Bump hashicorp/google from 7.14.1 to 7.15.0 in /infrastructure

[dependabot]

Bumps hashicorp/google from 7.14.1 to 7.15.0.

Release notes

Sourced from hashicorp/google's releases.

v7.15.0

NOTES:

• lustre: increased delete and update operation timeouts from 20 minutes to 60 minutes for google_lustre_instance resource (#25662)

BREAKING CHANGES:

• compute: changed cipher_suite fields in the google_compute_vpn_tunnel resource to track order (#25657)

FEATURES:

• New Resource: google_apigee_security_feedback (#25589)
• New Resource: google_apphub_boundary (#25640)
• New Resource: google_biglake_iceberg_catalog_iam_binding (#25638)
• New Resource: google_biglake_iceberg_catalog_iam_member (#25638)
• New Resource: google_biglake_iceberg_catalog_iam_policy (#25638)
• New Resource: google_biglake_iceberg_catalog (#25528)
• New Resource: google_compute_organization_security_policy_association (#25643)
• New Resource: google_network_connectivity_destination (#25663)
• New Resource: google_network_connectivity_multicloud_data_transfer_config (#25609)
• New Resource: google_network_security_dns_threat_detector (#25634)

IMPROVEMENTS:

• backupdr: added ignore_read to encryption_config field in google_backup_dr_backup_vault resource (#25685)
• biglakeiceberg: made google_biglake_iceberg_catalog use the resource project as the quota project when user_project_override is true (#25638)
• composer: added new enum ENVIRONMENT_SIZE_EXTRA_LARGE to environment_size field to google_composer_environment resource (#25531)
• compute: added candidate_cloud_router_ip_address, candidate_customer_router_ip_address, candidate_cloud_router_ipv6_address, and candidate_customer_router_ipv6_address fields to google_compute_interconnect_attachment resource (#25581)
• compute: added prefix_length field to google_compute_addresses data source (#25654)
• compute: added client_destination_port and instance fields to google_compute_region_network_endpoints resource (#25621)
• datastream: added support for the rule_sets field in the google_datastream_stream resource, allowing configuration of customization rules, such as BigQuery destinations partitioning and clustering. (#25529)
• iamworkforcepool: added hard_delete support in google_iam_workforce_pool_provider_scim_tenant resource (#25656)
• looker: added periodic_export_config field to google_looker_instance resource (#25610)
• lustre: added access_rules_options field to google_lustre_instance resource to support root squashing and IP-based access control configuration (#25617)
• managedkafka: replaced disk_size_gb with disk_size_gib in broker_capacity_config within the google_managed_kafka_cluster resource (#25613)
• networkservices: added state field to google_network_services_multicast_domain resource (#25532)
• redis: added labels to google_redis_cluster (#25639)
• sql: marked replication_cluster.psa_write_endpoint field as Computed in google_sql_database_instance resource (#25573)
• sql: set replication_cluster when update google_sql_database_instance resource if there is a disaster recovery(DR) replica set or there is a PSA write endpoint (#25573)
• storage: updated datasource google_storage_object_signed_url.signed_url to use virtual style hosted url (#25568)
• vertexai: added bigtable, zone, encryption_spec, and bigtable_options fields to google_vertex_ai_feature_online_store resource (#25601)
• vertexai: added psc_automation_configs to resource google_vertex_ai_index_endpoint (#25570)

BUG FIXES:

• provider: fixed an issue where error type 409 and 412 were not being correctly retried. This commonly shows up in IAM resources, but can appear in other resources as well (#25596)
• alloydb: fixed an issue where boolean fields were ignored when set to false for google_alloydb_cluster and google_alloydb_instance (#25561)
• cloudrunv2: fixed a permadiff when default values of the scaling block were explicitly declared on the google_cloud_run_v2_service resource (#25569)
• compute: fixed a crash in google_compute_disk/google_compute_region_disk when deleting a disk attached to an instance that had any scratch disks attached (#25641)
• compute: fixed issue where endpoints.interconnects.vlan_tags wouldn't be read correctly from the API in google_compute_wire_group resource (#25602)
• compute: fixed update logic that causes empty instance being sent for google_compute_network_endpoints (#25621)
• datacatalog: fixed issue where fields.display_name wouldn't be read correctly from the API in google_data_catalog_tag resource (#25602)
• discoveryengine: marked cmek_config_id field in google_discovery_engine_cmek_config resource as required (#25527)
• securitygateway: allowed empty field for service_discovery in google_beyondcorp_security_gateway (#25653)
• securitygateway: allowed empty fields for user_info, group_info and device_info in google_beyondcorp_security_gateway (#25653)

... (truncated)

Changelog

Sourced from hashicorp/google's changelog.

7.15.0 (Unreleased)

7.14.0 (December 16, 2025)

DEPRECATIONS:

• managedkafka: added deprecation warning for google_managed_kafka_connect_cluster additional_subnets field (#25487)

FEATURES:

• New Data Source: google_artifact_registry_versions (#25512)
• New Data Source: google_cloud_identity_policies (#25513)
• New Data Source: google_compute_region_security_policy (#25488)
• New Data Source: google_compute_storage_pool (#25485)
• New Resource: google_compute_cross_site_network (#25479)
• New Resource: google_compute_wire_group (#25479)
• New Resource: google_network_services_multicast_group_consumer_activation (#25515)
• New Resource: google_network_services_multicast_group_producer_activation (#25472)

IMPROVEMENTS:

• alloydb: added connection_pool_config, connection_pool_config.enabled and connection_pool_config.flags in google_alloydb_instance resource (#25484)
• colab: added software_config.post_startup_script_config field to google_colab_runtime_template (#25509)
• compute: added new field instance_flexibility_policy.instance_selection.min_cpu_platform & instance_flexibility_policy.instance_selection.disks to google_compute_region_instance_group_manager (#25444)
• dataplex: removed the need for import in google_dataplex_entry when using first party source systems (#25507)
• dataproc: added auto_stop_time and idle_stop_ttl to google_dataproc_cluster resource (#25456)
• eventarc: added retry_policy field to google_eventarc_trigger resource (#25467)
• networksecurity: enabled in-place update for custom_mirroring_profile.mirroring_deployment_groups on google_network_security_security_profile (#25508)
• spanner: added autoscaling_config.autoscaling_targets.total_cpu_utilization_percent field to google_spanner_instance resource (#25495)
• sql: added changes to ignore changes in backup configuration's fields like enabled, binary_log_enabled, start_time, point_in_time_recovery_enabled, transaction_log_retention_days and backup_retention_settings.retained_backups in google_sql_database_instance if the instance is managed by Google Cloud Backup and Disaster (DR) Recovery Service. (#25516)

BUG FIXES:

• compute: fixed google_compute_network in-place update to enable enable_ula_internal_ipv6. (#25468)
• iam: fixed error 409 concurrency policy changes by correctly detecting the error type. (#25473)
• sql: fixed an issue where the computed psc_service_attachment_link attribute was not being exported properly in google_sql_database_instance resource and datasources (#25510)

7.13.0 (December 9, 2025)

NOTES:

• alloydb: reverted requiring initial_user.password as required on create for new google_alloydb_cluster resources, instead initial_user.password or initial_user.user must be set if initial_user is specified for google_alloydb_cluster resources (#25366)
• privateca: modified encryption_spec field from google_privateca_ca_pool resource to be mutable and allow cmek key rotation (#25267)

DEPRECATIONS:

• cloudquotas: deprecated effective_container and effective_enablement fields in the google_cloud_quotas_quota_adjuster_settings resource (#25443)
• dlp: deprecated publish_findings_to_cloud_data_catalog field in google_data_loss_prevention_job_trigger resource. Use publish_findings_to_dataplex_catalog field instead. (#25250)
• networkservices: removed google_service_binding resource due to service binding support being disabled (#25367)

FEATURES:

• New Resource: google_ces_app_version (#25297)
• New Resource: google_compute_organization_security_policy (#25322)
• New Resource: google_dialogflow_generator (#25340)
• New Resource: google_dialogflow_version (#25179)
• New Resource: google_discovery_engine_widget_config (#25378)

... (truncated)

Commits

• 3b35a54 ga - 7.15.0 release notes (#25673)
• bab342a Added ignore_read to encryption_config field in google_backup_dr_backup_vault...
• f33b40f Introduce Destination resource (#16002) (#25663)
• 2a8e108 Lustre increase timeout for update and delete async operations (#16046) (#25662)
• 4014d15 Agent Engine: add source based deployment documentation. (#16011) (#25661)
• 7db096a feat: add support for zip deploys to cloudrunv2 services (beta) (#16005) (#25...
• f5ff164 Update looker_instance PSC example for service_attachments (#15799) (#25658)
• 9aa985e Correcting strict cipher (#15866) (#25657)
• aa9cc1c Add support for hard delete in Workforce Pool Provider SCIM Tenant Deletion A...
• 853f8a0 Refactor GCS force delete to separate object and anywhere cache deletions (#1...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)