Update terraform (major)

[renovate-bot]

This PR contains the following updates:

Package	Type	Update	Change
GoogleCloudPlatform/sql-db/google (source)	module	major	~> 9.0.0 -> ~> 25.2.0
GoogleCloudPlatform/sql-db/google (source)		major	~> 9.0.0 -> ~> 25.2.0
google (source)	required_provider	major	>=3.87, < 6 -> < 7
terraform-google-modules/bastion-host/google (source)	module	major	~> 6.0.0 -> ~> 8.0.0
terraform-google-modules/bastion-host/google (source)		major	~> 6.0.0 -> ~> 8.0.0
terraform-google-modules/bigquery/google (source)	module	major	~> 7.0.0 -> ~> 10.1.0
terraform-google-modules/bigquery/google (source)		major	~> 7.0.0 -> ~> 10.1.0
terraform-google-modules/cloud-dns/google (source)	module	major	~> 5.1.1 -> ~> 6.0.0
terraform-google-modules/cloud-dns/google (source)		major	~> 5.1.1 -> ~> 6.0.0
terraform-google-modules/cloud-router/google (source)	module	major	~> 6.0.2 -> ~> 7.0.0
terraform-google-modules/cloud-router/google (source)		major	~> 6.0.2 -> ~> 7.0.0
terraform-google-modules/cloud-storage/google (source)	module	major	~> 1.4 -> ~> 10.0
terraform-google-modules/cloud-storage/google (source)	module	major	~> 5.0.0 -> ~> 10.0.0
terraform-google-modules/cloud-storage/google (source)		major	~> 1.4 -> ~> 10.0
terraform-google-modules/cloud-storage/google (source)		major	~> 5.0.0 -> ~> 10.0.0
terraform-google-modules/iam/google (source)	module	major	~> 7.7.1 -> ~> 8.1.0
terraform-google-modules/iam/google (source)		major	~> 7.7.1 -> ~> 8.1.0
terraform-google-modules/kubernetes-engine/google (source)	module	major	~> 29.0.0 -> ~> 36.3.0
terraform-google-modules/kubernetes-engine/google (source)	module	major	29.0.0 -> 36.3.0
terraform-google-modules/kubernetes-engine/google (source)		major	29.0.0 -> 36.3.0
terraform-google-modules/kubernetes-engine/google (source)		major	~> 29.0.0 -> ~> 36.3.0
terraform-google-modules/log-export/google (source)	module	major	~> 7.7.0 -> ~> 11.0.0
terraform-google-modules/log-export/google (source)		major	~> 7.7.0 -> ~> 11.0.0
terraform-google-modules/network/google (source)	module	major	~> 7.5.0 -> ~> 11.1.0
terraform-google-modules/network/google (source)		major	~> 7.5.0 -> ~> 11.1.0
terraform-google-modules/org-policy/google (source)	module	major	<= 6 -> <= 7
terraform-google-modules/org-policy/google (source)		major	<= 6 -> <= 7
terraform-google-modules/project-factory/google (source)	module	major	~> 14.4.0 -> ~> 18.0.0
terraform-google-modules/project-factory/google (source)		major	~> 14.4.0 -> ~> 18.0.0
terraform-google-modules/pubsub/google (source)	module	major	~> 6.0 -> ~> 8.0
terraform-google-modules/pubsub/google (source)		major	~> 6.0 -> ~> 8.0
terraform-google-modules/vm/google (source)	module	major	~> 10.1.1 -> ~> 13.2.0
terraform-google-modules/vm/google (source)		major	~> 10.1.1 -> ~> 13.2.0

---

Release Notes

terraform-google-modules/terraform-google-sql-db (GoogleCloudPlatform/sql-db/google)

v25.2.2

Compare Source

Bug Fixes

• update display metadata for postgresql and mysql (#​707) (e662e52)

v25.2.1

Compare Source

Bug Fixes

• update service_uri for postgresql and mysql (#​705) (fa37bbd)

v25.2.0

Compare Source

Features

• add output required for apphub registration for mysql/postgresql module (#​704) (a33434f)
• Add reuse_interval to password validation policy configuration (#​687) (c3885a5)

v25.1.0

Compare Source

Features

• Add variables "enable_default_db", "enable_default_user" to module "safer_mysql" (#​698) (1925f03)
• added support for maintenance version (#​679) (49b478a)

v25.0.2

Compare Source

Bug Fixes

• to avoid password reset for existing additional users for MySQL module (#​692) (3352a8b)

v25.0.1

Compare Source

Bug Fixes

• remove point_in_time_recorvery_enabled from MySQL instance as it… (#​689) (a86d2b8)

v25.0.0

Compare Source

⚠ BREAKING CHANGES

• remove output variable apphub_service_uri from postgersql/mysql module as it is not supported (#​676)

Bug Fixes

• remove output variable apphub_service_uri from postgersql/mysql module as it is not supported (#​676) (de13aa9)

v24.0.1

Compare Source

Bug Fixes

• add alternate default for tier for postgresql (#​674) (fba7921)

v24.0.0

Compare Source

⚠ BREAKING CHANGES

• add deletion_protection to backup module and set it to false in … (#​670)

Bug Fixes

• add deletion_protection to backup module and set it to false in … (#​670) (5e39538)
• update connection metadata (#​668) (8cb3a03)

v23.0.0

Compare Source

⚠ BREAKING CHANGES

• TPG>=6.1: add support for IAM groups (#​661)
• Change export service account permission for external backups - roles/storage.objectAdmin (#​656)

Features

• TPG>=6.1: add support for IAM groups (#​661) (744870a)

Bug Fixes

• Change export service account permission for external backups - roles/storage.objectAdmin (#​656) (003237e)
• lint issue in metadata.display.yaml (#​659) (c414276)

v22.1.0

Compare Source

Features

• Adding flag for enabling data cache in MSSQL module (#​642) (c9f0014)
• enable data_cache_config block for mysql (#​652) (2b26a78)

v22.0.0

Compare Source

⚠ BREAKING CHANGES

• removed require_ssl and change max provider to 6.X (#​643)
• Add connection metadata, output and support for ml integration for Mysql module (#​637)

Features

• Add connection metadata, output and support for ml integration for Mysql module (#​637) (f2c91fa)
• removed require_ssl and change max provider to 6.X (#​643) (f75763b)

v21.0.2

Compare Source

Bug Fixes

• Missing ssl_mode in variable read_replicas.ip_configuration (#​638) (bbbac23)

v21.0.1

Compare Source

Bug Fixes

• mysql module read_replica add missing ssl_mode in ip_configuration (#​628) (aa3faaf)

v21.0.0

Compare Source

⚠ BREAKING CHANGES

• TPG>5.38: added deletion_policy to private service access sub-module and promoted to GA provider (#​620)
• Cleanup of old instance backups. Change role roles/cloudsql.editor to roles/cloudsql.admin (#​618)
• Add enable_google_ml_integration setting for database instance and configurable project roles for default database service account (#​615)

Features

• Add enable_google_ml_integration setting for database instance and configurable project roles for default database service account (#​615) (83bbaa3)
• Add new output called env_vars for postgresql (#​612) (f02e3fd)
• enable data_cache_config for postgresql read replicas (#​619) (d7280da)
• TPG>5.38: added deletion_policy to private service access sub-module and promoted to GA provider (#​620) (cf5f184)

Bug Fixes

• Backup - set IAM conditions conditionally (#​616) (8780714)
• Cleanup of old instance backups. Change role roles/cloudsql.editor to roles/cloudsql.admin (#​618) (7310051)

v20.2.0

Compare Source

Features

• Add Point in time recovery flag for mysql DB (#​607) (b9a6ada)

Bug Fixes

• mssql - make instance_server_ca_cert output sensitive (#​609) (163a89c)

v20.1.0

Compare Source

Features

• Add support for email based alerting (#​591) (af8ec91)
• Add support to use existing notification channels for alerts (#​593) (1c18d78)
• Follow least privilege principal for backup service account (#​597) (0f18fd7)

Bug Fixes

• disable random_pass when default user off (#​602) (98c7f8c)
• Relax assignment of backup_configuration when operating as a replica (#​589) (19daff8)

v20.0.0

Compare Source

⚠ BREAKING CHANGES

• TPG>=5.12: Add option to create and failover a replica instance in Postgresql and MsSQL sub-module (#​582)
• TPG>=5.6: bump required google provider to 5.6 for postgres

Features

• TPG>=5.12: Add option to create and failover a replica instance in Postgresql and MsSQL sub-module (#​582) (141e54a)

Bug Fixes

• mark replicas_instance_server_ca_certs output as sensitive (#​579) (faa064e)
• TPG>=5.6: bump required google provider to 5.6 for postgres (0d3b434)

v19.0.0

Compare Source

⚠ BREAKING CHANGES

• Allow passing ssl_mode for MySQL Module (#​575)

Features

• Allow passing ssl_mode for MySQL Module (#​575) (c7ab6ec)
• Make MySQL CloudSQL zone optional (#​572) (3c4b504)

Bug Fixes

• backup: backups are not deleted when retained nr of backups >= 20 (#​566) (6c4b0e3)
• Cloud SQL does not support multiple deny_maintenance_period block. Update variable description (#​564) (9e55c87)
• deps: Update cft/developer-tools Docker tag to v1.19 (#​571) (bd18ee6)
• Improve MySQL root_password documentation (#​573) (611edfd)

v18.2.0

Compare Source

Features

• add master_instance_name and instance_type to mysql module (#​556) (6cda644)

Bug Fixes

• Don't define backup_configuration if default DB is configured as a replica (#​559) (52224ad)

v18.1.0

Compare Source

Features

• postgres: add root password parameter (#​521) (be2da56)

Bug Fixes

• add dns_name to output in postgresql module (#​544) (2ade7eb)

v18.0.0

Compare Source

⚠ BREAKING CHANGES

• safer_mysql module's assign_public_ip input should be bool type (#​541)

Features

• add support for ssl_mode to postgresql module (#​547) (9c59232)

Bug Fixes

• safer_mysql module's assign_public_ip input should be bool type (#​541) (4521594)

v17.1.0

Compare Source

Features

• added cloudsql serverless_export (#​530) (aae3181)
• adding data_cache_config to postgresql module (#​531) (f04d617)

Bug Fixes

• reduce number of replicas in postgres-ha test (#​539) (c769aa5)

v17.0.1

Compare Source

Bug Fixes

• deps: update actions/checkout action to v4 (#​510) (9012164)
• deps: update cft/developer-tools docker tag to v1.15 (#​508) (8c32574)
• Fix zone auto-detection when var.zones are not set (#​534) (8409f72)
• upgraded versions.tf to include minor bumps from tpg v5 (#​523) (5102a7b)

v17.0.0

Compare Source

⚠ BREAKING CHANGES

• TPG >= 4.80: add support for psc (private service connect) (#​507)

Features

• add connector params timeout and export from replica (#​406) (e563f8a)
• add support for query_plans_per_minute (#​484) (ffb674c)
• MySQL binary logs on replica (#​466) (0e0c196)
• TPG >= 4.80: add support for psc (private service connect) (#​507) (64c2435)

Bug Fixes

• deps: update module github.com/googlecloudplatform/cloud-foundation-toolkit/infra/blueprint-test to v0.8.0 (#​505) (5b111a6)

v16.1.0

Compare Source

Features

• config connector_enforcement in postgres and mssql (#​500) (5789b54)

v16.0.0

Compare Source

⚠ BREAKING CHANGES

• added edition in mssql, mysql, postgresql, safer_sql and data_cache_config to mysql and safer_sql modules (#​491)

Features

• added edition in mssql, mysql, postgresql, safer_sql and data_cache_config to mysql and safer_sql modules (#​491) (0024b24)

Bug Fixes

• to avoid password reset for existing additional users for mssql (#​489) (923cd11)

v15.2.0

Compare Source

Features

• add time_zone for mssql (#​488) (0938dec)

v15.1.0

Compare Source

Features

• added support for enable_private_path_for_google_cloud_services field in replica instances. (#​471) (3d0c204)
• include log for each database name in export workflow (#​407) (e638a24)

Bug Fixes

• port iam_users from postgresql module (#​467) (5732125)
• to avoid password reset for existing additional users (#​461) (1fcdcc4)

v15.0.0

Compare Source

⚠ BREAKING CHANGES

• pass iam_user_emails as map to postgres module (#​414)

Features

• add deletion_protection.enabled for read replicas (#​437) (4cdb81c)
• added enable_private_path_for_google_cloud_services field in ip_configuration for google_sql_database_instance resource (#​449) (64618c4)
• support query insights for MySQL for read replicas (#​453) (59b32af)

Bug Fixes

• pass iam_user_emails as map to postgres module (#​414) (15298c2)
• prevent auto-update of random_password resource (#​446) (ed83b8b)
• remove replica pwd validation config (#​441) (daa3772)

v14.1.0

Compare Source

Features

• increased timeout to 30m to support micro instances also. (#​425) (5ed6288)
• make connector enforcement configurable (#​439) (2df794b)

Bug Fixes

• random password for default user and additional users will also follow password validation policy (#​443) (0ceb0ed)

v14.0.1

Compare Source

Bug Fixes

• make special chars opt in for generated passwords (#​421) (1c9ce24)
• updates the TF version constraint to 1.3 (#​419) (add16eb)

v14.0.0

Compare Source

⚠ BREAKING CHANGES

• Requires Terraform >= 1.3.0
• Add pwd validation policy for mysql modules (#​409)
• adds settings.deletion_protection_enabled to modules (#​404)
• Aligned the behaviour of additional_users resource in all 3 Cloud SQL instance modules. (#​398)
• Add deny_maintenance_period for MySQL, MsSQL, PostgreSQL and safer_sql (#​399)
• removes instanceUser iam binding from the postgresql module (#​382)
• Add Password Validation Policy to Postgres Module (#​376)
• Add name_override variable for MySQL, PostgreSQL and safer_sql to Override default read replica name (#​393)

Features

• Add deny_maintenance_period for MySQL, MsSQL, PostgreSQL and safer_sql (#​399) (55f4206)
• add secondary_zone, follow_gae_application to safer_mysql (#​390) (05cd2b6)
• Add name_override variable for MySQL, PostgreSQL and safer_sql to Override default read replica name (#​393) (045bed1)
• Add Password Validation Policy to Postgres Module (#​376) (562455b)
• Add pwd validation policy for mysql modules (#​409) (df8accd)
• add Suffix to backup configurations (#​377) (0ea1968)
• adds deletion_policy parameter for google_sql_user and google_sql_database resource. (#​386) (8ab6e37)
• adds settings.deletion_protection_enabled to modules (#​404) (af48cd3)
• adds settings.location_preference.follow_gae_application parameter to modules. (#​385) (edefa43)
• Aligned the behaviour of additional_users resource in all 3 Cloud SQL instance modules. (#​398) (7d6b209)

Bug Fixes

• Added functionality to simply specify the database version number ins… (#​388) (83ca2e2)
• Added sensitive field in output "primary" in mssql module (#​394) (4b32479)
• fixes lint issues and generates metadata (#​392) (dd1d75c)
• made 'allocated_ip_range' variable optional (#​395) (243c1c5)
• removes instanceUser iam binding from the postgresql module (#​382) (cc39074)
• sensitive output safer mysql (#​401) (5cc5e08)

v13.0.1

Compare Source

Bug Fixes

• revert null provider version to major.minor (#​372) (b4c0555)

v13.0.0

Compare Source

⚠ BREAKING CHANGES

• deps: update terraform null to ~> 3.2.0 (#​366)
• Make compression default for Backups
• Adds secondary_zone to db modules

Features

• Adds secondary_zone to db modules (7818a7e)
• Support Query Insights for MySQL (d932391)

Bug Fixes

• Db master and replica update solution for MYSQL (f991c22)
• Make compression default for Backups (ff37244)
• Postgresql availability type shouldn't prevent backup configuration (#​352) (e796b3c), closes #​351
• removed invalid parameter for PostgrSQL binary_log_enabled (#​341) (b51427e)

Miscellaneous Chores

• deps: update terraform null to ~> 3.2.0 (#​366) (643e6e5)

v12.1.0

Compare Source

Features

• Added cloud sql restore module that uses database import (#​343) (da4033b)

Bug Fixes

• for_each issue on the sql_audit_config (#​340) (95e48a1)

v12.0.0

Compare Source

⚠ BREAKING CHANGES

• Minimum Google Beta provider version increased to v4.28.0.
• Change additional user default password (#​332)
• adds availability_type for read_replicas (#​329)

Features

• add support for settings.sql_server_audit_config setting (64b8a18)
• adds availability_type for read_replicas (#​329) (e26861e)
• Provide an option to compress backups for PostreSQL and MySQL (#​335) (b1ef34d)

Bug Fixes

• Change additional user default password (#​332) (f96f71e)
• set replicas output as sensitive pgsql (#​334) (ad6f427)

v11.0.0

Compare Source

⚠ BREAKING CHANGES

• Switch to random_password instead of random_id (#​308)
• Add support for setting disk_autoresize_limit (#​288)
• add support for settings.active_directory_config for SQL module (#​305)

Features

• Add sensitive flag for MySQL module outputs (#​303) (6a15c26)
• Add support for setting disk_autoresize_limit (#​288) ([e07f141](https://redirect.git

---

Configuration

📅 Schedule: Branch creation - "every 3 months on the first day of the month" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.