Update Terraform google to ~> 7.12.0

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
google (source)	required_provider	minor	~> 7.9.0 -> ~> 7.12.0

---

Release Notes

hashicorp/terraform-provider-google (google)

v7.12.0

Compare Source

v7.11.0

Compare Source

DEPRECATIONS:

• pubsublite: google_pubsub_lite_reservation will be turned down effective March 18, 2026. Use google_pubsub_reservation instead. (#​25058)
• pubsublite: google_pubsub_lite_subscription will be turned down effective March 18, 2026. Use google_pubsub_subscription instead. (#​25058)
• pubsublite: google_pubsub_lite_topic will be turned down effective March 18, 2026. Use google_pubsub_topic instead. (#​25058)

BREAKING CHANGES:

• netapp: made google_netapp_volume.export_policy.rules.squash_mode not preserve values returned by the API. Without this change, unsetting squash_mode in the provider can cause an API error. (#​25059)

FEATURES:

• New Data Source: google_artifact_registry_python_packages (#​25053)
• New Data Source: google_cloud_identity_policy (#​24946)
• New Data Source: google_compute_reservation_block (#​25034)
• New Data Source: google_compute_reservation_sub_block (#​25034)
• New Resource: google_ces_deployment (#​24945)
• New Resource: google_ces_example (#​25056)
• New Resource: google_discovery_engine_user_store (#​25054)

IMPROVEMENTS:

• bigquery: added external_data_configuration.decimal_target_types to google_bigquery_table (#​24936)
• compute: added internal_ipv6_prefix field to the google_compute_subnetwork resource (#​25037)
• compute: added ipv6_access_type field and INTERNAL_IPV6_SUBNETWORK_CREATION as a supported value for the mode field in google_compute_public_delegated_prefix resource (#​24940)
• compute: added ipv6_access_type field to google_compute_public_advertised_prefix resource (#​24911)
• dataplex: added data_documentation_spec field to google_dataplex_datascan resource to support the DATA_DOCUMENTATION scan type (#​25044)
• dataproc: added resource_manager_tags to google_dataproc_cluster resource (#​25057)
• lustre: added placement_policy field to google_lustre_instance resource (#​25042)
• netapp: added cache_parameters field to google_netapp_volume resource (#​24909)
• secretmanager: added project and short name support for secret on google_secret_manager_secret_version (#​25045)
• secretmanager: added project and short name support for secret on ephemeral google_secret_manager_secret_version (#​25045)

BUG FIXES:

• alloydb: fixed issue with creation when initial_user.password was set to a computed value in google_alloydb_cluster (#​25036)
• bigquery: fixed extraneous diffs in google_bigquery_table.external_data_configuration.schema (#​24936)
• compute: fixed a breaking change in google_compute_instance introduced in 7.9.0 where a destroy-diff is prompted for instances with preset GPUs (#​25021)
• container: added KUBE_DNS as an accepted value for cluster_dns field on google_container_cluster (#​24953)
• netapp: fixed bug where unsetting export_policy.rules.squash_mode on google_netapp_volume can cause an API error (#​25059)
• pubsub: fixed bug where google_pubsub_subscription could only be updated if bigquery_config was modified (#​24952)
• sql: fixed bug where final_backup_description in google_sql_database_instance resource wasn't set on the final backup on delete (#​25055)
• storage: fixed bug where certain changes to google_storage_bucket_acl.role_entity were ignored (#​24949)
• workstations: fixed bug in google_workstations_workstation where setting source_workstation caused a permadiff that forced recreation (#​24941)
• vmwareengine: made deletion of google_vmwareengine_private_cloud wait until the deletion completes (#​25040)

v7.10.0

Compare Source

BREAKING CHANGES:

• alloydb: marked initial_user.password as required on create of new google_alloydb_cluster resources. This change aligns the provider with existing API constraints to surface errors earlier. (#​25022)

FEATURES:

• New Resource: google_ces_app (#​24861)
• New Resource: google_ces_toolset (#​24885)
• New Resource: google_discovery_engine_control (#​24883)
• New Resource: google_netapp_host_group (#​24876)
• New Resource: google_network_management_organization_vpc_flow_logs_config (#​24896)
• New Resource: google_network_services_multicast_domain (#​24864)
• New Resource: google_privileged_access_manager_settings (#​24878)
• New Ephemeral Resource: google_client_config (#​24900)

IMPROVEMENTS:

• cloudfunctions2: added direct_vpc_network_interface and direct_vpc_egress field to google_cloudfunctions2_function resource (#​24895)
• cloudrunv2: added template.container.depends_on field to google_cloud_run_v2_worker_pool resource (#​24893)
• compute: added grpc_tls_health_check field to google_compute_healthcheck resource (#​24872)
• container: added network_tier_config to google_container_cluster resource. (#​24877)
• eventarc: added labels field to google_eventarc_channel resource (#​24854)
• netapp: added block_devices field and ISCSI protocol support to goolge_netapp_volume resource, and increased timeouts on its operations (#​24898)
• netapp: added type field to google_netapp_storage_pool resource (#​24867)
• vertexai: added psc_automation_configs field to google_vertex_ai_endpoint resource (#​24870)
• vertexai: added sync_config.continuous field to google_vertex_ai_feature_online_store_featureview (#​24881)

BUG FIXES:

• accesscontextmanager: fixed issue where google_access_context_manager_service_perimeter_[dry_run_][egress|ingress]_policy caused the provider to crash when a provided identity casing was invalid. (#​24886)
• apigee: fixed issue where credentials block was not populated in the Terraform state in google_apigee_developer_app resource (#​24880)
• compute: fixed google_compute_network_firewall_policy_rule staying disabled after apply with disabled = false (#​24879)
• compute: fixed a breaking change in google_compute_instance introduced in 7.9.0 where a destroy-diff is prompted for instances with preset GPUs (#​25020
• compute: resolve permadiff for display_name in new deployments of google_compute_organization_security_policy (#​24882)
• storage: fixed a conversion error in google_storage_bucket state migration. This bug impacted Pulumi users. (#​24853)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.