chore(deps): update all non-major dependencies

This MR contains the following updates:

Package	Type	Update	Change
google (source)	required_provider	minor	5.42.0 -> 5.44.2
google-beta (source)	required_provider	minor	5.42.0 -> 5.44.2
random (source)	required_provider	patch	3.6.2 -> 3.6.3
uis/devops/continuous-delivery/ci-templates	repository	minor	v4.5.0 -> v4.6.0

---

Release Notes

hashicorp/terraform-provider-google (google)

v5.44.2

Compare Source

Notes:

• 5.44.2 is a backport release, responding to a GKE rollout that created permadiffs for many users. The changes in this release will be available in 6.7.0 and users upgrading to 6.X should upgrade to that version or higher.

IMPROVEMENTS:

• container: google_container_cluster will now accept server-specified values for node_pool_auto_config.0.node_kubelet_config when it is not defined in configuration and will not detect drift. Note that this means that removing the value from configuration will now preserve old settings instead of reverting the old settings. (#​19817)

BUG FIXES:

• container: fixed a diff triggered by a new API-side default value for node_config.0.kubelet_config.0.insecure_kubelet_readonly_port_enabled. Terraform will now accept server-specified values for node_config.0.kubelet_config when it is not defined in configuration and will not detect drift. Note that this means that removing the value from configuration will now preserve old settings instead of reverting the old settings. (#​19817)

v5.44.1

Compare Source

NOTES:

• 5.44.1 is a backport release, intended to pull in critical container improvements and fixes for issues introduced in 5.44.0

IMPROVEMENTS:

• container: added in-place update support for gcfs_config in in google_container_cluster and google_container_node_pool (#​19365) (#​19512)

BUG FIXES:

• container: fixed a permadiff on gcfs_config in google_container_cluster and google_container_node_pool (#​19512)
• container: fixed a bug where specifying node_pool_defaults.node_config_defaults with enable_autopilot = true will cause google_container_cluster resource creation failure. (#​19543)

v5.44.0

Compare Source

NOTES:

• 5.44.0 is a backport release, intended to pull in critical container improvements from 6.2.0

IMPROVEMENTS:

• container: added insecure_kubelet_readonly_port_enabled to node_pool.node_config.kubelet_config and node_config.kubelet_config in google_container_node_pool resource. (#​19312)
• container: added insecure_kubelet_readonly_port_enabled to node_pool_defaults.node_config_defaults, node_pool.node_config.kubelet_config, and node_config.kubelet_config in google_container_cluster resource. (#​19312)
• container: added node_pool_auto_config.node_kublet_config.insecure_kubelet_readonly_port_enabled field to google_container_cluster. (#​19320)

v5.43.1

Compare Source

NOTES:

• 5.43.1 is a backport release, and some changes will not appear in 6.X series releases until 6.1.0

BUG FIXES:

• pubsub: fixed a validation bug that didn't allow empty filter definitions for google_pubsub_subscription resources (#​19284)

v5.43.0

Compare Source

DEPRECATIONS:

• storage: deprecated lifecycle_rule.condition.no_age field in google_storage_bucket. Use the new lifecycle_rule.condition.send_age_if_zero field instead. (#​19172)

FEATURES:

• New Resource: google_kms_ekm_connection_iam_binding (#​19132)
• New Resource: google_kms_ekm_connection_iam_member (#​19132)
• New Resource: google_kms_ekm_connection_iam_policy (#​19132)
• New Resource: google_scc_v2_organization_scc_big_query_exports (#​19184)

IMPROVEMENTS:

• compute: added label_fingerprint field to google_compute_global_address resource (#​19204)
• compute: exposed service side id as new output field forwarding_rule_id on resource google_compute_forwarding_rule (#​19139)
• container: added EXTENDED as a valid option for release_channel field in google_container_cluster resource (#​19141)
• logging: changed enable_analytics parsing to "no preference" in analytics if omitted, instead of explicitly disabling analytics in google_logging_project_bucket_config (#​19126)
• pusbub: added validation to filter field in resource google_pubsub_subscription (#​19131)
• resourcemanager: added default_labels field to google_client_config data source (#​19170)
• vmwareengine: added PC undelete support in google_vmwareengine_private_cloud (#​19192)

BUG FIXES:

• alloydb: fixed a permadiff on psc_instance_config in google_alloydb_instance resource (#​19143)
• compute: fixed a malformed URL that affected updating the server_tls_policy property on google_compute_target_https_proxy resources (#​19164)
• compute: fixed bug where the labels field could not be updated on google_compute_global_address (#​19204)
• compute: fixed force diff replacement logic for network_ip on resource google_compute_instance (#​19135)

hashicorp/terraform-provider-google-beta (google-beta)

v5.44.2

Compare Source

Notes:

• 5.44.2 is a backport release, responding to a GKE rollout that created permadiffs for many users. The changes in this release will be available in 6.7.0 and users upgrading to 6.X should upgrade to that version or higher.

IMPROVEMENTS:

• container: google_container_cluster will now accept server-specified values for node_pool_auto_config.0.node_kubelet_config when it is not defined in configuration and will not detect drift. Note that this means that removing the value from configuration will now preserve old settings instead of reverting the old settings. (#​8385)

BUG FIXES:

• container: fixed a diff triggered by a new API-side default value for node_config.0.kubelet_config.0.insecure_kubelet_readonly_port_enabled. Terraform will now accept server-specified values for node_config.0.kubelet_config when it is not defined in configuration and will not detect drift. Note that this means that removing the value from configuration will now preserve old settings instead of reverting the old settings. (#​8385)

v5.44.1

Compare Source

NOTES:

• 5.44.1 is a backport release, intended to pull in critical container improvements and fixes for issues introduced in 5.44.0

IMPROVEMENTS:

• container: added in-place update support for gcfs_config in in google_container_cluster and google_container_node_pool (#​8101) (#​8207)

BUG FIXES:

• container: fixed a permadiff on gcfs_config in google_container_cluster and google_container_node_pool (#​8207)
• container: fixed a bug where specifying node_pool_defaults.node_config_defaults with enable_autopilot = true will cause google_container_cluster resource creation failure. (#​8223)

v5.44.0

Compare Source

NOTES:

• 5.44.0 is a backport release, intended to pull in critical container improvements from 6.2.0

IMPROVEMENTS:

• container: added insecure_kubelet_readonly_port_enabled to node_pool.node_config.kubelet_config and node_config.kubelet_config in google_container_node_pool resource. (#​8071)
• container: added insecure_kubelet_readonly_port_enabled to node_pool_defaults.node_config_defaults, node_pool.node_config.kubelet_config, and node_config.kubelet_config in google_container_cluster resource. (#​8071)
• container: added node_pool_auto_config.node_kublet_config.insecure_kubelet_readonly_port_enabled field to google_container_cluster. (#​8076)

v5.43.1

Compare Source

NOTES:

• 5.43.1 is a backport release, and some changes will not appear in 6.X series releases until 6.1.0

BUG FIXES:

• pubsub: fixed a validation bug that didn't allow empty filter definitions for google_pubsub_subscription resources (#​8055)

v5.43.0

Compare Source

DEPRECATIONS:

• storage: deprecated lifecycle_rule.condition.no_age field in google_storage_bucket. Use the new lifecycle_rule.condition.send_age_if_zero field instead. (#​7994)

FEATURES:

• New Resource: google_kms_ekm_connection_iam_binding (#​7969)
• New Resource: google_kms_ekm_connection_iam_member (#​7969)
• New Resource: google_kms_ekm_connection_iam_policy (#​7969)
• New Resource: google_scc_v2_organization_scc_big_query_exports (#​8002)

IMPROVEMENTS:

• compute: exposed service side id as new output field forwarding_rule_id on resource google_compute_forwarding_rule (#​7972)
• container: added EXTENDED as a valid option for release_channel field in google_container_cluster resource (#​7973)
• logging: changed enable_analytics parsing to "no preference" in analytics if omitted, instead of explicitly disabling analytics in google_logging_project_bucket_config. (#​7964)
• networkservices: added idle_timeout field to the google_network_services_tcp_route resource (#​7996)
• pusbub: added validation to filter field in resource google_pubsub_subscription (#​7968)
• resourcemanager: added default_labels field to google_client_config data source (#​7992)
• vmwareengine: added PC undelete support in google_vmwareengine_private_cloud (#​8005)

BUG FIXES:

• alloydb: fixed a permadiff on psc_instance_config in google_alloydb_instance resource (#​7975)
• compute: fixed a malformed URL that affected updating the server_tls_policy property on google_compute_target_https_proxy resources (#​7988)
• compute: fixed force diff replacement logic for network_ip on resource google_compute_instance (#​7971)

hashicorp/terraform-provider-random (random)

v3.6.3

Compare Source

NOTES:

• all: This release introduces no functional changes. It does however include dependency updates which address upstream CVEs. (#​604)

uis/devops/continuous-delivery/ci-templates (uis/devops/continuous-delivery/ci-templates)

v4.6.0

Compare Source

v4.5.1

Compare Source

---

Configuration

📅 Schedule: Branch creation - "every weekday" in timezone Europe/London, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This MR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this MR, check this box

---

This MR has been generated by Renovate Bot.