diff --git a/clients/google-api-services-run/v1/2.0.0/README.md b/clients/google-api-services-run/v1/2.0.0/README.md
index 4b7ae6ff144..4b7bb8892a4 100644
--- a/clients/google-api-services-run/v1/2.0.0/README.md
+++ b/clients/google-api-services-run/v1/2.0.0/README.md
@@ -22,7 +22,7 @@ Add the following lines to your `pom.xml` file:
     <dependency>
       <groupId>com.google.apis</groupId>
       <artifactId>google-api-services-run</artifactId>
-      <version>v1-rev20261016-2.9.2</version>
+      <version>v1-rev20261023-2.9.2</version>
     </dependency>
   </dependencies>
 </project>
@@ -35,7 +35,7 @@ repositories {
   mavenCentral()
 }
 dependencies {
-  implementation 'com.google.apis:google-api-services-run:v1-rev20261016-2.9.2'
+  implementation 'com.google.apis:google-api-services-run:v1-rev20261023-2.9.2'
 }
 ```
 
diff --git a/clients/google-api-services-run/v1/2.0.0/com/google/api/services/run/v1/model/InstanceSpec.java b/clients/google-api-services-run/v1/2.0.0/com/google/api/services/run/v1/model/InstanceSpec.java
index 15522229499..a03cf6a44db 100644
--- a/clients/google-api-services-run/v1/2.0.0/com/google/api/services/run/v1/model/InstanceSpec.java
+++ b/clients/google-api-services-run/v1/2.0.0/com/google/api/services/run/v1/model/InstanceSpec.java
@@ -58,6 +58,13 @@ public final class InstanceSpec extends com.google.api.client.json.GenericJson {
   @com.google.api.client.util.Key
   private java.lang.String restartPolicy;
 
+  /**
+   * Optional. Sandbox configuration that can be launched through the `sandbox` CLI.
+   * The value may be {@code null}.
+   */
+  @com.google.api.client.util.Key
+  private SandboxConfiguration sandboxes;
+
   /**
    * Optional. Email address of the IAM service account associated with the Instance. The service
    * account represents the identity of the running container, and determines what permissions the
@@ -129,6 +136,23 @@ public InstanceSpec setRestartPolicy(java.lang.String restartPolicy) {
     return this;
   }
 
+  /**
+   * Optional. Sandbox configuration that can be launched through the `sandbox` CLI.
+   * @return value or {@code null} for none
+   */
+  public SandboxConfiguration getSandboxes() {
+    return sandboxes;
+  }
+
+  /**
+   * Optional. Sandbox configuration that can be launched through the `sandbox` CLI.
+   * @param sandboxes sandboxes or {@code null} for none
+   */
+  public InstanceSpec setSandboxes(SandboxConfiguration sandboxes) {
+    this.sandboxes = sandboxes;
+    return this;
+  }
+
   /**
    * Optional. Email address of the IAM service account associated with the Instance. The service
    * account represents the identity of the running container, and determines what permissions the
diff --git a/clients/google-api-services-run/v1/2.0.0/com/google/api/services/run/v1/model/RevisionSpec.java b/clients/google-api-services-run/v1/2.0.0/com/google/api/services/run/v1/model/RevisionSpec.java
index 2d755e1836e..1bc465d6bf8 100644
--- a/clients/google-api-services-run/v1/2.0.0/com/google/api/services/run/v1/model/RevisionSpec.java
+++ b/clients/google-api-services-run/v1/2.0.0/com/google/api/services/run/v1/model/RevisionSpec.java
@@ -85,6 +85,13 @@ public final class RevisionSpec extends com.google.api.client.json.GenericJson {
   @com.google.api.client.util.Key
   private java.lang.String runtimeClassName;
 
+  /**
+   * Optional. Sandbox configuration that can be launched through the `sandbox` CLI.
+   * The value may be {@code null}.
+   */
+  @com.google.api.client.util.Key
+  private SandboxConfiguration sandboxes;
+
   /**
    * Email address of the IAM service account associated with the revision of the service. The
    * service account represents the identity of the running revision, and determines what
@@ -216,6 +223,23 @@ public RevisionSpec setRuntimeClassName(java.lang.String runtimeClassName) {
     return this;
   }
 
+  /**
+   * Optional. Sandbox configuration that can be launched through the `sandbox` CLI.
+   * @return value or {@code null} for none
+   */
+  public SandboxConfiguration getSandboxes() {
+    return sandboxes;
+  }
+
+  /**
+   * Optional. Sandbox configuration that can be launched through the `sandbox` CLI.
+   * @param sandboxes sandboxes or {@code null} for none
+   */
+  public RevisionSpec setSandboxes(SandboxConfiguration sandboxes) {
+    this.sandboxes = sandboxes;
+    return this;
+  }
+
   /**
    * Email address of the IAM service account associated with the revision of the service. The
    * service account represents the identity of the running revision, and determines what
diff --git a/clients/google-api-services-run/v1/2.0.0/com/google/api/services/run/v1/model/SandboxConfiguration.java b/clients/google-api-services-run/v1/2.0.0/com/google/api/services/run/v1/model/SandboxConfiguration.java
new file mode 100644
index 00000000000..5b496d8f0b4
--- /dev/null
+++ b/clients/google-api-services-run/v1/2.0.0/com/google/api/services/run/v1/model/SandboxConfiguration.java
@@ -0,0 +1,66 @@
+/*
+ * Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except
+ * in compliance with the License. You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software distributed under the License
+ * is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express
+ * or implied. See the License for the specific language governing permissions and limitations under
+ * the License.
+ */
+/*
+ * This code was generated by https://github.com/googleapis/google-api-java-client-services/
+ * Modify at your own risk.
+ */
+
+package com.google.api.services.run.v1.model;
+
+/**
+ * Configuration for sandboxes.
+ *
+ * <p> This is the Java data model class that specifies how to parse/serialize into the JSON that is
+ * transmitted over HTTP when working with the Cloud Run Admin API. For a detailed explanation see:
+ * <a href="https://developers.google.com/api-client-library/java/google-http-java-client/json">https://developers.google.com/api-client-library/java/google-http-java-client/json</a>
+ * </p>
+ *
+ * @author Google, Inc.
+ */
+@SuppressWarnings("javadoc")
+public final class SandboxConfiguration extends com.google.api.client.json.GenericJson {
+
+  /**
+   * Required. Sandbox templates that can be launched through the `sandbox` CLI.
+   * The value may be {@code null}.
+   */
+  @com.google.api.client.util.Key
+  private java.util.List<SandboxTemplate> templates;
+
+  /**
+   * Required. Sandbox templates that can be launched through the `sandbox` CLI.
+   * @return value or {@code null} for none
+   */
+  public java.util.List<SandboxTemplate> getTemplates() {
+    return templates;
+  }
+
+  /**
+   * Required. Sandbox templates that can be launched through the `sandbox` CLI.
+   * @param templates templates or {@code null} for none
+   */
+  public SandboxConfiguration setTemplates(java.util.List<SandboxTemplate> templates) {
+    this.templates = templates;
+    return this;
+  }
+
+  @Override
+  public SandboxConfiguration set(String fieldName, Object value) {
+    return (SandboxConfiguration) super.set(fieldName, value);
+  }
+
+  @Override
+  public SandboxConfiguration clone() {
+    return (SandboxConfiguration) super.clone();
+  }
+
+}
diff --git a/clients/google-api-services-run/v1/2.0.0/com/google/api/services/run/v1/model/SandboxTemplate.java b/clients/google-api-services-run/v1/2.0.0/com/google/api/services/run/v1/model/SandboxTemplate.java
new file mode 100644
index 00000000000..ee8f884ea26
--- /dev/null
+++ b/clients/google-api-services-run/v1/2.0.0/com/google/api/services/run/v1/model/SandboxTemplate.java
@@ -0,0 +1,225 @@
+/*
+ * Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except
+ * in compliance with the License. You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software distributed under the License
+ * is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express
+ * or implied. See the License for the specific language governing permissions and limitations under
+ * the License.
+ */
+/*
+ * This code was generated by https://github.com/googleapis/google-api-java-client-services/
+ * Modify at your own risk.
+ */
+
+package com.google.api.services.run.v1.model;
+
+/**
+ * Template for a single sandbox.
+ *
+ * <p> This is the Java data model class that specifies how to parse/serialize into the JSON that is
+ * transmitted over HTTP when working with the Cloud Run Admin API. For a detailed explanation see:
+ * <a href="https://developers.google.com/api-client-library/java/google-http-java-client/json">https://developers.google.com/api-client-library/java/google-http-java-client/json</a>
+ * </p>
+ *
+ * @author Google, Inc.
+ */
+@SuppressWarnings("javadoc")
+public final class SandboxTemplate extends com.google.api.client.json.GenericJson {
+
+  /**
+   * Optional. Arguments to the entrypoint. The docker image's CMD is used if this is not provided.
+   * The value may be {@code null}.
+   */
+  @com.google.api.client.util.Key
+  private java.util.List<java.lang.String> args;
+
+  /**
+   * Optional. Entrypoint array. Not executed within a shell. The docker image's ENTRYPOINT is used
+   * if this is not provided.
+   * The value may be {@code null}.
+   */
+  @com.google.api.client.util.Key
+  private java.util.List<java.lang.String> command;
+
+  /**
+   * Optional. List of environment variables to set in the sandbox.
+   * The value may be {@code null}.
+   */
+  @com.google.api.client.util.Key
+  private java.util.List<EnvVar> env;
+
+  static {
+    // hack to force ProGuard to consider EnvVar used, since otherwise it would be stripped out
+    // see https://github.com/google/google-api-java-client/issues/543
+    com.google.api.client.util.Data.nullOf(EnvVar.class);
+  }
+
+  /**
+   * Required. Name of the container image in Dockerhub or Artifact Registry. If the host is not
+   * provided, Dockerhub is assumed.
+   * The value may be {@code null}.
+   */
+  @com.google.api.client.util.Key
+  private java.lang.String image;
+
+  /**
+   * Required. Name of the sandbox specified as a DNS_LABEL (RFC 1123).
+   * The value may be {@code null}.
+   */
+  @com.google.api.client.util.Key
+  private java.lang.String name;
+
+  /**
+   * Optional. Volume to mount into the container's filesystem.
+   * The value may be {@code null}.
+   */
+  @com.google.api.client.util.Key
+  private java.util.List<VolumeMount> volumeMounts;
+
+  /**
+   * Optional. Container's working directory. If not specified, the container runtime's default will
+   * be used, which might be configured in the container image.
+   * The value may be {@code null}.
+   */
+  @com.google.api.client.util.Key
+  private java.lang.String workingDir;
+
+  /**
+   * Optional. Arguments to the entrypoint. The docker image's CMD is used if this is not provided.
+   * @return value or {@code null} for none
+   */
+  public java.util.List<java.lang.String> getArgs() {
+    return args;
+  }
+
+  /**
+   * Optional. Arguments to the entrypoint. The docker image's CMD is used if this is not provided.
+   * @param args args or {@code null} for none
+   */
+  public SandboxTemplate setArgs(java.util.List<java.lang.String> args) {
+    this.args = args;
+    return this;
+  }
+
+  /**
+   * Optional. Entrypoint array. Not executed within a shell. The docker image's ENTRYPOINT is used
+   * if this is not provided.
+   * @return value or {@code null} for none
+   */
+  public java.util.List<java.lang.String> getCommand() {
+    return command;
+  }
+
+  /**
+   * Optional. Entrypoint array. Not executed within a shell. The docker image's ENTRYPOINT is used
+   * if this is not provided.
+   * @param command command or {@code null} for none
+   */
+  public SandboxTemplate setCommand(java.util.List<java.lang.String> command) {
+    this.command = command;
+    return this;
+  }
+
+  /**
+   * Optional. List of environment variables to set in the sandbox.
+   * @return value or {@code null} for none
+   */
+  public java.util.List<EnvVar> getEnv() {
+    return env;
+  }
+
+  /**
+   * Optional. List of environment variables to set in the sandbox.
+   * @param env env or {@code null} for none
+   */
+  public SandboxTemplate setEnv(java.util.List<EnvVar> env) {
+    this.env = env;
+    return this;
+  }
+
+  /**
+   * Required. Name of the container image in Dockerhub or Artifact Registry. If the host is not
+   * provided, Dockerhub is assumed.
+   * @return value or {@code null} for none
+   */
+  public java.lang.String getImage() {
+    return image;
+  }
+
+  /**
+   * Required. Name of the container image in Dockerhub or Artifact Registry. If the host is not
+   * provided, Dockerhub is assumed.
+   * @param image image or {@code null} for none
+   */
+  public SandboxTemplate setImage(java.lang.String image) {
+    this.image = image;
+    return this;
+  }
+
+  /**
+   * Required. Name of the sandbox specified as a DNS_LABEL (RFC 1123).
+   * @return value or {@code null} for none
+   */
+  public java.lang.String getName() {
+    return name;
+  }
+
+  /**
+   * Required. Name of the sandbox specified as a DNS_LABEL (RFC 1123).
+   * @param name name or {@code null} for none
+   */
+  public SandboxTemplate setName(java.lang.String name) {
+    this.name = name;
+    return this;
+  }
+
+  /**
+   * Optional. Volume to mount into the container's filesystem.
+   * @return value or {@code null} for none
+   */
+  public java.util.List<VolumeMount> getVolumeMounts() {
+    return volumeMounts;
+  }
+
+  /**
+   * Optional. Volume to mount into the container's filesystem.
+   * @param volumeMounts volumeMounts or {@code null} for none
+   */
+  public SandboxTemplate setVolumeMounts(java.util.List<VolumeMount> volumeMounts) {
+    this.volumeMounts = volumeMounts;
+    return this;
+  }
+
+  /**
+   * Optional. Container's working directory. If not specified, the container runtime's default will
+   * be used, which might be configured in the container image.
+   * @return value or {@code null} for none
+   */
+  public java.lang.String getWorkingDir() {
+    return workingDir;
+  }
+
+  /**
+   * Optional. Container's working directory. If not specified, the container runtime's default will
+   * be used, which might be configured in the container image.
+   * @param workingDir workingDir or {@code null} for none
+   */
+  public SandboxTemplate setWorkingDir(java.lang.String workingDir) {
+    this.workingDir = workingDir;
+    return this;
+  }
+
+  @Override
+  public SandboxTemplate set(String fieldName, Object value) {
+    return (SandboxTemplate) super.set(fieldName, value);
+  }
+
+  @Override
+  public SandboxTemplate clone() {
+    return (SandboxTemplate) super.clone();
+  }
+
+}
diff --git a/clients/google-api-services-run/v1/2.0.0/com/google/api/services/run/v1/model/TaskSpec.java b/clients/google-api-services-run/v1/2.0.0/com/google/api/services/run/v1/model/TaskSpec.java
index 7fb4cca39e5..1a8c4220c08 100644
--- a/clients/google-api-services-run/v1/2.0.0/com/google/api/services/run/v1/model/TaskSpec.java
+++ b/clients/google-api-services-run/v1/2.0.0/com/google/api/services/run/v1/model/TaskSpec.java
@@ -57,6 +57,13 @@ public final class TaskSpec extends com.google.api.client.json.GenericJson {
   @com.google.api.client.util.Key
   private java.util.Map<String, java.lang.String> nodeSelector;
 
+  /**
+   * Optional. Sandbox configuration that can be launched through the `sandbox` CLI.
+   * The value may be {@code null}.
+   */
+  @com.google.api.client.util.Key
+  private SandboxConfiguration sandboxes;
+
   /**
    * Optional. Email address of the IAM service account associated with the task of a job execution.
    * The service account represents the identity of the running task, and determines what
@@ -136,6 +143,23 @@ public TaskSpec setNodeSelector(java.util.Map<String, java.lang.String> nodeSele
     return this;
   }
 
+  /**
+   * Optional. Sandbox configuration that can be launched through the `sandbox` CLI.
+   * @return value or {@code null} for none
+   */
+  public SandboxConfiguration getSandboxes() {
+    return sandboxes;
+  }
+
+  /**
+   * Optional. Sandbox configuration that can be launched through the `sandbox` CLI.
+   * @param sandboxes sandboxes or {@code null} for none
+   */
+  public TaskSpec setSandboxes(SandboxConfiguration sandboxes) {
+    this.sandboxes = sandboxes;
+    return this;
+  }
+
   /**
    * Optional. Email address of the IAM service account associated with the task of a job execution.
    * The service account represents the identity of the running task, and determines what
diff --git a/clients/google-api-services-run/v1/2.0.0/pom.xml b/clients/google-api-services-run/v1/2.0.0/pom.xml
index dd7f61eecc9..bd47f036f21 100644
--- a/clients/google-api-services-run/v1/2.0.0/pom.xml
+++ b/clients/google-api-services-run/v1/2.0.0/pom.xml
@@ -8,8 +8,8 @@
 
   <groupId>com.google.apis</groupId>
   <artifactId>google-api-services-run</artifactId>
-  <version>v1-rev20261016-2.9.2</version>
-  <name>Cloud Run Admin API v1-rev20261016-2.9.2</name>
+  <version>v1-rev20261023-2.9.2</version>
+  <name>Cloud Run Admin API v1-rev20261023-2.9.2</name>
   <packaging>jar</packaging>
 
   <inceptionYear>2011</inceptionYear>
diff --git a/clients/google-api-services-run/v1/README.md b/clients/google-api-services-run/v1/README.md
index 4b7ae6ff144..4b7bb8892a4 100644
--- a/clients/google-api-services-run/v1/README.md
+++ b/clients/google-api-services-run/v1/README.md
@@ -22,7 +22,7 @@ Add the following lines to your `pom.xml` file:
     <dependency>
       <groupId>com.google.apis</groupId>
       <artifactId>google-api-services-run</artifactId>
-      <version>v1-rev20261016-2.9.2</version>
+      <version>v1-rev20261023-2.9.2</version>
     </dependency>
   </dependencies>
 </project>
@@ -35,7 +35,7 @@ repositories {
   mavenCentral()
 }
 dependencies {
-  implementation 'com.google.apis:google-api-services-run:v1-rev20261016-2.9.2'
+  implementation 'com.google.apis:google-api-services-run:v1-rev20261023-2.9.2'
 }
 ```
 
diff --git a/clients/google-api-services-run/v2/2.0.0/README.md b/clients/google-api-services-run/v2/2.0.0/README.md
index a2beb22c032..01d1c73ac0b 100644
--- a/clients/google-api-services-run/v2/2.0.0/README.md
+++ b/clients/google-api-services-run/v2/2.0.0/README.md
@@ -22,7 +22,7 @@ Add the following lines to your `pom.xml` file:
     <dependency>
       <groupId>com.google.apis</groupId>
       <artifactId>google-api-services-run</artifactId>
-      <version>v2-rev20261016-2.9.2</version>
+      <version>v2-rev20261023-2.9.2</version>
     </dependency>
   </dependencies>
 </project>
@@ -35,7 +35,7 @@ repositories {
   mavenCentral()
 }
 dependencies {
-  implementation 'com.google.apis:google-api-services-run:v2-rev20261016-2.9.2'
+  implementation 'com.google.apis:google-api-services-run:v2-rev20261023-2.9.2'
 }
 ```
 
diff --git a/clients/google-api-services-run/v2/2.0.0/com/google/api/services/run/v2/model/GoogleCloudRunV2GCSVolumeSource.java b/clients/google-api-services-run/v2/2.0.0/com/google/api/services/run/v2/model/GoogleCloudRunV2GCSVolumeSource.java
index c30e4823d57..16e2a355ede 100644
--- a/clients/google-api-services-run/v2/2.0.0/com/google/api/services/run/v2/model/GoogleCloudRunV2GCSVolumeSource.java
+++ b/clients/google-api-services-run/v2/2.0.0/com/google/api/services/run/v2/model/GoogleCloudRunV2GCSVolumeSource.java
@@ -17,7 +17,8 @@
 package com.google.api.services.run.v2.model;
 
 /**
- * Represents a volume backed by a Cloud Storage bucket using Cloud Storage FUSE.
+ * Represents a volume backed by a Cloud Storage bucket (mounted via Cloud Storage FUSE or as a
+ * block device disk).
  *
  * <p> This is the Java data model class that specifies how to parse/serialize into the JSON that is
  * transmitted over HTTP when working with the Cloud Run Admin API. For a detailed explanation see:
diff --git a/clients/google-api-services-run/v2/2.0.0/com/google/api/services/run/v2/model/GoogleCloudRunV2Instance.java b/clients/google-api-services-run/v2/2.0.0/com/google/api/services/run/v2/model/GoogleCloudRunV2Instance.java
index ff75ef5ef81..e6cae3d7d2c 100644
--- a/clients/google-api-services-run/v2/2.0.0/com/google/api/services/run/v2/model/GoogleCloudRunV2Instance.java
+++ b/clients/google-api-services-run/v2/2.0.0/com/google/api/services/run/v2/model/GoogleCloudRunV2Instance.java
@@ -290,6 +290,13 @@ public final class GoogleCloudRunV2Instance extends com.google.api.client.json.G
   @com.google.api.client.util.Key
   private java.lang.String restartPolicy;
 
+  /**
+   * Optional. Configuration for sandboxes.
+   * The value may be {@code null}.
+   */
+  @com.google.api.client.util.Key
+  private GoogleCloudRunV2SandboxConfiguration sandboxes;
+
   /**
    * Output only. Reserved for future use.
    * The value may be {@code null}.
@@ -935,6 +942,23 @@ public GoogleCloudRunV2Instance setRestartPolicy(java.lang.String restartPolicy)
     return this;
   }
 
+  /**
+   * Optional. Configuration for sandboxes.
+   * @return value or {@code null} for none
+   */
+  public GoogleCloudRunV2SandboxConfiguration getSandboxes() {
+    return sandboxes;
+  }
+
+  /**
+   * Optional. Configuration for sandboxes.
+   * @param sandboxes sandboxes or {@code null} for none
+   */
+  public GoogleCloudRunV2Instance setSandboxes(GoogleCloudRunV2SandboxConfiguration sandboxes) {
+    this.sandboxes = sandboxes;
+    return this;
+  }
+
   /**
    * Output only. Reserved for future use.
    * @return value or {@code null} for none
diff --git a/clients/google-api-services-run/v2/2.0.0/com/google/api/services/run/v2/model/GoogleCloudRunV2Revision.java b/clients/google-api-services-run/v2/2.0.0/com/google/api/services/run/v2/model/GoogleCloudRunV2Revision.java
index fbd000cf488..0d3d406bbef 100644
--- a/clients/google-api-services-run/v2/2.0.0/com/google/api/services/run/v2/model/GoogleCloudRunV2Revision.java
+++ b/clients/google-api-services-run/v2/2.0.0/com/google/api/services/run/v2/model/GoogleCloudRunV2Revision.java
@@ -235,6 +235,13 @@ public final class GoogleCloudRunV2Revision extends com.google.api.client.json.G
   @com.google.api.client.util.Key
   private java.lang.Boolean reconciling;
 
+  /**
+   * Output only. Configuration for sandboxes.
+   * The value may be {@code null}.
+   */
+  @com.google.api.client.util.Key
+  private GoogleCloudRunV2SandboxConfiguration sandboxes;
+
   /**
    * Output only. Reserved for future use.
    * The value may be {@code null}.
@@ -791,6 +798,23 @@ public GoogleCloudRunV2Revision setReconciling(java.lang.Boolean reconciling) {
     return this;
   }
 
+  /**
+   * Output only. Configuration for sandboxes.
+   * @return value or {@code null} for none
+   */
+  public GoogleCloudRunV2SandboxConfiguration getSandboxes() {
+    return sandboxes;
+  }
+
+  /**
+   * Output only. Configuration for sandboxes.
+   * @param sandboxes sandboxes or {@code null} for none
+   */
+  public GoogleCloudRunV2Revision setSandboxes(GoogleCloudRunV2SandboxConfiguration sandboxes) {
+    this.sandboxes = sandboxes;
+    return this;
+  }
+
   /**
    * Output only. Reserved for future use.
    * @return value or {@code null} for none
diff --git a/clients/google-api-services-run/v2/2.0.0/com/google/api/services/run/v2/model/GoogleCloudRunV2RevisionTemplate.java b/clients/google-api-services-run/v2/2.0.0/com/google/api/services/run/v2/model/GoogleCloudRunV2RevisionTemplate.java
index 7d8412023b3..513ca361dae 100644
--- a/clients/google-api-services-run/v2/2.0.0/com/google/api/services/run/v2/model/GoogleCloudRunV2RevisionTemplate.java
+++ b/clients/google-api-services-run/v2/2.0.0/com/google/api/services/run/v2/model/GoogleCloudRunV2RevisionTemplate.java
@@ -157,6 +157,13 @@ public final class GoogleCloudRunV2RevisionTemplate extends com.google.api.clien
   @com.google.api.client.util.Key
   private java.lang.String revision;
 
+  /**
+   * Optional. Configuration for sandboxes.
+   * The value may be {@code null}.
+   */
+  @com.google.api.client.util.Key
+  private GoogleCloudRunV2SandboxConfiguration sandboxes;
+
   /**
    * Optional. Scaling settings for this Revision.
    * The value may be {@code null}.
@@ -506,6 +513,23 @@ public GoogleCloudRunV2RevisionTemplate setRevision(java.lang.String revision) {
     return this;
   }
 
+  /**
+   * Optional. Configuration for sandboxes.
+   * @return value or {@code null} for none
+   */
+  public GoogleCloudRunV2SandboxConfiguration getSandboxes() {
+    return sandboxes;
+  }
+
+  /**
+   * Optional. Configuration for sandboxes.
+   * @param sandboxes sandboxes or {@code null} for none
+   */
+  public GoogleCloudRunV2RevisionTemplate setSandboxes(GoogleCloudRunV2SandboxConfiguration sandboxes) {
+    this.sandboxes = sandboxes;
+    return this;
+  }
+
   /**
    * Optional. Scaling settings for this Revision.
    * @return value or {@code null} for none
diff --git a/clients/google-api-services-run/v2/2.0.0/com/google/api/services/run/v2/model/GoogleCloudRunV2SandboxConfiguration.java b/clients/google-api-services-run/v2/2.0.0/com/google/api/services/run/v2/model/GoogleCloudRunV2SandboxConfiguration.java
new file mode 100644
index 00000000000..26dc5e3b495
--- /dev/null
+++ b/clients/google-api-services-run/v2/2.0.0/com/google/api/services/run/v2/model/GoogleCloudRunV2SandboxConfiguration.java
@@ -0,0 +1,66 @@
+/*
+ * Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except
+ * in compliance with the License. You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software distributed under the License
+ * is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express
+ * or implied. See the License for the specific language governing permissions and limitations under
+ * the License.
+ */
+/*
+ * This code was generated by https://github.com/googleapis/google-api-java-client-services/
+ * Modify at your own risk.
+ */
+
+package com.google.api.services.run.v2.model;
+
+/**
+ * Configuration for sandboxes.
+ *
+ * <p> This is the Java data model class that specifies how to parse/serialize into the JSON that is
+ * transmitted over HTTP when working with the Cloud Run Admin API. For a detailed explanation see:
+ * <a href="https://developers.google.com/api-client-library/java/google-http-java-client/json">https://developers.google.com/api-client-library/java/google-http-java-client/json</a>
+ * </p>
+ *
+ * @author Google, Inc.
+ */
+@SuppressWarnings("javadoc")
+public final class GoogleCloudRunV2SandboxConfiguration extends com.google.api.client.json.GenericJson {
+
+  /**
+   * Required. Sandbox templates that can be launched through the `sandbox` CLI.
+   * The value may be {@code null}.
+   */
+  @com.google.api.client.util.Key
+  private java.util.List<GoogleCloudRunV2SandboxTemplate> templates;
+
+  /**
+   * Required. Sandbox templates that can be launched through the `sandbox` CLI.
+   * @return value or {@code null} for none
+   */
+  public java.util.List<GoogleCloudRunV2SandboxTemplate> getTemplates() {
+    return templates;
+  }
+
+  /**
+   * Required. Sandbox templates that can be launched through the `sandbox` CLI.
+   * @param templates templates or {@code null} for none
+   */
+  public GoogleCloudRunV2SandboxConfiguration setTemplates(java.util.List<GoogleCloudRunV2SandboxTemplate> templates) {
+    this.templates = templates;
+    return this;
+  }
+
+  @Override
+  public GoogleCloudRunV2SandboxConfiguration set(String fieldName, Object value) {
+    return (GoogleCloudRunV2SandboxConfiguration) super.set(fieldName, value);
+  }
+
+  @Override
+  public GoogleCloudRunV2SandboxConfiguration clone() {
+    return (GoogleCloudRunV2SandboxConfiguration) super.clone();
+  }
+
+}
diff --git a/clients/google-api-services-run/v2/2.0.0/com/google/api/services/run/v2/model/GoogleCloudRunV2SandboxTemplate.java b/clients/google-api-services-run/v2/2.0.0/com/google/api/services/run/v2/model/GoogleCloudRunV2SandboxTemplate.java
new file mode 100644
index 00000000000..ef4a4fd08a3
--- /dev/null
+++ b/clients/google-api-services-run/v2/2.0.0/com/google/api/services/run/v2/model/GoogleCloudRunV2SandboxTemplate.java
@@ -0,0 +1,225 @@
+/*
+ * Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except
+ * in compliance with the License. You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software distributed under the License
+ * is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express
+ * or implied. See the License for the specific language governing permissions and limitations under
+ * the License.
+ */
+/*
+ * This code was generated by https://github.com/googleapis/google-api-java-client-services/
+ * Modify at your own risk.
+ */
+
+package com.google.api.services.run.v2.model;
+
+/**
+ * Template for a single sandbox.
+ *
+ * <p> This is the Java data model class that specifies how to parse/serialize into the JSON that is
+ * transmitted over HTTP when working with the Cloud Run Admin API. For a detailed explanation see:
+ * <a href="https://developers.google.com/api-client-library/java/google-http-java-client/json">https://developers.google.com/api-client-library/java/google-http-java-client/json</a>
+ * </p>
+ *
+ * @author Google, Inc.
+ */
+@SuppressWarnings("javadoc")
+public final class GoogleCloudRunV2SandboxTemplate extends com.google.api.client.json.GenericJson {
+
+  /**
+   * Optional. Arguments to the entrypoint. The docker image's CMD is used if this is not provided.
+   * The value may be {@code null}.
+   */
+  @com.google.api.client.util.Key
+  private java.util.List<java.lang.String> args;
+
+  /**
+   * Optional. Entrypoint array. Not executed within a shell. The docker image's ENTRYPOINT is used
+   * if this is not provided.
+   * The value may be {@code null}.
+   */
+  @com.google.api.client.util.Key
+  private java.util.List<java.lang.String> command;
+
+  /**
+   * Optional. List of environment variables to set in the sandbox.
+   * The value may be {@code null}.
+   */
+  @com.google.api.client.util.Key
+  private java.util.List<GoogleCloudRunV2EnvVar> env;
+
+  static {
+    // hack to force ProGuard to consider GoogleCloudRunV2EnvVar used, since otherwise it would be stripped out
+    // see https://github.com/google/google-api-java-client/issues/543
+    com.google.api.client.util.Data.nullOf(GoogleCloudRunV2EnvVar.class);
+  }
+
+  /**
+   * Required. Name of the container image in Dockerhub or Artifact Registry. If the host is not
+   * provided, Dockerhub is assumed.
+   * The value may be {@code null}.
+   */
+  @com.google.api.client.util.Key
+  private java.lang.String image;
+
+  /**
+   * Required. Name of the sandbox specified as a DNS_LABEL (RFC 1123).
+   * The value may be {@code null}.
+   */
+  @com.google.api.client.util.Key
+  private java.lang.String name;
+
+  /**
+   * Optional. Volume to mount into the container's filesystem.
+   * The value may be {@code null}.
+   */
+  @com.google.api.client.util.Key
+  private java.util.List<GoogleCloudRunV2VolumeMount> volumeMounts;
+
+  /**
+   * Optional. Container's working directory. If not specified, the container runtime's default will
+   * be used, which might be configured in the container image.
+   * The value may be {@code null}.
+   */
+  @com.google.api.client.util.Key
+  private java.lang.String workingDir;
+
+  /**
+   * Optional. Arguments to the entrypoint. The docker image's CMD is used if this is not provided.
+   * @return value or {@code null} for none
+   */
+  public java.util.List<java.lang.String> getArgs() {
+    return args;
+  }
+
+  /**
+   * Optional. Arguments to the entrypoint. The docker image's CMD is used if this is not provided.
+   * @param args args or {@code null} for none
+   */
+  public GoogleCloudRunV2SandboxTemplate setArgs(java.util.List<java.lang.String> args) {
+    this.args = args;
+    return this;
+  }
+
+  /**
+   * Optional. Entrypoint array. Not executed within a shell. The docker image's ENTRYPOINT is used
+   * if this is not provided.
+   * @return value or {@code null} for none
+   */
+  public java.util.List<java.lang.String> getCommand() {
+    return command;
+  }
+
+  /**
+   * Optional. Entrypoint array. Not executed within a shell. The docker image's ENTRYPOINT is used
+   * if this is not provided.
+   * @param command command or {@code null} for none
+   */
+  public GoogleCloudRunV2SandboxTemplate setCommand(java.util.List<java.lang.String> command) {
+    this.command = command;
+    return this;
+  }
+
+  /**
+   * Optional. List of environment variables to set in the sandbox.
+   * @return value or {@code null} for none
+   */
+  public java.util.List<GoogleCloudRunV2EnvVar> getEnv() {
+    return env;
+  }
+
+  /**
+   * Optional. List of environment variables to set in the sandbox.
+   * @param env env or {@code null} for none
+   */
+  public GoogleCloudRunV2SandboxTemplate setEnv(java.util.List<GoogleCloudRunV2EnvVar> env) {
+    this.env = env;
+    return this;
+  }
+
+  /**
+   * Required. Name of the container image in Dockerhub or Artifact Registry. If the host is not
+   * provided, Dockerhub is assumed.
+   * @return value or {@code null} for none
+   */
+  public java.lang.String getImage() {
+    return image;
+  }
+
+  /**
+   * Required. Name of the container image in Dockerhub or Artifact Registry. If the host is not
+   * provided, Dockerhub is assumed.
+   * @param image image or {@code null} for none
+   */
+  public GoogleCloudRunV2SandboxTemplate setImage(java.lang.String image) {
+    this.image = image;
+    return this;
+  }
+
+  /**
+   * Required. Name of the sandbox specified as a DNS_LABEL (RFC 1123).
+   * @return value or {@code null} for none
+   */
+  public java.lang.String getName() {
+    return name;
+  }
+
+  /**
+   * Required. Name of the sandbox specified as a DNS_LABEL (RFC 1123).
+   * @param name name or {@code null} for none
+   */
+  public GoogleCloudRunV2SandboxTemplate setName(java.lang.String name) {
+    this.name = name;
+    return this;
+  }
+
+  /**
+   * Optional. Volume to mount into the container's filesystem.
+   * @return value or {@code null} for none
+   */
+  public java.util.List<GoogleCloudRunV2VolumeMount> getVolumeMounts() {
+    return volumeMounts;
+  }
+
+  /**
+   * Optional. Volume to mount into the container's filesystem.
+   * @param volumeMounts volumeMounts or {@code null} for none
+   */
+  public GoogleCloudRunV2SandboxTemplate setVolumeMounts(java.util.List<GoogleCloudRunV2VolumeMount> volumeMounts) {
+    this.volumeMounts = volumeMounts;
+    return this;
+  }
+
+  /**
+   * Optional. Container's working directory. If not specified, the container runtime's default will
+   * be used, which might be configured in the container image.
+   * @return value or {@code null} for none
+   */
+  public java.lang.String getWorkingDir() {
+    return workingDir;
+  }
+
+  /**
+   * Optional. Container's working directory. If not specified, the container runtime's default will
+   * be used, which might be configured in the container image.
+   * @param workingDir workingDir or {@code null} for none
+   */
+  public GoogleCloudRunV2SandboxTemplate setWorkingDir(java.lang.String workingDir) {
+    this.workingDir = workingDir;
+    return this;
+  }
+
+  @Override
+  public GoogleCloudRunV2SandboxTemplate set(String fieldName, Object value) {
+    return (GoogleCloudRunV2SandboxTemplate) super.set(fieldName, value);
+  }
+
+  @Override
+  public GoogleCloudRunV2SandboxTemplate clone() {
+    return (GoogleCloudRunV2SandboxTemplate) super.clone();
+  }
+
+}
diff --git a/clients/google-api-services-run/v2/2.0.0/com/google/api/services/run/v2/model/GoogleCloudRunV2Task.java b/clients/google-api-services-run/v2/2.0.0/com/google/api/services/run/v2/model/GoogleCloudRunV2Task.java
index f6489f87716..d208e497174 100644
--- a/clients/google-api-services-run/v2/2.0.0/com/google/api/services/run/v2/model/GoogleCloudRunV2Task.java
+++ b/clients/google-api-services-run/v2/2.0.0/com/google/api/services/run/v2/model/GoogleCloudRunV2Task.java
@@ -226,6 +226,13 @@ public final class GoogleCloudRunV2Task extends com.google.api.client.json.Gener
   @com.google.api.client.util.Key
   private java.lang.Integer retried;
 
+  /**
+   * Configuration for sandboxes.
+   * The value may be {@code null}.
+   */
+  @com.google.api.client.util.Key
+  private GoogleCloudRunV2SandboxConfiguration sandboxes;
+
   /**
    * Output only. Reserved for future use.
    * The value may be {@code null}.
@@ -746,6 +753,23 @@ public GoogleCloudRunV2Task setRetried(java.lang.Integer retried) {
     return this;
   }
 
+  /**
+   * Configuration for sandboxes.
+   * @return value or {@code null} for none
+   */
+  public GoogleCloudRunV2SandboxConfiguration getSandboxes() {
+    return sandboxes;
+  }
+
+  /**
+   * Configuration for sandboxes.
+   * @param sandboxes sandboxes or {@code null} for none
+   */
+  public GoogleCloudRunV2Task setSandboxes(GoogleCloudRunV2SandboxConfiguration sandboxes) {
+    this.sandboxes = sandboxes;
+    return this;
+  }
+
   /**
    * Output only. Reserved for future use.
    * @return value or {@code null} for none
diff --git a/clients/google-api-services-run/v2/2.0.0/com/google/api/services/run/v2/model/GoogleCloudRunV2TaskTemplate.java b/clients/google-api-services-run/v2/2.0.0/com/google/api/services/run/v2/model/GoogleCloudRunV2TaskTemplate.java
index 9c8205f6805..5b1de11c5ab 100644
--- a/clients/google-api-services-run/v2/2.0.0/com/google/api/services/run/v2/model/GoogleCloudRunV2TaskTemplate.java
+++ b/clients/google-api-services-run/v2/2.0.0/com/google/api/services/run/v2/model/GoogleCloudRunV2TaskTemplate.java
@@ -78,6 +78,13 @@ public final class GoogleCloudRunV2TaskTemplate extends com.google.api.client.js
   @com.google.api.client.util.Key
   private GoogleCloudRunV2NodeSelector nodeSelector;
 
+  /**
+   * Optional. Configuration for sandboxes.
+   * The value may be {@code null}.
+   */
+  @com.google.api.client.util.Key
+  private GoogleCloudRunV2SandboxConfiguration sandboxes;
+
   /**
    * Optional. Email address of the IAM service account associated with the Task of a Job. The
    * service account represents the identity of the running task, and determines what permissions
@@ -222,6 +229,23 @@ public GoogleCloudRunV2TaskTemplate setNodeSelector(GoogleCloudRunV2NodeSelector
     return this;
   }
 
+  /**
+   * Optional. Configuration for sandboxes.
+   * @return value or {@code null} for none
+   */
+  public GoogleCloudRunV2SandboxConfiguration getSandboxes() {
+    return sandboxes;
+  }
+
+  /**
+   * Optional. Configuration for sandboxes.
+   * @param sandboxes sandboxes or {@code null} for none
+   */
+  public GoogleCloudRunV2TaskTemplate setSandboxes(GoogleCloudRunV2SandboxConfiguration sandboxes) {
+    this.sandboxes = sandboxes;
+    return this;
+  }
+
   /**
    * Optional. Email address of the IAM service account associated with the Task of a Job. The
    * service account represents the identity of the running task, and determines what permissions
diff --git a/clients/google-api-services-run/v2/2.0.0/com/google/api/services/run/v2/model/GoogleCloudRunV2WorkerPoolRevisionTemplate.java b/clients/google-api-services-run/v2/2.0.0/com/google/api/services/run/v2/model/GoogleCloudRunV2WorkerPoolRevisionTemplate.java
index 81e72760e40..bceab81dbad 100644
--- a/clients/google-api-services-run/v2/2.0.0/com/google/api/services/run/v2/model/GoogleCloudRunV2WorkerPoolRevisionTemplate.java
+++ b/clients/google-api-services-run/v2/2.0.0/com/google/api/services/run/v2/model/GoogleCloudRunV2WorkerPoolRevisionTemplate.java
@@ -128,6 +128,13 @@ public final class GoogleCloudRunV2WorkerPoolRevisionTemplate extends com.google
   @com.google.api.client.util.Key
   private java.lang.String revision;
 
+  /**
+   * Optional. Configuration for sandboxes.
+   * The value may be {@code null}.
+   */
+  @com.google.api.client.util.Key
+  private GoogleCloudRunV2SandboxConfiguration sandboxes;
+
   /**
    * Optional. Email address of the IAM service account associated with the revision of the service.
    * The service account represents the identity of the running revision, and determines what
@@ -383,6 +390,23 @@ public GoogleCloudRunV2WorkerPoolRevisionTemplate setRevision(java.lang.String r
     return this;
   }
 
+  /**
+   * Optional. Configuration for sandboxes.
+   * @return value or {@code null} for none
+   */
+  public GoogleCloudRunV2SandboxConfiguration getSandboxes() {
+    return sandboxes;
+  }
+
+  /**
+   * Optional. Configuration for sandboxes.
+   * @param sandboxes sandboxes or {@code null} for none
+   */
+  public GoogleCloudRunV2WorkerPoolRevisionTemplate setSandboxes(GoogleCloudRunV2SandboxConfiguration sandboxes) {
+    this.sandboxes = sandboxes;
+    return this;
+  }
+
   /**
    * Optional. Email address of the IAM service account associated with the revision of the service.
    * The service account represents the identity of the running revision, and determines what
diff --git a/clients/google-api-services-run/v2/2.0.0/pom.xml b/clients/google-api-services-run/v2/2.0.0/pom.xml
index a68eded8d6e..2b3fbfa5fbf 100644
--- a/clients/google-api-services-run/v2/2.0.0/pom.xml
+++ b/clients/google-api-services-run/v2/2.0.0/pom.xml
@@ -8,8 +8,8 @@
 
   <groupId>com.google.apis</groupId>
   <artifactId>google-api-services-run</artifactId>
-  <version>v2-rev20261016-2.9.2</version>
-  <name>Cloud Run Admin API v2-rev20261016-2.9.2</name>
+  <version>v2-rev20261023-2.9.2</version>
+  <name>Cloud Run Admin API v2-rev20261023-2.9.2</name>
   <packaging>jar</packaging>
 
   <inceptionYear>2011</inceptionYear>
diff --git a/clients/google-api-services-run/v2/README.md b/clients/google-api-services-run/v2/README.md
index a2beb22c032..01d1c73ac0b 100644
--- a/clients/google-api-services-run/v2/README.md
+++ b/clients/google-api-services-run/v2/README.md
@@ -22,7 +22,7 @@ Add the following lines to your `pom.xml` file:
     <dependency>
       <groupId>com.google.apis</groupId>
       <artifactId>google-api-services-run</artifactId>
-      <version>v2-rev20261016-2.9.2</version>
+      <version>v2-rev20261023-2.9.2</version>
     </dependency>
   </dependencies>
 </project>
@@ -35,7 +35,7 @@ repositories {
   mavenCentral()
 }
 dependencies {
-  implementation 'com.google.apis:google-api-services-run:v2-rev20261016-2.9.2'
+  implementation 'com.google.apis:google-api-services-run:v2-rev20261023-2.9.2'
 }
 ```