docs: update docs (#916)

* fix: re-run script

* test: fix noxfile
diff --git a/docs/dyn/sourcerepo_v1.projects.repos.html b/docs/dyn/sourcerepo_v1.projects.repos.html
index 22a65b9..0cca758 100644
--- a/docs/dyn/sourcerepo_v1.projects.repos.html
+++ b/docs/dyn/sourcerepo_v1.projects.repos.html
@@ -119,6 +119,9 @@
     The object takes the form of:
 
 { # A repository (or repo) is a Git repository storing versioned source content.
+  "name": "A String", # Resource name of the repository, of the form
+      # `projects/<project>/repos/<repo>`.  The repo name may contain slashes.
+      # eg, `projects/myproject/repos/name/with/slash`
   "mirrorConfig": { # Configuration to automatically mirror a repository from another # How this repository mirrors a repository managed by another service.
       # Read-only field.
       # hosting service, for example GitHub or Bitbucket.
@@ -136,22 +139,19 @@
   "pubsubConfigs": { # How this repository publishes a change in the repository through Cloud
       # Pub/Sub. Keyed by the topic names.
     "a_key": { # Configuration to publish a Cloud Pub/Sub message.
+      "messageFormat": "A String", # The format of the Cloud Pub/Sub messages.
+      "topic": "A String", # A topic of Cloud Pub/Sub. Values are of the form
+          # `projects/<project>/topics/<topic>`. The project needs to be the same
+          # project as this config is in.
       "serviceAccountEmail": "A String", # Email address of the service account used for publishing Cloud Pub/Sub
           # messages. This service account needs to be in the same project as the
           # PubsubConfig. When added, the caller needs to have
           # iam.serviceAccounts.actAs permission on this service account. If
           # unspecified, it defaults to the compute engine default service account.
-      "messageFormat": "A String", # The format of the Cloud Pub/Sub messages.
-      "topic": "A String", # A topic of Cloud Pub/Sub. Values are of the form
-          # `projects/<project>/topics/<topic>`. The project needs to be the same
-          # project as this config is in.
     },
   },
   "size": "A String", # The disk usage of the repo, in bytes. Read-only field. Size is only
       # returned by GetRepo.
-  "name": "A String", # Resource name of the repository, of the form
-      # `projects/<project>/repos/<repo>`.  The repo name may contain slashes.
-      # eg, `projects/myproject/repos/name/with/slash`
 }
 
   x__xgafv: string, V1 error format.
@@ -163,6 +163,9 @@
   An object of the form:
 
     { # A repository (or repo) is a Git repository storing versioned source content.
+    "name": "A String", # Resource name of the repository, of the form
+        # `projects/<project>/repos/<repo>`.  The repo name may contain slashes.
+        # eg, `projects/myproject/repos/name/with/slash`
     "mirrorConfig": { # Configuration to automatically mirror a repository from another # How this repository mirrors a repository managed by another service.
         # Read-only field.
         # hosting service, for example GitHub or Bitbucket.
@@ -180,22 +183,19 @@
     "pubsubConfigs": { # How this repository publishes a change in the repository through Cloud
         # Pub/Sub. Keyed by the topic names.
       "a_key": { # Configuration to publish a Cloud Pub/Sub message.
+        "messageFormat": "A String", # The format of the Cloud Pub/Sub messages.
+        "topic": "A String", # A topic of Cloud Pub/Sub. Values are of the form
+            # `projects/<project>/topics/<topic>`. The project needs to be the same
+            # project as this config is in.
         "serviceAccountEmail": "A String", # Email address of the service account used for publishing Cloud Pub/Sub
             # messages. This service account needs to be in the same project as the
             # PubsubConfig. When added, the caller needs to have
             # iam.serviceAccounts.actAs permission on this service account. If
             # unspecified, it defaults to the compute engine default service account.
-        "messageFormat": "A String", # The format of the Cloud Pub/Sub messages.
-        "topic": "A String", # A topic of Cloud Pub/Sub. Values are of the form
-            # `projects/<project>/topics/<topic>`. The project needs to be the same
-            # project as this config is in.
       },
     },
     "size": "A String", # The disk usage of the repo, in bytes. Read-only field. Size is only
         # returned by GetRepo.
-    "name": "A String", # Resource name of the repository, of the form
-        # `projects/<project>/repos/<repo>`.  The repo name may contain slashes.
-        # eg, `projects/myproject/repos/name/with/slash`
   }</pre>
 </div>
 
@@ -242,6 +242,9 @@
   An object of the form:
 
     { # A repository (or repo) is a Git repository storing versioned source content.
+    &quot;name&quot;: &quot;A String&quot;, # Resource name of the repository, of the form
+        # `projects/&lt;project&gt;/repos/&lt;repo&gt;`.  The repo name may contain slashes.
+        # eg, `projects/myproject/repos/name/with/slash`
     &quot;mirrorConfig&quot;: { # Configuration to automatically mirror a repository from another # How this repository mirrors a repository managed by another service.
         # Read-only field.
         # hosting service, for example GitHub or Bitbucket.
@@ -259,22 +262,19 @@
     &quot;pubsubConfigs&quot;: { # How this repository publishes a change in the repository through Cloud
         # Pub/Sub. Keyed by the topic names.
       &quot;a_key&quot;: { # Configuration to publish a Cloud Pub/Sub message.
+        &quot;messageFormat&quot;: &quot;A String&quot;, # The format of the Cloud Pub/Sub messages.
+        &quot;topic&quot;: &quot;A String&quot;, # A topic of Cloud Pub/Sub. Values are of the form
+            # `projects/&lt;project&gt;/topics/&lt;topic&gt;`. The project needs to be the same
+            # project as this config is in.
         &quot;serviceAccountEmail&quot;: &quot;A String&quot;, # Email address of the service account used for publishing Cloud Pub/Sub
             # messages. This service account needs to be in the same project as the
             # PubsubConfig. When added, the caller needs to have
             # iam.serviceAccounts.actAs permission on this service account. If
             # unspecified, it defaults to the compute engine default service account.
-        &quot;messageFormat&quot;: &quot;A String&quot;, # The format of the Cloud Pub/Sub messages.
-        &quot;topic&quot;: &quot;A String&quot;, # A topic of Cloud Pub/Sub. Values are of the form
-            # `projects/&lt;project&gt;/topics/&lt;topic&gt;`. The project needs to be the same
-            # project as this config is in.
       },
     },
     &quot;size&quot;: &quot;A String&quot;, # The disk usage of the repo, in bytes. Read-only field. Size is only
         # returned by GetRepo.
-    &quot;name&quot;: &quot;A String&quot;, # Resource name of the repository, of the form
-        # `projects/&lt;project&gt;/repos/&lt;repo&gt;`.  The repo name may contain slashes.
-        # eg, `projects/myproject/repos/name/with/slash`
   }</pre>
 </div>
 
@@ -451,6 +451,9 @@
           # For sampleservice, this policy enables DATA_READ, DATA_WRITE and ADMIN_READ
           # logging. It also exempts jose@example.com from DATA_READ logging, and
           # aliya@example.com from DATA_WRITE logging.
+        &quot;service&quot;: &quot;A String&quot;, # Specifies a service that will be enabled for audit logging.
+            # For example, `storage.googleapis.com`, `cloudsql.googleapis.com`.
+            # `allServices` is a special value that covers all services.
         &quot;auditLogConfigs&quot;: [ # The configuration for logging of each type of permission.
           { # Provides the configuration for logging a type of permissions.
               # Example:
@@ -471,68 +474,20 @@
               #
               # This enables &#x27;DATA_READ&#x27; and &#x27;DATA_WRITE&#x27; logging, while exempting
               # jose@example.com from DATA_READ logging.
-            &quot;logType&quot;: &quot;A String&quot;, # The log type that this config enables.
             &quot;exemptedMembers&quot;: [ # Specifies the identities that do not cause logging for this type of
                 # permission.
                 # Follows the same format of Binding.members.
               &quot;A String&quot;,
             ],
+            &quot;logType&quot;: &quot;A String&quot;, # The log type that this config enables.
           },
         ],
-        &quot;service&quot;: &quot;A String&quot;, # Specifies a service that will be enabled for audit logging.
-            # For example, `storage.googleapis.com`, `cloudsql.googleapis.com`.
-            # `allServices` is a special value that covers all services.
       },
     ],
     &quot;bindings&quot;: [ # Associates a list of `members` to a `role`. Optionally, may specify a
         # `condition` that determines how and when the `bindings` are applied. Each
         # of the `bindings` must contain at least one member.
       { # Associates `members` with a `role`.
-        &quot;members&quot;: [ # Specifies the identities requesting access for a Cloud Platform resource.
-            # `members` can have the following values:
-            #
-            # * `allUsers`: A special identifier that represents anyone who is
-            #    on the internet; with or without a Google account.
-            #
-            # * `allAuthenticatedUsers`: A special identifier that represents anyone
-            #    who is authenticated with a Google account or a service account.
-            #
-            # * `user:{emailid}`: An email address that represents a specific Google
-            #    account. For example, `alice@example.com` .
-            #
-            #
-            # * `serviceAccount:{emailid}`: An email address that represents a service
-            #    account. For example, `my-other-app@appspot.gserviceaccount.com`.
-            #
-            # * `group:{emailid}`: An email address that represents a Google group.
-            #    For example, `admins@example.com`.
-            #
-            # * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique
-            #    identifier) representing a user that has been recently deleted. For
-            #    example, `alice@example.com?uid=123456789012345678901`. If the user is
-            #    recovered, this value reverts to `user:{emailid}` and the recovered user
-            #    retains the role in the binding.
-            #
-            # * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus
-            #    unique identifier) representing a service account that has been recently
-            #    deleted. For example,
-            #    `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`.
-            #    If the service account is undeleted, this value reverts to
-            #    `serviceAccount:{emailid}` and the undeleted service account retains the
-            #    role in the binding.
-            #
-            # * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique
-            #    identifier) representing a Google group that has been recently
-            #    deleted. For example, `admins@example.com?uid=123456789012345678901`. If
-            #    the group is recovered, this value reverts to `group:{emailid}` and the
-            #    recovered group retains the role in the binding.
-            #
-            #
-            # * `domain:{domain}`: The G Suite domain (primary) that represents all the
-            #    users of that domain. For example, `google.com` or `example.com`.
-            #
-          &quot;A String&quot;,
-        ],
         &quot;role&quot;: &quot;A String&quot;, # Role that is assigned to `members`.
             # For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
         &quot;condition&quot;: { # Represents a textual expression in the Common Expression Language (CEL) # The condition that is associated with this binding.
@@ -579,6 +534,51 @@
           &quot;expression&quot;: &quot;A String&quot;, # Textual representation of an expression in Common Expression Language
               # syntax.
         },
+        &quot;members&quot;: [ # Specifies the identities requesting access for a Cloud Platform resource.
+            # `members` can have the following values:
+            #
+            # * `allUsers`: A special identifier that represents anyone who is
+            #    on the internet; with or without a Google account.
+            #
+            # * `allAuthenticatedUsers`: A special identifier that represents anyone
+            #    who is authenticated with a Google account or a service account.
+            #
+            # * `user:{emailid}`: An email address that represents a specific Google
+            #    account. For example, `alice@example.com` .
+            #
+            #
+            # * `serviceAccount:{emailid}`: An email address that represents a service
+            #    account. For example, `my-other-app@appspot.gserviceaccount.com`.
+            #
+            # * `group:{emailid}`: An email address that represents a Google group.
+            #    For example, `admins@example.com`.
+            #
+            # * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique
+            #    identifier) representing a user that has been recently deleted. For
+            #    example, `alice@example.com?uid=123456789012345678901`. If the user is
+            #    recovered, this value reverts to `user:{emailid}` and the recovered user
+            #    retains the role in the binding.
+            #
+            # * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus
+            #    unique identifier) representing a service account that has been recently
+            #    deleted. For example,
+            #    `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`.
+            #    If the service account is undeleted, this value reverts to
+            #    `serviceAccount:{emailid}` and the undeleted service account retains the
+            #    role in the binding.
+            #
+            # * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique
+            #    identifier) representing a Google group that has been recently
+            #    deleted. For example, `admins@example.com?uid=123456789012345678901`. If
+            #    the group is recovered, this value reverts to `group:{emailid}` and the
+            #    recovered group retains the role in the binding.
+            #
+            #
+            # * `domain:{domain}`: The G Suite domain (primary) that represents all the
+            #    users of that domain. For example, `google.com` or `example.com`.
+            #
+          &quot;A String&quot;,
+        ],
       },
     ],
   }</pre>
@@ -608,6 +608,9 @@
     { # Response for ListRepos.  The size is not set in the returned repositories.
     &quot;repos&quot;: [ # The listed repos.
       { # A repository (or repo) is a Git repository storing versioned source content.
+        &quot;name&quot;: &quot;A String&quot;, # Resource name of the repository, of the form
+            # `projects/&lt;project&gt;/repos/&lt;repo&gt;`.  The repo name may contain slashes.
+            # eg, `projects/myproject/repos/name/with/slash`
         &quot;mirrorConfig&quot;: { # Configuration to automatically mirror a repository from another # How this repository mirrors a repository managed by another service.
             # Read-only field.
             # hosting service, for example GitHub or Bitbucket.
@@ -625,22 +628,19 @@
         &quot;pubsubConfigs&quot;: { # How this repository publishes a change in the repository through Cloud
             # Pub/Sub. Keyed by the topic names.
           &quot;a_key&quot;: { # Configuration to publish a Cloud Pub/Sub message.
+            &quot;messageFormat&quot;: &quot;A String&quot;, # The format of the Cloud Pub/Sub messages.
+            &quot;topic&quot;: &quot;A String&quot;, # A topic of Cloud Pub/Sub. Values are of the form
+                # `projects/&lt;project&gt;/topics/&lt;topic&gt;`. The project needs to be the same
+                # project as this config is in.
             &quot;serviceAccountEmail&quot;: &quot;A String&quot;, # Email address of the service account used for publishing Cloud Pub/Sub
                 # messages. This service account needs to be in the same project as the
                 # PubsubConfig. When added, the caller needs to have
                 # iam.serviceAccounts.actAs permission on this service account. If
                 # unspecified, it defaults to the compute engine default service account.
-            &quot;messageFormat&quot;: &quot;A String&quot;, # The format of the Cloud Pub/Sub messages.
-            &quot;topic&quot;: &quot;A String&quot;, # A topic of Cloud Pub/Sub. Values are of the form
-                # `projects/&lt;project&gt;/topics/&lt;topic&gt;`. The project needs to be the same
-                # project as this config is in.
           },
         },
         &quot;size&quot;: &quot;A String&quot;, # The disk usage of the repo, in bytes. Read-only field. Size is only
             # returned by GetRepo.
-        &quot;name&quot;: &quot;A String&quot;, # Resource name of the repository, of the form
-            # `projects/&lt;project&gt;/repos/&lt;repo&gt;`.  The repo name may contain slashes.
-            # eg, `projects/myproject/repos/name/with/slash`
       },
     ],
     &quot;nextPageToken&quot;: &quot;A String&quot;, # If non-empty, additional repositories exist within the project. These
@@ -674,7 +674,13 @@
     The object takes the form of:
 
 { # Request for UpdateRepo.
+    &quot;updateMask&quot;: &quot;A String&quot;, # A FieldMask specifying which fields of the repo to modify. Only the fields
+        # in the mask will be modified. If no mask is provided, this request is
+        # no-op.
     &quot;repo&quot;: { # A repository (or repo) is a Git repository storing versioned source content. # The new configuration for the repository.
+      &quot;name&quot;: &quot;A String&quot;, # Resource name of the repository, of the form
+          # `projects/&lt;project&gt;/repos/&lt;repo&gt;`.  The repo name may contain slashes.
+          # eg, `projects/myproject/repos/name/with/slash`
       &quot;mirrorConfig&quot;: { # Configuration to automatically mirror a repository from another # How this repository mirrors a repository managed by another service.
           # Read-only field.
           # hosting service, for example GitHub or Bitbucket.
@@ -692,26 +698,20 @@
       &quot;pubsubConfigs&quot;: { # How this repository publishes a change in the repository through Cloud
           # Pub/Sub. Keyed by the topic names.
         &quot;a_key&quot;: { # Configuration to publish a Cloud Pub/Sub message.
+          &quot;messageFormat&quot;: &quot;A String&quot;, # The format of the Cloud Pub/Sub messages.
+          &quot;topic&quot;: &quot;A String&quot;, # A topic of Cloud Pub/Sub. Values are of the form
+              # `projects/&lt;project&gt;/topics/&lt;topic&gt;`. The project needs to be the same
+              # project as this config is in.
           &quot;serviceAccountEmail&quot;: &quot;A String&quot;, # Email address of the service account used for publishing Cloud Pub/Sub
               # messages. This service account needs to be in the same project as the
               # PubsubConfig. When added, the caller needs to have
               # iam.serviceAccounts.actAs permission on this service account. If
               # unspecified, it defaults to the compute engine default service account.
-          &quot;messageFormat&quot;: &quot;A String&quot;, # The format of the Cloud Pub/Sub messages.
-          &quot;topic&quot;: &quot;A String&quot;, # A topic of Cloud Pub/Sub. Values are of the form
-              # `projects/&lt;project&gt;/topics/&lt;topic&gt;`. The project needs to be the same
-              # project as this config is in.
         },
       },
       &quot;size&quot;: &quot;A String&quot;, # The disk usage of the repo, in bytes. Read-only field. Size is only
           # returned by GetRepo.
-      &quot;name&quot;: &quot;A String&quot;, # Resource name of the repository, of the form
-          # `projects/&lt;project&gt;/repos/&lt;repo&gt;`.  The repo name may contain slashes.
-          # eg, `projects/myproject/repos/name/with/slash`
     },
-    &quot;updateMask&quot;: &quot;A String&quot;, # A FieldMask specifying which fields of the repo to modify. Only the fields
-        # in the mask will be modified. If no mask is provided, this request is
-        # no-op.
   }
 
   x__xgafv: string, V1 error format.
@@ -723,6 +723,9 @@
   An object of the form:
 
     { # A repository (or repo) is a Git repository storing versioned source content.
+    &quot;name&quot;: &quot;A String&quot;, # Resource name of the repository, of the form
+        # `projects/&lt;project&gt;/repos/&lt;repo&gt;`.  The repo name may contain slashes.
+        # eg, `projects/myproject/repos/name/with/slash`
     &quot;mirrorConfig&quot;: { # Configuration to automatically mirror a repository from another # How this repository mirrors a repository managed by another service.
         # Read-only field.
         # hosting service, for example GitHub or Bitbucket.
@@ -740,22 +743,19 @@
     &quot;pubsubConfigs&quot;: { # How this repository publishes a change in the repository through Cloud
         # Pub/Sub. Keyed by the topic names.
       &quot;a_key&quot;: { # Configuration to publish a Cloud Pub/Sub message.
+        &quot;messageFormat&quot;: &quot;A String&quot;, # The format of the Cloud Pub/Sub messages.
+        &quot;topic&quot;: &quot;A String&quot;, # A topic of Cloud Pub/Sub. Values are of the form
+            # `projects/&lt;project&gt;/topics/&lt;topic&gt;`. The project needs to be the same
+            # project as this config is in.
         &quot;serviceAccountEmail&quot;: &quot;A String&quot;, # Email address of the service account used for publishing Cloud Pub/Sub
             # messages. This service account needs to be in the same project as the
             # PubsubConfig. When added, the caller needs to have
             # iam.serviceAccounts.actAs permission on this service account. If
             # unspecified, it defaults to the compute engine default service account.
-        &quot;messageFormat&quot;: &quot;A String&quot;, # The format of the Cloud Pub/Sub messages.
-        &quot;topic&quot;: &quot;A String&quot;, # A topic of Cloud Pub/Sub. Values are of the form
-            # `projects/&lt;project&gt;/topics/&lt;topic&gt;`. The project needs to be the same
-            # project as this config is in.
       },
     },
     &quot;size&quot;: &quot;A String&quot;, # The disk usage of the repo, in bytes. Read-only field. Size is only
         # returned by GetRepo.
-    &quot;name&quot;: &quot;A String&quot;, # Resource name of the repository, of the form
-        # `projects/&lt;project&gt;/repos/&lt;repo&gt;`.  The repo name may contain slashes.
-        # eg, `projects/myproject/repos/name/with/slash`
   }</pre>
 </div>
 
@@ -922,6 +922,9 @@
             # For sampleservice, this policy enables DATA_READ, DATA_WRITE and ADMIN_READ
             # logging. It also exempts jose@example.com from DATA_READ logging, and
             # aliya@example.com from DATA_WRITE logging.
+          &quot;service&quot;: &quot;A String&quot;, # Specifies a service that will be enabled for audit logging.
+              # For example, `storage.googleapis.com`, `cloudsql.googleapis.com`.
+              # `allServices` is a special value that covers all services.
           &quot;auditLogConfigs&quot;: [ # The configuration for logging of each type of permission.
             { # Provides the configuration for logging a type of permissions.
                 # Example:
@@ -942,68 +945,20 @@
                 #
                 # This enables &#x27;DATA_READ&#x27; and &#x27;DATA_WRITE&#x27; logging, while exempting
                 # jose@example.com from DATA_READ logging.
-              &quot;logType&quot;: &quot;A String&quot;, # The log type that this config enables.
               &quot;exemptedMembers&quot;: [ # Specifies the identities that do not cause logging for this type of
                   # permission.
                   # Follows the same format of Binding.members.
                 &quot;A String&quot;,
               ],
+              &quot;logType&quot;: &quot;A String&quot;, # The log type that this config enables.
             },
           ],
-          &quot;service&quot;: &quot;A String&quot;, # Specifies a service that will be enabled for audit logging.
-              # For example, `storage.googleapis.com`, `cloudsql.googleapis.com`.
-              # `allServices` is a special value that covers all services.
         },
       ],
       &quot;bindings&quot;: [ # Associates a list of `members` to a `role`. Optionally, may specify a
           # `condition` that determines how and when the `bindings` are applied. Each
           # of the `bindings` must contain at least one member.
         { # Associates `members` with a `role`.
-          &quot;members&quot;: [ # Specifies the identities requesting access for a Cloud Platform resource.
-              # `members` can have the following values:
-              #
-              # * `allUsers`: A special identifier that represents anyone who is
-              #    on the internet; with or without a Google account.
-              #
-              # * `allAuthenticatedUsers`: A special identifier that represents anyone
-              #    who is authenticated with a Google account or a service account.
-              #
-              # * `user:{emailid}`: An email address that represents a specific Google
-              #    account. For example, `alice@example.com` .
-              #
-              #
-              # * `serviceAccount:{emailid}`: An email address that represents a service
-              #    account. For example, `my-other-app@appspot.gserviceaccount.com`.
-              #
-              # * `group:{emailid}`: An email address that represents a Google group.
-              #    For example, `admins@example.com`.
-              #
-              # * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique
-              #    identifier) representing a user that has been recently deleted. For
-              #    example, `alice@example.com?uid=123456789012345678901`. If the user is
-              #    recovered, this value reverts to `user:{emailid}` and the recovered user
-              #    retains the role in the binding.
-              #
-              # * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus
-              #    unique identifier) representing a service account that has been recently
-              #    deleted. For example,
-              #    `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`.
-              #    If the service account is undeleted, this value reverts to
-              #    `serviceAccount:{emailid}` and the undeleted service account retains the
-              #    role in the binding.
-              #
-              # * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique
-              #    identifier) representing a Google group that has been recently
-              #    deleted. For example, `admins@example.com?uid=123456789012345678901`. If
-              #    the group is recovered, this value reverts to `group:{emailid}` and the
-              #    recovered group retains the role in the binding.
-              #
-              #
-              # * `domain:{domain}`: The G Suite domain (primary) that represents all the
-              #    users of that domain. For example, `google.com` or `example.com`.
-              #
-            &quot;A String&quot;,
-          ],
           &quot;role&quot;: &quot;A String&quot;, # Role that is assigned to `members`.
               # For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
           &quot;condition&quot;: { # Represents a textual expression in the Common Expression Language (CEL) # The condition that is associated with this binding.
@@ -1050,6 +1005,51 @@
             &quot;expression&quot;: &quot;A String&quot;, # Textual representation of an expression in Common Expression Language
                 # syntax.
           },
+          &quot;members&quot;: [ # Specifies the identities requesting access for a Cloud Platform resource.
+              # `members` can have the following values:
+              #
+              # * `allUsers`: A special identifier that represents anyone who is
+              #    on the internet; with or without a Google account.
+              #
+              # * `allAuthenticatedUsers`: A special identifier that represents anyone
+              #    who is authenticated with a Google account or a service account.
+              #
+              # * `user:{emailid}`: An email address that represents a specific Google
+              #    account. For example, `alice@example.com` .
+              #
+              #
+              # * `serviceAccount:{emailid}`: An email address that represents a service
+              #    account. For example, `my-other-app@appspot.gserviceaccount.com`.
+              #
+              # * `group:{emailid}`: An email address that represents a Google group.
+              #    For example, `admins@example.com`.
+              #
+              # * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique
+              #    identifier) representing a user that has been recently deleted. For
+              #    example, `alice@example.com?uid=123456789012345678901`. If the user is
+              #    recovered, this value reverts to `user:{emailid}` and the recovered user
+              #    retains the role in the binding.
+              #
+              # * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus
+              #    unique identifier) representing a service account that has been recently
+              #    deleted. For example,
+              #    `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`.
+              #    If the service account is undeleted, this value reverts to
+              #    `serviceAccount:{emailid}` and the undeleted service account retains the
+              #    role in the binding.
+              #
+              # * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique
+              #    identifier) representing a Google group that has been recently
+              #    deleted. For example, `admins@example.com?uid=123456789012345678901`. If
+              #    the group is recovered, this value reverts to `group:{emailid}` and the
+              #    recovered group retains the role in the binding.
+              #
+              #
+              # * `domain:{domain}`: The G Suite domain (primary) that represents all the
+              #    users of that domain. For example, `google.com` or `example.com`.
+              #
+            &quot;A String&quot;,
+          ],
         },
       ],
     },
@@ -1216,6 +1216,9 @@
           # For sampleservice, this policy enables DATA_READ, DATA_WRITE and ADMIN_READ
           # logging. It also exempts jose@example.com from DATA_READ logging, and
           # aliya@example.com from DATA_WRITE logging.
+        &quot;service&quot;: &quot;A String&quot;, # Specifies a service that will be enabled for audit logging.
+            # For example, `storage.googleapis.com`, `cloudsql.googleapis.com`.
+            # `allServices` is a special value that covers all services.
         &quot;auditLogConfigs&quot;: [ # The configuration for logging of each type of permission.
           { # Provides the configuration for logging a type of permissions.
               # Example:
@@ -1236,68 +1239,20 @@
               #
               # This enables &#x27;DATA_READ&#x27; and &#x27;DATA_WRITE&#x27; logging, while exempting
               # jose@example.com from DATA_READ logging.
-            &quot;logType&quot;: &quot;A String&quot;, # The log type that this config enables.
             &quot;exemptedMembers&quot;: [ # Specifies the identities that do not cause logging for this type of
                 # permission.
                 # Follows the same format of Binding.members.
               &quot;A String&quot;,
             ],
+            &quot;logType&quot;: &quot;A String&quot;, # The log type that this config enables.
           },
         ],
-        &quot;service&quot;: &quot;A String&quot;, # Specifies a service that will be enabled for audit logging.
-            # For example, `storage.googleapis.com`, `cloudsql.googleapis.com`.
-            # `allServices` is a special value that covers all services.
       },
     ],
     &quot;bindings&quot;: [ # Associates a list of `members` to a `role`. Optionally, may specify a
         # `condition` that determines how and when the `bindings` are applied. Each
         # of the `bindings` must contain at least one member.
       { # Associates `members` with a `role`.
-        &quot;members&quot;: [ # Specifies the identities requesting access for a Cloud Platform resource.
-            # `members` can have the following values:
-            #
-            # * `allUsers`: A special identifier that represents anyone who is
-            #    on the internet; with or without a Google account.
-            #
-            # * `allAuthenticatedUsers`: A special identifier that represents anyone
-            #    who is authenticated with a Google account or a service account.
-            #
-            # * `user:{emailid}`: An email address that represents a specific Google
-            #    account. For example, `alice@example.com` .
-            #
-            #
-            # * `serviceAccount:{emailid}`: An email address that represents a service
-            #    account. For example, `my-other-app@appspot.gserviceaccount.com`.
-            #
-            # * `group:{emailid}`: An email address that represents a Google group.
-            #    For example, `admins@example.com`.
-            #
-            # * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique
-            #    identifier) representing a user that has been recently deleted. For
-            #    example, `alice@example.com?uid=123456789012345678901`. If the user is
-            #    recovered, this value reverts to `user:{emailid}` and the recovered user
-            #    retains the role in the binding.
-            #
-            # * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus
-            #    unique identifier) representing a service account that has been recently
-            #    deleted. For example,
-            #    `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`.
-            #    If the service account is undeleted, this value reverts to
-            #    `serviceAccount:{emailid}` and the undeleted service account retains the
-            #    role in the binding.
-            #
-            # * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique
-            #    identifier) representing a Google group that has been recently
-            #    deleted. For example, `admins@example.com?uid=123456789012345678901`. If
-            #    the group is recovered, this value reverts to `group:{emailid}` and the
-            #    recovered group retains the role in the binding.
-            #
-            #
-            # * `domain:{domain}`: The G Suite domain (primary) that represents all the
-            #    users of that domain. For example, `google.com` or `example.com`.
-            #
-          &quot;A String&quot;,
-        ],
         &quot;role&quot;: &quot;A String&quot;, # Role that is assigned to `members`.
             # For example, `roles/viewer`, `roles/editor`, or `roles/owner`.
         &quot;condition&quot;: { # Represents a textual expression in the Common Expression Language (CEL) # The condition that is associated with this binding.
@@ -1344,6 +1299,51 @@
           &quot;expression&quot;: &quot;A String&quot;, # Textual representation of an expression in Common Expression Language
               # syntax.
         },
+        &quot;members&quot;: [ # Specifies the identities requesting access for a Cloud Platform resource.
+            # `members` can have the following values:
+            #
+            # * `allUsers`: A special identifier that represents anyone who is
+            #    on the internet; with or without a Google account.
+            #
+            # * `allAuthenticatedUsers`: A special identifier that represents anyone
+            #    who is authenticated with a Google account or a service account.
+            #
+            # * `user:{emailid}`: An email address that represents a specific Google
+            #    account. For example, `alice@example.com` .
+            #
+            #
+            # * `serviceAccount:{emailid}`: An email address that represents a service
+            #    account. For example, `my-other-app@appspot.gserviceaccount.com`.
+            #
+            # * `group:{emailid}`: An email address that represents a Google group.
+            #    For example, `admins@example.com`.
+            #
+            # * `deleted:user:{emailid}?uid={uniqueid}`: An email address (plus unique
+            #    identifier) representing a user that has been recently deleted. For
+            #    example, `alice@example.com?uid=123456789012345678901`. If the user is
+            #    recovered, this value reverts to `user:{emailid}` and the recovered user
+            #    retains the role in the binding.
+            #
+            # * `deleted:serviceAccount:{emailid}?uid={uniqueid}`: An email address (plus
+            #    unique identifier) representing a service account that has been recently
+            #    deleted. For example,
+            #    `my-other-app@appspot.gserviceaccount.com?uid=123456789012345678901`.
+            #    If the service account is undeleted, this value reverts to
+            #    `serviceAccount:{emailid}` and the undeleted service account retains the
+            #    role in the binding.
+            #
+            # * `deleted:group:{emailid}?uid={uniqueid}`: An email address (plus unique
+            #    identifier) representing a Google group that has been recently
+            #    deleted. For example, `admins@example.com?uid=123456789012345678901`. If
+            #    the group is recovered, this value reverts to `group:{emailid}` and the
+            #    recovered group retains the role in the binding.
+            #
+            #
+            # * `domain:{domain}`: The G Suite domain (primary) that represents all the
+            #    users of that domain. For example, `google.com` or `example.com`.
+            #
+          &quot;A String&quot;,
+        ],
       },
     ],
   }</pre>
@@ -1374,15 +1374,6 @@
 
     { # This resource represents a long-running operation that is the result of a
       # network API call.
-    &quot;metadata&quot;: { # Service-specific metadata associated with the operation.  It typically
-        # contains progress information and common metadata such as create time.
-        # Some services might not provide such metadata.  Any method that returns a
-        # long-running operation should document the metadata type, if any.
-      &quot;a_key&quot;: &quot;&quot;, # Properties of the object. Contains field @type with type URL.
-    },
-    &quot;done&quot;: True or False, # If the value is `false`, it means the operation is still in progress.
-        # If `true`, the operation is completed, and either `error` or `response` is
-        # available.
     &quot;response&quot;: { # The normal response of the operation in case of success.  If the original
         # method returns no data on success, such as `Delete`, the response is
         # `google.protobuf.Empty`.  If the original method is standard
@@ -1414,6 +1405,15 @@
       ],
       &quot;code&quot;: 42, # The status code, which should be an enum value of google.rpc.Code.
     },
+    &quot;metadata&quot;: { # Service-specific metadata associated with the operation.  It typically
+        # contains progress information and common metadata such as create time.
+        # Some services might not provide such metadata.  Any method that returns a
+        # long-running operation should document the metadata type, if any.
+      &quot;a_key&quot;: &quot;&quot;, # Properties of the object. Contains field @type with type URL.
+    },
+    &quot;done&quot;: True or False, # If the value is `false`, it means the operation is still in progress.
+        # If `true`, the operation is completed, and either `error` or `response` is
+        # available.
   }</pre>
 </div>