chore(deps): update hashicorp/google requirement from ~> 5.0 to ~> 7.36 in /infra/cloudrun

[dependabot]

Updates the requirements on hashicorp/google to permit the latest version.

Release notes

Sourced from hashicorp/google's releases.

v7.36.0

FEATURES:

• New Data Source: google_apigee_instance (#27683)
• New Data Source: google_oracle_database_goldengate_deployment_types (#27634)
• New Resource: google_apigee_datastore (#27607)
• New Resource: google_discovery_engine_search_engine_iam_binding (#27703)
• New Resource: google_license_manager_configuration (#27707)
• New Resource: google_migration_center_import_job (#27599)
• New List Resource: google_compute_disk (#27608)
• New List Resource: google_compute_image (#27608)
• New List Resource: google_compute_snapshot (#27608)
• New List Resource: google_storage_hmac_key (#27637)

IMPROVEMENTS:

• accesscontextmanager: added in-place update for egress_from and egress_to fields in google_access_context_manager_service_perimeter_egress_policy resource (#27690)
• accesscontextmanager: added in-place update for egress_from and egress_to fields in google_access_context_manager_service_perimeter_ingress_policy resource (#27690)
• bigquery: added IAM support (google_bigquery_routine_iam_policy, google_bigquery_routine_iam_binding, google_bigquery_routine_iam_member) for google_bigquery_routine resource (#27704)
• bigtable: added automated_backup_policy.locations field in google_bigtable_table resource (#27646)
• ces: added agent_tool, file_search_tool, and widget_tool fields to the google_ces_tool resource (#27681)
• ces: added google_search_tool.prompt_config and data_store_tool.data_store_source fields to the google_ces_tool resource (#27681)
• ces: exposed remote_agent_tool, connector_tool, and mcp_tool as read-only (output-only) attributes in google_ces_tool (#27681)
• container: added node_creation_config field to google_container_cluster resource (#27702)
• container: added node_drain_config.pdb_timeout_duration and node_drain_config.grace_termination_duration fields to google_container_node_pool and google_container_cluster resources (#27694)
• data_catalog: added RICHTEXT to allowed values of primitive_type on google_data_catalog_tag_template fields. (#27672)
• dataplex: added IAM support for google_dataplex_data_product resource (iam_policy, iam_binding, iam_member) (#27652)
• dataplex: added access_approval_config field to google_dataplex_data_product resource (#27652)
• hypercomputecluster: marked network_resources field as required in google_hypercomputecluster_cluster resource to align with API validation (#27655)
• networksecurity: google_network_security_ull_mirroring_engine, google_network_security_ull_mirroring_collector, and google_network_security_ull_mirroring_collector_rule resources promoted to GA (#27710)
• securesourcemanager: added psc_allowed_projects field to google_secure_source_manager_instance resource (#27695)
• workbench: added NVIDIA_RTX6000 to the supported gce_setup.accelerator_configs.type values on google_workbench_instance resource(#27709)

BUG FIXES:

• apigee: send zero values for ip_header_index in google_apigee_environment resource (#27670)
• backupdr: fixed an issue where google_backup_dr_restore_workload did not use the correct API JSON names for networking/reservation fields (#27680)
• compute: fixed an issue where updating connection_limit in the consumer_accept_lists block of google_compute_service_attachment would not trigger a resource update. (#27688)
• compute: fixed regional backend reference in google_compute_regional_url_map resource (#27705)
• dlp: fixed error when reading google_data_loss_prevention_discovery_config caused by nested error details (#27669)
• sql: fixed permadiff on connection_pool_config when connection_pooling_enabled is set to false (#27711)
• tags: fixed google_tags_location_tag_binding failing with Operation location does not match service location 'global' during creation (#27668)
• vertexai: fixed terraform import of google_vertex_ai_index_endpoint_deployed_index failing with "Cannot determine region" when provider-level region/zone is unset (#27692)

Changelog

Sourced from hashicorp/google's changelog.

7.36.0 (Unreleased)

7.35.0 (June 2, 2026)

FEATURES:

• New Data Source: google_oracle_database_goldengate_connection_types (#27567)
• New Resource: google_chronicle_findings_refinement (#27591)
• New Resource: google_dataplex_data_product (#27588)
• New Resource: google_dataplex_data_product_data_asset (#27588)
• New Resource: google_migration_center_discovery_client (#27572)
• New Resource: google_migration_center_report (#27548)
• New Resource: google_oracle_database_goldengate_connection_assignment (#27566)
• New Resource: google_oracle_database_goldengate_connection (#27587)
• New Resource: google_oracle_database_goldengate_deployment (#27575)
• New List Resource: google_compute_firewall (#27549)
• New List Resource: google_compute_global_address (#27549)
• New List Resource: google_compute_subnetwork (#27549)
• New List Resource: google_sql_database (#27552)

IMPROVEMENTS:

• compute: added target_type and target_forwarding_rules fields to google_compute_network_firewall_policy_rule resource (#27538)
• container: added crash_loop_back_off.max_container_restart_period field to google_container_node_pool and google_container_cluster resources (#27574)
• container: added additional value KCP_VPA for logging_config.enable_components field to google_container_cluster resource (#27546)
• dataplex: added service_account support to google_dataplex_data_product access group principals (#27588)
• firestore: added ttl_config.expiration_offset field to google_firestore_field resource (#27589)
• netapp: added ontap_source field to google_netapp_backup resource (#27584)
• networkmanagement: added gke_pod and network_type fields to google_network_management_connectivity_test resource (#27585)

BUG FIXES:

• resourcemanager: fixed a bug where ephemeral google_service_account_key failed on deletion if the parent service account had already been deleted (#27541)
• storage: fixed missing identity error when updating values in google_storage_bucket (#27605)

7.34.0 (May 27, 2026)

NOTES:

• compute: migrated google_compute_region_instance_template to use direct HTTP rather than a client library (#27471)
• compute: migrated google_compute_instance_group_manager resource to use direct HTTP rather than a client library (#27441)

FEATURES:

• New Data Source: google_compute_service_attachment (#27526)
• New Data Source: google_oracle_database_goldengate_deployment_environments (#27499)
• New Resource: google_config_deployment (#27438)
• New Resource: google_dialogflow_sip_trunk (#27468)
• New Resource: google_migration_center_assets_export_job (#27466)
• New Resource: google_migration_center_report_config (#27395)
• New Resource: google_migration_center_settings (#27465)
• New Resource: google_migration_center_source (#27496)

IMPROVEMENTS:

• bigtable: added edition field to google_bigtable_instance resource (#27507)

... (truncated)

Commits

• 77de613 Update CHANGELOG.md (#27724)
• 41deccf fix(sql): resolve permadiff for connection_pool_config when pooling disabled ...
• b9d89b5 feat(networksecurity): promote UllMirroring resources to GA (#17773) (#27710)
• 5154ddf [Workbench Instance] Add NVIDIA_RTX6000 to google_workbench_instance accelera...
• b890697 MMv1: move identity value set before flattener in list-resources (#17826) (...
• 6b34459 Implementing License Manager TF resource - configuration (#17401) (#27707)
• a27318a Update privateca_certificate_authority_subordinate.tf.tmpl (#17839) (#27706)
• de5a612 Fix on Regional Url Backend referencing (#17767) (#27705)
• 7450cec feat: add Terraform IAM support for BigQuery Routines (#17754) (#27704)
• f6fb980 Adds IAM resource support to google_discovery_engine_search_engine (#17810)...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #37.