diff --git a/api/envoy/extensions/wasm/v3/wasm.proto b/api/envoy/extensions/wasm/v3/wasm.proto
index 35af0cf690c2..b4566c826ed0 100644
--- a/api/envoy/extensions/wasm/v3/wasm.proto
+++ b/api/envoy/extensions/wasm/v3/wasm.proto
@@ -77,6 +77,7 @@ message VmConfig {
// **envoy.wasm.runtime.wasmtime**: `Wasmtime `_-based WebAssembly runtime.
// This runtime is not enabled in the official build.
//
+ // [#extension-category: envoy.wasm.runtime]
string runtime = 2 [(validate.rules).string = {min_len: 1}];
// The Wasm code that Envoy will execute.
@@ -86,7 +87,6 @@ message VmConfig {
// (proxy_on_start). `google.protobuf.Struct` is serialized as JSON before
// passing it to the plugin. `google.protobuf.BytesValue` and
// `google.protobuf.StringValue` are passed directly without the wrapper.
- // [#extension-category: envoy.wasm.runtime]
google.protobuf.Any configuration = 4;
// Allow the wasm file to include pre-compiled code on VMs which support it.
diff --git a/generated_api_shadow/envoy/extensions/wasm/v3/wasm.proto b/generated_api_shadow/envoy/extensions/wasm/v3/wasm.proto
index 35af0cf690c2..b4566c826ed0 100644
--- a/generated_api_shadow/envoy/extensions/wasm/v3/wasm.proto
+++ b/generated_api_shadow/envoy/extensions/wasm/v3/wasm.proto
@@ -77,6 +77,7 @@ message VmConfig {
// **envoy.wasm.runtime.wasmtime**: `Wasmtime `_-based WebAssembly runtime.
// This runtime is not enabled in the official build.
//
+ // [#extension-category: envoy.wasm.runtime]
string runtime = 2 [(validate.rules).string = {min_len: 1}];
// The Wasm code that Envoy will execute.
@@ -86,7 +87,6 @@ message VmConfig {
// (proxy_on_start). `google.protobuf.Struct` is serialized as JSON before
// passing it to the plugin. `google.protobuf.BytesValue` and
// `google.protobuf.StringValue` are passed directly without the wrapper.
- // [#extension-category: envoy.wasm.runtime]
google.protobuf.Any configuration = 4;
// Allow the wasm file to include pre-compiled code on VMs which support it.