From 493690732ba5f52700379cd7da3f2fb3d05b186e Mon Sep 17 00:00:00 2001
From: Min Zhu <zhumin@google.com>
Date: Mon, 29 Jun 2026 11:50:38 -0400
Subject: [PATCH 1/2] ci(librarian): allow manual run on branches to
 commit/push generated diffs

---
 .../workflows/librarian_generation_check.yaml | 31 +++++++++++++++++--
 1 file changed, 29 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/librarian_generation_check.yaml b/.github/workflows/librarian_generation_check.yaml
index c638578a5a74..b6fc6706913a 100644
--- a/.github/workflows/librarian_generation_check.yaml
+++ b/.github/workflows/librarian_generation_check.yaml
@@ -11,6 +11,15 @@
 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 # See the License for the specific language governing permissions and
 # limitations under the License.
+
+# This workflow runs a check to ensure that all generated libraries are up-to-date with
+# the latest configuration.
+#
+# Triggers:
+# 1. Push to main: Generates the libraries, checks for git diffs, and fails (creating
+#    a Buganizer/GitHub issue) if any changes are detected.
+# 2. Manual trigger (workflow_dispatch) on a branch (except main): Generates the
+#    libraries and commits the resulting diff directly back to the triggering branch.
 name: Librarian - Generate diff check on main
 on:
   push:
@@ -22,9 +31,14 @@ jobs:
   library_generation:
     runs-on: ubuntu-24.04
     permissions:
-      contents: read
+      contents: write
       issues: write
     steps:
+    - name: Prevent running manually on main branch
+      if: ${{ github.event_name == 'workflow_dispatch' && github.ref_name == 'main' }}
+      run: |
+        echo "Error: Running this workflow manually on the main branch is not allowed."
+        exit 1
     - uses: actions/checkout@v4
       with:
         fetch-depth: 0
@@ -70,6 +84,7 @@ jobs:
       run: |
         librarian generate --all
     - name: Check for generated code changes
+      if: ${{ github.event_name != 'workflow_dispatch' }}
       run: |
         if [ -n "$(git status --porcelain)" ]; then
           git status
@@ -79,8 +94,20 @@ jobs:
           echo "Regeneration produced code changes! Please run 'librarian generate --all' to update the generated files."
           exit 1
         fi
+    - name: Commit and push changes (manual run only)
+      if: ${{ github.event_name == 'workflow_dispatch' }}
+      run: |
+        if [ -n "$(git status --porcelain)" ]; then
+          git config --global user.name 'github-actions[bot]'
+          git config --global user.email 'github-actions[bot]@users.noreply.github.com'
+          git add -A
+          git commit -m "chore: regenerate libraries"
+          git push
+        else
+          echo "No changes to commit"
+        fi
     - name: Create issue if previous step fails
-      if: ${{ failure() && github.ref == 'refs/heads/main' }}
+      if: ${{ failure() && github.event_name == 'push' && github.ref == 'refs/heads/main' }}
       uses: googleapis/librarian/.github/actions/create-issue-on-failure@main
       with:
         title: "Librarian generate diff check failed on main branch"

From 19e08b5ebe3a6d91bc62f045a12242e493d498f1 Mon Sep 17 00:00:00 2001
From: Min Zhu <zhumin@google.com>
Date: Mon, 29 Jun 2026 12:05:06 -0400
Subject: [PATCH 2/2] update name

---
 .github/workflows/librarian_generation_check.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/librarian_generation_check.yaml b/.github/workflows/librarian_generation_check.yaml
index b6fc6706913a..c36eaf1fdc4c 100644
--- a/.github/workflows/librarian_generation_check.yaml
+++ b/.github/workflows/librarian_generation_check.yaml
@@ -20,7 +20,7 @@
 #    a Buganizer/GitHub issue) if any changes are detected.
 # 2. Manual trigger (workflow_dispatch) on a branch (except main): Generates the
 #    libraries and commits the resulting diff directly back to the triggering branch.
-name: Librarian - Generate diff check on main
+name: Librarian - Generate libraries check / update
 on:
   push:
     branches: