chore(deps): update hashicorp/google requirement from ~> 5.0 to ~> 7.28 in /infra/cloudrun

[dependabot]

Updates the requirements on hashicorp/google to permit the latest version.

Release notes

Sourced from hashicorp/google's releases.

v7.28.0

NOTES:

• compute: migrated data_source_google_compute_instance_template datasource to use direct HTTP rather then a client library (#26831)
• compute: migrated google_compute_instance_guest_attributes datasource to use direct HTTP rather then a client library (#26826)
• provider: added provider-wide Identity() schema support, allowing imports with MMv1 resources to occur using the identity block instead of id field (#26783)

FEATURES:

• New Data Source: google_vertex_ai_reasoning_engine_query (#26787)
• New Resource: google_apigee_space (#26857)
• New Resource: google_chronicle_feed (#26742)
• New Resource: google_vertex_ai_reasoning_engine_iam_binding (#26785)
• New Resource: google_vertex_ai_reasoning_engine_iam_member (#26785)
• New Resource: google_vertex_ai_reasoning_engine_iam_policy (#26785)
• New Resource: google_workload_identity_service_agent (#26780)

IMPROVEMENTS:

• bigqueryanalyticshub: added replica_locations and effective_replicas fields to google_bigquery_analytics_hub_listing resource (#26843)
• bigqueryanalyticshub: added replica_locations field to google_bigquery_analytics_hub_listing_subscription resource (#26843)
• composer: increased google_composer_environment default delete timeout to 120m from 30m (#26851)
• compute: added target_size_policy field to google_compute_instance_group_manager and google_compute_region_instance_group_manager resources (#26849)
• compute: increased google_compute_security_policy default timeout to 60m from 30m (#26850)
• compute: supported simultaneous updates for Hyperdisk IOPS and throughput in google_compute_disk and google_compute_region_disk resources (#26815)
• container: added autopilot_cluster_policy_config field to google_container_cluster resource (#26822)
• container: added disable_multi_nic field to lustre_csi_driver_config in google_container_cluster resource (#26759)
• developerconnect: added custom_oauth_config, etag, and proxy_config fields to google_developer_connect_account_connector resource (#26751)
• netapp: added scale_type field to google_netapp_storage_pool resource (#26821)
• netapp: added mode field to google_netapp_storage_pool resource (#26778)
• networkservices: added all_ports field to google_network_services_gateway resource (#26808)
• sql: added SQLSERVER_2025 value to database_version field in database_instance resource (#26845)
• vertexai: add labels field to google_vertex_ai_reasoning_engine resource (#26825)
• vertexai: added spec.source_code_spec.image_spec field to google_vertex_ai_reasoning_engine resource (#26790)
• vertexai: added container_spec field to google_vertex_ai_reasoning_engine resource (#26813)
• vertexai: added spec.identity_type and spec.effective_identity fields to google_vertex_ai_reasoning_engine resource (#26788)

BUG FIXES:

• apigee: fixed a crash in google_apigee_environment_addons_config resource when analytics are not configured (#26810)
• apigee: fixed overly restrictive validation of name field in google_apigee_api_product that rejected uppercase letters, aligning provider behavior with the Apigee API (#26756)
• bigquery: fixed crash when hive_partitioning_options is defined with all null values in google_bigquery_table resource (#26846)
• firebaseailogic: fixed permadiff on traffic_filter field in google_firebase_ai_logic_config resource (#26749)
• networksecurity: fixed permadiff on policy_profile field in google_network_security_authz_policy resource (#26865)
• vertexai: added 10-second wait before reading the updated resource in google_vertex_ai_reasoning_engine, preventing stale values getting written to state (#26852)

Changelog

Sourced from hashicorp/google's changelog.

7.28.0 (Apr 14, 2026)

NOTES:

• compute: migrated data_source_google_compute_instance_template datasource to use direct HTTP rather then a client library (#26831)
• compute: migrated google_compute_instance_guest_attributes datasource to use direct HTTP rather then a client library (#26826)
• provider: added provider-wide Identity() schema support, allowing imports with MMv1 resources to occur using the identity block instead of id field (#26783)

FEATURES:

• New Data Source: google_vertex_ai_reasoning_engine_query (#26787)
• New Resource: google_apigee_space (#26857)
• New Resource: google_chronicle_feed (#26742)
• New Resource: google_vertex_ai_reasoning_engine_iam_binding (#26785)
• New Resource: google_vertex_ai_reasoning_engine_iam_member (#26785)
• New Resource: google_vertex_ai_reasoning_engine_iam_policy (#26785)
• New Resource: google_workload_identity_service_agent (#26780)

IMPROVEMENTS:

• bigqueryanalyticshub: added replica_locations and effective_replicas fields to google_bigquery_analytics_hub_listing resource (#26843)
• bigqueryanalyticshub: added replica_locations field to google_bigquery_analytics_hub_listing_subscription resource (#26843)
• composer: increased google_composer_environment default delete timeout to 120m from 30m (#26851)
• compute: added target_size_policy field to google_compute_instance_group_manager and google_compute_region_instance_group_manager resources (#26849)
• compute: increased google_compute_security_policy default timeout to 60m from 30m (#26850)
• compute: supported simultaneous updates for Hyperdisk IOPS and throughput in google_compute_disk and google_compute_region_disk resources (#26815)
• container: added autopilot_cluster_policy_config field to google_container_cluster resource (#26822)
• container: added disable_multi_nic field to lustre_csi_driver_config in google_container_cluster resource (#26759)
• developerconnect: added custom_oauth_config, etag, and proxy_config fields to google_developer_connect_account_connector resource (#26751)
• netapp: added scale_type field to google_netapp_storage_pool resource (#26821)
• netapp: added mode field to google_netapp_storage_pool resource (#26778)
• networkservices: added all_ports field to google_network_services_gateway resource (#26808)
• sql: added SQLSERVER_2025 value to database_version field in database_instance resource (#26845)
• vertexai: add labels field to google_vertex_ai_reasoning_engine resource (#26825)
• vertexai: added spec.source_code_spec.image_spec field to google_vertex_ai_reasoning_engine resource (#26790)
• vertexai: added container_spec field to google_vertex_ai_reasoning_engine resource (#26813)
• vertexai: added spec.identity_type and spec.effective_identity fields to google_vertex_ai_reasoning_engine resource (#26788)

BUG FIXES:

• apigee: fixed a crash in google_apigee_environment_addons_config resource when analytics are not configured (#26810)
• apigee: fixed overly restrictive validation of name field in google_apigee_api_product that rejected uppercase letters, aligning provider behavior with the Apigee API (#26756)
• bigquery: fixed crash when hive_partitioning_options is defined with all null values in google_bigquery_table resource (#26846)
• firebaseailogic: fixed permadiff on traffic_filter field in google_firebase_ai_logic_config resource (#26749)
• networksecurity: fixed permadiff on policy_profile field in google_network_security_authz_policy resource (#26865)
• vertexai: added 10-second wait before reading the updated resource in google_vertex_ai_reasoning_engine, preventing stale values getting written to state (#26852)

7.27.0 (Apr 07, 2026)

BREAKING CHANGES:

• lustre: marked maintenance_policy.weekly_maintenance_windows field required in google_lustre_instance resource. Configuring maintenance_policy without weekly_maintenance_windows will cause an API error. (#26741)

FEATURES:

• New Data Source: google_discovery_engine_data_store (#26651)

... (truncated)

Commits

• 54c21b6 Update 7.28.0 CHANGELOG.md (#26879)
• 814ea34 Revert "apigee: add static consumer_key/consumer_secret to google_api… (#1708...
• fe6519a tgc-revival: Tgc gateway mmv1 (#17061) (#26866)
• 7d6e9b5 Add default_from_api: true to policyProfile in AuthzPolicy (#17032) (#26865)
• 12b3dee resourceIdentity: move Identity.Setlogic prior to return Read in Create (...
• d118def Add support for GKE Managed ML Diagnostics for google_container_cluster. (#16...
• c71d782 Remove effective_labels count check across dataproc cluster tests (#17038) (#...
• d4a715c Update composer test to use supported image version 2.16.7 (#17062) (#26859)
• 0e3c460 Converted DCL resources to use registry (#17060) (#26858)
• 8b090d7 Adding apigee space (#16328) (#26857)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)