Bump the terraform group across 31 directories with 1 update

[dependabot]

Bumps the terraform group with 1 update in the /gcp/modules/audit directory: hashicorp/google.
Bumps the terraform group with 1 update in the /gcp/modules/bastion directory: hashicorp/google.
Bumps the terraform group with 1 update in the /gcp/modules/ca directory: hashicorp/google.
Bumps the terraform group with 1 update in the /gcp/modules/ctlog directory: hashicorp/google.
Bumps the terraform group with 1 update in the /gcp/modules/dex directory: hashicorp/google.
Bumps the terraform group with 1 update in the /gcp/modules/external_secrets directory: hashicorp/google.
Bumps the terraform group with 1 update in the /gcp/modules/fulcio directory: hashicorp/google.
Bumps the terraform group with 1 update in the /gcp/modules/gke_cluster directory: hashicorp/google.
Bumps the terraform group with 1 update in the /gcp/modules/monitoring directory: hashicorp/google.
Bumps the terraform group with 1 update in the /gcp/modules/monitoring/dex directory: hashicorp/google.
Bumps the terraform group with 1 update in the /gcp/modules/monitoring/fulcio directory: hashicorp/google.
Bumps the terraform group with 1 update in the /gcp/modules/monitoring/infra directory: hashicorp/google.
Bumps the terraform group with 1 update in the /gcp/modules/monitoring/prober directory: hashicorp/google.
Bumps the terraform group with 1 update in the /gcp/modules/monitoring/rekor directory: hashicorp/google.
Bumps the terraform group with 1 update in the /gcp/modules/monitoring/rekorv2/active_shard directory: hashicorp/google.
Bumps the terraform group with 1 update in the /gcp/modules/monitoring/rekorv2/lb directory: hashicorp/google.
Bumps the terraform group with 1 update in the /gcp/modules/monitoring/slo directory: hashicorp/google.
Bumps the terraform group with 1 update in the /gcp/modules/monitoring/tesseract/active_shard directory: hashicorp/google.
Bumps the terraform group with 1 update in the /gcp/modules/monitoring/tesseract/lb directory: hashicorp/google.
Bumps the terraform group with 1 update in the /gcp/modules/monitoring/timestamp directory: hashicorp/google.
Bumps the terraform group with 1 update in the /gcp/modules/monitoring/tuf directory: hashicorp/google.
Bumps the terraform group with 1 update in the /gcp/modules/mysql directory: hashicorp/google.
Bumps the terraform group with 1 update in the /gcp/modules/mysql-shard directory: hashicorp/google.
Bumps the terraform group with 1 update in the /gcp/modules/network directory: hashicorp/google.
Bumps the terraform group with 1 update in the /gcp/modules/oslogin directory: hashicorp/google.
Bumps the terraform group with 1 update in the /gcp/modules/project_roles directory: hashicorp/google.
Bumps the terraform group with 1 update in the /gcp/modules/rekor directory: hashicorp/google.
Bumps the terraform group with 1 update in the /gcp/modules/sigstore directory: hashicorp/google.
Bumps the terraform group with 1 update in the /gcp/modules/tiles_tlog directory: hashicorp/google.
Bumps the terraform group with 1 update in the /gcp/modules/timestamp directory: hashicorp/google.
Bumps the terraform group with 1 update in the /gcp/modules/tuf directory: hashicorp/google.

Updates hashicorp/google from 7.12.0 to 7.14.1

Release notes

Sourced from hashicorp/google's releases.

v7.14.1

BUG FIXES:

• provider: fixed an issue where error type 409 and 412 were not being correctly retried. This commonly shows up in IAM resources, but can appear in other resources as well (#25596)
• servicedirectory: fixed an issue where google_service_directory_endpoint or google_service_directory_service without metadata specified would have other fields removed on update (#25588)

v7.14.0

DEPRECATIONS:

• managedkafka: added deprecation warning for google_managed_kafka_connect_cluster additional_subnets field (#25487)

FEATURES:

• New Data Source: google_artifact_registry_versions (#25512)
• New Data Source: google_cloud_identity_policies (#25513)
• New Data Source: google_compute_region_security_policy (#25488)
• New Data Source: google_compute_storage_pool (#25485)
• New Resource: google_compute_cross_site_network (#25479)
• New Resource: google_compute_wire_group (#25479)
• New Resource: google_network_services_multicast_group_consumer_activation (#25515)
• New Resource: google_network_services_multicast_group_producer_activation (#25472)

IMPROVEMENTS:

• alloydb: added connection_pool_config, connection_pool_config.enabled and connection_pool_config.flags in google_alloydb_instance resource (#25484)
• colab: added software_config.post_startup_script_config field to google_colab_runtime_template (#25509)
• compute: added new field instance_flexibility_policy.instance_selection.min_cpu_platform & instance_flexibility_policy.instance_selection.disks to google_compute_region_instance_group_manager (#25444)
• dataplex: removed the need for import in google_dataplex_entry when using first party source systems (#25507)
• dataproc: added auto_stop_time and idle_stop_ttl to google_dataproc_cluster resource (#25456)
• eventarc: added retry_policy field to google_eventarc_trigger resource (#25467)
• networksecurity: enabled in-place update for custom_mirroring_profile.mirroring_deployment_groups on google_network_security_security_profile (#25508)
• spanner: added autoscaling_config.autoscaling_targets.total_cpu_utilization_percent field to google_spanner_instance resource (#25495)
• sql: added changes to ignore changes in backup configuration's fields like enabled, binary_log_enabled, start_time, point_in_time_recovery_enabled, transaction_log_retention_days and backup_retention_settings.retained_backups in google_sql_database_instance if the instance is managed by Google Cloud Backup and Disaster (DR) Recovery Service. (#25516)

BUG FIXES:

• compute: fixed google_compute_network in-place update to enable enable_ula_internal_ipv6. (#25468)
• iam: fixed error 409 concurrency policy changes by correctly detecting the error type. (#25473)
• sql: fixed an issue where the computed psc_service_attachment_link attribute was not being exported properly in google_sql_database_instance resource and datasources (#25510)

v7.13.0

NOTES:

• alloydb: reverted requiring initial_user.password as required on create for new google_alloydb_cluster resources, instead initial_user.password or initial_user.user must be set if initial_user is specified for google_alloydb_cluster resources (#25366)
• privateca: modified encryption_spec field from google_privateca_ca_pool resource to be mutable and allow cmek key rotation (#25267)

DEPRECATIONS:

• cloudquotas: deprecated effective_container and effective_enablement fields in the google_cloud_quotas_quota_adjuster_settings resource (#25443)
• dlp: deprecated publish_findings_to_cloud_data_catalog field in google_data_loss_prevention_job_trigger resource. Use publish_findings_to_dataplex_catalog field instead. (#25250)
• networkservices: removed google_service_binding resource due to service binding support being disabled (#25367)

FEATURES:

• New Resource: google_ces_app_version (#25297)
• New Resource: google_compute_organization_security_policy (#25322)
• New Resource: google_dialogflow_generator (#25340)
• New Resource: google_dialogflow_version (#25179)

... (truncated)

Changelog

Sourced from hashicorp/google's changelog.

7.14.1 (Unreleased)

BUG FIXES:

• provider: fixed an issue where error type 409 and 412 were not being correctly retried. This commonly shows up in IAM resources, but can appear in other resources as well (#25596)
• servicedirectory: fixed an issue where google_service_directory_endpoint or google_service_directory_service without metadata specified would have other fields removed on update (#25588)

7.14.0 (December 12, 2025)

DEPRECATIONS:

• managedkafka: added deprecation warning for google_managed_kafka_connect_cluster additional_subnets field (#25487)

FEATURES:

• New Data Source: google_artifact_registry_versions (#25512)
• New Data Source: google_cloud_identity_policies (#25513)
• New Data Source: google_compute_region_security_policy (#25488)
• New Data Source: google_compute_storage_pool (#25485)
• New Resource: google_compute_cross_site_network (#25479)
• New Resource: google_compute_wire_group (#25479)
• New Resource: google_network_services_multicast_group_consumer_activation (#25515)
• New Resource: google_network_services_multicast_group_producer_activation (#25472)

IMPROVEMENTS:

• alloydb: added connection_pool_config, connection_pool_config.enabled and connection_pool_config.flags in google_alloydb_instance resource (#25484)
• colab: added software_config.post_startup_script_config field to google_colab_runtime_template (#25509)
• compute: added new field instance_flexibility_policy.instance_selection.min_cpu_platform & instance_flexibility_policy.instance_selection.disks to google_compute_region_instance_group_manager (#25444)
• dataplex: removed the need for import in google_dataplex_entry when using first party source systems (#25507)
• dataproc: added auto_stop_time and idle_stop_ttl to google_dataproc_cluster resource (#25456)
• eventarc: added retry_policy field to google_eventarc_trigger resource (#25467)
• networksecurity: enabled in-place update for custom_mirroring_profile.mirroring_deployment_groups on google_network_security_security_profile (#25508)
• spanner: added autoscaling_config.autoscaling_targets.total_cpu_utilization_percent field to google_spanner_instance resource (#25495)
• sql: added changes to ignore changes in backup configuration's fields like enabled, binary_log_enabled, start_time, point_in_time_recovery_enabled, transaction_log_retention_days and backup_retention_settings.retained_backups in google_sql_database_instance if the instance is managed by Google Cloud Backup and Disaster (DR) Recovery Service. (#25516)

BUG FIXES:

• compute: fixed google_compute_network in-place update to enable enable_ula_internal_ipv6. (#25468)
• iam: fixed error 409 concurrency policy changes by correctly detecting the error type. (#25473)
• sql: fixed an issue where the computed psc_service_attachment_link attribute was not being exported properly in google_sql_database_instance resource and datasources (#25510)

7.13.0 (December 9, 2025)

NOTES:

• alloydb: reverted requiring initial_user.password as required on create for new google_alloydb_cluster resources, instead initial_user.password or initial_user.user must be set if initial_user is specified for google_alloydb_cluster resources (#25366)
• privateca: modified encryption_spec field from google_privateca_ca_pool resource to be mutable and allow cmek key rotation (#25267)

DEPRECATIONS:

• cloudquotas: deprecated effective_container and effective_enablement fields in the google_cloud_quotas_quota_adjuster_settings resource (#25443)
• dlp: deprecated publish_findings_to_cloud_data_catalog field in google_data_loss_prevention_job_trigger resource. Use publish_findings_to_dataplex_catalog field instead. (#25250)
• networkservices: removed google_service_binding resource due to service binding support being disabled (#25367)

FEATURES:

• New Resource: google_ces_app_version (#25297)

... (truncated)

Commits

• 9c89f05 Add PR link
• ab9ce2d Changelog
• dfc5297 Fix issue for empty metadata in service directory resources (#15971) (#25588)
• 7b38dc3 New generated code for MM PR 15972.
• 488280a 7.14.0 changelog (#25565)
• 6ab69d5 Add new resource RegionHealthSource to terraform-beta (#14956) (#25518)
• 018883d Changes to modify the google_sql_database_instance resource behavior to preve...
• 5825ab5 Multicast group consumer activation (#15885) (#25515)
• cacbf91 Multicast domain group (#15899) (#25514)
• 1c4c2e2 Add CIG Policy List API support in Terraform (#15812) (#25513)
• Additional commits viewable in compare view

Updates hashicorp/google from 7.12.0 to 7.14.1

Release notes

Sourced from hashicorp/google's releases.

v7.14.1

BUG FIXES:

• provider: fixed an issue where error type 409 and 412 were not being correctly retried. This commonly shows up in IAM resources, but can appear in other resources as well (#25596)
• servicedirectory: fixed an issue where google_service_directory_endpoint or google_service_directory_service without metadata specified would have other fields removed on update (#25588)

v7.14.0

DEPRECATIONS:

• managedkafka: added deprecation warning for google_managed_kafka_connect_cluster additional_subnets field (#25487)

FEATURES:

• New Data Source: google_artifact_registry_versions (#25512)
• New Data Source: google_cloud_identity_policies (#25513)
• New Data Source: google_compute_region_security_policy (#25488)
• New Data Source: google_compute_storage_pool (#25485)
• New Resource: google_compute_cross_site_network (#25479)
• New Resource: google_compute_wire_group (#25479)
• New Resource: google_network_services_multicast_group_consumer_activation (#25515)
• New Resource: google_network_services_multicast_group_producer_activation (#25472)

IMPROVEMENTS:

• alloydb: added connection_pool_config, connection_pool_config.enabled and connection_pool_config.flags in google_alloydb_instance resource (#25484)
• colab: added software_config.post_startup_script_config field to google_colab_runtime_template (#25509)
• compute: added new field instance_flexibility_policy.instance_selection.min_cpu_platform & instance_flexibility_policy.instance_selection.disks to google_compute_region_instance_group_manager (#25444)
• dataplex: removed the need for import in google_dataplex_entry when using first party source systems (#25507)
• dataproc: added auto_stop_time and idle_stop_ttl to google_dataproc_cluster resource (#25456)
• eventarc: added retry_policy field to google_eventarc_trigger resource (#25467)
• networksecurity: enabled in-place update for custom_mirroring_profile.mirroring_deployment_groups on google_network_security_security_profile (#25508)
• spanner: added autoscaling_config.autoscaling_targets.total_cpu_utilization_percent field to google_spanner_instance resource (#25495)
• sql: added changes to ignore changes in backup configuration's fields like enabled, binary_log_enabled, start_time, point_in_time_recovery_enabled, transaction_log_retention_days and backup_retention_settings.retained_backups in google_sql_database_instance if the instance is managed by Google Cloud Backup and Disaster (DR) Recovery Service. (#25516)

BUG FIXES:

• compute: fixed google_compute_network in-place update to enable enable_ula_internal_ipv6. (#25468)
• iam: fixed error 409 concurrency policy changes by correctly detecting the error type. (#25473)
• sql: fixed an issue where the computed psc_service_attachment_link attribute was not being exported properly in google_sql_database_instance resource and datasources (#25510)

v7.13.0

NOTES:

• alloydb: reverted requiring initial_user.password as required on create for new google_alloydb_cluster resources, instead initial_user.password or initial_user.user must be set if initial_user is specified for google_alloydb_cluster resources (#25366)
• privateca: modified encryption_spec field from google_privateca_ca_pool resource to be mutable and allow cmek key rotation (#25267)

DEPRECATIONS:

• cloudquotas: deprecated effective_container and effective_enablement fields in the google_cloud_quotas_quota_adjuster_settings resource (#25443)
• dlp: deprecated publish_findings_to_cloud_data_catalog field in google_data_loss_prevention_job_trigger resource. Use publish_findings_to_dataplex_catalog field instead. (#25250)
• networkservices: removed google_service_binding resource due to service binding support being disabled (#25367)

FEATURES:

• New Resource: google_ces_app_version (#25297)
• New Resource: google_compute_organization_security_policy (#25322)
• New Resource: google_dialogflow_generator (#25340)
• New Resource: google_dialogflow_version (#25179)

... (truncated)

Changelog

Sourced from hashicorp/google's changelog.

7.14.1 (Unreleased)

BUG FIXES:

• provider: fixed an issue where error type 409 and 412 were not being correctly retried. This commonly shows up in IAM resources, but can appear in other resources as well (#25596)
• servicedirectory: fixed an issue where google_service_directory_endpoint or google_service_directory_service without metadata specified would have other fields removed on update (#25588)

7.14.0 (December 12, 2025)

DEPRECATIONS:

• managedkafka: added deprecation warning for google_managed_kafka_connect_cluster additional_subnets field (#25487)

FEATURES:

• New Data Source: google_artifact_registry_versions (#25512)
• New Data Source: google_cloud_identity_policies (#25513)
• New Data Source: google_compute_region_security_policy (#25488)
• New Data Source: google_compute_storage_pool (#25485)
• New Resource: google_compute_cross_site_network (#25479)
• New Resource: google_compute_wire_group (#25479)
• New Resource: google_network_services_multicast_group_consumer_activation (#25515)
• New Resource: google_network_services_multicast_group_producer_activation (#25472)

IMPROVEMENTS:

• alloydb: added connection_pool_config, connection_pool_config.enabled and connection_pool_config.flags in google_alloydb_instance resource (#25484)
• colab: added software_config.post_startup_script_config field to google_colab_runtime_template (#25509)
• compute: added new field instance_flexibility_policy.instance_selection.min_cpu_platform & instance_flexibility_policy.instance_selection.disks to google_compute_region_instance_group_manager (#25444)
• dataplex: removed the need for import in google_dataplex_entry when using first party source systems (#25507)
• dataproc: added auto_stop_time and idle_stop_ttl to google_dataproc_cluster resource (#25456)
• eventarc: added retry_policy field to google_eventarc_trigger resource (#25467)
• networksecurity: enabled in-place update for custom_mirroring_profile.mirroring_deployment_groups on google_network_security_security_profile (#25508)
• spanner: added autoscaling_config.autoscaling_targets.total_cpu_utilization_percent field to google_spanner_instance resource (#25495)
• sql: added changes to ignore changes in backup configuration's fields like enabled, binary_log_enabled, start_time, point_in_time_recovery_enabled, transaction_log_retention_days and backup_retention_settings.retained_backups in google_sql_database_instance if the instance is managed by Google Cloud Backup and Disaster (DR) Recovery Service. (#25516)

BUG FIXES:

• compute: fixed google_compute_network in-place update to enable enable_ula_internal_ipv6. (#25468)
• iam: fixed error 409 concurrency policy changes by correctly detecting the error type. (#25473)
• sql: fixed an issue where the computed psc_service_attachment_link attribute was not being exported properly in google_sql_database_instance resource and datasources (#25510)

7.13.0 (December 9, 2025)

NOTES:

• alloydb: reverted requiring initial_user.password as required on create for new google_alloydb_cluster resources, instead initial_user.password or initial_user.user must be set if initial_user is specified for google_alloydb_cluster resources (#25366)
• privateca: modified encryption_spec field from google_privateca_ca_pool resource to be mutable and allow cmek key rotation (#25267)

DEPRECATIONS:

• cloudquotas: deprecated effective_container and effective_enablement fields in the google_cloud_quotas_quota_adjuster_settings resource (#25443)
• dlp: deprecated publish_findings_to_cloud_data_catalog field in google_data_loss_prevention_job_trigger resource. Use publish_findings_to_dataplex_catalog field instead. (#25250)
• networkservices: removed google_service_binding resource due to service binding support being disabled (#25367)

FEATURES:

• New Resource: google_ces_app_version (#25297)

... (truncated)

Commits

• 9c89f05 Add PR link
• ab9ce2d Changelog
• dfc5297 Fix issue for empty metadata in service directory resources (#15971) (#25588)
• 7b38dc3 New generated code for MM PR 15972.
• 488280a 7.14.0 changelog (#25565)
• 6ab69d5 Add new resource RegionHealthSource to terraform-beta (#14956) (#25518)
• 018883d Changes to modify the google_sql_database_instance resource behavior to preve...
• 5825ab5 Multicast group consumer activation (#15885) (#25515)
• cacbf91 Multicast domain group (#15899) (#25514)
• 1c4c2e2 Add CIG Policy List API support in Terraform (#15812) (#25513)
• Additional commits viewable in compare view

Updates hashicorp/google from 7.12.0 to 7.14.1

Release notes

Sourced from hashicorp/google's releases.

v7.14.1

BUG FIXES:

• provider: fixed an issue where error type 409 and 412 were not being correctly retried. This commonly shows up in IAM resources, but can appear in other resources as well (#25596)
• servicedirectory: fixed an issue where google_service_directory_endpoint or google_service_directory_service without metadata specified would have other fields removed on update (#25588)

v7.14.0

DEPRECATIONS:

• managedkafka: added deprecation warning for google_managed_kafka_connect_cluster additional_subnets field (#25487)

FEATURES:

• New Data Source: google_artifact_registry_versions (#25512)
• New Data Source: google_cloud_identity_policies (#25513)
• New Data Source: google_compute_region_security_policy (#25488)
• New Data Source: google_compute_storage_pool (#25485)
• New Resource: google_compute_cross_site_network (#25479)
• New Resource: google_compute_wire_group (#25479)
• New Resource: google_network_services_multicast_group_consumer_activation (#25515)
• New Resource: google_network_services_multicast_group_producer_activation (#25472)

IMPROVEMENTS:

• alloydb: added connection_pool_config, connection_pool_config.enabled and connection_pool_config.flags in google_alloydb_instance resource (#25484)
• colab: added software_config.post_startup_script_config field to google_colab_runtime_template (#25509)
• compute: added new field instance_flexibility_policy.instance_selection.min_cpu_platform & instance_flexibility_policy.instance_selection.disks to google_compute_region_instance_group_manager (#25444)
• dataplex: removed the need for import in google_dataplex_entry when using first party source systems (#25507)
• dataproc: added auto_stop_time and idle_stop_ttl to google_dataproc_cluster resource (#25456)
• eventarc: added retry_policy field to google_eventarc_trigger resource (#25467)
• networksecurity: enabled in-place update for custom_mirroring_profile.mirroring_deployment_groups on google_network_security_security_profile (#25508)
• spanner: added autoscaling_config.autoscaling_targets.total_cpu_utilization_percent field to google_spanner_instance resource (#25495)
• sql: added changes to ignore changes in backup configuration's fields like enabled, binary_log_enabled, start_time, point_in_time_recovery_enabled, transaction_log_retention_days and backup_retention_settings.retained_backups in google_sql_database_instance if the instance is managed by Google Cloud Backup and Disaster (DR) Recovery Service. (#25516)

BUG FIXES:

• compute: fixed google_compute_network in-place update to enable enable_ula_internal_ipv6. (#25468)
• iam: fixed error 409 concurrency policy changes by correctly detecting the error type. (#25473)
• sql: fixed an issue where the computed psc_service_attachment_link attribute was not being exported properly in google_sql_database_instance resource and datasources (#25510)

v7.13.0

NOTES:

• alloydb: reverted requiring initial_user.password as required on create for new google_alloydb_cluster resources, instead initial_user.password or initial_user.user must be set if initial_user is specified for google_alloydb_cluster resources (#25366)
• privateca: modified encryption_spec field from google_privateca_ca_pool resource to be mutable and allow cmek key rotation (#25267)

DEPRECATIONS:

• cloudquotas: deprecated effective_container and effective_enablement fields in the google_cloud_quotas_quota_adjuster_settings resource (#25443)
• dlp: deprecated publish_findings_to_cloud_data_catalog field in google_data_loss_prevention_job_trigger resource. Use publish_findings_to_dataplex_catalog field instead. (#25250)
• networkservices: removed google_service_binding resource due to service binding support being disabled (#25367)

FEATURES:

• New Resource: google_ces_app_version (#25297)
• New Resource: google_compute_organization_security_policy (#25322)
• New Resource: google_dialogflow_generator (#25340)
• New Resource: google_dialogflow_version (#25179)

... (truncated)

Changelog

Sourced from hashicorp/google's changelog.

7.14.1 (Unreleased)

BUG FIXES:

• provider: fixed an issue where error type 409 and 412 were not being correctly retried. This commonly shows up in IAM resources, but can appear in other resources as well (#25596)
• servicedirectory: fixed an issue where google_service_directory_endpoint or google_service_directory_service without metadata specified would have other fields removed on update (#25588)

7.14.0 (December 12, 2025)

DEPRECATIONS:

• managedkafka: added deprecation warning for google_managed_kafka_connect_cluster additional_subnets field (#25487)

FEATURES:

• New Data Source: google_artifact_registry_versions (#25512)
• New Data Source: google_cloud_identity_policies (#25513)
• New Data Source: google_compute_region_security_policy (#25488)
• New Data Source: google_compute_storage_pool (#25485)
• New Resource: google_compute_cross_site_network (#25479)
• New Resource: google_compute_wire_group (#25479)
• New Resource: google_network_services_multicast_group_consumer_activation (#25515)
• New Resource: google_network_services_multicast_group_producer_activation (#25472)

IMPROVEMENTS:

• alloydb: added connection_pool_config, connection_pool_config.enabled and connection_pool_config.flags in google_alloydb_instance resource (#25484)
• colab: added software_config.post_startup_script_config field to google_colab_runtime_template (#25509)
• compute: added new field instance_flexibility_policy.instance_selection.min_cpu_platform & instance_flexibility_policy.instance_selection.disks to google_compute_region_instance_group_manager (#25444)
• dataplex: removed the need for import in google_dataplex_entry when using first party source systems (#25507)
• dataproc: added auto_stop_time and idle_stop_ttl to google_dataproc_cluster resource (#25456)
• eventarc: added retry_policy field to google_eventarc_trigger resource (#25467)
• networksecurity: enabled in-place update for custom_mirroring_profile.mirroring_deployment_groups on google_network_security_security_profile (#25508)
• spanner: added autoscaling_config.autoscaling_targets.total_cpu_utilization_percent field to google_spanner_instance resource (#25495)
• sql: added changes to ignore changes in backup configuration's fields like enabled, binary_log_enabled, start_time, point_in_time_recovery_enabled, transaction_log_retention_days and backup_retention_settings.retained_backups in google_sql_database_instance if the instance is managed by Google Cloud Backup and Disaster (DR) Recovery Service. (#25516)

BUG FIXES:

• compute: fixed google_compute_network in-place update to enable enable_ula_internal_ipv6. (#25468)
• iam: fixed error 409 concurrency policy changes by correctly detecting the error type. (#25473)
• sql: fixed an issue where the computed psc_service_attachment_link attribute was not being exported properly in google_sql_database_instance resource and datasources (#25510)

7.13.0 (December 9, 2025)

NOTES:

• alloydb: reverted requiring initial_user.password as required on create for new google_alloydb_cluster resources, instead initial_user.password or initial_user.user must be set if initial_user is specified for google_alloydb_cluster resources (#25366)
• privateca: modified encryption_spec field from google_privateca_ca_pool resource to be mutable and allow cmek key rotation (#25267)

DEPRECATIONS:

• cloudquotas: deprecated effective_container and effective_enablement fields in the google_cloud_quotas_quota_adjuster_settings resource (#25443)
• dlp: deprecated publish_findings_to_cloud_data_catalog field in google_data_loss_prevention_job_trigger resource. Use publish_findings_to_dataplex_catalog field instead. (#25250)
• networkservices: removed google_service_binding resource due to service binding support being disabled (#25367)

FEATURES:

• New Resource: google_ces_app_version (#25297)

... (truncated)

Commits

• 9c89f05 Add PR link
• ab9ce2d Changelog
• dfc5297 Fix issue for empty metadata in service directory resources (#15971) (#25588)
• 7b38dc3 New generated code for MM PR 15972.
• 488280a 7.14.0 changelog (#25565)
• 6ab69d5 Add new resource RegionHealthSource to terraform-beta (#14956) (#25518)
• 018883d Changes to modify the google_sql_database_instance resource behavior to preve...
• 5825ab5 Multicast group consumer activation (#15885) (#25515)
• cacbf91 Multicast domain group (#15899) (#25514)
• 1c4c2e2 Add CIG Policy List API support in Terraform (#15812) (#25513)
• Additional commits viewable in compare view

Updates hashicorp/google from 7.12.0 to 7.14.1

Release notes

Sourced from hashicorp/google's releases.

v7.14.1

BUG FIXES:

• provider: fixed an issue where error type 409 and 412 were not being correctly retried. This commonly shows up in IAM resources, but can appear in other resources as well (#25596)
• servicedirectory: fixed an issue where google_service_directory_endpoint or google_service_directory_service without metadata specified would have other fields removed on update (#25588)

v7.14.0

DEPRECATIONS:

• managedkafka: added deprecation warning for google_managed_kafka_connect_cluster additional_subnets field (#25487)

FEATURES:

• New Data Source: google_artifact_registry_versions (#25512)
• New Data Source: google_cloud_identity_policies (