Crossplane
v2.3.4Orchestration & ManagementJul 23, 2026
Crossplane v2.3.4 is a patch release fixing a Usage controller reconciliation bug that could trigger XR circuit breaker trips, two crossplane render command bugs, and bumping grpc, x/net, x/text, and the sigstore stack to absorb upstream CVE fixes. No CVE identifiers or breaking changes are detailed in the release notes.
Key changes (5)
- Usage controller now inspects all ownerReferences to prevent reconciliation storms and XR circuit breaker trips
- crossplane render: fixed UID overwrite bug and added observed resource validation
- Container images built with buildGoModule for standard vulnerability scanning
- Bumped grpc, golang.org/x/net, golang.org/x/text for upstream CVE fixes
- Bumped sigstore stack (cosign, rekor, timestamp-authority, sigstore-go) for upstream CVE fixes
Add Crossplane to your stack
A weekly email arrives when a release needs action. Weeks with nothing to act on, like this one, send no email.