deps: Update Terraform google to v7.39.0

[renovate-bot]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change
google (source)	required_provider	minor	7.16.0 → 7.39.0

---

Release Notes

hashicorp/terraform-provider-google (google)

v7.39.0

Compare Source

NOTES:

• compute: migrated google_compute_instance_template resource partially to use direct HTTP rather than a client library (#​28010)
• compute: migrated google_compute_network_peering resource to use direct HTTP rather than a client library (#​28021)
• compute: migrated metadata handling to use direct HTTP rather than a client library (#​27968)

FEATURES:

• New Data Source: google_agent_registry_agent (#​28028)
• New Data Source: google_agent_registry_endpoint (#​28028)
• New Data Source: google_agent_registry_mcp_server (#​28028)
• New Data Source: google_compute_instance_groups (#​27981)
• New Data Source: google_storage_control_folder_intelligence_findings_summary (#​28019)
• New Data Source: google_storage_control_organization_intelligence_findings_summary (#​28019)
• New Data Source: google_storage_control_project_intelligence_findings_summary (#​28019)
• New Resource: google_agent_registry_binding (#​28028)
• New Resource: google_agent_registry_service (#​28028)
• New Resource: google_artifact_registry_project_config (#​28009)
• New Resource: google_chronicle_findings_refinement (#​28035)
• New Resource: google_compute_bulk_per_instance_config (#​28031)
• New Resource: google_compute_firewall_policy_iam_binding (#​27978)
• New Resource: google_compute_firewall_policy_iam_member (#​27978)
• New Resource: google_compute_firewall_policy_iam_policy (#​27978)
• New Resource: google_compute_network_firewall_policy_iam_binding (#​27978)
• New Resource: google_compute_network_firewall_policy_iam_member (#​27978)
• New Resource: google_compute_network_firewall_policy_iam_policy (#​27978)
• New Resource: google_compute_region_network_firewall_policy_iam_binding (#​27978)
• New Resource: google_compute_region_network_firewall_policy_iam_member (#​27978)
• New Resource: google_compute_region_network_firewall_policy_iam_policy (#​27978)
• New Resource: google_compute_region_resize_request (#​27984)
• New Resource: google_compute_zone_vm_extension_policy (#​28034)
• New Resource: google_gke_hub_rollout_sequence (#​28007)
• New Resource: google_iap_agent_registry_iam_binding (#​28032)
• New Resource: google_iap_agent_registry_iam_member (#​28032)
• New Resource: google_iap_agent_registry_iam_policy (#​28032)
• New Resource: google_iap_location_web_iam_binding (#​28032)
• New Resource: google_iap_location_web_iam_member (#​28032)
• New Resource: google_iap_location_web_iam_policy (#​28032)
• New Resource: google_oracle_database_cloud_exadata_infrastructure_exascale_config (#​28033)
• New List Resource: google_bigquery_dataset (#​28005)
• New List Resource: google_compute_cross_site_network (#​28018)
• New List Resource: google_compute_external_vpn_gateway (#​28018)
• New List Resource: google_compute_global_network_endpoint_group (#​28018)
• New List Resource: google_compute_ha_vpn_gateway (#​28018)
• New List Resource: google_compute_interconnect_attachment_group (#​28018)
• New List Resource: google_compute_interconnect_group (#​28018)
• New List Resource: google_compute_public_delegated_prefix (#​28018)
• New List Resource: google_compute_region_commitment (#​28018)
• New List Resource: google_compute_region_network_endpoint_group (#​28018)
• New List Resource: google_compute_vpn_gateway (#​28018)
• New List Resource: google_compute_wire_group (#​28018)
• New List Resource: google_folder_iam_member (#​27993)
• New List Resource: google_kms_crypto_key_version (#​28006)
• New List Resource: google_project (#​28041)
• New List Resource: google_project_service (#​27989)

IMPROVEMENTS:

• bigquery: added external_runtime_options.container_request_concurrency field to google_bigquery_routine resource (#​28029)
• compute: added instance_lifecycle_policy.on_failed_health_check field in resources google_compute_instance_group_manager and google_compute_region_instance_group_manager (ga) (#​27992)
• container: added new fields shutdown_grace_period_seconds and shutdown_grace_period_critical_pods_seconds to node_kubelet_config block. (#​28015)
• container: promoted agent_sandbox_config addon field under addons_config in google_container_cluster to GA (#​28017)
• dataplex: added icon field to google_dataplex_data_product resource (#​27986)
• dataplex: added name field to google_dataplex_data_product_data_asset resource (#​28020)
• dlp: added allow_limited_availability_info_types to google_data_loss_prevention_inspect_template (#​28024)
• networkservices: added forward_attributes field to google_network_services_lb_edge_extension, google_network_services_lb_route_extension, and google_network_services_lb_traffic_extension resources (#​28012)

BUG FIXES:

• compute: fixed a panic in google_compute_project_metadata and google_compute_project_metadata_item when project common instance metadata items contain null/empty values. (#​28008)
• compute: fixed a validation error on google_compute_instance (Provisioned IOPS cannot be specified with disk type pd-balanced) that occurred during updates on instances with Hyperdisk Balanced boot disks. (#​27975)
• dataproc: fixed a bug where changing policy_id on google_dataproc_autoscaling_policy planned an in-place update and failed; it now correctly forces resource replacement (destroy and recreate). (#​28036)
• firestore: added retries on 409 errors in google_firestore_user_creds resource (#​27972)
• iam: fixed ephemeral google_service_account_key producing a 404 due to duplicate /keys in the URL when fetch_key = true and name is provided (#​27980)

v7.38.0

Compare Source

v7.37.0

Compare Source

NOTES:

• compute: migrated EnableDisplay fields in google_compute_instance resources to use direct HTTP rather than a client library (#​27778)
• compute: migrated desired_status block and startInstanceOperation in resource_compute_instance.go.tmpl to use direct HTTP rather than a client library (#​27755)
• compute: migrated getInstance, getDisk, Delete and the setMetadata update block in resource_compute_instance.go.tmpl to use direct HTTP rather than a client library (#​27716)
• compute: migrated part of google_compute_instance to use direct HTTP rather than a client library (#​27788)

DEPRECATIONS:

• cloudrunv2: deprecated http_get.http_headers.port field in container startup probe and liveness probe in google_cloud_run_v2_worker_pool resource because it is not supported in Cloud Run API. This field will be removed in a future major release. (#​27800)
• cloudsecuritycompliance: deprecated the organization field on google_cloud_security_compliance_cloud_control, google_cloud_security_compliance_framework, and google_cloud_security_compliance_framework_deployment. Use parent instead (#​27769)
• networkservices: deprecated protocols on google_network_services_agent_gateway (#​27802)

FEATURES:

• New Data Source: google_oracle_database_goldengate_deployment_versions (#​27771)
• New Data Source: google_storage_control_project_intelligence_finding (#​27764)
• New Data Source: google_storage_control_project_intelligence_findings (#​27764)
• New Resource: google_chronicle_parser (#​27801)
• New Resource: google_migration_center_import_data_file (#​27721)
• New Resource: google_network_services_agent_gateway (#​27803)
• New Resource: google_vertex_ai_tensorboard_experiment (#​27796)
• New List Resource: google_bigquery_dataset_access (#​27758)
• New List Resource: google_cloud_scheduler_job (#​27758)
• New List Resource: google_dns_record_set (#​27792)
• New List Resource: google_monitoring_alert_policy (#​27758)
• New List Resource: google_pubsub_subscription (#​27758)

IMPROVEMENTS:

• apigee: added new resource google_apigee_environment_debugmask for managing Apigee environment debug masks (#​27719)
• backupdr: added support for use_project_service_account flag in google_backup_dr_restore_workload disk and compute restores (#​27797)
• cloudrunv2: added http_get.http_headers.name field to container startup probe and liveness probe in google_cloud_run_v2_worker_pool resource (#​27800)
• cloudrunv2: added template.client and template.client_version fields to google_cloud_run_v2_worker_pool resource (#​27757)
• cloudsecuritycompliance: added support for project parent to google_cloud_security_compliance_cloud_control, google_cloud_security_compliance_framework, and google_cloud_security_compliance_framework_deployment via the new parent field. The organization field has been deprecated. (#​27769)
• compute: added params.resource_manager_tags field to google_compute_reservation resource (#​27770)
• compute: added data sources for google_compute_target_http_proxy, google_compute_target_https_proxy, google_compute_region_target_http_proxy, and google_compute_region_target_https_proxy (#​27767)
• container: added addons_config.slurm_operator_config field to google_container_cluster resource (#​27765)
• container: added node_image_config field to google_container_node_pool and google_container_cluster resources (#​27794)
• databasemigrationservice: added state and stop_on_warnings fields to google_database_migration_service_migration_job resource (#​27731)
• dns: added resource identity support for google_dns_record_set resource (#​27792)
• networksecurity: added network_rules field on google_network_security_authz_policy resource (#​27821)
• pubsub: added first_revision_id and last_revision_id fields to google_pubsub_topic resource (#​27718)
• sql: added settings.ip_configuration.psc_config.psc_auto_dns_enabled and settings.ip_configuration.psc_config.psc_write_endpoint_dns_enabled fields to google_sql_database_instance resource (#​27776)

BUG FIXES:

• apigee: fixed google_apigee_api not detecting local bundle changes due to a missing default on detect_md5hash, and fixed the test sweeper's list URL (#​27791)
• apigee: fixed google_apigee_security_action update failure by enabling PATCH-based updates now that the Apigee Security Actions API supports mutations (#​27768)
• apigee: fixed a perma-diff for api_products and scopes fields in google_apigee_developer_app resource when updating them with multiple items (#​27789)
• apigee: fixed an issue where the resource would attempt recreation if the key_expires_in field was set in google_apigee_developer_app resource (#​27779)
• ces: fixed persistent diff in google_ces_guardrail when llm_prompt_security is configured with default_settings (#​27766)
• cloudrun: fixed a permadiff for the run.googleapis.com/gpu-zonal-redundancy-disabled annotation in google_cloud_run_service (#​27787)
• cloudrunv2: fixed bug where only one http_get.http_headers block could be specified in container startup probe and liveness probe in google_cloud_run_v2_worker_pool resource (#​27800)
• compute: fixed an issue in google_compute_subnetwork where secondary_ip_range entries linked to an internal_range could not be removed and adding new ranges would sometimes fail due to positional shifts (#​27175) (#​27720)
• compute: fixed diff when using existing_reservations field in google_region_commitment (#​27775)
• compute: fixed rules in google_compute_security_policy being unnecessarily recreated due to TypeSet hash instability (#​27754)
• sql: fixed inconsistent result after apply error when adding users of type CLOUD_IAM_GROUP with capitalized domain names for MySQL (#​27784)
• storage: fixed OOM issue for google_storage_bucket force_destroy by limiting the number of outstanding tasks to 2000 (#​27777)

v7.36.0

Compare Source

v7.35.0

Compare Source

v7.34.0

Compare Source

NOTES:

• compute: migrated google_compute_region_instance_template to use direct HTTP rather than a client library (#​27471)
• compute: migrated google_compute_instance_group_manager resource to use direct HTTP rather than a client library (#​27441)

FEATURES:

• New Data Source: google_compute_service_attachment (#​27526)
• New Data Source: google_oracle_database_goldengate_deployment_environments (#​27499)
• New Resource: google_config_deployment (#​27438)
• New Resource: google_dialogflow_sip_trunk (#​27468)
• New Resource: google_migration_center_assets_export_job (#​27466)
• New Resource: google_migration_center_report_config (#​27395)
• New Resource: google_migration_center_settings (#​27465)
• New Resource: google_migration_center_source (#​27496)

IMPROVEMENTS:

• bigtable: added edition field to google_bigtable_instance resource (#​27507)
• ces: added fail_open field to llm_prompt_security block in google_ces_guardrail resource (#​27497)
• ces: added read-only fail_open field to llm_prompt_security block in google_ces_app_version resource (#​27497)
• compute: added ip_version and ip_collection fields to secondary_ip_range field in google_compute_subnetwork resource (#​27432)
• compute: added post_quantum_key_exchange field to google_compute_ssl_policy and google_compute_region_ssl_policy resources (#​27479)
• compute: added support in the google_compute_network datasource for looking up a network by self_link in addition to name (#​27509)
• container: added agent_sandbox_config field to google_container_cluster resource (#​27482)
• container: added node_config.gpudirect_strategy and node_pool.node_config.gpudirect_strategy to cluster resource, added node_config.gpudirect_strategy to node_pool resource (#​27495)
• dataflow: Added create_ignore_already_exists field to google_dataflow_flex_template_job resource to handle 409 conflicts (#​27476)
• datafusion: added maintenance_policy field to google_data_fusion_instance resource (#​27470)
• iam: add resource identity support for iam_member resources (#​27383)
• networkconnectivity: google_network_connectivity_transport resource promoted to GA (#​27440)
• oracledatabase: added identity_connector to google_oracle_database_cloud_vm_cluster for CMEK support (#​27435)
• project: added Resource Identity support to google_project_iam_binding (#​27502)
• project: added Resource Identity support to google_project_iam_policy (#​27503)
• sql: promoted Hyperdisk fields, data_disk_provisioned_iops and data_disk_provisioned_throughput to GA (#​27437)

BUG FIXES:

• bigtable: fixed an issue where bigtable_custom_endpoint and universe_domain were ignored when creating Bigtable resources. (#​27515)
• compute: fixed an issue in google_compute_subnetwork where secondary_ip_range entries linked to an internal_range could not be removed and adding new ranges would sometimes fail due to positional shifts (#​27175) (#​27512)
• compute: marked encryption keys as immutable and sensitive across compute and backupdr resources (#​27508)
• dialogflow: corrected AUDIOENCODING_SPEEX_WITH_HEADER_BYTE enum value to AUDIO_ENCODING_SPEEX_WITH_HEADER_BYTE for audio_encoding field in google_dialogflow_conversation_profile resource (#​27459)
• resourcemanager: resolved a one-time diff for deletion_policy that would occur on existing and imported google_project_service resources following upgrading to v7.32.0 (#​27484)

v7.33.0

Compare Source

v7.32.0

Compare Source

NOTES:

• compute: migrated google_compute_instance_from_machine resource to use direct HTTP rather than a client library (#​27260)
• compute: migrated google_compute_instance_group_manager resource to use direct HTTP rather than a client library (#​27259)
• compute: migrated google_compute_zones data source to use direct HTTP rather than a client library (#​27261)
• compute: migrated google_compute_project_metadata_item resource to use direct HTTP rather than a client library (#​27200)

FEATURES:

• New Data Source: google_compute_region_instant_snapshot_iam_policy (#​27281)
• New Resource: google_chronicle_dashboard_chart (#​27275)
• New Resource: google_compute_region_instant_snapshot_iam_binding (#​27281)
• New Resource: google_compute_region_instant_snapshot_iam_member (#​27281)
• New Resource: google_compute_region_instant_snapshot_iam_policy (#​27281)
• New Resource: google_compute_region_instant_snapshot (#​27281)

IMPROVEMENTS:

• compute: added IDPF value to nic_type in resource_compute_instance_template (#​27244)
• compute: added IDPF value to nic_type in resource_compute_instance (#​27244)
• compute: added IDPF value to nic_type in resource_compute_region_instance_template (#​27244)
• compute: added address_id field to google_compute_address resource (#​27216)
• compute: added advanced_options_config field on google_compute_organization_security_policy resource (#​27255)
• compute: added connection_tracking_policy field to google_compute_region_backend_service resource (#​27217)
• compute: added image, source_image_encryption_key, and source_image_id fields to google_compute_region_disk resource. This field is currently behind an allowlist. (#​27243)
• compute: added replica_zones field to google_compute_instance resource (#​27258)
• compute: added request_body field on google_compute_security_policy_rule resource (#​27252)
• compute: added update support for ip_collection field to google_compute_subnetwork resource (#​27265)
• discoveryengine: added config_id attribute to google_discovery_engine_widget_config (#​27278)
• networksecurity: added support for project parent values to google_network_security_firewall_endpoint (#​27222)
• recaptchaenterprise: added POLICY_BASED_CHALLENGE value to integration_type field and added new challenge_settings field to google_recaptcha_enterprise_key (#​27221)
• redis: added new node types supported in google_redis_cluster. (#​27242)
• resourcemanager: add private_key and private_key_type fields to ephemeral google_service_account_key resource (#​27279)
• storage: added ingest_on_write field for google_storage_anywhere_cache resource (#​27271)
• workstations: added gce_hd field to google_workstations_workstation_config resource (#​27201)

BUG FIXES:

• cloudfunctions2: fixed bug where all_traffic_on_latest_revision = false was ignored in google_cloudfunctions2_function (#​27256)
• compute: fixed permadiff when removing preconfigured_waf_config from a google_compute_security_policy rule (#​27276)

v7.31.0

Compare Source

NOTES:

• compute: migrated google_compute_instance.network_interface field to use direct HTTP rather than a client library (#​27104)
• compute: migrated google_compute_image datasource to use direct HTTP rather then a client library (#​27179)
• compute: migrated partner_metadata field on google_compute_instance, google_compute_instance_template, and google_compute_region_instance_template to use direct HTTP rather than a client library (#​27131)
• compute: migrated google_compute_node_types data source to use direct HTTP rather than a client library (#​27184)
• compute: migrated google_compute_region_instance_group data source to use direct HTTP rather than a client library (#​27178)
• compute: migrated google_compute_subnetwork data source to use direct HTTP rather than a client library (#​27167)
• compute: migrated google_compute_vpn_gateway data source to use direct HTTP rather than a client library (#​27168)

FEATURES:

• New Data Source: google_artifact_registry_file (#​27183)
• New Resource: google_ces_app_root_agent_association (#​27123)
• New Resource: google_contact_center_insights_qa_question (#​27169)
• New Resource: google_contact_center_insights_qa_scorecard_revision (#​27169)
• New Resource: google_contact_center_insights_qa_scorecard (#​27169)
• New Resource: google_firebase_app_check_resource_policy (#​27185)

IMPROVEMENTS:

• clouddeploy: added default_pool and private_pool fields to google_clouddeploy_target resource (#​27187)
• clouddeploy: added tasks and analysis fields to google_clouddeploy_delivery_pipeline resource (#​27187)
• compute: added params.resource_manager_tags field to google_compute_image (#​27107)
• compute: added params.resource_manager_tags field to google_compute_region_commitment resource (#​27181)
• compute: added resource_policies.workload_policy to google_compute_region_instance_group_manager resource (#​27170)
• compute: marked csek disk encryption key fields as sensitive in compute resources (#​27193)
• container: added node_pool.network_config.accelerator_network_profile to google_container_cluster resource and network_config.accelerator_network_profile to google_container_node_pool resource (#​27171)
• databasemigrationservice: added objects_config field to google_database_migration_service_migration_job resource (#​27180)
• dataplex: added attributes, template_reference, enable_catalog_basedRules, and filter fields to google_dataplex_datascan resource (#​27130)
• firestore: added search_config field to google_firestore_index resource (#​27108)
• oracle_database: added pluggable_database_id, pluggable_database_name fields to google_oracle_database_db_system resource (#​27127)

BUG FIXES:

• provider: fixed a bad timeouts diff across a number of resources that had resource identity support added in 7.29.0 (#​27189)
• assuredworkloads: made assuredworkloads resources use GA endpoint instead of beta (#​27122)
• bigquery: fixed ignore_auto_generated_schema evaluation for google_bigquery_table external tables which caused spurious replacement (#​27188)
• cloudscheduler: fixed perpetual diff on google_cloud_scheduler_job.http_target.headers when oidc_token or oauth_token is set (#​27173)
• servicenetworking: fixed a permadiff issue of reserved_peering_ranges in google_service_networking_connection (#​27132)
• storage: fix inconsistent plan issue for google_storage_notification.custom_attributes field (#​27129)

v7.30.0

Compare Source

v7.29.0

Compare Source

v7.28.0

Compare Source

NOTES:

• compute: migrated data_source_google_compute_instance_template datasource to use direct HTTP rather then a client library (#​26831)
• compute: migrated google_compute_instance_guest_attributes datasource to use direct HTTP rather then a client library (#​26826)
• provider: added provider-wide Identity() schema support, allowing imports with MMv1 resources to occur using the identity block instead of id field (#​26783)

FEATURES:

• New Data Source: google_vertex_ai_reasoning_engine_query (#​26787)
• New Resource: google_apigee_space (#​26857)
• New Resource: google_chronicle_feed (#​26742)
• New Resource: google_vertex_ai_reasoning_engine_iam_binding (#​26785)
• New Resource: google_vertex_ai_reasoning_engine_iam_member (#​26785)
• New Resource: google_vertex_ai_reasoning_engine_iam_policy (#​26785)
• New Resource: google_workload_identity_service_agent (#​26780)

IMPROVEMENTS:

• bigqueryanalyticshub: added replica_locations and effective_replicas fields to google_bigquery_analytics_hub_listing resource (#​26843)
• bigqueryanalyticshub: added replica_locations field to google_bigquery_analytics_hub_listing_subscription resource (#​26843)
• composer: increased google_composer_environment default delete timeout to 120m from 30m (#​26851)
• compute: added target_size_policy field to google_compute_instance_group_manager and google_compute_region_instance_group_manager resources (#​26849)
• compute: increased google_compute_security_policy default timeout to 60m from 30m (#​26850)
• compute: supported simultaneous updates for Hyperdisk IOPS and throughput in google_compute_disk and google_compute_region_disk resources (#​26815)
• container: added autopilot_cluster_policy_config field to google_container_cluster resource (#​26822)
• container: added disable_multi_nic field to lustre_csi_driver_config in google_container_cluster resource (#​26759)
• developerconnect: added custom_oauth_config, etag, and proxy_config fields to google_developer_connect_account_connector resource (#​26751)
• netapp: added scale_type field to google_netapp_storage_pool resource (#​26821)
• netapp: added mode field to google_netapp_storage_pool resource (#​26778)
• networkservices: added all_ports field to google_network_services_gateway resource (#​26808)
• sql: added SQLSERVER_2025 value to database_version field in database_instance resource (#​26845)
• vertexai: add labels field to google_vertex_ai_reasoning_engine resource (#​26825)
• vertexai: added spec.source_code_spec.image_spec field to google_vertex_ai_reasoning_engine resource (#​26790)
• vertexai: added container_spec field to google_vertex_ai_reasoning_engine resource (#​26813)
• vertexai: added spec.identity_type and spec.effective_identity fields to google_vertex_ai_reasoning_engine resource (#​26788)

BUG FIXES:

• apigee: fixed a crash in google_apigee_environment_addons_config resource when analytics are not configured (#​26810)
• apigee: fixed overly restrictive validation of name field in google_apigee_api_product that rejected uppercase letters, aligning provider behavior with the Apigee API (#​26756)
• bigquery: fixed crash when hive_partitioning_options is defined with all null values in google_bigquery_table resource (#​26846)
• firebaseailogic: fixed permadiff on traffic_filter field in google_firebase_ai_logic_config resource (#​26749)
• networksecurity: fixed permadiff on policy_profile field in google_network_security_authz_policy resource (#​26865)
• vertexai: added 10-second wait before reading the updated resource in google_vertex_ai_reasoning_engine, preventing stale values getting written to state (#​26852)

v7.27.0

Compare Source

BREAKING CHANGES:

• lustre: marked maintenance_policy.weekly_maintenance_windows field required in google_lustre_instance resource. Configuring maintenance_policy without weekly_maintenance_windows will cause an API error. (#​26741)

FEATURES:

• New Data Source: google_discovery_engine_data_store (#​26651)
• New Data Source: google_discovery_engine_data_stores (#​26651)
• New Data Source: google_dns_record_sets (#​26736)
• New Resource: google_chronicle_dashboard_chart (#​26707)
• New Resource: google_chronicle_feed (#​26742)
• New Resource: google_network_connectivity_transport (#​26626)
• New Resource: google_iam_workload_identity_pool_managed_identity (#​26732)
• New Resource: google_iam_workload_identity_pool_namespace (#​26647)

IMPROVEMENTS:

• compute: added SEV_LIVE_MIGRATABLE_V2 to guest_os_features enum for google_compute_region_disk resource (#​26735)
• compute: added SNP_SVSM_CAPABLE to guest_os_features enum for google_compute_image and google_compute_region_disk resources (#​26735)
• compute: added excluded_folders and excluded_projects fields to google_compute_organization_security_policy_association resource (#​26694)
• compute: supported in-place update for secondary_ip_range field in google_compute_subnetwork resource (#​26689)
• container: added autopilot_privileged_admission field to google_container_cluster resource for Customer-Driven Allowlisting (#​26668)
• dataplex: added aspects field to google_dataplex_entry_link resource (#​26664)
• dataplex: supported in-place update for aspects field in google_dataplex_entry_link resource (#​26702)
• dataproc: added boot_disk_provisioned_iops and boot_disk_provisioned_throughput fields to cluster_config.worker_config.disk_config in google_dataproc_cluster resource (#​26691)
• dataproc: added value AUTO to runtime_config.autotuning_config.scenarios field in google_dataproc_batch resource (#​26646)
• iambeta: added attestation_rules field to google_iam_workload_identity_pool resource (#​26706)
• lustre: added dynamic_tier_options field to google_lustre_instance resource (#​26741)
• migrationcenter: added virtual_machine_preferences.compute_engine_preferences.persistent_disk_type field to google_migration_center_preference_set resource (#​26693)
• networkconnectivity: added exclude_import_ranges, include_export_ranges, exclude_export_ranges fields to google_network_connectivity_spoke resource (#​26730)
• pubsub: added ai_inference field to google_pubsub_topic and google_pubsub_subscription resources (#​26738)
• sql: added clone_context.source_project field to google_sql_database_instance resource to support cross project clone (#​26652)

BUG FIXES:

• compute: fixed a permadiff on the adaptive_protection_config field in google_compute_security_policy resource (#​26692)
• compute: fixed panic when setting google_compute_project_metadata on a project with no existing metadata (#​26630)
• biglakeiceberg: changed the primary-location parameter to primary_location in the create URL of google_biglake_iceberg_catalog resource (#​26695)
• securityposture: always sent value of enforce in policies.constraint.org_policy_constraint.policy_rules to the api in google_securityposture_posture resource (#​26645)
• vertexai: fixed missing Private Service Connect service attachment for service_attachment field in google_vertex_ai_endpoint_with_model_garden_deployment resource (#​26690)
• workstations: fixed update of private_cluster_config.allowed_projects in google_workstations_workstation_cluster resource (#​26705)

v7.26.0

Compare Source

BREAKING CHANGES:

• compute: Removed google_compute_region_backend_bucket from the google (GA) provider. It is currently beta-only, and calls to the nonexistent GA API always returned a 404. Until released in google, use google-beta instead. (#​26597)

FEATURES:

• New Data Source: google_network_security_address_groups (#​26562)
• New Data Source: google_iam_workload_identity_pool_iam_policy (#​26598)
• New Resource: google_bigqueryreservation_reservation_group (#​26560)
• New Resource: google_compute_region_composite_health_check (#​26591)
• New Resource: google_compute_region_health_aggregation_policy (#​26591)
• New Resource: google_compute_region_health_source (#​26591)
• New Resource: google_contact_center_insights_assessment_rule (#​26530)
• New Resource: google_iam_workload_identity_pool_iam_* (#​26598)
• New Resource: google_workstations_workstation (#​26561)
• *New Resource:

✂ Note

PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.