Update CHANGELOG.md

Author: rileykarson

CHANGELOG.md

@@ -31,6 +31,7 @@ BACKWARDS INCOMPATIBILITIES:
 * resourcemanager: `google_project.app_engine` has been removed. Use the `google_app_engine_application` resource instead. [GH-2386]
 * resourcemanager: `google_organization_custom_role.deleted` is now an output-only attribute. Use `terraform destroy`, or remove the resource from your config instead. [GH-2596]
 * resourcemanager: `google_project_custom_role.deleted` is now an output-only attribute. Use `terraform destroy`, or remove the resource from your config instead. [GH-2619]
+* serviceusage: `google_project_service` will now error instead of silently disabling dependent services if `disable_dependent_services` is unset. [GH-2938]
 * storage: `google_storage_object_acl.role_entity` is now authoritative and will remove values not explicitly set in config. Use `google_storage_object_access_control` for fine-grained management. [GH-2316]
 * storage: `google_storage_default_object_acl.role_entity` is now authoritative and will remove values not explicitly set in config. [GH-2345]
 * iam: `google_*_iam_binding` Change all IAM bindings to be authoritative [GH-2764]
@@ -63,6 +64,7 @@ ENHANCEMENTS:
 * project: The google_iam_policy data source now supports Audit Configs [GH-2687]
 * kms: Add support for `protection_level` to `google_kms_crypto_key` [GH-2751]
 * resourcemanager: add `inherit_from_parent` to all org policy resources [GH-2653]
+* serviceusage: `google_project_service` now supports `disable_dependent_services` to control whether services can disable services that depend on them at disable-time. [GH-2938]
 * sourcerepo: `google_sourcerepo_repository` is now autogenerated, adding configurable timeouts. [GH-2797]
 * storage: `google_storage_object_acl` can more easily swap between `role_entity` and `predefined_acl` ACL definitions. [GH-2316]
 * storage: `google_storage_bucket` has support for `requester_pays` [GH-2580]