Bump hashicorp/google from 8.4.0 to 8.5.0 in /examples/nat-gateway

[dependabot]

Bumps hashicorp/google from 8.4.0 to 8.5.0.

Release notes

Sourced from hashicorp/google's releases.

v8.5.0

NOTES:

• compute: migrated the VPN tunnel lookup in google_compute_router_interface to use direct HTTP rather than a client library (#29442)

DEPRECATIONS:

• firebaseailogic: deprecated generative_language_config and generative_language_config.api_key in google_firebase_ai_logic_config resource (#29656)
• networkservices: egress_network_config.dns_peering_config.domain field in google_network_services_agent_connectivity_template is deprecated. Use egress_network_config.dns_peering_config.domains (#29651)

FEATURES:

• New Data Source: google_network_services_gateway (#29634)
• New List Resource: google_project_iam_binding (#29631)
• New List Resource: google_secret_manager_secret_version (#29654)
• New Resource: google_resource_manager_capability_config (#29438)
• New Resource: google_vertex_ai_semantic_governance_policy (#29649)

IMPROVEMENTS:

• agenticapplications: added math_rendering_mode and web_search_config fields to google_agentic_applications_analyst_agent_persona resource (#29622)
• bigqueryconnection: added password_wo write-only field and password_wo_version field in google_bigquery_connection resource (#29643)
• ces: added proactive_execution_enabled field to callbacks in google_ces_agent resource (#29657)
• ces: added proactive_execution_enabled output fields to snapshot.agents callbacks in google_ces_app_version resource (#29657)
• ces: added remote_a2a_agent field to google_ces_agent resource (#29440)
• chronicle: added parallel_instance field to google_chronicle_environment resource (#29444)
• cloudrunv2: added ssh_enabled field to google_cloud_run_v2_service resource (#29645)
• cloudrunv2: promoted template.scaling.cpu_utilization and template.scaling.concurrency_utilization to GA in google_cloud_run_v2_service resource (#29630)
• compute: added rsa_encryption_wo and raw_key_wo fields to google_compute_disk resource (#29621)
• compute: added rsa_encryption_wo and raw_key_wo fields to google_compute_region_disk resource (#29621)
• compute: added nat_ips_per_endpoint field to google_compute_service_attachment resource (#29648)
• dlp: added inspect_config subfields (custom_info_types, min_likelihood_per_info_type.info_type.sensitivity_score, and rule_set.rules.adjustment_rule) to google_data_loss_prevention_content_policy resource (#29633)
• networkservices: added domains field to egress_network_config.dns_peering_config in google_network_services_agent_connectivity_template resource (#29651)
• networkservices: added tls_config field to google_network_services_agent_connectivity_template resource (#29652)
• parametermanager: added data_crc32c field to google_parameter_manager_parameter_version and google_parameter_manager_regional_parameter_version resources (#29658)
• secretmanager: added secret_data_wo and secret_data_wo_version write-only fields to google_secret_manager_regional_secret_version resource (#29653)
• sql: google_sql_database_instance now performs an in-place storage shrink when disk_size is reduced with disk_autoresize disabled, instead of forcing instance recreation (#29635)
• sql: added encryption_confidential_mode to google_sql_database_instance resource (#29623)
• storage: added updated field to bucket_objects in google_storage_bucket_objects data source (#29641)
• storageftp: added service_agent, external_config.ip_address, internal_config.service_attachment, and state to google_storage_ftp_server resource (#29644)
• storageftp: added state and username fields and increased user_credentials max items from 1 to 10 in google_storage_ftp_user resource (#29644)

Changelog

Sourced from hashicorp/google's changelog.

8.5.0 (September 29, 2026)

NOTES:

• compute: migrated the VPN tunnel lookup in google_compute_router_interface to use direct HTTP rather than a client library (#29442)

DEPRECATIONS:

• firebaseailogic: deprecated generative_language_config and generative_language_config.api_key in google_firebase_ai_logic_config resource (#29656)
• networkservices: egress_network_config.dns_peering_config.domain field in google_network_services_agent_connectivity_template is deprecated. Use egress_network_config.dns_peering_config.domains (#29651)

FEATURES:

• New Data Source: google_network_services_gateway (#29634)
• New List Resource: google_project_iam_binding (#29631)
• New List Resource: google_secret_manager_secret_version (#29654)
• New Resource: google_resource_manager_capability_config (#29438)
• New Resource: google_vertex_ai_semantic_governance_policy (#29649)

IMPROVEMENTS:

• agenticapplications: added math_rendering_mode and web_search_config fields to google_agentic_applications_analyst_agent_persona resource (#29622)
• bigqueryconnection: added password_wo write-only field and password_wo_version field in google_bigquery_connection resource (#29643)
• ces: added proactive_execution_enabled field to callbacks in google_ces_agent resource (#29657)
• ces: added proactive_execution_enabled output fields to snapshot.agents callbacks in google_ces_app_version resource (#29657)
• ces: added remote_a2a_agent field to google_ces_agent resource (#29440)
• chronicle: added parallel_instance field to google_chronicle_environment resource (#29444)
• cloudrunv2: added ssh_enabled field to google_cloud_run_v2_service resource (#29645)
• cloudrunv2: promoted template.scaling.cpu_utilization and template.scaling.concurrency_utilization to GA in google_cloud_run_v2_service resource (#29630)
• compute: added rsa_encryption_wo and raw_key_wo fields to google_compute_disk resource (#29621)
• compute: added rsa_encryption_wo and raw_key_wo fields to google_compute_region_disk resource (#29621)
• compute: added nat_ips_per_endpoint field to google_compute_service_attachment resource (#29648)
• dlp: added inspect_config subfields (custom_info_types, min_likelihood_per_info_type.info_type.sensitivity_score, and rule_set.rules.adjustment_rule) to google_data_loss_prevention_content_policy resource (#29633)
• networkservices: added domains field to egress_network_config.dns_peering_config in google_network_services_agent_connectivity_template resource (#29651)
• networkservices: added tls_config field to google_network_services_agent_connectivity_template resource (#29652)
• parametermanager: added data_crc32c field to google_parameter_manager_parameter_version and google_parameter_manager_regional_parameter_version resources (#29658)
• secretmanager: added secret_data_wo and secret_data_wo_version write-only fields to google_secret_manager_regional_secret_version resource (#29653)
• sql: google_sql_database_instance now performs an in-place storage shrink when disk_size is reduced with disk_autoresize disabled, instead of forcing instance recreation (#29635)
• sql: added encryption_confidential_mode to google_sql_database_instance resource (#29623)
• storage: added updated field to bucket_objects in google_storage_bucket_objects data source (#29641)
• storageftp: added service_agent, external_config.ip_address, internal_config.service_attachment, and state to google_storage_ftp_server resource (#29644)
• storageftp: added state and username fields and increased user_credentials max items from 1 to 10 in google_storage_ftp_user resource (#29644)

Commits

• 70539b4 changelog 8.5.0 (#29671)
• 7a2398d parametermanager: add data_crc32c to google_parameter_manager_parameter_versi...
• 3741aca ces: add proactive_execution_enabled to agent callbacks (#18897) (#29657)
• 914f108 firebaseailogic: deprecate generative_language_config in google_firebase_ai_l...
• 2f36b8d Made it so the test reader can tell the difference between serial tests and t...
• 9ca7dd0 secretmanager: add list resource for google_secret_manager_secret_version (#1...
• 525da56 secretmanagerregional: add write-only secret_data_wo to `google_secret_mana...
• a600791 feat(networkservices): add tlsConfig field to AgentConnectivityTemplate (#190...
• 77de717 networkservices: add repeated domains to AgentConnectivityTemplate DN… (#1913...
• 3c7be53 Added SemanticGovernancePolicy resource (#19106) (#29649)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #44.