feat(deps): Update Terraform google to v8

[renovate-bot]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change	Pending
google (source)	required_provider	major	>= 3.53, < 7.0 → >= 3.53, < 8.4	8.4.0
google (source)	required_provider	major	>= 3.53, < 7 → >= 3.53, < 9	8.4.0

---

Release Notes

hashicorp/terraform-provider-google (google)

v8.3.0

Compare Source

v8.2.0

Compare Source

NOTES:

• compute: migrate google_compute_subnetworks data source to use direct HTTP rather than a client library (#​29226)

FEATURES:

• New List Resource: google_appengine_domain_mapping (#​29174)
• New List Resource: google_appengine_service_network_settings (#​29174)
• New List Resource: google_appengine_service_split_traffic (#​29174)
• New List Resource: google_contact_center_insights_analysis_rule (#​29146)
• New List Resource: google_contact_center_insights_assessment_rule (#​29146)
• New List Resource: google_contact_center_insights_auto_labeling_rule (#​29146)
• New List Resource: google_contact_center_insights_qa_scorecard (#​29146)
• New List Resource: google_contact_center_insights_view (#​29146)
• New List Resource: google_identityplatform_inbound_saml_config (#​29166)
• New List Resource: google_identityplatform_oauth_idp_config (#​29166)
• New List Resource: google_identityplatform_tenant (#​29166)
• New List Resource: google_network_security_authz_policy (#​29142)
• New List Resource: google_network_security_intercept_deployment_group (#​29142)
• New List Resource: google_network_security_intercept_deployment (#​29142)
• New List Resource: google_network_security_intercept_endpoint_group_association (#​29142)
• New List Resource: google_network_security_intercept_endpoint_group (#​29142)
• New List Resource: google_network_security_mirroring_deployment_group (#​29142)
• New List Resource: google_network_security_mirroring_deployment (#​29142)
• New List Resource: google_network_security_mirroring_endpoint_group_association (#​29142)
• New List Resource: google_network_security_mirroring_endpoint_group (#​29142)
• New List Resource: google_network_security_mirroring_endpoint (#​29142)
• New List Resource: google_secret_manager_secret_iam_member (#​29221)
• New List Resource: google_vertexai_dataset (#​29147)
• New List Resource: google_vertexai_deployment_resource_pool (#​29147)
• New List Resource: google_vertexai_evaluation_metric (#​29147)
• New List Resource: google_vertexai_feature_group (#​29147)
• New List Resource: google_vertexai_feature_online_store (#​29147)
• New List Resource: google_vertexai_featurestore (#​29147)
• New List Resource: google_vertexai_index (#​29147)
• New List Resource: google_vertexai_persistent_resource (#​29147)
• New List Resource: google_vertexai_reasoning_engine (#​29147)
• New List Resource: google_vertexai_tensorboard (#​29147)
• New Resource: google_biglake_hive_catalog (#​29223)
• New Resource: google_biglake_hive_database (#​29223)
• New Resource: google_biglake_hive_table (#​29223)
• New Resource: google_bigquery_data_transfer_data_source_enrollment (#​29140)
• New Resource: google_chronicle_case_close_definition (#​29228)
• New Resource: google_chronicle_case_tag_definition (#​29236)
• New Resource: google_observability_bucket (#​29225)
• New Resource: google_observability_folder_settings (#​29225)
• New Resource: google_observability_link (#​29161)
• New Resource: google_observability_link (#​29225)
• New Resource: google_observability_organization_settings (#​29225)
• New Resource: google_observability_project_settings (#​29225)
• New Resource: google_service_usage_v2_consumer_policy (#​29222)
• New Resource: google_storage_ftp_user, google_storage_ftp_server (#​29155)

IMPROVEMENTS:

• apikeys: added check_existing_usage field and FORCE deletion_policy support to google_apikeys_key (#​29153)
• apikeys: added check_existing_usage field and FORCE deletion_policy support to google_apikeys_key (#​29154)
• ces: added evaluation_metrics_thresholds.golden_hallucination_metric_behavior and evaluation_metrics_thresholds.scenario_hallucination_metric_behavior fields to google_ces_app and google_ces_app_version (#​29234)
• ces: added locked and default_channel_profile.web_widget_config.security_settings fields to google_ces_app (#​29235)
• ces: added logging_settings.metric_analysis_settings field to google_ces_app (#​29232)
• ces: added proactive_execution_enabled field to google_ces_guardrail (#​29106)
• cloudrunv2: supported explicitly disabling cpu_utilization and concurrency_utilization autoscaling thresholds with 0.0 in google_cloud_run_v2_service (#​29081)
• compute: added architecture field to google_compute_machine_types data source (#​29170)
• dlp: added big_query_target.cadence.refresh_frequency field to google_data_loss_prevention_discovery_config resource (#​29181)
• gemini: added mutations_enabled field to google_gemini_gemini_gcp_enablement_setting (#​29164)
• iap: added support for forwarding_rule resource types in google_iap_settings (#​29159)
• storageftp: added labels field to google_storage_ftp_server (#​29173)
• storageftp: added labels field to google_storage_ftp_user (#​29172)
• vertexai: added audio_transcription field to google_vertex_ai_reasoning_engine resource (#​29144)
• vertexai: added context_spec field to google_vertex_ai_reasoning_engine (#​29139)

BUG FIXES:

• alloydb: fixed permadiff on network_config for google_alloydb_instance when enable_public_ip is set to false (#​29157)
• apigee: fixed an issue where concurrently creating google_apigee_endpoint_attachment, google_apigee_instance_attachment, google_apigee_envgroup_attachment, google_apigee_environment, google_apigee_envgroup or google_apigee_nat_address resources could fail with a 400 error stating the resource is locked by another operation (#​29175)
• colab: fixed an issue in google_colab_schedule where notebook_execution_job.workbench_runtime could not be configured with an empty value (#​29177)
• compute: fix permadiff regression on google_compute_backend_service when iap is omitted (#​29156)
• dataproc: fixed schema validation error when configuring disk_config under cluster_config.preemptible_worker_config on google_dataproc_cluster (#​29158)
• gkehub: fixed issue the prevented workloadidentity and fleetobservability fields being set to empty values in the google_gke_hub_feature resource (#​29145)
• storage: fixed a bug in data.google_storage_object_signed_url where an extension_headers name that was not all lowercase had its value dropped from the signature (#​29138)
• vertexai: fixed google_vertex_ai_endpoint_with_model_garden_deployment not detecting drift in replica counts, because the resource had no Read implementation; out-of-band changes to min_replica_count, max_replica_count and required_replica_count are now surfaced on terraform plan (#​29104)

v8.1.0

Compare Source

NOTES:

• compute: migrated google_compute_global_address data source to use direct HTTP rather than a client library (#​29038)
• compute: migrated google_compute_interconnect_locations data source to use direct HTTP rather than a client library (#​29055)
• compute: migrated google_compute_shared_vpc_host_project to use direct HTTP rather than a client library (#​29071)
• container: migrated google_container_node_pool to use direct HTTP rather than a client library (#​29070)
• resourcemanager: migrated google_project to use direct HTTP rather than a client library (#​29054)

DEPRECATIONS:

• workstations: deprecated details in google_workstations_workstation_config (no longer populated by the API; will be removed in a future major release) (#​29075)

FEATURES:

• New List Resource: google_apigee_addons_config (#​29039)
• New List Resource: google_apigee_api_product (#​29067)
• New List Resource: google_apigee_data_collector (#​29067)
• New List Resource: google_apigee_datastore (#​29067)
• New List Resource: google_apigee_endpoint_attachment (#​29067)
• New List Resource: google_apigee_envgroup (#​29067)
• New List Resource: google_apigee_environment_keyvaluemaps (#​29065)
• New List Resource: google_apigee_organization (#​29065)
• New List Resource: google_apigee_target_server (#​29065)
• New List Resource: google_colab_notebook_execution (#​29064)
• New List Resource: google_colab_runtime (#​29064)
• New List Resource: google_colab_runtime_template (#​29064)
• New List Resource: google_colab_schedule (#​29064)
• New Resource: google_eventarc_pipeline_iam_binding (#​29080)
• New Resource: google_eventarc_pipeline_iam_member (#​29080)
• New Resource: google_eventarc_pipeline_iam_policy (#​29080)
• New Resource: google_monitoring_snooze (#​29037)
• New Resource: google_network_management_network_monitoring_provider (#​29056)
• New Resource: google_observability_bucket (#​29076)
• New Resource: google_scc_notification_service_account (#​29043)

IMPROVEMENTS:

• bigqueryanalyticshub: added destination_pubsub_subscription to google_bigquery_analytics_hub_listing_subscription (#​29062)
• ces: added api_authentication field to google_ces_tool.remote_agent_tool (#​29059)
• ces: added error_handling_settings field to google_ces_app (#​29045)
• ces: added instagram_credentials and whatsapp_credentials fields to google_ces_deployment resource (#​29040)
• ces: added language_code_variable field to google_ces_agent resource (#​29063)
• ces: added retention_window field to google_ces_app resource (#​29028)
• ces: added vpc_sc_settings field to google_ces_app resource (#​29027)
• ces: added whatsapp_config field to google_ces_app resource (#​29030)
• cloudrunv2: added template.containers.sandbox_launcher field to google_cloud_run_v2_worker_pool resource (#​29061)
• cloudrunv2: supported explicitly disabling cpu_utilization and concurrency_utilization autoscaling thresholds with 0.0 in google_cloud_run_v2_service (#​29081)
• discoveryengine: added last_user_update_time field to google_discovery_engine_license_config resource (#​29058)
• networkservices: added forward_attributes field to google_network_services_authz_extension (#​29025)
• servicenetworking: added REMOVE_PEERING value to deletion_policy on google_service_networking_connection, which removes the VPC peering when the connection cannot be deleted because service producer resources still use it (#​29036)
• vertexai: added gateway_configs field to google_vertex_ai_semantic_governance_policy_engine (#​29031)
• vertexai: added spec.build_spec.service_account field to google_vertex_ai_reasoning_engine (#​29034)
• vertexai: added spec.deployment_spec.agent_gateway_config field to google_vertex_ai_reasoning_engine (#​29029)
• vertexai: added spec.source_code_spec.agent_config_source field to google_vertex_ai_reasoning_engine (#​29046)
• vertexai: promoted build_spec to GA in google_vertex_ai_reasoning_engine (#​29077)

BUG FIXES:

• clouddeploy: fixed tasks field being silently dropped from predeploy and postdeploy blocks across all strategy variants (#​29035)
• composer: fixed google_composer_user_workloads_secret writing the secret data values into provider debug logs (#​29042)
• container: switched to server side request validation to allow for concurrent Cluster Upgrades. google_container_cluster and google_container_node_pool resources will proceed while not in a resting state for updates (but will continue to wait for one after creates). (#​29068)
• iam: fixed validation of google_iam_workload_identity_pool IDs ending in .svc.id.goog where the base name ends in one of the suffix's characters (#​29072)
• provider: fixed an issue where an invalid credentials value could be echoed back in the error message when it failed to parse (#​29057)
• workstations: fixed unconvertible type error when reading conditions in google_workstations_workstation_config and google_workstations_workstation_cluster (#​29075)

v8.0.0

Compare Source

Terraform Google Provider 8.0.0 Upgrade Guide

BREAKING RESOURCE REMOVALS:

• beyondcorp: removed google_beyondcorp_app_connection, google_beyondcorp_app_connector, and google_beyondcorp_app_gateway resources, and the google_beyondcorp_app_connection, google_beyondcorp_app_connector, and google_beyondcorp_app_gateway data sources. Use google_beyondcorp_security_gateway and google_beyondcorp_security_gateway_application instead. (#​18675)
• iap: removed google_iap_brand and google_iap_client resources, and the google_iap_client data source. (#​18679)
• mlengine: removed google_ml_engine_model resource. Migrate machine learning deployments to google_vertex_ai_endpoint or Vertex AI Model Garden resources. (#​18681)
• notebooks: removed google_notebooks_environment, google_notebooks_instance (and associated IAM resources), and google_notebooks_runtime (and associated IAM resources). Migrate to google_workbench_instance. (#​18583)
• vertexai: removed google_vertex_ai_schedule resource. Use google_colab_schedule instead. (#​18673)

BREAKING FIELD REMOVALS:

• backupdr: removed resource_type argument from google_backup_dr_backup_plan_associations and google_backup_dr_data_source_references data sources. (#​18688)
• cloudrunv2: removed custom_audiences field from google_cloud_run_v2_worker_pool resource. (#​18193)
• cloudrunv2: removed http_get.http_headers.port probe field from google_cloud_run_v2_worker_pool resource. (#​18290)
• compute: removed attachment attribute within logical_structure.*.zones from google_compute_interconnect_attachment_group resource in favor of attachments. (#​18676)
• compute: removed reservation_block_count field from google_compute_reservation resource in favor of resource_status[0].reservation_block_count. (#​18611)
• datalossprevention: removed actions.publish_findings_to_cloud_data_catalog field from google_data_loss_prevention_job_trigger resource in favor of actions.publish_findings_to_dataplex_catalog. (#​18530)
• integrations: removed run_as_service_account argument from google_integrations_client resource. (#​18680)

BREAKING INCREASED VALIDATION:

• bigquerydatatransfer: changed constraint between sensitive_params.0.secret_access_key and sensitive_params.0.secret_access_key_wo from AtLeastOneOf to ExactlyOneOf in google_bigquery_data_transfer_config resource. (#​18325)
• cloudrunv2: made http_get.http_headers.name required when http_get.http_headers is set in google_cloud_run_v2_worker_pool resource. (#​18290)
• iamworkforcepool: made claim_mapping a required field on create in google_iam_workforce_pool_provider_scim_tenant resource. (#​18348)
• monitoring: changed constraint between http_check.0.auth_info.0.password and http_check.0.auth_info.0.password_wo to ExactlyOneOf in google_monitoring_uptime_check_config resource. (#​18325)
• secretmanager: made secret_data_wo_version required when secret_data_wo is set (RequiredWith) in google_secret_manager_secret_version resource. (#​18325)
• workflows: made source_contents a required argument in google_workflows_workflow resource. (#​18411)

OTHER BREAKING CHANGES:

• bigquerydatatransfer: converted sensitive_params.0.secret_access_key_wo_version from Integer to String data type with state migration in google_bigquery_data_transfer_config resource. (#​18731)
• bigquery: removed default_from_api for default_collation in google_bigquery_dataset resource; setting default_collation = "" now explicitly clears collation. (#​18585)
• cloudsecuritycompliance: converted cloud_control_details from list to set in google_cloud_security_compliance_framework resource. (#​18596)
• compute: added default empty strings ("") to project_id_or_num, network_url, and endpoint_url within consumer_accept_lists in google_compute_service_attachment resource to resolve permadiffs. (#​18276)
• compute: changed default value of load_balancing_scheme from EXTERNAL to EXTERNAL_MANAGED in google_compute_backend_service and google_compute_global_forwarding_rule resources. (#​18557)
• compute: updated guest_accelerator in google_compute_instance to plan and apply removal/replacement when count is explicitly set to 0 (or guest_accelerator = []). (#​18426)
• compute: converted nat_subnets and consumer_reject_lists from list to set in google_compute_service_attachment resource. (#​18694)
• container: extended name_prefix max length from 14 to 31 characters in google_container_node_pool and google_container_cluster resources. (#​18477)
• container: converted enable_components in logging_config and monitoring_config from list to set in google_container_cluster resource. (#​18262)
• secretmanager: converted secret_data_wo_version from Integer to String data type with state migration in google_secret_manager_secret_version resource. (#​18325)

v7.46.1

Compare Source

UG FIXES:

• compute: fix permadiff regression when iap is omitted from google_compute_backend_service (#​29156)

7.46.0 (August 25th, 2026)

DEPRECATIONS:

• beyondcorp: deprecated google_beyondcorp_app_connection, google_beyondcorp_app_connector, and google_beyondcorp_app_gateway resources and data sources. Use google_beyondcorp_security_gateway and google_beyondcorp_security_gateway_application instead. (#​28976)

FEATURES:

• New Data Source: google_memorystore_acl_policy (#​28984)
• New Data Source: google_redis_cluster_acl_policy (#​28985)
• New List Resource: google_migration_center_assets_export_job (#​28904)
• New List Resource: google_migration_center_discovery_client (#​28904)
• New List Resource: google_migration_center_group (#​28904)
• New List Resource: google_migration_center_import_job (#​28904)
• New List Resource: google_migration_center_preference_set (#​28904)
• New List Resource: google_migration_center_report_config (#​28904)
• New List Resource: google_migration_center_source (#​28904)
• New List Resource: google_network_services_authz_extension (#​28978)
• New List Resource: google_network_services_multicast_consumer_association (#​28978)
• New List Resource: google_network_services_multicast_domain_activation (#​28978)
• New List Resource: google_network_services_multicast_domain_group (#​28978)
• New List Resource: google_network_services_multicast_domain (#​28978)
• New List Resource: google_network_services_multicast_group_consumer_activation (#​28978)
• New List Resource: google_network_services_multicast_group_producer_activation (#​28978)
• New List Resource: google_network_services_multicast_group_range_activation (#​28978)
• New List Resource: google_network_services_multicast_group_range (#​28978)
• New List Resource: google_network_services_multicast_producer_association (#​28978)
• New Resource: google_memorystore_acl_policy (#​28984)
• New Resource: google_redis_cluster_acl_policy (#​28985)

IMPROVEMENTS:

• biglake: added serde_info field to google_biglake_table resource (#​28990)
• ces: added connector_toolset and timeout fields to google_ces_toolset resource (#​28903)
• compute: added write-only arguments for IAP oauth2_client_id and oauth2_client_secret to google_compute_backend_service resource (#​28809)
• discoveryengine: made google_discovery_engine_search_engine search_engine_config.required_subscription_tier updatable (#​28991)
• securesourcemanager: added PULL_REQUEST_COMMENT enum to events field in google_secure_source_manager_hook (#​28907)
• sql: added replication_lag_max_seconds to google_sql_database_instance (#​28813)

BUG FIXES:

• compute: fixed truncation of results at 500 images in google_compute_images data source (#​28909)
• container: fixed a permadiff on enable_private_endpoint and master_global_access_config.enabled in google_container_cluster when control_plane_endpoints_config.ip_endpoints_config.enabled is set to false (#​28981)
• sql: fixed google_sql_user returning Missing Resource Identity After Read when the parent Cloud SQL instance is stopped (#​28977)

7.45.0 (August 18, 2026)

FEATURES:

• New Data Source: google_iam_workload_identity_pool_openid_config (#​28790)
• New Resource: google_agentic_applications_analyst_agent_persona (#​28777)
• New Resource: google_firestore_change_stream (#​28800)

IMPROVEMENTS:

• accesscontextmanager: added dry_run_access_levels and principal fields to google_access_context_manager_gcp_user_access_binding resource (#​28767)
• accesscontextmanager: updated group_key to be optional and conflict with principal on google_access_context_manager_gcp_user_access_binding resource (#​28767)
• bigqueryreservation: added labels field to google_bigquery_reservation resource (#​28711)
• certificatemanager: enabled write-only support for pem_private_key on google_certificate_manager_certificate resource (#​28794)
• ces: added snippets_config field to data_store_tool.modality_configs and service_directory_config field to python_function in google_ces_tool (#​28759)
• chronicle: added schedule_customizations field to google_chronicle_rule_deployment resource (#​28715)
• cloudrunv2: added templates.sandboxes field to google_cloud_run_v2_service resource (#​28749)
• colab: added custom_environment_spec.shielded_instance_config and workbench_runtime.vm_image fields to google_colab_notebook_execution resource (#​28774)
• compute: added custom_error_response_policy and default_error_response_policy fields to google_compute_url_map resource (#​18511)
• compute: promoted max_run_duration and on_instance_stop_action fields on google_compute_instance, google_compute_instance_template, and google_compute_instance_from_machine_image resources (#​18623)
• dataplex: added sql_assertion field to google_dataplex_datascan resource (#​18559)
• netapp: added zone and replica_zone fields to google_netapp_storage_pool resource (#​18609)
• securityscanner: added static_ip_scan field to google_security_scanner_scan_config resource (#​28786)
• vertexai: added spec.container_spec.port field to google_vertex_ai_reasoning_engine resource (#​28762)
• workbench: added compute_instance_id field to google_workbench_instance resource (#​28773)

BUG FIXES:

• alloydb: fixed an issue where updateMask URL parameter was dropped during cluster updates (e.g. database_version upgrade) due to variable shadowing (#​28801)
• appengine: fixed permadiff in google_app_engine_standard_app_version (#​28745)
• bigquery: fixed an issue where updating google_bigquery_dataset overwrote fine-grained IAM permissions (#​28775)
• cloudsecuritycompliance: fixed state drift on supported_enforcement_modes in google_cloud_security_compliance_framework resource (#​28676)
• colab: fixed drift detection on direct_notebook_source.content field in google_colab_notebook_execution resource (#​28774)
• compute: fixed a panic in google_compute_shared_vpc_service_project during terraform plan/refresh when the shared VPC link had been removed outside of Terraform (#​28750)
• compute: fixed permadiff on adaptive_protection_config.layer_7_ddos_defense_config.enable in google_compute_security_policy when field is not set in config (#​28751)
• compute: fixed permadiffs for google_compute_disk on Fedora CoreOS images (#​28712)
• networksecurity: fixed google_network_security_gateway_security_policy to force replacement when name or location is modified (#​28776)

7.44.0 (August 11, 2026)

FEATURES:

• New List Resource: google_bigquery_dataset_iam_member (#​28578)
• New List Resource: google_bigquery_table (#​28576)
• New Resource: google_chronicle_custom_list (#​28618)
• New Resource: google_chronicle_soar_network (#​28649)
• New Resource: google_dataform_repository (#​28642)
• New Resource: google_dataform_repository_iam_binding (#​28642)
• New Resource: google_dataform_repository_iam_member (#​28642)
• New Resource: google_dataform_repository_iam_policy (#​28642)
• New Resource: google_iam_folder_access_policy (#​28664)
• New Resource: google_iam_organization_access_policy (#​28664)
• New Resource: google_iam_project_access_policy (#​28664)
• New Resource: google_vertex_ai_evaluation_metric (#​28665)

IMPROVEMENTS:

• bigquery: added resource identity support to google_bigquery_table (#​28574)
• compute: promoted host_error_timeout_seconds field in google_compute_instance, google_compute_instance_template and google_compute_region_instance_template to GA (#​28671)
• container: added high_scale_checkpointing_config block to addons_config in google_container_cluster (#​28669)
• dataproc: added attached_disk_config to disk_config to support attached disks in the google_dataproc_cluster resource (#​28590)
• memorystore: documented TOKEN_AUTH as a google-beta-only value for authorization_mode field on google_memorystore_instance resource (#​28584)
• networkservices: added allow_global_access field to google_network_services_gateway (#​28589)
• oracledatabase: added identity_connector to google_oracle_database_exadb_vm_cluster for CMEK support (#​28615)
• securesourcemanager: added service_account and scan_config fields to google_secure_source_manager_repository (#​28662)
• sql: added password_secret_version and user fields into google_sql_provision_script resource (#​28619)
• sql: removed ForceNew config from disk_type field in google_sql_database_instance, allowing it to change in future without requiring the database instance to be destroyed and recreated (#​28616)

BUG FIXES:

• backupdr: fixed issue where google_backup_dr_restore_workload dropped resource_manager_tags during restore requests, causing tags shown in plan to not be applied to restored resources (#​28586)
• biglakeiceberg: fixed a permadiff in google_biglake_iceberg_table by suppressing diffs on location when the API-returned path contains a suffix folder (#​28577)
• biglakeiceberg: fixed permadiff on write.parquet.compression-codec in google_biglake_iceberg_table (#​28650)
• bigquery: fixed a provider panic when reading incomplete IAM conditions on google_bigquery_dataset_iam_member (#​28617)
• cloudrunv2: fixed permadiff by setting template.scaling.max_instance_count to computed in google_cloud_run_v2_service (#​28644)
• cloudrunv2: fixed permadiff in template.containers.resources.limits block in google_cloud_run_v2_service resource (#​28670)
• cloudsecuritycompliance: fixed state drift on supported_enforcement_modes in google_cloud_security_compliance_framework resource (#​28676)
• container: fixed a permadiff where ignore_node_count_changes was not persisted in google_container_cluster.node_pool (#​28573)
• container: fixed an issue where google_container_node_pool and google_container_cluster failed to invalidate their Instance Group Manager cache when a resize occurred or when ignore_node_count_changes was active (#​28585)
• networkconnectivity: made network field in google_network_connectivity_transport optional (#​28639)
• recaptchaenterprise: fixed updates to google_recaptcha_enterprise_key so existing challenge_settings.action_settings entries are preserved when the action map changes (#​28673)
• servicenetworking: fixed google_service_networking_connection ignoring the configured delete timeout, which used the create timeout instead (#​28641)

7.43.0 (August 4, 2026)

NOTES:

• docs(workflows): added warning to source_contents field on google_workflows_workflow noting that it will become required in version 8.0.0 (#​28524)
• firestore: clarified which resource to use for which kind of index in Standard and Enterprise editions (#​28529)

FEATURES:

• New List Resource: google_compute_instance (#​28548)
• New List Resource: google_discovery_engine_assistant (#​28525)
• New List Resource: google_discovery_engine_chat_engine (#​28525)
• New List Resource: google_discovery_engine_cmek_config (#​28525)
• New List Resource: google_discovery_engine_control (#​28525)
• New List Resource: google_discovery_engine_data_store (#​28525)
• New List Resource: google_discovery_engine_license_config (#​28525)
• New List Resource: google_discovery_engine_recommendation_engine (#​28525)
• New List Resource: google_discovery_engine_schema (#​28525)
• New List Resource: google_discovery_engine_search_engine (#​28525)
• New List Resource: google_discovery_engine_serving_config (#​28525)
• New List Resource: google_discovery_engine_sitemap (#​28525)
• New List Resource: google_discovery_engine_target_site (#​28525)
• New List Resource: google_discovery_engine_user_store (#​28525)
• New List Resource: google_project_iam_custom_role (#​28526)
• New List Resource: google_pubsub_subscription_iam_member (#​28549)
• New List Resource: google_service_account_iam_member (#​28553)
• New Resource: google_cloud_support_support_event_subscription (#​28517)
• New Resource: google_compute_region_network_policy_traffic_classification_rule (#​28504)
• New Resource: google_netapp_trial (#​28503)
• New Resource: google_network_connectivity_gateway_advertised_route GA promotion (#​28471)

IMPROVEMENTS:

• apigee: added service_account field to google_apigee_api_deployment resource (#​28552)
• apihub: added source_project_id field to google_apihub_plugin_instance resource (#​28530)
• artifactregistry: added no_cache field to google_artifact_registry_repository.remote_repository_config (#​28506)
• bigquery: added data_governance_tags_info field to google_bigquery_table resource (#​28532)
• bigqueryanalyticshub: added proposer field to google_bigquery_analytics_hub_query_template (#​28518)
• bigqueryanalyticshub: promoted google_bigquery_analytics_hub_query_template to GA (#​28518)
• bigquerydatapolicyv2: added data_governance_tag field to google_bigquery_datapolicyv2_data_policy resource (#​28463)
• bigqueryreservation: added principal field to google_bigquery_reservation_assignment resource (#​28508)
• cloudrunv: added sandbox_launcher field to the containers of google_cloud_run_service resource (#​28521)
• cloudrunv2: added sandbox_launcher field to the containers of google_cloud_run_v2_service resource (#​28521)
• compute: promoted ncc_gateway field in google_compute_router to GA (#​28471)
• discoveryengine: added acl_enabled field to google_discovery_engine_data_store resource (#​28465)
• networkconnectivity: promoted gateway field in google_network_connectivity_spoke to GA (#​28471)
• privateca: made config.subject_config.subject.organization optional in google_privateca_certificate (#​28464)
• vertexai: added traffic_config field and live traffic split update support to google_vertex_ai_reasoning_engine (#​28473)

BUG FIXES:

• apigee: fixed continue_on_error argument being dropped in google_apigee_flowhook, aligning provider behavior with the Apigee API (#​28554)
• compute: fixed panic when setting scheduling attributes in google_compute_region_instance_template (ga) (#​28467)
• gkehub2: made field spec.workloadidentity.scopeTenancyPool in resource google_gke_hub_feature not required. ([#​28472](https://redirect.git

❗ Important

✂ PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun