fix: bump the terraform_prod group in /prod with 2 updates

[dependabot]

Bumps the terraform_prod group in /prod with 2 updates: hashicorp/google and hashicorp/google-beta.

Updates hashicorp/google from 7.26.0 to 7.30.0

Release notes

Sourced from hashicorp/google's releases.

v7.30.0

BREAKING CHANGES:

• apigee: fixed google_apigee_env_keystore to require the name field which is mandatory in the Apigee API (#27006)

FEATURES:

• New Data Source: google_data_lineage_config (#27098)
• New Resource: google_artifact_registry_rule (#27049)
• New Resource: google_data_lineage_config (#27098)
• New Resource: google_document_ai_schema (#27102)
• New Resource: google_firebase_remote_config_remote_config (#27050)

IMPROVEMENTS:

• provider: added support for prefer_global_endpoints and prefer_regional_endpoints to the provider configuration. Support for regional endpoints will be rolled out on a per-product level (#27014)
• artifactregistry: added support for regionalized endpoints (#27014)
• assuredworkloads: added SPAIN_DATA_BOUNDARY_BY_TELEFONICA value to partner field on google_assured_workloads_workload resource (#27027)
• bigqueryconnection: added configuration block to google_bigquery_connection resource to support AlloyDB and other connector types via the BigQuery Connector framework (#27029)
• bigtable: added support for tags to google_bigtable_instance (#27060)
• cloudrunv2: added DISK fields to google_cloud_run_v2_job resource (#27052)
• cloudrunv2: added DISK fields to google_cloud_run_v2_worker_pool resource (#27048)
• compute: add params.resourceManagerTags field to the google_compute_storage_pool (#27051)
• compute: added cache_policy field to google_compute_url_map (ga) (#27011)
• compute: added params.resource_manager_tags field to google_compute_instant_snapshot resource (#27087)
• compute: added resource_manager_tags field to google_compute_machine_image resource (#27075)
• container: added node_config.linux_node_config.accurate_time_config field to google_container_node_pool resource (#27064)
• container: added node_pool.node_config.linux_node_config.accurate_time_config and node_config.linux_node_config.accurate_time_config fields to google_container_cluster resource (#27064)
• container: added node_pool.node_config.linux_node_config.swap_config field to google_container_node_pool resource (#26982)
• container: increased default timeout for google_container_cluster to 90 minutes (from 40/60 depending on operation) and google_container_node_pool to 60 minutes (from 30) (#27101)
• discoveryengine: added destionation_configs.destionations.port and destionation_configs.params fields to google_discovery_engine_data_connector resource (#27058)
• dns: added support for IAM conditions to google_dns_managed_zone resource (#27010)
• datastream: added deletion_policy field to control whether child routes are force-deleted to google_datastream_private_connection (#27033)
• networkconnectivity: added support for IAM conditions to google_network_connectivity_hub resource (#27005)
• networksecurity: added parent field to google_network_security_address_groups data source (#27082)
• workbench: added support for new disk types and accelerators to google_workbench_instance (#27061)

BUG FIXES:

• alloydb: fixed google_alloydb_cluster so that maintenance_update_policy.maintenance_windows.start_time.hours can be set to 0 (midnight) (#26981)
• ces: fixed type mismatch in google_ces_app variable default value (#27084)
• compute: fixed an issue where an erroneous error could occur for having an unset zone field in google_compute_instance_template (#27076)
• compute: fixed permadiff for iap.oauth2_client_id in google_compute_backend_service and google_compute_region_backend_service when the API returns a single space (#26975)
• container: fixed a permadiff in google_container_cluster where database_encryption.state returning ALL_OBJECTS_ENCRYPTION_ENABLED instead of the configured ENCRYPTED caused unintended reapplies (#27040)
• dataplex: fixed acceptance test failure for one time scans (#27095)
• dialogflowcx: fixed a perma-diff in google_dialogflow_cx_test_case when session_parameters was omitted from the configuration (#26985)
• hypercomputecluster: fixed a permadiff in google_hypercomputecluster_cluster when count, static_node_count, or max_dynamic_node_count were explicitly set to 0. (#27073)
• identityplatform: fixed a premadiff on multi_tenant in google_identity_platform_config resource. Removing the value from config will now preserve the existing settings instead of removing them. (#26986)
• memorystore: fixed an issue preventing updating multiple properties at once for google_redis_cluster (#27077)

NOTES:

• compute: Migrate resource_compute_instance_group.go.tmpl resource to use direct HTTP rather then a client library (#27080)
• compute: migrated compute-operation resource to use direct HTTP rather then a client library (#27053)
• compute: migrated compute_backend_bucket_security_policy resource to use direct HTTP rather than a client library (#27012)

... (truncated)

Changelog

Sourced from hashicorp/google's changelog.

7.30.0 (Unreleased)

7.29.0 (Apr 21, 2026)

NOTES:

• provider: List resources are now supported in both google and google-beta providers with the introduction of google_service_account list resource - more info can be found here (#26938)

FEATURES:

• New Data Source: google_firebase_admin_sdk_config (#26901)
• New Resource: google_chronicle_datatable_row (#26960)
• New Resource: google_chronicle_datatable (#26895)
• New Resource: google_dataform_folder (#26881)
• New Resource: google_dataform_team_folder (#26881)
• New Resource: google_firebase_storage_default_bucket (#26965)

IMPROVEMENTS:

• alloydb: added track_client_address field to google_alloydb_instance resource (#26964)
• clouddeploy: added tasks field to google_clouddeploy_custom_target_type resource (#26941)
• compute: added header_action and redirect_options fields to google_compute_organization_security_policy_rule resource (#26942)
• dataplex: added execution_identity field to google_dataplex_datascan resource (#26924)
• dataproc: added cluster_config.engine field to google_dataproc_cluster resource (#26962)
• iambeta: added trust_default_shared_ca field to google_iam_workload_identity_pool resource (#26974)
• netapp: added large_capacity_config field to google_netapp_volume resource(#26927)
• netapp: added kms_config, encryption_state and backups_crypto_key_version fields to google_netapp_backup_vault resource (#26939)
• resourcemanager: add resource-identity support to google_service_account resource (#26938)
• sql: added entraid_config field to google_sql_database_instance resource (#26921)
• vectorsearch: added encryption_spec field to google_vector_search_collection resource (#26972)

BUG FIXES:

• apigee: fixed ignoring is_enabled = false on create and update in google_apigee_target_server resource (#26878)
• bigquery: fixed inability to set default_collation to empty string in google_bigquery_dataset (#26925)
• ces: fixed a diff on logging_settings when unspecified in google_ces_app. Removing the value from config will now preserve the existing settings instead of removing them. (#26899)
• compute: fixed a permadiff on iap.oauth2_client_id in google_compute_backend_service and google_compute_region_backend_service when the API returns a single space (#26975)
• container: fixed a bug in google_container_cluster where setting multiple fields in dns_endpoint_config failed to apply all changes (#26968)
• workstations: fixed a permadiff on persistent_directories.gce_pd.reclaim_policy in google_workstations_workstation_config resource (#26971)

7.28.0 (Apr 14, 2026)

NOTES:

• compute: migrated data_source_google_compute_instance_template datasource to use direct HTTP rather then a client library (#26831)
• compute: migrated google_compute_instance_guest_attributes datasource to use direct HTTP rather then a client library (#26826)
• provider: added provider-wide Identity() schema support, allowing imports with MMv1 resources to occur using the identity block instead of id field (#26783)

FEATURES:

• New Data Source: google_vertex_ai_reasoning_engine_query (#26787)
• New Resource: google_apigee_space (#26857)
• New Resource: google_vertex_ai_reasoning_engine_iam_binding (#26785)
• New Resource: google_vertex_ai_reasoning_engine_iam_member (#26785)
• New Resource: google_vertex_ai_reasoning_engine_iam_policy (#26785)
• New Resource: google_workload_identity_service_agent (#26780)

... (truncated)

Commits

• 34e90e3 Add changelog for 7.30.0 (#27112)
• 08bb9ee Migrated Compute instance network interface to use transport_tpg.SendRequest ...
• 879d344 Converted handwritten-only products to be "generated" (#17291) (#27103)
• 05a8cd8 Add DocumentAI Schema resource (#17293) (#27102)
• 8b1d15a Increase timeouts for GKE resources (#17295) (#27101)
• 372b39f Fix PRs reverted in the GitHub incident (#17290) (#27100)
• 6ccb0a9 Fixed docstring for registry.GetProduct (#17277) (#27099)
• 2256ac3 Feature: Create datalineage config provider (#17073) (#27098)
• 6ea0ee2 Refactor TestAccAccessApprovalSettings loop to use a slice. (#17287) (#27097)
• 5dc059a fix: (storage) TestAccStorageObjectAcl_noOwner test case fix (#17284) (#27096)
• Additional commits viewable in compare view

Updates hashicorp/google-beta from 7.26.0 to 7.30.0

Release notes

Sourced from hashicorp/google-beta's releases.

v7.30.0

BREAKING CHANGES:

• apigee: fixed google_apigee_env_keystore to require the name field which is mandatory in the Apigee API (#12006)

FEATURES:

• New Data Source: google_data_lineage_config (#12068)
• New Resource: google_artifact_registry_rule (#12031)
• New Resource: google_data_lineage_config (#12068)
• New Resource: google_document_ai_schema (#12072)
• New Resource: google_firebase_remote_config_remote_config (#12032)

IMPROVEMENTS:

• provider: added support for prefer_global_endpoints and prefer_regional_endpoints to the provider configuration. Support for regional endpoints will be rolled out on a per-product level (#12014)
• artifactregistry: added support for regionalized endpoints (#12014)
• assuredworkloads: added SPAIN_DATA_BOUNDARY_BY_TELEFONICA value to partner field on google_assured_workloads_workload resource (#12018)
• bigqueryconnection: added configuration block to google_bigquery_connection resource to support AlloyDB and other connector types via the BigQuery Connector framework (#12021)
• bigtable: added support for tags to google_bigtable_instance (#12041)
• cloudrunv2: added DISK fields to google_cloud_run_v2_job resource (#12034)
• cloudrunv2: added DISK fields to google_cloud_run_v2_worker_pool resource (#12030)
• compute: add params.resourceManagerTags field to the google_compute_storage_pool (#12033)
• compute: added erase_windows_vss_signature field to google_compute_instance (beta) (#12025)
• compute: added params.resource_manager_tags field to google_compute_instant_snapshot resource (#12062)
• compute: added resource_manager_tags field to google_compute_machine_image resource (#12051)
• container: added node_config.linux_node_config.accurate_time_config field to google_container_node_pool resource (#12045)
• container: added node_pool.node_config.linux_node_config.accurate_time_config and node_config.linux_node_config.accurate_time_config fields to google_container_cluster resource (#12045)
• container: added node_pool.node_config.linux_node_config.swap_config field to google_container_node_pool resource (#11992)
• container: increased default timeout for google_container_cluster to 90 minutes (from 40/60 depending on operation) and google_container_node_pool to 60 minutes (from 30) (#12071)
• discoveryengine: added destionation_configs.destionations.port and destionation_configs.params fields to google_discovery_engine_data_connector resource (#12039)
• dns: added support for IAM conditions to google_dns_managed_zone resource (#12010)
• datastream: added deletion_policy field to control whether child routes are force-deleted to google_datastream_private_connection (#12024)
• networkconnectivity: added support for IAM conditions to google_network_connectivity_hub resource (#12005)
• networksecurity: added parent field to google_network_security_address_groups data source (#12057)
• workbench: added support for new disk types and accelerators to google_workbench_instance (#12042)

BUG FIXES:

• alloydb: fixed google_alloydb_cluster so that maintenance_update_policy.maintenance_windows.start_time.hours can be set to 0 (midnight) (#11991)
• ces: fixed type mismatch in google_ces_app variable default value (#12059)
• compute: fixed an issue where an erroneous error could occur for having an unset zone field in google_compute_instance_template (#12052)
• compute: fixed permadiff for iap.oauth2_client_id in google_compute_backend_service and google_compute_region_backend_service when the API returns a single space (#11990)
• container: fixed a permadiff in google_container_cluster where database_encryption.state returning ALL_OBJECTS_ENCRYPTION_ENABLED instead of the configured ENCRYPTED caused unintended reapplies (#12029)
• dataplex: fixed acceptance test failure for one time scans (#12065)
• dialogflowcx: fixed a perma-diff in google_dialogflow_cx_test_case when session_parameters was omitted from the configuration (#11995)
• hypercomputecluster: fixed a permadiff in google_hypercomputecluster_cluster when count, static_node_count, or max_dynamic_node_count were explicitly set to 0. (#12049)
• identityplatform: fixed a premadiff on multi_tenant in google_identity_platform_config resource. Removing the value from config will now preserve the existing settings instead of removing them. (#11996)
• memorystore: fixed an issue preventing updating multiple properties at once for google_redis_cluster (#12053)

NOTES:

• compute: Migrate resource_compute_instance_group.go.tmpl resource to use direct HTTP rather then a client library (#12056)
• compute: migrated compute-operation resource to use direct HTTP rather then a client library (#12035)
• compute: migrated compute_backend_bucket_security_policy resource to use direct HTTP rather than a client library (#12012)

... (truncated)

Changelog

Sourced from hashicorp/google-beta's changelog.

7.30.0 (Unreleased)

7.29.0 (Apr 21, 2026)

NOTES:

• provider: List resources are now supported in both google and google-beta providers with the introduction of google_service_account list resource - more info can be found here (#11967)

FEATURES:

• New Data Source: google_firebase_admin_sdk_config (#11954)
• New Resource: google_firebase_storage_default_bucket (#11980)

IMPROVEMENTS:

• alloydb: added track_client_address field to google_alloydb_instance resource (#11979)
• clouddeploy: added tasks field to google_clouddeploy_custom_target_type resource (#11970)
• compute: added header_action and redirect_options fields to google_compute_organization_security_policy_rule resource (#11971)
• dataplex: added execution_identity field to google_dataplex_datascan resource (#11961)
• dataproc: added cluster_config.engine field to google_dataproc_cluster resource (#11978)
• gkehub: added ignored_clusters_selector field to google_gke_hub_rollout_sequence resource (#11963)
• iambeta: added trust_default_shared_ca field to google_iam_workload_identity_pool resource (#11989)
• netapp: added kms_config, encryption_state and backups_crypto_key_version fields to google_netapp_backup_vault resource (#11968)
• resourcemanager: add resource-identity support to google_service_account resource (#11967)
• sql: added entraid_config field to google_sql_database_instance resource (#11958)
• vectorsearch: added encryption_spec field to google_vector_search_collection resource (#11987)

BUG FIXES:

• apigee: fixed ignoring is_enabled = false on create and update in google_apigee_target_server resource (#11938)
• bigquery: fixed inability to set default_collation to empty string in google_bigquery_dataset (#11962)
• ces: fixed a diff on logging_settings when unspecified in google_ces_app. Removing the value from config will now preserve the existing settings instead of removing them. (#11952)
• compute: fixed a permadiff on iap.oauth2_client_id in google_compute_backend_service and google_compute_region_backend_service when the API returns a single space (#11990)
• container: fixed a bug in google_container_cluster where setting multiple fields in dns_endpoint_config failed to apply all changes (#11983)
• workstations: fixed a permadiff on persistent_directories.gce_pd.reclaim_policy in google_workstations_workstation_config resource (#11986)

7.28.0 (Apr 14, 2026)

NOTES:

• compute: migrated data_source_google_compute_instance_template datasource to use direct HTTP rather then a client library (#11901)
• compute: migrated google_compute_instance_guest_attributes datasource to use direct HTTP rather then a client library (#11897)
• provider: added provider-wide Identity() schema support, allowing imports with MMv1 resources to occur using the identity block instead of id field (#11874)

FEATURES:

• New Data Source: google_vertex_ai_reasoning_engine_query (#11878)
• New Resource: google_apigee_space (#11922)
• New Resource: google_iap_agent_registry_iam_binding (#11905)
• New Resource: google_iap_agent_registry_iam_member (#11905)
• New Resource: google_iap_agent_registry_iam_policy (#11905)
• New Resource: google_iap_location_web_iam_binding (#11905)
• New Resource: google_iap_location_web_iam_member (#11905)

... (truncated)

Commits

• 08badc6 Add changelog for 7.30.0 (beta) (#12081)
• 53b11fe Migrated Compute instance network interface to use transport_tpg.SendRequest ...
• 5d2320d Converted handwritten-only products to be "generated" (#17291) (#12073)
• 8df11ea Add DocumentAI Schema resource (#17293) (#12072)
• 1f95092 Increase timeouts for GKE resources (#17295) (#12071)
• 7865d16 Fix PRs reverted in the GitHub incident (#17290) (#12070)
• 13b862b Fixed docstring for registry.GetProduct (#17277) (#12069)
• 25a3fa4 Feature: Create datalineage config provider (#17073) (#12068)
• e1da148 Refactor TestAccAccessApprovalSettings loop to use a slice. (#17287) (#12067)
• 0980433 fix: (storage) TestAccStorageObjectAcl_noOwner test case fix (#17284) (#12066)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[coreone]

atlantis unlock

[atlantis-for-broad-bits]

All Atlantis locks for this PR have been unlocked and plans discarded

[atlantis-for-broad-bits]

Ran Plan for project: production dir: prod workspace: default

No changes. Your infrastructure matches the configuration.

Terraform has compared your real infrastructure against your configuration
and found no differences, so no changes are needed.

• ▶️ To apply this plan, comment:

  atlantis apply -p production

• 🚮 To delete this plan and lock, click here
• 🔁 To plan this project again, comment:

  atlantis plan -p production

---

• ⏩ To apply all unapplied plans from this Pull Request, comment:

  atlantis apply

• 🚮 To delete all plans and locks from this Pull Request, comment:

  atlantis unlock

[coreone]

atlantis apply -p production

[atlantis-for-broad-bits]

Ran Apply for project: production dir: prod workspace: default

Apply complete! Resources: 0 added, 0 changed, 0 destroyed.

[atlantis-for-broad-bits]

Automatically merging because all plans have been successfully applied.

[atlantis-for-broad-bits]

Automerging failed:

merging pull request: PUT https://api.github.com/repos/broadinstitute/terraform-broad-redirect/pulls/70/merge: 502 Server Error []

[coreone]

@dependabot rebase

[dependabot]

Looks like this PR has been edited by someone other than Dependabot. That means Dependabot can't rebase it - sorry!

If you're happy for Dependabot to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

[dependabot]

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

[atlantis-for-broad-bits]

Locks and plans deleted for the projects and workspaces modified in this pull request:

• dir: prod workspace: default