Sourced from hashicorp/google-beta's releases.

v7.0.1

BUG FIXES:

• storage: fixed a conversion crash in google_storage_bucket state migration #10629

v7.0.0

Terraform Google Provider 7.0.0 Upgrade Guide

BREAKING RESOURCE REMOVALS:

• beyondcorp: removed google_beyondcorp_application, its associated IAM resources google_beyondcorp_application_iam_binding, google_beyondcorp_application_iam_member, and google_beyondcorp_application_iam_policy, and the google_beyondcorp_application_iam_policy datasource. Use google_beyondcorp_security_gateway_application instead. #10536
• notebooks: removed google_notebooks_location #10350
• tpu: removedgoogle_tpu_node. Use google_tpu_v2_vm instead. #10516

BREAKING FIELD REMOVALS:

• cloudrunv2: removed template.containers.depends_on within resource google_cloud_run_v2_worker_pool #10444
• colab: removed post_startup_script_config field from from google_colab_runtime_template resource #10555
• compute: removed field enable_flow_logs from google_compute_subnetwork #10398
• gkehub: removed configmanagement.binauthz field in google_gke_hub_feature_membership #10585
• gkehub: removed description field in google_gke_hub_membership #10344
• memorystore: removed allow_fewer_zones_deployment field from google_memorystore_instance resource because it isn't user-configurable #10588
• redis: removed allow_fewer_zones_deployment field from google_redis_cluster resource because it isn't user-configurable #10588
• resourcemanager: removed non-functional project field from google_service_account_key datasource #10537

BREAKING INCREASED VALIDATION:

• cloudfunctions2: made event_type a required field for event_trigger in google_cloudfunctions2_function #10501
• networkservices: made load_balancing_scheme required in google_network_services_lb_traffic_extension #10419
• sql: made password_wo_version required when password_wo is set in google_sql_user #10591
• storage: added validation requiring the topic field to be in the form "projects//topics/" in google_storage_notification #10602
• storagetransfer: added path validation for GCS path source and sink in google_storage_transfer_job #10297
• vertexai: made metadata, and metadata.config required in google_vertex_ai_index. Resource creation would fail without these attributes already, so no change is necessary to existing configurations. #10520

OTHER BREAKING CHANGES:

• provider: fixed many import functions throughout the provider that erroneously matched a subset of the provided input, leading to unclear error messages when using terraform input with invalid resource IDs. #10545
• alloydb: added deletion_protection field with a default value of true to google_alloydb_cluster resource #10553
• apigee: changed certs_info field in google_apigee_keystores_aliases_key_cert_file to be output-only #10602
• apigee: migrated google_apigee_keystores_aliases_key_cert_file to the plugin framework #10602
• artifactregistry: removed the default values for public_repository fields in google_artifact_registry_repository. If your state is reliant on them, they will now need to be manually included in your configuration. #10519
• bigquery: removed the default value of view.use_legacy_sql in google_bigquery_table #10578
• bigtable: renamed instance to instance_name for bigtable_table_iam objects #10248
• billing: made budget_filter.credit types and budget_filter.subaccounts no longer optional+computed, only optional, in google_billing_budget resource #10587
• cloudfunctions2: changed service_config.service field in google_cloudfunctions2_function resource to be output-only #10432
• compute: subnetworks and instances fields in google_compute_packet_mirroring have been converted from arrays to sets #10550
• compute: advertised_ip_ranges field group in google_compute_router has been converted from a list to a set #10557
• compute: disk.type, disk.mode and disk.interface no longer use provider configured default values and instead will be set by the API in google_compute_instance_template and google_compute_region_instance_template resources #10569
• gkehub: updated beta api endpoint from v1beta1 to v1beta #10344
• resourcemanager: changed disable_on_destroy default value to false in google_project_service #10508
• securesourcemanager: changed deletion_policy default value from DELETE to PREVENT #10515
• storage: changed retention_period to string data type in resource google_storage_bucket #10311
• storage: migrated google_storage_notification to the plugin framework #10602

FEATURES:

... (truncated)

Sourced from hashicorp/google-beta's changelog.

7.0.1 (August 27, 2025)

BUG FIXES:

• storage: fixed a conversion crash in google_storage_bucket state migration #10629

7.0.0 (August 26, 2025)

Terraform Google Provider 7.0.0 Upgrade Guide

BREAKING RESOURCE REMOVALS:

• beyondcorp: removed google_beyondcorp_application, its associated IAM resources google_beyondcorp_application_iam_binding, google_beyondcorp_application_iam_member, and google_beyondcorp_application_iam_policy, and the google_beyondcorp_application_iam_policy datasource. Use google_beyondcorp_security_gateway_application instead. #10536
• notebooks: removed google_notebooks_location #10350
• tpu: removedgoogle_tpu_node. Use google_tpu_v2_vm instead. #10516

BREAKING FIELD REMOVALS:

• cloudrunv2: removed template.containers.depends_on within resource google_cloud_run_v2_worker_pool #10444
• colab: removed post_startup_script_config field from from google_colab_runtime_template resource #10555
• compute: removed field enable_flow_logs from google_compute_subnetwork #10398
• gkehub: removed configmanagement.binauthz field in google_gke_hub_feature_membership #10585
• gkehub: removed description field in google_gke_hub_membership #10344
• memorystore: removed allow_fewer_zones_deployment field from google_memorystore_instance resource because it isn't user-configurable #10588
• redis: removed allow_fewer_zones_deployment field from google_redis_cluster resource because it isn't user-configurable #10588
• resourcemanager: removed non-functional project field from google_service_account_key datasource #10537

BREAKING INCREASED VALIDATION:

• cloudfunctions2: made event_type a required field for event_trigger in google_cloudfunctions2_function #10501
• networkservices: made load_balancing_scheme required in google_network_services_lb_traffic_extension #10419
• sql: made password_wo_version required when password_wo is set in google_sql_user #10591
• storage: added validation requiring the topic field to be in the form "projects//topics/" in google_storage_notification #10602
• storagetransfer: added path validation for GCS path source and sink in google_storage_transfer_job #10297
• vertexai: made metadata, and metadata.config required in google_vertex_ai_index. Resource creation would fail without these attributes already, so no change is necessary to existing configurations. #10520

OTHER BREAKING CHANGES:

• provider: fixed many import functions throughout the provider that erroneously matched a subset of the provided input, leading to unclear error messages when using terraform input with invalid resource IDs. #10545
• alloydb: added deletion_protection field with a default value of true to google_alloydb_cluster resource #10553
• apigee: changed certs_info field in google_apigee_keystores_aliases_key_cert_file to be output-only #10602
• apigee: migrated google_apigee_keystores_aliases_key_cert_file to the plugin framework #10602
• artifactregistry: removed the default values for public_repository fields in google_artifact_registry_repository. If your state is reliant on them, they will now need to be manually included in your configuration. #10519
• bigquery: removed the default value of view.use_legacy_sql in google_bigquery_table #10578
• bigtable: renamed instance to instance_name for bigtable_table_iam objects #10248
• billing: made budget_filter.credit types and budget_filter.subaccounts no longer optional+computed, only optional, in google_billing_budget resource #10587
• cloudfunctions2: changed service_config.service field in google_cloudfunctions2_function resource to be output-only #10432
• compute: subnetworks and instances fields in google_compute_packet_mirroring have been converted from arrays to sets #10550
• compute: advertised_ip_ranges field group in google_compute_router has been converted from a list to a set #10557
• compute: disk.type, disk.mode and disk.interface no longer use provider configured default values and instead will be set by the API in google_compute_instance_template and google_compute_region_instance_template resources #10569
• gkehub: updated beta api endpoint from v1beta1 to v1beta #10344
• resourcemanager: changed disable_on_destroy default value to false in google_project_service #10508
• securesourcemanager: changed deletion_policy default value from DELETE to PREVENT #10515
• storage: changed retention_period to string data type in resource google_storage_bucket #10311
• storage: migrated google_storage_notification to the plugin framework #10602

... (truncated)

• 116a1cb 7.0.1 changelog (#10630)
• 51387a5 fix storage bucket retention_period migration crash (#15000) (#10629)
• 69fff4e 7.0.0 changelogs (beta) (#10596)
• 4e6ea18 Fix 7.0.0 upgrade guide (#14959) (#10604)
• 4362e23 Plugin Framework feature branch merge (#14977) (#10602)
• f4cc6fd Merge feature branch major release 7.0.0 (#14962) (#10600)
• 9cc3ec9 Merge pull request #10599 from hashicorp/7.0.0-sync-tpgb
• 27af1de Merge branch 'main' into 7.0.0-sync-tpgb
• 5007ab6 7.00.0 sync 8-22 (#14949) (#10597)
• b017f81 6.49.2 release notes (#10594)
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)