diff --git a/google/pubsub_v1/services/publisher/async_client.py b/google/pubsub_v1/services/publisher/async_client.py
index 52f1f1e30..3767a460b 100644
--- a/google/pubsub_v1/services/publisher/async_client.py
+++ b/google/pubsub_v1/services/publisher/async_client.py
@@ -80,8 +80,12 @@ class PublisherAsyncClient:
     _DEFAULT_ENDPOINT_TEMPLATE = PublisherClient._DEFAULT_ENDPOINT_TEMPLATE
     _DEFAULT_UNIVERSE = PublisherClient._DEFAULT_UNIVERSE
 
+    crypto_key_path = staticmethod(PublisherClient.crypto_key_path)
+    parse_crypto_key_path = staticmethod(PublisherClient.parse_crypto_key_path)
     schema_path = staticmethod(PublisherClient.schema_path)
     parse_schema_path = staticmethod(PublisherClient.parse_schema_path)
+    snapshot_path = staticmethod(PublisherClient.snapshot_path)
+    parse_snapshot_path = staticmethod(PublisherClient.parse_snapshot_path)
     subscription_path = staticmethod(PublisherClient.subscription_path)
     parse_subscription_path = staticmethod(PublisherClient.parse_subscription_path)
     topic_path = staticmethod(PublisherClient.topic_path)
diff --git a/google/pubsub_v1/services/publisher/client.py b/google/pubsub_v1/services/publisher/client.py
index 28cfa680b..6debee7ee 100644
--- a/google/pubsub_v1/services/publisher/client.py
+++ b/google/pubsub_v1/services/publisher/client.py
@@ -215,6 +215,30 @@ def transport(self) -> PublisherTransport:
         """
         return self._transport
 
+    @staticmethod
+    def crypto_key_path(
+        project: str,
+        location: str,
+        key_ring: str,
+        crypto_key: str,
+    ) -> str:
+        """Returns a fully-qualified crypto_key string."""
+        return "projects/{project}/locations/{location}/keyRings/{key_ring}/cryptoKeys/{crypto_key}".format(
+            project=project,
+            location=location,
+            key_ring=key_ring,
+            crypto_key=crypto_key,
+        )
+
+    @staticmethod
+    def parse_crypto_key_path(path: str) -> Dict[str, str]:
+        """Parses a crypto_key path into its component segments."""
+        m = re.match(
+            r"^projects/(?P<project>.+?)/locations/(?P<location>.+?)/keyRings/(?P<key_ring>.+?)/cryptoKeys/(?P<crypto_key>.+?)$",
+            path,
+        )
+        return m.groupdict() if m else {}
+
     @staticmethod
     def schema_path(
         project: str,
@@ -232,6 +256,23 @@ def parse_schema_path(path: str) -> Dict[str, str]:
         m = re.match(r"^projects/(?P<project>.+?)/schemas/(?P<schema>.+?)$", path)
         return m.groupdict() if m else {}
 
+    @staticmethod
+    def snapshot_path(
+        project: str,
+        snapshot: str,
+    ) -> str:
+        """Returns a fully-qualified snapshot string."""
+        return "projects/{project}/snapshots/{snapshot}".format(
+            project=project,
+            snapshot=snapshot,
+        )
+
+    @staticmethod
+    def parse_snapshot_path(path: str) -> Dict[str, str]:
+        """Parses a snapshot path into its component segments."""
+        m = re.match(r"^projects/(?P<project>.+?)/snapshots/(?P<snapshot>.+?)$", path)
+        return m.groupdict() if m else {}
+
     @staticmethod
     def subscription_path(
         project: str,
diff --git a/google/pubsub_v1/services/publisher/transports/base.py b/google/pubsub_v1/services/publisher/transports/base.py
index 0fb41c922..b9d6a6279 100644
--- a/google/pubsub_v1/services/publisher/transports/base.py
+++ b/google/pubsub_v1/services/publisher/transports/base.py
@@ -73,9 +73,10 @@ def __init__(
                 credentials identify the application to the service; if none
                 are specified, the client will attempt to ascertain the
                 credentials from the environment.
-            credentials_file (Optional[str]): A file with credentials that can
+            credentials_file (Optional[str]): Deprecated. A file with credentials that can
                 be loaded with :func:`google.auth.load_credentials_from_file`.
-                This argument is mutually exclusive with credentials.
+                This argument is mutually exclusive with credentials. This argument will be
+                removed in the next major version of this library.
             scopes (Optional[Sequence[str]]): A list of scopes.
             quota_project_id (Optional[str]): An optional project to use for billing
                 and quota.
diff --git a/google/pubsub_v1/services/publisher/transports/grpc.py b/google/pubsub_v1/services/publisher/transports/grpc.py
index 9e8ed1737..e192152d8 100644
--- a/google/pubsub_v1/services/publisher/transports/grpc.py
+++ b/google/pubsub_v1/services/publisher/transports/grpc.py
@@ -155,9 +155,10 @@ def __init__(
                 are specified, the client will attempt to ascertain the
                 credentials from the environment.
                 This argument is ignored if a ``channel`` instance is provided.
-            credentials_file (Optional[str]): A file with credentials that can
+            credentials_file (Optional[str]): Deprecated. A file with credentials that can
                 be loaded with :func:`google.auth.load_credentials_from_file`.
                 This argument is ignored if a ``channel`` instance is provided.
+                This argument will be removed in the next major version of this library.
             scopes (Optional(Sequence[str])): A list of scopes. This argument is
                 ignored if a ``channel`` instance is provided.
             channel (Optional[Union[grpc.Channel, Callable[..., grpc.Channel]]]):
@@ -292,9 +293,10 @@ def create_channel(
                 credentials identify this application to the service. If
                 none are specified, the client will attempt to ascertain
                 the credentials from the environment.
-            credentials_file (Optional[str]): A file with credentials that can
+            credentials_file (Optional[str]): Deprecated. A file with credentials that can
                 be loaded with :func:`google.auth.load_credentials_from_file`.
-                This argument is mutually exclusive with credentials.
+                This argument is mutually exclusive with credentials.  This argument will be
+                removed in the next major version of this library.
             scopes (Optional[Sequence[str]]): A optional list of scopes needed for this
                 service. These are only used when credentials are not specified and
                 are passed to :func:`google.auth.default`.
diff --git a/google/pubsub_v1/services/publisher/transports/grpc_asyncio.py b/google/pubsub_v1/services/publisher/transports/grpc_asyncio.py
index 90683cbd0..14b9fdd06 100644
--- a/google/pubsub_v1/services/publisher/transports/grpc_asyncio.py
+++ b/google/pubsub_v1/services/publisher/transports/grpc_asyncio.py
@@ -152,8 +152,9 @@ def create_channel(
                 credentials identify this application to the service. If
                 none are specified, the client will attempt to ascertain
                 the credentials from the environment.
-            credentials_file (Optional[str]): A file with credentials that can
-                be loaded with :func:`google.auth.load_credentials_from_file`.
+            credentials_file (Optional[str]): Deprecated. A file with credentials that can
+                be loaded with :func:`google.auth.load_credentials_from_file`. This argument will be
+                removed in the next major version of this library.
             scopes (Optional[Sequence[str]]): A optional list of scopes needed for this
                 service. These are only used when credentials are not specified and
                 are passed to :func:`google.auth.default`.
@@ -204,9 +205,10 @@ def __init__(
                 are specified, the client will attempt to ascertain the
                 credentials from the environment.
                 This argument is ignored if a ``channel`` instance is provided.
-            credentials_file (Optional[str]): A file with credentials that can
+            credentials_file (Optional[str]): Deprecated. A file with credentials that can
                 be loaded with :func:`google.auth.load_credentials_from_file`.
                 This argument is ignored if a ``channel`` instance is provided.
+                This argument will be removed in the next major version of this library.
             scopes (Optional[Sequence[str]]): A optional list of scopes needed for this
                 service. These are only used when credentials are not specified and
                 are passed to :func:`google.auth.default`.
diff --git a/google/pubsub_v1/services/publisher/transports/rest.py b/google/pubsub_v1/services/publisher/transports/rest.py
index 92ee46e15..aeb07184c 100644
--- a/google/pubsub_v1/services/publisher/transports/rest.py
+++ b/google/pubsub_v1/services/publisher/transports/rest.py
@@ -650,9 +650,10 @@ def __init__(
                 are specified, the client will attempt to ascertain the
                 credentials from the environment.
 
-            credentials_file (Optional[str]): A file with credentials that can
+            credentials_file (Optional[str]): Deprecated. A file with credentials that can
                 be loaded with :func:`google.auth.load_credentials_from_file`.
-                This argument is ignored if ``channel`` is provided.
+                This argument is ignored if ``channel`` is provided. This argument will be
+                removed in the next major version of this library.
             scopes (Optional(Sequence[str])): A list of scopes. This argument is
                 ignored if ``channel`` is provided.
             client_cert_source_for_mtls (Callable[[], Tuple[bytes, bytes]]): Client
diff --git a/google/pubsub_v1/services/schema_service/transports/base.py b/google/pubsub_v1/services/schema_service/transports/base.py
index c30773b74..bfe254e0a 100644
--- a/google/pubsub_v1/services/schema_service/transports/base.py
+++ b/google/pubsub_v1/services/schema_service/transports/base.py
@@ -74,9 +74,10 @@ def __init__(
                 credentials identify the application to the service; if none
                 are specified, the client will attempt to ascertain the
                 credentials from the environment.
-            credentials_file (Optional[str]): A file with credentials that can
+            credentials_file (Optional[str]): Deprecated. A file with credentials that can
                 be loaded with :func:`google.auth.load_credentials_from_file`.
-                This argument is mutually exclusive with credentials.
+                This argument is mutually exclusive with credentials. This argument will be
+                removed in the next major version of this library.
             scopes (Optional[Sequence[str]]): A list of scopes.
             quota_project_id (Optional[str]): An optional project to use for billing
                 and quota.
diff --git a/google/pubsub_v1/services/schema_service/transports/grpc.py b/google/pubsub_v1/services/schema_service/transports/grpc.py
index 1a746ef43..5bcfd8b9b 100644
--- a/google/pubsub_v1/services/schema_service/transports/grpc.py
+++ b/google/pubsub_v1/services/schema_service/transports/grpc.py
@@ -155,9 +155,10 @@ def __init__(
                 are specified, the client will attempt to ascertain the
                 credentials from the environment.
                 This argument is ignored if a ``channel`` instance is provided.
-            credentials_file (Optional[str]): A file with credentials that can
+            credentials_file (Optional[str]): Deprecated. A file with credentials that can
                 be loaded with :func:`google.auth.load_credentials_from_file`.
                 This argument is ignored if a ``channel`` instance is provided.
+                This argument will be removed in the next major version of this library.
             scopes (Optional(Sequence[str])): A list of scopes. This argument is
                 ignored if a ``channel`` instance is provided.
             channel (Optional[Union[grpc.Channel, Callable[..., grpc.Channel]]]):
@@ -292,9 +293,10 @@ def create_channel(
                 credentials identify this application to the service. If
                 none are specified, the client will attempt to ascertain
                 the credentials from the environment.
-            credentials_file (Optional[str]): A file with credentials that can
+            credentials_file (Optional[str]): Deprecated. A file with credentials that can
                 be loaded with :func:`google.auth.load_credentials_from_file`.
-                This argument is mutually exclusive with credentials.
+                This argument is mutually exclusive with credentials.  This argument will be
+                removed in the next major version of this library.
             scopes (Optional[Sequence[str]]): A optional list of scopes needed for this
                 service. These are only used when credentials are not specified and
                 are passed to :func:`google.auth.default`.
diff --git a/google/pubsub_v1/services/schema_service/transports/grpc_asyncio.py b/google/pubsub_v1/services/schema_service/transports/grpc_asyncio.py
index f030d0563..ac2980ded 100644
--- a/google/pubsub_v1/services/schema_service/transports/grpc_asyncio.py
+++ b/google/pubsub_v1/services/schema_service/transports/grpc_asyncio.py
@@ -152,8 +152,9 @@ def create_channel(
                 credentials identify this application to the service. If
                 none are specified, the client will attempt to ascertain
                 the credentials from the environment.
-            credentials_file (Optional[str]): A file with credentials that can
-                be loaded with :func:`google.auth.load_credentials_from_file`.
+            credentials_file (Optional[str]): Deprecated. A file with credentials that can
+                be loaded with :func:`google.auth.load_credentials_from_file`. This argument will be
+                removed in the next major version of this library.
             scopes (Optional[Sequence[str]]): A optional list of scopes needed for this
                 service. These are only used when credentials are not specified and
                 are passed to :func:`google.auth.default`.
@@ -204,9 +205,10 @@ def __init__(
                 are specified, the client will attempt to ascertain the
                 credentials from the environment.
                 This argument is ignored if a ``channel`` instance is provided.
-            credentials_file (Optional[str]): A file with credentials that can
+            credentials_file (Optional[str]): Deprecated. A file with credentials that can
                 be loaded with :func:`google.auth.load_credentials_from_file`.
                 This argument is ignored if a ``channel`` instance is provided.
+                This argument will be removed in the next major version of this library.
             scopes (Optional[Sequence[str]]): A optional list of scopes needed for this
                 service. These are only used when credentials are not specified and
                 are passed to :func:`google.auth.default`.
diff --git a/google/pubsub_v1/services/schema_service/transports/rest.py b/google/pubsub_v1/services/schema_service/transports/rest.py
index 6d8902c5d..a0d42c2dd 100644
--- a/google/pubsub_v1/services/schema_service/transports/rest.py
+++ b/google/pubsub_v1/services/schema_service/transports/rest.py
@@ -702,9 +702,10 @@ def __init__(
                 are specified, the client will attempt to ascertain the
                 credentials from the environment.
 
-            credentials_file (Optional[str]): A file with credentials that can
+            credentials_file (Optional[str]): Deprecated. A file with credentials that can
                 be loaded with :func:`google.auth.load_credentials_from_file`.
-                This argument is ignored if ``channel`` is provided.
+                This argument is ignored if ``channel`` is provided. This argument will be
+                removed in the next major version of this library.
             scopes (Optional(Sequence[str])): A list of scopes. This argument is
                 ignored if ``channel`` is provided.
             client_cert_source_for_mtls (Callable[[], Tuple[bytes, bytes]]): Client
diff --git a/google/pubsub_v1/services/subscriber/async_client.py b/google/pubsub_v1/services/subscriber/async_client.py
index 77f96d6df..34843a0e0 100644
--- a/google/pubsub_v1/services/subscriber/async_client.py
+++ b/google/pubsub_v1/services/subscriber/async_client.py
@@ -86,6 +86,8 @@ class SubscriberAsyncClient:
     _DEFAULT_ENDPOINT_TEMPLATE = SubscriberClient._DEFAULT_ENDPOINT_TEMPLATE
     _DEFAULT_UNIVERSE = SubscriberClient._DEFAULT_UNIVERSE
 
+    listing_path = staticmethod(SubscriberClient.listing_path)
+    parse_listing_path = staticmethod(SubscriberClient.parse_listing_path)
     snapshot_path = staticmethod(SubscriberClient.snapshot_path)
     parse_snapshot_path = staticmethod(SubscriberClient.parse_snapshot_path)
     subscription_path = staticmethod(SubscriberClient.subscription_path)
diff --git a/google/pubsub_v1/services/subscriber/client.py b/google/pubsub_v1/services/subscriber/client.py
index d928d3678..98b11e8c3 100644
--- a/google/pubsub_v1/services/subscriber/client.py
+++ b/google/pubsub_v1/services/subscriber/client.py
@@ -219,6 +219,30 @@ def transport(self) -> SubscriberTransport:
         """
         return self._transport
 
+    @staticmethod
+    def listing_path(
+        project: str,
+        location: str,
+        data_exchange: str,
+        listing: str,
+    ) -> str:
+        """Returns a fully-qualified listing string."""
+        return "projects/{project}/locations/{location}/dataExchanges/{data_exchange}/listings/{listing}".format(
+            project=project,
+            location=location,
+            data_exchange=data_exchange,
+            listing=listing,
+        )
+
+    @staticmethod
+    def parse_listing_path(path: str) -> Dict[str, str]:
+        """Parses a listing path into its component segments."""
+        m = re.match(
+            r"^projects/(?P<project>.+?)/locations/(?P<location>.+?)/dataExchanges/(?P<data_exchange>.+?)/listings/(?P<listing>.+?)$",
+            path,
+        )
+        return m.groupdict() if m else {}
+
     @staticmethod
     def snapshot_path(
         project: str,
diff --git a/google/pubsub_v1/services/subscriber/transports/base.py b/google/pubsub_v1/services/subscriber/transports/base.py
index cc62113f9..a25ff562f 100644
--- a/google/pubsub_v1/services/subscriber/transports/base.py
+++ b/google/pubsub_v1/services/subscriber/transports/base.py
@@ -73,9 +73,10 @@ def __init__(
                 credentials identify the application to the service; if none
                 are specified, the client will attempt to ascertain the
                 credentials from the environment.
-            credentials_file (Optional[str]): A file with credentials that can
+            credentials_file (Optional[str]): Deprecated. A file with credentials that can
                 be loaded with :func:`google.auth.load_credentials_from_file`.
-                This argument is mutually exclusive with credentials.
+                This argument is mutually exclusive with credentials. This argument will be
+                removed in the next major version of this library.
             scopes (Optional[Sequence[str]]): A list of scopes.
             quota_project_id (Optional[str]): An optional project to use for billing
                 and quota.
diff --git a/google/pubsub_v1/services/subscriber/transports/grpc.py b/google/pubsub_v1/services/subscriber/transports/grpc.py
index 36c77648b..705163791 100644
--- a/google/pubsub_v1/services/subscriber/transports/grpc.py
+++ b/google/pubsub_v1/services/subscriber/transports/grpc.py
@@ -157,9 +157,10 @@ def __init__(
                 are specified, the client will attempt to ascertain the
                 credentials from the environment.
                 This argument is ignored if a ``channel`` instance is provided.
-            credentials_file (Optional[str]): A file with credentials that can
+            credentials_file (Optional[str]): Deprecated. A file with credentials that can
                 be loaded with :func:`google.auth.load_credentials_from_file`.
                 This argument is ignored if a ``channel`` instance is provided.
+                This argument will be removed in the next major version of this library.
             scopes (Optional(Sequence[str])): A list of scopes. This argument is
                 ignored if a ``channel`` instance is provided.
             channel (Optional[Union[grpc.Channel, Callable[..., grpc.Channel]]]):
@@ -294,9 +295,10 @@ def create_channel(
                 credentials identify this application to the service. If
                 none are specified, the client will attempt to ascertain
                 the credentials from the environment.
-            credentials_file (Optional[str]): A file with credentials that can
+            credentials_file (Optional[str]): Deprecated. A file with credentials that can
                 be loaded with :func:`google.auth.load_credentials_from_file`.
-                This argument is mutually exclusive with credentials.
+                This argument is mutually exclusive with credentials.  This argument will be
+                removed in the next major version of this library.
             scopes (Optional[Sequence[str]]): A optional list of scopes needed for this
                 service. These are only used when credentials are not specified and
                 are passed to :func:`google.auth.default`.
diff --git a/google/pubsub_v1/services/subscriber/transports/grpc_asyncio.py b/google/pubsub_v1/services/subscriber/transports/grpc_asyncio.py
index 78f8afd4c..ad53fe76c 100644
--- a/google/pubsub_v1/services/subscriber/transports/grpc_asyncio.py
+++ b/google/pubsub_v1/services/subscriber/transports/grpc_asyncio.py
@@ -154,8 +154,9 @@ def create_channel(
                 credentials identify this application to the service. If
                 none are specified, the client will attempt to ascertain
                 the credentials from the environment.
-            credentials_file (Optional[str]): A file with credentials that can
-                be loaded with :func:`google.auth.load_credentials_from_file`.
+            credentials_file (Optional[str]): Deprecated. A file with credentials that can
+                be loaded with :func:`google.auth.load_credentials_from_file`. This argument will be
+                removed in the next major version of this library.
             scopes (Optional[Sequence[str]]): A optional list of scopes needed for this
                 service. These are only used when credentials are not specified and
                 are passed to :func:`google.auth.default`.
@@ -206,9 +207,10 @@ def __init__(
                 are specified, the client will attempt to ascertain the
                 credentials from the environment.
                 This argument is ignored if a ``channel`` instance is provided.
-            credentials_file (Optional[str]): A file with credentials that can
+            credentials_file (Optional[str]): Deprecated. A file with credentials that can
                 be loaded with :func:`google.auth.load_credentials_from_file`.
                 This argument is ignored if a ``channel`` instance is provided.
+                This argument will be removed in the next major version of this library.
             scopes (Optional[Sequence[str]]): A optional list of scopes needed for this
                 service. These are only used when credentials are not specified and
                 are passed to :func:`google.auth.default`.
diff --git a/google/pubsub_v1/services/subscriber/transports/rest.py b/google/pubsub_v1/services/subscriber/transports/rest.py
index bb0ee68c6..50a247cef 100644
--- a/google/pubsub_v1/services/subscriber/transports/rest.py
+++ b/google/pubsub_v1/services/subscriber/transports/rest.py
@@ -828,9 +828,10 @@ def __init__(
                 are specified, the client will attempt to ascertain the
                 credentials from the environment.
 
-            credentials_file (Optional[str]): A file with credentials that can
+            credentials_file (Optional[str]): Deprecated. A file with credentials that can
                 be loaded with :func:`google.auth.load_credentials_from_file`.
-                This argument is ignored if ``channel`` is provided.
+                This argument is ignored if ``channel`` is provided. This argument will be
+                removed in the next major version of this library.
             scopes (Optional(Sequence[str])): A list of scopes. This argument is
                 ignored if ``channel`` is provided.
             client_cert_source_for_mtls (Callable[[], Tuple[bytes, bytes]]): Client
diff --git a/google/pubsub_v1/types/pubsub.py b/google/pubsub_v1/types/pubsub.py
index 9fc8f87eb..26c13fb18 100644
--- a/google/pubsub_v1/types/pubsub.py
+++ b/google/pubsub_v1/types/pubsub.py
@@ -1210,6 +1210,13 @@ class AwsKinesisFailureReason(proto.Message):
                 Optional. Failure encountered when applying a
                 message transformation to the Pub/Sub message.
 
+                This field is a member of `oneof`_ ``reason``.
+            api_violation_reason (google.pubsub_v1.types.IngestionFailureEvent.ApiViolationReason):
+                Optional. The message failed to be published
+                due to an API violation. This is only set when
+                the size of the data field of the Kinesis record
+                is zero.
+
                 This field is a member of `oneof`_ ``reason``.
         """
 
@@ -1239,6 +1246,12 @@ class AwsKinesisFailureReason(proto.Message):
             oneof="reason",
             message="IngestionFailureEvent.MessageTransformationFailureReason",
         )
+        api_violation_reason: "IngestionFailureEvent.ApiViolationReason" = proto.Field(
+            proto.MESSAGE,
+            number=6,
+            oneof="reason",
+            message="IngestionFailureEvent.ApiViolationReason",
+        )
 
     topic: str = proto.Field(
         proto.STRING,
@@ -1423,6 +1436,13 @@ class Topic(proto.Message):
             Optional. Transforms to be applied to
             messages published to the topic. Transforms are
             applied in the order specified.
+        tags (MutableMapping[str, str]):
+            Optional. Input only. Immutable. Tag
+            keys/values directly bound to this resource. For
+            example:
+
+              "123/environment": "production",
+              "123/costCenter": "marketing".
     """
 
     class State(proto.Enum):
@@ -1491,6 +1511,11 @@ class State(proto.Enum):
         number=13,
         message="MessageTransform",
     )
+    tags: MutableMapping[str, str] = proto.MapField(
+        proto.STRING,
+        proto.STRING,
+        number=14,
+    )
 
 
 class PubsubMessage(proto.Message):
@@ -2024,6 +2049,13 @@ class Subscription(proto.Message):
             messages before they are delivered to
             subscribers. Transforms are applied in the order
             specified.
+        tags (MutableMapping[str, str]):
+            Optional. Input only. Immutable. Tag
+            keys/values directly bound to this resource. For
+            example:
+
+              "123/environment": "production",
+              "123/costCenter": "marketing".
     """
 
     class State(proto.Enum):
@@ -2162,6 +2194,11 @@ class AnalyticsHubSubscriptionInfo(proto.Message):
         number=25,
         message="MessageTransform",
     )
+    tags: MutableMapping[str, str] = proto.MapField(
+        proto.STRING,
+        proto.STRING,
+        number=26,
+    )
 
 
 class RetryPolicy(proto.Message):
@@ -3161,8 +3198,7 @@ class StreamingPullResponse(proto.Message):
 
     Attributes:
         received_messages (MutableSequence[google.pubsub_v1.types.ReceivedMessage]):
-            Optional. Received Pub/Sub messages. This
-            will not be empty.
+            Optional. Received Pub/Sub messages.
         acknowledge_confirmation (google.pubsub_v1.types.StreamingPullResponse.AcknowledgeConfirmation):
             Optional. This field will only be set if
             ``enable_exactly_once_delivery`` is set to ``true`` and is
@@ -3312,6 +3348,13 @@ class CreateSnapshotRequest(proto.Message):
         labels (MutableMapping[str, str]):
             Optional. See `Creating and managing
             labels <https://cloud.google.com/pubsub/docs/labels>`__.
+        tags (MutableMapping[str, str]):
+            Optional. Input only. Immutable. Tag
+            keys/values directly bound to this resource. For
+            example:
+
+              "123/environment": "production",
+              "123/costCenter": "marketing".
     """
 
     name: str = proto.Field(
@@ -3327,6 +3370,11 @@ class CreateSnapshotRequest(proto.Message):
         proto.STRING,
         number=3,
     )
+    tags: MutableMapping[str, str] = proto.MapField(
+        proto.STRING,
+        proto.STRING,
+        number=4,
+    )
 
 
 class UpdateSnapshotRequest(proto.Message):
diff --git a/scripts/fixup_pubsub_v1_keywords.py b/scripts/fixup_pubsub_v1_keywords.py
index 9f5619e8c..e4c132570 100644
--- a/scripts/fixup_pubsub_v1_keywords.py
+++ b/scripts/fixup_pubsub_v1_keywords.py
@@ -42,9 +42,9 @@ class pubsubCallTransformer(cst.CSTTransformer):
         'acknowledge': ('subscription', 'ack_ids', ),
         'commit_schema': ('name', 'schema', ),
         'create_schema': ('parent', 'schema', 'schema_id', ),
-        'create_snapshot': ('name', 'subscription', 'labels', ),
-        'create_subscription': ('name', 'topic', 'push_config', 'bigquery_config', 'cloud_storage_config', 'ack_deadline_seconds', 'retain_acked_messages', 'message_retention_duration', 'labels', 'enable_message_ordering', 'expiration_policy', 'filter', 'dead_letter_policy', 'retry_policy', 'detached', 'enable_exactly_once_delivery', 'topic_message_retention_duration', 'state', 'analytics_hub_subscription_info', 'message_transforms', ),
-        'create_topic': ('name', 'labels', 'message_storage_policy', 'kms_key_name', 'schema_settings', 'satisfies_pzs', 'message_retention_duration', 'state', 'ingestion_data_source_settings', 'message_transforms', ),
+        'create_snapshot': ('name', 'subscription', 'labels', 'tags', ),
+        'create_subscription': ('name', 'topic', 'push_config', 'bigquery_config', 'cloud_storage_config', 'ack_deadline_seconds', 'retain_acked_messages', 'message_retention_duration', 'labels', 'enable_message_ordering', 'expiration_policy', 'filter', 'dead_letter_policy', 'retry_policy', 'detached', 'enable_exactly_once_delivery', 'topic_message_retention_duration', 'state', 'analytics_hub_subscription_info', 'message_transforms', 'tags', ),
+        'create_topic': ('name', 'labels', 'message_storage_policy', 'kms_key_name', 'schema_settings', 'satisfies_pzs', 'message_retention_duration', 'state', 'ingestion_data_source_settings', 'message_transforms', 'tags', ),
         'delete_schema': ('name', ),
         'delete_schema_revision': ('name', 'revision_id', ),
         'delete_snapshot': ('snapshot', ),
diff --git a/testing/constraints-3.10.txt b/testing/constraints-3.10.txt
index ad3f0fa58..ef1c92fff 100644
--- a/testing/constraints-3.10.txt
+++ b/testing/constraints-3.10.txt
@@ -2,6 +2,8 @@
 # This constraints file is required for unit tests.
 # List all library dependencies and extras in this file.
 google-api-core
+google-auth
+grpcio
 proto-plus
 protobuf
 grpc-google-iam-v1
diff --git a/testing/constraints-3.11.txt b/testing/constraints-3.11.txt
index ad3f0fa58..ef1c92fff 100644
--- a/testing/constraints-3.11.txt
+++ b/testing/constraints-3.11.txt
@@ -2,6 +2,8 @@
 # This constraints file is required for unit tests.
 # List all library dependencies and extras in this file.
 google-api-core
+google-auth
+grpcio
 proto-plus
 protobuf
 grpc-google-iam-v1
diff --git a/testing/constraints-3.12.txt b/testing/constraints-3.12.txt
index ad3f0fa58..ef1c92fff 100644
--- a/testing/constraints-3.12.txt
+++ b/testing/constraints-3.12.txt
@@ -2,6 +2,8 @@
 # This constraints file is required for unit tests.
 # List all library dependencies and extras in this file.
 google-api-core
+google-auth
+grpcio
 proto-plus
 protobuf
 grpc-google-iam-v1
diff --git a/testing/constraints-3.13.txt b/testing/constraints-3.13.txt
index 2010e549c..2ae5a677e 100644
--- a/testing/constraints-3.13.txt
+++ b/testing/constraints-3.13.txt
@@ -7,6 +7,7 @@
 # Then this file should have google-cloud-foo>=1
 google-api-core>=2
 google-auth>=2
+grpcio>=1
 proto-plus>=1
 protobuf>=6
 grpc-google-iam-v1>=0
diff --git a/testing/constraints-3.9.txt b/testing/constraints-3.9.txt
index ad3f0fa58..ef1c92fff 100644
--- a/testing/constraints-3.9.txt
+++ b/testing/constraints-3.9.txt
@@ -2,6 +2,8 @@
 # This constraints file is required for unit tests.
 # List all library dependencies and extras in this file.
 google-api-core
+google-auth
+grpcio
 proto-plus
 protobuf
 grpc-google-iam-v1
diff --git a/tests/unit/gapic/pubsub_v1/test_publisher.py b/tests/unit/gapic/pubsub_v1/test_publisher.py
index 223679ad1..6748ac09a 100644
--- a/tests/unit/gapic/pubsub_v1/test_publisher.py
+++ b/tests/unit/gapic/pubsub_v1/test_publisher.py
@@ -8898,9 +8898,38 @@ def test_publisher_transport_channel_mtls_with_adc(transport_class):
             assert transport.grpc_channel == mock_grpc_channel
 
 
-def test_schema_path():
+def test_crypto_key_path():
     project = "squid"
-    schema = "clam"
+    location = "clam"
+    key_ring = "whelk"
+    crypto_key = "octopus"
+    expected = "projects/{project}/locations/{location}/keyRings/{key_ring}/cryptoKeys/{crypto_key}".format(
+        project=project,
+        location=location,
+        key_ring=key_ring,
+        crypto_key=crypto_key,
+    )
+    actual = PublisherClient.crypto_key_path(project, location, key_ring, crypto_key)
+    assert expected == actual
+
+
+def test_parse_crypto_key_path():
+    expected = {
+        "project": "oyster",
+        "location": "nudibranch",
+        "key_ring": "cuttlefish",
+        "crypto_key": "mussel",
+    }
+    path = PublisherClient.crypto_key_path(**expected)
+
+    # Check that the path construction is reversible.
+    actual = PublisherClient.parse_crypto_key_path(path)
+    assert expected == actual
+
+
+def test_schema_path():
+    project = "winkle"
+    schema = "nautilus"
     expected = "projects/{project}/schemas/{schema}".format(
         project=project,
         schema=schema,
@@ -8911,8 +8940,8 @@ def test_schema_path():
 
 def test_parse_schema_path():
     expected = {
-        "project": "whelk",
-        "schema": "octopus",
+        "project": "scallop",
+        "schema": "abalone",
     }
     path = PublisherClient.schema_path(**expected)
 
@@ -8921,6 +8950,29 @@ def test_parse_schema_path():
     assert expected == actual
 
 
+def test_snapshot_path():
+    project = "squid"
+    snapshot = "clam"
+    expected = "projects/{project}/snapshots/{snapshot}".format(
+        project=project,
+        snapshot=snapshot,
+    )
+    actual = PublisherClient.snapshot_path(project, snapshot)
+    assert expected == actual
+
+
+def test_parse_snapshot_path():
+    expected = {
+        "project": "whelk",
+        "snapshot": "octopus",
+    }
+    path = PublisherClient.snapshot_path(**expected)
+
+    # Check that the path construction is reversible.
+    actual = PublisherClient.parse_snapshot_path(path)
+    assert expected == actual
+
+
 def test_subscription_path():
     project = "oyster"
     subscription = "nudibranch"
diff --git a/tests/unit/gapic/pubsub_v1/test_subscriber.py b/tests/unit/gapic/pubsub_v1/test_subscriber.py
index 417249e97..9186c815a 100644
--- a/tests/unit/gapic/pubsub_v1/test_subscriber.py
+++ b/tests/unit/gapic/pubsub_v1/test_subscriber.py
@@ -13208,9 +13208,38 @@ def test_subscriber_transport_channel_mtls_with_adc(transport_class):
             assert transport.grpc_channel == mock_grpc_channel
 
 
-def test_snapshot_path():
+def test_listing_path():
     project = "squid"
-    snapshot = "clam"
+    location = "clam"
+    data_exchange = "whelk"
+    listing = "octopus"
+    expected = "projects/{project}/locations/{location}/dataExchanges/{data_exchange}/listings/{listing}".format(
+        project=project,
+        location=location,
+        data_exchange=data_exchange,
+        listing=listing,
+    )
+    actual = SubscriberClient.listing_path(project, location, data_exchange, listing)
+    assert expected == actual
+
+
+def test_parse_listing_path():
+    expected = {
+        "project": "oyster",
+        "location": "nudibranch",
+        "data_exchange": "cuttlefish",
+        "listing": "mussel",
+    }
+    path = SubscriberClient.listing_path(**expected)
+
+    # Check that the path construction is reversible.
+    actual = SubscriberClient.parse_listing_path(path)
+    assert expected == actual
+
+
+def test_snapshot_path():
+    project = "winkle"
+    snapshot = "nautilus"
     expected = "projects/{project}/snapshots/{snapshot}".format(
         project=project,
         snapshot=snapshot,
@@ -13221,8 +13250,8 @@ def test_snapshot_path():
 
 def test_parse_snapshot_path():
     expected = {
-        "project": "whelk",
-        "snapshot": "octopus",
+        "project": "scallop",
+        "snapshot": "abalone",
     }
     path = SubscriberClient.snapshot_path(**expected)
 
@@ -13232,8 +13261,8 @@ def test_parse_snapshot_path():
 
 
 def test_subscription_path():
-    project = "oyster"
-    subscription = "nudibranch"
+    project = "squid"
+    subscription = "clam"
     expected = "projects/{project}/subscriptions/{subscription}".format(
         project=project,
         subscription=subscription,
@@ -13244,8 +13273,8 @@ def test_subscription_path():
 
 def test_parse_subscription_path():
     expected = {
-        "project": "cuttlefish",
-        "subscription": "mussel",
+        "project": "whelk",
+        "subscription": "octopus",
     }
     path = SubscriberClient.subscription_path(**expected)
 
@@ -13255,8 +13284,8 @@ def test_parse_subscription_path():
 
 
 def test_topic_path():
-    project = "winkle"
-    topic = "nautilus"
+    project = "oyster"
+    topic = "nudibranch"
     expected = "projects/{project}/topics/{topic}".format(
         project=project,
         topic=topic,
@@ -13267,8 +13296,8 @@ def test_topic_path():
 
 def test_parse_topic_path():
     expected = {
-        "project": "scallop",
-        "topic": "abalone",
+        "project": "cuttlefish",
+        "topic": "mussel",
     }
     path = SubscriberClient.topic_path(**expected)
 
@@ -13278,7 +13307,7 @@ def test_parse_topic_path():
 
 
 def test_common_billing_account_path():
-    billing_account = "squid"
+    billing_account = "winkle"
     expected = "billingAccounts/{billing_account}".format(
         billing_account=billing_account,
     )
@@ -13288,7 +13317,7 @@ def test_common_billing_account_path():
 
 def test_parse_common_billing_account_path():
     expected = {
-        "billing_account": "clam",
+        "billing_account": "nautilus",
     }
     path = SubscriberClient.common_billing_account_path(**expected)
 
@@ -13298,7 +13327,7 @@ def test_parse_common_billing_account_path():
 
 
 def test_common_folder_path():
-    folder = "whelk"
+    folder = "scallop"
     expected = "folders/{folder}".format(
         folder=folder,
     )
@@ -13308,7 +13337,7 @@ def test_common_folder_path():
 
 def test_parse_common_folder_path():
     expected = {
-        "folder": "octopus",
+        "folder": "abalone",
     }
     path = SubscriberClient.common_folder_path(**expected)
 
@@ -13318,7 +13347,7 @@ def test_parse_common_folder_path():
 
 
 def test_common_organization_path():
-    organization = "oyster"
+    organization = "squid"
     expected = "organizations/{organization}".format(
         organization=organization,
     )
@@ -13328,7 +13357,7 @@ def test_common_organization_path():
 
 def test_parse_common_organization_path():
     expected = {
-        "organization": "nudibranch",
+        "organization": "clam",
     }
     path = SubscriberClient.common_organization_path(**expected)
 
@@ -13338,7 +13367,7 @@ def test_parse_common_organization_path():
 
 
 def test_common_project_path():
-    project = "cuttlefish"
+    project = "whelk"
     expected = "projects/{project}".format(
         project=project,
     )
@@ -13348,7 +13377,7 @@ def test_common_project_path():
 
 def test_parse_common_project_path():
     expected = {
-        "project": "mussel",
+        "project": "octopus",
     }
     path = SubscriberClient.common_project_path(**expected)
 
@@ -13358,8 +13387,8 @@ def test_parse_common_project_path():
 
 
 def test_common_location_path():
-    project = "winkle"
-    location = "nautilus"
+    project = "oyster"
+    location = "nudibranch"
     expected = "projects/{project}/locations/{location}".format(
         project=project,
         location=location,
@@ -13370,8 +13399,8 @@ def test_common_location_path():
 
 def test_parse_common_location_path():
     expected = {
-        "project": "scallop",
-        "location": "abalone",
+        "project": "cuttlefish",
+        "location": "mussel",
     }
     path = SubscriberClient.common_location_path(**expected)