Update dependency @pulumi/gcp to v9 (#3840)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [@pulumi/gcp](https://pulumi.io)
([source](https://redirect.github.com/pulumi/pulumi-gcp)) | dependencies
| major | [`8.41.1` ->
`9.3.0`](https://renovatebot.com/diffs/npm/@pulumi%2fgcp/8.41.1/9.3.0) |

---

### Release Notes

<details>
<summary>pulumi/pulumi-gcp (@&#8203;pulumi/gcp)</summary>

###
[`v9.3.0`](https://redirect.github.com/pulumi/pulumi-gcp/releases/tag/v9.3.0)

[Compare
Source](https://redirect.github.com/pulumi/pulumi-gcp/compare/v9.2.0...v9.3.0)

##### Does the PR have any schema changes?

Found 9 breaking changes:

##### Resources

- `🟢` "gcp:compute/vPNTunnel:VPNTunnel": required: "sharedSecret"
property is no longer Required
- `🟢`
"gcp:networksecurity/mirroringEndpointGroup:MirroringEndpointGroup":
required: "mirroringDeploymentGroup" property is no longer Required

##### Types

-
"gcp:cloudrunv2/getWorkerPoolTemplateContainer:getWorkerPoolTemplateContainer":
required:
    -   `🟢` "livenessProbes" property has changed to Required
    -   `🟢` "startupProbes" property has changed to Required
- `🟢` "gcp:compute/WireGroupWireProperties:WireGroupWireProperties":
required: "bandwidthAllocation" property has changed to Required
- `🟡`
"gcp:netapp/VolumeHybridReplicationParameters:VolumeHybridReplicationParameters":
properties: "peerIpAddresses" type changed from "string" to "array":
- `🟡` items had no type but now has &{Type:string Ref:
AdditionalProperties:<nil> Items:<nil> OneOf:\[] Discriminator:<nil>
Plain:false}
- `🟢`
"gcp:privilegedaccessmanager/getEntitlementApprovalWorkflowManualApprovalStep:getEntitlementApprovalWorkflowManualApprovalStep":
required: "id" property has changed to Required
- `🟢`
"gcp:sql/getDatabaseInstancesInstance:getDatabaseInstancesInstance":
required: "pointInTimeRestoreContexts" property has changed to Required

##### New resources:

-   `apigee/apiDeployment.ApiDeployment`
-   `discoveryengine/dataConnector.DataConnector`
-   `kms/organizationKajPolicyConfig.OrganizationKajPolicyConfig`
-   `saasruntime/rolloutKind.RolloutKind`

##### New functions:

-   `artifactregistry/getMavenArtifacts.getMavenArtifacts`
-   `artifactregistry/getNpmPackages.getNpmPackages`

#### What's Changed

- Update GitHub Actions workflows. by
[@&#8203;pulumi-bot](https://redirect.github.com/pulumi-bot) in
[https://github.com/pulumi/pulumi-gcp/pull/3404](https://redirect.github.com/pulumi/pulumi-gcp/pull/3404)
- Update GitHub Actions workflows. by
[@&#8203;pulumi-bot](https://redirect.github.com/pulumi-bot) in
[https://github.com/pulumi/pulumi-gcp/pull/3409](https://redirect.github.com/pulumi/pulumi-gcp/pull/3409)
- Update GitHub Actions workflows. by
[@&#8203;pulumi-bot](https://redirect.github.com/pulumi-bot) in
[https://github.com/pulumi/pulumi-gcp/pull/3412](https://redirect.github.com/pulumi/pulumi-gcp/pull/3412)
- Upgrade terraform-provider-google-beta to v7.5.0 by
[@&#8203;pulumi-bot](https://redirect.github.com/pulumi-bot) in
[https://github.com/pulumi/pulumi-gcp/pull/3413](https://redirect.github.com/pulumi/pulumi-gcp/pull/3413)

**Full Changelog**:
pulumi/pulumi-gcp@v9.2.0...v9.3.0

###
[`v9.2.0`](https://redirect.github.com/pulumi/pulumi-gcp/releases/tag/v9.2.0)

[Compare
Source](https://redirect.github.com/pulumi/pulumi-gcp/compare/v9.1.0...v9.2.0)

##### Does the PR have any schema changes?

Looking good! No breaking changes found.
No new resources/functions.

#### What's Changed

- Update GitHub Actions workflows. by
[@&#8203;pulumi-bot](https://redirect.github.com/pulumi-bot) in
[https://github.com/pulumi/pulumi-gcp/pull/3402](https://redirect.github.com/pulumi/pulumi-gcp/pull/3402)

**Full Changelog**:
pulumi/pulumi-gcp@v9.1.0...v9.2.0

###
[`v9.1.0`](https://redirect.github.com/pulumi/pulumi-gcp/releases/tag/v9.1.0)

[Compare
Source](https://redirect.github.com/pulumi/pulumi-gcp/compare/v9.0.0...v9.1.0)

#### What's Changed

- Update GitHub Actions workflows. by
[@&#8203;pulumi-bot](https://redirect.github.com/pulumi-bot) in
[https://github.com/pulumi/pulumi-gcp/pull/3393](https://redirect.github.com/pulumi/pulumi-gcp/pull/3393)
- Update GitHub Actions workflows. by
[@&#8203;pulumi-bot](https://redirect.github.com/pulumi-bot) in
[https://github.com/pulumi/pulumi-gcp/pull/3396](https://redirect.github.com/pulumi/pulumi-gcp/pull/3396)
- Upgrade terraform-provider-google-beta to v7.4.0 by
[@&#8203;pulumi-bot](https://redirect.github.com/pulumi-bot) in
[https://github.com/pulumi/pulumi-gcp/pull/3395](https://redirect.github.com/pulumi/pulumi-gcp/pull/3395)

**Full Changelog**:
pulumi/pulumi-gcp@v9.0.0...v9.1.0

###
[`v9.0.0`](https://redirect.github.com/pulumi/pulumi-gcp/releases/tag/v9.0.0)

[Compare
Source](https://redirect.github.com/pulumi/pulumi-gcp/compare/v8.41.1...v9.0.0)

##### Pulumi GCP Provider Version Upgrade Guide

Version 9.0.0 of the GCP provider for Pulumi is a major release and
includes changes that you need to consider when upgrading.
This guide will help with that process and focuses only on changes from
version 8.x to version 9.0.0.
See the [Version 8 Upgrade
Guide](https://www.pulumi.com/registry/packages/gcp/how-to-guides/8-0-migration)
for information on upgrading from 7.x to version 8.0.0.

##### Breaking changes

GCP provider v9.0 includes several breaking changes to a few resources
and invokes. Here are the details:

-   Resource `gcp.alloydb.Cluster`:
- The field `deletionProtection` has been added with a default value of
`true`. This field destroying or recreating the cluster during `pulumi
up`. In 9.0.0, existing clusters will have `deletionProtection` set to
true during the next refresh unless otherwise set in the program
configuration.

-   Resource `gcp.apigee.KeystoresAliasesKeyCertFile`:
- The field `certsInfo` is no longer an input and instead is only
available as an output property.

-   Resource `gcp.artifactregistry.Repository`:
- Default values have been removed, if you are relying on defaults, you
might need to explicitly set them in your program configuration.

-   Resource `gcp.beyondcorp.Application` removed:
- Associated resources `ApplicationIamBinding`, `ApplicationIamMember`,
and `ApplicationIamPolicy` have also been removed.
- Please use the new resource
`gcp.beyondcorp.SecurityGatewayApplication` instead.

-   Resource `gcp.bigquery.Table`:
- Field `view.useLegacySql` No longer has a default value of `true`. You
may need to explicitly set this field in your program configuration.

-   Resource `gcp.bigtable.TableIamBinding`:
    -   Field `instance` is now removed in favor of `instanceName`.

-   Resource `gcp.bigtable.TableIamMember`:
    -   Field `instance` is now removed in favor of `instanceName`.

-   Resource `gcp.bigtable.TableIamPolicy`:
    -   Field `instance` is now removed in favor of `instanceName`.

-   Resource `gcp.cloudfunctionsv2.Function`:
    -   Field `eventTrigger.eventType` is now a required field.

- Field `serviceConfig.service` is now only available as an output
property. Remove it from your program configuration when upgrading.

-   Resource `gcp.cloudrunv2.WorkerPool`:
    -   Field `template.containers.dependsOn` is removed.

-   Resource `gcp.colab.RuntimeTemplate`:
    -   Field `postStartupScriptConfig` is removed.

-   Resource `gcp.compute.InstanceTemplate`:
- Field `disks.diskType`, `disks.mode`, `disks.interface` no longer use
provider defaults and instead will be set by the API. See the [API
documentation](https://cloud.google.com/compute/docs/reference/rest/v1/instanceTemplates)
for more details.

-   Resource `gcp.compute.RegionInstanceTemplate`:
- Field `disks.diskType`, `disks.mode`, `disks.interface` no longer use
provider defaults and instead will be set by the API. See the [API
documentation](https://cloud.google.com/compute/docs/reference/rest/v1/instanceTemplates)
for more details.

-   Resource `gcp.compute.Subnetwork`:
    -   Field `enableFlowLogs` has been removed in favor of `logConfig`.

-   Resource `gcp.gkehub.Membership`:
    -   Field `description` has been removed.

-   Resource `gcp.gkehub.FeatureMembership`:
    -   Field `configmanagement.binauthz` has been removed.

-   Resource `gcp.memorystore.Instance`:
    -   Field `allowFewerZonesDeployment` has been removed.

-   Resource `gcp.networkservices.LbTrafficExtension`:
- Field `loadBalancingScheme` is now required. It was already needed for
this resource to function correctly so no changes should be necessary.

- Resource `gcp.notebooks.Location` is removed because it was not a
functional resource.

-   Resource `gcp.projects.Service`:
    -   Field `disableOnDestroy` no longer defaults to `true`.

-   Resource `gcp.redis.Cluster`:
    -   Field `allowFewerZonesDeployment` has been removed.

-   Resource `gcp.securesourcemanager.Instance`:
- Field `deletionPolicy` has had its default value changed to `PREVENT`.

-   Resource `gcp.storage.TransferJob`:

- Several `path` fields have improved validation and now are required to
not start with `/`.

-   Resource `gcp.storage.Bucket`:
    -   Field `retentionPeriod` has had its type changed to `string`.

-   Resource `gcp.storage.Notification`:
- Field `topic` now requires a new format and must be provided in the
format `projects/{{project}}/topics/{{topic}}`.

- Resource `gcp.tpu.Node` has been removed in favor of `gcp.tpu.V2Vm`.
For moving from TPU Node to TPU VM architecture, see
https://cloud.google.com/tpu/docs/system-architecture-tpu-vm#from-tpu-node-to-tpu-vm.

-   Resource `gcp.vertex.AiIndex`:
- Field `metadata` and `metadata.config` are now required. These fields
were already required for resource functionality, so no change is
necessary to existing configurations.

##### Bucket Label Import

In v9, we are removing a [patch that changed the Import behavior on
`gcp.storage.Bucket`.](https://redirect.github.com/pulumi/pulumi-gcp/issues/1961)
This patch allowed for a `pulumi import` to directly import cloud labels
to the Bucket's `labels` field.
Going forward, the Import behavior for labels will be on par with all
other resources: on a fresh import, the labels will be written to the
output-only `effectiveLabels` field in the Pulumi state, and not to the
bucket's `labels`.
The generated code will not include `labels`.
To bring Bucket labels under Pulumi management after an import, you now
need to explicitly set them on the Bucket's `labels` field.
You may discover any such potential labels from the Bucket's
`effectiveLabels` field.
[Read more about label handling
here.](https://www.pulumi.com/registry/packages/gcp/how-to-guides/7-0-migration/#labels-rework)
This change is a bug fix for
[https://github.com/pulumi/pulumi-gcp/issues/3337](https://redirect.github.com/pulumi/pulumi-gcp/issues/3337).

#### New Contributors

- [@&#8203;Zaid-Ajaj](https://redirect.github.com/Zaid-Ajaj) made their
first contribution in
[https://github.com/pulumi/pulumi-gcp/pull/3355](https://redirect.github.com/pulumi/pulumi-gcp/pull/3355)

**Full Changelog**:
pulumi/pulumi-gcp@v8.41.1...v9.0.0

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - Monday through Friday ( * * * * 1-5 ) (UTC).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yNjQuMCIsInVwZGF0ZWRJblZlciI6IjM5LjI2NC4wIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyIsImltcGFjdC9uby1jaGFuZ2Vsb2ctcmVxdWlyZWQiXX0=-->

Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>

Author: pulumi-renovate[bot]

tests/ci-cluster/package.json

@@ -4,7 +4,7 @@
         "@types/node": "latest"
     },
     "dependencies": {
-        "@pulumi/gcp": "8.41.1",
+        "@pulumi/gcp": "9.3.0",
         "@pulumi/kubernetes": "4.24.0",
         "@pulumi/pulumi": "3.204.0"
     }