diff --git a/CHANGELOG.md b/CHANGELOG.md
index 4bda597804b..2c2a41bcc8d 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,4 +1,66 @@
-## 7.20.0 (Unreleased)
+## 7.21.0 (Feb 24, 2026)
+
+FEATURES:
+* **New Data Source:** `google_vmwareengine_announcements` ([#11577](https://github.com/hashicorp/terraform-provider-google-beta/pull/11577))
+* **New Data Source:** `google_vmwareengine_upgrades` ([#11591](https://github.com/hashicorp/terraform-provider-google-beta/pull/11591))
+* **New Resource:** `google_compute_region_backend_bucket` ([#11576](https://github.com/hashicorp/terraform-provider-google-beta/pull/11576))
+* **New Resource:** `google_dataform_team_folder` (beta) ([#11573](https://github.com/hashicorp/terraform-provider-google-beta/pull/11573))
+* **New Resource:** `google_hypercomputecluster_cluster` ([#11596](https://github.com/hashicorp/terraform-provider-google-beta/pull/11596))
+* **New Resource:** `google_network_services_agent_gateway` (beta) ([#11572](https://github.com/hashicorp/terraform-provider-google-beta/pull/11572))
+
+IMPROVEMENTS:
+* beyondcorp: added `logging` field to `google_beyondcorp_security_gateway` resource ([#11581](https://github.com/hashicorp/terraform-provider-google-beta/pull/11581))
+* dataproc: added `wait_for_completion` field to `google_dataproc_job` resource ([#11593](https://github.com/hashicorp/terraform-provider-google-beta/pull/11593))
+* discoveryengine: added `disable_analytics` field to `google_discovery_engine_search_engine` resource ([#11589](https://github.com/hashicorp/terraform-provider-google-beta/pull/11589))
+* dlp: added `targets.cloud_storage_target.filter.collection.include_tags` block to `google_data_loss_prevention_discovery_config` resource ([#11594](https://github.com/hashicorp/terraform-provider-google-beta/pull/11594))
+* iap: added `client_id`, `client_secret`, and `client_secret_sha256` fields to `google_iap_settings` resource ([#11588](https://github.com/hashicorp/terraform-provider-google-beta/pull/11588))
+
+BUG FIXES:
+* cloudrun: fixed perma-diff on `http_target.uri_override.query_override` in `google_cloud_tasks_queue` ([#11590](https://github.com/hashicorp/terraform-provider-google-beta/pull/11590))
+* storage: fixed a bug in `google_storage_bucket` where `force_destroy = true` would fail to delete buckets with large number of objects due to missing pagination ([#11586](https://github.com/hashicorp/terraform-provider-google-beta/pull/11586))
+
+## 7.20.0 (Feb 17, 2027)
+
+FEATURES:
+* **New Data Source:** `google_access_context_manager_supported_service` ([#11561](https://github.com/hashicorp/terraform-provider-google-beta/pull/11561))
+* **New Data Source:** `google_access_context_manager_supported_services` ([#11561](https://github.com/hashicorp/terraform-provider-google-beta/pull/11561))
+* **New Data Source:** `google_backup_dr_data_sources` ([#11551](https://github.com/hashicorp/terraform-provider-google-beta/pull/11551))
+* **New Data Source:** `google_storage_bucket_object_contents` ([#11529](https://github.com/hashicorp/terraform-provider-google-beta/pull/11529))
+* **New Resource:** `google_biglake_iceberg_namespace` ([#11547](https://github.com/hashicorp/terraform-provider-google-beta/pull/11547))
+* **New Resource:** `google_cloud_identity_policy` ([#11536](https://github.com/hashicorp/terraform-provider-google-beta/pull/11536))
+* **New Resource:** `google_compute_rollout_plan` ([#11562](https://github.com/hashicorp/terraform-provider-google-beta/pull/11562))
+* **New Resource:** `google_dataform_folder` ([#11542](https://github.com/hashicorp/terraform-provider-google-beta/pull/11542))
+* **New Resource:** `google_network_services_agent_gateway` (beta) ([#11571](https://github.com/hashicorp/terraform-provider-google-beta/pull/11571))
+* **New Resource:** `google_oracle_database_exadb_vm_cluster` ([#11508](https://github.com/hashicorp/terraform-provider-google-beta/pull/11508))
+* **New Resource:** `google_vector_search_collection` ([#11566](https://github.com/hashicorp/terraform-provider-google-beta/pull/11566))
+
+IMPROVEMENTS:
+* alloydb: added write-only support for `initial_user.password_wo` to `google_alloydb_cluster` ([#11546](https://github.com/hashicorp/terraform-provider-google-beta/pull/11546))
+* ces: added `mcp_toolset` field to `google_ces_toolset` resource ([#11513](https://github.com/hashicorp/terraform-provider-google-beta/pull/11513))
+* compute: added write-only support for `private_key` to `google_compute_region_ssl_certificate` resource ([#11544](https://github.com/hashicorp/terraform-provider-google-beta/pull/11544))
+* compute: added write-only support for `private_key` to `google_compute_ssl_certificate` resource ([#11544](https://github.com/hashicorp/terraform-provider-google-beta/pull/11544))
+* compute: added `enable` field to `google_compute_packet_mirroring` resource ([#11537](https://github.com/hashicorp/terraform-provider-google-beta/pull/11537))
+* compute: added `params` field to `google_compute_external_vpn_gateway` resource ([#11558](https://github.com/hashicorp/terraform-provider-google-beta/pull/11558))
+* compute: added `params` field to `google_compute_ha_vpn_gateway` resource ([#11558](https://github.com/hashicorp/terraform-provider-google-beta/pull/11558))
+* compute: added `params` field to `google_compute_interconnect_attachment` resource ([#11518](https://github.com/hashicorp/terraform-provider-google-beta/pull/11518))
+* compute: added `params` field to `google_compute_vpn_gateway` resource ([#11558](https://github.com/hashicorp/terraform-provider-google-beta/pull/11558))
+* compute: added `params` field to `google_compute_vpn_tunnel` resource ([#11558](https://github.com/hashicorp/terraform-provider-google-beta/pull/11558))
+* compute: added `slice_controller_config` field to `google_container_cluster` resource ([#11510](https://github.com/hashicorp/terraform-provider-google-beta/pull/11510))
+* container: added `additional_ip_ranges_config.status` to `google_container_cluster` resource ([#11534](https://github.com/hashicorp/terraform-provider-google-beta/pull/11534))
+* dataproc: added `instance_flexibility_policy` to `master_config` and `worker_config` in `google_dataproc_cluster` resource ([#11532](https://github.com/hashicorp/terraform-provider-google-beta/pull/11532))
+* developerconnect: added `target_projects` field to `google_developer_connect_insights_config` resource ([#11545](https://github.com/hashicorp/terraform-provider-google-beta/pull/11545))
+* filestore: added `replica_action` to `google_filestore_instance` resource ([#11553](https://github.com/hashicorp/terraform-provider-google-beta/pull/11553))
+* networksecurity: added `policy_profile`, `http_rules.0.to.0.operations.0.mcp` to `google_network_security_authz_policy` ([#11559](https://github.com/hashicorp/terraform-provider-google-beta/pull/11559))
+* networkservices: added `ull_multicast_domain` field to `google_network_services_multicast_domain` resource ([#11543](https://github.com/hashicorp/terraform-provider-google-beta/pull/11543))
+* networkservices: relaxed `load_balancing_scheme` validation to support non-Backend Service targets in `google_network_services_authz_extension` ([#11559](https://github.com/hashicorp/terraform-provider-google-beta/pull/11559))
+* spanner: added support for `user_project_override` in `google_spanner_database_iam` and `google_spanner_instance_iam` resources ([#11527](https://github.com/hashicorp/terraform-provider-google-beta/pull/11527))
+* vmwareengine: added `datastore_mount_config` field to `google_vmwareengine_cluster` resource ([#11554](https://github.com/hashicorp/terraform-provider-google-beta/pull/11554))
+
+BUG FIXES:
+* bigquery: fixed permadiff with the `collation` field in `google_bigquery_table.schema` when it inherits the value from `google_bigquery_dataset.default_collation` ([#11538](https://github.com/hashicorp/terraform-provider-google-beta/pull/11538))
+* bigqueryanalyticshub: fixed update failure for `replica_locations` in `google_bigquery_analytics_hub_listing` (beta) ([#11523](https://github.com/hashicorp/terraform-provider-google-beta/pull/11523))
+* iam: fixed an issue where iam resources not retry on error 409 concurrent policy changes ([#11564](https://github.com/hashicorp/terraform-provider-google-beta/pull/11564))
+* publicca: fixed `mac_key` fields not being properly set in `google_public_ca_external_account_key` ([#11567](https://github.com/hashicorp/terraform-provider-google-beta/pull/11567))
 
 ## 7.19.0 (Feb 10, 2026)