chore(deps): bump hashicorp/google from 7.44.0 to 8.0.0 in /terraform

[dependabot]

Bumps hashicorp/google from 7.44.0 to 8.0.0.

Release notes

Sourced from hashicorp/google's releases.

v8.0.0

Terraform Google Provider 8.0.0 Upgrade Guide

BREAKING RESOURCE REMOVALS:

• beyondcorp: removed google_beyondcorp_app_connection, google_beyondcorp_app_connector, and google_beyondcorp_app_gateway resources, and the google_beyondcorp_app_connection, google_beyondcorp_app_connector, and google_beyondcorp_app_gateway data sources. Use google_beyondcorp_security_gateway and google_beyondcorp_security_gateway_application instead. (#18675)
• iap: removed google_iap_brand and google_iap_client resources, and the google_iap_client data source. (#18679)
• mlengine: removed google_ml_engine_model resource. Migrate machine learning deployments to google_vertex_ai_endpoint or Vertex AI Model Garden resources. (#18681)
• notebooks: removed google_notebooks_environment, google_notebooks_instance (and associated IAM resources), and google_notebooks_runtime (and associated IAM resources). Migrate to google_workbench_instance. (#18583)
• vertexai: removed google_vertex_ai_schedule resource. Use google_colab_schedule instead. (#18673)

BREAKING FIELD REMOVALS:

• backupdr: removed resource_type argument from google_backup_dr_backup_plan_associations and google_backup_dr_data_source_references data sources. (#18688)
• cloudrunv2: removed custom_audiences field from google_cloud_run_v2_worker_pool resource. (#18193)
• cloudrunv2: removed http_get.http_headers.port probe field from google_cloud_run_v2_worker_pool resource. (#18290)
• compute: removed attachment attribute within logical_structure.*.zones from google_compute_interconnect_attachment_group resource in favor of attachments. (#18676)
• compute: removed reservation_block_count field from google_compute_reservation resource in favor of resource_status[0].reservation_block_count. (#18611)
• datalossprevention: removed actions.publish_findings_to_cloud_data_catalog field from google_data_loss_prevention_job_trigger resource in favor of actions.publish_findings_to_dataplex_catalog. (#18530)
• integrations: removed run_as_service_account argument from google_integrations_client resource. (#18680)

BREAKING INCREASED VALIDATION:

• bigquerydatatransfer: changed constraint between sensitive_params.0.secret_access_key and sensitive_params.0.secret_access_key_wo from AtLeastOneOf to ExactlyOneOf in google_bigquery_data_transfer_config resource. (#18325)
• cloudrunv2: made http_get.http_headers.name required when http_get.http_headers is set in google_cloud_run_v2_worker_pool resource. (#18290)
• iamworkforcepool: made claim_mapping a required field on create in google_iam_workforce_pool_provider_scim_tenant resource. (#18348)
• monitoring: changed constraint between http_check.0.auth_info.0.password and http_check.0.auth_info.0.password_wo to ExactlyOneOf in google_monitoring_uptime_check_config resource. (#18325)
• secretmanager: made secret_data_wo_version required when secret_data_wo is set (RequiredWith) in google_secret_manager_secret_version resource. (#18325)
• workflows: made source_contents a required argument in google_workflows_workflow resource. (#18411)

OTHER BREAKING CHANGES:

• bigquerydatatransfer: converted sensitive_params.0.secret_access_key_wo_version from Integer to String data type with state migration in google_bigquery_data_transfer_config resource. (#18731)
• bigquery: removed default_from_api for default_collation in google_bigquery_dataset resource; setting default_collation = "" now explicitly clears collation. (#18585)
• cloudsecuritycompliance: converted cloud_control_details from list to set in google_cloud_security_compliance_framework resource. (#18596)
• compute: added default empty strings ("") to project_id_or_num, network_url, and endpoint_url within consumer_accept_lists in google_compute_service_attachment resource to resolve permadiffs. (#18276)
• compute: changed default value of load_balancing_scheme from EXTERNAL to EXTERNAL_MANAGED in google_compute_backend_service and google_compute_global_forwarding_rule resources. (#18557)
• compute: updated guest_accelerator in google_compute_instance to plan and apply removal/replacement when count is explicitly set to 0 (or guest_accelerator = []). (#18426)
• compute: converted nat_subnets and consumer_reject_lists from list to set in google_compute_service_attachment resource. (#18694)
• container: extended name_prefix max length from 14 to 31 characters in google_container_node_pool and google_container_cluster resources. (#18477)
• container: converted enable_components in logging_config and monitoring_config from list to set in google_container_cluster resource. (#18262)
• secretmanager: converted secret_data_wo_version from Integer to String data type with state migration in google_secret_manager_secret_version resource. (#18325)

v7.46.0

DEPRECATIONS:

• beyondcorp: deprecated google_beyondcorp_app_connection, google_beyondcorp_app_connector, and google_beyondcorp_app_gateway resources and data sources. Use google_beyondcorp_security_gateway and google_beyondcorp_security_gateway_application instead. (#28976)

FEATURES:

• New Data Source: google_memorystore_acl_policy (#28984)
• New Data Source: google_redis_cluster_acl_policy (#28985)
• New List Resource: google_migration_center_assets_export_job (#28904)
• New List Resource: google_migration_center_discovery_client (#28904)
• New List Resource: google_migration_center_group (#28904)
• New List Resource: google_migration_center_import_job (#28904)

... (truncated)

Changelog

Sourced from hashicorp/google's changelog.

8.0.0 (August 26, 2026)

Terraform Google Provider 8.0.0 Upgrade Guide

BREAKING RESOURCE REMOVALS:

• beyondcorp: removed google_beyondcorp_app_connection, google_beyondcorp_app_connector, and google_beyondcorp_app_gateway resources, and the google_beyondcorp_app_connection, google_beyondcorp_app_connector, and google_beyondcorp_app_gateway data sources. Use google_beyondcorp_security_gateway and google_beyondcorp_security_gateway_application instead. (#18675)
• iap: removed google_iap_brand and google_iap_client resources, and the google_iap_client data source. (#18679)
• mlengine: removed google_ml_engine_model resource. Migrate machine learning deployments to google_vertex_ai_endpoint or Vertex AI Model Garden resources. (#18681)
• notebooks: removed google_notebooks_environment, google_notebooks_instance (and associated IAM resources), and google_notebooks_runtime (and associated IAM resources). Migrate to google_workbench_instance. (#18583)
• vertexai: removed google_vertex_ai_schedule resource. Use google_colab_schedule instead. (#18673)

BREAKING FIELD REMOVALS:

• backupdr: removed resource_type argument from google_backup_dr_backup_plan_associations and google_backup_dr_data_source_references data sources. (#18688)
• cloudrunv2: removed custom_audiences field from google_cloud_run_v2_worker_pool resource. (#18193)
• cloudrunv2: removed http_get.http_headers.port probe field from google_cloud_run_v2_worker_pool resource. (#18290)
• compute: removed attachment attribute within logical_structure.*.zones from google_compute_interconnect_attachment_group resource in favor of attachments. (#18676)
• compute: removed reservation_block_count field from google_compute_reservation resource in favor of resource_status[0].reservation_block_count. (#18611)
• datalossprevention: removed actions.publish_findings_to_cloud_data_catalog field from google_data_loss_prevention_job_trigger resource in favor of actions.publish_findings_to_dataplex_catalog. (#18530)
• integrations: removed run_as_service_account argument from google_integrations_client resource. (#18680)

BREAKING INCREASED VALIDATION:

• bigquerydatatransfer: changed constraint between sensitive_params.0.secret_access_key and sensitive_params.0.secret_access_key_wo from AtLeastOneOf to ExactlyOneOf in google_bigquery_data_transfer_config resource. (#18325)
• cloudrunv2: made http_get.http_headers.name required when http_get.http_headers is set in google_cloud_run_v2_worker_pool resource. (#18290)
• iamworkforcepool: made claim_mapping a required field on create in google_iam_workforce_pool_provider_scim_tenant resource. (#18348)
• monitoring: changed constraint between http_check.0.auth_info.0.password and http_check.0.auth_info.0.password_wo to ExactlyOneOf in google_monitoring_uptime_check_config resource. (#18325)
• secretmanager: made secret_data_wo_version required when secret_data_wo is set (RequiredWith) in google_secret_manager_secret_version resource. (#18325)
• workflows: made source_contents a required argument in google_workflows_workflow resource. (#18411)

OTHER BREAKING CHANGES:

• bigquerydatatransfer: converted sensitive_params.0.secret_access_key_wo_version from Integer to String data type with state migration in google_bigquery_data_transfer_config resource. (#18731)
• bigquery: removed default_from_api for default_collation in google_bigquery_dataset resource; setting default_collation = "" now explicitly clears collation. (#18585)
• cloudsecuritycompliance: converted cloud_control_details from list to set in google_cloud_security_compliance_framework resource. (#18596)
• compute: added default empty strings ("") to project_id_or_num, network_url, and endpoint_url within consumer_accept_lists in google_compute_service_attachment resource to resolve permadiffs. (#18276)
• compute: changed default value of load_balancing_scheme from EXTERNAL to EXTERNAL_MANAGED in google_compute_backend_service and google_compute_global_forwarding_rule resources. (#18557)
• compute: updated guest_accelerator in google_compute_instance to plan and apply removal/replacement when count is explicitly set to 0 (or guest_accelerator = []). (#18426)
• compute: converted nat_subnets and consumer_reject_lists from list to set in google_compute_service_attachment resource. (#18694)
• container: extended name_prefix max length from 14 to 31 characters in google_container_node_pool and google_container_cluster resources. (#18477)
• container: converted enable_components in logging_config and monitoring_config from list to set in google_container_cluster resource. (#18262)
• secretmanager: converted secret_data_wo_version from Integer to String data type with state migration in google_secret_manager_secret_version resource. (#18325)

7.46.0 (August 25, 2026)

DEPRECATIONS:

• beyondcorp: deprecated google_beyondcorp_app_connection, google_beyondcorp_app_connector, and google_beyondcorp_app_gateway resources and data sources. Use google_beyondcorp_security_gateway and google_beyondcorp_security_gateway_application instead. (#28976)

FEATURES:

• New Data Source: google_memorystore_acl_policy (#28984)
• New Data Source: google_redis_cluster_acl_policy (#28985)
• New List Resource: google_migration_center_assets_export_job (#28904)
• New List Resource: google_migration_center_discovery_client (#28904)

... (truncated)

Commits

• 51f70cf [8.0.0] Bump UA to dev8 (#29021)
• 1fabd7c Release Notes for version 8.0.0 (ga) (#29010)
• a5706a0 [8.0.0] Fast-forward release-8.0.0 to main(revert Filestore REP (#29018)
• e03b762 docs: add missing version 8 upgrade guide entries (#18737) (#29008)
• 7fcbe29 Merge feature branch major release 8.0.0 (#18733) (#29006)
• 04a16a7 compute: migrate google_compute_forwarding_rules to SendRequest (#18532) (#28...
• eafa84a Make updatable: google_discovery_engine_search_engine search_engine_config.re...
• 50f6d7e biglake: add serde_info to biglake table storage_descriptor (#18706) (#28990)
• 6a001e6 docs: sync and format 8.0.0 upgrade guide (#18714) (#28989)
• f9bafe5 [Filestore] Enable regional endpoint (REP) support (#18605) (#28987)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)