terraform: update hashicorp/google requirement from ~> 6.0 to ~> 7.13 in /terraform

[dependabot]

Updates the requirements on hashicorp/google to permit the latest version.

Release notes

Sourced from hashicorp/google's releases.

v7.13.0

NOTES:

• alloydb: reverted requiring initial_user.password as required on create for new google_alloydb_cluster resources, instead initial_user.password or initial_user.user must be set if initial_user is specified for google_alloydb_cluster resources (#25366)
• privateca: modified encryption_spec field from google_privateca_ca_pool resource to be mutable and allow cmek key rotation (#25267)

DEPRECATIONS:

• cloudquotas: deprecated effective_container and effective_enablement fields in the google_cloud_quotas_quota_adjuster_settings resource (#25443)
• dlp: deprecated publish_findings_to_cloud_data_catalog field in google_data_loss_prevention_job_trigger resource. Use publish_findings_to_dataplex_catalog field instead. (#25250)
• networkservices: removed google_service_binding resource due to service binding support being disabled (#25367)

FEATURES:

• New Resource: google_ces_app_version (#25297)
• New Resource: google_compute_organization_security_policy (#25322)
• New Resource: google_dialogflow_generator (#25340)
• New Resource: google_dialogflow_version (#25179)
• New Resource: google_discovery_engine_widget_config (#25378)
• New Resource: google_iam_workforce_pool_provider_scim_token (#25270)
• New Resource: google_network_services_lb_edge_extension (#25299)
• New Resource: google_network_services_multicast_consumer_association (#25321)
• New Resource: google_network_services_multicast_group_range_activation (#25386)
• New Resource: google_network_services_multicast_group_range (#25353)
• New Resource: google_network_services_multicast_producer_association (#25291)

IMPROVEMENTS:

• alloydb: added password_wo and password_wo_version fields to google_alloydb_user resource (#25266)
• apphub: added identity field to google_apphub_service and google_apphub_workload resources (#25363)
• backupdr: added encryption_config field to google_backup_dr_backup_vault resource (#25221)
• ces: added client_function.parameters.max_items, client_function.parameters.min_items, client_function.parameters.maximum, client_function.parameters.minimum, client_function.parameters.title, client_function.response.max_items, client_function.response.min_items, client_function.response.maximum, client_function.response.minimum, and client_function.response.title fields to google_ces_tool resource (#25309)
• ces: added entry_agent field to google_ces_example resource (#25182)
• ces: added google_search_tool.context_urls, google_search_tool.preferred_domains, and open_api_tool.api_authentication.bearer_token_config fields to google_ces_tool resource (#25309)
• ces: added message.chunk.tool_response and message.chunk.tool_call fields to google_ces_example resource (#25182)
• ces: added pinned and variable_declarations.schema.title fields to google_ces_app resource (#25233)
• cloudsecuritycompliance: added cloud_control_details.parameters.parameter_value.oneof_value fields to google_cloud_security_compliance_framework_deployment resource (#25382)
• cloudsecuritycompliance: added cloud_control_details.parameters.parameter_value.oneof_value fields to google_cloud_security_compliance_framework resource (#25382)
• cloudsecuritycompliance: added parameter_spec.default_value.oneof_value and validation.allowed_values.values.oneof_value fields to google_cloud_security_compliance_cloud_control resource (#25441)
• cloudsecuritycompliance: added sub_parameters field to google_cloud_security_compliance_cloud_control resource (#25441)
• colab: added custom_environment_spec field to google_colab_notebook_execution resource (#25379)
• compute: added network_pass_through_lb_traffic_policy field to google_compute_region_backend_service resource. (#25223)
• compute: added params field to google_compute_interconnect resource (#25350)
• compute: added show_nat_ips and nat_ips fields to google_compute_service_attachment (#25296)
• compute: added snapshot_type field to google_compute_snapshot resource (#25348)
• compute: added new field instance_flexibility_policy.instance_selection.min_cpu_platform & instance_flexibility_policy.instance_selection.disks to google_compute_region_instance_group_manager (#25444)
• container: added autoscaled_rollout_policy field to google_container_node_pool resource (beta) (#25362)
• container: added node_kernel_module_loading.policy field to google_container_node_pool and google_container_cluster resources (#25383)
• filestore: added support for updating directory_services fields in place in google_filestore_instance (#25315)
• iamworkforcepool: added claim_mapping, purge_time, and service_agent fields to google_iam_workforce_pool_provider_scim_tenant resource (#25270)
• looker: added controlled_egress_enabled and controlled_egress_config fields to google_looker_instance resource (#25214)
• lustre: added kms_key field to google_lustre_instance resource (#25261)
• modelarmor: added google_mcp_server_floor_setting field to google_model_armor_floorsetting resource (#25313)
• monitoring: fixes an issue with google_monitoring_alert_policy where it ignores the resource project during Import (#25287)

... (truncated)

Changelog

Sourced from hashicorp/google's changelog.

7.13.0 (December 9, 2025)

NOTES:

• alloydb: reverted requiring initial_user.password as required on create for new google_alloydb_cluster resources, instead initial_user.password or initial_user.user must be set if initial_user is specified for google_alloydb_cluster resources (#25366)
• privateca: modified encryption_spec field from google_privateca_ca_pool resource to be mutable and allow cmek key rotation (#25267)

DEPRECATIONS:

• cloudquotas: deprecated effective_container and effective_enablement fields in the google_cloud_quotas_quota_adjuster_settings resource (#25443)
• dlp: deprecated publish_findings_to_cloud_data_catalog field in google_data_loss_prevention_job_trigger resource. Use publish_findings_to_dataplex_catalog field instead. (#25250)
• networkservices: removed google_service_binding resource due to service binding support being disabled (#25367)

FEATURES:

• New Resource: google_ces_app_version (#25297)
• New Resource: google_compute_organization_security_policy (#25322)
• New Resource: google_dialogflow_generator (#25340)
• New Resource: google_dialogflow_version (#25179)
• New Resource: google_discovery_engine_widget_config (#25378)
• New Resource: google_iam_workforce_pool_provider_scim_token (#25270)
• New Resource: google_network_services_lb_edge_extension (#25299)
• New Resource: google_network_services_multicast_consumer_association (#25321)
• New Resource: google_network_services_multicast_group_range_activation (#25386)
• New Resource: google_network_services_multicast_group_range (#25353)
• New Resource: google_network_services_multicast_producer_association (#25291)

IMPROVEMENTS:

• alloydb: added password_wo and password_wo_version fields to google_alloydb_user resource (#25266)
• apphub: added identity field to google_apphub_service and google_apphub_workload resources (#25363)
• backupdr: added encryption_config field to google_backup_dr_backup_vault resource (#25221)
• ces: added client_function.parameters.max_items, client_function.parameters.min_items, client_function.parameters.maximum, client_function.parameters.minimum, client_function.parameters.title, client_function.response.max_items, client_function.response.min_items, client_function.response.maximum, client_function.response.minimum, and client_function.response.title fields to google_ces_tool resource (#25309)
• ces: added entry_agent field to google_ces_example resource (#25182)
• ces: added google_search_tool.context_urls, google_search_tool.preferred_domains, and open_api_tool.api_authentication.bearer_token_config fields to google_ces_tool resource (#25309)
• ces: added message.chunk.tool_response and message.chunk.tool_call fields to google_ces_example resource (#25182)
• ces: added pinned and variable_declarations.schema.title fields to google_ces_app resource (#25233)
• cloudsecuritycompliance: added cloud_control_details.parameters.parameter_value.oneof_value fields to google_cloud_security_compliance_framework_deployment resource (#25382)
• cloudsecuritycompliance: added cloud_control_details.parameters.parameter_value.oneof_value fields to google_cloud_security_compliance_framework resource (#25382)
• cloudsecuritycompliance: added parameter_spec.default_value.oneof_value and validation.allowed_values.values.oneof_value fields to google_cloud_security_compliance_cloud_control resource (#25441)
• cloudsecuritycompliance: added sub_parameters field to google_cloud_security_compliance_cloud_control resource (#25441)
• colab: added custom_environment_spec field to google_colab_notebook_execution resource (#25379)
• compute: added network_pass_through_lb_traffic_policy field to google_compute_region_backend_service resource. (#25223)
• compute: added params field to google_compute_interconnect resource (#25350)
• compute: added show_nat_ips and nat_ips fields to google_compute_service_attachment (#25296)
• compute: added snapshot_type field to google_compute_snapshot resource (#25348)
• compute: added new field instance_flexibility_policy.instance_selection.min_cpu_platform & instance_flexibility_policy.instance_selection.disks to google_compute_region_instance_group_manager (#25444)
• container: added autoscaled_rollout_policy field to google_container_node_pool resource (beta) (#25362)
• container: added node_kernel_module_loading.policy field to google_container_node_pool and google_container_cluster resources (#25383)
• filestore: added support for updating directory_services fields in place in google_filestore_instance (#25315)
• iamworkforcepool: added claim_mapping, purge_time, and service_agent fields to google_iam_workforce_pool_provider_scim_tenant resource (#25270)
• looker: added controlled_egress_enabled and controlled_egress_config fields to google_looker_instance resource (#25214)
• lustre: added kms_key field to google_lustre_instance resource (#25261)
• modelarmor: added google_mcp_server_floor_setting field to google_model_armor_floorsetting resource (#25313)

... (truncated)

Commits

• 6132b65 Update CHANGELOG.md for 7.13.0 release (#25455)
• 60357c0 Add additional overrides (min cpu platform and disks overrides) to in… (#1584...
• bfb32c4 Added deprecation_message for effectiveContainer and effectiveEnablement in Q...
• 61dc498 Add missing nfsv4 value while updating export_policy (#15801) (#25442)
• 3db783f feat: Add oneofValue to parameter value definitions and introduce `… (#1582...
• 880f34a Upgrade Werkzeug in test fixture (#15853) (#25440)
• 2b01a98 bump terraform-plugin-sdk/v2 from v2.27.0 -> v2.28.1 (#15864) (#25390)
• 1c3c760 mark advanced_site_search_config as O+C (#15868) (#25387)
• da386e5 Multicast group range activation (#15845) (#25386)
• 69a5a32 Added depends_on to router peer resource in router peer test (#15835) (#25385)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)