deps: Update Terraform google-beta to v7

[renovate-bot]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change
google-beta (source)	required_provider	major	6.50.0 → 7.40.0

---

Release Notes

hashicorp/terraform-provider-google-beta (google-beta)

v7.40.0

Compare Source

EPRECATIONS:

• storage: the admit-on-second-miss value for google_storage_anywhere_cache.admission_policy is deprecated and will be removed in a future major release. The backend will ignore this attribute and treat it as admit-on-first-miss. (#​12632)

NOTES:

• compute: migrated google_compute_instance code related to advanced machine features to use direct HTTP rather than a client library (#​12610)

FEATURES:

• New Data Source: google_data_catalog_taxonomy (#​12655)
• New Data Source: google_oracle_database_exascale_db_storage_vault (#​12664)
• New List Resource: 'google_project' (#​12602)
• New List Resource: google_compute_instant_snapshot (#​12661)
• New List Resource: google_compute_region_instant_snapshot (#​12661)
• New List Resource: google_compute_region_target_http_proxy (#​12661)
• New List Resource: google_compute_region_target_tcp_proxy (#​12661)
• New List Resource: google_compute_region_url_map (#​12661)
• New List Resource: google_compute_rollout_plan (#​12661)
• New List Resource: google_compute_target_grpc_proxy (#​12661)
• New List Resource: google_compute_target_http_proxy (#​12661)
• New List Resource: google_compute_target_ssl_proxy (#​12661)
• New List Resource: google_compute_target_tcp_proxy (#​12661)
• New List Resource: google_dns_managed_zone (#​12662)
• New List Resource: google_oracle_database_exascale_db_storage_vaults (#​12664)
• New Resource: google_bigquery_analytics_hub_query_template (#​12669)
• New Resource: google_chronicle_environment_group (#​12627)
• New Resource: google_chronicle_soar_domain (#​12635)
• New Resource: google_container_recurring_maintenance_window (#​12647)
• New Resource: google_iap_agent_registry_agent_iam_binding (#​12651)
• New Resource: google_iap_agent_registry_agent_iam_member (#​12651)
• New Resource: google_iap_agent_registry_agent_iam_policy (#​12651)
• New Resource: google_iap_agent_registry_endpoint_iam_binding (#​12641)
• New Resource: google_iap_agent_registry_endpoint_iam_binding (#​12651)
• New Resource: google_iap_agent_registry_endpoint_iam_member (#​12641)
• New Resource: google_iap_agent_registry_endpoint_iam_member (#​12651)
• New Resource: google_iap_agent_registry_endpoint_iam_policy (#​12641)
• New Resource: google_iap_agent_registry_endpoint_iam_policy (#​12651)
• New Resource: google_iap_agent_registry_mcp_server_iam_binding (#​12651)
• New Resource: google_iap_agent_registry_mcp_server_iam_member (#​12651)
• New Resource: google_iap_agent_registry_mcp_server_iam_policy (#​12651)
• New Resource: google_tags_tag_binding_collection (#​12619)
• New Resource: google_vector_search_index (#​12656)
• New Resource: google_vertex_ai_semantic_governance_policy_engine (#​12624)
• New Resource: google_chronicle_data_export (#​12657)

IMPROVEMENTS:

• agentregistry: added name field to google_agent_registry_binding resource (#​12629)
• agentregistry: added name field to google_agent_registry_service resource (#​12629)
• appengine: added app_engine_bundled_services field to google_app_engine_standard_app_version resource (#​12634)
• biglakeiceberg: add support for CATALOG_TYPE_FEDERATED with federated_catalog_options to google_biglake_iceberg_catalog (#​12659)
• compute: added target_type and target_forwarding_rules to google_compute_region_network_firewall_policy_with_rules resource (#​12607)
• compute: added workload_identity_config fields to resource_compute_instance and resource_compute_instance_template resources (#​12670)
• container: added ANY_RESERVATION_THEN_FAIL option to consume_reservation_type field in google_container_cluster and google_container_node_pool resources (#​12606)
• container: added custom_node_init configuration block to node_config (supporting Cloud Storage and Secret Manager) for both google_container_cluster and google_container_node_pool resources. (#​12666)
• container: added maintenance_policy field to google_container_node_pool resource (#​12638)
• dataplex: added catalog_publishing_enabled field to google_dataplex_datascan resource (#​12652)
• dlp: added inspect_config.min_likelihood_per_info_type to google_data_loss_prevention_inspect_template (#​12654)
• firestore: added skip_wait field to google_firestore_field resource, skipping the wait for index creation (#​12642)
• oracledatabase: added support for configuring Exascale-based VM clusters on top of dedicated storage vaults via the exascale_db_storage_vault parameter and storage_management_type to determine if VM Cluster is ASM or EXASCALE in google_oracle_database_cloud_vm_cluster (#​12626)
• oracledatabase: added exadata_infrastructure field to google_oracle_database_exascale_db_storage_vault resource (#​12616)
• oracledatabase: added exascale_db_storage_vault and storage_management_type fields to google_oracle_database_cloud_vm_clusters data source (#​12664)
• sql: added enforce_new_sql_network_architecture field to google_sql_database_instance resource (#​12653)
• sql: added psc_auto_connection_policy_enabled field and output-only service_connection_policy and service_connection_policy_creation_result fields to google_sql_database_instance resource (#​12645)
• storagetransfer: added private_network_service to resource google_storage_transfer_job (#​12617)
• vertex_ai: added customization_configs and structured_memory_configs fields to google_vertex_ai_reasoning_engine resource (#​12618)
• vertexai: added traffic_config, url, agent_server_mode, agent_gateway_config, keep_alive_probe, dedicated_ingress_endpoint_enabled, agent_config_source, agent_card, example_store, build_spec, traffic_config, and example_store_config fields to google_vertex_ai_reasoning_engine (#​12671)

BUG FIXES:

• bigtable: fixed a bug where row_affinity updates did not persist on google_bigtable_app_profile (#​12636)
• bug: fixed labels diff in google_project (#​12649)
• chronicle: added retries for "409: sync mutate calls cannot be queued" error for google_cloud_scheduler_job (#​12637)
• cloudscheudler: added retries for the Cloud Scheduler "409: sync mutate calls cannot be queued" error on Scheduler's Job resource mutations. (#​12613)
• compute: fixed an issue where preview = false updates for google_compute_organization_security_policy_rule were omitted from API requests. (#​12643)
• compute: fixed bug where it wasn't possible to disable enable_proxy_protocol on google_compute_service_attachment resource (#​12668)
• datastream: fixed a bug in update functionality in google_datastream_connection_profile mongodb_profile.additional_options (#​12660)
• eventarc: fixed a type mismatch when an google_eventarc_trigger resource returns non-empty conditions. (#​12646)
• filestore: aligned google_filestore_instance resource timeouts with the Filestore service instance operations TTLs (#​12630)
• gemini: fixed truncated timeouts in google_gemini_code_tools_setting, google_gemini_data_sharing_with_google_setting_binding, google_gemini_gemini_gcp_enablement_setting_binding, and google_gemini_release_channel_setting_binding (#​12640)
• hypercomputecluster: fixed 20-minute timeout limit during google_hypercomputecluster_cluster resource creation (#​12621)
• logging: fixed an issue where errors on update would not be propagated in google_logging_project_bucket_config (#​12603)
• observability: fixed unintentionally long timeouts in google_observability_folder_settings, google_observability_organization_settings, and google_observability_project_settings (#​12640)
• oracledatabase: fixed early client-side timeouts and aligned default schema timeouts with backend async polling limits on google_oracle_database_exadb_vm_cluster, google_oracle_database_odb_network, google_oracle_database_odb_subnet, google_oracle_database_goldengate_connection, google_oracle_database_goldengate_deployment, and google_oracle_database_goldengate_connection_assignment. (#​12648)
• oracledatabase: fixed truncated timeouts in google_oracle_database_exadb_vm_cluster, google_oracle_database_goldengate_connection, and google_oracle_database_odb_subnet (#​12640)
• privilegedaccessmanager: fixed a permadiff on google_privileged_access_manager_entitlement for entitlements created without an approval workflow (#​12644)
• provider: fixed validation of external_credentials.identity_token to reject malformed JWTs containing empty segments (#​12663)

7.37.0 (June 16, 2026)

NOTES:

• compute: migrated EnableDisplay fields in google_compute_instance resources to use direct HTTP rather than a client library (#​12456)
• compute: migrated desired_status block and startInstanceOperation in resource_compute_instance.go.tmpl to use direct HTTP rather than a client library (#​12437)
• compute: migrated getInstance, getDisk, Delete and the setMetadata update block in resource_compute_instance.go.tmpl to use direct HTTP rather than a client library (#​12418)
• compute: migrated part of google_compute_instance to use direct HTTP rather than a client library (#​12463)

DEPRECATIONS:

• cloudrunv2: deprecated http_get.http_headers.port field in container startup probe and liveness probe in google_cloud_run_v2_worker_pool resource because it is not supported in Cloud Run API. This field will be removed in a future major release. (#​12476)
• cloudsecuritycompliance: deprecated the organization field on google_cloud_security_compliance_cloud_control, google_cloud_security_compliance_framework, and google_cloud_security_compliance_framework_deployment. Use parent instead (#​12449)
• networkservices: deprecated protocols on google_network_services_agent_gateway (#​12478)

FEATURES:

• New Data Source: google_oracle_database_goldengate_deployment_versions (#​12451)
• New Data Source: google_storage_control_project_intelligence_finding (#​12444)
• New Data Source: google_storage_control_project_intelligence_findings (#​12444)
• New Resource: google_chronicle_parser (#​12477)
• New Resource: google_chronicle_soar_network (#​12439)
• New Resource: google_migration_center_import_data_file (#​12423)
• New Resource: google_network_services_agent_gateway (#​12479)
• New Resource: google_vertex_ai_tensorboard_experiment (#​12472)
• New List Resource: google_bigquery_dataset_access (#​12441)
• New List Resource: google_cloud_scheduler_job (#​12441)
• New List Resource: google_dns_record_set (#​12467)
• New List Resource: google_monitoring_alert_policy (#​12441)
• New List Resource: google_pubsub_subscription (#​12441)

IMPROVEMENTS:

• apigee: added new resource google_apigee_environment_debugmask for managing Apigee environment debug masks (#​12421)
• backupdr: added support for use_project_service_account flag in google_backup_dr_restore_workload disk and compute restores (#​12473)
• cloudrunv2: added http_get.http_headers.name field to container startup probe and liveness probe in google_cloud_run_v2_worker_pool resource (#​12476)
• cloudrunv2: added template.client and template.client_version fields to google_cloud_run_v2_worker_pool resource (#​12440)
• cloudsecuritycompliance: added support for project parent to google_cloud_security_compliance_cloud_control, google_cloud_security_compliance_framework, and google_cloud_security_compliance_framework_deployment via the new parent field. The organization field has been deprecated. (#​12449)
• compute: added params.resource_manager_tags field to google_compute_reservation resource (#​12450)
• compute: added data sources for google_compute_target_http_proxy, google_compute_target_https_proxy, google_compute_region_target_http_proxy, and google_compute_region_target_https_proxy (#​12447)
• container: added addons_config.slurm_operator_config field to google_container_cluster resource (#​12445)
• container: added node_image_config field to google_container_node_pool and google_container_cluster resources (#​12470)
• databasemigrationservice: added state and stop_on_warnings fields to google_database_migration_service_migration_job resource (#​12430)
• dns: added resource identity support for google_dns_record_set resource (#​12467)
• networksecurity: added network_rules field on google_network_security_authz_policy resource (#​12488)
• pubsub: added first_revision_id and last_revision_id fields to google_pubsub_topic resource (#​12420)
• sql: added settings.ip_configuration.psc_config.psc_auto_dns_enabled and settings.ip_configuration.psc_config.psc_write_endpoint_dns_enabled fields to google_sql_database_instance resource (#​12454)

BUG FIXES:

• apigee: fixed google_apigee_api not detecting local bundle changes due to a missing default on detect_md5hash, and fixed the test sweeper's list URL (#​12466)
• apigee: fixed google_apigee_security_action update failure by enabling PATCH-based updates now that the Apigee Security Actions API supports mutations (#​12448)
• apigee: fixed a perma-diff for api_products and scopes fields in google_apigee_developer_app resource when updating them with multiple items (#​12464)
• apigee: fixed an issue where the resource would attempt recreation if the key_expires_in field was set in google_apigee_developer_app resource (#​12457)
• backupdr: updated the Beta provider to point to the v1beta API endpoint (#​12461)
• ces: fixed persistent diff in google_ces_guardrail when llm_prompt_security is configured with default_settings (#​12446)
• cloudrun: fixed a permadiff for the run.googleapis.com/gpu-zonal-redundancy-disabled annotation in google_cloud_run_service (#​12462)
• cloudrunv2: fixed bug where only one http_get.http_headers block could be specified in container startup probe and liveness probe in google_cloud_run_v2_worker_pool resource (#​12476)
• compute: fixed an issue in google_compute_subnetwork where secondary_ip_range entries linked to an internal_range could not be removed and adding new ranges would sometimes fail due to positional shifts (#​27175) (#​12422)
• compute: fixed diff when using existing_reservations field in google_region_commitment (#​12453)
• compute: fixed rules in google_compute_security_policy being unnecessarily recreated due to TypeSet hash instability (#​12436)
• sql: fixed inconsistent result after apply error when adding users of type CLOUD_IAM_GROUP with capitalized domain names for MySQL (#​12460)
• storage: fixed OOM issue for google_storage_bucket force_destroy by limiting the number of outstanding tasks to 2000 (#​12455)

7.36.0 (June 9, 2026)

FEATURES:

• New Data Source: google_apigee_instance (#​12393)
• New Data Source: google_oracle_database_goldengate_deployment_types (#​12361)
• New Resource: google_apigee_datastore (#​12358)
• New Resource: google_chronicle_customlist (#​12378)
• New Resource: google_chronicle_environment (#​12385)
• New Resource: google_chronicle_findings_refinement (#​12348)
• New Resource: google_discovery_engine_search_engine_iam_binding (#​12409)
• New Resource: google_iam_organization_access_policy (#​12398)
• New Resource: google_license_manager_configuration (#​12413)
• New Resource: google_migration_center_import_job (#​12351)
• New List Resource: google_compute_disk (#​12359)
• New List Resource: google_compute_image (#​12359)
• New List Resource: google_compute_snapshot (#​12359)
• New List Resource: google_storage_hmac_key (#​12364)

IMPROVEMENTS:

• accesscontextmanager: added in-place update for egress_from and egress_to fields in google_access_context_manager_service_perimeter_egress_policy resource (#​12397)
• accesscontextmanager: added in-place update for egress_from and egress_to fields in google_access_context_manager_service_perimeter_ingress_policy resource (#​12397)
• bigquery: added IAM support (google_bigquery_routine_iam_policy, google_bigquery_routine_iam_binding, google_bigquery_routine_iam_member) for google_bigquery_routine (#​12410)
• bigtable: added automated_backup_policy.locations field in google_bigtable_table resource (#​12365)
• ces: added agent_tool, file_search_tool, and widget_tool support to the google_ces_tool resource (#​12392)
• ces: added google_search_tool.prompt_config and data_store_tool.data_store_source fields in google_ces_tool resource (#​12392)
• ces: exposed remote_agent_tool, connector_tool, and mcp_tool as read-only (output-only) attributes in google_ces_tool (#​12392)
• container: added node_creation_config field to google_container_cluster resource (#​12408)
• container: added node_drain_config.pdb_timeout_duration and node_drain_config.grace_termination_duration fields to google_container_node_pool and google_container_cluster resources (#​12401)
• data_catalog: added RICHTEXT to allowed values of primitive_type on google_data_catalog_tag_template fields. (#​12383)
• dataform: added disabled field to google_dataform_repository_workflow_config resource (#​12394)
• dataplex: added IAM support for google_dataplex_data_product (iam_policy, iam_binding, iam_member) (#​12371)
• dataplex: added access_approval_config field to google_dataplex_data_product (#​12371)
• firebaseailogic: added regional_propagation_disabled field to google_firebase_ai_logic_prompt_template and google_firebase_ai_logic_prompt_template_lock resources (#​12349)
• hypercomputecluster: marked network_resources field as required in google_hypercomputecluster_cluster resource to align with API validation (#​12374)
• securesourcemanager: added psc_allowed_projects field to google_secure_source_manager_instance resource (#​12402)
• securityscanner: added ignore_http_status_errors field to google_security_scanner_scan_config resource (#​12352)
• workbench: added NVIDIA_RTX6000 to the supported gce_setup.accelerator_configs.type values on google_workbench_instance (#​12415)

BUG FIXES:

• apigee: send zero values for ip_header_index in google_apigee_environment (#​12381)
• backupdr: fixed an issue where google_backup_dr_restore_workload did not use the correct API JSON names for networking/reservation fields (#​12391)
• compute: fixed an issue where updating connection_limit in the consumer_accept_lists block of google_compute_service_attachment would not trigger a resource update. (#​12395)
• compute: fixed regional backend reference in google_compute_regional_url_map (#​12411)
• dlp: fixed error when reading google_data_loss_prevention_discovery_config caused by nested error details (#​12380)
• firebaseailogic: fixed perma-diff in google_firebase_ai_logic_config template_only field on google_firebase_ai_logic_config resource (#​12375)
• sql: fixed permadiff on connection_pool_config when connection_pooling_enabled is set to false (#​12417)
• storage: fixed missing identity error when updating values in google_storage_bucket resource (#​12356)
• tags: fixed google_tags_location_tag_binding failing with Operation location does not match service location 'global' during creation (#​12379)
• vertexai: fixed terraform import of google_vertex_ai_index_endpoint_deployed_index failing with "Cannot determine region" when provider-level region/zone is unset (#​12399)

7.35.0 (June 2, 2026)

FEATURES:

• New Data Source: google_oracle_database_goldengate_connection_types (#​12329)
• New Resource: google_ces_security_settings (#​12327)
• New Resource: google_chronicle_findings_refinement (#​12348)
• New Resource: google_iam_folder_access_policy (#​12326)
• New Resource: google_iam_project_access_policy (#​12317)
• New Resource: google_migration_center_discovery_client (#​12333)
• New Resource: google_migration_center_report (#​12322)
• New Resource: google_oracle_database_goldengate_connection_assignment (#​12328)
• New Resource: google_oracle_database_goldengate_connection (#​12344)
• New Resource: google_oracle_database_goldengate_deployment (#​12336)
• New List Resource: google_compute_firewall (#​12323)
• New List Resource: google_compute_global_address (#​12323)
• New List Resource: google_compute_subnetwork (#​12323)
• New List Resource: google_sql_database (#​12325)

IMPROVEMENTS:

• compute: added params.resource_manager_tags field to google_compute_future_reservation resource (beta) (#​12332)
• compute: added target_type and target_forwarding_rules fields to google_compute_network_firewall_policy_rule resource (#​12314)
• container: added crash_loop_back_off.max_container_restart_period field to google_container_node_pool and google_container_cluster resources (#​12335)
• container: added additional value KCP_VPA for logging_config.enable_components field to google_container_cluster resource (#​12320)
• dataplex: added service_account support to google_dataplex_data_product access group principals (#​12345)
• firestore: added ttl_config.expiration_offset field to google_firestore_field resource (#​12346)
• netapp: marked ontap_source.snapshot_uuid field as Computed in google_netapp_backup resource (#​12341)
• networkmanagement: added gke_pod and network_type fields to google_network_management_connectivity_test resource (#​12342)

BUG FIXES:

• resourcemanager: fixed a bug where ephemeral google_service_account_key failed on deletion if the parent service account had already been deleted (#​12316)
• storage: fixed missing identity error when updating values in google_storage_bucket (#​12356)

7.34.0 (May 27, 2026)

NOTES:

• compute: migrated google_compute_region_instance_template to use direct HTTP rather than a client library (#​27471)
• compute: migrated google_compute_instance_group_manager resource to use direct HTTP rather than a client library (#​27441)

FEATURES:

• New Data Source: google_compute_service_attachment (#​12305)
• New Data Source: google_oracle_database_goldengate_deployment_environments (#​12287)
• New Resource: google_config_deployment (#​12254)
• New Resource: google_dialogflow_sip_trunk (#​12268)
• New Resource: google_migration_center_assets_export_job (#​12266)
• New Resource: google_migration_center_report_config (#​12243)
• New Resource: google_migration_center_settings (#​12265)
• New Resource: google_migration_center_source (#​12284)

IMPROVEMENTS:

• bigtable: added edition field to google_bigtable_instance resource (#​12294)
• ces: added fail_open field to llm_prompt_security block in google_ces_guardrail resource (#​12285)
• ces: added read-only fail_open field to llm_prompt_security block in google_ces_app_version resource (#​12285)
• compute: added alias_ipv6 field to google_compute_instance and google_compute_instance_template (beta) (#​12288)
• compute: added ipVersion and ipCollection fields to secondaryIpRange field in google_compute_subnetwork resource (#​12249)
• compute: added post_quantum_key_exchange field to google_compute_ssl_policy and google_compute_region_ssl_policy resources (#​12276)
• compute: added support in the google_compute_network datasource for looking up a network by self_link in addition to name ([#​27509]
• container: added agent_sandbox_config field to google_container_cluster resource (#​12279)
• container: added node_config.gpudirect_strategy and node_pool.node_config.gpudirect_strategy to cluster resource, added node_config.gpudirect_strategy to node_pool resource (#​12283)
• dataflow: added create_ignore_already_exists field to google_dataflow_flex_template_job resource to handle 409 conflicts (#​12274)
• datafusion: added maintenance_policy field to google_data_fusion_instance resource (#​12269)
• dialogflow: added sip_config field to google_dialogflow_conversation_profile resource (beta) (#​12259)
• firebasestorage: added bucket.bucket_id field to google_firebase_storage_default_bucket resource (beta) (#​12297)
• iam: add resource identity support for iam_member resources (#​12236)
• networkconnectivity: promoted google_network_connectivity_transport resource to GA (#​12256)
• oracledatabase: added identity_connector to google_oracle_database_cloud_vm_cluster for CMEK support (#​12252)
• project: add Resource Identity support to google_project_iam_binding (#​12290)
• project: add Resource Identity support to google_project_iam_policy (#​12291)
• sql: promoted Hyperdisk fields, data_disk_provisioned_iops and data_disk_provisioned_throughput to GA (#​12253)

BUG FIXES:

• bigtable: fixed an issue where bigtable_custom_endpoint and universe_domain were ignored when creating Bigtable resources. (#​12300)
• compute: fixed an issue in google_compute_subnetwork where secondary_ip_range entries linked to an internal_range could not be removed and adding new ranges would sometimes fail due to positional shifts (#​27175) (#​12298)
• compute: marked encryption keys as immutable and sensitive across compute and backupdr resources (#​12295)
• dialogflow: corrected AUDIOENCODING_SPEEX_WITH_HEADER_BYTE ENUM value to AUDIO_ENCODING_SPEEX_WITH_HEADER_BYTE for audio_encoding field in google_dialogflow_conversation_profile resource (#​12259)
• resourcemanager: resolved a one-time diff for deletion_policy that would occur on existing and imported google_project_service resources following upgrading to v7.32.0 (#​12281)

7.33.0 (May 19, 2026)

NOTES:

• compute: migrate google_compute_target_pool resource to use direct HTTP rather than a client library (#​12212)
• compute: migrated google_compute_instance_group_manager resource to use direct HTTP rather than a client library (#​12206)
• compute: migrated google_compute_project_default_network_tier resource to use direct HTTP rather than a client library (#​12201)
• compute: migrated google_compute_router_status data source to use direct HTTP rather than a client library (#​12174)
• compute: migrated google_compute_instance_group_manager resource to use direct HTTP rather than a client library (#​12216)
• compute: partially migrated google_compute_instance resource to use direct HTTP rather then a client library (#​12205)

FEATURES:

• New Data Source: google_logging_log_view (#​12226)
• New Resource: google_apigee_data_collector (#​12190)
• New Resource: google_contact_center_insights_encryption_spec (#​12225)

IMPROVEMENTS:

• backupdr: added guest_flush field to google_backup_dr_backup_plan resource and google_backup_dr_backup data source. (#​12229)
• backupdr: added guest_flush field to google_backup_dr_backup_plan resource and google_backup_dr_backup data source. (#​12230)
• ces: added security_settings field to google_ces_deployment resource (#​12227)
• ces: added tool_execution_mode field to google_ces_app resource (#​12221)
• compute: added stabilization_period field to google_compute_autoscaler and google_compute_region_autoscaler resources (#​12232)
• compute: added support for "ARP_BROADCAST_PRIMARY_RANGE" values to the resolve_subnet_mask field in google_compute_subnetwork resource (#​12176)
• compute: added support for "GCE_VM_IP_DEDICATED_BACKEND" to the network_endpoint_type field in google_compute_network_endpoint_group resource (#​12176)
• compute: migrated data_source_google_compute_regions to use direct HTTP rather than a client library (#​12202)
• container: added pod_snapshot_config field to google_container_cluster resource (GA) (#​12196)
• container: added secret_sync_config field to google_container_cluster resource (ga) (#​12215)
• databasemigrationservice: added database and private_connectivity fields to google_database_migration_service_connection_profile resource (#​12203)
• databasemigrationservice: added postgres_homogeneous_config field to google_database_migration_service_migration_job resource (#​12203)
• databasemigrationservice: added psc_interface_config field to google_database_migration_service_private_connection resource (#​12184)
• hypercomputecluster: added terminal_storage_class and per_unit_storage_throughput fields to the google_hypercomputecluster_cluster resource (#​12234)
• netapp: added ontap_source field to google_netapp_backup resource (beta) (#​12231)
• provider: support for a deletion_policy field has been added to almost all resources in the provider. Details on its usage can be found within individual resource documentation if supported. (#​12183)
• storagebatchoperations: added description field to google_storage_batch_operations_job resource (#​12207)
• workstations: added workstation_authorization_url and workstation_launch_url fields to the google_workstations_workstation_cluster resource. (#​12185)

BUG FIXES:

• apigee: fixed forced replacement when importing google_apigee_sharedflow_deployment resource, where service_account read as null (#​12228)
• bigqueryconnection: fixed an issue where configuration.authentication.username_password.password.secret_type is not populated and a diff on configuration.authentication.username_password.username after import in google_bigquery_connection resource (#​12179)
• bigqueryreservation: Fixed google_bigquery_reservation_assignment returning a confusing 404 error when reservation is a bare name and location is not set (#​12210)
• ces: updated supported values for channel_type, modality, and theme in google_ces_deployment (#​12227)
• compute: updated google_compute_forwarding_rule resource to properly prompt for resource recreation when updating the target field between different "serviceAttachments", rather than having an in-place update blocked by an API error. (#​12214)
• modelarmor: fixed permadiff and REQUEST_FIELD_MISSING error when template_metadata is omitted from google_model_armor_template (#​12222)
• networkconnectivity: fixed an issue where google_network_connectivity_destination was not recognizing the name field as mapping to an API value (#​12224)
• networkconnectivity: fixed an issue where google_network_connectivity_multicloud_data_transfer_config was not recognizing the name field as mapping to an API value (#​12224)
• resourcemanager: added verification polling to google_service_account updates to ensure the resource is consistent before succeeding (#​12217)

7.32.0 (May 12, 2026)

NOTES:

• compute: migrated google_compute_instance_from_machine resource to use direct HTTP rather than a client library (#​12152)
• compute: migrated google_compute_instance_group_manager resource to use direct HTTP rather than a client library (#​12151)
• compute: migrated google_compute_zones data source to use direct HTTP rather than a client library (#​12153)
• compute: migrated google_compute_project_metadata_item resource to use direct HTTP rather than a client library (#​12117)

FEATURES:

• New Data Source: google_compute_region_instant_snapshot_iam_policy (#​12172)
• New Resource: google_compute_region_instant_snapshot_iam_binding (#​12172)
• New Resource: google_compute_region_instant_snapshot_iam_member (#​12172)
• New Resource: google_compute_region_instant_snapshot_iam_policy (#​12172)
• New Resource: google_compute_region_instant_snapshot (#​12172)

IMPROVEMENTS:

• ces: added scenario field to google_ces_evaluation resource (#​12125)
• compute: added IDPF value to nic_type in resource_compute_instance_template (#​12142)
• compute: added IDPF value to nic_type in resource_compute_instance (#​12142)
• compute: added IDPF value to nic_type in resource_compute_region_instance_template ([#​12142](https://redirect.github.

✂ Note

PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.