RATATOSKRATATOSK
Sign in

Crossplane

v2.0.7Orchestration & Management
Feb 3, 2026

ACTION 1OTHER 2

This release updates a security-related dependency and corrects shared transitive dependency upgrades. It also fixes propagation of composite identity through nested XR trees.

Action needed (1)

  • securityThe github.com/theupdateframework/go-tuf/v2 dependency, updated to v2.4.1

    The github.com/theupdateframework/go-tuf/v2 module is updated to v2.4.1 in the release-2.0 branch.

All 2 other recorded changesfixes 2

fixes (2)

  • to fix one of the issues reported in #3423, where shared transitive dependencies could not be upgraded successfully
  • fix(render): propagate root composite identity through nested XR trees
Add Crossplane to your stack

A weekly email arrives when a release needs action. Like the security patches in this release.

Add to stack →
Official release note ↗All Crossplane releases →