backupdr: added disk_backup_plan_properties field to google_backup_dr_backup_plan resource (#26497)
backupdr: made backup_rules optional in google_backup_dr_backup_plan resource (#26494)
blockchainnodeengine: added ethereum_details.validator_config.beacon_fee_recipient field to google_blockchain_node_engine_blockchain_nodes resource (#26499)
ces: added custom_headers field to MCP toolset in CES google_ces_toolset resource (#26473)
compute: added expr field to google_compute_organization_security_policy_rule resource (#26506)
compute: added location field to google_network_services_tls_route resource (#26514)
compute: added target_proxies field to google_network_services_tls_route resource (#26516)
compute: made backend_service field optional for resource google_compute_target_tcp_proxy (#26519)
compute: made backend_service field optional for resource google_compute_region_target_tcp_proxy (#26493)
iamworkforcepool: added detailed_audit_logging field to google_iam_workforce_pool_provider resource (#26500)
kms: added key_project_resolution_mode field to google_kms_autokey_config resource (#26501)
lustre: added maintenance_policy field to google_lustre_instance resource (#26512)
sql: added point_in_time_restore_context.region field to google_sql_database_instance resource (#26510)
vertexai: added deletion_policy field to resource_vertex_ai_reasoning_engine resource (#26518)

BUG FIXES:

vertexai: fixed permadiff on spec field in google_vertex_ai_reasoning_engine resource (#26470)

`v7.24.0`

Compare Source

DEPRECATIONS:

iamworkforcepool: deprecated extended_attributes_oauth2_client on google_iam_workforce_pool_provider. Use scim_usage instead. (#26388)

FEATURES:

New Resource: google_biglake_iceberg_table (#26394)
New Resource: google_contact_center_insights_auto_labeling_rule (#26426)
New Resource: google_observability_trace_scope (#26428)
New Resource: google_sql_provision_script (#26432)

IMPROVEMENTS:

ces: added Service Account OAuth scopes fields to google_ces_toolset resource (#26368)
cloudrunv2: added DISK fields to google_cloud_run_v2_service resource (#26418)
cloudsql: added max_custom_on_demand_retention_days field to sqladmin resource (#26407)
compute: added ForwardProxy field in google_compute_region_backend_service resource (#26449)
compute: added accelerator_topology_mode field to google_compute_resource_policy resource (#26383)
compute: added target_type and target_forwarding_rules on google_compute_region_network_firewall_policy_rule resource (#26369)
compute: promoted the endpoint_url field in google_compute_service_attachment to GA (#26434)
container: marked subnetwork as settable in google_container_node_pool (#26416)
container: added disruption_budget field to google_container_cluster resource (#26425)
discoveryengine: added search_engine_config.required_subscription_tier field to google_discovery_engine_search_engine resource (#26398)
discoveryengine: marked content_config as optional field in google_discovery_engine_data_store (#26398)
memorystore: added server_ca_mode and server_ca_pool fields to google_memorystore_instance resource (#26437)
networkservices: relaxed authority validation in google_network_services_authz_extension for different target types (#26386)
redis: added server_ca_mode and server_ca_pool fields to google_redis_cluster resource (#26437)
sql: added clone_context.source_project field to google_sql_database_instance resource to support cross project clone (beta) (#26384)
transport: added automatic retry for GCE 403 errors with reason CONCURRENT_OPERATIONS_QUOTA_EXCEEDED (#26417)

BUG FIXES:

compute: fixed perpetual diff for oauth2_client_id in iap block of google_compute_backend_service and google_compute_region_backend_service when disabling IAP (#26385)
datastream: fixed an issue in google_datastream_stream where source_config.mysql_source_config.binary_log_position would show a diff when unset (#26435)
workbench: marked install-nvidia-driver metadata key as settable for google_workbench_instance (#26402)

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [google](https://registry.terraform.io/providers/hashicorp/google) ([source](https://redirect.github.com/hashicorp/terraform-provider-google)) | required_provider | minor | `7.23.0` → `7.25.0` | --- ### Release Notes <details> <summary>hashicorp/terraform-provider-google (google)</summary> ### [`v7.25.0`](https://redirect.github.com/hashicorp/terraform-provider-google/blob/HEAD/CHANGELOG.md#7250-Mar-24-2026) [Compare Source](https://redirect.github.com/hashicorp/terraform-provider-google/compare/v7.24.0...v7.25.0) FEATURES: - **New Data Source:** `google_compute_network_endpoint_groups` ([#26515](https://redirect.github.com/hashicorp/terraform-provider-google/pull/26515)) - **New Resource:** `google_dialogflow_environment` ([#26489](https://redirect.github.com/hashicorp/terraform-provider-google/pull/26489)) - **New Resource:** `google_kms_project_autokey_config` ([#26501](https://redirect.github.com/hashicorp/terraform-provider-google/pull/26501)) IMPROVEMENTS: - backupdr: added `disk_backup_plan_properties` field to `google_backup_dr_backup_plan` resource ([#26497](https://redirect.github.com/hashicorp/terraform-provider-google/pull/26497)) - backupdr: made `backup_rules` optional in `google_backup_dr_backup_plan` resource ([#26494](https://redirect.github.com/hashicorp/terraform-provider-google/pull/26494)) - blockchainnodeengine: added `ethereum_details.validator_config.beacon_fee_recipient` field to `google_blockchain_node_engine_blockchain_nodes` resource ([#26499](https://redirect.github.com/hashicorp/terraform-provider-google/pull/26499)) - ces: added `custom_headers` field to MCP toolset in CES `google_ces_toolset` resource ([#26473](https://redirect.github.com/hashicorp/terraform-provider-google/pull/26473)) - compute: added `expr` field to `google_compute_organization_security_policy_rule` resource ([#26506](https://redirect.github.com/hashicorp/terraform-provider-google/pull/26506)) - compute: added `location` field to `google_network_services_tls_route` resource ([#26514](https://redirect.github.com/hashicorp/terraform-provider-google/pull/26514)) - compute: added `target_proxies` field to `google_network_services_tls_route` resource ([#26516](https://redirect.github.com/hashicorp/terraform-provider-google/pull/26516)) - compute: made `backend_service` field optional for resource `google_compute_target_tcp_proxy` ([#26519](https://redirect.github.com/hashicorp/terraform-provider-google/pull/26519)) - compute: made `backend_service` field optional for resource `google_compute_region_target_tcp_proxy` ([#26493](https://redirect.github.com/hashicorp/terraform-provider-google/pull/26493)) - iamworkforcepool: added `detailed_audit_logging` field to `google_iam_workforce_pool_provider` resource ([#26500](https://redirect.github.com/hashicorp/terraform-provider-google/pull/26500)) - kms: added `key_project_resolution_mode` field to `google_kms_autokey_config` resource ([#26501](https://redirect.github.com/hashicorp/terraform-provider-google/pull/26501)) - lustre: added `maintenance_policy` field to `google_lustre_instance` resource ([#26512](https://redirect.github.com/hashicorp/terraform-provider-google/pull/26512)) - sql: added `point_in_time_restore_context.region` field to `google_sql_database_instance` resource ([#26510](https://redirect.github.com/hashicorp/terraform-provider-google/pull/26510)) - vertexai: added `deletion_policy` field to `resource_vertex_ai_reasoning_engine` resource ([#26518](https://redirect.github.com/hashicorp/terraform-provider-google/pull/26518)) BUG FIXES: - vertexai: fixed permadiff on `spec` field in `google_vertex_ai_reasoning_engine` resource ([#26470](https://redirect.github.com/hashicorp/terraform-provider-google/pull/26470)) ### [`v7.24.0`](https://redirect.github.com/hashicorp/terraform-provider-google/blob/HEAD/CHANGELOG.md#7240-Mar-17-2026) [Compare Source](https://redirect.github.com/hashicorp/terraform-provider-google/compare/v7.23.0...v7.24.0) DEPRECATIONS: - iamworkforcepool: deprecated `extended_attributes_oauth2_client` on `google_iam_workforce_pool_provider`. Use `scim_usage` instead. ([#26388](https://redirect.github.com/hashicorp/terraform-provider-google/pull/26388)) FEATURES: - **New Resource:** `google_biglake_iceberg_table` ([#26394](https://redirect.github.com/hashicorp/terraform-provider-google/pull/26394)) - **New Resource:** `google_contact_center_insights_auto_labeling_rule` ([#26426](https://redirect.github.com/hashicorp/terraform-provider-google/pull/26426)) - **New Resource:** `google_observability_trace_scope` ([#26428](https://redirect.github.com/hashicorp/terraform-provider-google/pull/26428)) - **New Resource:** `google_sql_provision_script` ([#26432](https://redirect.github.com/hashicorp/terraform-provider-google/pull/26432)) IMPROVEMENTS: - ces: added Service Account OAuth `scopes` fields to `google_ces_toolset` resource ([#26368](https://redirect.github.com/hashicorp/terraform-provider-google/pull/26368)) - cloudrunv2: added `DISK` fields to `google_cloud_run_v2_service` resource ([#26418](https://redirect.github.com/hashicorp/terraform-provider-google/pull/26418)) - cloudsql: added `max_custom_on_demand_retention_days` field to `sqladmin` resource ([#26407](https://redirect.github.com/hashicorp/terraform-provider-google/pull/26407)) - compute: added `ForwardProxy` field in `google_compute_region_backend_service` resource ([#26449](https://redirect.github.com/hashicorp/terraform-provider-google/pull/26449)) - compute: added `accelerator_topology_mode` field to `google_compute_resource_policy` resource ([#26383](https://redirect.github.com/hashicorp/terraform-provider-google/pull/26383)) - compute: added `target_type` and `target_forwarding_rules` on `google_compute_region_network_firewall_policy_rule` resource ([#26369](https://redirect.github.com/hashicorp/terraform-provider-google/pull/26369)) - compute: promoted the `endpoint_url` field in `google_compute_service_attachment` to GA ([#26434](https://redirect.github.com/hashicorp/terraform-provider-google/pull/26434)) - container: marked `subnetwork` as settable in `google_container_node_pool` ([#26416](https://redirect.github.com/hashicorp/terraform-provider-google/pull/26416)) - container: added `disruption_budget` field to `google_container_cluster` resource ([#26425](https://redirect.github.com/hashicorp/terraform-provider-google/pull/26425)) - discoveryengine: added `search_engine_config.required_subscription_tier ` field to `google_discovery_engine_search_engine` resource ([#26398](https://redirect.github.com/hashicorp/terraform-provider-google/pull/26398)) - discoveryengine: marked `content_config` as optional field in `google_discovery_engine_data_store` ([#26398](https://redirect.github.com/hashicorp/terraform-provider-google/pull/26398)) - memorystore: added `server_ca_mode` and `server_ca_pool` fields to `google_memorystore_instance` resource ([#26437](https://redirect.github.com/hashicorp/terraform-provider-google/pull/26437)) - networkservices: relaxed `authority` validation in `google_network_services_authz_extension` for different target types ([#26386](https://redirect.github.com/hashicorp/terraform-provider-google/pull/26386)) - redis: added `server_ca_mode` and `server_ca_pool` fields to `google_redis_cluster` resource ([#26437](https://redirect.github.com/hashicorp/terraform-provider-google/pull/26437)) - sql: added `clone_context.source_project` field to `google_sql_database_instance` resource to support cross project clone (beta) ([#26384](https://redirect.github.com/hashicorp/terraform-provider-google/pull/26384)) - transport: added automatic retry for GCE 403 errors with reason `CONCURRENT_OPERATIONS_QUOTA_EXCEEDED` ([#26417](https://redirect.github.com/hashicorp/terraform-provider-google/pull/26417)) BUG FIXES: - compute: fixed perpetual diff for `oauth2_client_id` in `iap` block of `google_compute_backend_service` and `google_compute_region_backend_service` when disabling IAP ([#26385](https://redirect.github.com/hashicorp/terraform-provider-google/pull/26385)) - datastream: fixed an issue in `google_datastream_stream` where `source_config.mysql_source_config.binary_log_position` would show a diff when unset ([#26435](https://redirect.github.com/hashicorp/terraform-provider-google/pull/26435)) - workbench: marked `install-nvidia-driver` metadata key as settable for `google_workbench_instance` ([#26402](https://redirect.github.com/hashicorp/terraform-provider-google/pull/26402)) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate).