period][google.cloud.secretmanager.v1.Rotation.rotation_period] is set, [next_rotation_time][google.cloud.secretmanager.v1.Rotation.next_rotation_time] must be set.
-     * [next_rotation_time][google.cloud.secretmanager.v1.Rotation.next_rotation_time] will be advanced by this period when the service
-     * automatically sends rotation notifications.
+     * If
+     * [rotation_period][google.cloud.secretmanager.v1.Rotation.rotation_period]
+     * is set,
+     * [next_rotation_time][google.cloud.secretmanager.v1.Rotation.next_rotation_time]
+     * must be set.
+     * [next_rotation_time][google.cloud.secretmanager.v1.Rotation.next_rotation_time]
+     * will be advanced by this period when the service automatically sends
+     * rotation notifications.
      * </pre>
      *
      * <code>
diff --git a/java-secretmanager/proto-google-cloud-secretmanager-v1/src/main/java/com/google/cloud/secretmanager/v1/RotationOrBuilder.java b/java-secretmanager/proto-google-cloud-secretmanager-v1/src/main/java/com/google/cloud/secretmanager/v1/RotationOrBuilder.java
index 0b95542baf21..a18169198e53 100644
--- a/java-secretmanager/proto-google-cloud-secretmanager-v1/src/main/java/com/google/cloud/secretmanager/v1/RotationOrBuilder.java
+++ b/java-secretmanager/proto-google-cloud-secretmanager-v1/src/main/java/com/google/cloud/secretmanager/v1/RotationOrBuilder.java
@@ -27,10 +27,14 @@ public interface RotationOrBuilder
    *
    *
    * <pre>
-   * Optional. Timestamp in UTC at which the [Secret][google.cloud.secretmanager.v1.Secret] is scheduled to rotate. Cannot be
-   * set to less than 300s (5 min) in the future and at most 3153600000s (100
-   * years).
-   * [next_rotation_time][google.cloud.secretmanager.v1.Rotation.next_rotation_time] MUST  be set if [rotation_period][google.cloud.secretmanager.v1.Rotation.rotation_period] is set.
+   * Optional. Timestamp in UTC at which the
+   * [Secret][google.cloud.secretmanager.v1.Secret] is scheduled to rotate.
+   * Cannot be set to less than 300s (5 min) in the future and at most
+   * 3153600000s (100 years).
+   * [next_rotation_time][google.cloud.secretmanager.v1.Rotation.next_rotation_time]
+   * MUST  be set if
+   * [rotation_period][google.cloud.secretmanager.v1.Rotation.rotation_period]
+   * is set.
    * </pre>
    *
    * <code>
@@ -44,10 +48,14 @@ public interface RotationOrBuilder
    *
    *
    * <pre>
-   * Optional. Timestamp in UTC at which the [Secret][google.cloud.secretmanager.v1.Secret] is scheduled to rotate. Cannot be
-   * set to less than 300s (5 min) in the future and at most 3153600000s (100
-   * years).
-   * [next_rotation_time][google.cloud.secretmanager.v1.Rotation.next_rotation_time] MUST  be set if [rotation_period][google.cloud.secretmanager.v1.Rotation.rotation_period] is set.
+   * Optional. Timestamp in UTC at which the
+   * [Secret][google.cloud.secretmanager.v1.Secret] is scheduled to rotate.
+   * Cannot be set to less than 300s (5 min) in the future and at most
+   * 3153600000s (100 years).
+   * [next_rotation_time][google.cloud.secretmanager.v1.Rotation.next_rotation_time]
+   * MUST  be set if
+   * [rotation_period][google.cloud.secretmanager.v1.Rotation.rotation_period]
+   * is set.
    * </pre>
    *
    * <code>
@@ -61,10 +69,14 @@ public interface RotationOrBuilder
    *
    *
    * <pre>
-   * Optional. Timestamp in UTC at which the [Secret][google.cloud.secretmanager.v1.Secret] is scheduled to rotate. Cannot be
-   * set to less than 300s (5 min) in the future and at most 3153600000s (100
-   * years).
-   * [next_rotation_time][google.cloud.secretmanager.v1.Rotation.next_rotation_time] MUST  be set if [rotation_period][google.cloud.secretmanager.v1.Rotation.rotation_period] is set.
+   * Optional. Timestamp in UTC at which the
+   * [Secret][google.cloud.secretmanager.v1.Secret] is scheduled to rotate.
+   * Cannot be set to less than 300s (5 min) in the future and at most
+   * 3153600000s (100 years).
+   * [next_rotation_time][google.cloud.secretmanager.v1.Rotation.next_rotation_time]
+   * MUST  be set if
+   * [rotation_period][google.cloud.secretmanager.v1.Rotation.rotation_period]
+   * is set.
    * </pre>
    *
    * <code>
@@ -79,9 +91,14 @@ public interface RotationOrBuilder
    * <pre>
    * Input only. The Duration between rotation notifications. Must be in seconds
    * and at least 3600s (1h) and at most 3153600000s (100 years).
-   * If [rotation_period][google.cloud.secretmanager.v1.Rotation.rotation_period] is set, [next_rotation_time][google.cloud.secretmanager.v1.Rotation.next_rotation_time] must be set.
-   * [next_rotation_time][google.cloud.secretmanager.v1.Rotation.next_rotation_time] will be advanced by this period when the service
-   * automatically sends rotation notifications.
+   * If
+   * [rotation_period][google.cloud.secretmanager.v1.Rotation.rotation_period]
+   * is set,
+   * [next_rotation_time][google.cloud.secretmanager.v1.Rotation.next_rotation_time]
+   * must be set.
+   * [next_rotation_time][google.cloud.secretmanager.v1.Rotation.next_rotation_time]
+   * will be advanced by this period when the service automatically sends
+   * rotation notifications.
    * </pre>
    *
    * <code>
@@ -97,9 +114,14 @@ public interface RotationOrBuilder
    * <pre>
    * Input only. The Duration between rotation notifications. Must be in seconds
    * and at least 3600s (1h) and at most 3153600000s (100 years).
-   * If [rotation_period][google.cloud.secretmanager.v1.Rotation.rotation_period] is set, [next_rotation_time][google.cloud.secretmanager.v1.Rotation.next_rotation_time] must be set.
-   * [next_rotation_time][google.cloud.secretmanager.v1.Rotation.next_rotation_time] will be advanced by this period when the service
-   * automatically sends rotation notifications.
+   * If
+   * [rotation_period][google.cloud.secretmanager.v1.Rotation.rotation_period]
+   * is set,
+   * [next_rotation_time][google.cloud.secretmanager.v1.Rotation.next_rotation_time]
+   * must be set.
+   * [next_rotation_time][google.cloud.secretmanager.v1.Rotation.next_rotation_time]
+   * will be advanced by this period when the service automatically sends
+   * rotation notifications.
    * </pre>
    *
    * <code>
@@ -115,9 +137,14 @@ public interface RotationOrBuilder
    * <pre>
    * Input only. The Duration between rotation notifications. Must be in seconds
    * and at least 3600s (1h) and at most 3153600000s (100 years).
-   * If [rotation_period][google.cloud.secretmanager.v1.Rotation.rotation_period] is set, [next_rotation_time][google.cloud.secretmanager.v1.Rotation.next_rotation_time] must be set.
-   * [next_rotation_time][google.cloud.secretmanager.v1.Rotation.next_rotation_time] will be advanced by this period when the service
-   * automatically sends rotation notifications.
+   * If
+   * [rotation_period][google.cloud.secretmanager.v1.Rotation.rotation_period]
+   * is set,
+   * [next_rotation_time][google.cloud.secretmanager.v1.Rotation.next_rotation_time]
+   * must be set.
+   * [next_rotation_time][google.cloud.secretmanager.v1.Rotation.next_rotation_time]
+   * will be advanced by this period when the service automatically sends
+   * rotation notifications.
    * </pre>
    *
    * <code>
diff --git a/java-secretmanager/proto-google-cloud-secretmanager-v1/src/main/java/com/google/cloud/secretmanager/v1/Secret.java b/java-secretmanager/proto-google-cloud-secretmanager-v1/src/main/java/com/google/cloud/secretmanager/v1/Secret.java
index ca625460f611..d57d43525257 100644
--- a/java-secretmanager/proto-google-cloud-secretmanager-v1/src/main/java/com/google/cloud/secretmanager/v1/Secret.java
+++ b/java-secretmanager/proto-google-cloud-secretmanager-v1/src/main/java/com/google/cloud/secretmanager/v1/Secret.java
@@ -22,10 +22,11 @@
  *
  *
  * <pre>
- * A [Secret][google.cloud.secretmanager.v1.Secret] is a logical secret whose value and versions can
- * be accessed.
- * A [Secret][google.cloud.secretmanager.v1.Secret] is made up of zero or more [SecretVersions][google.cloud.secretmanager.v1.SecretVersion] that
- * represent the secret data.
+ * A [Secret][google.cloud.secretmanager.v1.Secret] is a logical secret whose
+ * value and versions can be accessed.
+ * A [Secret][google.cloud.secretmanager.v1.Secret] is made up of zero or more
+ * [SecretVersions][google.cloud.secretmanager.v1.SecretVersion] that represent
+ * the secret data.
  * </pre>
  *
  * Protobuf type {@code google.cloud.secretmanager.v1.Secret}
@@ -70,6 +71,8 @@ protected com.google.protobuf.MapField internalGetMapField(int number) {
         return internalGetLabels();
       case 11:
         return internalGetVersionAliases();
+      case 13:
+        return internalGetAnnotations();
       default:
         throw new RuntimeException("Invalid map field number: " + number);
     }
@@ -138,7 +141,9 @@ public ExpirationCase getExpirationCase() {
    *
    *
    * <pre>
-   * Output only. The resource name of the [Secret][google.cloud.secretmanager.v1.Secret] in the format `projects/&#42;&#47;secrets/&#42;`.
+   * Output only. The resource name of the
+   * [Secret][google.cloud.secretmanager.v1.Secret] in the format
+   * `projects/&#42;&#47;secrets/&#42;`.
    * </pre>
    *
    * <code>string name = 1 [(.google.api.field_behavior) = OUTPUT_ONLY];</code>
@@ -161,7 +166,9 @@ public java.lang.String getName() {
    *
    *
    * <pre>
-   * Output only. The resource name of the [Secret][google.cloud.secretmanager.v1.Secret] in the format `projects/&#42;&#47;secrets/&#42;`.
+   * Output only. The resource name of the
+   * [Secret][google.cloud.secretmanager.v1.Secret] in the format
+   * `projects/&#42;&#47;secrets/&#42;`.
    * </pre>
    *
    * <code>string name = 1 [(.google.api.field_behavior) = OUTPUT_ONLY];</code>
@@ -187,7 +194,8 @@ public com.google.protobuf.ByteString getNameBytes() {
    *
    *
    * <pre>
-   * Required. Immutable. The replication policy of the secret data attached to the [Secret][google.cloud.secretmanager.v1.Secret].
+   * Required. Immutable. The replication policy of the secret data attached to
+   * the [Secret][google.cloud.secretmanager.v1.Secret].
    * The replication policy cannot be changed after the Secret has been created.
    * </pre>
    *
@@ -205,7 +213,8 @@ public boolean hasReplication() {
    *
    *
    * <pre>
-   * Required. Immutable. The replication policy of the secret data attached to the [Secret][google.cloud.secretmanager.v1.Secret].
+   * Required. Immutable. The replication policy of the secret data attached to
+   * the [Secret][google.cloud.secretmanager.v1.Secret].
    * The replication policy cannot be changed after the Secret has been created.
    * </pre>
    *
@@ -225,7 +234,8 @@ public com.google.cloud.secretmanager.v1.Replication getReplication() {
    *
    *
    * <pre>
-   * Required. Immutable. The replication policy of the secret data attached to the [Secret][google.cloud.secretmanager.v1.Secret].
+   * Required. Immutable. The replication policy of the secret data attached to
+   * the [Secret][google.cloud.secretmanager.v1.Secret].
    * The replication policy cannot be changed after the Secret has been created.
    * </pre>
    *
@@ -244,7 +254,8 @@ public com.google.cloud.secretmanager.v1.ReplicationOrBuilder getReplicationOrBu
    *
    *
    * <pre>
-   * Output only. The time at which the [Secret][google.cloud.secretmanager.v1.Secret] was created.
+   * Output only. The time at which the
+   * [Secret][google.cloud.secretmanager.v1.Secret] was created.
    * </pre>
    *
    * <code>.google.protobuf.Timestamp create_time = 3 [(.google.api.field_behavior) = OUTPUT_ONLY];
@@ -260,7 +271,8 @@ public boolean hasCreateTime() {
    *
    *
    * <pre>
-   * Output only. The time at which the [Secret][google.cloud.secretmanager.v1.Secret] was created.
+   * Output only. The time at which the
+   * [Secret][google.cloud.secretmanager.v1.Secret] was created.
    * </pre>
    *
    * <code>.google.protobuf.Timestamp create_time = 3 [(.google.api.field_behavior) = OUTPUT_ONLY];
@@ -276,7 +288,8 @@ public com.google.protobuf.Timestamp getCreateTime() {
    *
    *
    * <pre>
-   * Output only. The time at which the [Secret][google.cloud.secretmanager.v1.Secret] was created.
+   * Output only. The time at which the
+   * [Secret][google.cloud.secretmanager.v1.Secret] was created.
    * </pre>
    *
    * <code>.google.protobuf.Timestamp create_time = 3 [(.google.api.field_behavior) = OUTPUT_ONLY];
@@ -419,8 +432,8 @@ public java.lang.String getLabelsOrThrow(java.lang.String key) {
    *
    *
    * <pre>
-   * Optional. A list of up to 10 Pub/Sub topics to which messages are published when
-   * control plane operations are called on the secret or its versions.
+   * Optional. A list of up to 10 Pub/Sub topics to which messages are published
+   * when control plane operations are called on the secret or its versions.
    * </pre>
    *
    * <code>
@@ -435,8 +448,8 @@ public java.util.List<com.google.cloud.secretmanager.v1.Topic> getTopicsList() {
    *
    *
    * <pre>
-   * Optional. A list of up to 10 Pub/Sub topics to which messages are published when
-   * control plane operations are called on the secret or its versions.
+   * Optional. A list of up to 10 Pub/Sub topics to which messages are published
+   * when control plane operations are called on the secret or its versions.
    * </pre>
    *
    * <code>
@@ -452,8 +465,8 @@ public java.util.List<com.google.cloud.secretmanager.v1.Topic> getTopicsList() {
    *
    *
    * <pre>
-   * Optional. A list of up to 10 Pub/Sub topics to which messages are published when
-   * control plane operations are called on the secret or its versions.
+   * Optional. A list of up to 10 Pub/Sub topics to which messages are published
+   * when control plane operations are called on the secret or its versions.
    * </pre>
    *
    * <code>
@@ -468,8 +481,8 @@ public int getTopicsCount() {
    *
    *
    * <pre>
-   * Optional. A list of up to 10 Pub/Sub topics to which messages are published when
-   * control plane operations are called on the secret or its versions.
+   * Optional. A list of up to 10 Pub/Sub topics to which messages are published
+   * when control plane operations are called on the secret or its versions.
    * </pre>
    *
    * <code>
@@ -484,8 +497,8 @@ public com.google.cloud.secretmanager.v1.Topic getTopics(int index) {
    *
    *
    * <pre>
-   * Optional. A list of up to 10 Pub/Sub topics to which messages are published when
-   * control plane operations are called on the secret or its versions.
+   * Optional. A list of up to 10 Pub/Sub topics to which messages are published
+   * when control plane operations are called on the secret or its versions.
    * </pre>
    *
    * <code>
@@ -502,8 +515,9 @@ public com.google.cloud.secretmanager.v1.TopicOrBuilder getTopicsOrBuilder(int i
    *
    *
    * <pre>
-   * Optional. Timestamp in UTC when the [Secret][google.cloud.secretmanager.v1.Secret] is scheduled to expire. This is
-   * always provided on output, regardless of what was sent on input.
+   * Optional. Timestamp in UTC when the
+   * [Secret][google.cloud.secretmanager.v1.Secret] is scheduled to expire.
+   * This is always provided on output, regardless of what was sent on input.
    * </pre>
    *
    * <code>.google.protobuf.Timestamp expire_time = 6 [(.google.api.field_behavior) = OPTIONAL];
@@ -519,8 +533,9 @@ public boolean hasExpireTime() {
    *
    *
    * <pre>
-   * Optional. Timestamp in UTC when the [Secret][google.cloud.secretmanager.v1.Secret] is scheduled to expire. This is
-   * always provided on output, regardless of what was sent on input.
+   * Optional. Timestamp in UTC when the
+   * [Secret][google.cloud.secretmanager.v1.Secret] is scheduled to expire.
+   * This is always provided on output, regardless of what was sent on input.
    * </pre>
    *
    * <code>.google.protobuf.Timestamp expire_time = 6 [(.google.api.field_behavior) = OPTIONAL];
@@ -539,8 +554,9 @@ public com.google.protobuf.Timestamp getExpireTime() {
    *
    *
    * <pre>
-   * Optional. Timestamp in UTC when the [Secret][google.cloud.secretmanager.v1.Secret] is scheduled to expire. This is
-   * always provided on output, regardless of what was sent on input.
+   * Optional. Timestamp in UTC when the
+   * [Secret][google.cloud.secretmanager.v1.Secret] is scheduled to expire.
+   * This is always provided on output, regardless of what was sent on input.
    * </pre>
    *
    * <code>.google.protobuf.Timestamp expire_time = 6 [(.google.api.field_behavior) = OPTIONAL];
@@ -559,7 +575,8 @@ public com.google.protobuf.TimestampOrBuilder getExpireTimeOrBuilder() {
    *
    *
    * <pre>
-   * Input only. The TTL for the [Secret][google.cloud.secretmanager.v1.Secret].
+   * Input only. The TTL for the
+   * [Secret][google.cloud.secretmanager.v1.Secret].
    * </pre>
    *
    * <code>.google.protobuf.Duration ttl = 7 [(.google.api.field_behavior) = INPUT_ONLY];</code>
@@ -574,7 +591,8 @@ public boolean hasTtl() {
    *
    *
    * <pre>
-   * Input only. The TTL for the [Secret][google.cloud.secretmanager.v1.Secret].
+   * Input only. The TTL for the
+   * [Secret][google.cloud.secretmanager.v1.Secret].
    * </pre>
    *
    * <code>.google.protobuf.Duration ttl = 7 [(.google.api.field_behavior) = INPUT_ONLY];</code>
@@ -592,7 +610,8 @@ public com.google.protobuf.Duration getTtl() {
    *
    *
    * <pre>
-   * Input only. The TTL for the [Secret][google.cloud.secretmanager.v1.Secret].
+   * Input only. The TTL for the
+   * [Secret][google.cloud.secretmanager.v1.Secret].
    * </pre>
    *
    * <code>.google.protobuf.Duration ttl = 7 [(.google.api.field_behavior) = INPUT_ONLY];</code>
@@ -611,7 +630,8 @@ public com.google.protobuf.DurationOrBuilder getTtlOrBuilder() {
    *
    *
    * <pre>
-   * Optional. Etag of the currently stored [Secret][google.cloud.secretmanager.v1.Secret].
+   * Optional. Etag of the currently stored
+   * [Secret][google.cloud.secretmanager.v1.Secret].
    * </pre>
    *
    * <code>string etag = 8 [(.google.api.field_behavior) = OPTIONAL];</code>
@@ -634,7 +654,8 @@ public java.lang.String getEtag() {
    *
    *
    * <pre>
-   * Optional. Etag of the currently stored [Secret][google.cloud.secretmanager.v1.Secret].
+   * Optional. Etag of the currently stored
+   * [Secret][google.cloud.secretmanager.v1.Secret].
    * </pre>
    *
    * <code>string etag = 8 [(.google.api.field_behavior) = OPTIONAL];</code>
@@ -660,8 +681,9 @@ public com.google.protobuf.ByteString getEtagBytes() {
    *
    *
    * <pre>
-   * Optional. Rotation policy attached to the [Secret][google.cloud.secretmanager.v1.Secret]. May be excluded if there is no
-   * rotation policy.
+   * Optional. Rotation policy attached to the
+   * [Secret][google.cloud.secretmanager.v1.Secret]. May be excluded if there is
+   * no rotation policy.
    * </pre>
    *
    * <code>
@@ -678,8 +700,9 @@ public boolean hasRotation() {
    *
    *
    * <pre>
-   * Optional. Rotation policy attached to the [Secret][google.cloud.secretmanager.v1.Secret]. May be excluded if there is no
-   * rotation policy.
+   * Optional. Rotation policy attached to the
+   * [Secret][google.cloud.secretmanager.v1.Secret]. May be excluded if there is
+   * no rotation policy.
    * </pre>
    *
    * <code>
@@ -698,8 +721,9 @@ public com.google.cloud.secretmanager.v1.Rotation getRotation() {
    *
    *
    * <pre>
-   * Optional. Rotation policy attached to the [Secret][google.cloud.secretmanager.v1.Secret]. May be excluded if there is no
-   * rotation policy.
+   * Optional. Rotation policy attached to the
+   * [Secret][google.cloud.secretmanager.v1.Secret]. May be excluded if there is
+   * no rotation policy.
    * </pre>
    *
    * <code>
@@ -847,6 +871,142 @@ public long getVersionAliasesOrThrow(java.lang.String key) {
     return map.get(key);
   }
 
+  public static final int ANNOTATIONS_FIELD_NUMBER = 13;
+
+  private static final class AnnotationsDefaultEntryHolder {
+    static final com.google.protobuf.MapEntry<java.lang.String, java.lang.String> defaultEntry =
+        com.google.protobuf.MapEntry.<java.lang.String, java.lang.String>newDefaultInstance(
+            com.google.cloud.secretmanager.v1.ResourcesProto
+                .internal_static_google_cloud_secretmanager_v1_Secret_AnnotationsEntry_descriptor,
+            com.google.protobuf.WireFormat.FieldType.STRING,
+            "",
+            com.google.protobuf.WireFormat.FieldType.STRING,
+            "");
+  }
+
+  private com.google.protobuf.MapField<java.lang.String, java.lang.String> annotations_;
+
+  private com.google.protobuf.MapField<java.lang.String, java.lang.String>
+      internalGetAnnotations() {
+    if (annotations_ == null) {
+      return com.google.protobuf.MapField.emptyMapField(AnnotationsDefaultEntryHolder.defaultEntry);
+    }
+    return annotations_;
+  }
+
+  public int getAnnotationsCount() {
+    return internalGetAnnotations().getMap().size();
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Optional. Custom metadata about the secret.
+   * Annotations are distinct from various forms of labels.
+   * Annotations exist to allow client tools to store their own state
+   * information without requiring a database.
+   * Annotation keys must be between 1 and 63 characters long, have a UTF-8
+   * encoding of maximum 128 bytes, begin and end with an alphanumeric character
+   * ([a-z0-9A-Z]), and may have dashes (-), underscores (_), dots (.), and
+   * alphanumerics in between these symbols.
+   * The total size of annotation keys and values must be less than 16KiB.
+   * </pre>
+   *
+   * <code>map&lt;string, string&gt; annotations = 13 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   */
+  @java.lang.Override
+  public boolean containsAnnotations(java.lang.String key) {
+    if (key == null) {
+      throw new NullPointerException("map key");
+    }
+    return internalGetAnnotations().getMap().containsKey(key);
+  }
+  /** Use {@link #getAnnotationsMap()} instead. */
+  @java.lang.Override
+  @java.lang.Deprecated
+  public java.util.Map<java.lang.String, java.lang.String> getAnnotations() {
+    return getAnnotationsMap();
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Optional. Custom metadata about the secret.
+   * Annotations are distinct from various forms of labels.
+   * Annotations exist to allow client tools to store their own state
+   * information without requiring a database.
+   * Annotation keys must be between 1 and 63 characters long, have a UTF-8
+   * encoding of maximum 128 bytes, begin and end with an alphanumeric character
+   * ([a-z0-9A-Z]), and may have dashes (-), underscores (_), dots (.), and
+   * alphanumerics in between these symbols.
+   * The total size of annotation keys and values must be less than 16KiB.
+   * </pre>
+   *
+   * <code>map&lt;string, string&gt; annotations = 13 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   */
+  @java.lang.Override
+  public java.util.Map<java.lang.String, java.lang.String> getAnnotationsMap() {
+    return internalGetAnnotations().getMap();
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Optional. Custom metadata about the secret.
+   * Annotations are distinct from various forms of labels.
+   * Annotations exist to allow client tools to store their own state
+   * information without requiring a database.
+   * Annotation keys must be between 1 and 63 characters long, have a UTF-8
+   * encoding of maximum 128 bytes, begin and end with an alphanumeric character
+   * ([a-z0-9A-Z]), and may have dashes (-), underscores (_), dots (.), and
+   * alphanumerics in between these symbols.
+   * The total size of annotation keys and values must be less than 16KiB.
+   * </pre>
+   *
+   * <code>map&lt;string, string&gt; annotations = 13 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   */
+  @java.lang.Override
+  public java.lang.String getAnnotationsOrDefault(
+      java.lang.String key, java.lang.String defaultValue) {
+    if (key == null) {
+      throw new NullPointerException("map key");
+    }
+    java.util.Map<java.lang.String, java.lang.String> map = internalGetAnnotations().getMap();
+    return map.containsKey(key) ? map.get(key) : defaultValue;
+  }
+  /**
+   *
+   *
+   * <pre>
+   * Optional. Custom metadata about the secret.
+   * Annotations are distinct from various forms of labels.
+   * Annotations exist to allow client tools to store their own state
+   * information without requiring a database.
+   * Annotation keys must be between 1 and 63 characters long, have a UTF-8
+   * encoding of maximum 128 bytes, begin and end with an alphanumeric character
+   * ([a-z0-9A-Z]), and may have dashes (-), underscores (_), dots (.), and
+   * alphanumerics in between these symbols.
+   * The total size of annotation keys and values must be less than 16KiB.
+   * </pre>
+   *
+   * <code>map&lt;string, string&gt; annotations = 13 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   */
+  @java.lang.Override
+  public java.lang.String getAnnotationsOrThrow(java.lang.String key) {
+    if (key == null) {
+      throw new NullPointerException("map key");
+    }
+    java.util.Map<java.lang.String, java.lang.String> map = internalGetAnnotations().getMap();
+    if (!map.containsKey(key)) {
+      throw new java.lang.IllegalArgumentException();
+    }
+    return map.get(key);
+  }
+
   private byte memoizedIsInitialized = -1;
 
   @java.lang.Override
@@ -889,6 +1049,8 @@ public void writeTo(com.google.protobuf.CodedOutputStream output) throws java.io
     }
     com.google.protobuf.GeneratedMessageV3.serializeStringMapTo(
         output, internalGetVersionAliases(), VersionAliasesDefaultEntryHolder.defaultEntry, 11);
+    com.google.protobuf.GeneratedMessageV3.serializeStringMapTo(
+        output, internalGetAnnotations(), AnnotationsDefaultEntryHolder.defaultEntry, 13);
     getUnknownFields().writeTo(output);
   }
 
@@ -946,6 +1108,16 @@ public int getSerializedSize() {
               .build();
       size += com.google.protobuf.CodedOutputStream.computeMessageSize(11, versionAliases__);
     }
+    for (java.util.Map.Entry<java.lang.String, java.lang.String> entry :
+        internalGetAnnotations().getMap().entrySet()) {
+      com.google.protobuf.MapEntry<java.lang.String, java.lang.String> annotations__ =
+          AnnotationsDefaultEntryHolder.defaultEntry
+              .newBuilderForType()
+              .setKey(entry.getKey())
+              .setValue(entry.getValue())
+              .build();
+      size += com.google.protobuf.CodedOutputStream.computeMessageSize(13, annotations__);
+    }
     size += getUnknownFields().getSerializedSize();
     memoizedSize = size;
     return size;
@@ -978,6 +1150,7 @@ public boolean equals(final java.lang.Object obj) {
       if (!getRotation().equals(other.getRotation())) return false;
     }
     if (!internalGetVersionAliases().equals(other.internalGetVersionAliases())) return false;
+    if (!internalGetAnnotations().equals(other.internalGetAnnotations())) return false;
     if (!getExpirationCase().equals(other.getExpirationCase())) return false;
     switch (expirationCase_) {
       case 6:
@@ -1028,6 +1201,10 @@ public int hashCode() {
       hash = (37 * hash) + VERSION_ALIASES_FIELD_NUMBER;
       hash = (53 * hash) + internalGetVersionAliases().hashCode();
     }
+    if (!internalGetAnnotations().getMap().isEmpty()) {
+      hash = (37 * hash) + ANNOTATIONS_FIELD_NUMBER;
+      hash = (53 * hash) + internalGetAnnotations().hashCode();
+    }
     switch (expirationCase_) {
       case 6:
         hash = (37 * hash) + EXPIRE_TIME_FIELD_NUMBER;
@@ -1144,10 +1321,11 @@ protected Builder newBuilderForType(com.google.protobuf.GeneratedMessageV3.Build
    *
    *
    * <pre>
-   * A [Secret][google.cloud.secretmanager.v1.Secret] is a logical secret whose value and versions can
-   * be accessed.
-   * A [Secret][google.cloud.secretmanager.v1.Secret] is made up of zero or more [SecretVersions][google.cloud.secretmanager.v1.SecretVersion] that
-   * represent the secret data.
+   * A [Secret][google.cloud.secretmanager.v1.Secret] is a logical secret whose
+   * value and versions can be accessed.
+   * A [Secret][google.cloud.secretmanager.v1.Secret] is made up of zero or more
+   * [SecretVersions][google.cloud.secretmanager.v1.SecretVersion] that represent
+   * the secret data.
    * </pre>
    *
    * Protobuf type {@code google.cloud.secretmanager.v1.Secret}
@@ -1168,6 +1346,8 @@ protected com.google.protobuf.MapField internalGetMapField(int number) {
           return internalGetLabels();
         case 11:
           return internalGetVersionAliases();
+        case 13:
+          return internalGetAnnotations();
         default:
           throw new RuntimeException("Invalid map field number: " + number);
       }
@@ -1180,6 +1360,8 @@ protected com.google.protobuf.MapField internalGetMutableMapField(int number) {
           return internalGetMutableLabels();
         case 11:
           return internalGetMutableVersionAliases();
+        case 13:
+          return internalGetMutableAnnotations();
         default:
           throw new RuntimeException("Invalid map field number: " + number);
       }
@@ -1242,6 +1424,7 @@ public Builder clear() {
         rotationBuilder_ = null;
       }
       internalGetMutableVersionAliases().clear();
+      internalGetMutableAnnotations().clear();
       expirationCase_ = 0;
       expiration_ = null;
       return this;
@@ -1316,6 +1499,8 @@ public com.google.cloud.secretmanager.v1.Secret buildPartial() {
       }
       result.versionAliases_ = internalGetVersionAliases();
       result.versionAliases_.makeImmutable();
+      result.annotations_ = internalGetAnnotations();
+      result.annotations_.makeImmutable();
       result.expirationCase_ = expirationCase_;
       onBuilt();
       return result;
@@ -1412,6 +1597,7 @@ public Builder mergeFrom(com.google.cloud.secretmanager.v1.Secret other) {
         mergeRotation(other.getRotation());
       }
       internalGetMutableVersionAliases().mergeFrom(other.internalGetVersionAliases());
+      internalGetMutableAnnotations().mergeFrom(other.internalGetAnnotations());
       switch (other.getExpirationCase()) {
         case EXPIRE_TIME:
           {
@@ -1531,6 +1717,17 @@ public Builder mergeFrom(
                     .put(versionAliases__.getKey(), versionAliases__.getValue());
                 break;
               } // case 90
+            case 106:
+              {
+                com.google.protobuf.MapEntry<java.lang.String, java.lang.String> annotations__ =
+                    input.readMessage(
+                        AnnotationsDefaultEntryHolder.defaultEntry.getParserForType(),
+                        extensionRegistry);
+                internalGetMutableAnnotations()
+                    .getMutableMap()
+                    .put(annotations__.getKey(), annotations__.getValue());
+                break;
+              } // case 106
             default:
               {
                 if (!super.parseUnknownField(input, extensionRegistry, tag)) {
@@ -1569,7 +1766,9 @@ public Builder clearExpiration() {
      *
      *
      * <pre>
-     * Output only. The resource name of the [Secret][google.cloud.secretmanager.v1.Secret] in the format `projects/&#42;&#47;secrets/&#42;`.
+     * Output only. The resource name of the
+     * [Secret][google.cloud.secretmanager.v1.Secret] in the format
+     * `projects/&#42;&#47;secrets/&#42;`.
      * </pre>
      *
      * <code>string name = 1 [(.google.api.field_behavior) = OUTPUT_ONLY];</code>
@@ -1591,7 +1790,9 @@ public java.lang.String getName() {
      *
      *
      * <pre>
-     * Output only. The resource name of the [Secret][google.cloud.secretmanager.v1.Secret] in the format `projects/&#42;&#47;secrets/&#42;`.
+     * Output only. The resource name of the
+     * [Secret][google.cloud.secretmanager.v1.Secret] in the format
+     * `projects/&#42;&#47;secrets/&#42;`.
      * </pre>
      *
      * <code>string name = 1 [(.google.api.field_behavior) = OUTPUT_ONLY];</code>
@@ -1613,7 +1814,9 @@ public com.google.protobuf.ByteString getNameBytes() {
      *
      *
      * <pre>
-     * Output only. The resource name of the [Secret][google.cloud.secretmanager.v1.Secret] in the format `projects/&#42;&#47;secrets/&#42;`.
+     * Output only. The resource name of the
+     * [Secret][google.cloud.secretmanager.v1.Secret] in the format
+     * `projects/&#42;&#47;secrets/&#42;`.
      * </pre>
      *
      * <code>string name = 1 [(.google.api.field_behavior) = OUTPUT_ONLY];</code>
@@ -1634,7 +1837,9 @@ public Builder setName(java.lang.String value) {
      *
      *
      * <pre>
-     * Output only. The resource name of the [Secret][google.cloud.secretmanager.v1.Secret] in the format `projects/&#42;&#47;secrets/&#42;`.
+     * Output only. The resource name of the
+     * [Secret][google.cloud.secretmanager.v1.Secret] in the format
+     * `projects/&#42;&#47;secrets/&#42;`.
      * </pre>
      *
      * <code>string name = 1 [(.google.api.field_behavior) = OUTPUT_ONLY];</code>
@@ -1651,7 +1856,9 @@ public Builder clearName() {
      *
      *
      * <pre>
-     * Output only. The resource name of the [Secret][google.cloud.secretmanager.v1.Secret] in the format `projects/&#42;&#47;secrets/&#42;`.
+     * Output only. The resource name of the
+     * [Secret][google.cloud.secretmanager.v1.Secret] in the format
+     * `projects/&#42;&#47;secrets/&#42;`.
      * </pre>
      *
      * <code>string name = 1 [(.google.api.field_behavior) = OUTPUT_ONLY];</code>
@@ -1680,7 +1887,8 @@ public Builder setNameBytes(com.google.protobuf.ByteString value) {
      *
      *
      * <pre>
-     * Required. Immutable. The replication policy of the secret data attached to the [Secret][google.cloud.secretmanager.v1.Secret].
+     * Required. Immutable. The replication policy of the secret data attached to
+     * the [Secret][google.cloud.secretmanager.v1.Secret].
      * The replication policy cannot be changed after the Secret has been created.
      * </pre>
      *
@@ -1697,7 +1905,8 @@ public boolean hasReplication() {
      *
      *
      * <pre>
-     * Required. Immutable. The replication policy of the secret data attached to the [Secret][google.cloud.secretmanager.v1.Secret].
+     * Required. Immutable. The replication policy of the secret data attached to
+     * the [Secret][google.cloud.secretmanager.v1.Secret].
      * The replication policy cannot be changed after the Secret has been created.
      * </pre>
      *
@@ -1720,7 +1929,8 @@ public com.google.cloud.secretmanager.v1.Replication getReplication() {
      *
      *
      * <pre>
-     * Required. Immutable. The replication policy of the secret data attached to the [Secret][google.cloud.secretmanager.v1.Secret].
+     * Required. Immutable. The replication policy of the secret data attached to
+     * the [Secret][google.cloud.secretmanager.v1.Secret].
      * The replication policy cannot be changed after the Secret has been created.
      * </pre>
      *
@@ -1745,7 +1955,8 @@ public Builder setReplication(com.google.cloud.secretmanager.v1.Replication valu
      *
      *
      * <pre>
-     * Required. Immutable. The replication policy of the secret data attached to the [Secret][google.cloud.secretmanager.v1.Secret].
+     * Required. Immutable. The replication policy of the secret data attached to
+     * the [Secret][google.cloud.secretmanager.v1.Secret].
      * The replication policy cannot be changed after the Secret has been created.
      * </pre>
      *
@@ -1768,7 +1979,8 @@ public Builder setReplication(
      *
      *
      * <pre>
-     * Required. Immutable. The replication policy of the secret data attached to the [Secret][google.cloud.secretmanager.v1.Secret].
+     * Required. Immutable. The replication policy of the secret data attached to
+     * the [Secret][google.cloud.secretmanager.v1.Secret].
      * The replication policy cannot be changed after the Secret has been created.
      * </pre>
      *
@@ -1797,7 +2009,8 @@ public Builder mergeReplication(com.google.cloud.secretmanager.v1.Replication va
      *
      *
      * <pre>
-     * Required. Immutable. The replication policy of the secret data attached to the [Secret][google.cloud.secretmanager.v1.Secret].
+     * Required. Immutable. The replication policy of the secret data attached to
+     * the [Secret][google.cloud.secretmanager.v1.Secret].
      * The replication policy cannot be changed after the Secret has been created.
      * </pre>
      *
@@ -1820,7 +2033,8 @@ public Builder clearReplication() {
      *
      *
      * <pre>
-     * Required. Immutable. The replication policy of the secret data attached to the [Secret][google.cloud.secretmanager.v1.Secret].
+     * Required. Immutable. The replication policy of the secret data attached to
+     * the [Secret][google.cloud.secretmanager.v1.Secret].
      * The replication policy cannot be changed after the Secret has been created.
      * </pre>
      *
@@ -1837,7 +2051,8 @@ public com.google.cloud.secretmanager.v1.Replication.Builder getReplicationBuild
      *
      *
      * <pre>
-     * Required. Immutable. The replication policy of the secret data attached to the [Secret][google.cloud.secretmanager.v1.Secret].
+     * Required. Immutable. The replication policy of the secret data attached to
+     * the [Secret][google.cloud.secretmanager.v1.Secret].
      * The replication policy cannot be changed after the Secret has been created.
      * </pre>
      *
@@ -1858,7 +2073,8 @@ public com.google.cloud.secretmanager.v1.ReplicationOrBuilder getReplicationOrBu
      *
      *
      * <pre>
-     * Required. Immutable. The replication policy of the secret data attached to the [Secret][google.cloud.secretmanager.v1.Secret].
+     * Required. Immutable. The replication policy of the secret data attached to
+     * the [Secret][google.cloud.secretmanager.v1.Secret].
      * The replication policy cannot be changed after the Secret has been created.
      * </pre>
      *
@@ -1893,7 +2109,8 @@ public com.google.cloud.secretmanager.v1.ReplicationOrBuilder getReplicationOrBu
      *
      *
      * <pre>
-     * Output only. The time at which the [Secret][google.cloud.secretmanager.v1.Secret] was created.
+     * Output only. The time at which the
+     * [Secret][google.cloud.secretmanager.v1.Secret] was created.
      * </pre>
      *
      * <code>
@@ -1909,7 +2126,8 @@ public boolean hasCreateTime() {
      *
      *
      * <pre>
-     * Output only. The time at which the [Secret][google.cloud.secretmanager.v1.Secret] was created.
+     * Output only. The time at which the
+     * [Secret][google.cloud.secretmanager.v1.Secret] was created.
      * </pre>
      *
      * <code>
@@ -1931,7 +2149,8 @@ public com.google.protobuf.Timestamp getCreateTime() {
      *
      *
      * <pre>
-     * Output only. The time at which the [Secret][google.cloud.secretmanager.v1.Secret] was created.
+     * Output only. The time at which the
+     * [Secret][google.cloud.secretmanager.v1.Secret] was created.
      * </pre>
      *
      * <code>
@@ -1955,7 +2174,8 @@ public Builder setCreateTime(com.google.protobuf.Timestamp value) {
      *
      *
      * <pre>
-     * Output only. The time at which the [Secret][google.cloud.secretmanager.v1.Secret] was created.
+     * Output only. The time at which the
+     * [Secret][google.cloud.secretmanager.v1.Secret] was created.
      * </pre>
      *
      * <code>
@@ -1976,7 +2196,8 @@ public Builder setCreateTime(com.google.protobuf.Timestamp.Builder builderForVal
      *
      *
      * <pre>
-     * Output only. The time at which the [Secret][google.cloud.secretmanager.v1.Secret] was created.
+     * Output only. The time at which the
+     * [Secret][google.cloud.secretmanager.v1.Secret] was created.
      * </pre>
      *
      * <code>
@@ -2002,7 +2223,8 @@ public Builder mergeCreateTime(com.google.protobuf.Timestamp value) {
      *
      *
      * <pre>
-     * Output only. The time at which the [Secret][google.cloud.secretmanager.v1.Secret] was created.
+     * Output only. The time at which the
+     * [Secret][google.cloud.secretmanager.v1.Secret] was created.
      * </pre>
      *
      * <code>
@@ -2024,7 +2246,8 @@ public Builder clearCreateTime() {
      *
      *
      * <pre>
-     * Output only. The time at which the [Secret][google.cloud.secretmanager.v1.Secret] was created.
+     * Output only. The time at which the
+     * [Secret][google.cloud.secretmanager.v1.Secret] was created.
      * </pre>
      *
      * <code>
@@ -2040,7 +2263,8 @@ public com.google.protobuf.Timestamp.Builder getCreateTimeBuilder() {
      *
      *
      * <pre>
-     * Output only. The time at which the [Secret][google.cloud.secretmanager.v1.Secret] was created.
+     * Output only. The time at which the
+     * [Secret][google.cloud.secretmanager.v1.Secret] was created.
      * </pre>
      *
      * <code>
@@ -2060,7 +2284,8 @@ public com.google.protobuf.TimestampOrBuilder getCreateTimeOrBuilder() {
      *
      *
      * <pre>
-     * Output only. The time at which the [Secret][google.cloud.secretmanager.v1.Secret] was created.
+     * Output only. The time at which the
+     * [Secret][google.cloud.secretmanager.v1.Secret] was created.
      * </pre>
      *
      * <code>
@@ -2311,8 +2536,8 @@ private void ensureTopicsIsMutable() {
      *
      *
      * <pre>
-     * Optional. A list of up to 10 Pub/Sub topics to which messages are published when
-     * control plane operations are called on the secret or its versions.
+     * Optional. A list of up to 10 Pub/Sub topics to which messages are published
+     * when control plane operations are called on the secret or its versions.
      * </pre>
      *
      * <code>
@@ -2330,8 +2555,8 @@ public java.util.List<com.google.cloud.secretmanager.v1.Topic> getTopicsList() {
      *
      *
      * <pre>
-     * Optional. A list of up to 10 Pub/Sub topics to which messages are published when
-     * control plane operations are called on the secret or its versions.
+     * Optional. A list of up to 10 Pub/Sub topics to which messages are published
+     * when control plane operations are called on the secret or its versions.
      * </pre>
      *
      * <code>
@@ -2349,8 +2574,8 @@ public int getTopicsCount() {
      *
      *
      * <pre>
-     * Optional. A list of up to 10 Pub/Sub topics to which messages are published when
-     * control plane operations are called on the secret or its versions.
+     * Optional. A list of up to 10 Pub/Sub topics to which messages are published
+     * when control plane operations are called on the secret or its versions.
      * </pre>
      *
      * <code>
@@ -2368,8 +2593,8 @@ public com.google.cloud.secretmanager.v1.Topic getTopics(int index) {
      *
      *
      * <pre>
-     * Optional. A list of up to 10 Pub/Sub topics to which messages are published when
-     * control plane operations are called on the secret or its versions.
+     * Optional. A list of up to 10 Pub/Sub topics to which messages are published
+     * when control plane operations are called on the secret or its versions.
      * </pre>
      *
      * <code>
@@ -2393,8 +2618,8 @@ public Builder setTopics(int index, com.google.cloud.secretmanager.v1.Topic valu
      *
      *
      * <pre>
-     * Optional. A list of up to 10 Pub/Sub topics to which messages are published when
-     * control plane operations are called on the secret or its versions.
+     * Optional. A list of up to 10 Pub/Sub topics to which messages are published
+     * when control plane operations are called on the secret or its versions.
      * </pre>
      *
      * <code>
@@ -2416,8 +2641,8 @@ public Builder setTopics(
      *
      *
      * <pre>
-     * Optional. A list of up to 10 Pub/Sub topics to which messages are published when
-     * control plane operations are called on the secret or its versions.
+     * Optional. A list of up to 10 Pub/Sub topics to which messages are published
+     * when control plane operations are called on the secret or its versions.
      * </pre>
      *
      * <code>
@@ -2441,8 +2666,8 @@ public Builder addTopics(com.google.cloud.secretmanager.v1.Topic value) {
      *
      *
      * <pre>
-     * Optional. A list of up to 10 Pub/Sub topics to which messages are published when
-     * control plane operations are called on the secret or its versions.
+     * Optional. A list of up to 10 Pub/Sub topics to which messages are published
+     * when control plane operations are called on the secret or its versions.
      * </pre>
      *
      * <code>
@@ -2466,8 +2691,8 @@ public Builder addTopics(int index, com.google.cloud.secretmanager.v1.Topic valu
      *
      *
      * <pre>
-     * Optional. A list of up to 10 Pub/Sub topics to which messages are published when
-     * control plane operations are called on the secret or its versions.
+     * Optional. A list of up to 10 Pub/Sub topics to which messages are published
+     * when control plane operations are called on the secret or its versions.
      * </pre>
      *
      * <code>
@@ -2488,8 +2713,8 @@ public Builder addTopics(com.google.cloud.secretmanager.v1.Topic.Builder builder
      *
      *
      * <pre>
-     * Optional. A list of up to 10 Pub/Sub topics to which messages are published when
-     * control plane operations are called on the secret or its versions.
+     * Optional. A list of up to 10 Pub/Sub topics to which messages are published
+     * when control plane operations are called on the secret or its versions.
      * </pre>
      *
      * <code>
@@ -2511,8 +2736,8 @@ public Builder addTopics(
      *
      *
      * <pre>
-     * Optional. A list of up to 10 Pub/Sub topics to which messages are published when
-     * control plane operations are called on the secret or its versions.
+     * Optional. A list of up to 10 Pub/Sub topics to which messages are published
+     * when control plane operations are called on the secret or its versions.
      * </pre>
      *
      * <code>
@@ -2534,8 +2759,8 @@ public Builder addAllTopics(
      *
      *
      * <pre>
-     * Optional. A list of up to 10 Pub/Sub topics to which messages are published when
-     * control plane operations are called on the secret or its versions.
+     * Optional. A list of up to 10 Pub/Sub topics to which messages are published
+     * when control plane operations are called on the secret or its versions.
      * </pre>
      *
      * <code>
@@ -2556,8 +2781,8 @@ public Builder clearTopics() {
      *
      *
      * <pre>
-     * Optional. A list of up to 10 Pub/Sub topics to which messages are published when
-     * control plane operations are called on the secret or its versions.
+     * Optional. A list of up to 10 Pub/Sub topics to which messages are published
+     * when control plane operations are called on the secret or its versions.
      * </pre>
      *
      * <code>
@@ -2578,8 +2803,8 @@ public Builder removeTopics(int index) {
      *
      *
      * <pre>
-     * Optional. A list of up to 10 Pub/Sub topics to which messages are published when
-     * control plane operations are called on the secret or its versions.
+     * Optional. A list of up to 10 Pub/Sub topics to which messages are published
+     * when control plane operations are called on the secret or its versions.
      * </pre>
      *
      * <code>
@@ -2593,8 +2818,8 @@ public com.google.cloud.secretmanager.v1.Topic.Builder getTopicsBuilder(int inde
      *
      *
      * <pre>
-     * Optional. A list of up to 10 Pub/Sub topics to which messages are published when
-     * control plane operations are called on the secret or its versions.
+     * Optional. A list of up to 10 Pub/Sub topics to which messages are published
+     * when control plane operations are called on the secret or its versions.
      * </pre>
      *
      * <code>
@@ -2612,8 +2837,8 @@ public com.google.cloud.secretmanager.v1.TopicOrBuilder getTopicsOrBuilder(int i
      *
      *
      * <pre>
-     * Optional. A list of up to 10 Pub/Sub topics to which messages are published when
-     * control plane operations are called on the secret or its versions.
+     * Optional. A list of up to 10 Pub/Sub topics to which messages are published
+     * when control plane operations are called on the secret or its versions.
      * </pre>
      *
      * <code>
@@ -2632,8 +2857,8 @@ public com.google.cloud.secretmanager.v1.TopicOrBuilder getTopicsOrBuilder(int i
      *
      *
      * <pre>
-     * Optional. A list of up to 10 Pub/Sub topics to which messages are published when
-     * control plane operations are called on the secret or its versions.
+     * Optional. A list of up to 10 Pub/Sub topics to which messages are published
+     * when control plane operations are called on the secret or its versions.
      * </pre>
      *
      * <code>
@@ -2648,8 +2873,8 @@ public com.google.cloud.secretmanager.v1.Topic.Builder addTopicsBuilder() {
      *
      *
      * <pre>
-     * Optional. A list of up to 10 Pub/Sub topics to which messages are published when
-     * control plane operations are called on the secret or its versions.
+     * Optional. A list of up to 10 Pub/Sub topics to which messages are published
+     * when control plane operations are called on the secret or its versions.
      * </pre>
      *
      * <code>
@@ -2664,8 +2889,8 @@ public com.google.cloud.secretmanager.v1.Topic.Builder addTopicsBuilder(int inde
      *
      *
      * <pre>
-     * Optional. A list of up to 10 Pub/Sub topics to which messages are published when
-     * control plane operations are called on the secret or its versions.
+     * Optional. A list of up to 10 Pub/Sub topics to which messages are published
+     * when control plane operations are called on the secret or its versions.
      * </pre>
      *
      * <code>
@@ -2702,8 +2927,9 @@ public java.util.List<com.google.cloud.secretmanager.v1.Topic.Builder> getTopics
      *
      *
      * <pre>
-     * Optional. Timestamp in UTC when the [Secret][google.cloud.secretmanager.v1.Secret] is scheduled to expire. This is
-     * always provided on output, regardless of what was sent on input.
+     * Optional. Timestamp in UTC when the
+     * [Secret][google.cloud.secretmanager.v1.Secret] is scheduled to expire.
+     * This is always provided on output, regardless of what was sent on input.
      * </pre>
      *
      * <code>.google.protobuf.Timestamp expire_time = 6 [(.google.api.field_behavior) = OPTIONAL];
@@ -2719,8 +2945,9 @@ public boolean hasExpireTime() {
      *
      *
      * <pre>
-     * Optional. Timestamp in UTC when the [Secret][google.cloud.secretmanager.v1.Secret] is scheduled to expire. This is
-     * always provided on output, regardless of what was sent on input.
+     * Optional. Timestamp in UTC when the
+     * [Secret][google.cloud.secretmanager.v1.Secret] is scheduled to expire.
+     * This is always provided on output, regardless of what was sent on input.
      * </pre>
      *
      * <code>.google.protobuf.Timestamp expire_time = 6 [(.google.api.field_behavior) = OPTIONAL];
@@ -2746,8 +2973,9 @@ public com.google.protobuf.Timestamp getExpireTime() {
      *
      *
      * <pre>
-     * Optional. Timestamp in UTC when the [Secret][google.cloud.secretmanager.v1.Secret] is scheduled to expire. This is
-     * always provided on output, regardless of what was sent on input.
+     * Optional. Timestamp in UTC when the
+     * [Secret][google.cloud.secretmanager.v1.Secret] is scheduled to expire.
+     * This is always provided on output, regardless of what was sent on input.
      * </pre>
      *
      * <code>.google.protobuf.Timestamp expire_time = 6 [(.google.api.field_behavior) = OPTIONAL];
@@ -2770,8 +2998,9 @@ public Builder setExpireTime(com.google.protobuf.Timestamp value) {
      *
      *
      * <pre>
-     * Optional. Timestamp in UTC when the [Secret][google.cloud.secretmanager.v1.Secret] is scheduled to expire. This is
-     * always provided on output, regardless of what was sent on input.
+     * Optional. Timestamp in UTC when the
+     * [Secret][google.cloud.secretmanager.v1.Secret] is scheduled to expire.
+     * This is always provided on output, regardless of what was sent on input.
      * </pre>
      *
      * <code>.google.protobuf.Timestamp expire_time = 6 [(.google.api.field_behavior) = OPTIONAL];
@@ -2791,8 +3020,9 @@ public Builder setExpireTime(com.google.protobuf.Timestamp.Builder builderForVal
      *
      *
      * <pre>
-     * Optional. Timestamp in UTC when the [Secret][google.cloud.secretmanager.v1.Secret] is scheduled to expire. This is
-     * always provided on output, regardless of what was sent on input.
+     * Optional. Timestamp in UTC when the
+     * [Secret][google.cloud.secretmanager.v1.Secret] is scheduled to expire.
+     * This is always provided on output, regardless of what was sent on input.
      * </pre>
      *
      * <code>.google.protobuf.Timestamp expire_time = 6 [(.google.api.field_behavior) = OPTIONAL];
@@ -2824,8 +3054,9 @@ public Builder mergeExpireTime(com.google.protobuf.Timestamp value) {
      *
      *
      * <pre>
-     * Optional. Timestamp in UTC when the [Secret][google.cloud.secretmanager.v1.Secret] is scheduled to expire. This is
-     * always provided on output, regardless of what was sent on input.
+     * Optional. Timestamp in UTC when the
+     * [Secret][google.cloud.secretmanager.v1.Secret] is scheduled to expire.
+     * This is always provided on output, regardless of what was sent on input.
      * </pre>
      *
      * <code>.google.protobuf.Timestamp expire_time = 6 [(.google.api.field_behavior) = OPTIONAL];
@@ -2851,8 +3082,9 @@ public Builder clearExpireTime() {
      *
      *
      * <pre>
-     * Optional. Timestamp in UTC when the [Secret][google.cloud.secretmanager.v1.Secret] is scheduled to expire. This is
-     * always provided on output, regardless of what was sent on input.
+     * Optional. Timestamp in UTC when the
+     * [Secret][google.cloud.secretmanager.v1.Secret] is scheduled to expire.
+     * This is always provided on output, regardless of what was sent on input.
      * </pre>
      *
      * <code>.google.protobuf.Timestamp expire_time = 6 [(.google.api.field_behavior) = OPTIONAL];
@@ -2865,8 +3097,9 @@ public com.google.protobuf.Timestamp.Builder getExpireTimeBuilder() {
      *
      *
      * <pre>
-     * Optional. Timestamp in UTC when the [Secret][google.cloud.secretmanager.v1.Secret] is scheduled to expire. This is
-     * always provided on output, regardless of what was sent on input.
+     * Optional. Timestamp in UTC when the
+     * [Secret][google.cloud.secretmanager.v1.Secret] is scheduled to expire.
+     * This is always provided on output, regardless of what was sent on input.
      * </pre>
      *
      * <code>.google.protobuf.Timestamp expire_time = 6 [(.google.api.field_behavior) = OPTIONAL];
@@ -2887,8 +3120,9 @@ public com.google.protobuf.TimestampOrBuilder getExpireTimeOrBuilder() {
      *
      *
      * <pre>
-     * Optional. Timestamp in UTC when the [Secret][google.cloud.secretmanager.v1.Secret] is scheduled to expire. This is
-     * always provided on output, regardless of what was sent on input.
+     * Optional. Timestamp in UTC when the
+     * [Secret][google.cloud.secretmanager.v1.Secret] is scheduled to expire.
+     * This is always provided on output, regardless of what was sent on input.
      * </pre>
      *
      * <code>.google.protobuf.Timestamp expire_time = 6 [(.google.api.field_behavior) = OPTIONAL];
@@ -2926,7 +3160,8 @@ public com.google.protobuf.TimestampOrBuilder getExpireTimeOrBuilder() {
      *
      *
      * <pre>
-     * Input only. The TTL for the [Secret][google.cloud.secretmanager.v1.Secret].
+     * Input only. The TTL for the
+     * [Secret][google.cloud.secretmanager.v1.Secret].
      * </pre>
      *
      * <code>.google.protobuf.Duration ttl = 7 [(.google.api.field_behavior) = INPUT_ONLY];</code>
@@ -2941,7 +3176,8 @@ public boolean hasTtl() {
      *
      *
      * <pre>
-     * Input only. The TTL for the [Secret][google.cloud.secretmanager.v1.Secret].
+     * Input only. The TTL for the
+     * [Secret][google.cloud.secretmanager.v1.Secret].
      * </pre>
      *
      * <code>.google.protobuf.Duration ttl = 7 [(.google.api.field_behavior) = INPUT_ONLY];</code>
@@ -2966,7 +3202,8 @@ public com.google.protobuf.Duration getTtl() {
      *
      *
      * <pre>
-     * Input only. The TTL for the [Secret][google.cloud.secretmanager.v1.Secret].
+     * Input only. The TTL for the
+     * [Secret][google.cloud.secretmanager.v1.Secret].
      * </pre>
      *
      * <code>.google.protobuf.Duration ttl = 7 [(.google.api.field_behavior) = INPUT_ONLY];</code>
@@ -2988,7 +3225,8 @@ public Builder setTtl(com.google.protobuf.Duration value) {
      *
      *
      * <pre>
-     * Input only. The TTL for the [Secret][google.cloud.secretmanager.v1.Secret].
+     * Input only. The TTL for the
+     * [Secret][google.cloud.secretmanager.v1.Secret].
      * </pre>
      *
      * <code>.google.protobuf.Duration ttl = 7 [(.google.api.field_behavior) = INPUT_ONLY];</code>
@@ -3007,7 +3245,8 @@ public Builder setTtl(com.google.protobuf.Duration.Builder builderForValue) {
      *
      *
      * <pre>
-     * Input only. The TTL for the [Secret][google.cloud.secretmanager.v1.Secret].
+     * Input only. The TTL for the
+     * [Secret][google.cloud.secretmanager.v1.Secret].
      * </pre>
      *
      * <code>.google.protobuf.Duration ttl = 7 [(.google.api.field_behavior) = INPUT_ONLY];</code>
@@ -3038,7 +3277,8 @@ public Builder mergeTtl(com.google.protobuf.Duration value) {
      *
      *
      * <pre>
-     * Input only. The TTL for the [Secret][google.cloud.secretmanager.v1.Secret].
+     * Input only. The TTL for the
+     * [Secret][google.cloud.secretmanager.v1.Secret].
      * </pre>
      *
      * <code>.google.protobuf.Duration ttl = 7 [(.google.api.field_behavior) = INPUT_ONLY];</code>
@@ -3063,7 +3303,8 @@ public Builder clearTtl() {
      *
      *
      * <pre>
-     * Input only. The TTL for the [Secret][google.cloud.secretmanager.v1.Secret].
+     * Input only. The TTL for the
+     * [Secret][google.cloud.secretmanager.v1.Secret].
      * </pre>
      *
      * <code>.google.protobuf.Duration ttl = 7 [(.google.api.field_behavior) = INPUT_ONLY];</code>
@@ -3075,7 +3316,8 @@ public com.google.protobuf.Duration.Builder getTtlBuilder() {
      *
      *
      * <pre>
-     * Input only. The TTL for the [Secret][google.cloud.secretmanager.v1.Secret].
+     * Input only. The TTL for the
+     * [Secret][google.cloud.secretmanager.v1.Secret].
      * </pre>
      *
      * <code>.google.protobuf.Duration ttl = 7 [(.google.api.field_behavior) = INPUT_ONLY];</code>
@@ -3095,7 +3337,8 @@ public com.google.protobuf.DurationOrBuilder getTtlOrBuilder() {
      *
      *
      * <pre>
-     * Input only. The TTL for the [Secret][google.cloud.secretmanager.v1.Secret].
+     * Input only. The TTL for the
+     * [Secret][google.cloud.secretmanager.v1.Secret].
      * </pre>
      *
      * <code>.google.protobuf.Duration ttl = 7 [(.google.api.field_behavior) = INPUT_ONLY];</code>
@@ -3128,7 +3371,8 @@ public com.google.protobuf.DurationOrBuilder getTtlOrBuilder() {
      *
      *
      * <pre>
-     * Optional. Etag of the currently stored [Secret][google.cloud.secretmanager.v1.Secret].
+     * Optional. Etag of the currently stored
+     * [Secret][google.cloud.secretmanager.v1.Secret].
      * </pre>
      *
      * <code>string etag = 8 [(.google.api.field_behavior) = OPTIONAL];</code>
@@ -3150,7 +3394,8 @@ public java.lang.String getEtag() {
      *
      *
      * <pre>
-     * Optional. Etag of the currently stored [Secret][google.cloud.secretmanager.v1.Secret].
+     * Optional. Etag of the currently stored
+     * [Secret][google.cloud.secretmanager.v1.Secret].
      * </pre>
      *
      * <code>string etag = 8 [(.google.api.field_behavior) = OPTIONAL];</code>
@@ -3172,7 +3417,8 @@ public com.google.protobuf.ByteString getEtagBytes() {
      *
      *
      * <pre>
-     * Optional. Etag of the currently stored [Secret][google.cloud.secretmanager.v1.Secret].
+     * Optional. Etag of the currently stored
+     * [Secret][google.cloud.secretmanager.v1.Secret].
      * </pre>
      *
      * <code>string etag = 8 [(.google.api.field_behavior) = OPTIONAL];</code>
@@ -3193,7 +3439,8 @@ public Builder setEtag(java.lang.String value) {
      *
      *
      * <pre>
-     * Optional. Etag of the currently stored [Secret][google.cloud.secretmanager.v1.Secret].
+     * Optional. Etag of the currently stored
+     * [Secret][google.cloud.secretmanager.v1.Secret].
      * </pre>
      *
      * <code>string etag = 8 [(.google.api.field_behavior) = OPTIONAL];</code>
@@ -3210,7 +3457,8 @@ public Builder clearEtag() {
      *
      *
      * <pre>
-     * Optional. Etag of the currently stored [Secret][google.cloud.secretmanager.v1.Secret].
+     * Optional. Etag of the currently stored
+     * [Secret][google.cloud.secretmanager.v1.Secret].
      * </pre>
      *
      * <code>string etag = 8 [(.google.api.field_behavior) = OPTIONAL];</code>
@@ -3239,8 +3487,9 @@ public Builder setEtagBytes(com.google.protobuf.ByteString value) {
      *
      *
      * <pre>
-     * Optional. Rotation policy attached to the [Secret][google.cloud.secretmanager.v1.Secret]. May be excluded if there is no
-     * rotation policy.
+     * Optional. Rotation policy attached to the
+     * [Secret][google.cloud.secretmanager.v1.Secret]. May be excluded if there is
+     * no rotation policy.
      * </pre>
      *
      * <code>
@@ -3256,8 +3505,9 @@ public boolean hasRotation() {
      *
      *
      * <pre>
-     * Optional. Rotation policy attached to the [Secret][google.cloud.secretmanager.v1.Secret]. May be excluded if there is no
-     * rotation policy.
+     * Optional. Rotation policy attached to the
+     * [Secret][google.cloud.secretmanager.v1.Secret]. May be excluded if there is
+     * no rotation policy.
      * </pre>
      *
      * <code>
@@ -3279,8 +3529,9 @@ public com.google.cloud.secretmanager.v1.Rotation getRotation() {
      *
      *
      * <pre>
-     * Optional. Rotation policy attached to the [Secret][google.cloud.secretmanager.v1.Secret]. May be excluded if there is no
-     * rotation policy.
+     * Optional. Rotation policy attached to the
+     * [Secret][google.cloud.secretmanager.v1.Secret]. May be excluded if there is
+     * no rotation policy.
      * </pre>
      *
      * <code>
@@ -3304,8 +3555,9 @@ public Builder setRotation(com.google.cloud.secretmanager.v1.Rotation value) {
      *
      *
      * <pre>
-     * Optional. Rotation policy attached to the [Secret][google.cloud.secretmanager.v1.Secret]. May be excluded if there is no
-     * rotation policy.
+     * Optional. Rotation policy attached to the
+     * [Secret][google.cloud.secretmanager.v1.Secret]. May be excluded if there is
+     * no rotation policy.
      * </pre>
      *
      * <code>
@@ -3326,8 +3578,9 @@ public Builder setRotation(com.google.cloud.secretmanager.v1.Rotation.Builder bu
      *
      *
      * <pre>
-     * Optional. Rotation policy attached to the [Secret][google.cloud.secretmanager.v1.Secret]. May be excluded if there is no
-     * rotation policy.
+     * Optional. Rotation policy attached to the
+     * [Secret][google.cloud.secretmanager.v1.Secret]. May be excluded if there is
+     * no rotation policy.
      * </pre>
      *
      * <code>
@@ -3355,8 +3608,9 @@ public Builder mergeRotation(com.google.cloud.secretmanager.v1.Rotation value) {
      *
      *
      * <pre>
-     * Optional. Rotation policy attached to the [Secret][google.cloud.secretmanager.v1.Secret]. May be excluded if there is no
-     * rotation policy.
+     * Optional. Rotation policy attached to the
+     * [Secret][google.cloud.secretmanager.v1.Secret]. May be excluded if there is
+     * no rotation policy.
      * </pre>
      *
      * <code>
@@ -3378,8 +3632,9 @@ public Builder clearRotation() {
      *
      *
      * <pre>
-     * Optional. Rotation policy attached to the [Secret][google.cloud.secretmanager.v1.Secret]. May be excluded if there is no
-     * rotation policy.
+     * Optional. Rotation policy attached to the
+     * [Secret][google.cloud.secretmanager.v1.Secret]. May be excluded if there is
+     * no rotation policy.
      * </pre>
      *
      * <code>
@@ -3395,8 +3650,9 @@ public com.google.cloud.secretmanager.v1.Rotation.Builder getRotationBuilder() {
      *
      *
      * <pre>
-     * Optional. Rotation policy attached to the [Secret][google.cloud.secretmanager.v1.Secret]. May be excluded if there is no
-     * rotation policy.
+     * Optional. Rotation policy attached to the
+     * [Secret][google.cloud.secretmanager.v1.Secret]. May be excluded if there is
+     * no rotation policy.
      * </pre>
      *
      * <code>
@@ -3416,8 +3672,9 @@ public com.google.cloud.secretmanager.v1.RotationOrBuilder getRotationOrBuilder(
      *
      *
      * <pre>
-     * Optional. Rotation policy attached to the [Secret][google.cloud.secretmanager.v1.Secret]. May be excluded if there is no
-     * rotation policy.
+     * Optional. Rotation policy attached to the
+     * [Secret][google.cloud.secretmanager.v1.Secret]. May be excluded if there is
+     * no rotation policy.
      * </pre>
      *
      * <code>
@@ -3668,6 +3925,230 @@ public Builder putAllVersionAliases(java.util.Map<java.lang.String, java.lang.Lo
       return this;
     }
 
+    private com.google.protobuf.MapField<java.lang.String, java.lang.String> annotations_;
+
+    private com.google.protobuf.MapField<java.lang.String, java.lang.String>
+        internalGetAnnotations() {
+      if (annotations_ == null) {
+        return com.google.protobuf.MapField.emptyMapField(
+            AnnotationsDefaultEntryHolder.defaultEntry);
+      }
+      return annotations_;
+    }
+
+    private com.google.protobuf.MapField<java.lang.String, java.lang.String>
+        internalGetMutableAnnotations() {
+      onChanged();
+      ;
+      if (annotations_ == null) {
+        annotations_ =
+            com.google.protobuf.MapField.newMapField(AnnotationsDefaultEntryHolder.defaultEntry);
+      }
+      if (!annotations_.isMutable()) {
+        annotations_ = annotations_.copy();
+      }
+      return annotations_;
+    }
+
+    public int getAnnotationsCount() {
+      return internalGetAnnotations().getMap().size();
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Custom metadata about the secret.
+     * Annotations are distinct from various forms of labels.
+     * Annotations exist to allow client tools to store their own state
+     * information without requiring a database.
+     * Annotation keys must be between 1 and 63 characters long, have a UTF-8
+     * encoding of maximum 128 bytes, begin and end with an alphanumeric character
+     * ([a-z0-9A-Z]), and may have dashes (-), underscores (_), dots (.), and
+     * alphanumerics in between these symbols.
+     * The total size of annotation keys and values must be less than 16KiB.
+     * </pre>
+     *
+     * <code>map&lt;string, string&gt; annotations = 13 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    @java.lang.Override
+    public boolean containsAnnotations(java.lang.String key) {
+      if (key == null) {
+        throw new NullPointerException("map key");
+      }
+      return internalGetAnnotations().getMap().containsKey(key);
+    }
+    /** Use {@link #getAnnotationsMap()} instead. */
+    @java.lang.Override
+    @java.lang.Deprecated
+    public java.util.Map<java.lang.String, java.lang.String> getAnnotations() {
+      return getAnnotationsMap();
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Custom metadata about the secret.
+     * Annotations are distinct from various forms of labels.
+     * Annotations exist to allow client tools to store their own state
+     * information without requiring a database.
+     * Annotation keys must be between 1 and 63 characters long, have a UTF-8
+     * encoding of maximum 128 bytes, begin and end with an alphanumeric character
+     * ([a-z0-9A-Z]), and may have dashes (-), underscores (_), dots (.), and
+     * alphanumerics in between these symbols.
+     * The total size of annotation keys and values must be less than 16KiB.
+     * </pre>
+     *
+     * <code>map&lt;string, string&gt; annotations = 13 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    @java.lang.Override
+    public java.util.Map<java.lang.String, java.lang.String> getAnnotationsMap() {
+      return internalGetAnnotations().getMap();
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Custom metadata about the secret.
+     * Annotations are distinct from various forms of labels.
+     * Annotations exist to allow client tools to store their own state
+     * information without requiring a database.
+     * Annotation keys must be between 1 and 63 characters long, have a UTF-8
+     * encoding of maximum 128 bytes, begin and end with an alphanumeric character
+     * ([a-z0-9A-Z]), and may have dashes (-), underscores (_), dots (.), and
+     * alphanumerics in between these symbols.
+     * The total size of annotation keys and values must be less than 16KiB.
+     * </pre>
+     *
+     * <code>map&lt;string, string&gt; annotations = 13 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    @java.lang.Override
+    public java.lang.String getAnnotationsOrDefault(
+        java.lang.String key, java.lang.String defaultValue) {
+      if (key == null) {
+        throw new NullPointerException("map key");
+      }
+      java.util.Map<java.lang.String, java.lang.String> map = internalGetAnnotations().getMap();
+      return map.containsKey(key) ? map.get(key) : defaultValue;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Custom metadata about the secret.
+     * Annotations are distinct from various forms of labels.
+     * Annotations exist to allow client tools to store their own state
+     * information without requiring a database.
+     * Annotation keys must be between 1 and 63 characters long, have a UTF-8
+     * encoding of maximum 128 bytes, begin and end with an alphanumeric character
+     * ([a-z0-9A-Z]), and may have dashes (-), underscores (_), dots (.), and
+     * alphanumerics in between these symbols.
+     * The total size of annotation keys and values must be less than 16KiB.
+     * </pre>
+     *
+     * <code>map&lt;string, string&gt; annotations = 13 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    @java.lang.Override
+    public java.lang.String getAnnotationsOrThrow(java.lang.String key) {
+      if (key == null) {
+        throw new NullPointerException("map key");
+      }
+      java.util.Map<java.lang.String, java.lang.String> map = internalGetAnnotations().getMap();
+      if (!map.containsKey(key)) {
+        throw new java.lang.IllegalArgumentException();
+      }
+      return map.get(key);
+    }
+
+    public Builder clearAnnotations() {
+      internalGetMutableAnnotations().getMutableMap().clear();
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Custom metadata about the secret.
+     * Annotations are distinct from various forms of labels.
+     * Annotations exist to allow client tools to store their own state
+     * information without requiring a database.
+     * Annotation keys must be between 1 and 63 characters long, have a UTF-8
+     * encoding of maximum 128 bytes, begin and end with an alphanumeric character
+     * ([a-z0-9A-Z]), and may have dashes (-), underscores (_), dots (.), and
+     * alphanumerics in between these symbols.
+     * The total size of annotation keys and values must be less than 16KiB.
+     * </pre>
+     *
+     * <code>map&lt;string, string&gt; annotations = 13 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public Builder removeAnnotations(java.lang.String key) {
+      if (key == null) {
+        throw new NullPointerException("map key");
+      }
+      internalGetMutableAnnotations().getMutableMap().remove(key);
+      return this;
+    }
+    /** Use alternate mutation accessors instead. */
+    @java.lang.Deprecated
+    public java.util.Map<java.lang.String, java.lang.String> getMutableAnnotations() {
+      return internalGetMutableAnnotations().getMutableMap();
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Custom metadata about the secret.
+     * Annotations are distinct from various forms of labels.
+     * Annotations exist to allow client tools to store their own state
+     * information without requiring a database.
+     * Annotation keys must be between 1 and 63 characters long, have a UTF-8
+     * encoding of maximum 128 bytes, begin and end with an alphanumeric character
+     * ([a-z0-9A-Z]), and may have dashes (-), underscores (_), dots (.), and
+     * alphanumerics in between these symbols.
+     * The total size of annotation keys and values must be less than 16KiB.
+     * </pre>
+     *
+     * <code>map&lt;string, string&gt; annotations = 13 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public Builder putAnnotations(java.lang.String key, java.lang.String value) {
+      if (key == null) {
+        throw new NullPointerException("map key");
+      }
+      if (value == null) {
+        throw new NullPointerException("map value");
+      }
+
+      internalGetMutableAnnotations().getMutableMap().put(key, value);
+      return this;
+    }
+    /**
+     *
+     *
+     * <pre>
+     * Optional. Custom metadata about the secret.
+     * Annotations are distinct from various forms of labels.
+     * Annotations exist to allow client tools to store their own state
+     * information without requiring a database.
+     * Annotation keys must be between 1 and 63 characters long, have a UTF-8
+     * encoding of maximum 128 bytes, begin and end with an alphanumeric character
+     * ([a-z0-9A-Z]), and may have dashes (-), underscores (_), dots (.), and
+     * alphanumerics in between these symbols.
+     * The total size of annotation keys and values must be less than 16KiB.
+     * </pre>
+     *
+     * <code>map&lt;string, string&gt; annotations = 13 [(.google.api.field_behavior) = OPTIONAL];
+     * </code>
+     */
+    public Builder putAllAnnotations(java.util.Map<java.lang.String, java.lang.String> values) {
+      internalGetMutableAnnotations().getMutableMap().putAll(values);
+      return this;
+    }
+
     @java.lang.Override
     public final Builder setUnknownFields(final com.google.protobuf.UnknownFieldSet unknownFields) {
       return super.setUnknownFields(unknownFields);
diff --git a/java-secretmanager/proto-google-cloud-secretmanager-v1/src/main/java/com/google/cloud/secretmanager/v1/SecretOrBuilder.java b/java-secretmanager/proto-google-cloud-secretmanager-v1/src/main/java/com/google/cloud/secretmanager/v1/SecretOrBuilder.java
index eee713b8e88e..aba7698a548f 100644
--- a/java-secretmanager/proto-google-cloud-secretmanager-v1/src/main/java/com/google/cloud/secretmanager/v1/SecretOrBuilder.java
+++ b/java-secretmanager/proto-google-cloud-secretmanager-v1/src/main/java/com/google/cloud/secretmanager/v1/SecretOrBuilder.java
@@ -27,7 +27,9 @@ public interface SecretOrBuilder
    *
    *
    * <pre>
-   * Output only. The resource name of the [Secret][google.cloud.secretmanager.v1.Secret] in the format `projects/&#42;&#47;secrets/&#42;`.
+   * Output only. The resource name of the
+   * [Secret][google.cloud.secretmanager.v1.Secret] in the format
+   * `projects/&#42;&#47;secrets/&#42;`.
    * </pre>
    *
    * <code>string name = 1 [(.google.api.field_behavior) = OUTPUT_ONLY];</code>
@@ -39,7 +41,9 @@ public interface SecretOrBuilder
    *
    *
    * <pre>
-   * Output only. The resource name of the [Secret][google.cloud.secretmanager.v1.Secret] in the format `projects/&#42;&#47;secrets/&#42;`.
+   * Output only. The resource name of the
+   * [Secret][google.cloud.secretmanager.v1.Secret] in the format
+   * `projects/&#42;&#47;secrets/&#42;`.
    * </pre>
    *
    * <code>string name = 1 [(.google.api.field_behavior) = OUTPUT_ONLY];</code>
@@ -52,7 +56,8 @@ public interface SecretOrBuilder
    *
    *
    * <pre>
-   * Required. Immutable. The replication policy of the secret data attached to the [Secret][google.cloud.secretmanager.v1.Secret].
+   * Required. Immutable. The replication policy of the secret data attached to
+   * the [Secret][google.cloud.secretmanager.v1.Secret].
    * The replication policy cannot be changed after the Secret has been created.
    * </pre>
    *
@@ -67,7 +72,8 @@ public interface SecretOrBuilder
    *
    *
    * <pre>
-   * Required. Immutable. The replication policy of the secret data attached to the [Secret][google.cloud.secretmanager.v1.Secret].
+   * Required. Immutable. The replication policy of the secret data attached to
+   * the [Secret][google.cloud.secretmanager.v1.Secret].
    * The replication policy cannot be changed after the Secret has been created.
    * </pre>
    *
@@ -82,7 +88,8 @@ public interface SecretOrBuilder
    *
    *
    * <pre>
-   * Required. Immutable. The replication policy of the secret data attached to the [Secret][google.cloud.secretmanager.v1.Secret].
+   * Required. Immutable. The replication policy of the secret data attached to
+   * the [Secret][google.cloud.secretmanager.v1.Secret].
    * The replication policy cannot be changed after the Secret has been created.
    * </pre>
    *
@@ -96,7 +103,8 @@ public interface SecretOrBuilder
    *
    *
    * <pre>
-   * Output only. The time at which the [Secret][google.cloud.secretmanager.v1.Secret] was created.
+   * Output only. The time at which the
+   * [Secret][google.cloud.secretmanager.v1.Secret] was created.
    * </pre>
    *
    * <code>.google.protobuf.Timestamp create_time = 3 [(.google.api.field_behavior) = OUTPUT_ONLY];
@@ -109,7 +117,8 @@ public interface SecretOrBuilder
    *
    *
    * <pre>
-   * Output only. The time at which the [Secret][google.cloud.secretmanager.v1.Secret] was created.
+   * Output only. The time at which the
+   * [Secret][google.cloud.secretmanager.v1.Secret] was created.
    * </pre>
    *
    * <code>.google.protobuf.Timestamp create_time = 3 [(.google.api.field_behavior) = OUTPUT_ONLY];
@@ -122,7 +131,8 @@ public interface SecretOrBuilder
    *
    *
    * <pre>
-   * Output only. The time at which the [Secret][google.cloud.secretmanager.v1.Secret] was created.
+   * Output only. The time at which the
+   * [Secret][google.cloud.secretmanager.v1.Secret] was created.
    * </pre>
    *
    * <code>.google.protobuf.Timestamp create_time = 3 [(.google.api.field_behavior) = OUTPUT_ONLY];
@@ -228,8 +238,8 @@ java.lang.String getLabelsOrDefault(
    *
    *
    * <pre>
-   * Optional. A list of up to 10 Pub/Sub topics to which messages are published when
-   * control plane operations are called on the secret or its versions.
+   * Optional. A list of up to 10 Pub/Sub topics to which messages are published
+   * when control plane operations are called on the secret or its versions.
    * </pre>
    *
    * <code>
@@ -241,8 +251,8 @@ java.lang.String getLabelsOrDefault(
    *
    *
    * <pre>
-   * Optional. A list of up to 10 Pub/Sub topics to which messages are published when
-   * control plane operations are called on the secret or its versions.
+   * Optional. A list of up to 10 Pub/Sub topics to which messages are published
+   * when control plane operations are called on the secret or its versions.
    * </pre>
    *
    * <code>
@@ -254,8 +264,8 @@ java.lang.String getLabelsOrDefault(
    *
    *
    * <pre>
-   * Optional. A list of up to 10 Pub/Sub topics to which messages are published when
-   * control plane operations are called on the secret or its versions.
+   * Optional. A list of up to 10 Pub/Sub topics to which messages are published
+   * when control plane operations are called on the secret or its versions.
    * </pre>
    *
    * <code>
@@ -267,8 +277,8 @@ java.lang.String getLabelsOrDefault(
    *
    *
    * <pre>
-   * Optional. A list of up to 10 Pub/Sub topics to which messages are published when
-   * control plane operations are called on the secret or its versions.
+   * Optional. A list of up to 10 Pub/Sub topics to which messages are published
+   * when control plane operations are called on the secret or its versions.
    * </pre>
    *
    * <code>
@@ -281,8 +291,8 @@ java.lang.String getLabelsOrDefault(
    *
    *
    * <pre>
-   * Optional. A list of up to 10 Pub/Sub topics to which messages are published when
-   * control plane operations are called on the secret or its versions.
+   * Optional. A list of up to 10 Pub/Sub topics to which messages are published
+   * when control plane operations are called on the secret or its versions.
    * </pre>
    *
    * <code>
@@ -295,8 +305,9 @@ java.lang.String getLabelsOrDefault(
    *
    *
    * <pre>
-   * Optional. Timestamp in UTC when the [Secret][google.cloud.secretmanager.v1.Secret] is scheduled to expire. This is
-   * always provided on output, regardless of what was sent on input.
+   * Optional. Timestamp in UTC when the
+   * [Secret][google.cloud.secretmanager.v1.Secret] is scheduled to expire.
+   * This is always provided on output, regardless of what was sent on input.
    * </pre>
    *
    * <code>.google.protobuf.Timestamp expire_time = 6 [(.google.api.field_behavior) = OPTIONAL];
@@ -309,8 +320,9 @@ java.lang.String getLabelsOrDefault(
    *
    *
    * <pre>
-   * Optional. Timestamp in UTC when the [Secret][google.cloud.secretmanager.v1.Secret] is scheduled to expire. This is
-   * always provided on output, regardless of what was sent on input.
+   * Optional. Timestamp in UTC when the
+   * [Secret][google.cloud.secretmanager.v1.Secret] is scheduled to expire.
+   * This is always provided on output, regardless of what was sent on input.
    * </pre>
    *
    * <code>.google.protobuf.Timestamp expire_time = 6 [(.google.api.field_behavior) = OPTIONAL];
@@ -323,8 +335,9 @@ java.lang.String getLabelsOrDefault(
    *
    *
    * <pre>
-   * Optional. Timestamp in UTC when the [Secret][google.cloud.secretmanager.v1.Secret] is scheduled to expire. This is
-   * always provided on output, regardless of what was sent on input.
+   * Optional. Timestamp in UTC when the
+   * [Secret][google.cloud.secretmanager.v1.Secret] is scheduled to expire.
+   * This is always provided on output, regardless of what was sent on input.
    * </pre>
    *
    * <code>.google.protobuf.Timestamp expire_time = 6 [(.google.api.field_behavior) = OPTIONAL];
@@ -336,7 +349,8 @@ java.lang.String getLabelsOrDefault(
    *
    *
    * <pre>
-   * Input only. The TTL for the [Secret][google.cloud.secretmanager.v1.Secret].
+   * Input only. The TTL for the
+   * [Secret][google.cloud.secretmanager.v1.Secret].
    * </pre>
    *
    * <code>.google.protobuf.Duration ttl = 7 [(.google.api.field_behavior) = INPUT_ONLY];</code>
@@ -348,7 +362,8 @@ java.lang.String getLabelsOrDefault(
    *
    *
    * <pre>
-   * Input only. The TTL for the [Secret][google.cloud.secretmanager.v1.Secret].
+   * Input only. The TTL for the
+   * [Secret][google.cloud.secretmanager.v1.Secret].
    * </pre>
    *
    * <code>.google.protobuf.Duration ttl = 7 [(.google.api.field_behavior) = INPUT_ONLY];</code>
@@ -360,7 +375,8 @@ java.lang.String getLabelsOrDefault(
    *
    *
    * <pre>
-   * Input only. The TTL for the [Secret][google.cloud.secretmanager.v1.Secret].
+   * Input only. The TTL for the
+   * [Secret][google.cloud.secretmanager.v1.Secret].
    * </pre>
    *
    * <code>.google.protobuf.Duration ttl = 7 [(.google.api.field_behavior) = INPUT_ONLY];</code>
@@ -371,7 +387,8 @@ java.lang.String getLabelsOrDefault(
    *
    *
    * <pre>
-   * Optional. Etag of the currently stored [Secret][google.cloud.secretmanager.v1.Secret].
+   * Optional. Etag of the currently stored
+   * [Secret][google.cloud.secretmanager.v1.Secret].
    * </pre>
    *
    * <code>string etag = 8 [(.google.api.field_behavior) = OPTIONAL];</code>
@@ -383,7 +400,8 @@ java.lang.String getLabelsOrDefault(
    *
    *
    * <pre>
-   * Optional. Etag of the currently stored [Secret][google.cloud.secretmanager.v1.Secret].
+   * Optional. Etag of the currently stored
+   * [Secret][google.cloud.secretmanager.v1.Secret].
    * </pre>
    *
    * <code>string etag = 8 [(.google.api.field_behavior) = OPTIONAL];</code>
@@ -396,8 +414,9 @@ java.lang.String getLabelsOrDefault(
    *
    *
    * <pre>
-   * Optional. Rotation policy attached to the [Secret][google.cloud.secretmanager.v1.Secret]. May be excluded if there is no
-   * rotation policy.
+   * Optional. Rotation policy attached to the
+   * [Secret][google.cloud.secretmanager.v1.Secret]. May be excluded if there is
+   * no rotation policy.
    * </pre>
    *
    * <code>
@@ -411,8 +430,9 @@ java.lang.String getLabelsOrDefault(
    *
    *
    * <pre>
-   * Optional. Rotation policy attached to the [Secret][google.cloud.secretmanager.v1.Secret]. May be excluded if there is no
-   * rotation policy.
+   * Optional. Rotation policy attached to the
+   * [Secret][google.cloud.secretmanager.v1.Secret]. May be excluded if there is
+   * no rotation policy.
    * </pre>
    *
    * <code>
@@ -426,8 +446,9 @@ java.lang.String getLabelsOrDefault(
    *
    *
    * <pre>
-   * Optional. Rotation policy attached to the [Secret][google.cloud.secretmanager.v1.Secret]. May be excluded if there is no
-   * rotation policy.
+   * Optional. Rotation policy attached to the
+   * [Secret][google.cloud.secretmanager.v1.Secret]. May be excluded if there is
+   * no rotation policy.
    * </pre>
    *
    * <code>
@@ -535,5 +556,109 @@ java.lang.String getLabelsOrDefault(
    */
   long getVersionAliasesOrThrow(java.lang.String key);
 
+  /**
+   *
+   *
+   * <pre>
+   * Optional. Custom metadata about the secret.
+   * Annotations are distinct from various forms of labels.
+   * Annotations exist to allow client tools to store their own state
+   * information without requiring a database.
+   * Annotation keys must be between 1 and 63 characters long, have a UTF-8
+   * encoding of maximum 128 bytes, begin and end with an alphanumeric character
+   * ([a-z0-9A-Z]), and may have dashes (-), underscores (_), dots (.), and
+   * alphanumerics in between these symbols.
+   * The total size of annotation keys and values must be less than 16KiB.
+   * </pre>
+   *
+   * <code>map&lt;string, string&gt; annotations = 13 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   */
+  int getAnnotationsCount();
+  /**
+   *
+   *
+   * <pre>
+   * Optional. Custom metadata about the secret.
+   * Annotations are distinct from various forms of labels.
+   * Annotations exist to allow client tools to store their own state
+   * information without requiring a database.
+   * Annotation keys must be between 1 and 63 characters long, have a UTF-8
+   * encoding of maximum 128 bytes, begin and end with an alphanumeric character
+   * ([a-z0-9A-Z]), and may have dashes (-), underscores (_), dots (.), and
+   * alphanumerics in between these symbols.
+   * The total size of annotation keys and values must be less than 16KiB.
+   * </pre>
+   *
+   * <code>map&lt;string, string&gt; annotations = 13 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   */
+  boolean containsAnnotations(java.lang.String key);
+  /** Use {@link #getAnnotationsMap()} instead. */
+  @java.lang.Deprecated
+  java.util.Map<java.lang.String, java.lang.String> getAnnotations();
+  /**
+   *
+   *
+   * <pre>
+   * Optional. Custom metadata about the secret.
+   * Annotations are distinct from various forms of labels.
+   * Annotations exist to allow client tools to store their own state
+   * information without requiring a database.
+   * Annotation keys must be between 1 and 63 characters long, have a UTF-8
+   * encoding of maximum 128 bytes, begin and end with an alphanumeric character
+   * ([a-z0-9A-Z]), and may have dashes (-), underscores (_), dots (.), and
+   * alphanumerics in between these symbols.
+   * The total size of annotation keys and values must be less than 16KiB.
+   * </pre>
+   *
+   * <code>map&lt;string, string&gt; annotations = 13 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   */
+  java.util.Map<java.lang.String, java.lang.String> getAnnotationsMap();
+  /**
+   *
+   *
+   * <pre>
+   * Optional. Custom metadata about the secret.
+   * Annotations are distinct from various forms of labels.
+   * Annotations exist to allow client tools to store their own state
+   * information without requiring a database.
+   * Annotation keys must be between 1 and 63 characters long, have a UTF-8
+   * encoding of maximum 128 bytes, begin and end with an alphanumeric character
+   * ([a-z0-9A-Z]), and may have dashes (-), underscores (_), dots (.), and
+   * alphanumerics in between these symbols.
+   * The total size of annotation keys and values must be less than 16KiB.
+   * </pre>
+   *
+   * <code>map&lt;string, string&gt; annotations = 13 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   */
+
+  /* nullable */
+  java.lang.String getAnnotationsOrDefault(
+      java.lang.String key,
+      /* nullable */
+      java.lang.String defaultValue);
+  /**
+   *
+   *
+   * <pre>
+   * Optional. Custom metadata about the secret.
+   * Annotations are distinct from various forms of labels.
+   * Annotations exist to allow client tools to store their own state
+   * information without requiring a database.
+   * Annotation keys must be between 1 and 63 characters long, have a UTF-8
+   * encoding of maximum 128 bytes, begin and end with an alphanumeric character
+   * ([a-z0-9A-Z]), and may have dashes (-), underscores (_), dots (.), and
+   * alphanumerics in between these symbols.
+   * The total size of annotation keys and values must be less than 16KiB.
+   * </pre>
+   *
+   * <code>map&lt;string, string&gt; annotations = 13 [(.google.api.field_behavior) = OPTIONAL];
+   * </code>
+   */
+  java.lang.String getAnnotationsOrThrow(java.lang.String key);
+
   public com.google.cloud.secretmanager.v1.Secret.ExpirationCase getExpirationCase();
 }
diff --git a/java-secretmanager/proto-google-cloud-secretmanager-v1/src/main/java/com/google/cloud/secretmanager/v1/SecretPayload.java b/java-secretmanager/proto-google-cloud-secretmanager-v1/src/main/java/com/google/cloud/secretmanager/v1/SecretPayload.java
index d4c63439a464..e2b6c09e40ab 100644
--- a/java-secretmanager/proto-google-cloud-secretmanager-v1/src/main/java/com/google/cloud/secretmanager/v1/SecretPayload.java
+++ b/java-secretmanager/proto-google-cloud-secretmanager-v1/src/main/java/com/google/cloud/secretmanager/v1/SecretPayload.java
@@ -23,7 +23,8 @@
  *
  * <pre>
  * A secret payload resource in the Secret Manager API. This contains the
- * sensitive secret payload that is associated with a [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
+ * sensitive secret payload that is associated with a
+ * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
  * </pre>
  *
  * Protobuf type {@code google.cloud.secretmanager.v1.SecretPayload}
@@ -93,12 +94,18 @@ public com.google.protobuf.ByteString getData() {
    *
    *
    * <pre>
-   * Optional. If specified, [SecretManagerService][google.cloud.secretmanager.v1.SecretManagerService] will verify the integrity of the
-   * received [data][google.cloud.secretmanager.v1.SecretPayload.data] on [SecretManagerService.AddSecretVersion][google.cloud.secretmanager.v1.SecretManagerService.AddSecretVersion] calls using
-   * the crc32c checksum and store it to include in future
-   * [SecretManagerService.AccessSecretVersion][google.cloud.secretmanager.v1.SecretManagerService.AccessSecretVersion] responses. If a checksum is
-   * not provided in the [SecretManagerService.AddSecretVersion][google.cloud.secretmanager.v1.SecretManagerService.AddSecretVersion] request, the
-   * [SecretManagerService][google.cloud.secretmanager.v1.SecretManagerService] will generate and store one for you.
+   * Optional. If specified,
+   * [SecretManagerService][google.cloud.secretmanager.v1.SecretManagerService]
+   * will verify the integrity of the received
+   * [data][google.cloud.secretmanager.v1.SecretPayload.data] on
+   * [SecretManagerService.AddSecretVersion][google.cloud.secretmanager.v1.SecretManagerService.AddSecretVersion]
+   * calls using the crc32c checksum and store it to include in future
+   * [SecretManagerService.AccessSecretVersion][google.cloud.secretmanager.v1.SecretManagerService.AccessSecretVersion]
+   * responses. If a checksum is not provided in the
+   * [SecretManagerService.AddSecretVersion][google.cloud.secretmanager.v1.SecretManagerService.AddSecretVersion]
+   * request, the
+   * [SecretManagerService][google.cloud.secretmanager.v1.SecretManagerService]
+   * will generate and store one for you.
    * The CRC32C value is encoded as a Int64 for compatibility, and can be
    * safely downconverted to uint32 in languages that support this type.
    * https://cloud.google.com/apis/design/design_patterns#integer_types
@@ -116,12 +123,18 @@ public boolean hasDataCrc32C() {
    *
    *
    * <pre>
-   * Optional. If specified, [SecretManagerService][google.cloud.secretmanager.v1.SecretManagerService] will verify the integrity of the
-   * received [data][google.cloud.secretmanager.v1.SecretPayload.data] on [SecretManagerService.AddSecretVersion][google.cloud.secretmanager.v1.SecretManagerService.AddSecretVersion] calls using
-   * the crc32c checksum and store it to include in future
-   * [SecretManagerService.AccessSecretVersion][google.cloud.secretmanager.v1.SecretManagerService.AccessSecretVersion] responses. If a checksum is
-   * not provided in the [SecretManagerService.AddSecretVersion][google.cloud.secretmanager.v1.SecretManagerService.AddSecretVersion] request, the
-   * [SecretManagerService][google.cloud.secretmanager.v1.SecretManagerService] will generate and store one for you.
+   * Optional. If specified,
+   * [SecretManagerService][google.cloud.secretmanager.v1.SecretManagerService]
+   * will verify the integrity of the received
+   * [data][google.cloud.secretmanager.v1.SecretPayload.data] on
+   * [SecretManagerService.AddSecretVersion][google.cloud.secretmanager.v1.SecretManagerService.AddSecretVersion]
+   * calls using the crc32c checksum and store it to include in future
+   * [SecretManagerService.AccessSecretVersion][google.cloud.secretmanager.v1.SecretManagerService.AccessSecretVersion]
+   * responses. If a checksum is not provided in the
+   * [SecretManagerService.AddSecretVersion][google.cloud.secretmanager.v1.SecretManagerService.AddSecretVersion]
+   * request, the
+   * [SecretManagerService][google.cloud.secretmanager.v1.SecretManagerService]
+   * will generate and store one for you.
    * The CRC32C value is encoded as a Int64 for compatibility, and can be
    * safely downconverted to uint32 in languages that support this type.
    * https://cloud.google.com/apis/design/design_patterns#integer_types
@@ -314,7 +327,8 @@ protected Builder newBuilderForType(com.google.protobuf.GeneratedMessageV3.Build
    *
    * <pre>
    * A secret payload resource in the Secret Manager API. This contains the
-   * sensitive secret payload that is associated with a [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
+   * sensitive secret payload that is associated with a
+   * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
    * </pre>
    *
    * Protobuf type {@code google.cloud.secretmanager.v1.SecretPayload}
@@ -560,12 +574,18 @@ public Builder clearData() {
      *
      *
      * <pre>
-     * Optional. If specified, [SecretManagerService][google.cloud.secretmanager.v1.SecretManagerService] will verify the integrity of the
-     * received [data][google.cloud.secretmanager.v1.SecretPayload.data] on [SecretManagerService.AddSecretVersion][google.cloud.secretmanager.v1.SecretManagerService.AddSecretVersion] calls using
-     * the crc32c checksum and store it to include in future
-     * [SecretManagerService.AccessSecretVersion][google.cloud.secretmanager.v1.SecretManagerService.AccessSecretVersion] responses. If a checksum is
-     * not provided in the [SecretManagerService.AddSecretVersion][google.cloud.secretmanager.v1.SecretManagerService.AddSecretVersion] request, the
-     * [SecretManagerService][google.cloud.secretmanager.v1.SecretManagerService] will generate and store one for you.
+     * Optional. If specified,
+     * [SecretManagerService][google.cloud.secretmanager.v1.SecretManagerService]
+     * will verify the integrity of the received
+     * [data][google.cloud.secretmanager.v1.SecretPayload.data] on
+     * [SecretManagerService.AddSecretVersion][google.cloud.secretmanager.v1.SecretManagerService.AddSecretVersion]
+     * calls using the crc32c checksum and store it to include in future
+     * [SecretManagerService.AccessSecretVersion][google.cloud.secretmanager.v1.SecretManagerService.AccessSecretVersion]
+     * responses. If a checksum is not provided in the
+     * [SecretManagerService.AddSecretVersion][google.cloud.secretmanager.v1.SecretManagerService.AddSecretVersion]
+     * request, the
+     * [SecretManagerService][google.cloud.secretmanager.v1.SecretManagerService]
+     * will generate and store one for you.
      * The CRC32C value is encoded as a Int64 for compatibility, and can be
      * safely downconverted to uint32 in languages that support this type.
      * https://cloud.google.com/apis/design/design_patterns#integer_types
@@ -583,12 +603,18 @@ public boolean hasDataCrc32C() {
      *
      *
      * <pre>
-     * Optional. If specified, [SecretManagerService][google.cloud.secretmanager.v1.SecretManagerService] will verify the integrity of the
-     * received [data][google.cloud.secretmanager.v1.SecretPayload.data] on [SecretManagerService.AddSecretVersion][google.cloud.secretmanager.v1.SecretManagerService.AddSecretVersion] calls using
-     * the crc32c checksum and store it to include in future
-     * [SecretManagerService.AccessSecretVersion][google.cloud.secretmanager.v1.SecretManagerService.AccessSecretVersion] responses. If a checksum is
-     * not provided in the [SecretManagerService.AddSecretVersion][google.cloud.secretmanager.v1.SecretManagerService.AddSecretVersion] request, the
-     * [SecretManagerService][google.cloud.secretmanager.v1.SecretManagerService] will generate and store one for you.
+     * Optional. If specified,
+     * [SecretManagerService][google.cloud.secretmanager.v1.SecretManagerService]
+     * will verify the integrity of the received
+     * [data][google.cloud.secretmanager.v1.SecretPayload.data] on
+     * [SecretManagerService.AddSecretVersion][google.cloud.secretmanager.v1.SecretManagerService.AddSecretVersion]
+     * calls using the crc32c checksum and store it to include in future
+     * [SecretManagerService.AccessSecretVersion][google.cloud.secretmanager.v1.SecretManagerService.AccessSecretVersion]
+     * responses. If a checksum is not provided in the
+     * [SecretManagerService.AddSecretVersion][google.cloud.secretmanager.v1.SecretManagerService.AddSecretVersion]
+     * request, the
+     * [SecretManagerService][google.cloud.secretmanager.v1.SecretManagerService]
+     * will generate and store one for you.
      * The CRC32C value is encoded as a Int64 for compatibility, and can be
      * safely downconverted to uint32 in languages that support this type.
      * https://cloud.google.com/apis/design/design_patterns#integer_types
@@ -606,12 +632,18 @@ public long getDataCrc32C() {
      *
      *
      * <pre>
-     * Optional. If specified, [SecretManagerService][google.cloud.secretmanager.v1.SecretManagerService] will verify the integrity of the
-     * received [data][google.cloud.secretmanager.v1.SecretPayload.data] on [SecretManagerService.AddSecretVersion][google.cloud.secretmanager.v1.SecretManagerService.AddSecretVersion] calls using
-     * the crc32c checksum and store it to include in future
-     * [SecretManagerService.AccessSecretVersion][google.cloud.secretmanager.v1.SecretManagerService.AccessSecretVersion] responses. If a checksum is
-     * not provided in the [SecretManagerService.AddSecretVersion][google.cloud.secretmanager.v1.SecretManagerService.AddSecretVersion] request, the
-     * [SecretManagerService][google.cloud.secretmanager.v1.SecretManagerService] will generate and store one for you.
+     * Optional. If specified,
+     * [SecretManagerService][google.cloud.secretmanager.v1.SecretManagerService]
+     * will verify the integrity of the received
+     * [data][google.cloud.secretmanager.v1.SecretPayload.data] on
+     * [SecretManagerService.AddSecretVersion][google.cloud.secretmanager.v1.SecretManagerService.AddSecretVersion]
+     * calls using the crc32c checksum and store it to include in future
+     * [SecretManagerService.AccessSecretVersion][google.cloud.secretmanager.v1.SecretManagerService.AccessSecretVersion]
+     * responses. If a checksum is not provided in the
+     * [SecretManagerService.AddSecretVersion][google.cloud.secretmanager.v1.SecretManagerService.AddSecretVersion]
+     * request, the
+     * [SecretManagerService][google.cloud.secretmanager.v1.SecretManagerService]
+     * will generate and store one for you.
      * The CRC32C value is encoded as a Int64 for compatibility, and can be
      * safely downconverted to uint32 in languages that support this type.
      * https://cloud.google.com/apis/design/design_patterns#integer_types
@@ -632,12 +664,18 @@ public Builder setDataCrc32C(long value) {
      *
      *
      * <pre>
-     * Optional. If specified, [SecretManagerService][google.cloud.secretmanager.v1.SecretManagerService] will verify the integrity of the
-     * received [data][google.cloud.secretmanager.v1.SecretPayload.data] on [SecretManagerService.AddSecretVersion][google.cloud.secretmanager.v1.SecretManagerService.AddSecretVersion] calls using
-     * the crc32c checksum and store it to include in future
-     * [SecretManagerService.AccessSecretVersion][google.cloud.secretmanager.v1.SecretManagerService.AccessSecretVersion] responses. If a checksum is
-     * not provided in the [SecretManagerService.AddSecretVersion][google.cloud.secretmanager.v1.SecretManagerService.AddSecretVersion] request, the
-     * [SecretManagerService][google.cloud.secretmanager.v1.SecretManagerService] will generate and store one for you.
+     * Optional. If specified,
+     * [SecretManagerService][google.cloud.secretmanager.v1.SecretManagerService]
+     * will verify the integrity of the received
+     * [data][google.cloud.secretmanager.v1.SecretPayload.data] on
+     * [SecretManagerService.AddSecretVersion][google.cloud.secretmanager.v1.SecretManagerService.AddSecretVersion]
+     * calls using the crc32c checksum and store it to include in future
+     * [SecretManagerService.AccessSecretVersion][google.cloud.secretmanager.v1.SecretManagerService.AccessSecretVersion]
+     * responses. If a checksum is not provided in the
+     * [SecretManagerService.AddSecretVersion][google.cloud.secretmanager.v1.SecretManagerService.AddSecretVersion]
+     * request, the
+     * [SecretManagerService][google.cloud.secretmanager.v1.SecretManagerService]
+     * will generate and store one for you.
      * The CRC32C value is encoded as a Int64 for compatibility, and can be
      * safely downconverted to uint32 in languages that support this type.
      * https://cloud.google.com/apis/design/design_patterns#integer_types
diff --git a/java-secretmanager/proto-google-cloud-secretmanager-v1/src/main/java/com/google/cloud/secretmanager/v1/SecretPayloadOrBuilder.java b/java-secretmanager/proto-google-cloud-secretmanager-v1/src/main/java/com/google/cloud/secretmanager/v1/SecretPayloadOrBuilder.java
index 8037fcb5977f..a80eb00c523c 100644
--- a/java-secretmanager/proto-google-cloud-secretmanager-v1/src/main/java/com/google/cloud/secretmanager/v1/SecretPayloadOrBuilder.java
+++ b/java-secretmanager/proto-google-cloud-secretmanager-v1/src/main/java/com/google/cloud/secretmanager/v1/SecretPayloadOrBuilder.java
@@ -40,12 +40,18 @@ public interface SecretPayloadOrBuilder
    *
    *
    * <pre>
-   * Optional. If specified, [SecretManagerService][google.cloud.secretmanager.v1.SecretManagerService] will verify the integrity of the
-   * received [data][google.cloud.secretmanager.v1.SecretPayload.data] on [SecretManagerService.AddSecretVersion][google.cloud.secretmanager.v1.SecretManagerService.AddSecretVersion] calls using
-   * the crc32c checksum and store it to include in future
-   * [SecretManagerService.AccessSecretVersion][google.cloud.secretmanager.v1.SecretManagerService.AccessSecretVersion] responses. If a checksum is
-   * not provided in the [SecretManagerService.AddSecretVersion][google.cloud.secretmanager.v1.SecretManagerService.AddSecretVersion] request, the
-   * [SecretManagerService][google.cloud.secretmanager.v1.SecretManagerService] will generate and store one for you.
+   * Optional. If specified,
+   * [SecretManagerService][google.cloud.secretmanager.v1.SecretManagerService]
+   * will verify the integrity of the received
+   * [data][google.cloud.secretmanager.v1.SecretPayload.data] on
+   * [SecretManagerService.AddSecretVersion][google.cloud.secretmanager.v1.SecretManagerService.AddSecretVersion]
+   * calls using the crc32c checksum and store it to include in future
+   * [SecretManagerService.AccessSecretVersion][google.cloud.secretmanager.v1.SecretManagerService.AccessSecretVersion]
+   * responses. If a checksum is not provided in the
+   * [SecretManagerService.AddSecretVersion][google.cloud.secretmanager.v1.SecretManagerService.AddSecretVersion]
+   * request, the
+   * [SecretManagerService][google.cloud.secretmanager.v1.SecretManagerService]
+   * will generate and store one for you.
    * The CRC32C value is encoded as a Int64 for compatibility, and can be
    * safely downconverted to uint32 in languages that support this type.
    * https://cloud.google.com/apis/design/design_patterns#integer_types
@@ -60,12 +66,18 @@ public interface SecretPayloadOrBuilder
    *
    *
    * <pre>
-   * Optional. If specified, [SecretManagerService][google.cloud.secretmanager.v1.SecretManagerService] will verify the integrity of the
-   * received [data][google.cloud.secretmanager.v1.SecretPayload.data] on [SecretManagerService.AddSecretVersion][google.cloud.secretmanager.v1.SecretManagerService.AddSecretVersion] calls using
-   * the crc32c checksum and store it to include in future
-   * [SecretManagerService.AccessSecretVersion][google.cloud.secretmanager.v1.SecretManagerService.AccessSecretVersion] responses. If a checksum is
-   * not provided in the [SecretManagerService.AddSecretVersion][google.cloud.secretmanager.v1.SecretManagerService.AddSecretVersion] request, the
-   * [SecretManagerService][google.cloud.secretmanager.v1.SecretManagerService] will generate and store one for you.
+   * Optional. If specified,
+   * [SecretManagerService][google.cloud.secretmanager.v1.SecretManagerService]
+   * will verify the integrity of the received
+   * [data][google.cloud.secretmanager.v1.SecretPayload.data] on
+   * [SecretManagerService.AddSecretVersion][google.cloud.secretmanager.v1.SecretManagerService.AddSecretVersion]
+   * calls using the crc32c checksum and store it to include in future
+   * [SecretManagerService.AccessSecretVersion][google.cloud.secretmanager.v1.SecretManagerService.AccessSecretVersion]
+   * responses. If a checksum is not provided in the
+   * [SecretManagerService.AddSecretVersion][google.cloud.secretmanager.v1.SecretManagerService.AddSecretVersion]
+   * request, the
+   * [SecretManagerService][google.cloud.secretmanager.v1.SecretManagerService]
+   * will generate and store one for you.
    * The CRC32C value is encoded as a Int64 for compatibility, and can be
    * safely downconverted to uint32 in languages that support this type.
    * https://cloud.google.com/apis/design/design_patterns#integer_types
diff --git a/java-secretmanager/proto-google-cloud-secretmanager-v1/src/main/java/com/google/cloud/secretmanager/v1/SecretVersion.java b/java-secretmanager/proto-google-cloud-secretmanager-v1/src/main/java/com/google/cloud/secretmanager/v1/SecretVersion.java
index ef7c7b89f966..8fca7bfda8bf 100644
--- a/java-secretmanager/proto-google-cloud-secretmanager-v1/src/main/java/com/google/cloud/secretmanager/v1/SecretVersion.java
+++ b/java-secretmanager/proto-google-cloud-secretmanager-v1/src/main/java/com/google/cloud/secretmanager/v1/SecretVersion.java
@@ -73,7 +73,9 @@ public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
    *
    *
    * <pre>
-   * The state of a [SecretVersion][google.cloud.secretmanager.v1.SecretVersion], indicating if it can be accessed.
+   * The state of a
+   * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion], indicating if
+   * it can be accessed.
    * </pre>
    *
    * Protobuf enum {@code google.cloud.secretmanager.v1.SecretVersion.State}
@@ -93,7 +95,8 @@ public enum State implements com.google.protobuf.ProtocolMessageEnum {
      *
      *
      * <pre>
-     * The [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] may be accessed.
+     * The [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] may be
+     * accessed.
      * </pre>
      *
      * <code>ENABLED = 1;</code>
@@ -103,8 +106,10 @@ public enum State implements com.google.protobuf.ProtocolMessageEnum {
      *
      *
      * <pre>
-     * The [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] may not be accessed, but the secret data
-     * is still available and can be placed back into the [ENABLED][google.cloud.secretmanager.v1.SecretVersion.State.ENABLED]
+     * The [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] may not
+     * be accessed, but the secret data is still available and can be placed
+     * back into the
+     * [ENABLED][google.cloud.secretmanager.v1.SecretVersion.State.ENABLED]
      * state.
      * </pre>
      *
@@ -115,8 +120,9 @@ public enum State implements com.google.protobuf.ProtocolMessageEnum {
      *
      *
      * <pre>
-     * The [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] is destroyed and the secret data is no longer
-     * stored. A version may not leave this state once entered.
+     * The [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] is
+     * destroyed and the secret data is no longer stored. A version may not
+     * leave this state once entered.
      * </pre>
      *
      * <code>DESTROYED = 3;</code>
@@ -139,7 +145,8 @@ public enum State implements com.google.protobuf.ProtocolMessageEnum {
      *
      *
      * <pre>
-     * The [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] may be accessed.
+     * The [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] may be
+     * accessed.
      * </pre>
      *
      * <code>ENABLED = 1;</code>
@@ -149,8 +156,10 @@ public enum State implements com.google.protobuf.ProtocolMessageEnum {
      *
      *
      * <pre>
-     * The [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] may not be accessed, but the secret data
-     * is still available and can be placed back into the [ENABLED][google.cloud.secretmanager.v1.SecretVersion.State.ENABLED]
+     * The [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] may not
+     * be accessed, but the secret data is still available and can be placed
+     * back into the
+     * [ENABLED][google.cloud.secretmanager.v1.SecretVersion.State.ENABLED]
      * state.
      * </pre>
      *
@@ -161,8 +170,9 @@ public enum State implements com.google.protobuf.ProtocolMessageEnum {
      *
      *
      * <pre>
-     * The [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] is destroyed and the secret data is no longer
-     * stored. A version may not leave this state once entered.
+     * The [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] is
+     * destroyed and the secret data is no longer stored. A version may not
+     * leave this state once entered.
      * </pre>
      *
      * <code>DESTROYED = 3;</code>
@@ -260,10 +270,12 @@ private State(int value) {
    *
    *
    * <pre>
-   * Output only. The resource name of the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] in the
-   * format `projects/&#42;&#47;secrets/&#42;&#47;versions/&#42;`.
-   * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] IDs in a [Secret][google.cloud.secretmanager.v1.Secret] start at 1 and
-   * are incremented for each subsequent version of the secret.
+   * Output only. The resource name of the
+   * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] in the format
+   * `projects/&#42;&#47;secrets/&#42;&#47;versions/&#42;`.
+   * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] IDs in a
+   * [Secret][google.cloud.secretmanager.v1.Secret] start at 1 and are
+   * incremented for each subsequent version of the secret.
    * </pre>
    *
    * <code>string name = 1 [(.google.api.field_behavior) = OUTPUT_ONLY];</code>
@@ -286,10 +298,12 @@ public java.lang.String getName() {
    *
    *
    * <pre>
-   * Output only. The resource name of the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] in the
-   * format `projects/&#42;&#47;secrets/&#42;&#47;versions/&#42;`.
-   * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] IDs in a [Secret][google.cloud.secretmanager.v1.Secret] start at 1 and
-   * are incremented for each subsequent version of the secret.
+   * Output only. The resource name of the
+   * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] in the format
+   * `projects/&#42;&#47;secrets/&#42;&#47;versions/&#42;`.
+   * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] IDs in a
+   * [Secret][google.cloud.secretmanager.v1.Secret] start at 1 and are
+   * incremented for each subsequent version of the secret.
    * </pre>
    *
    * <code>string name = 1 [(.google.api.field_behavior) = OUTPUT_ONLY];</code>
@@ -315,7 +329,8 @@ public com.google.protobuf.ByteString getNameBytes() {
    *
    *
    * <pre>
-   * Output only. The time at which the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] was created.
+   * Output only. The time at which the
+   * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] was created.
    * </pre>
    *
    * <code>.google.protobuf.Timestamp create_time = 2 [(.google.api.field_behavior) = OUTPUT_ONLY];
@@ -331,7 +346,8 @@ public boolean hasCreateTime() {
    *
    *
    * <pre>
-   * Output only. The time at which the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] was created.
+   * Output only. The time at which the
+   * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] was created.
    * </pre>
    *
    * <code>.google.protobuf.Timestamp create_time = 2 [(.google.api.field_behavior) = OUTPUT_ONLY];
@@ -347,7 +363,8 @@ public com.google.protobuf.Timestamp getCreateTime() {
    *
    *
    * <pre>
-   * Output only. The time at which the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] was created.
+   * Output only. The time at which the
+   * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] was created.
    * </pre>
    *
    * <code>.google.protobuf.Timestamp create_time = 2 [(.google.api.field_behavior) = OUTPUT_ONLY];
@@ -364,8 +381,10 @@ public com.google.protobuf.TimestampOrBuilder getCreateTimeOrBuilder() {
    *
    *
    * <pre>
-   * Output only. The time this [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] was destroyed.
-   * Only present if [state][google.cloud.secretmanager.v1.SecretVersion.state] is
+   * Output only. The time this
+   * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] was destroyed.
+   * Only present if [state][google.cloud.secretmanager.v1.SecretVersion.state]
+   * is
    * [DESTROYED][google.cloud.secretmanager.v1.SecretVersion.State.DESTROYED].
    * </pre>
    *
@@ -382,8 +401,10 @@ public boolean hasDestroyTime() {
    *
    *
    * <pre>
-   * Output only. The time this [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] was destroyed.
-   * Only present if [state][google.cloud.secretmanager.v1.SecretVersion.state] is
+   * Output only. The time this
+   * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] was destroyed.
+   * Only present if [state][google.cloud.secretmanager.v1.SecretVersion.state]
+   * is
    * [DESTROYED][google.cloud.secretmanager.v1.SecretVersion.State.DESTROYED].
    * </pre>
    *
@@ -400,8 +421,10 @@ public com.google.protobuf.Timestamp getDestroyTime() {
    *
    *
    * <pre>
-   * Output only. The time this [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] was destroyed.
-   * Only present if [state][google.cloud.secretmanager.v1.SecretVersion.state] is
+   * Output only. The time this
+   * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] was destroyed.
+   * Only present if [state][google.cloud.secretmanager.v1.SecretVersion.state]
+   * is
    * [DESTROYED][google.cloud.secretmanager.v1.SecretVersion.State.DESTROYED].
    * </pre>
    *
@@ -419,7 +442,8 @@ public com.google.protobuf.TimestampOrBuilder getDestroyTimeOrBuilder() {
    *
    *
    * <pre>
-   * Output only. The current state of the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
+   * Output only. The current state of the
+   * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
    * </pre>
    *
    * <code>
@@ -436,7 +460,8 @@ public int getStateValue() {
    *
    *
    * <pre>
-   * Output only. The current state of the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
+   * Output only. The current state of the
+   * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
    * </pre>
    *
    * <code>
@@ -461,7 +486,8 @@ public com.google.cloud.secretmanager.v1.SecretVersion.State getState() {
    *
    *
    * <pre>
-   * The replication status of the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
+   * The replication status of the
+   * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
    * </pre>
    *
    * <code>.google.cloud.secretmanager.v1.ReplicationStatus replication_status = 5;</code>
@@ -476,7 +502,8 @@ public boolean hasReplicationStatus() {
    *
    *
    * <pre>
-   * The replication status of the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
+   * The replication status of the
+   * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
    * </pre>
    *
    * <code>.google.cloud.secretmanager.v1.ReplicationStatus replication_status = 5;</code>
@@ -493,7 +520,8 @@ public com.google.cloud.secretmanager.v1.ReplicationStatus getReplicationStatus(
    *
    *
    * <pre>
-   * The replication status of the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
+   * The replication status of the
+   * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
    * </pre>
    *
    * <code>.google.cloud.secretmanager.v1.ReplicationStatus replication_status = 5;</code>
@@ -510,7 +538,8 @@ public com.google.cloud.secretmanager.v1.ReplicationStatus getReplicationStatus(
    *
    *
    * <pre>
-   * Output only. Etag of the currently stored [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
+   * Output only. Etag of the currently stored
+   * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
    * </pre>
    *
    * <code>string etag = 6 [(.google.api.field_behavior) = OUTPUT_ONLY];</code>
@@ -533,7 +562,8 @@ public java.lang.String getEtag() {
    *
    *
    * <pre>
-   * Output only. Etag of the currently stored [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
+   * Output only. Etag of the currently stored
+   * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
    * </pre>
    *
    * <code>string etag = 6 [(.google.api.field_behavior) = OUTPUT_ONLY];</code>
@@ -559,8 +589,11 @@ public com.google.protobuf.ByteString getEtagBytes() {
    *
    *
    * <pre>
-   * Output only. True if payload checksum specified in [SecretPayload][google.cloud.secretmanager.v1.SecretPayload] object has been
-   * received by [SecretManagerService][google.cloud.secretmanager.v1.SecretManagerService] on
+   * Output only. True if payload checksum specified in
+   * [SecretPayload][google.cloud.secretmanager.v1.SecretPayload] object has
+   * been received by
+   * [SecretManagerService][google.cloud.secretmanager.v1.SecretManagerService]
+   * on
    * [SecretManagerService.AddSecretVersion][google.cloud.secretmanager.v1.SecretManagerService.AddSecretVersion].
    * </pre>
    *
@@ -1081,10 +1114,12 @@ public Builder mergeFrom(
      *
      *
      * <pre>
-     * Output only. The resource name of the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] in the
-     * format `projects/&#42;&#47;secrets/&#42;&#47;versions/&#42;`.
-     * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] IDs in a [Secret][google.cloud.secretmanager.v1.Secret] start at 1 and
-     * are incremented for each subsequent version of the secret.
+     * Output only. The resource name of the
+     * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] in the format
+     * `projects/&#42;&#47;secrets/&#42;&#47;versions/&#42;`.
+     * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] IDs in a
+     * [Secret][google.cloud.secretmanager.v1.Secret] start at 1 and are
+     * incremented for each subsequent version of the secret.
      * </pre>
      *
      * <code>string name = 1 [(.google.api.field_behavior) = OUTPUT_ONLY];</code>
@@ -1106,10 +1141,12 @@ public java.lang.String getName() {
      *
      *
      * <pre>
-     * Output only. The resource name of the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] in the
-     * format `projects/&#42;&#47;secrets/&#42;&#47;versions/&#42;`.
-     * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] IDs in a [Secret][google.cloud.secretmanager.v1.Secret] start at 1 and
-     * are incremented for each subsequent version of the secret.
+     * Output only. The resource name of the
+     * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] in the format
+     * `projects/&#42;&#47;secrets/&#42;&#47;versions/&#42;`.
+     * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] IDs in a
+     * [Secret][google.cloud.secretmanager.v1.Secret] start at 1 and are
+     * incremented for each subsequent version of the secret.
      * </pre>
      *
      * <code>string name = 1 [(.google.api.field_behavior) = OUTPUT_ONLY];</code>
@@ -1131,10 +1168,12 @@ public com.google.protobuf.ByteString getNameBytes() {
      *
      *
      * <pre>
-     * Output only. The resource name of the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] in the
-     * format `projects/&#42;&#47;secrets/&#42;&#47;versions/&#42;`.
-     * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] IDs in a [Secret][google.cloud.secretmanager.v1.Secret] start at 1 and
-     * are incremented for each subsequent version of the secret.
+     * Output only. The resource name of the
+     * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] in the format
+     * `projects/&#42;&#47;secrets/&#42;&#47;versions/&#42;`.
+     * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] IDs in a
+     * [Secret][google.cloud.secretmanager.v1.Secret] start at 1 and are
+     * incremented for each subsequent version of the secret.
      * </pre>
      *
      * <code>string name = 1 [(.google.api.field_behavior) = OUTPUT_ONLY];</code>
@@ -1155,10 +1194,12 @@ public Builder setName(java.lang.String value) {
      *
      *
      * <pre>
-     * Output only. The resource name of the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] in the
-     * format `projects/&#42;&#47;secrets/&#42;&#47;versions/&#42;`.
-     * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] IDs in a [Secret][google.cloud.secretmanager.v1.Secret] start at 1 and
-     * are incremented for each subsequent version of the secret.
+     * Output only. The resource name of the
+     * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] in the format
+     * `projects/&#42;&#47;secrets/&#42;&#47;versions/&#42;`.
+     * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] IDs in a
+     * [Secret][google.cloud.secretmanager.v1.Secret] start at 1 and are
+     * incremented for each subsequent version of the secret.
      * </pre>
      *
      * <code>string name = 1 [(.google.api.field_behavior) = OUTPUT_ONLY];</code>
@@ -1175,10 +1216,12 @@ public Builder clearName() {
      *
      *
      * <pre>
-     * Output only. The resource name of the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] in the
-     * format `projects/&#42;&#47;secrets/&#42;&#47;versions/&#42;`.
-     * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] IDs in a [Secret][google.cloud.secretmanager.v1.Secret] start at 1 and
-     * are incremented for each subsequent version of the secret.
+     * Output only. The resource name of the
+     * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] in the format
+     * `projects/&#42;&#47;secrets/&#42;&#47;versions/&#42;`.
+     * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] IDs in a
+     * [Secret][google.cloud.secretmanager.v1.Secret] start at 1 and are
+     * incremented for each subsequent version of the secret.
      * </pre>
      *
      * <code>string name = 1 [(.google.api.field_behavior) = OUTPUT_ONLY];</code>
@@ -1207,7 +1250,8 @@ public Builder setNameBytes(com.google.protobuf.ByteString value) {
      *
      *
      * <pre>
-     * Output only. The time at which the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] was created.
+     * Output only. The time at which the
+     * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] was created.
      * </pre>
      *
      * <code>
@@ -1223,7 +1267,8 @@ public boolean hasCreateTime() {
      *
      *
      * <pre>
-     * Output only. The time at which the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] was created.
+     * Output only. The time at which the
+     * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] was created.
      * </pre>
      *
      * <code>
@@ -1245,7 +1290,8 @@ public com.google.protobuf.Timestamp getCreateTime() {
      *
      *
      * <pre>
-     * Output only. The time at which the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] was created.
+     * Output only. The time at which the
+     * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] was created.
      * </pre>
      *
      * <code>
@@ -1269,7 +1315,8 @@ public Builder setCreateTime(com.google.protobuf.Timestamp value) {
      *
      *
      * <pre>
-     * Output only. The time at which the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] was created.
+     * Output only. The time at which the
+     * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] was created.
      * </pre>
      *
      * <code>
@@ -1290,7 +1337,8 @@ public Builder setCreateTime(com.google.protobuf.Timestamp.Builder builderForVal
      *
      *
      * <pre>
-     * Output only. The time at which the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] was created.
+     * Output only. The time at which the
+     * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] was created.
      * </pre>
      *
      * <code>
@@ -1316,7 +1364,8 @@ public Builder mergeCreateTime(com.google.protobuf.Timestamp value) {
      *
      *
      * <pre>
-     * Output only. The time at which the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] was created.
+     * Output only. The time at which the
+     * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] was created.
      * </pre>
      *
      * <code>
@@ -1338,7 +1387,8 @@ public Builder clearCreateTime() {
      *
      *
      * <pre>
-     * Output only. The time at which the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] was created.
+     * Output only. The time at which the
+     * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] was created.
      * </pre>
      *
      * <code>
@@ -1354,7 +1404,8 @@ public com.google.protobuf.Timestamp.Builder getCreateTimeBuilder() {
      *
      *
      * <pre>
-     * Output only. The time at which the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] was created.
+     * Output only. The time at which the
+     * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] was created.
      * </pre>
      *
      * <code>
@@ -1374,7 +1425,8 @@ public com.google.protobuf.TimestampOrBuilder getCreateTimeOrBuilder() {
      *
      *
      * <pre>
-     * Output only. The time at which the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] was created.
+     * Output only. The time at which the
+     * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] was created.
      * </pre>
      *
      * <code>
@@ -1408,8 +1460,10 @@ public com.google.protobuf.TimestampOrBuilder getCreateTimeOrBuilder() {
      *
      *
      * <pre>
-     * Output only. The time this [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] was destroyed.
-     * Only present if [state][google.cloud.secretmanager.v1.SecretVersion.state] is
+     * Output only. The time this
+     * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] was destroyed.
+     * Only present if [state][google.cloud.secretmanager.v1.SecretVersion.state]
+     * is
      * [DESTROYED][google.cloud.secretmanager.v1.SecretVersion.State.DESTROYED].
      * </pre>
      *
@@ -1426,8 +1480,10 @@ public boolean hasDestroyTime() {
      *
      *
      * <pre>
-     * Output only. The time this [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] was destroyed.
-     * Only present if [state][google.cloud.secretmanager.v1.SecretVersion.state] is
+     * Output only. The time this
+     * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] was destroyed.
+     * Only present if [state][google.cloud.secretmanager.v1.SecretVersion.state]
+     * is
      * [DESTROYED][google.cloud.secretmanager.v1.SecretVersion.State.DESTROYED].
      * </pre>
      *
@@ -1450,8 +1506,10 @@ public com.google.protobuf.Timestamp getDestroyTime() {
      *
      *
      * <pre>
-     * Output only. The time this [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] was destroyed.
-     * Only present if [state][google.cloud.secretmanager.v1.SecretVersion.state] is
+     * Output only. The time this
+     * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] was destroyed.
+     * Only present if [state][google.cloud.secretmanager.v1.SecretVersion.state]
+     * is
      * [DESTROYED][google.cloud.secretmanager.v1.SecretVersion.State.DESTROYED].
      * </pre>
      *
@@ -1476,8 +1534,10 @@ public Builder setDestroyTime(com.google.protobuf.Timestamp value) {
      *
      *
      * <pre>
-     * Output only. The time this [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] was destroyed.
-     * Only present if [state][google.cloud.secretmanager.v1.SecretVersion.state] is
+     * Output only. The time this
+     * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] was destroyed.
+     * Only present if [state][google.cloud.secretmanager.v1.SecretVersion.state]
+     * is
      * [DESTROYED][google.cloud.secretmanager.v1.SecretVersion.State.DESTROYED].
      * </pre>
      *
@@ -1499,8 +1559,10 @@ public Builder setDestroyTime(com.google.protobuf.Timestamp.Builder builderForVa
      *
      *
      * <pre>
-     * Output only. The time this [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] was destroyed.
-     * Only present if [state][google.cloud.secretmanager.v1.SecretVersion.state] is
+     * Output only. The time this
+     * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] was destroyed.
+     * Only present if [state][google.cloud.secretmanager.v1.SecretVersion.state]
+     * is
      * [DESTROYED][google.cloud.secretmanager.v1.SecretVersion.State.DESTROYED].
      * </pre>
      *
@@ -1529,8 +1591,10 @@ public Builder mergeDestroyTime(com.google.protobuf.Timestamp value) {
      *
      *
      * <pre>
-     * Output only. The time this [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] was destroyed.
-     * Only present if [state][google.cloud.secretmanager.v1.SecretVersion.state] is
+     * Output only. The time this
+     * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] was destroyed.
+     * Only present if [state][google.cloud.secretmanager.v1.SecretVersion.state]
+     * is
      * [DESTROYED][google.cloud.secretmanager.v1.SecretVersion.State.DESTROYED].
      * </pre>
      *
@@ -1553,8 +1617,10 @@ public Builder clearDestroyTime() {
      *
      *
      * <pre>
-     * Output only. The time this [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] was destroyed.
-     * Only present if [state][google.cloud.secretmanager.v1.SecretVersion.state] is
+     * Output only. The time this
+     * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] was destroyed.
+     * Only present if [state][google.cloud.secretmanager.v1.SecretVersion.state]
+     * is
      * [DESTROYED][google.cloud.secretmanager.v1.SecretVersion.State.DESTROYED].
      * </pre>
      *
@@ -1571,8 +1637,10 @@ public com.google.protobuf.Timestamp.Builder getDestroyTimeBuilder() {
      *
      *
      * <pre>
-     * Output only. The time this [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] was destroyed.
-     * Only present if [state][google.cloud.secretmanager.v1.SecretVersion.state] is
+     * Output only. The time this
+     * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] was destroyed.
+     * Only present if [state][google.cloud.secretmanager.v1.SecretVersion.state]
+     * is
      * [DESTROYED][google.cloud.secretmanager.v1.SecretVersion.State.DESTROYED].
      * </pre>
      *
@@ -1593,8 +1661,10 @@ public com.google.protobuf.TimestampOrBuilder getDestroyTimeOrBuilder() {
      *
      *
      * <pre>
-     * Output only. The time this [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] was destroyed.
-     * Only present if [state][google.cloud.secretmanager.v1.SecretVersion.state] is
+     * Output only. The time this
+     * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] was destroyed.
+     * Only present if [state][google.cloud.secretmanager.v1.SecretVersion.state]
+     * is
      * [DESTROYED][google.cloud.secretmanager.v1.SecretVersion.State.DESTROYED].
      * </pre>
      *
@@ -1624,7 +1694,8 @@ public com.google.protobuf.TimestampOrBuilder getDestroyTimeOrBuilder() {
      *
      *
      * <pre>
-     * Output only. The current state of the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
+     * Output only. The current state of the
+     * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
      * </pre>
      *
      * <code>
@@ -1641,7 +1712,8 @@ public int getStateValue() {
      *
      *
      * <pre>
-     * Output only. The current state of the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
+     * Output only. The current state of the
+     * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
      * </pre>
      *
      * <code>
@@ -1661,7 +1733,8 @@ public Builder setStateValue(int value) {
      *
      *
      * <pre>
-     * Output only. The current state of the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
+     * Output only. The current state of the
+     * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
      * </pre>
      *
      * <code>
@@ -1683,7 +1756,8 @@ public com.google.cloud.secretmanager.v1.SecretVersion.State getState() {
      *
      *
      * <pre>
-     * Output only. The current state of the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
+     * Output only. The current state of the
+     * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
      * </pre>
      *
      * <code>
@@ -1706,7 +1780,8 @@ public Builder setState(com.google.cloud.secretmanager.v1.SecretVersion.State va
      *
      *
      * <pre>
-     * Output only. The current state of the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
+     * Output only. The current state of the
+     * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
      * </pre>
      *
      * <code>
@@ -1732,7 +1807,8 @@ public Builder clearState() {
      *
      *
      * <pre>
-     * The replication status of the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
+     * The replication status of the
+     * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
      * </pre>
      *
      * <code>.google.cloud.secretmanager.v1.ReplicationStatus replication_status = 5;</code>
@@ -1746,7 +1822,8 @@ public boolean hasReplicationStatus() {
      *
      *
      * <pre>
-     * The replication status of the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
+     * The replication status of the
+     * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
      * </pre>
      *
      * <code>.google.cloud.secretmanager.v1.ReplicationStatus replication_status = 5;</code>
@@ -1766,7 +1843,8 @@ public com.google.cloud.secretmanager.v1.ReplicationStatus getReplicationStatus(
      *
      *
      * <pre>
-     * The replication status of the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
+     * The replication status of the
+     * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
      * </pre>
      *
      * <code>.google.cloud.secretmanager.v1.ReplicationStatus replication_status = 5;</code>
@@ -1788,7 +1866,8 @@ public Builder setReplicationStatus(com.google.cloud.secretmanager.v1.Replicatio
      *
      *
      * <pre>
-     * The replication status of the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
+     * The replication status of the
+     * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
      * </pre>
      *
      * <code>.google.cloud.secretmanager.v1.ReplicationStatus replication_status = 5;</code>
@@ -1808,7 +1887,8 @@ public Builder setReplicationStatus(
      *
      *
      * <pre>
-     * The replication status of the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
+     * The replication status of the
+     * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
      * </pre>
      *
      * <code>.google.cloud.secretmanager.v1.ReplicationStatus replication_status = 5;</code>
@@ -1835,7 +1915,8 @@ public Builder mergeReplicationStatus(
      *
      *
      * <pre>
-     * The replication status of the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
+     * The replication status of the
+     * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
      * </pre>
      *
      * <code>.google.cloud.secretmanager.v1.ReplicationStatus replication_status = 5;</code>
@@ -1855,7 +1936,8 @@ public Builder clearReplicationStatus() {
      *
      *
      * <pre>
-     * The replication status of the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
+     * The replication status of the
+     * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
      * </pre>
      *
      * <code>.google.cloud.secretmanager.v1.ReplicationStatus replication_status = 5;</code>
@@ -1870,7 +1952,8 @@ public Builder clearReplicationStatus() {
      *
      *
      * <pre>
-     * The replication status of the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
+     * The replication status of the
+     * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
      * </pre>
      *
      * <code>.google.cloud.secretmanager.v1.ReplicationStatus replication_status = 5;</code>
@@ -1889,7 +1972,8 @@ public Builder clearReplicationStatus() {
      *
      *
      * <pre>
-     * The replication status of the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
+     * The replication status of the
+     * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
      * </pre>
      *
      * <code>.google.cloud.secretmanager.v1.ReplicationStatus replication_status = 5;</code>
@@ -1916,7 +2000,8 @@ public Builder clearReplicationStatus() {
      *
      *
      * <pre>
-     * Output only. Etag of the currently stored [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
+     * Output only. Etag of the currently stored
+     * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
      * </pre>
      *
      * <code>string etag = 6 [(.google.api.field_behavior) = OUTPUT_ONLY];</code>
@@ -1938,7 +2023,8 @@ public java.lang.String getEtag() {
      *
      *
      * <pre>
-     * Output only. Etag of the currently stored [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
+     * Output only. Etag of the currently stored
+     * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
      * </pre>
      *
      * <code>string etag = 6 [(.google.api.field_behavior) = OUTPUT_ONLY];</code>
@@ -1960,7 +2046,8 @@ public com.google.protobuf.ByteString getEtagBytes() {
      *
      *
      * <pre>
-     * Output only. Etag of the currently stored [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
+     * Output only. Etag of the currently stored
+     * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
      * </pre>
      *
      * <code>string etag = 6 [(.google.api.field_behavior) = OUTPUT_ONLY];</code>
@@ -1981,7 +2068,8 @@ public Builder setEtag(java.lang.String value) {
      *
      *
      * <pre>
-     * Output only. Etag of the currently stored [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
+     * Output only. Etag of the currently stored
+     * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
      * </pre>
      *
      * <code>string etag = 6 [(.google.api.field_behavior) = OUTPUT_ONLY];</code>
@@ -1998,7 +2086,8 @@ public Builder clearEtag() {
      *
      *
      * <pre>
-     * Output only. Etag of the currently stored [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
+     * Output only. Etag of the currently stored
+     * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
      * </pre>
      *
      * <code>string etag = 6 [(.google.api.field_behavior) = OUTPUT_ONLY];</code>
@@ -2022,8 +2111,11 @@ public Builder setEtagBytes(com.google.protobuf.ByteString value) {
      *
      *
      * <pre>
-     * Output only. True if payload checksum specified in [SecretPayload][google.cloud.secretmanager.v1.SecretPayload] object has been
-     * received by [SecretManagerService][google.cloud.secretmanager.v1.SecretManagerService] on
+     * Output only. True if payload checksum specified in
+     * [SecretPayload][google.cloud.secretmanager.v1.SecretPayload] object has
+     * been received by
+     * [SecretManagerService][google.cloud.secretmanager.v1.SecretManagerService]
+     * on
      * [SecretManagerService.AddSecretVersion][google.cloud.secretmanager.v1.SecretManagerService.AddSecretVersion].
      * </pre>
      *
@@ -2041,8 +2133,11 @@ public boolean getClientSpecifiedPayloadChecksum() {
      *
      *
      * <pre>
-     * Output only. True if payload checksum specified in [SecretPayload][google.cloud.secretmanager.v1.SecretPayload] object has been
-     * received by [SecretManagerService][google.cloud.secretmanager.v1.SecretManagerService] on
+     * Output only. True if payload checksum specified in
+     * [SecretPayload][google.cloud.secretmanager.v1.SecretPayload] object has
+     * been received by
+     * [SecretManagerService][google.cloud.secretmanager.v1.SecretManagerService]
+     * on
      * [SecretManagerService.AddSecretVersion][google.cloud.secretmanager.v1.SecretManagerService.AddSecretVersion].
      * </pre>
      *
@@ -2063,8 +2158,11 @@ public Builder setClientSpecifiedPayloadChecksum(boolean value) {
      *
      *
      * <pre>
-     * Output only. True if payload checksum specified in [SecretPayload][google.cloud.secretmanager.v1.SecretPayload] object has been
-     * received by [SecretManagerService][google.cloud.secretmanager.v1.SecretManagerService] on
+     * Output only. True if payload checksum specified in
+     * [SecretPayload][google.cloud.secretmanager.v1.SecretPayload] object has
+     * been received by
+     * [SecretManagerService][google.cloud.secretmanager.v1.SecretManagerService]
+     * on
      * [SecretManagerService.AddSecretVersion][google.cloud.secretmanager.v1.SecretManagerService.AddSecretVersion].
      * </pre>
      *
diff --git a/java-secretmanager/proto-google-cloud-secretmanager-v1/src/main/java/com/google/cloud/secretmanager/v1/SecretVersionOrBuilder.java b/java-secretmanager/proto-google-cloud-secretmanager-v1/src/main/java/com/google/cloud/secretmanager/v1/SecretVersionOrBuilder.java
index 50b4f0e07d26..a5da7790ab4f 100644
--- a/java-secretmanager/proto-google-cloud-secretmanager-v1/src/main/java/com/google/cloud/secretmanager/v1/SecretVersionOrBuilder.java
+++ b/java-secretmanager/proto-google-cloud-secretmanager-v1/src/main/java/com/google/cloud/secretmanager/v1/SecretVersionOrBuilder.java
@@ -27,10 +27,12 @@ public interface SecretVersionOrBuilder
    *
    *
    * <pre>
-   * Output only. The resource name of the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] in the
-   * format `projects/&#42;&#47;secrets/&#42;&#47;versions/&#42;`.
-   * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] IDs in a [Secret][google.cloud.secretmanager.v1.Secret] start at 1 and
-   * are incremented for each subsequent version of the secret.
+   * Output only. The resource name of the
+   * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] in the format
+   * `projects/&#42;&#47;secrets/&#42;&#47;versions/&#42;`.
+   * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] IDs in a
+   * [Secret][google.cloud.secretmanager.v1.Secret] start at 1 and are
+   * incremented for each subsequent version of the secret.
    * </pre>
    *
    * <code>string name = 1 [(.google.api.field_behavior) = OUTPUT_ONLY];</code>
@@ -42,10 +44,12 @@ public interface SecretVersionOrBuilder
    *
    *
    * <pre>
-   * Output only. The resource name of the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] in the
-   * format `projects/&#42;&#47;secrets/&#42;&#47;versions/&#42;`.
-   * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] IDs in a [Secret][google.cloud.secretmanager.v1.Secret] start at 1 and
-   * are incremented for each subsequent version of the secret.
+   * Output only. The resource name of the
+   * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] in the format
+   * `projects/&#42;&#47;secrets/&#42;&#47;versions/&#42;`.
+   * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] IDs in a
+   * [Secret][google.cloud.secretmanager.v1.Secret] start at 1 and are
+   * incremented for each subsequent version of the secret.
    * </pre>
    *
    * <code>string name = 1 [(.google.api.field_behavior) = OUTPUT_ONLY];</code>
@@ -58,7 +62,8 @@ public interface SecretVersionOrBuilder
    *
    *
    * <pre>
-   * Output only. The time at which the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] was created.
+   * Output only. The time at which the
+   * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] was created.
    * </pre>
    *
    * <code>.google.protobuf.Timestamp create_time = 2 [(.google.api.field_behavior) = OUTPUT_ONLY];
@@ -71,7 +76,8 @@ public interface SecretVersionOrBuilder
    *
    *
    * <pre>
-   * Output only. The time at which the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] was created.
+   * Output only. The time at which the
+   * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] was created.
    * </pre>
    *
    * <code>.google.protobuf.Timestamp create_time = 2 [(.google.api.field_behavior) = OUTPUT_ONLY];
@@ -84,7 +90,8 @@ public interface SecretVersionOrBuilder
    *
    *
    * <pre>
-   * Output only. The time at which the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] was created.
+   * Output only. The time at which the
+   * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] was created.
    * </pre>
    *
    * <code>.google.protobuf.Timestamp create_time = 2 [(.google.api.field_behavior) = OUTPUT_ONLY];
@@ -96,8 +103,10 @@ public interface SecretVersionOrBuilder
    *
    *
    * <pre>
-   * Output only. The time this [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] was destroyed.
-   * Only present if [state][google.cloud.secretmanager.v1.SecretVersion.state] is
+   * Output only. The time this
+   * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] was destroyed.
+   * Only present if [state][google.cloud.secretmanager.v1.SecretVersion.state]
+   * is
    * [DESTROYED][google.cloud.secretmanager.v1.SecretVersion.State.DESTROYED].
    * </pre>
    *
@@ -111,8 +120,10 @@ public interface SecretVersionOrBuilder
    *
    *
    * <pre>
-   * Output only. The time this [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] was destroyed.
-   * Only present if [state][google.cloud.secretmanager.v1.SecretVersion.state] is
+   * Output only. The time this
+   * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] was destroyed.
+   * Only present if [state][google.cloud.secretmanager.v1.SecretVersion.state]
+   * is
    * [DESTROYED][google.cloud.secretmanager.v1.SecretVersion.State.DESTROYED].
    * </pre>
    *
@@ -126,8 +137,10 @@ public interface SecretVersionOrBuilder
    *
    *
    * <pre>
-   * Output only. The time this [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] was destroyed.
-   * Only present if [state][google.cloud.secretmanager.v1.SecretVersion.state] is
+   * Output only. The time this
+   * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] was destroyed.
+   * Only present if [state][google.cloud.secretmanager.v1.SecretVersion.state]
+   * is
    * [DESTROYED][google.cloud.secretmanager.v1.SecretVersion.State.DESTROYED].
    * </pre>
    *
@@ -140,7 +153,8 @@ public interface SecretVersionOrBuilder
    *
    *
    * <pre>
-   * Output only. The current state of the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
+   * Output only. The current state of the
+   * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
    * </pre>
    *
    * <code>
@@ -154,7 +168,8 @@ public interface SecretVersionOrBuilder
    *
    *
    * <pre>
-   * Output only. The current state of the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
+   * Output only. The current state of the
+   * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
    * </pre>
    *
    * <code>
@@ -169,7 +184,8 @@ public interface SecretVersionOrBuilder
    *
    *
    * <pre>
-   * The replication status of the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
+   * The replication status of the
+   * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
    * </pre>
    *
    * <code>.google.cloud.secretmanager.v1.ReplicationStatus replication_status = 5;</code>
@@ -181,7 +197,8 @@ public interface SecretVersionOrBuilder
    *
    *
    * <pre>
-   * The replication status of the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
+   * The replication status of the
+   * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
    * </pre>
    *
    * <code>.google.cloud.secretmanager.v1.ReplicationStatus replication_status = 5;</code>
@@ -193,7 +210,8 @@ public interface SecretVersionOrBuilder
    *
    *
    * <pre>
-   * The replication status of the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
+   * The replication status of the
+   * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
    * </pre>
    *
    * <code>.google.cloud.secretmanager.v1.ReplicationStatus replication_status = 5;</code>
@@ -204,7 +222,8 @@ public interface SecretVersionOrBuilder
    *
    *
    * <pre>
-   * Output only. Etag of the currently stored [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
+   * Output only. Etag of the currently stored
+   * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
    * </pre>
    *
    * <code>string etag = 6 [(.google.api.field_behavior) = OUTPUT_ONLY];</code>
@@ -216,7 +235,8 @@ public interface SecretVersionOrBuilder
    *
    *
    * <pre>
-   * Output only. Etag of the currently stored [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
+   * Output only. Etag of the currently stored
+   * [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
    * </pre>
    *
    * <code>string etag = 6 [(.google.api.field_behavior) = OUTPUT_ONLY];</code>
@@ -229,8 +249,11 @@ public interface SecretVersionOrBuilder
    *
    *
    * <pre>
-   * Output only. True if payload checksum specified in [SecretPayload][google.cloud.secretmanager.v1.SecretPayload] object has been
-   * received by [SecretManagerService][google.cloud.secretmanager.v1.SecretManagerService] on
+   * Output only. True if payload checksum specified in
+   * [SecretPayload][google.cloud.secretmanager.v1.SecretPayload] object has
+   * been received by
+   * [SecretManagerService][google.cloud.secretmanager.v1.SecretManagerService]
+   * on
    * [SecretManagerService.AddSecretVersion][google.cloud.secretmanager.v1.SecretManagerService.AddSecretVersion].
    * </pre>
    *
diff --git a/java-secretmanager/proto-google-cloud-secretmanager-v1/src/main/java/com/google/cloud/secretmanager/v1/Topic.java b/java-secretmanager/proto-google-cloud-secretmanager-v1/src/main/java/com/google/cloud/secretmanager/v1/Topic.java
index 9b21c53018f8..cf49b1dc1866 100644
--- a/java-secretmanager/proto-google-cloud-secretmanager-v1/src/main/java/com/google/cloud/secretmanager/v1/Topic.java
+++ b/java-secretmanager/proto-google-cloud-secretmanager-v1/src/main/java/com/google/cloud/secretmanager/v1/Topic.java
@@ -74,9 +74,10 @@ public static final com.google.protobuf.Descriptors.Descriptor getDescriptor() {
    *
    *
    * <pre>
-   * Required. The resource name of the Pub/Sub topic that will be published to, in the
-   * following format: `projects/&#42;&#47;topics/&#42;`. For publication to succeed, the
-   * Secret Manager P4SA must have `pubsub.publisher` permissions on the topic.
+   * Required. The resource name of the Pub/Sub topic that will be published to,
+   * in the following format: `projects/&#42;&#47;topics/&#42;`. For publication to succeed,
+   * the Secret Manager P4SA must have `pubsub.publisher` permissions on the
+   * topic.
    * </pre>
    *
    * <code>string name = 1 [(.google.api.field_behavior) = REQUIRED];</code>
@@ -99,9 +100,10 @@ public java.lang.String getName() {
    *
    *
    * <pre>
-   * Required. The resource name of the Pub/Sub topic that will be published to, in the
-   * following format: `projects/&#42;&#47;topics/&#42;`. For publication to succeed, the
-   * Secret Manager P4SA must have `pubsub.publisher` permissions on the topic.
+   * Required. The resource name of the Pub/Sub topic that will be published to,
+   * in the following format: `projects/&#42;&#47;topics/&#42;`. For publication to succeed,
+   * the Secret Manager P4SA must have `pubsub.publisher` permissions on the
+   * topic.
    * </pre>
    *
    * <code>string name = 1 [(.google.api.field_behavior) = REQUIRED];</code>
@@ -455,9 +457,10 @@ public Builder mergeFrom(
      *
      *
      * <pre>
-     * Required. The resource name of the Pub/Sub topic that will be published to, in the
-     * following format: `projects/&#42;&#47;topics/&#42;`. For publication to succeed, the
-     * Secret Manager P4SA must have `pubsub.publisher` permissions on the topic.
+     * Required. The resource name of the Pub/Sub topic that will be published to,
+     * in the following format: `projects/&#42;&#47;topics/&#42;`. For publication to succeed,
+     * the Secret Manager P4SA must have `pubsub.publisher` permissions on the
+     * topic.
      * </pre>
      *
      * <code>string name = 1 [(.google.api.field_behavior) = REQUIRED];</code>
@@ -479,9 +482,10 @@ public java.lang.String getName() {
      *
      *
      * <pre>
-     * Required. The resource name of the Pub/Sub topic that will be published to, in the
-     * following format: `projects/&#42;&#47;topics/&#42;`. For publication to succeed, the
-     * Secret Manager P4SA must have `pubsub.publisher` permissions on the topic.
+     * Required. The resource name of the Pub/Sub topic that will be published to,
+     * in the following format: `projects/&#42;&#47;topics/&#42;`. For publication to succeed,
+     * the Secret Manager P4SA must have `pubsub.publisher` permissions on the
+     * topic.
      * </pre>
      *
      * <code>string name = 1 [(.google.api.field_behavior) = REQUIRED];</code>
@@ -503,9 +507,10 @@ public com.google.protobuf.ByteString getNameBytes() {
      *
      *
      * <pre>
-     * Required. The resource name of the Pub/Sub topic that will be published to, in the
-     * following format: `projects/&#42;&#47;topics/&#42;`. For publication to succeed, the
-     * Secret Manager P4SA must have `pubsub.publisher` permissions on the topic.
+     * Required. The resource name of the Pub/Sub topic that will be published to,
+     * in the following format: `projects/&#42;&#47;topics/&#42;`. For publication to succeed,
+     * the Secret Manager P4SA must have `pubsub.publisher` permissions on the
+     * topic.
      * </pre>
      *
      * <code>string name = 1 [(.google.api.field_behavior) = REQUIRED];</code>
@@ -526,9 +531,10 @@ public Builder setName(java.lang.String value) {
      *
      *
      * <pre>
-     * Required. The resource name of the Pub/Sub topic that will be published to, in the
-     * following format: `projects/&#42;&#47;topics/&#42;`. For publication to succeed, the
-     * Secret Manager P4SA must have `pubsub.publisher` permissions on the topic.
+     * Required. The resource name of the Pub/Sub topic that will be published to,
+     * in the following format: `projects/&#42;&#47;topics/&#42;`. For publication to succeed,
+     * the Secret Manager P4SA must have `pubsub.publisher` permissions on the
+     * topic.
      * </pre>
      *
      * <code>string name = 1 [(.google.api.field_behavior) = REQUIRED];</code>
@@ -545,9 +551,10 @@ public Builder clearName() {
      *
      *
      * <pre>
-     * Required. The resource name of the Pub/Sub topic that will be published to, in the
-     * following format: `projects/&#42;&#47;topics/&#42;`. For publication to succeed, the
-     * Secret Manager P4SA must have `pubsub.publisher` permissions on the topic.
+     * Required. The resource name of the Pub/Sub topic that will be published to,
+     * in the following format: `projects/&#42;&#47;topics/&#42;`. For publication to succeed,
+     * the Secret Manager P4SA must have `pubsub.publisher` permissions on the
+     * topic.
      * </pre>
      *
      * <code>string name = 1 [(.google.api.field_behavior) = REQUIRED];</code>
diff --git a/java-secretmanager/proto-google-cloud-secretmanager-v1/src/main/java/com/google/cloud/secretmanager/v1/TopicOrBuilder.java b/java-secretmanager/proto-google-cloud-secretmanager-v1/src/main/java/com/google/cloud/secretmanager/v1/TopicOrBuilder.java
index 8e231332d6f6..7bf2fda46f57 100644
--- a/java-secretmanager/proto-google-cloud-secretmanager-v1/src/main/java/com/google/cloud/secretmanager/v1/TopicOrBuilder.java
+++ b/java-secretmanager/proto-google-cloud-secretmanager-v1/src/main/java/com/google/cloud/secretmanager/v1/TopicOrBuilder.java
@@ -27,9 +27,10 @@ public interface TopicOrBuilder
    *
    *
    * <pre>
-   * Required. The resource name of the Pub/Sub topic that will be published to, in the
-   * following format: `projects/&#42;&#47;topics/&#42;`. For publication to succeed, the
-   * Secret Manager P4SA must have `pubsub.publisher` permissions on the topic.
+   * Required. The resource name of the Pub/Sub topic that will be published to,
+   * in the following format: `projects/&#42;&#47;topics/&#42;`. For publication to succeed,
+   * the Secret Manager P4SA must have `pubsub.publisher` permissions on the
+   * topic.
    * </pre>
    *
    * <code>string name = 1 [(.google.api.field_behavior) = REQUIRED];</code>
@@ -41,9 +42,10 @@ public interface TopicOrBuilder
    *
    *
    * <pre>
-   * Required. The resource name of the Pub/Sub topic that will be published to, in the
-   * following format: `projects/&#42;&#47;topics/&#42;`. For publication to succeed, the
-   * Secret Manager P4SA must have `pubsub.publisher` permissions on the topic.
+   * Required. The resource name of the Pub/Sub topic that will be published to,
+   * in the following format: `projects/&#42;&#47;topics/&#42;`. For publication to succeed,
+   * the Secret Manager P4SA must have `pubsub.publisher` permissions on the
+   * topic.
    * </pre>
    *
    * <code>string name = 1 [(.google.api.field_behavior) = REQUIRED];</code>
diff --git a/java-secretmanager/proto-google-cloud-secretmanager-v1/src/main/proto/google/cloud/secretmanager/v1/resources.proto b/java-secretmanager/proto-google-cloud-secretmanager-v1/src/main/proto/google/cloud/secretmanager/v1/resources.proto
index 4b50a6715596..3c6591e3b9b3 100644
--- a/java-secretmanager/proto-google-cloud-secretmanager-v1/src/main/proto/google/cloud/secretmanager/v1/resources.proto
+++ b/java-secretmanager/proto-google-cloud-secretmanager-v1/src/main/proto/google/cloud/secretmanager/v1/resources.proto
@@ -1,4 +1,4 @@
-// Copyright 2021 Google LLC
+// Copyright 2022 Google LLC
 //
 // Licensed under the Apache License, Version 2.0 (the "License");
 // you may not use this file except in compliance with the License.
@@ -31,21 +31,25 @@ option objc_class_prefix = "GSM";
 option php_namespace = "Google\\Cloud\\SecretManager\\V1";
 option ruby_package = "Google::Cloud::SecretManager::V1";
 
-// A [Secret][google.cloud.secretmanager.v1.Secret] is a logical secret whose value and versions can
-// be accessed.
+// A [Secret][google.cloud.secretmanager.v1.Secret] is a logical secret whose
+// value and versions can be accessed.
 //
-// A [Secret][google.cloud.secretmanager.v1.Secret] is made up of zero or more [SecretVersions][google.cloud.secretmanager.v1.SecretVersion] that
-// represent the secret data.
+// A [Secret][google.cloud.secretmanager.v1.Secret] is made up of zero or more
+// [SecretVersions][google.cloud.secretmanager.v1.SecretVersion] that represent
+// the secret data.
 message Secret {
   option (google.api.resource) = {
     type: "secretmanager.googleapis.com/Secret"
     pattern: "projects/{project}/secrets/{secret}"
   };
 
-  // Output only. The resource name of the [Secret][google.cloud.secretmanager.v1.Secret] in the format `projects/*/secrets/*`.
+  // Output only. The resource name of the
+  // [Secret][google.cloud.secretmanager.v1.Secret] in the format
+  // `projects/*/secrets/*`.
   string name = 1 [(google.api.field_behavior) = OUTPUT_ONLY];
 
-  // Required. Immutable. The replication policy of the secret data attached to the [Secret][google.cloud.secretmanager.v1.Secret].
+  // Required. Immutable. The replication policy of the secret data attached to
+  // the [Secret][google.cloud.secretmanager.v1.Secret].
   //
   // The replication policy cannot be changed after the Secret has been created.
   Replication replication = 2 [
@@ -53,8 +57,10 @@ message Secret {
     (google.api.field_behavior) = REQUIRED
   ];
 
-  // Output only. The time at which the [Secret][google.cloud.secretmanager.v1.Secret] was created.
-  google.protobuf.Timestamp create_time = 3 [(google.api.field_behavior) = OUTPUT_ONLY];
+  // Output only. The time at which the
+  // [Secret][google.cloud.secretmanager.v1.Secret] was created.
+  google.protobuf.Timestamp create_time = 3
+      [(google.api.field_behavior) = OUTPUT_ONLY];
 
   // The labels assigned to this Secret.
   //
@@ -69,32 +75,40 @@ message Secret {
   // No more than 64 labels can be assigned to a given resource.
   map<string, string> labels = 4;
 
-  // Optional. A list of up to 10 Pub/Sub topics to which messages are published when
-  // control plane operations are called on the secret or its versions.
+  // Optional. A list of up to 10 Pub/Sub topics to which messages are published
+  // when control plane operations are called on the secret or its versions.
   repeated Topic topics = 5 [(google.api.field_behavior) = OPTIONAL];
 
-  // Expiration policy attached to the [Secret][google.cloud.secretmanager.v1.Secret]. If specified the [Secret][google.cloud.secretmanager.v1.Secret]
-  // and all [SecretVersions][google.cloud.secretmanager.v1.SecretVersion] will be automatically deleted at
-  // expiration. Expired secrets are irreversibly deleted.
+  // Expiration policy attached to the
+  // [Secret][google.cloud.secretmanager.v1.Secret]. If specified the
+  // [Secret][google.cloud.secretmanager.v1.Secret] and all
+  // [SecretVersions][google.cloud.secretmanager.v1.SecretVersion] will be
+  // automatically deleted at expiration. Expired secrets are irreversibly
+  // deleted.
   //
   // Expiration is *not* the recommended way to set time-based permissions. [IAM
   // Conditions](https://cloud.google.com/secret-manager/docs/access-control#conditions)
   // is recommended for granting time-based permissions because the operation
   // can be reversed.
   oneof expiration {
-    // Optional. Timestamp in UTC when the [Secret][google.cloud.secretmanager.v1.Secret] is scheduled to expire. This is
-    // always provided on output, regardless of what was sent on input.
-    google.protobuf.Timestamp expire_time = 6 [(google.api.field_behavior) = OPTIONAL];
-
-    // Input only. The TTL for the [Secret][google.cloud.secretmanager.v1.Secret].
+    // Optional. Timestamp in UTC when the
+    // [Secret][google.cloud.secretmanager.v1.Secret] is scheduled to expire.
+    // This is always provided on output, regardless of what was sent on input.
+    google.protobuf.Timestamp expire_time = 6
+        [(google.api.field_behavior) = OPTIONAL];
+
+    // Input only. The TTL for the
+    // [Secret][google.cloud.secretmanager.v1.Secret].
     google.protobuf.Duration ttl = 7 [(google.api.field_behavior) = INPUT_ONLY];
   }
 
-  // Optional. Etag of the currently stored [Secret][google.cloud.secretmanager.v1.Secret].
+  // Optional. Etag of the currently stored
+  // [Secret][google.cloud.secretmanager.v1.Secret].
   string etag = 8 [(google.api.field_behavior) = OPTIONAL];
 
-  // Optional. Rotation policy attached to the [Secret][google.cloud.secretmanager.v1.Secret]. May be excluded if there is no
-  // rotation policy.
+  // Optional. Rotation policy attached to the
+  // [Secret][google.cloud.secretmanager.v1.Secret]. May be excluded if there is
+  // no rotation policy.
   Rotation rotation = 9 [(google.api.field_behavior) = OPTIONAL];
 
   // Optional. Mapping from version alias to version name.
@@ -108,7 +122,22 @@ message Secret {
   // Version-Alias pairs will be viewable via GetSecret and modifiable via
   // UpdateSecret. At launch access by alias will only be supported on
   // GetSecretVersion and AccessSecretVersion.
-  map<string, int64> version_aliases = 11 [(google.api.field_behavior) = OPTIONAL];
+  map<string, int64> version_aliases = 11
+      [(google.api.field_behavior) = OPTIONAL];
+
+  // Optional. Custom metadata about the secret.
+  //
+  // Annotations are distinct from various forms of labels.
+  // Annotations exist to allow client tools to store their own state
+  // information without requiring a database.
+  //
+  // Annotation keys must be between 1 and 63 characters long, have a UTF-8
+  // encoding of maximum 128 bytes, begin and end with an alphanumeric character
+  // ([a-z0-9A-Z]), and may have dashes (-), underscores (_), dots (.), and
+  // alphanumerics in between these symbols.
+  //
+  // The total size of annotation keys and values must be less than 16KiB.
+  map<string, string> annotations = 13 [(google.api.field_behavior) = OPTIONAL];
 }
 
 // A secret version resource in the Secret Manager API.
@@ -118,88 +147,119 @@ message SecretVersion {
     pattern: "projects/{project}/secrets/{secret}/versions/{secret_version}"
   };
 
-  // The state of a [SecretVersion][google.cloud.secretmanager.v1.SecretVersion], indicating if it can be accessed.
+  // The state of a
+  // [SecretVersion][google.cloud.secretmanager.v1.SecretVersion], indicating if
+  // it can be accessed.
   enum State {
     // Not specified. This value is unused and invalid.
     STATE_UNSPECIFIED = 0;
 
-    // The [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] may be accessed.
+    // The [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] may be
+    // accessed.
     ENABLED = 1;
 
-    // The [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] may not be accessed, but the secret data
-    // is still available and can be placed back into the [ENABLED][google.cloud.secretmanager.v1.SecretVersion.State.ENABLED]
+    // The [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] may not
+    // be accessed, but the secret data is still available and can be placed
+    // back into the
+    // [ENABLED][google.cloud.secretmanager.v1.SecretVersion.State.ENABLED]
     // state.
     DISABLED = 2;
 
-    // The [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] is destroyed and the secret data is no longer
-    // stored. A version may not leave this state once entered.
+    // The [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] is
+    // destroyed and the secret data is no longer stored. A version may not
+    // leave this state once entered.
     DESTROYED = 3;
   }
 
-  // Output only. The resource name of the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] in the
-  // format `projects/*/secrets/*/versions/*`.
+  // Output only. The resource name of the
+  // [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] in the format
+  // `projects/*/secrets/*/versions/*`.
   //
-  // [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] IDs in a [Secret][google.cloud.secretmanager.v1.Secret] start at 1 and
-  // are incremented for each subsequent version of the secret.
+  // [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] IDs in a
+  // [Secret][google.cloud.secretmanager.v1.Secret] start at 1 and are
+  // incremented for each subsequent version of the secret.
   string name = 1 [(google.api.field_behavior) = OUTPUT_ONLY];
 
-  // Output only. The time at which the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] was created.
-  google.protobuf.Timestamp create_time = 2 [(google.api.field_behavior) = OUTPUT_ONLY];
+  // Output only. The time at which the
+  // [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] was created.
+  google.protobuf.Timestamp create_time = 2
+      [(google.api.field_behavior) = OUTPUT_ONLY];
 
-  // Output only. The time this [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] was destroyed.
-  // Only present if [state][google.cloud.secretmanager.v1.SecretVersion.state] is
+  // Output only. The time this
+  // [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] was destroyed.
+  // Only present if [state][google.cloud.secretmanager.v1.SecretVersion.state]
+  // is
   // [DESTROYED][google.cloud.secretmanager.v1.SecretVersion.State.DESTROYED].
-  google.protobuf.Timestamp destroy_time = 3 [(google.api.field_behavior) = OUTPUT_ONLY];
+  google.protobuf.Timestamp destroy_time = 3
+      [(google.api.field_behavior) = OUTPUT_ONLY];
 
-  // Output only. The current state of the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
+  // Output only. The current state of the
+  // [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
   State state = 4 [(google.api.field_behavior) = OUTPUT_ONLY];
 
-  // The replication status of the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
+  // The replication status of the
+  // [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
   ReplicationStatus replication_status = 5;
 
-  // Output only. Etag of the currently stored [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
+  // Output only. Etag of the currently stored
+  // [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
   string etag = 6 [(google.api.field_behavior) = OUTPUT_ONLY];
 
-  // Output only. True if payload checksum specified in [SecretPayload][google.cloud.secretmanager.v1.SecretPayload] object has been
-  // received by [SecretManagerService][google.cloud.secretmanager.v1.SecretManagerService] on
+  // Output only. True if payload checksum specified in
+  // [SecretPayload][google.cloud.secretmanager.v1.SecretPayload] object has
+  // been received by
+  // [SecretManagerService][google.cloud.secretmanager.v1.SecretManagerService]
+  // on
   // [SecretManagerService.AddSecretVersion][google.cloud.secretmanager.v1.SecretManagerService.AddSecretVersion].
-  bool client_specified_payload_checksum = 7 [(google.api.field_behavior) = OUTPUT_ONLY];
+  bool client_specified_payload_checksum = 7
+      [(google.api.field_behavior) = OUTPUT_ONLY];
 }
 
 // A policy that defines the replication and encryption configuration of data.
 message Replication {
-  // A replication policy that replicates the [Secret][google.cloud.secretmanager.v1.Secret] payload without any
+  // A replication policy that replicates the
+  // [Secret][google.cloud.secretmanager.v1.Secret] payload without any
   // restrictions.
   message Automatic {
-    // Optional. The customer-managed encryption configuration of the [Secret][google.cloud.secretmanager.v1.Secret]. If no
-    // configuration is provided, Google-managed default encryption is used.
+    // Optional. The customer-managed encryption configuration of the
+    // [Secret][google.cloud.secretmanager.v1.Secret]. If no configuration is
+    // provided, Google-managed default encryption is used.
     //
-    // Updates to the [Secret][google.cloud.secretmanager.v1.Secret] encryption configuration only apply to
-    // [SecretVersions][google.cloud.secretmanager.v1.SecretVersion] added afterwards. They do not apply
-    // retroactively to existing [SecretVersions][google.cloud.secretmanager.v1.SecretVersion].
-    CustomerManagedEncryption customer_managed_encryption = 1 [(google.api.field_behavior) = OPTIONAL];
+    // Updates to the [Secret][google.cloud.secretmanager.v1.Secret] encryption
+    // configuration only apply to
+    // [SecretVersions][google.cloud.secretmanager.v1.SecretVersion] added
+    // afterwards. They do not apply retroactively to existing
+    // [SecretVersions][google.cloud.secretmanager.v1.SecretVersion].
+    CustomerManagedEncryption customer_managed_encryption = 1
+        [(google.api.field_behavior) = OPTIONAL];
   }
 
-  // A replication policy that replicates the [Secret][google.cloud.secretmanager.v1.Secret] payload into the
-  // locations specified in [Secret.replication.user_managed.replicas][]
+  // A replication policy that replicates the
+  // [Secret][google.cloud.secretmanager.v1.Secret] payload into the locations
+  // specified in [Secret.replication.user_managed.replicas][]
   message UserManaged {
-    // Represents a Replica for this [Secret][google.cloud.secretmanager.v1.Secret].
+    // Represents a Replica for this
+    // [Secret][google.cloud.secretmanager.v1.Secret].
     message Replica {
       // The canonical IDs of the location to replicate data.
       // For example: `"us-east1"`.
       string location = 1;
 
-      // Optional. The customer-managed encryption configuration of the [User-Managed
-      // Replica][Replication.UserManaged.Replica]. If no configuration is
-      // provided, Google-managed default encryption is used.
+      // Optional. The customer-managed encryption configuration of the
+      // [User-Managed Replica][Replication.UserManaged.Replica]. If no
+      // configuration is provided, Google-managed default encryption is used.
       //
-      // Updates to the [Secret][google.cloud.secretmanager.v1.Secret] encryption configuration only apply to
-      // [SecretVersions][google.cloud.secretmanager.v1.SecretVersion] added afterwards. They do not apply
-      // retroactively to existing [SecretVersions][google.cloud.secretmanager.v1.SecretVersion].
-      CustomerManagedEncryption customer_managed_encryption = 2 [(google.api.field_behavior) = OPTIONAL];
+      // Updates to the [Secret][google.cloud.secretmanager.v1.Secret]
+      // encryption configuration only apply to
+      // [SecretVersions][google.cloud.secretmanager.v1.SecretVersion] added
+      // afterwards. They do not apply retroactively to existing
+      // [SecretVersions][google.cloud.secretmanager.v1.SecretVersion].
+      CustomerManagedEncryption customer_managed_encryption = 2
+          [(google.api.field_behavior) = OPTIONAL];
     }
 
-    // Required. The list of Replicas for this [Secret][google.cloud.secretmanager.v1.Secret].
+    // Required. The list of Replicas for this
+    // [Secret][google.cloud.secretmanager.v1.Secret].
     //
     // Cannot be empty.
     repeated Replica replicas = 1 [(google.api.field_behavior) = REQUIRED];
@@ -207,10 +267,12 @@ message Replication {
 
   // The replication policy for this secret.
   oneof replication {
-    // The [Secret][google.cloud.secretmanager.v1.Secret] will automatically be replicated without any restrictions.
+    // The [Secret][google.cloud.secretmanager.v1.Secret] will automatically be
+    // replicated without any restrictions.
     Automatic automatic = 1;
 
-    // The [Secret][google.cloud.secretmanager.v1.Secret] will only be replicated into the locations specified.
+    // The [Secret][google.cloud.secretmanager.v1.Secret] will only be
+    // replicated into the locations specified.
     UserManaged user_managed = 2;
   }
 }
@@ -218,75 +280,93 @@ message Replication {
 // Configuration for encrypting secret payloads using customer-managed
 // encryption keys (CMEK).
 message CustomerManagedEncryption {
-  // Required. The resource name of the Cloud KMS CryptoKey used to encrypt secret
-  // payloads.
+  // Required. The resource name of the Cloud KMS CryptoKey used to encrypt
+  // secret payloads.
   //
-  // For secrets using the [UserManaged][google.cloud.secretmanager.v1.Replication.UserManaged] replication
-  // policy type, Cloud KMS CryptoKeys must reside in the same location as the
-  // [replica location][Secret.UserManaged.Replica.location].
+  // For secrets using the
+  // [UserManaged][google.cloud.secretmanager.v1.Replication.UserManaged]
+  // replication policy type, Cloud KMS CryptoKeys must reside in the same
+  // location as the [replica location][Secret.UserManaged.Replica.location].
   //
-  // For secrets using the [Automatic][google.cloud.secretmanager.v1.Replication.Automatic] replication policy
-  // type, Cloud KMS CryptoKeys must reside in `global`.
+  // For secrets using the
+  // [Automatic][google.cloud.secretmanager.v1.Replication.Automatic]
+  // replication policy type, Cloud KMS CryptoKeys must reside in `global`.
   //
   // The expected format is `projects/*/locations/*/keyRings/*/cryptoKeys/*`.
   string kms_key_name = 1 [(google.api.field_behavior) = REQUIRED];
 }
 
-// The replication status of a [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
+// The replication status of a
+// [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
 message ReplicationStatus {
-  // The replication status of a [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] using automatic replication.
+  // The replication status of a
+  // [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] using
+  // automatic replication.
   //
-  // Only populated if the parent [Secret][google.cloud.secretmanager.v1.Secret] has an automatic replication
-  // policy.
+  // Only populated if the parent [Secret][google.cloud.secretmanager.v1.Secret]
+  // has an automatic replication policy.
   message AutomaticStatus {
-    // Output only. The customer-managed encryption status of the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion]. Only
+    // Output only. The customer-managed encryption status of the
+    // [SecretVersion][google.cloud.secretmanager.v1.SecretVersion]. Only
     // populated if customer-managed encryption is used.
-    CustomerManagedEncryptionStatus customer_managed_encryption = 1 [(google.api.field_behavior) = OUTPUT_ONLY];
+    CustomerManagedEncryptionStatus customer_managed_encryption = 1
+        [(google.api.field_behavior) = OUTPUT_ONLY];
   }
 
-  // The replication status of a [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] using user-managed
-  // replication.
+  // The replication status of a
+  // [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] using
+  // user-managed replication.
   //
-  // Only populated if the parent [Secret][google.cloud.secretmanager.v1.Secret] has a user-managed replication
-  // policy.
+  // Only populated if the parent [Secret][google.cloud.secretmanager.v1.Secret]
+  // has a user-managed replication policy.
   message UserManagedStatus {
-    // Describes the status of a user-managed replica for the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
+    // Describes the status of a user-managed replica for the
+    // [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
     message ReplicaStatus {
       // Output only. The canonical ID of the replica location.
       // For example: `"us-east1"`.
       string location = 1 [(google.api.field_behavior) = OUTPUT_ONLY];
 
-      // Output only. The customer-managed encryption status of the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion]. Only
+      // Output only. The customer-managed encryption status of the
+      // [SecretVersion][google.cloud.secretmanager.v1.SecretVersion]. Only
       // populated if customer-managed encryption is used.
-      CustomerManagedEncryptionStatus customer_managed_encryption = 2 [(google.api.field_behavior) = OUTPUT_ONLY];
+      CustomerManagedEncryptionStatus customer_managed_encryption = 2
+          [(google.api.field_behavior) = OUTPUT_ONLY];
     }
 
-    // Output only. The list of replica statuses for the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
-    repeated ReplicaStatus replicas = 1 [(google.api.field_behavior) = OUTPUT_ONLY];
+    // Output only. The list of replica statuses for the
+    // [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
+    repeated ReplicaStatus replicas = 1
+        [(google.api.field_behavior) = OUTPUT_ONLY];
   }
 
-  // The replication status of the [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
+  // The replication status of the
+  // [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
   oneof replication_status {
-    // Describes the replication status of a [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] with
+    // Describes the replication status of a
+    // [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] with
     // automatic replication.
     //
-    // Only populated if the parent [Secret][google.cloud.secretmanager.v1.Secret] has an automatic replication
-    // policy.
+    // Only populated if the parent
+    // [Secret][google.cloud.secretmanager.v1.Secret] has an automatic
+    // replication policy.
     AutomaticStatus automatic = 1;
 
-    // Describes the replication status of a [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] with
+    // Describes the replication status of a
+    // [SecretVersion][google.cloud.secretmanager.v1.SecretVersion] with
     // user-managed replication.
     //
-    // Only populated if the parent [Secret][google.cloud.secretmanager.v1.Secret] has a user-managed replication
-    // policy.
+    // Only populated if the parent
+    // [Secret][google.cloud.secretmanager.v1.Secret] has a user-managed
+    // replication policy.
     UserManagedStatus user_managed = 2;
   }
 }
 
 // Describes the status of customer-managed encryption.
 message CustomerManagedEncryptionStatus {
-  // Required. The resource name of the Cloud KMS CryptoKeyVersion used to encrypt the
-  // secret payload, in the following format:
+  // Required. The resource name of the Cloud KMS CryptoKeyVersion used to
+  // encrypt the secret payload, in the following format:
   // `projects/*/locations/*/keyRings/*/cryptoKeys/*/versions/*`.
   string kms_key_version_name = 1 [(google.api.field_behavior) = REQUIRED];
 }
@@ -299,44 +379,65 @@ message Topic {
     pattern: "projects/{project}/topics/{topic}"
   };
 
-  // Required. The resource name of the Pub/Sub topic that will be published to, in the
-  // following format: `projects/*/topics/*`. For publication to succeed, the
-  // Secret Manager P4SA must have `pubsub.publisher` permissions on the topic.
+  // Required. The resource name of the Pub/Sub topic that will be published to,
+  // in the following format: `projects/*/topics/*`. For publication to succeed,
+  // the Secret Manager P4SA must have `pubsub.publisher` permissions on the
+  // topic.
   string name = 1 [(google.api.field_behavior) = REQUIRED];
 }
 
-// The rotation time and period for a [Secret][google.cloud.secretmanager.v1.Secret]. At next_rotation_time, Secret
+// The rotation time and period for a
+// [Secret][google.cloud.secretmanager.v1.Secret]. At next_rotation_time, Secret
 // Manager will send a Pub/Sub notification to the topics configured on the
-// Secret. [Secret.topics][google.cloud.secretmanager.v1.Secret.topics] must be set to configure rotation.
+// Secret. [Secret.topics][google.cloud.secretmanager.v1.Secret.topics] must be
+// set to configure rotation.
 message Rotation {
-  // Optional. Timestamp in UTC at which the [Secret][google.cloud.secretmanager.v1.Secret] is scheduled to rotate. Cannot be
-  // set to less than 300s (5 min) in the future and at most 3153600000s (100
-  // years).
+  // Optional. Timestamp in UTC at which the
+  // [Secret][google.cloud.secretmanager.v1.Secret] is scheduled to rotate.
+  // Cannot be set to less than 300s (5 min) in the future and at most
+  // 3153600000s (100 years).
   //
-  // [next_rotation_time][google.cloud.secretmanager.v1.Rotation.next_rotation_time] MUST  be set if [rotation_period][google.cloud.secretmanager.v1.Rotation.rotation_period] is set.
-  google.protobuf.Timestamp next_rotation_time = 1 [(google.api.field_behavior) = OPTIONAL];
+  // [next_rotation_time][google.cloud.secretmanager.v1.Rotation.next_rotation_time]
+  // MUST  be set if
+  // [rotation_period][google.cloud.secretmanager.v1.Rotation.rotation_period]
+  // is set.
+  google.protobuf.Timestamp next_rotation_time = 1
+      [(google.api.field_behavior) = OPTIONAL];
 
   // Input only. The Duration between rotation notifications. Must be in seconds
   // and at least 3600s (1h) and at most 3153600000s (100 years).
   //
-  // If [rotation_period][google.cloud.secretmanager.v1.Rotation.rotation_period] is set, [next_rotation_time][google.cloud.secretmanager.v1.Rotation.next_rotation_time] must be set.
-  // [next_rotation_time][google.cloud.secretmanager.v1.Rotation.next_rotation_time] will be advanced by this period when the service
-  // automatically sends rotation notifications.
-  google.protobuf.Duration rotation_period = 2 [(google.api.field_behavior) = INPUT_ONLY];
+  // If
+  // [rotation_period][google.cloud.secretmanager.v1.Rotation.rotation_period]
+  // is set,
+  // [next_rotation_time][google.cloud.secretmanager.v1.Rotation.next_rotation_time]
+  // must be set.
+  // [next_rotation_time][google.cloud.secretmanager.v1.Rotation.next_rotation_time]
+  // will be advanced by this period when the service automatically sends
+  // rotation notifications.
+  google.protobuf.Duration rotation_period = 2
+      [(google.api.field_behavior) = INPUT_ONLY];
 }
 
 // A secret payload resource in the Secret Manager API. This contains the
-// sensitive secret payload that is associated with a [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
+// sensitive secret payload that is associated with a
+// [SecretVersion][google.cloud.secretmanager.v1.SecretVersion].
 message SecretPayload {
   // The secret data. Must be no larger than 64KiB.
   bytes data = 1;
 
-  // Optional. If specified, [SecretManagerService][google.cloud.secretmanager.v1.SecretManagerService] will verify the integrity of the
-  // received [data][google.cloud.secretmanager.v1.SecretPayload.data] on [SecretManagerService.AddSecretVersion][google.cloud.secretmanager.v1.SecretManagerService.AddSecretVersion] calls using
-  // the crc32c checksum and store it to include in future
-  // [SecretManagerService.AccessSecretVersion][google.cloud.secretmanager.v1.SecretManagerService.AccessSecretVersion] responses. If a checksum is
-  // not provided in the [SecretManagerService.AddSecretVersion][google.cloud.secretmanager.v1.SecretManagerService.AddSecretVersion] request, the
-  // [SecretManagerService][google.cloud.secretmanager.v1.SecretManagerService] will generate and store one for you.
+  // Optional. If specified,
+  // [SecretManagerService][google.cloud.secretmanager.v1.SecretManagerService]
+  // will verify the integrity of the received
+  // [data][google.cloud.secretmanager.v1.SecretPayload.data] on
+  // [SecretManagerService.AddSecretVersion][google.cloud.secretmanager.v1.SecretManagerService.AddSecretVersion]
+  // calls using the crc32c checksum and store it to include in future
+  // [SecretManagerService.AccessSecretVersion][google.cloud.secretmanager.v1.SecretManagerService.AccessSecretVersion]
+  // responses. If a checksum is not provided in the
+  // [SecretManagerService.AddSecretVersion][google.cloud.secretmanager.v1.SecretManagerService.AddSecretVersion]
+  // request, the
+  // [SecretManagerService][google.cloud.secretmanager.v1.SecretManagerService]
+  // will generate and store one for you.
   //
   // The CRC32C value is encoded as a Int64 for compatibility, and can be
   // safely downconverted to uint32 in languages that support this type.