chore(deps): update hashicorp/google requirement from ~> 5.0 to ~> 7.32 in /infra/cloudrun

[dependabot]

Updates the requirements on hashicorp/google to permit the latest version.

Release notes

Sourced from hashicorp/google's releases.

v7.32.0

NOTES:

• compute: migrated google_compute_instance_from_machine resource to use direct HTTP rather than a client library (#27260)
• compute: migrated google_compute_instance_group_manager resource to use direct HTTP rather than a client library (#27259)
• compute: migrated google_compute_zones data source to use direct HTTP rather than a client library (#27261)
• compute: migrated google_compute_project_metadata_item resource to use direct HTTP rather than a client library (#27200)

FEATURES:

• New Data Source: google_compute_region_instant_snapshot_iam_policy (#27281)
• New Resource: google_chronicle_dashboard_chart (#27275)
• New Resource: google_compute_region_instant_snapshot_iam_binding (#27281)
• New Resource: google_compute_region_instant_snapshot_iam_member (#27281)
• New Resource: google_compute_region_instant_snapshot_iam_policy (#27281)
• New Resource: google_compute_region_instant_snapshot (#27281)

IMPROVEMENTS:

• compute: added IDPF value to nic_type in resource_compute_instance_template (#27244)
• compute: added IDPF value to nic_type in resource_compute_instance (#27244)
• compute: added IDPF value to nic_type in resource_compute_region_instance_template (#27244)
• compute: added address_id field to google_compute_address resource (#27216)
• compute: added advanced_options_config field on google_compute_organization_security_policy resource (#27255)
• compute: added connection_tracking_policy field to google_compute_region_backend_service resource (#27217)
• compute: added image, source_image_encryption_key, and source_image_id fields to google_compute_region_disk resource. This field is currently behind an allowlist. (#27243)
• compute: added replica_zones field to google_compute_instance resource (#27258)
• compute: added request_body field on google_compute_security_policy_rule resource (#27252)
• compute: added update support for ip_collection field to google_compute_subnetwork resource (#27265)
• discoveryengine: added config_id attribute to google_discovery_engine_widget_config (#27278)
• networksecurity: added support for project parent values to google_network_security_firewall_endpoint (#27222)
• recaptchaenterprise: added POLICY_BASED_CHALLENGE value to integration_type field and added new challenge_settings field to google_recaptcha_enterprise_key (#27221)
• redis: added new node types supported in google_redis_cluster. (#27242)
• resourcemanager: add private_key and private_key_type fields to ephemeral google_service_account_key resource (#27279)
• storage: added ingest_on_write field for google_storage_anywhere_cache resource (#27271)
• workstations: added gce_hd field to google_workstations_workstation_config resource (#27201)

BUG FIXES:

• cloudfunctions2: fixed bug where all_traffic_on_latest_revision = false was ignored in google_cloudfunctions2_function (#27256)
• compute: fixed permadiff when removing preconfigured_waf_config from a google_compute_security_policy rule (#27276)

Changelog

Sourced from hashicorp/google's changelog.

7.32.0 (Unreleased)

7.31.0 (May 5, 2026)

NOTES:

• compute: migrated google_compute_instance.network_interface field to use direct HTTP rather than a client library (#27104)
• compute: migrated google_compute_image datasource to use direct HTTP rather then a client library (#27179)
• compute: migrated partner_metadata field on google_compute_instance, google_compute_instance_template, and google_compute_region_instance_template to use direct HTTP rather than a client library (#27131)
• compute: migrated google_compute_node_types data source to use direct HTTP rather than a client library (#27184)
• compute: migrated google_compute_region_instance_group data source to use direct HTTP rather than a client library (#27178)
• compute: migrated google_compute_subnetwork data source to use direct HTTP rather than a client library (#27167)
• compute: migrated google_compute_vpn_gateway data source to use direct HTTP rather than a client library (#27168)

FEATURES:

• New Data Source: google_artifact_registry_file (#27183)
• New Resource: google_ces_app_root_agent_association (#27123)
• New Resource: google_contact_center_insights_qa_question (#27169)
• New Resource: google_contact_center_insights_qa_scorecard_revision (#27169)
• New Resource: google_contact_center_insights_qa_scorecard (#27169)
• New Resource: google_firebase_app_check_resource_policy (#27185)

IMPROVEMENTS:

• clouddeploy: added default_pool and private_pool fields to google_clouddeploy_target resource (#27187)
• clouddeploy: added tasks and analysis fields to google_clouddeploy_delivery_pipeline resource (#27187)
• compute: added params.resource_manager_tags field to google_compute_image (#27107)
• compute: added params.resource_manager_tags field to google_compute_region_commitment resource (#27181)
• compute: added resource_policies.workload_policy to google_compute_region_instance_group_manager resource (#27170)
• compute: marked csek disk encryption key fields as sensitive in compute resources (#27193)
• container: added node_pool.network_config.accelerator_network_profile to google_container_cluster resource and network_config.accelerator_network_profile to google_container_node_pool resource (#27171)
• databasemigrationservice: added objects_config field to google_database_migration_service_migration_job resource (#27180)
• dataplex: added attributes, template_reference, enable_catalog_basedRules, and filter fields to google_dataplex_datascan resource (#27130)
• firestore: added search_config field to google_firestore_index resource (#27108)
• oracle_database: added pluggable_database_id, pluggable_database_name fields to google_oracle_database_db_system resource (#27127)

BUG FIXES:

• provider: fixed a bad timeouts diff across a number of resources that had resource identity support added in 7.29.0 (#27189)
• assuredworkloads: made assuredworkloads resources use GA endpoint instead of beta (#27122)
• bigquery: fixed ignore_auto_generated_schema evaluation for google_bigquery_table external tables which caused spurious replacement (#27188)
• cloudscheduler: fixed perpetual diff on google_cloud_scheduler_job.http_target.headers when oidc_token or oauth_token is set (#27173)
• servicenetworking: fixed a permadiff issue of reserved_peering_ranges in google_service_networking_connection (#27132)
• storage: fix inconsistent plan issue for google_storage_notification.custom_attributes field (#27129)

7.30.0 (Apr 28, 2026)

BREAKING CHANGES:

• apigee: fixed google_apigee_env_keystore to require the name field which is mandatory in the Apigee API (#27006)

FEATURES:

• New Data Source: google_data_lineage_config (#27098)
• New Resource: google_artifact_registry_rule (#27049)

... (truncated)

Commits

• 39b65db Update CHANGELOG.md for 7.32.0 (#27295)
• 6fec2f7 Fixed DocumentAI flakey tests (#17470) (#27282)
• 77a3583 Add google_compute_region_instant_snapshot (#17320) (#27281)
• 60b20fa Fixed cloud run v1 tests (#17465) (#27280)
• f392688 serviceAccountKey: add Close() in ephemeral to support private_data att...
• 4d9224d feat: expose configId output field in google_discovery_engine_widget_config (...
• 8e6c171 Bump TestAccDataSourceNetworkSecurityAddressGroups_organization to GA (#17411...
• 8938c8e fix(compute): include preconfigured_waf_config in PatchRule updateMask (#1735...
• 0c446de Add Terraform support for Dashboard Chart for v1 endpoint (#17404) (#27275)
• 8b2ca4e Document that Security Profiles can have a project parent. (#17406) (#27274)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)