v2.3.4 is a patch release scoped to fixing issues reported by users of Crossplane v2.3 and fixing security related issues in Crossplane and its dependencies. 🎉 Highlights Fixed repeated owner updates for composed Usages (#7597, originally #7591): The Usage controller only checked the first ownerReference when deciding whether the spec.by resource already owned the Usage. A Usage created by a Compo…
v2.2.4 is a patch release scoped to fixing issues reported by users of Crossplane v2.2 and fixing security related issues in Crossplane and its dependencies. 🎉 Highlights Fixed repeated owner updates for composed Usages (#7596, originally #7591): The Usage controller only checked the first ownerReference when deciding whether the spec.by resource already owned the Usage. A Usage created by a Compo…
v2.1.8 is a patch release scoped to fixing issues reported by users of Crossplane v2.1 and fixing security related issues in Crossplane's dependencies. 🎉 Highlights Fixed repeated owner updates for composed Usages (#7622, originally #7591): The Usage controller only checked the first ownerReference when deciding whether the spec.by resource already owned the Usage. A Usage created by a Composition…
v1.20.11 is a patch release scoped to fixing issues reported by users of Crossplane v1.20 and fixing security related issues in Crossplane's dependencies. 🎉 Highlights Fixed repeated owner updates for composed Usages (#7623, originally #7591): The Usage controller only checked the first ownerReference when deciding whether the spec.by resource already owned the Usage. A Usage created by a Composit…
Release v2.3.4
v2.3.3 is a patch release scoped to fixing issues reported by users of Crossplane v2.3 and fixing security related issues in Crossplane's dependencies. 🎉 Highlights Fixed package signature verification TOCTOU (GHSA-mf7q-r4rv-jv94): A time-of-check-to-time-of-use flaw could let a malicious OCI registry pass signature verification with a signed image and then serve unsigned content for installation.…
v2.2.3 is a patch release scoped to fixing issues reported by users of Crossplane v2.2 and fixing security related issues in Crossplane and its dependencies. 🎉 Highlights Fixed package signature verification TOCTOU (GHSA-wfqx-gjrf-g28r): A time-of-check-to-time-of-use flaw would let a malicious OCI registry serve a correctly signed image for verification and then an unsigned image for installation…
v2.1.7 is a patch release scoped to fixing issues reported by users of Crossplane v2.1 and fixing security related issues in Crossplane's dependencies. What's Changed chore(deps): update module github.com/quic-go/quic-go to v0.59.1 [security] (release-2.1) by @crossplane-renovate[bot] in #7460 chore(deps): update module golang.org/x/net to v0.55.0 [security] (release-2.1) by @crossplane-renovate[b…
v1.20.10 is a patch release scoped to fixing issues reported by users of Crossplane v1.20 and fixing security related issues in Crossplane's dependencies. What's Changed [release-1.20] bump Go to 1.25.11 [security] by @phisco in #7527 chore(deps): update module go.mongodb.org/mongo-driver to v1.17.7 [security] (release-1.20) by @crossplane-renovate[bot] in #7534 Update crossplane-runtime to v1.20.…
Release v2.3.3
v2.3.2 is a patch release scoped to fixing issues reported by users of Crossplane v2.3 and fixing security related issues in Crossplane's dependencies. The primary goal of this release is to fix regressions in the Crossplane CLI's render commands. What's Changed [Backport release-2.3] build: tag the apis/ Go submodule on every release by @github-actions[bot] in #7445 Backport #7452 to release-2.3:…
Release v2.3.2
v1.20.9 is a patch release scoped to fixing issues reported by users of Crossplane v1.20 and fixing security related issues in Crossplane's dependencies. It also ships a notable new crossplane beta upgrade check command to help you more easily prepare for Crossplane v2. 🎉 Highlights Check your control plane's v2 upgrade readiness: The new crossplane beta upgrade check command connects to a live v1…
v2.3.1 is a patch release scoped to fixing issues reported by users of Crossplane v2.3 and fixing security related issues in Crossplane's dependencies. What's Changed chore(deps): update module golang.org/x/crypto to v0.52.0 [security] (release-2.3) by @crossplane-renovate[bot] in #7427 fix(ci): match release tags only when computing build version by @jbw976 in #7432 chore(deps): bump crossplane-r…
v2.2.2 is a patch release scoped to fixing issues reported by users of Crossplane v2.2 and fixing security related issues in Crossplane's dependencies. What's Changed fix(deps): update module github.com/in-toto/in-toto-golang to v0.11.0 [security] (release-2.2) by @crossplane-renovate[bot] in #7372 fix(deps): update module github.com/go-git/go-git/v5 to v5.19.0 [security] (release-2.2) by @crosspl…