chore(deps): bump the terraform group in /terraform with 2 updates

[dependabot]

Bumps the terraform group in /terraform with 2 updates: hashicorp/external and hashicorp/google.

Updates hashicorp/external from 2.4.1 to 2.4.2

Release notes

Sourced from hashicorp/external's releases.

v2.4.2

2.4.2 (September 11, 2026)

NOTES:

• Upgrade the Go toolchain to 1.26.8. (#512)
• Update golang.org/x/crypto to v0.56.0, golang.org/x/mod to v0.40.0, and google.golang.org/protobuf to v1.36.12. (#513)

Changelog

Sourced from hashicorp/external's changelog.

2.4.2 (September 11, 2026)

NOTES:

• Upgrade the Go toolchain to 1.26.8. (#512)
• Update golang.org/x/crypto to v0.56.0, golang.org/x/mod to v0.40.0, and google.golang.org/protobuf to v1.36.12. (#513)

Commits

• d7872aa chore: prepare release v2.4.2 (#514)
• dfd2384 update security dependencies (#513)
• b0873d3 build(deps): bump github/issue-labeler (#510)
• 46e9ec7 update Go version to 1.26.8 (#512)
• c0fedb1 build(deps): bump google.golang.org/grpc from 1.83.1 to 1.83.2 (#511)
• 51d58df build(deps): bump google.golang.org/grpc from 1.82.1 to 1.83.1 (#509)
• See full diff in compare view

Updates hashicorp/google from 8.1.0 to 8.4.0

Release notes

Sourced from hashicorp/google's releases.

v8.4.0

NOTES:

• compute: migrated google_compute_route to use direct HTTP rather than a client library (#29430)

FEATURES:

• New Data Source: google_cloudbuild_worker_pool (#29385)
• New Resource: google_gemini_gibq_observability_setting (#29381)
• New Resource: google_gemini_gibq_observability_setting_binding (#29381)
• New Resource: google_network_services_agent_connectivity_template (#29392)

IMPROVEMENTS:

• agenticapplications: added artifacts_config.methodology_export_options field to google_agentic_applications_analyst_agent_persona (#29382)
• ces: added blob field to google_ces_example (#29365)
• ces: added mcp_tool.api_authentication.service_account_auth_config.scopes and open_api_tool.api_authentication.service_account_auth_config.scopes fields to google_ces_tool (#29378)
• ces: added messages.chunks.image.alt_text field to google_ces_example (#29432)
• cloudrunv2: added template.delay_execution field to google_cloud_run_v2_job (#29431)
• cloudrunv2: added template.template.containers.sandbox_launcher field to google_cloud_run_v2_job (#29433)
• cloudrunv2: added template.workload_identity_config field to google_cloud_run_v2_service (#29429)
• container: added skip_node_pool_refresh field to google_container_cluster data source. When set to true, the data source skips reading node pools from the API, resolving long read times on clusters with a large number of node pools. Note that this results in node_pool being set to an empty list (#29384)
• dataproc: added boot_disk_provisioned_iops, boot_disk_provisioned_throughput, local_ssd_interface, and attached_disk_config fields to google_dataproc_workflow_template (#29396)
• dialogflow: added summarization_context.few_shot_examples.output.tool_call_info field to google_dialogflow_generator (#29353)
• discoveryengine: added tag and metadata fields to google_discovery_engine_data_connector (#29399)
• discoveryengine: added ui_settings.search_addon_spec field to google_discovery_engine_widget_config (#29401)
• discoveryengine: added ui_settings.source_admin_display_name_enabled field to google_discovery_engine_widget_config (#29367)
• networkservices: added agent_connectivity_template field to google_network_services_agent_gateway (#29392)
• secretmanager: added secret_type field to google_secret_manager_secret and google_secret_manager_regional_secret resources and data sources (#29426)
• vertexai: added vector_db_config and vertex_ai_search_config fields to google_vertex_ai_rag_corpus (#29379)

BUG FIXES:

• binaryauthorization: fixed google_binary_authorization_policy where deleting (resetting to default) the policy retained admission_whitelist_patterns (#29427)
• cloudscheduler: fixed google_cloud_scheduler_job staying paused when the paused field is removed from configuration (#29400)
• container: fixed google_container_cluster and google_container_node_pool by removing the unsupported node_config.host_maintenance_policy field from the GA provider (#29369)
• container: fixed explicit STANDARD node_config.advanced_machine_features.performance_monitoring_unit values being omitted when creating google_container_cluster and google_container_node_pool (#29363)
• storage: fixed google_storage_bucket force_destroy failing when parallel object deletes return transient 404/410 No such object (#29374)

v8.3.0

FEATURES:

• New Data Source: google_compute_service_attachments (#29253)
• New List Resource: google_firebase_android_app (#29269)
• New List Resource: google_firebase_apple_app (#29269)
• New List Resource: google_firebase_web_app (#29269)
• New List Resource: google_pubsub_topic_iam_member (#29259)
• New Resource: google_chronicle_case_stage_definition (#29276)
• New Resource: google_chronicle_case_tag_definition (#29236)
• New Resource: google_compute_network_edge_security_service (#29248)
• New Resource: google_data_loss_prevention_content_policy (#29296)
• New Resource: google_gemini_gda_observability_setting_binding (#29286)
• New Resource: google_gemini_gda_observability_setting (#29286)
• New Resource: google_vertex_ai_rag_corpus (#29252)

... (truncated)

Changelog

Sourced from hashicorp/google's changelog.

8.4.0 (Unreleased)

8.3.0 (September 15, 2026)

FEATURES:

• New Data Source: google_compute_service_attachments (#29253)
• New List Resource: google_firebase_android_app (#29269)
• New List Resource: google_firebase_apple_app (#29269)
• New List Resource: google_firebase_web_app (#29269)
• New List Resource: google_pubsub_topic_iam_member (#29259)
• New Resource: google_chronicle_case_stage_definition (#29276)
• New Resource: google_chronicle_case_tag_definition (#29236)
• New Resource: google_compute_network_edge_security_service (#29248)
• New Resource: google_data_loss_prevention_content_policy (#29296)
• New Resource: google_gemini_gda_observability_setting_binding (#29286)
• New Resource: google_gemini_gda_observability_setting (#29286)
• New Resource: google_vertex_ai_rag_corpus (#29252)

IMPROVEMENTS:

• accesscontextmanager: added etag field to google_access_context_manager_service_perimeter (#29261)
• bigquerydatatransfer: added output fields to google_bigquery_data_transfer_data_source_enrollment (#29267)
• ces: added channel_profile.whatsapp_config field to google_ces_deployment (#29279)
• ces: added evaluation_metrics_thresholds.golden_evaluation_metrics_thresholds.tool_matching_settings.extra_tool_call_behavior field to google_ces_app (#29247)
• ces: added evaluation_metrics_thresholds.golden_evaluation_metrics_thresholds.turn_level_metrics_thresholds.semantic_similarity_channel field to google_ces_app (#29244)
• ces: added mcp_toolset.tool_overrides field to google_ces_toolset (#29291)
• ces: added transfer_rules field to google_ces_agent (#29262)
• chronicle: added base64_image, dynamic_parameters, instance_uri, and weight fields to google_chronicle_environment (#29265)
• cloudsecuritycompliance: added parameter_spec.sub_parameters.sub_parameters and nested oneof_value fields to google_cloud_security_compliance_cloud_control (#29298)
• dataplex: added data_documentation_spec.sql_dialect field to google_dataplex_datascan (#29285)
• dataproc: added instance_flexibility_policy to master_config, worker_config, and secondary_worker_config in google_dataproc_workflow_template (#29287)
• gkehub: added default_cluster_config.compliance_posture_config and labels to google_gke_hub_fleet (#29245)
• managedkafka: added public_cluster_config, public_cluster_details, and bootstrap_address fields to google_managed_kafka_cluster resource (#29273)
• parametermanager: added tags field to google_parameter_manager_parameter and google_parameter_manager_regional_parameter to allow setting tags for parameters at creation time (#29299)

BUG FIXES:

• accesscontextmanager: fixed bug in google_access_context_manager_service_perimeter where changes to the status / spec fields could cause updates to related ingress/egress policies even if those fields weren't specified on google_access_context_manager_service_perimeter (#29261)
• accesscontextmanager: fixed sending of etag on update requests for google_access_context_manager_service_perimeter_egress_policy and google_access_context_manager_service_perimeter_ingress_policy to prevent concurrent requests from impacting each other (#29261)
• biglakeiceberg: fixed an issue where creating a partitioned google_biglake_iceberg_table failed due to missing field-id (#29295)
• compute: fixed a bug where an explicitly configured advanced_machine_features.performance_monitoring_unit = "STANDARD" was dropped on creation for google_compute_instance, google_compute_instance_template, and google_compute_region_instance_template (#29302)
• config: fixed diff when artifacts_gcs_bucket is not specified on google_config_deployment (#29258)
• provider: added validation to reject more than one external_credentials or batching block, matching the existing SDK behavior (#29266)

8.2.0 (September 8, 2026)

NOTES:

• compute: migrate google_compute_subnetworks data source to use direct HTTP rather than a client library (#29226)

FEATURES:

• New List Resource: google_appengine_domain_mapping (#29174)
• New List Resource: google_appengine_service_network_settings (#29174)

... (truncated)

Commits

• 0e5235d Release Notes for version 8.4.0 (ga) (#29445)
• d705d81 compute, iap, cloudsupport: prefix sample names the generator never saw (#190...
• 4fec4a3 accesscontextmanager: remove unsupported max_inactivity from GcpUserAccessBin...
• c0389f5 cloudrunv2: add sandbox_launcher to google_cloud_run_v2_job (#18589) (#29433)
• 70cbad0 ces: add alt_text to google_ces_example (#19082) (#29432)
• 473e203 cloudrunv2: add delay_execution to google_cloud_run_v2_job (#19010) (#29431)
• ca3471b Migrate route_instance.tmpl file to use direct HTTP rather than a client li...
• 18b4fd1 cloudrunv2: add workload_identity_config to google_cloud_run_v2_service (#190...
• 56ba903 fix(binaryauthorization_policy) Truly reset to default (#19058) (#29427)
• 03088ae secretmanager: add secret_type to secret and regional_secret (#19057) (#29426)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions