Migrate google-devtools-containeranalysis to Librarian.

What is Grafeas?

Grafeas is an open-source artifact metadata API designed to audit, govern, and secure software supply chains. In Google Cloud, Container Analysis is the managed service implementation of Grafeas, used for storing vulnerability scans, build provenance, and attestations (which are verified by Binary Authorization at deployment time).

Customer-Facing Changes (Breaking Changes)

This migration separates the Grafeas client and protos from the Container Analysis package, delegating them to the dedicated @google-cloud/grafeas package. This introduces the following breaking changes:

1. Grafeas Client Export Removed:
   GrafeasV1Beta1Client is no longer exported from @google-cloud/containeranalysis/build/src/v1beta1.

   • Before:

     import { v1beta1 } from '@google-cloud/containeranalysis';
     const client = new v1beta1.GrafeasV1Beta1Client();

   • After: Use @google-cloud/grafeas instead:

     import { v1beta1 } from '@google-cloud/grafeas';
     const client = new v1beta1.GrafeasV1Beta1Client();

2. Grafeas Path Helpers Removed from ContainerAnalysisClient (v1):
   The helper methods for constructing and parsing note and occurrence resource paths have been removed from the ContainerAnalysisClient class in v1 because they are Grafeas-specific resources.

   • Removed Methods: notePath, matchProjectFromNoteName, matchNoteFromNoteName, occurrencePath, matchProjectFromOccurrenceName, matchOccurrenceFromOccurrenceName.
   • Workaround: Customers should construct these paths manually (e.g., `projects/${project}/notes/${note}`) or obtain them from the GrafeasClient instance (which can be retrieved via client.getGrafeasClient() at runtime).