build(deps): bump hashicorp/google-beta from 7.44.0 to 7.45.0 in /terraform

[dependabot]

Bumps hashicorp/google-beta from 7.44.0 to 7.45.0.

Release notes

Sourced from hashicorp/google-beta's releases.

v7.45.0

FEATURES:

• New Data Source: google_iam_workload_identity_pool_openid_config (#12903)
• New Resource: google_agentic_applications_analyst_agent_persona (#12895)
• New Resource: google_firestore_change_stream (#12908)

IMPROVEMENTS:

• accesscontextmanager: added dry_run_access_levels and principal fields to google_access_context_manager_gcp_user_access_binding resource (#12885)
• accesscontextmanager: updated group_key to be optional and conflict with principal on google_access_context_manager_gcp_user_access_binding resource (#12885)
• bigqueryreservation: added labels field to google_bigquery_reservation resource (#12852)
• certificatemanager: enabled write-only support for pem_private_key on google_certificate_manager_certificate resource (#12905)
• ces: added snippets_config field to data_store_tool.modality_configs and service_directory_config field to python_function in google_ces_tool (#12878)
• chronicle: added schedule_customizations field to google_chronicle_rule_deployment resource (#12856)
• cloudrunv2: added templates.sandboxes field to google_cloud_run_v2_service resource (#12868)
• colab: added custom_environment_spec.shielded_instance_config and workbench_runtime.vm_image fields to google_colab_notebook_execution resource (#12892)
• securityscanner: added static_ip_scan field to google_security_scanner_scan_config resource (#12899)
• sql: added cpu_utilization_threshold_percent, memory_usage_threshold_percent, history_list_length_threshold_count, semaphore_wait_threshold_count, transaction_lock_wait_threshold_count, transaction_kill_threshold_seconds, transaction_kill_type, and transaction_kill_excluded_user_hosts fields to settings.performance_capture_config in google_sql_database_instance resource (#12910)
• vertexai: added spec.container_spec.port field to google_vertex_ai_reasoning_engine resource (#12881)
• workbench: added compute_instance_id field to google_workbench_instance resource (#12891)

BUG FIXES:

• alloydb: fixed an issue where updateMask URL parameter was dropped during cluster updates (e.g. database_version upgrade) due to variable shadowing (#12909)
• appengine: fixed permadiff in google_app_engine_standard_app_version (#12863)
• apphub: fixed panic in google_apphub_service and google_apphub_workload resources when parsing extended_metadata containing MCP server definitions (#12883)
• bigquery: fixed an issue where updating google_bigquery_dataset overwrote fine-grained IAM permissions (#12893)
• cloudsecuritycompliance: fixed state drift on supported_enforcement_modes in google_cloud_security_compliance_framework resource (#12851)
• colab: fixed drift detection on direct_notebook_source.content field in google_colab_notebook_execution resource (#12892)
• compute: fixed a panic in google_compute_shared_vpc_service_project during terraform plan/refresh when the shared VPC link had been removed outside of Terraform (#12869)
• compute: fixed permadiff on adaptive_protection_config.layer_7_ddos_defense_config.enable in google_compute_security_policy when field is not set in config (#12870)
• compute: fixed permadiffs for google_compute_disk on Fedora CoreOS images (#12853)
• networksecurity: fixed google_network_security_gateway_security_policy to force replacement when name or location is modified (#12894)
• networkservices: fixed google_network_services_gateway to force replacement when name or location is modified (#12902)

Changelog

Sourced from hashicorp/google-beta's changelog.

7.45.0 (August 18, 2026)

FEATURES:

• New Data Source: google_iam_workload_identity_pool_openid_config (#12903)
• New Resource: google_agentic_applications_analyst_agent_persona (#12895)
• New Resource: google_firestore_change_stream (#12908)

IMPROVEMENTS:

• accesscontextmanager: added dry_run_access_levels and principal fields to google_access_context_manager_gcp_user_access_binding resource (#12885)
• accesscontextmanager: updated group_key to be optional and conflict with principal on google_access_context_manager_gcp_user_access_binding resource (#12885)
• bigqueryreservation: added labels field to google_bigquery_reservation resource (#12852)
• certificatemanager: enabled write-only support for pem_private_key on google_certificate_manager_certificate resource (#12905)
• ces: added snippets_config field to data_store_tool.modality_configs and service_directory_config field to python_function in google_ces_tool (#12878)
• chronicle: added schedule_customizations field to google_chronicle_rule_deployment resource (#12856)
• cloudrunv2: added templates.sandboxes field to google_cloud_run_v2_service resource (#12868)
• colab: added custom_environment_spec.shielded_instance_config and workbench_runtime.vm_image fields to google_colab_notebook_execution resource (#12892)
• securityscanner: added static_ip_scan field to google_security_scanner_scan_config resource (#12899)
• sql: added cpu_utilization_threshold_percent, memory_usage_threshold_percent, history_list_length_threshold_count, semaphore_wait_threshold_count, transaction_lock_wait_threshold_count, transaction_kill_threshold_seconds, transaction_kill_type, and transaction_kill_excluded_user_hosts fields to settings.performance_capture_config in google_sql_database_instance resource (#12910)
• vertexai: added spec.container_spec.port field to google_vertex_ai_reasoning_engine resource (#12881)
• workbench: added compute_instance_id field to google_workbench_instance resource (#12891)

BUG FIXES:

• alloydb: fixed an issue where updateMask URL parameter was dropped during cluster updates (e.g. database_version upgrade) due to variable shadowing (#12909)
• appengine: fixed permadiff in google_app_engine_standard_app_version (#12863)
• apphub: fixed panic in google_apphub_service and google_apphub_workload resources when parsing extended_metadata containing MCP server definitions (#12883)
• bigquery: fixed an issue where updating google_bigquery_dataset overwrote fine-grained IAM permissions (#12893)
• cloudsecuritycompliance: fixed state drift on supported_enforcement_modes in google_cloud_security_compliance_framework resource (#12851)
• colab: fixed drift detection on direct_notebook_source.content field in google_colab_notebook_execution resource (#12892)
• compute: fixed a panic in google_compute_shared_vpc_service_project during terraform plan/refresh when the shared VPC link had been removed outside of Terraform (#12869)
• compute: fixed permadiff on adaptive_protection_config.layer_7_ddos_defense_config.enable in google_compute_security_policy when field is not set in config (#12870)
• compute: fixed permadiffs for google_compute_disk on Fedora CoreOS images (#12853)
• networksecurity: fixed google_network_security_gateway_security_policy to force replacement when name or location is modified (#12894)
• networkservices: fixed google_network_services_gateway to force replacement when name or location is modified (#12902)

Commits

• 3dc173a Release Notes for version 7.45.0 (beta) (#12912)
• ecea597 sql: add performance_capture_config threshold and transaction-kill fields (#1...
• e2003e3 fix url variable shadowing in upgrade and promote blocks (#18654) (#12909)
• ab7729b Add support for the Google Firestore Change Stream resource (#18542) (#12908)
• 219ef7e oracledatabase: randomize CIDR range in OdbSubnet acceptance test (#18556) (#...
• 59f3945 docs: clarify IAM binding authoritative scope is role + condition (#18640) (#...
• e512ccc Enable write-only support for pem_private_key from google_certificate_manager...
• ec97c69 Revert "Migrate data_source_google_compute_images.go data source to use dir...
• 84e14b9 Add data source for google_iam_workload_identity_pool_openid_config (#18494) ...
• c22a180 Add immutable property to Gateway resource fields (#18625) (#12902)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #129.