Skip to content

deps: Update Terraform google to v8 - #809

Open
renovate-bot wants to merge 1 commit into
GoogleCloudPlatform:mainfrom
renovate-bot:renovate/google-8.x
Open

deps: Update Terraform google to v8#809
renovate-bot wants to merge 1 commit into
GoogleCloudPlatform:mainfrom
renovate-bot:renovate/google-8.x

Conversation

@renovate-bot

@renovate-bot renovate-bot commented Oct 22, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change
google (source) required_provider major 7.16.0 → 8.8.1

Release Notes

hashicorp/terraform-provider-google (google)

v8.8.1

Compare Source

NOTES:

v8.8.0

Compare Source

FEATURES:

  • New Data Source: google_cloud_run_v2_instance_iam_policy (#​29991)
  • New Resource: google_cloud_run_v2_instance (#​29991)
  • New Resource: google_cloud_run_v2_instance_iam_binding (#​29991)
  • New Resource: google_cloud_run_v2_instance_iam_member (#​29991)
  • New Resource: google_cloud_run_v2_instance_iam_policy (#​29991)
  • New Resource: google_dns_outbound_endpoint (#​30018)
  • New Resource: google_document_ai_schema_version (#​29915)

IMPROVEMENTS:

  • accesscontextmanager: added scoped_access_settings.scope.client_scope.restricted_project and principal.federated_principal fields to google_access_context_manager_gcp_user_access_binding resource (#​29964)
  • ces: added data_store_tool.modality_configs.rewriter_config.model_settings.thinking_level and data_store_tool.modality_configs.summarization_config.model_settings.thinking_level fields to google_ces_tool resource (#​29974)
  • ces: added data_store_tool.modality_configs.snippets_config.max_snippets field to google_ces_tool resource (#​29988)
  • ces: added llm_policy.model_settings.thinking_level and llm_prompt_security.custom_policy.model_settings.thinking_level fields to google_ces_guardrail resource (#​29953)
  • ces: added model_settings.thinking_level field to google_ces_app resource (#​29949)
  • ces: added remote_agent_tool.input_variable_mapping, remote_agent_tool.output_variable_mapping, and remote_agent_tool.stateful_agent fields to google_ces_tool resource (#​29966)
  • cloudsecuritycompliance: added update support for google_cloud_security_compliance_framework_deployment (#​29919)
  • compute: promoted preconfigured_waf_config.exclusion.request_body field to GA for google_compute_security_policy_rule and google_compute_region_security_policy_rule, rule.preconfigured_waf_config.exclusion.request_body for google_compute_security_policy, and rules.preconfigured_waf_config.exclusion.request_body for google_compute_region_security_policy (#​29920)
  • container: added MICROVM support to node_config.sandbox_config.type in google_container_cluster and google_container_node_pool (#​29985)
  • container: promoted managed_opentelemetry_config field on google_container_cluster to GA (#​29962)
  • dialogflow: added stt_config.use_gemini_asr and stt_config.gemini_asr_config fields to google_dialogflow_conversation_profile resource (#​29950)
  • dns: added alternative_name_server_config.outbound_endpoints field to google_dns_policy resource (#​30023)
  • dns: added forwarding_config.outbound_endpoints field to google_dns_managed_zone resource (#​30023)
  • gemini: added gemini_enterprise_project and release_channel fields to google_gemini_gemini_gcp_enablement_setting resource (#​29986)
  • managedkafka: increased the update timeout of google_managed_kafka_cluster to 150 minutes (#​29997)
  • memorystore: added TOKEN_AUTH value and update support for authorization_mode on google_memorystore_instance resource (#​30014)
  • networkconnectivity: promoted hub, psc_routing_enabled, and auto_accept fields on google_network_connectivity_transport resource to GA (#​29968)
  • privateca: added issuance_policy.allow_requester_specified_not_before_time field to google_privateca_ca_pool resource (#​29998)
  • privateca: added requested_not_before_time field to google_privateca_certificate resource (#​29998)
  • pubsub: added bigtable_config field to google_pubsub_subscription resource (#​30011)
  • redis: added AUTH_MODE_TOKEN_AUTH value and update support for authorization_mode on google_redis_cluster resource (#​30014)
  • securitycenter: added deletion_notifications_enabled field to google_scc_folder_notification_config resource (#​29970)
  • securitycenter: added deletion_notifications_enabled field to google_scc_folder_scc_big_query_export resource (#​29970)
  • securitycenter: added deletion_notifications_enabled field to google_scc_notification_config resource (#​29970)
  • securitycenter: added deletion_notifications_enabled field to google_scc_organization_scc_big_query_export resource (#​29970)
  • securitycenter: added deletion_notifications_enabled field to google_scc_project_notification_config resource (#​29970)
  • securitycenter: added deletion_notifications_enabled field to google_scc_project_scc_big_query_export resource (#​29970)
  • securitycenterv2: added deletion_notifications_enabled field to google_scc_v2_folder_notification_config resource (#​29970)
  • securitycenterv2: added deletion_notifications_enabled field to google_scc_v2_folder_scc_big_query_export resource (#​29970)
  • securitycenterv2: added deletion_notifications_enabled field to google_scc_v2_organization_notification_config resource (#​29970)
  • securitycenterv2: added deletion_notifications_enabled field to google_scc_v2_organization_scc_big_query_export resource (#​29970)
  • securitycenterv2: added deletion_notifications_enabled field to google_scc_v2_organization_scc_big_query_exports resource (#​29970)
  • securitycenterv2: added deletion_notifications_enabled field to google_scc_v2_project_notification_config resource (#​29970)
  • securitycenterv2: added deletion_notifications_enabled field to google_scc_v2_project_scc_big_query_export resource (#​29970)
  • vectorsearch: added skip_wait field to google_vector_search_index resource (#​29994)
  • vertexai: added resource_runtime_spec.ray_spec field to google_vertex_ai_persistent_resource resource (#​30020)
  • vertexai: added support for updating resource_pools.replica_count in-place on google_vertex_ai_persistent_resource resource (#​30020)

BUG FIXES:

  • compute: fixed an issue causing google_compute_region_backend_service update to fail when params.resource_manager_tags is set (#​29967)
  • compute: fixed an issue where setting security_policy on google_compute_region_backend_service failed during creation when protocol was set to UDP (#​29972)
  • container: fixed a permadiff on dns_config.cluster_dns in google_container_cluster when omitted, set to null, or set to PROVIDER_UNSPECIFIED (#​30021)
  • container: fixed permadiff and update error on google_container_cluster when managed_opentelemetry_config is empty or managed_opentelemetry_config.scope is omitted (#​29962)
  • discoveryengine: fixed json_schema forcing resource replacement on every change in google_discovery_engine_schema (#​29952)
  • memorystore: fixed google_memorystore_instance update failures when multiple fields (such as node_type and engine_version) are changed in the same apply (#​29989)

v8.7.0

Compare Source

DEPRECATIONS:

  • dataproc: deprecated attached_disk_config.disk_type on google_dataproc_cluster and google_dataproc_workflow_template. Use attached_disk_config.type instead. (#​29870)

FEATURES:

  • New Data Source: google_gemini_data_analytics_data_agent_iam_policy (#​29775)
  • New Resource: google_gemini_data_analytics_data_agent (#​29775)
  • New Resource: google_gemini_data_analytics_data_agent_iam_binding (#​29775)
  • New Resource: google_gemini_data_analytics_data_agent_iam_member (#​29775)
  • New Resource: google_gemini_data_analytics_data_agent_iam_policy (#​29775)
  • New Resource: google_vertex_ai_online_evaluator (#​29810)

IMPROVEMENTS:

  • bigqueryanalyticshub: added encryption_configuration field to google_bigquery_analytics_hub_query_template resource (#​29869)
  • ces: added model_settings.thinking_level field to google_ces_agent resource (#​29778)
  • cloudsecuritycompliance: added nested parameter_spec fields (oneof_value and sub_parameters) to google_cloud_security_compliance_cloud_control (#​29812)
  • compute: added network_interface.service_class_id field to google_compute_instance, google_compute_instance_template, and google_compute_region_instance_template resources (#​29821)
  • compute: made disk_encryption_key.kms_key_name updatable in place in google_compute_region_disk (#​29833)
  • compute: made snapshot_encryption_key.kms_key_self_link updatable in place in google_compute_snapshot (#​29815)
  • compute: promoted scheduling.preemption_notice_duration field to GA for google_compute_instance, google_compute_instance_template, google_compute_region_instance_template, and google_compute_instance_from_template resources (#​29814)
  • container: added best_effort_provisioning field to google_container_node_pool resource (#​29771)
  • container: added node_pool.best_effort_provisioning field to google_container_cluster resource (#​29771)
  • dataproc: added attached_disk_config.type field to google_dataproc_cluster resource (#​29870)
  • dataproc: added attached_disk_config.type field to google_dataproc_workflow_template resource (#​29870)
  • dialogflow: added free_form_context, agent_coaching_context, and tools fields to google_dialogflow_generator (#​29777)
  • looker: added support for Regional Endpoint Policies (REP). See the provider reference for more details on configuration. (#​29811)
  • modelarmor: added modalities to template_metadata in google_model_armor_template (#​29774)
  • networksecurity: added missing matchers ignore_case, prefix, suffix and contains on network_rules for google_network_security_authz_policy resource (#​29865)
  • networksecurity: added nested field to.not_operations on network_rules for google_network_security_authz_policy resource (#​29865)
  • networksecurity: added nested fields from.sources.resources and from.not_sources.resources on network_rules for google_network_security_authz_policy resource (#​29865)
  • networkservices: added agent_compute and deployment_model fields to google_network_services_agent_connectivity_template resource (#​29817)
  • networkservices: removed client-side validation of flex_shielding.flex_shielding_regions in google_network_services_edge_cache_origin, so new regions such as EUROPE_WEST3 and US_EAST5 are now accepted (#​29825)
  • oracledatabase: added properties.vm_file_system_storage_type and properties.vm_backup_storage_type fields to google_oracle_database_cloud_vm_cluster resource (#​29776)
  • workbench: added disable-bigquery, enable-opencode, enable-opencode-web, and enable-antigravity to the metadata keys that trigger a stop/restart of a google_workbench_instance on update, since they only take effect at startup (#​29864)

BUG FIXES:

  • cloudsecuritycompliance: fixed ExactlyOneOf validation between organization and parent on google_cloud_security_compliance_cloud_control (#​29822)
  • cloudsecuritycompliance: fixed ExactlyOneOf validation between organization and parent on google_cloud_security_compliance_framework (#​29822)
  • cloudsecuritycompliance: fixed ExactlyOneOf validation between organization and parent on google_cloud_security_compliance_framework_deployment (#​29822)
  • compute: fixed google_compute_subnetwork to recreate the subnetwork when changing ipv6_access_type, ip_collection, or external_ipv6_prefix unless stack_type is being upgraded from IPV4_ONLY to IPV4_IPV6, as the API does not allow in-place updates for these fields in other cases (#​29773)
  • compute: fixed a permanent diff in google_compute_backend_service and google_compute_region_backend_service when cdn_policy.client_ttl or cdn_policy.default_ttl is set to 0 (#​29837)
  • compute: fixed an issue where google_compute_forwarding_rule was not recreated when its referenced google_compute_address was recreated (#​29866)
  • compute: fixed an issue where security_policy was not attached on initial create for google_compute_region_backend_service in the GA provider (#​29839)
  • compute: reduced likelihood of name collisions when using a long name_prefix on google_compute_instance_template, google_compute_region_instance_template, google_compute_region_ssl_certificate, and google_compute_ssl_certificate (#​29841)
  • container: fixed a bug where updating maintenance_policy on google_container_node_pool was not applied (#​29838)
  • container: reduced likelihood of name collisions when using a long name_prefix on google_container_node_pool and google_container_cluster.node_pool (#​29841)
  • dataproc: fixed confidential_instance_config.enable_confidential_compute and resource_manager_tags state drift on google_dataproc_cluster (#​29870)
  • discoveryengine: fixed json_params updates not taking effect on google_discovery_engine_data_connector (#​29827)
  • filestore: fixed ExactlyOneOf validation between location and zone on google_filestore_instance (#​29822)
  • sql: fixed Invalid maintenance window. Day of week is unspecified. error when creating or updating google_sql_database_instance with a settings.maintenance_window that sets update_track or hour without day (#​29863)
  • sql: fixed permadiff on settings.deny_maintenance_period.start_date and settings.deny_maintenance_period.end_date in google_sql_database_instance when using zero-padded or recurring MM-DD dates (#​29823)
  • workflows: reduced likelihood of name collisions when using a long name_prefix on google_workflows_workflow (#​29841)

v8.6.0

Compare Source

FEATURES:

  • New Data Source: google_iam_workload_identity_pool_jwks (#​29669)
  • New List Resource: google_gkebackup_backup_channel (#​29662)
  • New List Resource: google_gkebackup_backup_plan (#​29662)
  • New List Resource: google_gkebackup_restore_channel (#​29662)
  • New List Resource: google_gkebackup_restore_plan (#​29662)
  • New List Resource: google_storage_bucket_iam_member (#​29661)
  • New Resource: google_dialogflow_tool (#​29749)

IMPROVEMENTS:

  • agenticapplications: added mcp_data_sources.api_key_header, web_search_config.disabled, and artifacts_config.visualization_options.visualization_mode fields to google_agentic_applications_analyst_agent_persona resource (#​29720)
  • agentregistry: made source optional in google_agent_registry_binding (#​29726)
  • appengine: added oauth2_client_secret write-only field and oauth2_client_secret_wo_version field in google_app_engine_application resource (#​29724)
  • ces: added audio_processing_config.synthesize_speech_configs.model and audio_processing_config.synthesize_speech_configs.instruction fields to google_ces_app resource (#​29747)
  • compute: added IN_FLIGHT to balancing_mode on google_compute_region_backend_service resource (#​29719)
  • compute: added network_interface.enable_vpc_scoped_dns field to google_compute_instance, google_compute_instance_template, and google_compute_region_instance_template resources (#​29751)
  • compute: added path_matcher.route_rules.route_action.url_rewrite.regex_rewrite field to google_compute_region_url_map resource (#​29748)
  • compute: added path_matcher.route_rules.route_action.url_rewrite.regex_rewrite field to google_compute_url_map resource (#​29750)
  • compute: added request_body field to google_compute_region_security_policy_rules resource (#​29670)
  • compute: added request_body field to google_compute_region_security_policy resource (#​29670)
  • compute: added request_body field to google_compute_security_policy resource (#​29670)
  • compute: added service_lb_policy field to google_compute_region_backend_service resource (#​29763)
  • compute: added tls_settings.identity field to google_compute_backend_service and google_compute_region_backend_service resources (#​29743)
  • compute: added loadBalancingScheme field to google_compute_target_tcp_proxy resource (#​29668)
  • compute: added load_balancing_scheme field to google_compute_region_target_tcp_proxy resource (#​29744)
  • compute: made disk_encryption_key.kms_key_self_link updatable in place in google_compute_disk (#​29762)
  • compute: supported in-place updates for external_ipv6_prefix in google_compute_subnetwork (#​29725)
  • databasemigrationservice: added reserved_public_ip_config field to google_database_migration_service_private_connection resource (#​29742)
  • discoveryengine: added procurement_contact_emails field to google_discovery_engine_search_engine resource (#​29737)
  • iam3: added target.resource field to google_iam_projects_policy_binding, google_iam_folders_policy_binding, and google_iam_organizations_policy_binding resources (#​29759)
  • lustre: added target_version, available_version, and effective_version fields to google_lustre_instance resource (#​29764)
  • managedkafka: added kafka_version field to google_managed_kafka_cluster resource (#​29735)
  • networksecurity: added primary_ip_ranges field to google_network_security_ull_mirroring_collector_rule resource (#​29734)
  • oracledatabase: added properties.exascale_config field to google_oracle_database_cloud_exadata_infrastructure resource (#​29761)
  • oracledatabase: added total_vm_storage_size_gb field to google_oracle_database_cloud_exadata_infrastructure_exascale_config resource (#​29761)
  • parametermanager: added data_crc32c field to google_parameter_manager_parameter_version and google_parameter_manager_regional_parameter_version resources (#​29658)
  • securesourcemanager: added service_account_auth field to google_secure_source_manager_hook resource (#​29758)

BUG FIXES:

  • servicedirectory: prevented recreation of google_service_directory_endpoint when the network project ID is canonicalized to a project number (#​29663)
  • storage: fixed an inconsistent final plan issue for content field (#​29718)

v8.5.0

Compare Source

NOTES:

  • compute: migrated the VPN tunnel lookup in google_compute_router_interface to use direct HTTP rather than a client library (#​29442)

DEPRECATIONS:

  • firebaseailogic: deprecated generative_language_config and generative_language_config.api_key in google_firebase_ai_logic_config resource (#​29656)
  • networkservices: egress_network_config.dns_peering_config.domain field in google_network_services_agent_connectivity_template is deprecated. Use egress_network_config.dns_peering_config.domains (#​29651)

FEATURES:

  • New Data Source: google_network_services_gateway (#​29634)
  • New List Resource: google_project_iam_binding (#​29631)
  • New List Resource: google_secret_manager_secret_version (#​29654)
  • New Resource: google_resource_manager_capability_config (#​29438)
  • New Resource: google_vertex_ai_semantic_governance_policy (#​29649)

IMPROVEMENTS:

  • agenticapplications: added math_rendering_mode and web_search_config fields to google_agentic_applications_analyst_agent_persona resource (#​29622)
  • bigqueryconnection: added password_wo write-only field and password_wo_version field in google_bigquery_connection resource (#​29643)
  • ces: added proactive_execution_enabled field to callbacks in google_ces_agent resource (#​29657)
  • ces: added proactive_execution_enabled output fields to snapshot.agents callbacks in google_ces_app_version resource (#​29657)
  • ces: added remote_a2a_agent field to google_ces_agent resource (#​29440)
  • chronicle: added parallel_instance field to google_chronicle_environment resource (#​29444)
  • cloudrunv2: added ssh_enabled field to google_cloud_run_v2_service resource (#​29645)
  • cloudrunv2: promoted template.scaling.cpu_utilization and template.scaling.concurrency_utilization to GA in google_cloud_run_v2_service resource (#​29630)
  • compute: added rsa_encryption_wo and raw_key_wo fields to google_compute_disk resource (#​29621)
  • compute: added rsa_encryption_wo and raw_key_wo fields to google_compute_region_disk resource (#​29621)
  • compute: added nat_ips_per_endpoint field to google_compute_service_attachment resource (#​29648)
  • dlp: added inspect_config subfields (custom_info_types, min_likelihood_per_info_type.info_type.sensitivity_score, and rule_set.rules.adjustment_rule) to google_data_loss_prevention_content_policy resource (#​29633)
  • networkservices: added domains field to egress_network_config.dns_peering_config in google_network_services_agent_connectivity_template resource (#​29651)
  • networkservices: added tls_config field to google_network_services_agent_connectivity_template resource (#​29652)
  • parametermanager: added data_crc32c field to google_parameter_manager_parameter_version and google_parameter_manager_regional_parameter_version resources (#​29658)
  • secretmanager: added secret_data_wo and secret_data_wo_version write-only fields to google_secret_manager_regional_secret_version resource (#​29653)
  • sql: google_sql_database_instance now performs an in-place storage shrink when disk_size is reduced with disk_autoresize disabled, instead of forcing instance recreation (#​29635)
  • sql: added encryption_confidential_mode to google_sql_database_instance resource (#​29623)
  • storage: added updated field to bucket_objects in google_storage_bucket_objects data source (#​29641)
  • storageftp: added service_agent, external_config.ip_address, internal_config.service_attachment, and state to google_storage_ftp_server resource (#​29644)
  • storageftp: added state and username fields and increased user_credentials max items from 1 to 10 in google_storage_ftp_user resource (#​29644)

v8.4.0

Compare Source

NOTES:

  • compute: migrated google_compute_route to use direct HTTP rather than a client library (#​29430)

FEATURES:

  • New Data Source: google_cloudbuild_worker_pool (#​29385)
  • New Resource: google_gemini_gibq_observability_setting (#​29381)
  • New Resource: google_gemini_gibq_observability_setting_binding (#​29381)
  • New Resource: google_network_services_agent_connectivity_template (#​29392)

IMPROVEMENTS:

  • agenticapplications: added artifacts_config.methodology_export_options field to google_agentic_applications_analyst_agent_persona (#​29382)
  • ces: added blob field to google_ces_example (#​29365)
  • ces: added mcp_tool.api_authentication.service_account_auth_config.scopes and open_api_tool.api_authentication.service_account_auth_config.scopes fields to google_ces_tool (#​29378)
  • ces: added messages.chunks.image.alt_text field to google_ces_example (#​29432)
  • cloudrunv2: added template.delay_execution field to google_cloud_run_v2_job (#​29431)
  • cloudrunv2: added template.template.containers.sandbox_launcher field to google_cloud_run_v2_job (#​29433)
  • cloudrunv2: added template.workload_identity_config field to google_cloud_run_v2_service (#​29429)
  • container: added skip_node_pool_refresh field to google_container_cluster data source. When set to true, the data source skips reading node pools from the API, resolving long read times on clusters with a large number of node pools. Note that this results in node_pool being set to an empty list (#​29384)
  • dataproc: added boot_disk_provisioned_iops, boot_disk_provisioned_throughput, local_ssd_interface, and attached_disk_config fields to google_dataproc_workflow_template (#​29396)
  • dialogflow: added summarization_context.few_shot_examples.output.tool_call_info field to google_dialogflow_generator (#​29353)
  • discoveryengine: added tag and metadata fields to google_discovery_engine_data_connector (#​29399)
  • discoveryengine: added ui_settings.search_addon_spec field to google_discovery_engine_widget_config (#​29401)
  • discoveryengine: added ui_settings.source_admin_display_name_enabled field to google_discovery_engine_widget_config (#​29367)
  • networkservices: added agent_connectivity_template field to google_network_services_agent_gateway (#​29392)
  • secretmanager: added secret_type field to google_secret_manager_secret and google_secret_manager_regional_secret resources and data sources (#​29426)
  • vertexai: added vector_db_config and vertex_ai_search_config fields to google_vertex_ai_rag_corpus (#​29379)

BUG FIXES:

  • binaryauthorization: fixed google_binary_authorization_policy where deleting (resetting to default) the policy retained admission_whitelist_patterns (#​29427)
  • cloudscheduler: fixed google_cloud_scheduler_job staying paused when the paused field is removed from configuration (#​29400)
  • container: fixed google_container_cluster and google_container_node_pool by removing the unsupported node_config.host_maintenance_policy field from the GA provider (#​29369)
  • container: fixed explicit STANDARD node_config.advanced_machine_features.performance_monitoring_unit values being omitted when creating google_container_cluster and google_container_node_pool (#​29363)
  • storage: fixed google_storage_bucket force_destroy failing when parallel object deletes return transient 404/410 No such object (#​29374)

v8.3.0

Compare Source

FEATURES:

  • New Data Source: google_compute_service_attachments (#​29253)
  • New List Resource: google_firebase_android_app (#​29269)
  • New List Resource: google_firebase_apple_app (#​29269)
  • New List Resource: google_firebase_web_app (#​29269)
  • New List Resource: google_pubsub_topic_iam_member (#​29259)
  • New Resource: google_chronicle_case_stage_definition (#​29276)
  • New Resource: google_chronicle_case_tag_definition (#​29236)
  • New Resource: google_compute_network_edge_security_service (#​29248)
  • New Resource: google_data_loss_prevention_content_policy (#​29296)
  • New Resource: google_gemini_gda_observability_setting_binding (#​29286)
  • New Resource: google_gemini_gda_observability_setting (#​29286)
  • New Resource: google_vertex_ai_rag_corpus (#​29252)

IMPROVEMENTS:

  • accesscontextmanager: added etag field to google_access_context_manager_service_perimeter (#​29261)
  • bigquerydatatransfer: added output fields to google_bigquery_data_transfer_data_source_enrollment (#​29267)
  • ces: added channel_profile.whatsapp_config field to google_ces_deployment (#​29279)
  • ces: added evaluation_metrics_thresholds.golden_evaluation_metrics_thresholds.tool_matching_settings.extra_tool_call_behavior field to google_ces_app (#​29247)
  • ces: added evaluation_metrics_thresholds.golden_evaluation_metrics_thresholds.turn_level_metrics_thresholds.semantic_similarity_channel field to google_ces_app (#​29244)
  • ces: added mcp_toolset.tool_overrides field to google_ces_toolset (#​29291)
  • ces: added transfer_rules field to google_ces_agent (#​29262)
  • chronicle: added base64_image, dynamic_parameters, instance_uri, and weight fields to google_chronicle_environment (#​29265)
  • cloudsecuritycompliance: added parameter_spec.sub_parameters.sub_parameters and nested oneof_value fields to google_cloud_security_compliance_cloud_control (#​29298)
  • dataplex: added data_documentation_spec.sql_dialect field to google_dataplex_datascan (#​29285)
  • dataproc: added instance_flexibility_policy to master_config, worker_config, and secondary_worker_config in google_dataproc_workflow_template (#​29287)
  • gkehub: added default_cluster_config.compliance_posture_config and labels to google_gke_hub_fleet (#​29245)
  • managedkafka: added public_cluster_config, public_cluster_details, and bootstrap_address fields to google_managed_kafka_cluster resource (#​29273)
  • parametermanager: added tags field to google_parameter_manager_parameter and google_parameter_manager_regional_parameter to allow setting tags for parameters at creation time (#​29299)

BUG FIXES:

  • accesscontextmanager: fixed bug in google_access_context_manager_service_perimeter where changes to the status / spec fields could cause updates to related ingress/egress policies even if those fields weren't specified on google_access_context_manager_service_perimeter (#​29261)
  • accesscontextmanager: fixed sending of etag on update requests for google_access_context_manager_service_perimeter_egress_policy and google_access_context_manager_service_perimeter_ingress_policy to prevent concurrent requests from impacting each other (#​29261)
  • biglakeiceberg: fixed an issue where creating a partitioned google_biglake_iceberg_table failed due to missing field-id (#​29295)
  • compute: fixed a bug where an explicitly configured advanced_machine_features.performance_monitoring_unit = "STANDARD" was dropped on creation for google_compute_instance, google_compute_instance_template, and google_compute_region_instance_template (#​29302)
  • config: fixed diff when artifacts_gcs_bucket is not specified on google_config_deployment (#​29258)
  • provider: added validation to reject more than one external_credentials or batching block, matching the existing SDK behavior (#​29266)

v8.2.0

Compare Source

NOTES:

  • compute: migrate google_compute_subnetworks data source to use direct HTTP rather than a client library (#​29226)

FEATURES:

  • New List Resource: google_appengine_domain_mapping (#​29174)
  • New List Resource: google_appengine_service_network_settings (#​29174)
  • New List Resource: google_appengine_service_split_traffic (#​29174)
  • New List Resource: google_contact_center_insights_analysis_rule (#​29146)
  • New List Resource: google_contact_center_insights_assessment_rule (#​29146)
  • New List Resource: google_contact_center_insights_auto_labeling_rule (#​29146)
  • New List Resource: google_contact_center_insights_qa_scorecard (#​29146)
  • New List Resource: google_contact_center_insights_view (#​29146)
  • New List Resource: google_identityplatform_inbound_saml_config (#​29166)
  • New List Resource: google_identityplatform_oauth_idp_config (#​29166)
  • New List Resource: google_identityplatform_tenant (#​29166)
  • New List Resource: google_network_security_authz_policy (#​29142)
  • New List Resource: google_network_security_intercept_deployment_group (#​29142)
  • New List Resource: google_network_security_intercept_deployment (#​29142)
  • New List Resource: google_network_security_intercept_endpoint_group_association (#​29142)
  • New List Resource: google_network_security_intercept_endpoint_group (#​29142)
  • New List Resource: google_network_security_mirroring_deployment_group (#​29142)
  • New List Resource: google_network_security_mirroring_deployment (#​29142)
  • New List Resource: google_network_security_mirroring_endpoint_group_association (#​29142)
  • New List Resource: google_network_security_mirroring_endpoint_group (#​29142)
  • New List Resource: google_network_security_mirroring_endpoint (#​29142)
  • New List Resource: google_secret_manager_secret_iam_member (#​29221)
  • New List Resource: google_vertexai_dataset (#​29147)
  • New List Resource: google_vertexai_deployment_resource_pool (#​29147)
  • New List Resource: google_vertexai_evaluation_metric (#​29147)
  • New List Resource: google_vertexai_feature_group (#​29147)
  • New List Resource: google_vertexai_feature_online_store (#​29147)
  • New List Resource: google_vertexai_featurestore (#​29147)
  • New List Resource: google_vertexai_index (#​29147)
  • New List Resource: google_vertexai_persistent_resource (#​29147)
  • New List Resource: google_vertexai_reasoning_engine (#​29147)
  • New List Resource: google_vertexai_tensorboard (#​29147)
  • New Resource: google_biglake_hive_catalog (#​29223)
  • New Resource: google_biglake_hive_database (#​29223)
  • New Resource: google_biglake_hive_table (#​29223)
  • New Resource: google_bigquery_data_transfer_data_source_enrollment (#​29140)
  • New Resource: google_chronicle_case_close_definition (#​29228)
  • New Resource: google_chronicle_case_tag_definition (#​29236)
  • New Resource: google_observability_bucket (#​29225)
  • New Resource: google_observability_folder_settings (#​29225)
  • New Resource: google_observability_link (#​29161)
  • New Resource: google_observability_link (#​29225)
  • New Resource: google_observability_organization_settings (#​29225)
  • New Resource: google_observability_project_settings (#​29225)
  • New Resource: google_service_usage_v2_consumer_policy (#​29222)
  • New Resource: google_storage_ftp_server (#​29155)
  • **New Re

[!IMPORTANT]
✂ PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate-bot
renovate-bot requested a review from a team as a code owner October 22, 2026 22:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

@hessjcg hessjcg

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@renovate-bot @hessjcg