chore(deps): update hashicorp/google-beta requirement from ~> 6.0 to ~> 7.31 in /infra

[dependabot]

Updates the requirements on hashicorp/google-beta to permit the latest version.

Release notes

Sourced from hashicorp/google-beta's releases.

v7.31.0

NOTES:

• compute: migrated google_compute_instance.network_interface field to use direct HTTP rather than a client library (#12074)
• compute: migrated google_compute_image datasource to use direct HTTP rather then a client library (#12103)
• compute: migrated partner_metadata field on google_compute_instance, google_compute_instance_template, and google_compute_region_instance_template to use direct HTTP rather than a client library (#12090)
• compute: migrated google_compute_node_types data source to use direct HTTP rather than a client library (#12108)
• compute: migrated google_compute_region_instance_group data source to use direct HTTP rather than a client library (#12102)
• compute: migrated google_compute_subnetwork data source to use direct HTTP rather than a client library (#12095)
• compute: migrated google_compute_vpn_gateway data source to use direct HTTP rather than a client library (#12096)

FEATURES:

• New Data Source: google_artifact_registry_file (#12107)
• New Resource: google_ces_app_root_agent_association (#12083)
• New Resource: google_ces_evaluation (#12114)
• New Resource: google_contact_center_insights_qa_question (#12097)
• New Resource: google_contact_center_insights_qa_scorecard_revision (#12097)
• New Resource: google_contact_center_insights_qa_scorecard (#12097)
• New Resource: google_firebase_app_check_resource_policy (#12109)
• New Resource: google_network_security_ull_mirroring_collector_rule (#12075)

IMPROVEMENTS:

• ces: switched to the v1beta API for Customer Engagement Suite resources (#12114)
• clouddeploy: added default_pool and private_pool fields to google_clouddeploy_target resource (#12110)
• clouddeploy: added tasks and analysis fields to google_clouddeploy_delivery_pipeline resource (#12110)
• compute: added params.resource_manager_tags field to google_compute_image (#12076)
• compute: added params.resource_manager_tags field to google_compute_region_commitment resource (#12105)
• compute: added resource_policies.workload_policy to google_compute_region_instance_group_manager resource (#12098)
• compute: marked csek disk encryption key fields as sensitive in compute resources (#12115)
• databasemigrationservice: added objects_config field to google_database_migration_service_migration_job resource (#12104)
• dataplex: added attributes, template_reference, enable_catalog_basedRules, and filter fields to google_dataplex_datascan resource (#12089)
• firestore: added search_config field to google_firestore_index resource (#12077)
• oracle_database: added pluggable_database_id, pluggable_database_name fields to google_oracle_database_db_system resource (#12087)

BUG FIXES:

• provider: fixed a bad timeouts diff across a number of resources that had resource identity support added in 7.29.0 (#12112)
• bigquery: fixed ignore_auto_generated_schema evaluation for google_bigquery_table external tables which caused spurious replacement (#12111)
• cloudscheduler: fixed perpetual diff on google_cloud_scheduler_job.http_target.headers when oidc_token or oauth_token is set (#12101)
• servicenetworking: fixed a permadiff issue of reserved_peering_ranges in google_service_networking_connection (#12091)
• storage: fix inconsistent plan issue for google_storage_notification.custom_attributes field (#12088)

Changelog

Sourced from hashicorp/google-beta's changelog.

7.31.0 (May 5, 2026)

NOTES:

• compute: migrated google_compute_instance.network_interface field to use direct HTTP rather than a client library (#12074)
• compute: migrated google_compute_image datasource to use direct HTTP rather then a client library (#12103)
• compute: migrated partner_metadata field on google_compute_instance, google_compute_instance_template, and google_compute_region_instance_template to use direct HTTP rather than a client library (#12090)
• compute: migrated google_compute_node_types data source to use direct HTTP rather than a client library (#12108)
• compute: migrated google_compute_region_instance_group data source to use direct HTTP rather than a client library (#12102)
• compute: migrated google_compute_subnetwork data source to use direct HTTP rather than a client library (#12095)
• compute: migrated google_compute_vpn_gateway data source to use direct HTTP rather than a client library (#12096)

FEATURES:

• New Data Source: google_artifact_registry_file (#12107)
• New Resource: google_ces_app_root_agent_association (#12083)
• New Resource: google_ces_evaluation (#12114)
• New Resource: google_contact_center_insights_qa_question (#12097)
• New Resource: google_contact_center_insights_qa_scorecard_revision (#12097)
• New Resource: google_contact_center_insights_qa_scorecard (#12097)
• New Resource: google_firebase_app_check_resource_policy (#12109)
• New Resource: google_network_security_ull_mirroring_collector_rule (#12075)

IMPROVEMENTS:

• ces: switched to the v1beta API for Customer Engagement Suite resources (#12114)
• clouddeploy: added default_pool and private_pool fields to google_clouddeploy_target resource (#12110)
• clouddeploy: added tasks and analysis fields to google_clouddeploy_delivery_pipeline resource (#12110)
• compute: added params.resource_manager_tags field to google_compute_image (#12076)
• compute: added params.resource_manager_tags field to google_compute_region_commitment resource (#12105)
• compute: added resource_policies.workload_policy to google_compute_region_instance_group_manager resource (#12098)
• compute: marked csek disk encryption key fields as sensitive in compute resources (#12115)
• databasemigrationservice: added objects_config field to google_database_migration_service_migration_job resource (#12104)
• dataplex: added attributes, template_reference, enable_catalog_basedRules, and filter fields to google_dataplex_datascan resource (#12089)
• firestore: added search_config field to google_firestore_index resource (#12077)
• oracle_database: added pluggable_database_id, pluggable_database_name fields to google_oracle_database_db_system resource (#12087)

BUG FIXES:

• provider: fixed a bad timeouts diff across a number of resources that had resource identity support added in 7.29.0 (#12112)
• bigquery: fixed ignore_auto_generated_schema evaluation for google_bigquery_table external tables which caused spurious replacement (#12111)
• cloudscheduler: fixed perpetual diff on google_cloud_scheduler_job.http_target.headers when oidc_token or oauth_token is set (#12101)
• servicenetworking: fixed a permadiff issue of reserved_peering_ranges in google_service_networking_connection (#12091)
• storage: fix inconsistent plan issue for google_storage_notification.custom_attributes field (#12088)

7.30.0 (Apr 28, 2026)

BREAKING CHANGES:

• apigee: fixed google_apigee_env_keystore to require the name field which is mandatory in the Apigee API (#12006)

FEATURES:

• New Data Source: google_data_lineage_config (#12068)
• New Resource: google_artifact_registry_rule (#12031)
• New Resource: google_data_lineage_config (#12068)
• New Resource: google_document_ai_schema (#12072)

... (truncated)

Commits

• c48febd Update CHANGELOG for version 7.31.0 (#12120)
• 2e74905 Fix project sweeper (#17340) (#12116)
• 757dc84 mark disk encryption key fields as sensitive in compute resources (#17366) (#...
• 53d8cca Ces evaluation resource (#17289) (#12114)
• a5bb593 bump SDK/v2 -> v2.40.1 (#17337) (#12112)
• 09d890c Fix ignore_auto_generated_schema transition for external tables (#17359) (#12...
• 0342030 Add analysis and tasks in Cloud Deploy Target and DeliveryPipeline (#17327) (...
• fd1dc96 add google_firebase_app_check_resource_policy resource (#17334) (#12109)
• 6393f96 Migrated compute node types data source to use transport_tpg.SendRequest (#17...
• 03183a1 feat(artifactregistry): add google_artifact_registry_file data source (#17101...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Labels

The following labels could not be found: dependencies, infra. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[gracefullight]

Plan job is failing because Dependabot does not have access to repository secrets (WORKLOAD_IDENTITY_PROVIDER, SERVICE_ACCOUNT) by default. This is not a code issue. To unblock: configure these as Dependabot secrets at Settings → Secrets and variables → Dependabot. Holding this PR until that is done.