Bump the terraform group across 31 directories with 2 updates

[dependabot]

Bumps the terraform group with 1 update in the /gcp/modules/audit directory: hashicorp/google.
Bumps the terraform group with 2 updates in the /gcp/modules/bastion directory: hashicorp/google and hashicorp/random.
Bumps the terraform group with 1 update in the /gcp/modules/ca directory: hashicorp/google.
Bumps the terraform group with 1 update in the /gcp/modules/ctlog directory: hashicorp/google.
Bumps the terraform group with 1 update in the /gcp/modules/dex directory: hashicorp/google.
Bumps the terraform group with 1 update in the /gcp/modules/external_secrets directory: hashicorp/google.
Bumps the terraform group with 1 update in the /gcp/modules/fulcio directory: hashicorp/google.
Bumps the terraform group with 2 updates in the /gcp/modules/gke_cluster directory: hashicorp/google and hashicorp/random.
Bumps the terraform group with 1 update in the /gcp/modules/monitoring directory: hashicorp/google.
Bumps the terraform group with 1 update in the /gcp/modules/monitoring/dex directory: hashicorp/google.
Bumps the terraform group with 1 update in the /gcp/modules/monitoring/fulcio directory: hashicorp/google.
Bumps the terraform group with 1 update in the /gcp/modules/monitoring/infra directory: hashicorp/google.
Bumps the terraform group with 1 update in the /gcp/modules/monitoring/prober directory: hashicorp/google.
Bumps the terraform group with 1 update in the /gcp/modules/monitoring/rekor directory: hashicorp/google.
Bumps the terraform group with 1 update in the /gcp/modules/monitoring/rekorv2/active_shard directory: hashicorp/google.
Bumps the terraform group with 1 update in the /gcp/modules/monitoring/rekorv2/lb directory: hashicorp/google.
Bumps the terraform group with 1 update in the /gcp/modules/monitoring/slo directory: hashicorp/google.
Bumps the terraform group with 1 update in the /gcp/modules/monitoring/tesseract/active_shard directory: hashicorp/google.
Bumps the terraform group with 1 update in the /gcp/modules/monitoring/tesseract/lb directory: hashicorp/google.
Bumps the terraform group with 1 update in the /gcp/modules/monitoring/timestamp directory: hashicorp/google.
Bumps the terraform group with 1 update in the /gcp/modules/monitoring/tuf directory: hashicorp/google.
Bumps the terraform group with 2 updates in the /gcp/modules/mysql directory: hashicorp/google and hashicorp/random.
Bumps the terraform group with 1 update in the /gcp/modules/mysql-shard directory: hashicorp/google.
Bumps the terraform group with 1 update in the /gcp/modules/network directory: hashicorp/google.
Bumps the terraform group with 1 update in the /gcp/modules/oslogin directory: hashicorp/google.
Bumps the terraform group with 1 update in the /gcp/modules/project_roles directory: hashicorp/google.
Bumps the terraform group with 1 update in the /gcp/modules/rekor directory: hashicorp/google.
Bumps the terraform group with 1 update in the /gcp/modules/sigstore directory: hashicorp/google.
Bumps the terraform group with 1 update in the /gcp/modules/tiles_tlog directory: hashicorp/google.
Bumps the terraform group with 1 update in the /gcp/modules/timestamp directory: hashicorp/google.
Bumps the terraform group with 1 update in the /gcp/modules/tuf directory: hashicorp/google.

Updates hashicorp/google from 7.14.1 to 7.17.0

Release notes

Sourced from hashicorp/google's releases.

v7.17.0

BREAKING CHANGES:

• networkconnectivity: changed services in google_network_connectivity_multicloud_data_transfer_config from TypeList to TypeSet. The order of or value of interpolations referencing the field may change. (#25767)

FEATURES:

• New Resource: google_dataplex_data_product (#25844)
• New Resource: google_dialogflow_cx_tool_version (#25809)
• New Resource: google_firebase_ai_logic_config (#25846)
• New Resource: google_firebase_ai_logic_prompt_template (#25862)
• New Resource: google_firebase_ai_logic_prompt_template_lock (#25877)
• New Resource: google_saas_runtime_unit_operation (#25760)
• New Resource: google_vmwareengine_datastore (#25845)
• New Data Source: google_vmwareengine_datastore (#25845)

IMPROVEMENTS:

• backupdr: added support for restore compute instance and disk (#25723)
• bigquery: added source_column_match field to csv_options in google_bigquery_table resource (#25868)
• compute: added FIPS_202205 enum to PROFILE field in SSL_POLICY and REGION_SSL_POLICY resources, and added TLS_1_3 enum to MIN_TLS_VERSION field in SSL_POLICY and REGION_SSL_POLICY resources. (#25777)
• compute: added attachments field to google_compute_interconnect_attachment_group.logicalStructure.regions.metros.facilities.zones and deprecated attachment field (#25842)
• compute: added enable_enhanced_ipv4_allocation field to google_compute_public_delegated_prefix resource (#25732)
• compute: added ip_collection field to google_compute_address resource (#25732)
• compute: added source_instant_snapshot field to google_compute_snapshot resource (#25780)
• compute: added support for "IF_L2_FORWARDING" as a value for the availableFeatures field of the google_compute_interconnect resource (#25751)
• compute: added support for "IF_L2_FORWARDING" as a value for the requestedFeatures field of the google_compute_interconnect resource (#25751)
• compute: added support for "L2_DEDICATED" as a value for the type field of the google_compute_interconnect_attachment resource. (#25751)
• compute: added support for igmp_query field in google_compute_instance, google_compute_instance_template, and related instance resources. (#25752)
• compute: added support for the l2Forwarding field to google_compute_interconnect_attachment (#25751)
• compute: promoted request_body_inspection_size to GA in google_compute_security_policy resource (ga) (#25775)
• container: added accelerator_network_config field to node_pool resource (#25856)
• container: added managed_opentelemetry_config to google_container_cluster resource (#25861)
• container: added node_drain_config field to google_container_node_pool resources (#25791)
• container: improved google_container_cluster reconciliation time by caching node pools and instance group managers after a list call instead of getting each one seperately. (#25784)
• datastream: added backfill_all.spanner_excluded_objects and source_config.spanner_source_config fields to google_datastream_stream (#25804)
• datastream: added spanner_profile field to google_datastream_connection_profile (#25804)
• dialogflowcx: added serviceAccountAuthConfig field to google_dialogflow_cx_webhook resource (#25781)
• oracledatabase: added peerAutonomousDatabases, disasterRecoverySupportedLocations, sourceConfig fields to Autonomous database resource. (#25859)
• tags: added allowed_values_regex field to google_tags_tag_key resource (#25869)
• tags: added support for dynamic tag keys in google_tags_tag_binding and google_tags_location_tag_binding resources (#25874)
• vertex_ai: added deployment_spec.psc_interface_config to google_vertex_ai_reasoning_engine (#25765)

BUG FIXES:

• bigquery: fixed permadiff with the collation field in google_bigquery_table.schema (#25762)
• cloudasset: fixed bug in google_cloud_asset_folder_feed where folder_id was always empty (#25798)
• cloudbuild: fixed permadiff on google_cloudbuild_trigger.pubsub_config.service_account_email (#25792)
• compute: fix crash when specifying an empty instance_flexibility_policy block on the google_compute_region_instance_group_manager resource (#25731)
• compute: fixed a permadiff that could occur when using mixed short and long form IPv6 addresses in the source_ranges field of google_compute_firewall (#25867)
• iambeta: fixed a permadiff that could occur in the jwks_json field for google_iam_workload_identity_pool_provider resource (#25847)
• netapp: fixed export_policy update bug with squash_mode in netapp volume (#25776)
• networkconnectivity: fixed a diff on services in google_network_connectivity_multicloud_data_transfer_config reordering elements (#25767)
• sql: fixed an issue where transient server errors caused false failures for SQL operations that eventually completed successfully (#25735)

... (truncated)

Changelog

Sourced from hashicorp/google's changelog.

7.17.0 (Unreleased)

7.16.0 (January 13, 2026)

DEPRECATIONS:

• cloudrunv2: deprecated custom_audience field in the google_cloud_run_v2_worker_pool resource, as this field is not applicable to the WorkerPools resource (#25688)

FEATURES:

• New Data Source: google_compute_routers (#25715)
• New Resource: google_backup_dr_restore_workload (#25723)

IMPROVEMENTS:

• backupdr: added max_custom_on_demand_retention_days field to google_backup_dr_backup_plan resource (#25704)
• bigquery: added support for merge and update operations for dataPolicies in schema field in google_bigquery_table resource when ignore_schema_changes is defined (#25721)
• bigtable: added etag field to google_bigtable_schema_bundle resource (#25687)
• compute: added BPS_400G enum value to bandwidth field in google_compute_interconnect_attachment resource (#25714)
• container: added registry_hosts field to containerd_config in google_container_cluster and google_container_node_pool resources (#25705)
• dataplex: added one_time field to google_dataplex_datascan resource (#25695)
• datastream: added postgresql_profile.ssl_config to google_datastream_connection_profile resource (#25671)
• networkservices: added EXT_AUTHZ_GRPC enum value to wire_format field in google_network_services_authz_extension resource (#25706)
• networkservices: added disable_placement_policy field to google_network_services_multicast_domain_activation resource (#25720)
• networkservices: added metadata, supported_events, request_body_send_mode, and observability_mode fields to google_network_services_lb_route_extension resource (#25702)
• securitycenterv2: added support for supplying location values other than "GLOBAL" to the google_scc_v2_project_notification_config resource (#25698)
• storageinsights: added activity_data_retention_period_days field to google_storage_insights_dataset_config resource (#25703)
• workbench: added support to set post-startup script metadata keys with managed EUC in google_workbench_instance resource (#25719)

7.15.0 (January 6, 2026)

NOTES:

• lustre: increased delete and update operation timeouts from 20 minutes to 60 minutes for google_lustre_instance resource (#25662)

BREAKING CHANGES:

• compute: changed cipher_suite fields in the google_compute_vpn_tunnel resource to track order (#25657)

FEATURES:

• New Resource: google_apigee_security_feedback (#25589)
• New Resource: google_apphub_boundary (#25640)
• New Resource: google_biglake_iceberg_catalog_iam_binding (#25638)
• New Resource: google_biglake_iceberg_catalog_iam_member (#25638)
• New Resource: google_biglake_iceberg_catalog_iam_policy (#25638)
• New Resource: google_biglake_iceberg_catalog (#25528)
• New Resource: google_compute_organization_security_policy_association (#25643)
• New Resource: google_network_connectivity_destination (#25663)
• New Resource: google_network_connectivity_multicloud_data_transfer_config (#25609)
• New Resource: google_network_security_dns_threat_detector (#25634)

IMPROVEMENTS:

• backupdr: added ignore_read to encryption_config field in google_backup_dr_backup_vault resource (#25685)
• biglakeiceberg: made google_biglake_iceberg_catalog use the resource project as the quota project when user_project_override is true (#25638)
• composer: added new enum ENVIRONMENT_SIZE_EXTRA_LARGE to environment_size field to google_composer_environment resource (#25531)

... (truncated)

Commits

• 637f020 release 7.17.0 changelogs (#25883)
• 8964582 Merge pull request #25880 from hashicorp/release-7.17.0-ff
• 7d5b371 Terraform resource for Firebase AI Logic Prompt Template Lock (#16190) (#25877)
• 793754d Update Certificate.yaml references (#16193) (#25875)
• 1e1e13c Add dynamic tags support in TagBindings resources (#16138) (#25874)
• 7dff383 Additional automated test for cross region and multiregion restore using back...
• 0415505 Add docs subdomain to resourcemanager links (#16189) (#25871)
• 6624f07 feat(bigqueryanalyticshub): add multi-region support to listings and … (#1615...
• dfcc2da Add allowed_values_regex field to google_tags_tag_key resource (#15997) (#25869)
• 59d6873 Add source_column_match to BigQuery external table csv_options (#16169) (#25868)
• Additional commits viewable in compare view

Updates hashicorp/google from 7.14.1 to 7.17.0

Release notes

Sourced from hashicorp/google's releases.

v7.17.0

BREAKING CHANGES:

• networkconnectivity: changed services in google_network_connectivity_multicloud_data_transfer_config from TypeList to TypeSet. The order of or value of interpolations referencing the field may change. (#25767)

FEATURES:

• New Resource: google_dataplex_data_product (#25844)
• New Resource: google_dialogflow_cx_tool_version (#25809)
• New Resource: google_firebase_ai_logic_config (#25846)
• New Resource: google_firebase_ai_logic_prompt_template (#25862)
• New Resource: google_firebase_ai_logic_prompt_template_lock (#25877)
• New Resource: google_saas_runtime_unit_operation (#25760)
• New Resource: google_vmwareengine_datastore (#25845)
• New Data Source: google_vmwareengine_datastore (#25845)

IMPROVEMENTS:

• backupdr: added support for restore compute instance and disk (#25723)
• bigquery: added source_column_match field to csv_options in google_bigquery_table resource (#25868)
• compute: added FIPS_202205 enum to PROFILE field in SSL_POLICY and REGION_SSL_POLICY resources, and added TLS_1_3 enum to MIN_TLS_VERSION field in SSL_POLICY and REGION_SSL_POLICY resources. (#25777)
• compute: added attachments field to google_compute_interconnect_attachment_group.logicalStructure.regions.metros.facilities.zones and deprecated attachment field (#25842)
• compute: added enable_enhanced_ipv4_allocation field to google_compute_public_delegated_prefix resource (#25732)
• compute: added ip_collection field to google_compute_address resource (#25732)
• compute: added source_instant_snapshot field to google_compute_snapshot resource (#25780)
• compute: added support for "IF_L2_FORWARDING" as a value for the availableFeatures field of the google_compute_interconnect resource (#25751)
• compute: added support for "IF_L2_FORWARDING" as a value for the requestedFeatures field of the google_compute_interconnect resource (#25751)
• compute: added support for "L2_DEDICATED" as a value for the type field of the google_compute_interconnect_attachment resource. (#25751)
• compute: added support for igmp_query field in google_compute_instance, google_compute_instance_template, and related instance resources. (#25752)
• compute: added support for the l2Forwarding field to google_compute_interconnect_attachment (#25751)
• compute: promoted request_body_inspection_size to GA in google_compute_security_policy resource (ga) (#25775)
• container: added accelerator_network_config field to node_pool resource (#25856)
• container: added managed_opentelemetry_config to google_container_cluster resource (#25861)
• container: added node_drain_config field to google_container_node_pool resources (#25791)
• container: improved google_container_cluster reconciliation time by caching node pools and instance group managers after a list call instead of getting each one seperately. (#25784)
• datastream: added backfill_all.spanner_excluded_objects and source_config.spanner_source_config fields to google_datastream_stream (#25804)
• datastream: added spanner_profile field to google_datastream_connection_profile (#25804)
• dialogflowcx: added serviceAccountAuthConfig field to google_dialogflow_cx_webhook resource (#25781)
• oracledatabase: added peerAutonomousDatabases, disasterRecoverySupportedLocations, sourceConfig fields to Autonomous database resource. (#25859)
• tags: added allowed_values_regex field to google_tags_tag_key resource (#25869)
• tags: added support for dynamic tag keys in google_tags_tag_binding and google_tags_location_tag_binding resources (#25874)
• vertex_ai: added deployment_spec.psc_interface_config to google_vertex_ai_reasoning_engine (#25765)

BUG FIXES:

• bigquery: fixed permadiff with the collation field in google_bigquery_table.schema (#25762)
• cloudasset: fixed bug in google_cloud_asset_folder_feed where folder_id was always empty (#25798)
• cloudbuild: fixed permadiff on google_cloudbuild_trigger.pubsub_config.service_account_email (#25792)
• compute: fix crash when specifying an empty instance_flexibility_policy block on the google_compute_region_instance_group_manager resource (#25731)
• compute: fixed a permadiff that could occur when using mixed short and long form IPv6 addresses in the source_ranges field of google_compute_firewall (#25867)
• iambeta: fixed a permadiff that could occur in the jwks_json field for google_iam_workload_identity_pool_provider resource (#25847)
• netapp: fixed export_policy update bug with squash_mode in netapp volume (#25776)
• networkconnectivity: fixed a diff on services in google_network_connectivity_multicloud_data_transfer_config reordering elements (#25767)
• sql: fixed an issue where transient server errors caused false failures for SQL operations that eventually completed successfully (#25735)

... (truncated)

Changelog

Sourced from hashicorp/google's changelog.

7.17.0 (Unreleased)

7.16.0 (January 13, 2026)

DEPRECATIONS:

• cloudrunv2: deprecated custom_audience field in the google_cloud_run_v2_worker_pool resource, as this field is not applicable to the WorkerPools resource (#25688)

FEATURES:

• New Data Source: google_compute_routers (#25715)
• New Resource: google_backup_dr_restore_workload (#25723)

IMPROVEMENTS:

• backupdr: added max_custom_on_demand_retention_days field to google_backup_dr_backup_plan resource (#25704)
• bigquery: added support for merge and update operations for dataPolicies in schema field in google_bigquery_table resource when ignore_schema_changes is defined (#25721)
• bigtable: added etag field to google_bigtable_schema_bundle resource (#25687)
• compute: added BPS_400G enum value to bandwidth field in google_compute_interconnect_attachment resource (#25714)
• container: added registry_hosts field to containerd_config in google_container_cluster and google_container_node_pool resources (#25705)
• dataplex: added one_time field to google_dataplex_datascan resource (#25695)
• datastream: added postgresql_profile.ssl_config to google_datastream_connection_profile resource (#25671)
• networkservices: added EXT_AUTHZ_GRPC enum value to wire_format field in google_network_services_authz_extension resource (#25706)
• networkservices: added disable_placement_policy field to google_network_services_multicast_domain_activation resource (#25720)
• networkservices: added metadata, supported_events, request_body_send_mode, and observability_mode fields to google_network_services_lb_route_extension resource (#25702)
• securitycenterv2: added support for supplying location values other than "GLOBAL" to the google_scc_v2_project_notification_config resource (#25698)
• storageinsights: added activity_data_retention_period_days field to google_storage_insights_dataset_config resource (#25703)
• workbench: added support to set post-startup script metadata keys with managed EUC in google_workbench_instance resource (#25719)

7.15.0 (January 6, 2026)

NOTES:

• lustre: increased delete and update operation timeouts from 20 minutes to 60 minutes for google_lustre_instance resource (#25662)

BREAKING CHANGES:

• compute: changed cipher_suite fields in the google_compute_vpn_tunnel resource to track order (#25657)

FEATURES:

• New Resource: google_apigee_security_feedback (#25589)
• New Resource: google_apphub_boundary (#25640)
• New Resource: google_biglake_iceberg_catalog_iam_binding (#25638)
• New Resource: google_biglake_iceberg_catalog_iam_member (#25638)
• New Resource: google_biglake_iceberg_catalog_iam_policy (#25638)
• New Resource: google_biglake_iceberg_catalog (#25528)
• New Resource: google_compute_organization_security_policy_association (#25643)
• New Resource: google_network_connectivity_destination (#25663)
• New Resource: google_network_connectivity_multicloud_data_transfer_config (#25609)
• New Resource: google_network_security_dns_threat_detector (#25634)

IMPROVEMENTS:

• backupdr: added ignore_read to encryption_config field in google_backup_dr_backup_vault resource (#25685)
• biglakeiceberg: made google_biglake_iceberg_catalog use the resource project as the quota project when user_project_override is true (#25638)
• composer: added new enum ENVIRONMENT_SIZE_EXTRA_LARGE to environment_size field to google_composer_environment resource (#25531)

... (truncated)

Commits

• 637f020 release 7.17.0 changelogs (#25883)
• 8964582 Merge pull request #25880 from hashicorp/release-7.17.0-ff
• 7d5b371 Terraform resource for Firebase AI Logic Prompt Template Lock (#16190) (#25877)
• 793754d Update Certificate.yaml references (#16193) (#25875)
• 1e1e13c Add dynamic tags support in TagBindings resources (#16138) (#25874)
• 7dff383 Additional automated test for cross region and multiregion restore using back...
• 0415505 Add docs subdomain to resourcemanager links (#16189) (#25871)
• 6624f07 feat(bigqueryanalyticshub): add multi-region support to listings and … (#1615...
• dfcc2da Add allowed_values_regex field to google_tags_tag_key resource (#15997) (#25869)
• 59d6873 Add source_column_match to BigQuery external table csv_options (#16169) (#25868)
• Additional commits viewable in compare view

Updates hashicorp/random from 3.7.2 to 3.8.1

Release notes

Sourced from hashicorp/random's releases.

v3.8.1

3.8.1 (January 27, 2026)

NOTES:

• This release introduces no functional changes but has been signed with a valid certificate for the windows binary. (#749)

v3.8.0

3.8.0 (January 12, 2026)

ENHANCEMENTS:

• Add uuid4 and uuid7 resources to generate valid random uuids of the appropriate version (#402)

Changelog

Sourced from hashicorp/random's changelog.

3.8.1 (January 27, 2026)

NOTES:

• This release introduces no functional changes but has been signed with a valid certificate for the windows binary. (#749)

3.8.0 (January 12, 2026)

ENHANCEMENTS:

• Add uuid4 and uuid7 resources to generate valid random uuids of the appropriate version (#402)

Commits

• de3700a chore: release v3.8.1 prep (#753)
• a586f45 build(deps): Bump actions/checkout in the github-actions group (#752)
• 8e70fb1 build(deps): Bump actions/setup-go in the github-actions group (#751)
• 1a47b64 build(deps): Bump golang.org/x/crypto from 0.46.0 to 0.47.0 (#748)
• 291382a chore: Prep for v3.8.0 release (#747)
• 9d3d692 chore: Update to latest Go version (#746)
• ba4961c [COMPLIANCE] Update Copyright and License Headers (Batch 1 of 1) (#738)
• f11d257 build(deps): Bump the github-actions group with 2 updates (#743)
• 95ead94 build(deps): Bump the github-actions group with 2 updates (#739)
• 4d0cfdf build(deps): Bump golang.org/x/crypto from 0.45.0 to 0.46.0 (#740)
• Additional commits viewable in compare view

Updates hashicorp/google from 7.14.1 to 7.17.0

Release notes

Sourced from hashicorp/google's releases.

v7.17.0

BREAKING CHANGES:

• networkconnectivity: changed services in google_network_connectivity_multicloud_data_transfer_config from TypeList to TypeSet. The order of or value of interpolations referencing the field may change. (#25767)

FEATURES:

• New Resource: google_dataplex_data_product (#25844)
• New Resource: google_dialogflow_cx_tool_version (#25809)
• New Resource: google_firebase_ai_logic_config (#25846)
• New Resource: google_firebase_ai_logic_prompt_template (#25862)
• New Resource: google_firebase_ai_logic_prompt_template_lock (#25877)
• New Resource: google_saas_runtime_unit_operation (#25760)
• New Resource: google_vmwareengine_datastore (#25845)
• New Data Source: google_vmwareengine_datastore (#25845)

IMPROVEMENTS:

• backupdr: added support for restore compute instance and disk (#25723)
• bigquery: added source_column_match field to csv_options in google_bigquery_table resource (#25868)
• compute: added FIPS_202205 enum to PROFILE field in SSL_POLICY and REGION_SSL_POLICY resources, and added TLS_1_3 enum to MIN_TLS_VERSION field in SSL_POLICY and REGION_SSL_POLICY resources. (#25777)
• compute: added attachments field to google_compute_interconnect_attachment_group.logicalStructure.regions.metros.facilities.zones and deprecated attachment field (#25842)
• compute: added enable_enhanced_ipv4_allocation field to google_compute_public_delegated_prefix resource (#25732)
• compute: added ip_collection field to google_compute_address resource (#25732)
• compute: added source_instant_snapshot field to google_compute_snapshot resource (#25780)
• compute: added support for "IF_L2_FORWARDING" as a value for the availableFeatures field of the google_compute_interconnect resource (#25751)
• compute: added support for "IF_L2_FORWARDING" as a value for the requestedFeatures field of the google_compute_interconnect resource (#25751)
• compute: added support for "L2_DEDICATED" as a value for the type field of the google_compute_interconnect_attachment resource. (#25751)
• compute: added support for igmp_query field in google_compute_instance, google_compute_instance_template, and related instance resources. (#25752)
• compute: added support for the l2Forwarding field to google_compute_interconnect_attachment (#25751)
• compute: promoted request_body_inspection_size to GA in google_compute_security_policy resource (ga) (#25775)
• container: added accelerator_network_config field to node_pool resource (#25856)
• container: added managed_opentelemetry_config to google_container_cluster resource (#25861)
• container: added node_drain_config field to google_container_node_pool resources (#25791)
• container: improved google_container_cluster reconciliation time by caching node pools and instance group managers after a list call instead of getting each one seperately. (#25784)
• datastream: added backfill_all.spanner_excluded_objects and source_config.spanner_source_config fields to google_datastream_stream (#25804)
• datastream: added spanner_profile field to google_datastream_connection_profile (#25804)
• dialogflowcx: added serviceAccountAuthConfig field to google_dialogflow_cx_webhook resource (#25781)
• oracledatabase: added peerAutonomousDatabases, disasterRecoverySupportedLocations, sourceConfig fields to Autonomous database resource. (#25859)
• tags: added allowed_values_regex field to google_tags_tag_key resource (#25869)
• tags: added support for dynamic tag keys in google_tags_tag_binding and google_tags_location_tag_binding resources (#25874)
• vertex_ai: added deployment_spec.psc_interface_config to google_vertex_ai_reasoning_engine (#25765)

BUG FIXES:

• bigquery: fixed permadiff with the collation field in google_bigquery_table.schema (#25762)
• cloudasset: fixed bug in google_cloud_asset_folder_feed where folder_id was always empty (#25798)
• cloudbuild: fixed permadiff on google_cloudbuild_trigger.pubsub_config.service_account_email (#25792)
• compute: fix crash when specifying an empty instance_flexibility_policy block on the google_compute_region_instance_group_manager resource (#25731)
• compute: fixed a permadiff that could occur when using mixed short and long form IPv6 addresses in the source_ranges field of google_compute_firewall (#25867)
• iambeta: fixed a permadiff that could occur in the jwks_json field for google_iam_workload_identity_pool_provider resource (#25847)
• netapp: fixed export_policy update bug with squash_mode in netapp volume (#25776)
• networkconnectivity: fixed a diff on services in google_network_connectivity_multicloud_data_transfer_config reordering elements (#25767)
• sql: fixed an issue where transient server errors caused false failures for SQL operations that eventually completed successfully (#25735)

... (truncated)

Changelog

Sourced from hashicorp/google's changelog.

7.17.0 (Unreleased)

7.16.0 (January 13, 2026)

DEPRECATIONS:

• cloudrunv2: deprecated custom_audience field in the google_cloud_run_v2_worker_pool resource, as this field is not applicable to the WorkerPools resource (#25688)

FEATURES:

• New Data Source: google_compute_routers (#25715)
• New Resource: google_backup_dr_restore_workload (#25723)

IMPROVEMENTS:

• backupdr: added max_custom_on_demand_retention_days field to google_backup_dr_backup_plan resource (#25704)
• bigquery: added support for merge and update operations for dataPolicies in schema field in google_bigquery_table resource when ignore_schema_changes is defined (