Sourced from hashicorp/google's releases.

v7.11.0

DEPRECATIONS:

• pubsublite: google_pubsub_lite_reservation will be turned down effective March 18, 2026. Use google_pubsub_reservation instead. (#25058)
• pubsublite: google_pubsub_lite_subscription will be turned down effective March 18, 2026. Use google_pubsub_subscription instead. (#25058)
• pubsublite: google_pubsub_lite_topic will be turned down effective March 18, 2026. Use google_pubsub_topic instead. (#25058)

BREAKING CHANGES:

• netapp: made google_netapp_volume.export_policy.rules.squash_mode not preserve values returned by the API. Without this change, unsetting squash_mode in the provider can cause an API error. (#25059)

FEATURES:

• New Data Source: google_artifact_registry_python_packages (#25053)
• New Data Source: google_cloud_identity_policy (#24946)
• New Data Source: google_compute_reservation_block (#25034)
• New Data Source: google_compute_reservation_sub_block (#25034)
• New Resource: google_ces_deployment (#24945)
• New Resource: google_ces_example (#25056)
• New Resource: google_discovery_engine_user_store (#25054)
• New Ephemeral Resource: google_client_config (#24900)

IMPROVEMENTS:

• bigquery: added external_data_configuration.decimal_target_types to google_bigquery_table (#24936)
• compute: added internal_ipv6_prefix field to the google_compute_subnetwork resource (#25037)
• compute: added ipv6_access_type field and INTERNAL_IPV6_SUBNETWORK_CREATION as a supported value for the mode field in google_compute_public_delegated_prefix resource (#24940)
• compute: added ipv6_access_type field to google_compute_public_advertised_prefix resource (#24911)
• dataplex: added data_documentation_spec field to google_dataplex_datascan resource to support the DATA_DOCUMENTATION scan type (#25044)
• dataproc: added resource_manager_tags to google_dataproc_cluster resource (#25057)
• lustre: added placement_policy field to google_lustre_instance resource (#25042)
• netapp: added cache_parameters field to google_netapp_volume resource (#24909)
• secretmanager: added project and short name support for secret on google_secret_manager_secret_version (#25045)
• secretmanager: added project and short name support for secret on ephemeral google_secret_manager_secret_version (#25045)

BUG FIXES:

• alloydb: fixed issue with creation when initial_user.password was set to a computed value in google_alloydb_cluster (#25036)
• bigquery: fixed extraneous diffs in google_bigquery_table.external_data_configuration.schema (#24936)
• compute: fixed a breaking change in google_compute_instance introduced in 7.9.0 where a destroy-diff is prompted for instances with preset GPUs (#25021)
• container: added KUBE_DNS as an accepted value for cluster_dns field on google_container_cluster (#24953)
• netapp: fixed bug where unsetting export_policy.rules.squash_mode on google_netapp_volume can cause an API error (#25059)
• pubsub: fixed bug where google_pubsub_subscription could only be updated if bigquery_config was modified (#24952)
• sql: fixed bug where final_backup_description in google_sql_database_instance resource wasn't set on the final backup on delete (#25055)
• storage: fixed bug where certain changes to google_storage_bucket_acl.role_entity were ignored (#24949)
• workstations: fixed bug in google_workstations_workstation where setting source_workstation caused a permadiff that forced recreation (#24941)
• vmwareengine: made deletion of google_vmwareengine_private_cloud wait until the deletion completes (#25040)

Sourced from hashicorp/google's changelog.

7.11.0 (Unreleased)

7.10.0 (November 4, 2025)

BREAKING CHANGES:

• alloydb: marked initial_user.password as required on create of new google_alloydb_cluster resources. This change aligns the provider with existing API constraints to surface errors earlier. (#25022)

FEATURES:

• New Resource: google_ces_app (#24861)
• New Resource: google_ces_toolset (#24885)
• New Resource: google_client_config (#24900)
• New Resource: google_discovery_engine_control (#24883)
• New Resource: google_netapp_host_group (#24876)
• New Resource: google_network_management_organization_vpc_flow_logs_config (#24896)
• New Resource: google_network_services_multicast_domain (#24864)
• New Resource: google_privileged_access_manager_settings (#24878)

IMPROVEMENTS:

• cloudfunctions2: added direct_vpc_network_interface and direct_vpc_egress field to google_cloudfunctions2_function resource (#24895)
• cloudrunv2: added template.container.depends_on field to google_cloud_run_v2_worker_pool resource (#24893)
• compute: added grpc_tls_health_check field to google_compute_healthcheck resource (#24872)
• container: added network_tier_config to google_container_cluster resource. (#24877)
• eventarc: added labels field to google_eventarc_channel resource (#24854)
• netapp: added block_devices field and ISCSI protocol support to goolge_netapp_volume resource, and increased timeouts on its operations (#24898)
• netapp: added type field to google_netapp_storage_pool resource (#24867)
• vertexai: added psc_automation_configs field to google_vertex_ai_endpoint resource (#24870)
• vertexai: added sync_config.continuous field to google_vertex_ai_feature_online_store_featureview (#24881)

BUG FIXES:

• accesscontextmanager: fixed issue where google_access_context_manager_service_perimeter_[dry_run_][egress|ingress]_policy caused the provider to crash when a provided identity casing was invalid. (#24886)
• apigee: fixed issue where credentials block was not populated in the Terraform state in google_apigee_developer_app resource (#24880)
• compute: fixed google_compute_network_firewall_policy_rule staying disabled after apply with disabled = false (#24879)
• compute: fixed a breaking change in google_compute_instance introduced in 7.9.0 where a destroy-diff is prompted for instances with preset GPUs (#25020
• compute: resolve permadiff for display_name in new deployments of google_compute_organization_security_policy (#24882)
• storage: fixed a conversion error in google_storage_bucket state migration. This bug impacted Pulumi users. (#24853)

7.9.0 (October 28th, 2025)

BREAKING CHANGES:

• beyondcorp: made the ports field in endpoint_matchers required in response to a change in the API surface. (#24770)

FEATURES:

• New Resource: google_firestore_user_creds (#24794)
• New Resource: google_network_security_dns_threat_detector (#24744)

IMPROVEMENTS:

• appengine: added ssl_policy to application on google_app_engine_application resource (#24786)
• bigquery: added support for IAM conditions in google_bigquery_dataset_iam_* (#24778)
• compute: promoted policy_type to GA in google_compute_network_firewall_policy, google_compute_network_firewall_policy_with_rules, google_compute_region_network_firewall_policy, google_compute_region_network_firewall_policy_with_rules. (#24769)
• container: added dns_endpoint_confg.enable_k8s_tokens_via_dns and dns_endpoint_config.enable_k8s_certs_via_dns fields to google_container_cluster resource (#24774)

... (truncated)

• 7bee362 7.11.0 google release notes (#25092)
• 5667385 go dependency update to v0.255.0 (#15640) (#25060)
• e89f124 Netapp all squash (#15436) (#25059)
• 5ccddc2 mark deprecated for all pub/sub lite resources (#15520) (#25058)
• 0189f10 Add support for dataproc cluster resource_manager_tags (#15634) (#25057)
• 62b505a Add Example resource for CES (#15590) (#25056)
• d8f4721 fix incorrect usage of final_backup_description in instance deletion (#15613)...
• 83848bc Add a new resource: UserStore (#15453) (#25054)
• 7bbe097 Add plural data source for retrieving Artifact Registry Python packages (#146...
• fb6ec4e fix: Add dependency on the Pub/Sub topic/subscription for tags examples (#155...
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)