[dependabot]

Bumps hashicorp/google from 5.45.2 to 8.9.0.

Release notes

Sourced from hashicorp/google's releases.

v8.9.0

NOTES:

• compute: updated google_compute_disk, google_compute_region_disk, and google_compute_snapshot to fail at plan time instead of recreating the resource when removing the KMS key, or changing it while kms_key_service_account is set (#30059)

DEPRECATIONS:

• container: deprecated addons_config.parallelstore_csi_driver_config on google_container_cluster. Use addons_config.lustre_csi_driver_config instead (#30328)
• container: deprecated remove_default_node_pool on google_container_cluster in favor of omitting initial_node_count and node_config (or setting initial_node_count = 0). When this is set to true and the default node pool was not created, this will do a noop. (#30375)
• parallelstore: deprecated google_parallelstore_instance. Use google_lustre_instance instead (#30328)

FEATURES:

• New Data Source: google_agent_identity_auth_provider_iam_policy (#30327)
• New Resource: google_agent_identity_auth_provider_iam_binding (#30327)
• New Resource: google_agent_identity_auth_provider_iam_member (#30327)
• New Resource: google_agent_identity_auth_provider_iam_policy (#30327)
• New Resource: google_bigtable_memory_layer (#30314)
• New Resource: google_dataflow_flex_template_job (#30318)
• New Resource: google_network_services_service_lb_policies (#30223)
• New Resource: google_resource_manager_boundary (#30257)
• New Resource: google_resource_manager_boundary_config (#30257)
• New Resource: google_vertex_ai_custom_job (#30220)
• New Resource: google_vertex_ai_pipeline_job (#30201)
• New Resource: google_vertex_ai_rag_file (#30272)

IMPROVEMENTS:

• agenticapplications: added artifacts_config.audit_trail_export_options field to google_agentic_applications_analyst_agent_persona resource (#30227)
• bigqueryconnection: added salesforce_data_cloud field to google_bigquery_connection resource (#30356)
• bigqueryreservation: added scheduling_policy field to google_bigquery_reservation and google_bigquery_reservation_assignment resources (#30065)
• bigtable: added standard_isolation.memory_config field to google_bigtable_app_profile resource (#30368)
• cloudbuild: added worker_config.worker_release field to google_cloudbuild_worker_pool resource (#30315)
• cloudbuild: increased default create, update, and delete timeouts for google_cloudbuild_worker_pool from 20 minutes to 120 minutes (#30079)
• colab: added workbench_runtime.custom_container_image and kernel_name fields to google_colab_notebook_execution resource (#30219)
• compute: added address_id attribute for google_compute_address data source (#30316)
• compute: added FORCE deletion_policy support to google_compute_instance_group_manager and google_compute_region_instance_group_manager (#30058)
• compute: added IDPF and SUSPEND_SAFE_FPR to guest_os_features.type in google_compute_region_disk and SUSPEND_SAFE_FPR in google_compute_image (#30047)
• compute: added ipv6_address field to google_compute_network_endpoint (#30317)
• compute: added ipv6_address field to google_compute_network_endpoints (#30371)
• compute: added params.resource_manager_tags field to google_compute_network_edge_security_service resource (#30218)
• compute: added in-place updates when adding disk_encryption_key.kms_key_self_link to google_compute_disk, disk_encryption_key.kms_key_name to google_compute_region_disk, and snapshot_encryption_key.kms_key_self_link to google_compute_snapshot when the resource has no key (#30059)
• compute: added server generated id as firewall_id to google_compute_firewall (#30367)
• compute: added server generated id as router_id to google_compute_router (#30367)
• compute: added server generated id as service_attachment_id to google_compute_service_attachment (#30367)
• compute: allowed updating provisioned_iops and provisioned_throughput in place on google_compute_instance hyperdisk boot disks instead of recreating the instance (#30334)
• compute: promoted instance_flexibility_policy.instance_selections.min_cpu_platform and instance_flexibility_policy.instance_selections.disks to GA in google_compute_region_instance_group_manager (#30162)
• compute: promoted mirror_percent in request_mirror_policy to GA for google_compute_url_map and google_compute_region_url_map (#30224)
• container: added default_image_type and valid_image_types fields to google_container_engine_versions data source (#30243)
• container: added support for SHORT_LIVED value to node_pool.upgrade_settings.strategy in google_container_cluster and upgrade_settings.strategy in google_container_node_pool (#30322)
• container: promoted schedule_upgrade_config to GA in google_container_cluster (#30254)
• container: updated google_container_cluster to support creating clusters without a default node pool when initial_node_count and node_config are omitted (or initial_node_count is set to 0). When remove_default_node_pool = true and the default node pool was not created, remove_default_node_pool will do a noop. (#30375)
• container: updated initial_node_count on google_container_cluster so it can be removed from config or set to null without creating a diff while still respecting 0 when set in config (#30375)
• dataproc: added cluster_config.master_flexible_config, cluster_config.worker_flexible_config, and cluster_config.secondary_worker_flexible_config fields to google_dataproc_cluster resource (#30372)

... (truncated)

Changelog

Sourced from hashicorp/google's changelog.

8.9.0 (Oct 27, 2026)

NOTES:

• compute: updated google_compute_disk, google_compute_region_disk, and google_compute_snapshot to fail at plan time instead of recreating the resource when removing the KMS key, or changing it while kms_key_service_account is set (#30059)

DEPRECATIONS:

• container: deprecated addons_config.parallelstore_csi_driver_config on google_container_cluster. Use addons_config.lustre_csi_driver_config instead (#30328)
• container: deprecated remove_default_node_pool on google_container_cluster in favor of omitting initial_node_count and node_config (or setting initial_node_count = 0). When this is set to true and the default node pool was not created, this will do a noop. (#30375)
• parallelstore: deprecated google_parallelstore_instance. Use google_lustre_instance instead (#30328)

FEATURES:

• New Data Source: google_agent_identity_auth_provider_iam_policy (#30327)
• New Resource: google_agent_identity_auth_provider_iam_binding (#30327)
• New Resource: google_agent_identity_auth_provider_iam_member (#30327)
• New Resource: google_agent_identity_auth_provider_iam_policy (#30327)
• New Resource: google_bigtable_memory_layer (#30314)
• New Resource: google_dataflow_flex_template_job (#30318)
• New Resource: google_network_services_service_lb_policies (#30223)
• New Resource: google_resource_manager_boundary (#30257)
• New Resource: google_resource_manager_boundary_config (#30257)
• New Resource: google_vertex_ai_custom_job (#30220)
• New Resource: google_vertex_ai_pipeline_job (#30201)
• New Resource: google_vertex_ai_rag_file (#30272)

IMPROVEMENTS:

• agenticapplications: added artifacts_config.audit_trail_export_options field to google_agentic_applications_analyst_agent_persona resource (#30227)
• bigqueryconnection: added salesforce_data_cloud field to google_bigquery_connection resource (#30356)
• bigqueryreservation: added scheduling_policy field to google_bigquery_reservation and google_bigquery_reservation_assignment resources (#30065)
• bigtable: added standard_isolation.memory_config field to google_bigtable_app_profile resource (#30368)
• cloudbuild: added worker_config.worker_release field to google_cloudbuild_worker_pool resource (#30315)
• cloudbuild: increased default create, update, and delete timeouts for google_cloudbuild_worker_pool from 20 minutes to 120 minutes (#30079)
• colab: added workbench_runtime.custom_container_image and kernel_name fields to google_colab_notebook_execution resource (#30219)
• compute: added address_id attribute for google_compute_address data source (#30316)
• compute: added FORCE deletion_policy support to google_compute_instance_group_manager and google_compute_region_instance_group_manager (#30058)
• compute: added IDPF and SUSPEND_SAFE_FPR to guest_os_features.type in google_compute_region_disk and SUSPEND_SAFE_FPR in google_compute_image (#30047)
• compute: added ipv6_address field to google_compute_network_endpoint (#30317)
• compute: added ipv6_address field to google_compute_network_endpoints (#30371)
• compute: added params.resource_manager_tags field to google_compute_network_edge_security_service resource (#30218)
• compute: added in-place updates when adding disk_encryption_key.kms_key_self_link to google_compute_disk, disk_encryption_key.kms_key_name to google_compute_region_disk, and snapshot_encryption_key.kms_key_self_link to google_compute_snapshot when the resource has no key (#30059)
• compute: added server generated id as firewall_id to google_compute_firewall (#30367)
• compute: added server generated id as router_id to google_compute_router (#30367)
• compute: added server generated id as service_attachment_id to google_compute_service_attachment (#30367)
• compute: allowed updating provisioned_iops and provisioned_throughput in place on google_compute_instance hyperdisk boot disks instead of recreating the instance (#30334)
• compute: promoted instance_flexibility_policy.instance_selections.min_cpu_platform and instance_flexibility_policy.instance_selections.disks to GA in google_compute_region_instance_group_manager (#30162)
• compute: promoted mirror_percent in request_mirror_policy to GA for google_compute_url_map and google_compute_region_url_map (#30224)
• container: added default_image_type and valid_image_types fields to google_container_engine_versions data source (#30243)
• container: added support for SHORT_LIVED value to node_pool.upgrade_settings.strategy in google_container_cluster and upgrade_settings.strategy in google_container_node_pool (#30322)
• container: promoted schedule_upgrade_config to GA in google_container_cluster (#30254)
• container: updated google_container_cluster to support creating clusters without a default node pool when initial_node_count and node_config are omitted (or initial_node_count is set to 0). When remove_default_node_pool = true and the default node pool was not created, remove_default_node_pool will do a noop. (#30375)
• container: updated initial_node_count on google_container_cluster so it can be removed from config or set to null without creating a diff while still respecting 0 when set in config (#30375)

... (truncated)

Commits

• ffc5d7f Update CHANGELOG.md for 8.9.0 release (#30397)
• 687050c Add bugfix cherrypicks to 8.9.0 (#30407)
• 7746ed4 compute: add CUSTOM_HARDWARE_LINK subnetwork purpose (#19579) (#30376)
• 9fa843d container: support 0-node google_container_cluster creation and deprecate rem...
• 9b265ed sql: redact sensitive fields in BGD switchover validation (#19619) (#30374)
• 9848f25 serviceusagev2: fix ConsumerPolicy schema & lifecycle bugs (#19515) (#30373)
• 30b049c dataproc: add High Obtainability flexible instance group configs to google_da...
• 0cb186c compute: add ipv6_address to google_compute_network_endpoints (#19594) (#30371)
• 3b4f7b6 Update Go to 1.26.10 (#19595) (#30369)
• 8f99b19 bigtable: add memory_config to google_bigtable_app_profile (#19580) (#30368)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)