Regenerate client from commit f8db1e11 of spec repo

Author: ci.datadog-api-spec

.apigentools-info

@@ -4,13 +4,13 @@
     "spec_versions": {
         "v1": {
             "apigentools_version": "1.6.6",
-            "regenerated": "2025-04-08 20:55:42.169501",
-            "spec_repo_commit": "21cf6edb"
+            "regenerated": "2025-04-09 12:41:16.446548",
+            "spec_repo_commit": "f8db1e11"
         },
         "v2": {
             "apigentools_version": "1.6.6",
-            "regenerated": "2025-04-08 20:55:42.184778",
-            "spec_repo_commit": "21cf6edb"
+            "regenerated": "2025-04-09 12:41:16.463550",
+            "spec_repo_commit": "f8db1e11"
         }
     }
 }

.generator/schemas/v2/openapi.yaml

@@ -27215,6 +27215,7 @@ components:
           $ref: '#/components/schemas/SecurityMonitoringRuleCaseActionType'
       type: object
     SecurityMonitoringRuleCaseActionOptions:
+      additionalProperties: {}
       description: Options for the rule action
       properties:
         duration:
@@ -27223,16 +27224,24 @@ components:
           format: int64
           minimum: 0
           type: integer
+        userBehaviorName:
+          $ref: '#/components/schemas/SecurityMonitoringRuleCaseActionOptionsUserBehaviorName'
       type: object
+    SecurityMonitoringRuleCaseActionOptionsUserBehaviorName:
+      description: Used with the case action of type 'user_behavior'. The value specified
+        in this field will be applied as a risk tag to all users affected by the rule.
+      type: string
     SecurityMonitoringRuleCaseActionType:
       description: The action type.
       enum:
       - block_ip
       - block_user
+      - user_behavior
       type: string
       x-enum-varnames:
       - BLOCK_IP
       - BLOCK_USER
+      - USER_BEHAVIOR
     SecurityMonitoringRuleCaseCreate:
       description: Case when signal is generated.
       properties:

src/datadog_api_client/v2/model/security_monitoring_rule_case_action_options.py

@@ -24,19 +24,28 @@ class SecurityMonitoringRuleCaseActionOptions(ModelNormal):
     def openapi_types(_):
         return {
             "duration": (int,),
+            "user_behavior_name": (str,),
         }
 
     attribute_map = {
         "duration": "duration",
+        "user_behavior_name": "userBehaviorName",
     }
 
-    def __init__(self_, duration: Union[int, UnsetType] = unset, **kwargs):
+    def __init__(
+        self_, duration: Union[int, UnsetType] = unset, user_behavior_name: Union[str, UnsetType] = unset, **kwargs
+    ):
         """
         Options for the rule action
 
         :param duration: Duration of the action in seconds. 0 indicates no expiration.
         :type duration: int, optional
+
+        :param user_behavior_name: Used with the case action of type 'user_behavior'. The value specified in this field will be applied as a risk tag to all users affected by the rule.
+        :type user_behavior_name: str, optional
         """
         if duration is not unset:
             kwargs["duration"] = duration
+        if user_behavior_name is not unset:
+            kwargs["user_behavior_name"] = user_behavior_name
         super().__init__(kwargs)

src/datadog_api_client/v2/model/security_monitoring_rule_case_action_type.py

@@ -16,16 +16,18 @@ class SecurityMonitoringRuleCaseActionType(ModelSimple):
     """
     The action type.
 
-    :param value: Must be one of ["block_ip", "block_user"].
+    :param value: Must be one of ["block_ip", "block_user", "user_behavior"].
     :type value: str
     """
 
     allowed_values = {
         "block_ip",
         "block_user",
+        "user_behavior",
     }
     BLOCK_IP: ClassVar["SecurityMonitoringRuleCaseActionType"]
     BLOCK_USER: ClassVar["SecurityMonitoringRuleCaseActionType"]
+    USER_BEHAVIOR: ClassVar["SecurityMonitoringRuleCaseActionType"]
 
     @cached_property
     def openapi_types(_):
@@ -36,3 +38,4 @@ def openapi_types(_):
 
 SecurityMonitoringRuleCaseActionType.BLOCK_IP = SecurityMonitoringRuleCaseActionType("block_ip")
 SecurityMonitoringRuleCaseActionType.BLOCK_USER = SecurityMonitoringRuleCaseActionType("block_user")
+SecurityMonitoringRuleCaseActionType.USER_BEHAVIOR = SecurityMonitoringRuleCaseActionType("user_behavior")