Sourced from hashicorp/google's releases.

v8.11.0

DEPRECATIONS:

• vertexai: deprecated optimized on google_vertex_ai_feature_online_store. Use bigtable for online serving instead. (#13700)

FEATURES:

• New Data Source: google_redis_cluster_token_auth_user (#13748)
• New Resource: google_backup_dr_auto_protection_policy_binding (beta) (#13669)
• New Resource: google_data_lineage_open_lineage_job (#13722)
• New Resource: google_dialogflow_companion_agent (#13699)
• New Resource: google_redis_cluster_token_auth_user (#13748)
• New Resource: google_vertex_ai_evaluation_item (#13670)

IMPROVEMENTS:

• agenticapplications: added mcp_data_sources.session_id_header and mcp_data_sources.task_id_header fields to google_agentic_applications_analyst_agent_persona resource (#13703)
• apigee: added NO_RETENTION value to retention field on google_apigee_organization resource (#13667)
• apigee: added labels field to google_apigee_api resource (#13716)
• bigquery: added external_runtime_options.volume_mounts field to google_bigquery_routine resource (beta) (#13764)
• ces: added modality and model_settings fields to google_ces_deployment resource (#13725)
• cloudbuild: added build.options.worker_release field to google_cloudbuild_trigger resource (#13750)
• compute: added ASN option to enforce_on_key and enforce_on_key_configs.enforce_on_key_type fields in google_compute_security_policy, google_compute_security_policy_rule, google_compute_region_security_policy, and google_compute_region_security_policy_rule resources (#13694)
• gemini: added has_custom_instructions field to google_gemini_gemini_gcp_enablement_setting resource (#13756)
• integrationconnectors: added eventing_config.allowed_event_types, eventing_config.global_event_filter, eventing_config.dead_letter_config, and eventing_config.enrichment_config fields to google_integration_connectors_connection resource (#13696)
• integrations: added decrypted_credential.oauth2_authorization_code.apply_reauth_policy, decrypted_credential.oauth2_authorization_code.request_type, decrypted_credential.oauth2_authorization_code.auth_params, and decrypted_credential.oauth2_authorization_code.token_params fields to google_integrations_auth_config resource (#13695)
• memorystore: added zone_distribution_config.zones and zone_distribution_config.active_zones fields to google_memorystore_instance resource (#13731)
• netapp: added destination_volume_parameters.tiering_policy.hot_tier_bypass_mode_enabled field to google_netapp_volume_replication resource (#13698)
• networkservices: added observability_mode field to google_network_services_lb_traffic_extension resource (#13668)
• provider: improved refresh speed of *_iam_member, *_iam_binding, *_iam_audit_config and *_iam_policy resources and *_iam_policy data sources that share a parent, which are no longer read one at a time (#13757)
• redis: added zone_distribution_config.zones and zone_distribution_config.active_zones fields to google_redis_cluster resource (#13731)
• resourcemanagerv3: added boundaries field to google_resource_manager_capability_config resource (#13763)
• storage: added rapid_cache_config field to google_storage_managed_folder resource (#13755)
• storageinsights: added labels field to google_storage_insights_report_config resource (#13697)
• vertexai: added spec.context_spec.memory_bank_config.customization_configs.generate_memories_examples.conversation_source.events.content.parts.speech_metadata field to google_vertex_ai_reasoning_engine resource (#13701)
• workstations: added host.gce_instance.reservation_affinity and host.gce_instance.boost_configs.reservation_affinity fields to google_workstations_workstation_config resource (beta) (#13685)

BUG FIXES:

• accesscontextmanager: fixed Resource Identity import for google_access_context_manager_access_level, google_access_context_manager_access_levels, google_access_context_manager_service_perimeter, google_access_context_manager_service_perimeters, google_access_context_manager_service_perimeter_resource, google_access_context_manager_service_perimeter_ingress_policy, and google_access_context_manager_service_perimeter_egress_policy (#13684)
• apigateway: fixed default provider region not being populated in state and Resource Identity for google_api_gateway_gateway when region is omitted from configuration (#13708)
• apigee: fixed Resource Identity import for google_apigee_addons_config, google_apigee_endpoint_attachment, google_apigee_env_keystore, google_apigee_env_references, google_apigee_envgroup, google_apigee_envgroup_attachment, google_apigee_environment, google_apigee_instance, google_apigee_instance_attachment, google_apigee_keystores_aliases_key_cert_file, google_apigee_keystores_aliases_self_signed_cert, google_apigee_nat_address, google_apigee_organization, google_apigee_sync_authorization, and google_apigee_target_server (#13718)
• bigqueryreservation: fixed server-generated capacity_commitment_id not being populated in state and Resource Identity for google_bigquery_capacity_commitment when capacity_commitment_id is omitted from configuration (#13704)
• ces: fixed Resource Identity import for google_ces_app (#13692)
• cloudasset: fixed Resource Identity import for google_cloud_asset_folder_feed, google_cloud_asset_organization_feed, and google_cloud_asset_project_feed (#13691)
• cloudidentity: fixed Resource Identity import for google_cloud_identity_policy (#13681)
• cloudsecuritycompliance: fixed organization not being populated in state and Resource Identity during import for google_cloud_security_compliance_cloud_control, google_cloud_security_compliance_framework, and google_cloud_security_compliance_framework_deployment (#13705)
• colab: fixed bad diffs for euc_config.euc_disabled and shielded_vm_config.enable_secure_boot when set to false on google_colab_runtime_template (#13739)
• compute: fixed default provider region not being populated in state and Resource Identity for google_compute_region_network_policy, google_compute_region_network_firewall_policy, and google_compute_region_network_firewall_policy_with_rules when region is omitted from configuration (#13678)
• dataform: fixed default provider region not being populated in state and Resource Identity for google_dataform_repository when region is omitted from configuration (#13706)
• discoveryengine: fixed google_discovery_engine_data_store silently ignoring changes to fields nested in document_processing_config. These changes now force replacement of the resource. (#13749)
• discoveryengine: fixed a permadiff on tag in google_discovery_engine_data_connector when unset in configuration (#13727)
• discoveryengine: fixed bad diffs for ui_settings.search_addon_spec boolean fields when set to false on google_discovery_engine_widget_config (#13739)
• discoveryengine: fixed inability to change value of disable_analytics on google_discovery_engine_search_engine. Changing this field will now recreate the search engine. (#13679)

... (truncated)

Sourced from hashicorp/google's changelog.

8.11.0 (Unreleased)

8.10.0 (November 3, 2026)

FEATURES:

• New Data Source: google_oracle_database_odb_dns_zone (#30448)
• New Resource: google_managed_kafka_acl_binding (#30459)
• New Resource: google_oracle_database_odb_dns_zone (#30448)
• New Resource: google_secret_manager_regional_secret_managed_rotation (#30436)
• New Resource: google_vertex_ai_training_pipeline (#30438)

IMPROVEMENTS:

• artifactregistry: added disallow_unspecified_mode and platform_logs_config fields to google_artifact_registry_repository resource (#30386)
• backupdr: added labels field to google_backup_dr_backup_plan resource (#30388)
• bigquery: added default_rounding_mode field to google_bigquery_dataset resource (#30437)
• bigquerydatatransfer: added schedule_options_v2 field to google_bigquery_data_transfer_config resource (#30428)
• compute: added psc_data.psc_connection_id, psc_data.psc_connection_status, and psc_data.consumer_psc_address fields to google_compute_region_network_endpoint_group resource (#30450)
• container: made node_config.guest_accelerator.gpu_sharing_config and node_config.guest_accelerator.gpu_driver_installation_config updatable in place (without recreating the node pool) in google_container_cluster and google_container_node_pool (#30425)
• dataplex: added access_groups.default_iam_role_config field to google_dataplex_data_product resource (#30423)
• dataplex: added data_quality_spec.rules.debug_queries, data_profile_spec.mode, and data_documentation_spec.generation_scopes fields to google_dataplex_datascan resource (#30387)
• dataproc: added placement.managed_cluster.config.master_flexible_config, placement.managed_cluster.config.worker_flexible_config, placement.managed_cluster.config.secondary_worker_flexible_config, and placement.managed_cluster.config.gce_cluster_config.multi_zone_config fields to google_dataproc_workflow_template (#30412)
• dataprocmetastore: added FORCE option to deletion_policy on google_dataproc_metastore_service to clean up PSC forwarding rules and internal IP addresses in consumer subnetworks on delete (#30479)
• discoveryengine: added default_web_grounding_toggle_off field to google_discovery_engine_assistant resource (#30419)
• dlp: added deidentify_config.transformation_error_handling field to google_data_loss_prevention_deidentify_template (#30404)
• dlp: added inspect_config.rule_set.rules.exclusion_rule.exclude_by_image_findings and inspect_config.custom_info_types.metadata_key_value_expression fields to google_data_loss_prevention_inspect_template resource (#30434)
• eventarc: added organization_subscription and project_subscriptions fields to google_eventarc_google_api_source resource (#30435)
• firestore: added search_index_options field to google_firestore_index resource (#30421)
• integrationconnectors: added async_operations_enabled, auth_override_enabled, and traffic_shaping_configs fields to google_integration_connectors_connection (#30391)
• modelarmor: added filter_config.filter_rule_settings and template_metadata.data_residency_compliant fields to google_model_armor_template (#30382)
• netapp: added snap_reserve field to google_netapp_volume resource (#30422)
• networksecurity: added certificate_issuance_mode field to google_network_security_tls_inspection_policy resource (#30432)
• networksecurity: added mtls_policy.client_validation_relaxations field and ALLOW_VALIDATION_RELAXATIONS enum value to google_network_security_server_tls_policy resource (#30460)
• networksecurity: made mtls_policy.client_validation_mode and mtls_policy.client_validation_trust_config updatable in place on google_network_security_server_tls_policy (#30460)
• networkservices: added rules.action.request_mirror_policy.mirror_percent, rules.action.direct_response, and rules.action.idle_timeout fields to google_network_services_http_route resource (#30408)
• networkservices: added rules.matches.method.type and rules.action.idle_timeout fields to google_network_services_grpc_route resource (#30392)
• oracledatabase: added odb_dns_zone field to google_oracle_database_cloud_vm_cluster resource and google_oracle_database_cloud_vm_clusters data source (#30411)
• privateca: added issuance_policy.passthrough_extensions field to google_privateca_ca_pool (#30389)
• pubsub: added message_transforms.compression field to google_pubsub_subscription resource (#30433)
• pubsub: added message_transforms.compression field to google_pubsub_topic resource (#30406)
• secretmanagerregional: added policy_member field to google_secret_manager_regional_secret resource, google_secret_manager_regional_secret data source, and google_secret_manager_regional_secrets data source (#30436)
• sql: added database_center_integration field to google_sql_database_instance resource (#30426)
• sql: promoted blue_green_deployment on google_sql_database_instance to GA (#30449)
• storagebatchoperations: added logging_config and dry_run fields to google_storage_batch_operations_job resource (#30390)
• vertexai: added region field to google_vertex_ai_cache_config resource (#30399)
• workstations: added support for regional endpoints to google_workstations_workstation, google_workstations_workstation_config, and google_workstations_workstation_cluster (#30430)

BUG FIXES:

• biglakeiceberg: fixed google_biglake_iceberg_table failing to read or import tables with list, map or struct columns; these types can now be set in schema.fields.type with jsonencode (#30410)
• compute: fixed a crash and invalid fingerprint error when updating network_interface.internal_ipv6_prefix_length in-place on google_compute_instance (#30441)
• compute: fixed an issue where updating or removing IPv4 endpoints in google_compute_network_endpoints could act on a phantom empty endpoint (#30396)

... (truncated)

• 67f9611 Revert "compute: add identity_type to workload_identity_config" (#20044)
• 746a682 docs: fix minor field issues in handwritten compute docs (#20000) (#30618)
• 6cf04e4 dataform: promote config, release_config, and workflow_config to GA (#19957) ...
• 1394c3d bigquery: add external_runtime_options.volume_mounts to google_bigquery_routi...
• 037016c resourcemanagerv3: add boundaries to capability_config (#19395) (#30615)
• 509684f docs: fix field structure in container_cluster doc (#20021) (#30614)
• 5f27b0c docs: move inline field sub-bullets to nested blocks (#20025) (#30613)
• f3e54f5 secretmanagerregional: skip enable on version creation (#20023) (#30612)
• c693ea1 secretmanager: fix secretmanager.versions.enable permission on creation (#192...
• cb86243 securesourcemanager: consolidate redundant tests (#19853) (#30610)
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)