chore(deps): update hashicorp/google requirement from ~> 5.0 to ~> 7.29 in /infra/cloudrun

[dependabot]

Updates the requirements on hashicorp/google to permit the latest version.

Release notes

Sourced from hashicorp/google's releases.

v7.29.0

NOTES:

• provider: List resources are now supported in both google and google-beta providers with the introduction of google_service_account list resource - more info can be found here (#26938)

FEATURES:

• New Data Source: google_firebase_admin_sdk_config (#26901)
• New Resource: google_chronicle_datatable_row (#26960)
• New Resource: google_chronicle_datatable (#26895)
• New Resource: google_dataform_folder (#26881)
• New Resource: google_dataform_team_folder (#26881)
• New Resource: google_firebase_storage_default_bucket (#26965)

IMPROVEMENTS:

• alloydb: added track_client_address field to google_alloydb_instance resource (#26964)
• clouddeploy: added tasks field to google_clouddeploy_custom_target_type resource (#26941)
• compute: added header_action and redirect_options fields to google_compute_organization_security_policy_rule resource (#26942)
• dataplex: added execution_identity field to google_dataplex_datascan resource (#26924)
• dataproc: added cluster_config.engine field to google_dataproc_cluster resource (#26962)
• iambeta: added trust_default_shared_ca field to google_iam_workload_identity_pool resource (#26974)
• netapp: added large_capacity_config field to google_netapp_volume resource(#26927)
• netapp: added kms_config, encryption_state and backups_crypto_key_version fields to google_netapp_backup_vault resource (#26939)
• resourcemanager: add resource-identity support to google_service_account resource (#26938)
• sql: added entraid_config field to google_sql_database_instance resource (#26921)
• vectorsearch: added encryption_spec field to google_vector_search_collection resource (#26972)

BUG FIXES:

• apigee: fixed ignoring is_enabled = false on create and update in google_apigee_target_server resource (#26878)
• bigquery: fixed inability to set default_collation to empty string in google_bigquery_dataset (#26925)
• ces: fixed a diff on logging_settings when unspecified in google_ces_app. Removing the value from config will now preserve the existing settings instead of removing them. (#26899)
• compute: fixed a permadiff on iap.oauth2_client_id in google_compute_backend_service and google_compute_region_backend_service when the API returns a single space (#26975)
• container: fixed a bug in google_container_cluster where setting multiple fields in dns_endpoint_config failed to apply all changes (#26968)
• workstations: fixed a permadiff on persistent_directories.gce_pd.reclaim_policy in google_workstations_workstation_config resource (#26971)

Changelog

Sourced from hashicorp/google's changelog.

7.29.0 (Apr 21, 2026)

NOTES:

• provider: List resources are now supported in both google and google-beta providers with the introduction of google_service_account list resource - more info can be found here (#26938)

FEATURES:

• New Data Source: google_firebase_admin_sdk_config (#26901)
• New Resource: google_chronicle_datatable_row (#26960)
• New Resource: google_chronicle_datatable (#26895)
• New Resource: google_dataform_folder (#26881)
• New Resource: google_dataform_team_folder (#26881)
• New Resource: google_firebase_storage_default_bucket (#26965)

IMPROVEMENTS:

• alloydb: added track_client_address field to google_alloydb_instance resource (#26964)
• clouddeploy: added tasks field to google_clouddeploy_custom_target_type resource (#26941)
• compute: added header_action and redirect_options fields to google_compute_organization_security_policy_rule resource (#26942)
• dataplex: added execution_identity field to google_dataplex_datascan resource (#26924)
• dataproc: added cluster_config.engine field to google_dataproc_cluster resource (#26962)
• iambeta: added trust_default_shared_ca field to google_iam_workload_identity_pool resource (#26974)
• netapp: added large_capacity_config field to google_netapp_volume resource(#26927)
• netapp: added kms_config, encryption_state and backups_crypto_key_version fields to google_netapp_backup_vault resource (#26939)
• resourcemanager: add resource-identity support to google_service_account resource (#26938)
• sql: added entraid_config field to google_sql_database_instance resource (#26921)
• vectorsearch: added encryption_spec field to google_vector_search_collection resource (#26972)

BUG FIXES:

• apigee: fixed ignoring is_enabled = false on create and update in google_apigee_target_server resource (#26878)
• bigquery: fixed inability to set default_collation to empty string in google_bigquery_dataset (#26925)
• ces: fixed a diff on logging_settings when unspecified in google_ces_app. Removing the value from config will now preserve the existing settings instead of removing them. (#26899)
• compute: fixed a permadiff on iap.oauth2_client_id in google_compute_backend_service and google_compute_region_backend_service when the API returns a single space (#26975)
• container: fixed a bug in google_container_cluster where setting multiple fields in dns_endpoint_config failed to apply all changes (#26968)
• workstations: fixed a permadiff on persistent_directories.gce_pd.reclaim_policy in google_workstations_workstation_config resource (#26971)

7.28.0 (Apr 14, 2026)

NOTES:

• compute: migrated data_source_google_compute_instance_template datasource to use direct HTTP rather then a client library (#26831)
• compute: migrated google_compute_instance_guest_attributes datasource to use direct HTTP rather then a client library (#26826)
• provider: added provider-wide Identity() schema support, allowing imports with MMv1 resources to occur using the identity block instead of id field (#26783)

FEATURES:

• New Data Source: google_vertex_ai_reasoning_engine_query (#26787)
• New Resource: google_apigee_space (#26857)
• New Resource: google_vertex_ai_reasoning_engine_iam_binding (#26785)
• New Resource: google_vertex_ai_reasoning_engine_iam_member (#26785)
• New Resource: google_vertex_ai_reasoning_engine_iam_policy (#26785)
• New Resource: google_workload_identity_service_agent (#26780)

IMPROVEMENTS:

... (truncated)

Commits

• b76948f changelog - 7.29.0 (#26988)
• b595f7b fix: resolve oauth2_client_id permadiff in backend services (#17087) (#26975)
• cad5572 Add trustDefaultSharedCa to IAM Workload Identity Pool (#17148) (#26974)
• 16eb2df docs: fix grammar error in service_account (ref hashicorp/terraform-provider-...
• fe76b6e Add Vector Search collection CMEK support (#17129) (#26972)
• e100bee Make reclaim_policy O+C in google_workstations_workstation_config (#17152) (#...
• 7a532e2 update model in CES tests (#17104) (#26970)
• 5fa693b Add tf-test prefix to TestAccCloudBuildTrigger_webhook_config (#17155) (#26969)
• def8b87 fix allow_external_traffic not being settable if other dns_endpoint_config fi...
• 258c064 Change field name from url_param_only to ignore_read in ReservationGr… (#17...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #23.