terraform: update hashicorp/google requirement from ~> 6.0 to ~> 7.6 in /terraform

[dependabot]

Updates the requirements on hashicorp/google to permit the latest version.

Release notes

Sourced from hashicorp/google's releases.

v7.6.0

DEPRECATIONS:

• networksecurity: deprecated ignore_case, exact, prefix, suffix and contains fields in http_rules.from.not_sources.principals and http_rules.from.sources.principals blocks in google_network_security_authz_policy resource. Use the equivalent fields in http_rules.from.not_sources.principals.principal or http_rules.from.sources.principals.principal instead. (#24543)

BREAKING CHANGES:

• container: node_config blocks that had set kubelet_config without explicitly setting cpu_cfs_quota implicitly set cfu_cfs_quota to false when unset. From this version onwards, an unset cpu_cfs_quota will instead match the API default of true true. Resources that are recreated will receive the new value; old resources are unaffected, and may change values by explicitly setting the intended one. (#24569)
• storageinsights: removed activity_data_retention_period_days field from google_storage_insights_dataset_config resource due to a delayed launch. It will be readded when the feature launches. (#24570)

FEATURES:

• New Resource: google_kms_folder_kaj_policy_config (#24513)
• New Resource: google_vertex_ai_cache_config (#24541)
• New Resource: google_vertex_ai_reasoning_engine (#24512)

IMPROVEMENTS:

• backupdr: added data_source and rules_config_info fields to google_backup_dr_backup_plan_associations datasource (#24517)
• beyondcorp: added external, proxy_protocol, and schema fields to google_beyondcorp_security_gateway_application resource (#24542)
• beyondcorp: changed endpoint_matchers field to not be required anymore in the google_beyondcorp_security_gateway_application resource (#24542)
• cloudrunv2: added default_uri_disabled field to google_cloud_run_v2_service resource (#24556)
• compute: added shared_secret_wo and shared_secret_wo_version fields to google_compute_vpn_tunnel resource, enabling write-only management of the shared secret. (#24491)
• dlp: added SENSITIVITY_UNKNOWN as possible enum value for actions.tag_resources.tag_conditions.sensitivity_score.score in google_data_loss_prevention_discovery_config resource (#24564)
• dlp: added actions.save_findings.output_config.storage_path field to google_data_loss_prevention_job_trigger resource (#24558)
• filestore: added file_shares.nfs_export_options.network and networks.psc_config.endpoint_project fields to google_filestore_instance resource (#24567)
• lustre: increased creation timeout from 20min to 40min for google_lustre_instance resource (#24559)
• netapp: added hybrid_replication_user_commands field with subfield commands to google_netapp_volume_replication resource (#24554)
• netapp: added replication_schedule, hybrid_replication_type, large_volume_constituent_count fields to hybrid_replication_parameters field in google_netapp_volume resource (#24554)
• networksecurity: added ip_blocks field to google_network_security_authz_policy resource (#24543)
• secretmanager: added ephemeral support for google_secret_manager_secret_version resource (#24566)
• sql: added source_instance_deletion_time field to google_sql_database_instance_latest_recovery_time data source (#24576)
• sql: added source_instance_deletion_time field to google_sql_database_instance resource (#24576)
• storagetransfer: added user_project_override and billing_project fields to google_storage_transfer_job resource (#24504)

BUG FIXES:

• container: fixed the default for node_config.kubelet_config.cpu_cfs_quota on google_container_cluster, google_container_node_pool, google_container_cluster.node_pool to align with the API. Terraform will now send a true value when the field is unset on creation, and preserve any previously set value when unset. Explicitly set values will work as defined in configuration. (#24569)

Changelog

Sourced from hashicorp/google's changelog.

7.6.0 (October 7th, 2025)

DEPRECATIONS:

• networksecurity: deprecated ignore_case, exact, prefix, suffix and contains fields in http_rules.from.not_sources.principals and http_rules.from.sources.principals blocks in google_network_security_authz_policy resource. Use the equivalent fields in http_rules.from.not_sources.principals.principal or http_rules.from.sources.principals.principal instead. (#24543)

BREAKING CHANGES:

• container: node_config blocks that had set kubelet_config without explicitly setting cpu_cfs_quota implicitly set cfu_cfs_quota to false when unset. From this version onwards, an unset cpu_cfs_quota will instead match the API default of true true. Resources that are recreated will receive the new value; old resources are unaffected, and may change values by explicitly setting the intended one. (#24569)
• storageinsights: removed activity_data_retention_period_days field from google_storage_insights_dataset_config resource due to a delayed launch. It will be readded when the feature launches. (#24570)

FEATURES:

• New Resource: google_kms_folder_kaj_policy_config (#24513)
• New Resource: google_vertex_ai_cache_config (#24541)
• New Resource: google_vertex_ai_reasoning_engine (#24512)

IMPROVEMENTS:

• backupdr: added data_source and rules_config_info fields to google_backup_dr_backup_plan_associations datasource (#24517)
• beyondcorp: added external, proxy_protocol, and schema fields to google_beyondcorp_security_gateway_application resource (#24542)
• beyondcorp: changed endpoint_matchers field to not be required anymore in the google_beyondcorp_security_gateway_application resource (#24542)
• cloudrunv2: added default_uri_disabled field to google_cloud_run_v2_service resource (#24556)
• compute: added shared_secret_wo and shared_secret_wo_version fields to google_compute_vpn_tunnel resource, enabling write-only management of the shared secret. (#24491)
• dlp: added SENSITIVITY_UNKNOWN as possible enum value for actions.tag_resources.tag_conditions.sensitivity_score.score in google_data_loss_prevention_discovery_config resource (#24564)
• dlp: added actions.save_findings.output_config.storage_path field to google_data_loss_prevention_job_trigger resource (#24558)
• filestore: added file_shares.nfs_export_options.network and networks.psc_config.endpoint_project fields to google_filestore_instance resource (#24567)
• lustre: increased creation timeout from 20min to 40min for google_lustre_instance resource (#24559)
• netapp: added hybrid_replication_user_commands field with subfield commands to google_netapp_volume_replication resource (#24554)
• netapp: added replication_schedule, hybrid_replication_type, large_volume_constituent_count fields to hybrid_replication_parameters field in google_netapp_volume resource (#24554)
• networksecurity: added ip_blocks field to google_network_security_authz_policy resource (#24543)
• secretmanager: added ephemeral support for google_secret_manager_secret_version resource (#24566)
• sql: added source_instance_deletion_time field to google_sql_database_instance_latest_recovery_time data source (#24576)
• sql: added source_instance_deletion_time field to google_sql_database_instance resource (#24576)
• storagetransfer: added user_project_override and billing_project fields to google_storage_transfer_job resource (#24504)

BUG FIXES:

• container: fixed the default for node_config.kubelet_config.cpu_cfs_quota on google_container_cluster, google_container_node_pool, google_container_cluster.node_pool to align with the API. Terraform will now send a true value when the field is unset on creation, and preserve any previously set value when unset. Explicitly set values will work as defined in configuration. (#24569)

7.5.0 (September 30, 2025)

BREAKING CHANGES:

• netapp: changed peer_ip_addresses field type from String to Array in google_netapp_volume resource, as it was unusable otherwise (#24428)

FEATURES:

• New Data Source: google_artifact_registry_maven_artifacts (#24487)
• New Data Source: google_artifact_registry_npm_packages (#24486)
• New Resource: google_apigee_api_deployment (#24469)
• New Resource: google_discovery_engine_data_connector (#24472)
• New Resource: google_managed_kafka_connect_cluster (#24443)
• New Resource: google_managed_kafka_connector (#24443)
• New Resource: google_kms_organization_kaj_policy_config (#24471)
• New Resource: google_saas_runtime_rollout_kind (#24447)

... (truncated)

Commits

• a7ed4c0 Update 7.6.0 CHANGELOG.md (#24588)
• a9bb2e8 adding source_instance_deletion_time (#15239) (#24576)
• b45fb3d Update depraction date for IAP OAuth APIs. (#15260) (#24575)
• 2f1c3d0 Revert "Add activity journal feature for google_storage_insights_dataset_conf...
• d9313fa GKE: Conditionally send the cpu_cfs_quota field based on presence in config (...
• 99f50de Add PSC fields to Filestore instance in ga (#15116) (#24567)
• d5c46a5 secretmanager: ephemeral support for google_secret_manager_secret_version (...
• 08fa96b Add SENSITIVITY_UNKNOWN enum value to actions.tag_resources.tag_conditions.se...
• ddae87f fix TestAccComputeProjectDefaultNetworkTier_basic (#15276) (#24561)
• b9a0261 Remove TestAccContainerCluster_withIdentityServiceConfig (#15270) (#24560)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)