chore(deps): update helm release crossplane to v2.3.1 #26

Open
renovate-bot wants to merge 1 commit from renovate/crossplane-2.x into main
Member

This PR contains the following updates:

Package Update Change
crossplane (source) minor 2.2.12.3.1

⚠️ Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

crossplane/crossplane (crossplane)

v2.3.1

Compare Source

v2.3.1 is a patch release scoped to fixing issues reported by users of Crossplane v2.3 and fixing security related issues in Crossplane's dependencies.

What's Changed

Full Changelog: https://github.com/crossplane/crossplane/compare/v2.3.0...v2.3.1

v2.3.0

Compare Source

The v2.3.0 release is a regular quarterly Crossplane release that is focused on maturing a number of key areas of functionality across the project, as Crossplane continues to become more capable, more reliable, and more performant for your production workloads. This release includes a new high-fidelity local rendering engine, finer-grained reconciliation control for both XRs and managed resources, new alpha deletion protection for Provider packages, and a wide range of fixes and reliability improvements. It also includes security fixes in Crossplane's Go toolchain and dependencies.

ℹ️ Extended support for v1.20

Because v1.20 is the last minor release of the v1 series and major version upgrades require additional planning for users, v1.20 will continue to receive critical fixes. The final EOL date for v1.20 is to be determined.

⚠️ Upgrade from v2.2

It is strongly advised to upgrade to v2.3 from the previous minor version, which is v2.2. Upon upgrade for each minor release, Crossplane performs any necessary migrations of its CRDs to ensure the latest versions are stored in the Kubernetes API server. Therefore, it is important to upgrade sequentially through one minor version at a time as described in the upgrade docs.

🚨 Notable and Breaking Changes

  • github.com/crossplane/crossplane/apis/v2 is now a separate Go module from the rest of Crossplane. #​7019
    • External consumers of Crossplane APIs should update their dependencies from github.com/crossplane/crossplane/v2/apis to github.com/crossplane/crossplane/apis/v2.
    • The common APIs from crossplane-runtime have moved to github.com/crossplane/crossplane/apis/v2/core.
    • v1 and v2 of the common APIs have been collapsed into a single v2 package. The old v1.Resource* types are now v2.ClusterManagedResource* to differentiate them from v2.ManagedResource*, which are the namespaced versions.
  • The Crossplane CLI (formerly crank) has moved into its own repository, https://github.com/crossplane/cli, and will be released separately from Crossplane core going forward. #​7355
    • A v2.3.0 release of the CLI coincides with this Crossplane core v2.3.0 release and has been dual published to the typical release location on releases.crossplane.io to help ease the transition. After the v2.3.0 release, version numbers and release schedules will diverge as the Crossplane CLI will have its own independent release schedule. Learn more and provide feedback in #​7350.
    • See full release notes (including breaking changes): https://github.com/crossplane/cli/releases/tag/v2.3.0

🎉 Highlights

  • High-fidelity render engine: crossplane render now drives the real composite reconciler via a new hidden crossplane internal render subcommand, instead of maintaining a parallel reimplementation. The output of crossplane render (and downstream tools like crossplane-diff) now matches what would actually happen in-cluster, eliminating differences between local rendering and real reconciliation. By default it pulls the Crossplane container image to run the reconcile, so a separate controller binary is not required. See #​7280 and #​7339.
  • Provider deletion protection: A new alpha feature automatically protects Provider packages from accidental deletion while instances of their managed resources still exist. When --enable-provider-deletion-protection is set, Crossplane will automatically create ClusterUsage resources that block Provider deletion through the existing Usage webhook. #​7362
  • Per-resource reconciliation control: Two new annotations give users fine-grained control over when individual resources reconcile. crossplane.io/poll-interval overrides the controller-level poll interval for a specific resource (e.g. "24h", "30m"), and crossplane.io/reconcile-requested-at triggers an immediate reconciliation when its value changes. This works immediately for XRs, but requires providers to release a new version based on crossplane-runtime v.2.3.0 to gain this behavior for their managed resources #​7239
  • Composition functions can now select all resources of a given kind: When a composition function returned a Requirements.ResourceSelector with only apiVersion and kind set (no matchName or matchLabels), Crossplane previously rejected this as an invalid request. A selector with no match field is now correctly interpreted as "all resources of that kind". #​7241
  • Scale subresource for XRs: CompositeResourceDefinition can now configure the scale subresource on the XRs it defines, so composite resources can be scaled with kubectl scale and other standard tooling. #​7004
  • Other notable improvements:
    • Improved docker network configuration support for crank render: A new render.crossplane.io/runtime-docker-network annotation on Function resources tells the Docker runtime which network function containers should join. This makes crossplane render work inside container jobs (such as GitHub Actions container jobs) where the default bridge network is unreachable from the caller. #​7216
    • commonAnnotations in compositions: Compositions can now propagate a set of common annotations to every composed resource, mirroring the existing commonLabels behavior. #​7211
    • crossplane beta validate now correctly resolves and caches dependencies that use semantic version ranges (e.g. ">=v0.6.0,<v1.0.0"), and adds an --update-cache flag to always check upstream for newer matching versions. #​7050
    • crossplane beta trace adds a YAML output format. #​7275
    • The XR circuit breaker now resets its state when the XR is deleted, so a new resource with the same name starts fresh instead of inheriting an open circuit. #​7201
    • CompositionRevision and composite reconcilers now skip no-op status updates, eliminating an unnecessary reconcile loop that prevented steady state convergence. #​7283

🏅 Release MVP

For the v2.3 release cycle, we'd like to recognize two amazing community members for their contributions and name them the v2.3 release MVPs! 🎉

  • @​yordis delivered one of this release's headline features in #​7239 as a first-time contributor to core Crossplane (but long time contributor to the Crossplane ecosystem 😉) : the per-resource reconciliation control. This work gives operators fine-grained control over when individual resources reconcile, and required coordinated changes across both the core composite reconciler and the managed reconciler in crossplane-runtime. Thank you @​yordis!
  • @​fernandezcuesta has had a sustained impact on the broader Crossplane ecosystem, contributing to and releasing a steady stream of community providers and extensions that expand what users can build on Crossplane, e.g. provider-kafka, provider-mongodbatlas, and provider-pagerduty. To top that off, they also landed new support in core Crossplane for commonAnnotations for compositions in #​7211. Thank you, @​fernandezcuesta!

What's Changed

New Contributors

Full Changelog: https://github.com/crossplane/crossplane/compare/v2.2.0...v2.3.0

v2.2.2

Compare Source

v2.2.2 is a patch release scoped to fixing issues reported by users of Crossplane v2.2 and fixing security related issues in Crossplane's dependencies.

What's Changed

Full Changelog: https://github.com/crossplane/crossplane/compare/v2.2.1...v2.2.2


Configuration

📅 Schedule: (in timezone America/Toronto)

  • Branch creation
    • "after 19:00 on friday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [crossplane](https://crossplane.io) ([source](https://github.com/crossplane/crossplane)) | minor | `2.2.1` → `2.3.1` | --- > ⚠️ **Warning** > > Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/1) for more information. --- ### Release Notes <details> <summary>crossplane/crossplane (crossplane)</summary> ### [`v2.3.1`](https://github.com/crossplane/crossplane/releases/tag/v2.3.1) [Compare Source](https://github.com/crossplane/crossplane/compare/v2.3.0...v2.3.1) v2.3.1 is a patch release scoped to fixing issues reported by users of Crossplane v2.3 and fixing security related issues in Crossplane's dependencies. #### What's Changed - chore(deps): update module golang.org/x/crypto to v0.52.0 \[security] (release-2.3) by [@&#8203;crossplane-renovate](https://github.com/crossplane-renovate)\[bot] in [#&#8203;7427](https://github.com/crossplane/crossplane/pull/7427) - fix(ci): match release tags only when computing build version by [@&#8203;jbw976](https://github.com/jbw976) in [#&#8203;7432](https://github.com/crossplane/crossplane/pull/7432) - chore(deps): bump crossplane-runtime to v2.3.1 by [@&#8203;jbw976](https://github.com/jbw976) in [#&#8203;7433](https://github.com/crossplane/crossplane/pull/7433) **Full Changelog**: <https://github.com/crossplane/crossplane/compare/v2.3.0...v2.3.1> ### [`v2.3.0`](https://github.com/crossplane/crossplane/releases/tag/v2.3.0) [Compare Source](https://github.com/crossplane/crossplane/compare/v2.2.2...v2.3.0) The `v2.3.0` release is a regular quarterly Crossplane release that is focused on maturing a number of key areas of functionality across the project, as Crossplane continues to become more capable, more reliable, and more performant for your production workloads. This release includes a new high-fidelity local rendering engine, finer-grained reconciliation control for both XRs and managed resources, new alpha deletion protection for Provider packages, and a wide range of fixes and reliability improvements. It also includes security fixes in Crossplane's Go toolchain and dependencies. #### ℹ️ Extended support for `v1.20` Because `v1.20` is the last minor release of the `v1` series and major version upgrades require additional planning for users, `v1.20` will continue to receive critical fixes. The final EOL date for `v1.20` is to be determined. #### ⚠️ Upgrade from `v2.2` It is strongly advised to upgrade to `v2.3` from the previous minor version, which is `v2.2`. Upon upgrade for each minor release, Crossplane performs any necessary migrations of its CRDs to ensure the latest versions are stored in the Kubernetes API server. Therefore, it is important to upgrade sequentially through one minor version at a time as described in the [upgrade docs](https://docs.crossplane.io/latest/guides/upgrade-crossplane/). #### 🚨 Notable and Breaking Changes - `github.com/crossplane/crossplane/apis/v2` is now a separate Go module from the rest of Crossplane. [#&#8203;7019](https://github.com/crossplane/crossplane/pull/7019) - External consumers of Crossplane APIs should update their dependencies from `github.com/crossplane/crossplane/v2/apis` to `github.com/crossplane/crossplane/apis/v2`. - The `common` APIs from `crossplane-runtime` have moved to `github.com/crossplane/crossplane/apis/v2/core`. - `v1` and `v2` of the `common` APIs have been collapsed into a single `v2` package. The old `v1.Resource*` types are now `v2.ClusterManagedResource*` to differentiate them from `v2.ManagedResource*`, which are the namespaced versions. - The Crossplane CLI (formerly `crank`) has moved into its own repository, <https://github.com/crossplane/cli>, and will be released separately from Crossplane core going forward. [#&#8203;7355](https://github.com/crossplane/crossplane/pull/7355) - A v2.3.0 release of the CLI coincides with this Crossplane core v2.3.0 release and has been dual published to the typical release location on releases.crossplane.io to help ease the transition. After the v2.3.0 release, version numbers and release schedules will diverge as the Crossplane CLI will have its own independent release schedule. Learn more and provide feedback in [#&#8203;7350](https://github.com/crossplane/crossplane/pull/7350). - See full release notes (including breaking changes): <https://github.com/crossplane/cli/releases/tag/v2.3.0> #### 🎉 Highlights - **High-fidelity render engine**: `crossplane render` now drives the real composite reconciler via a new hidden `crossplane internal render` subcommand, instead of maintaining a parallel reimplementation. The output of `crossplane render` (and downstream tools like `crossplane-diff`) now matches what would actually happen in-cluster, eliminating differences between local rendering and real reconciliation. By default it pulls the Crossplane container image to run the reconcile, so a separate controller binary is not required. See [#&#8203;7280](https://github.com/crossplane/crossplane/issues/7280) and [#&#8203;7339](https://github.com/crossplane/crossplane/issues/7339). - **Provider deletion protection**: A new alpha feature automatically protects `Provider` packages from accidental deletion while instances of their managed resources still exist. When `--enable-provider-deletion-protection` is set, Crossplane will automatically create `ClusterUsage` resources that block Provider deletion through the existing Usage webhook. [#&#8203;7362](https://github.com/crossplane/crossplane/issues/7362) - **Per-resource reconciliation control**: Two new annotations give users fine-grained control over when individual resources reconcile. `crossplane.io/poll-interval` overrides the controller-level poll interval for a specific resource (e.g. `"24h"`, `"30m"`), and `crossplane.io/reconcile-requested-at` triggers an immediate reconciliation when its value changes. This works immediately for XRs, but requires providers to release a new version based on crossplane-runtime v.2.3.0 to gain this behavior for their managed resources [#&#8203;7239](https://github.com/crossplane/crossplane/issues/7239) - **Composition functions can now select all resources of a given kind:** When a composition function returned a `Requirements.ResourceSelector` with only `apiVersion` and `kind` set (no `matchName` or `matchLabels`), Crossplane previously rejected this as an invalid request. A selector with no match field is now correctly interpreted as "all resources of that kind". [#&#8203;7241](https://github.com/crossplane/crossplane/issues/7241) - **Scale subresource for XRs**: `CompositeResourceDefinition` can now configure the `scale` subresource on the XRs it defines, so composite resources can be scaled with `kubectl scale` and other standard tooling. [#&#8203;7004](https://github.com/crossplane/crossplane/issues/7004) - **Other notable improvements**: - **Improved docker network configuration support for `crank render`**: A new `render.crossplane.io/runtime-docker-network` annotation on `Function` resources tells the Docker runtime which network function containers should join. This makes `crossplane render` work inside container jobs (such as GitHub Actions container jobs) where the default bridge network is unreachable from the caller. [#&#8203;7216](https://github.com/crossplane/crossplane/issues/7216) - **`commonAnnotations` in compositions**: Compositions can now propagate a set of common annotations to every composed resource, mirroring the existing `commonLabels` behavior. [#&#8203;7211](https://github.com/crossplane/crossplane/issues/7211) - `crossplane beta validate` now correctly resolves and caches dependencies that use semantic version ranges (e.g. `">=v0.6.0,<v1.0.0"`), and adds an `--update-cache` flag to always check upstream for newer matching versions. [#&#8203;7050](https://github.com/crossplane/crossplane/issues/7050) - `crossplane beta trace` adds a YAML output format. [#&#8203;7275](https://github.com/crossplane/crossplane/issues/7275) - The XR circuit breaker now resets its state when the XR is deleted, so a new resource with the same name starts fresh instead of inheriting an open circuit. [#&#8203;7201](https://github.com/crossplane/crossplane/issues/7201) - `CompositionRevision` and composite reconcilers now skip no-op status updates, eliminating an unnecessary reconcile loop that prevented steady state convergence. [#&#8203;7283](https://github.com/crossplane/crossplane/issues/7283) #### 🏅 Release MVP For the v2.3 release cycle, we'd like to recognize two amazing community members for their contributions and name them the v2.3 release MVPs! 🎉 - [@&#8203;yordis](https://github.com/yordis) delivered one of this release's headline features in [#&#8203;7239](https://github.com/crossplane/crossplane/issues/7239) as a first-time contributor to core Crossplane (but long time contributor to the Crossplane ecosystem 😉) : the per-resource reconciliation control. This work gives operators fine-grained control over when individual resources reconcile, and required coordinated changes across both the core composite reconciler and the managed reconciler in `crossplane-runtime`. Thank you [@&#8203;yordis](https://github.com/yordis)! - [@&#8203;fernandezcuesta](https://github.com/fernandezcuesta) has had a sustained impact on the broader Crossplane ecosystem, contributing to and releasing a steady stream of community providers and extensions that expand what users can build on Crossplane, e.g. `provider-kafka`, `provider-mongodbatlas`, and `provider-pagerduty`. To top that off, they also landed new support in core Crossplane for `commonAnnotations` for compositions in [#&#8203;7211](https://github.com/crossplane/crossplane/issues/7211). Thank you, [@&#8203;fernandezcuesta](https://github.com/fernandezcuesta)! #### What's Changed - Bump crossplane-runtime dependency to v2.3.0-rc.0 by [@&#8203;adamwg](https://github.com/adamwg) in [#&#8203;7134](https://github.com/crossplane/crossplane/pull/7134) - Update renovate config for v2.2 release by [@&#8203;adamwg](https://github.com/adamwg) in [#&#8203;7141](https://github.com/crossplane/crossplane/pull/7141) - Use foreground cascading deletion for unneeded composed resources by [@&#8203;bobh66](https://github.com/bobh66) in [#&#8203;6599](https://github.com/crossplane/crossplane/pull/6599) - readme: Leave a note about v1.20 extended support by [@&#8203;adamwg](https://github.com/adamwg) in [#&#8203;7153](https://github.com/crossplane/crossplane/pull/7153) - chore: clean up lingering refs to HACK\_CROSSPLANE\_ARGS by [@&#8203;jbw976](https://github.com/jbw976) in [#&#8203;7124](https://github.com/crossplane/crossplane/pull/7124) - Add WG to adopters by [@&#8203;alexey-pankratyev](https://github.com/alexey-pankratyev) in [#&#8203;7165](https://github.com/crossplane/crossplane/pull/7165) - build: mitigate potential script injection in promote workflow by [@&#8203;jbw976](https://github.com/jbw976) in [#&#8203;7166](https://github.com/crossplane/crossplane/pull/7166) - fix: adding required permissions to top level and jobs in the workflow by [@&#8203;gaganhr94](https://github.com/gaganhr94) in [#&#8203;7131](https://github.com/crossplane/crossplane/pull/7131) - ci: fix renovate config parsing by [@&#8203;phisco](https://github.com/phisco) in [#&#8203;7176](https://github.com/crossplane/crossplane/pull/7176) - apis: Make apis a separate go module by [@&#8203;adamwg](https://github.com/adamwg) in [#&#8203;7019](https://github.com/crossplane/crossplane/pull/7019) - Update crossplane-runtime to use core APIs from the apis module by [@&#8203;adamwg](https://github.com/adamwg) in [#&#8203;7190](https://github.com/crossplane/crossplane/pull/7190) - fix(crank): xpkg push respects proxy environment variables by [@&#8203;fhopfensperger](https://github.com/fhopfensperger) in [#&#8203;7208](https://github.com/crossplane/crossplane/pull/7208) - fix(crank): include resource kind, name, namespace in trace get errors by [@&#8203;kruthiwusirika5](https://github.com/kruthiwusirika5) in [#&#8203;7158](https://github.com/crossplane/crossplane/pull/7158) - chore(deps): update module github.com/cloudflare/circl to v1.6.3 \[security] (main) by [@&#8203;crossplane-renovate](https://github.com/crossplane-renovate)\[bot] in [#&#8203;7177](https://github.com/crossplane/crossplane/pull/7177) - Add a warning message for when a resource's namespace is overwritten by [@&#8203;adamkasztenny](https://github.com/adamkasztenny) in [#&#8203;7156](https://github.com/crossplane/crossplane/pull/7156) - Issue [#&#8203;7200](https://github.com/crossplane/crossplane/issues/7200) - Reset circuit breaker state on XR deletion by [@&#8203;nicmunroe](https://github.com/nicmunroe) in [#&#8203;7201](https://github.com/crossplane/crossplane/pull/7201) - Update crossplane-runtime and remove temporary copy by [@&#8203;adamwg](https://github.com/adamwg) in [#&#8203;7215](https://github.com/crossplane/crossplane/pull/7215) - ci: use new env for renovate allowed commands by [@&#8203;phisco](https://github.com/phisco) in [#&#8203;7188](https://github.com/crossplane/crossplane/pull/7188) - ci: switch to korthout/backport-action and update it. by [@&#8203;phisco](https://github.com/phisco) in [#&#8203;7234](https://github.com/crossplane/crossplane/pull/7234) - ci: drop Trivy vulnerability scanning by [@&#8203;phisco](https://github.com/phisco) in [#&#8203;7237](https://github.com/crossplane/crossplane/pull/7237) - add sig-prod-readiness by [@&#8203;mestredelpino](https://github.com/mestredelpino) in [#&#8203;7136](https://github.com/crossplane/crossplane/pull/7136) - Add render.crossplane.io/runtime-docker-network annotation by [@&#8203;jtucci](https://github.com/jtucci) in [#&#8203;7216](https://github.com/crossplane/crossplane/pull/7216) - fix: get all resources when requiredResources matchLabels is empty by [@&#8203;nkzk](https://github.com/nkzk) in [#&#8203;7145](https://github.com/crossplane/crossplane/pull/7145) - fix(deps): update module google.golang.org/grpc to v1.79.3 \[security] (main) by [@&#8203;crossplane-renovate](https://github.com/crossplane-renovate)\[bot] in [#&#8203;7225](https://github.com/crossplane/crossplane/pull/7225) - Support ResourceSelector with no match field by [@&#8203;negz](https://github.com/negz) in [#&#8203;7241](https://github.com/crossplane/crossplane/pull/7241) - feat: implement commonAnnotations by [@&#8203;fernandezcuesta](https://github.com/fernandezcuesta) in [#&#8203;7211](https://github.com/crossplane/crossplane/pull/7211) - adopters: add T-Systems International GmbH to adopters list by [@&#8203;jbw976](https://github.com/jbw976) in [#&#8203;7261](https://github.com/crossplane/crossplane/pull/7261) - Remove Hyland Software from ADOPTERS.md by [@&#8203;sethfduke](https://github.com/sethfduke) in [#&#8203;7262](https://github.com/crossplane/crossplane/pull/7262) - Allow XRDs to configure the `scale` subresource by [@&#8203;jonasz-lasut](https://github.com/jonasz-lasut) in [#&#8203;7004](https://github.com/crossplane/crossplane/pull/7004) - Add YAML output format to crossplane beta trace by [@&#8203;bobh66](https://github.com/bobh66) in [#&#8203;7275](https://github.com/crossplane/crossplane/pull/7275) - fix: set standard file permissions on Nix-built release binaries by [@&#8203;adamkasztenny](https://github.com/adamkasztenny) in [#&#8203;7255](https://github.com/crossplane/crossplane/pull/7255) - pkg: Correctly handle dependency upgrades with ImageConfig prefix rewriting by [@&#8203;adamwg](https://github.com/adamwg) in [#&#8203;7233](https://github.com/crossplane/crossplane/pull/7233) - README: update release table after v2.2 release by [@&#8203;jbw976](https://github.com/jbw976) in [#&#8203;7274](https://github.com/crossplane/crossplane/pull/7274) - chore(deps): update module go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp to v1.43.0 \[security] (main) by [@&#8203;crossplane-renovate](https://github.com/crossplane-renovate)\[bot] in [#&#8203;7286](https://github.com/crossplane/crossplane/pull/7286) - fix(deps): update module github.com/go-git/go-git/v5 to v5.17.1 \[security] (main) by [@&#8203;crossplane-renovate](https://github.com/crossplane-renovate)\[bot] in [#&#8203;7137](https://github.com/crossplane/crossplane/pull/7137) - chore(deps): update module github.com/go-jose/go-jose/v4 to v4.1.4 \[security] (main) by [@&#8203;crossplane-renovate](https://github.com/crossplane-renovate)\[bot] in [#&#8203;7263](https://github.com/crossplane/crossplane/pull/7263) - fix(deps): update module github.com/sigstore/cosign/v3 to v3.0.5 \[security] (main) by [@&#8203;crossplane-renovate](https://github.com/crossplane-renovate)\[bot] in [#&#8203;7178](https://github.com/crossplane/crossplane/pull/7178) - chore(deps): update module github.com/docker/cli to v29.2.0+incompatible \[security] (main) by [@&#8203;crossplane-renovate](https://github.com/crossplane-renovate)\[bot] in [#&#8203;7193](https://github.com/crossplane/crossplane/pull/7193) - chore(deps): update module github.com/sigstore/timestamp-authority/v2 to v2.0.6 \[security] (main) by [@&#8203;crossplane-renovate](https://github.com/crossplane-renovate)\[bot] in [#&#8203;7297](https://github.com/crossplane/crossplane/pull/7297) - Add UpToDate condition by [@&#8203;bobh66](https://github.com/bobh66) in [#&#8203;7294](https://github.com/crossplane/crossplane/pull/7294) - Use xcrd and xpkg packages from crossplane-runtime by [@&#8203;adamwg](https://github.com/adamwg) in [#&#8203;7308](https://github.com/crossplane/crossplane/pull/7308) - chore(deps): bump Go to 1.25.9 \[security] by [@&#8203;phisco](https://github.com/phisco) in [#&#8203;7306](https://github.com/crossplane/crossplane/pull/7306) - chore: add Lansweeper as adopter by [@&#8203;fernandezcuesta](https://github.com/fernandezcuesta) in [#&#8203;7172](https://github.com/crossplane/crossplane/pull/7172) - chore(deps): update module github.com/moby/spdystream to v0.5.1 \[security] (main) by [@&#8203;crossplane-renovate](https://github.com/crossplane-renovate)\[bot] in [#&#8203;7313](https://github.com/crossplane/crossplane/pull/7313) - Fix nix lint errors by [@&#8203;adamwg](https://github.com/adamwg) in [#&#8203;7321](https://github.com/crossplane/crossplane/pull/7321) - Avoid rebuilding upstream nixpkgs due to Go toolchain changes by [@&#8203;adamwg](https://github.com/adamwg) in [#&#8203;7323](https://github.com/crossplane/crossplane/pull/7323) - fix(deps): update module github.com/go-git/go-git/v5 to v5.18.0 \[security] (main) by [@&#8203;crossplane-renovate](https://github.com/crossplane-renovate)\[bot] in [#&#8203;7325](https://github.com/crossplane/crossplane/pull/7325) - Add high-fidelity render engine by [@&#8203;negz](https://github.com/negz) in [#&#8203;7280](https://github.com/crossplane/crossplane/pull/7280) - Add per-resource poll interval and reconcile-now annotations by [@&#8203;yordis](https://github.com/yordis) in [#&#8203;7239](https://github.com/crossplane/crossplane/pull/7239) - chore: disable CodeRabbit automatic label application by [@&#8203;jbw976](https://github.com/jbw976) in [#&#8203;7337](https://github.com/crossplane/crossplane/pull/7337) - design: Add a design document for developer experience tooling by [@&#8203;adamwg](https://github.com/adamwg) in [#&#8203;6909](https://github.com/crossplane/crossplane/pull/6909) - crank: Update render to use `crossplane internal render` by [@&#8203;adamwg](https://github.com/adamwg) in [#&#8203;7339](https://github.com/crossplane/crossplane/pull/7339) - feat(crank): add per-service template vars for xpkg batch by [@&#8203;nullable-eth](https://github.com/nullable-eth) in [#&#8203;7295](https://github.com/crossplane/crossplane/pull/7295) - fix(cli/beta/validate): support dependency semantic version range by [@&#8203;nkzk](https://github.com/nkzk) in [#&#8203;7050](https://github.com/crossplane/crossplane/pull/7050) - Use pkgs.unstable overlay instead of single pkgs.go-unstable attribute by [@&#8203;negz](https://github.com/negz) in [#&#8203;7356](https://github.com/crossplane/crossplane/pull/7356) - Remove crank by [@&#8203;adamwg](https://github.com/adamwg) in [#&#8203;7355](https://github.com/crossplane/crossplane/pull/7355) - fix(gomod): update go mod and gomod2nix after crank removal by [@&#8203;haarchri](https://github.com/haarchri) in [#&#8203;7361](https://github.com/crossplane/crossplane/pull/7361) - feat(provider-deletion): protect Providers from deletion via ClusterUsage by [@&#8203;haarchri](https://github.com/haarchri) in [#&#8203;7362](https://github.com/crossplane/crossplane/pull/7362) - chore(deps): update module github.com/in-toto/in-toto-golang to v0.11.0 \[security] (main) by [@&#8203;crossplane-renovate](https://github.com/crossplane-renovate)\[bot] in [#&#8203;7368](https://github.com/crossplane/crossplane/pull/7368) - chore(deps): update module golang.org/x/net to v0.53.0 \[security] (main) by [@&#8203;crossplane-renovate](https://github.com/crossplane-renovate)\[bot] in [#&#8203;7363](https://github.com/crossplane/crossplane/pull/7363) - Pin Renovate config validator by [@&#8203;phisco](https://github.com/phisco) in [#&#8203;7386](https://github.com/crossplane/crossplane/pull/7386) - Skip no-op status updates in revision and composite reconcilers by [@&#8203;tgoodwin](https://github.com/tgoodwin) in [#&#8203;7283](https://github.com/crossplane/crossplane/pull/7283) - Update ADOPTERS.md by [@&#8203;olafsm](https://github.com/olafsm) in [#&#8203;7385](https://github.com/crossplane/crossplane/pull/7385) - Pin Renovate Earthly download by [@&#8203;phisco](https://github.com/phisco) in [#&#8203;7387](https://github.com/crossplane/crossplane/pull/7387) - chore(deps): bump crossplane-runtime to v2.3.0-rc.1 by [@&#8203;jbw976](https://github.com/jbw976) in [#&#8203;7394](https://github.com/crossplane/crossplane/pull/7394) - chore(deps): Bump Go to 1.25.10 to fix stdlib CVEs (release-2.3) by [@&#8203;jbw976](https://github.com/jbw976) in [#&#8203;7413](https://github.com/crossplane/crossplane/pull/7413) - chore(deps): bump crossplane-runtime to v2.3.0 by [@&#8203;jbw976](https://github.com/jbw976) in [#&#8203;7417](https://github.com/crossplane/crossplane/pull/7417) #### New Contributors - [@&#8203;alexey-pankratyev](https://github.com/alexey-pankratyev) made their first contribution in [#&#8203;7165](https://github.com/crossplane/crossplane/pull/7165) - [@&#8203;gaganhr94](https://github.com/gaganhr94) made their first contribution in [#&#8203;7131](https://github.com/crossplane/crossplane/pull/7131) - [@&#8203;kruthiwusirika5](https://github.com/kruthiwusirika5) made their first contribution in [#&#8203;7158](https://github.com/crossplane/crossplane/pull/7158) - [@&#8203;adamkasztenny](https://github.com/adamkasztenny) made their first contribution in [#&#8203;7156](https://github.com/crossplane/crossplane/pull/7156) - [@&#8203;nicmunroe](https://github.com/nicmunroe) made their first contribution in [#&#8203;7201](https://github.com/crossplane/crossplane/pull/7201) - [@&#8203;mestredelpino](https://github.com/mestredelpino) made their first contribution in [#&#8203;7136](https://github.com/crossplane/crossplane/pull/7136) - [@&#8203;jtucci](https://github.com/jtucci) made their first contribution in [#&#8203;7216](https://github.com/crossplane/crossplane/pull/7216) - [@&#8203;nkzk](https://github.com/nkzk) made their first contribution in [#&#8203;7145](https://github.com/crossplane/crossplane/pull/7145) - [@&#8203;yordis](https://github.com/yordis) made their first contribution in [#&#8203;7239](https://github.com/crossplane/crossplane/pull/7239) - [@&#8203;tgoodwin](https://github.com/tgoodwin) made their first contribution in [#&#8203;7283](https://github.com/crossplane/crossplane/pull/7283) - [@&#8203;olafsm](https://github.com/olafsm) made their first contribution in [#&#8203;7385](https://github.com/crossplane/crossplane/pull/7385) **Full Changelog**: <https://github.com/crossplane/crossplane/compare/v2.2.0...v2.3.0> ### [`v2.2.2`](https://github.com/crossplane/crossplane/releases/tag/v2.2.2) [Compare Source](https://github.com/crossplane/crossplane/compare/v2.2.1...v2.2.2) v2.2.2 is a patch release scoped to fixing issues reported by users of Crossplane v2.2 and fixing security related issues in Crossplane's dependencies. #### What's Changed - fix(deps): update module github.com/in-toto/in-toto-golang to v0.11.0 \[security] (release-2.2) by [@&#8203;crossplane-renovate](https://github.com/crossplane-renovate)\[bot] in [#&#8203;7372](https://github.com/crossplane/crossplane/pull/7372) - fix(deps): update module github.com/go-git/go-git/v5 to v5.19.0 \[security] (release-2.2) by [@&#8203;crossplane-renovate](https://github.com/crossplane-renovate)\[bot] in [#&#8203;7384](https://github.com/crossplane/crossplane/pull/7384) - chore(deps): Bump Go to 1.25.10 to fix stdlib CVEs (release-2.2) by [@&#8203;jbw976](https://github.com/jbw976) in [#&#8203;7412](https://github.com/crossplane/crossplane/pull/7412) - fix(deps): update module github.com/go-git/go-git/v5 to v5.19.1 \[security] (release-2.2) by [@&#8203;crossplane-renovate](https://github.com/crossplane-renovate)\[bot] in [#&#8203;7409](https://github.com/crossplane/crossplane/pull/7409) - chore(deps): update module golang.org/x/crypto to v0.52.0 \[security] (release-2.2) by [@&#8203;crossplane-renovate](https://github.com/crossplane-renovate)\[bot] in [#&#8203;7426](https://github.com/crossplane/crossplane/pull/7426) - chore(deps): bump crossplane-runtime to v2.2.2 (release-2.2) by [@&#8203;jbw976](https://github.com/jbw976) in [#&#8203;7430](https://github.com/crossplane/crossplane/pull/7430) **Full Changelog**: <https://github.com/crossplane/crossplane/compare/v2.2.1...v2.2.2> </details> --- ### Configuration 📅 **Schedule**: (in timezone America/Toronto) - Branch creation - "after 19:00 on friday" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xOTAuMSIsInVwZGF0ZWRJblZlciI6IjQzLjE5MC4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->
renovate-bot force-pushed renovate/crossplane-2.x from 5262d8204f to 05a21b5752 2026-05-22 20:01:50 +00:00 Compare
renovate-bot changed title from chore(deps): update helm release crossplane to v2.3.0 to chore(deps): update helm release crossplane to v2.3.1 2026-05-22 20:01:52 +00:00
This pull request can be merged automatically.
This branch is out-of-date with the base branch
You are not authorized to merge this pull request.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin renovate/crossplane-2.x:renovate/crossplane-2.x
git switch renovate/crossplane-2.x

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch main
git merge --no-ff renovate/crossplane-2.x
git switch renovate/crossplane-2.x
git rebase main
git switch main
git merge --ff-only renovate/crossplane-2.x
git switch renovate/crossplane-2.x
git rebase main
git switch main
git merge --no-ff renovate/crossplane-2.x
git switch main
git merge --squash renovate/crossplane-2.x
git switch main
git merge --ff-only renovate/crossplane-2.x
git switch main
git merge renovate/crossplane-2.x
git push origin main
Sign in to join this conversation.
No reviewers
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
public/ops.emnt.dev!26
No description provided.