RATATOSKRATATOSK
Sign in

Crossplane

v2.3.5Orchestration & Management
Aug 21, 2026

ACTION 4OTHER 4

A maintenance release corrects binary checksum handling and the `Usage` index key, alongside updates to security-sensitive and build dependencies. The dependency changes require the new release, with no operator configuration migration stated.

Action needed (4)

  • securityThe golang.org/x/mod dependency update

    The release updates golang.org/x/mod as a security-related dependency change.

  • securityThe github.com/sigstore/sigstore-go dependency, updated to v1.2.1

    The release updates github.com/sigstore/sigstore-go to v1.2.1 as a security-related dependency change.

  • securityThe github.com/google/cel-go dependency, updated to v0.30.0

    The release updates github.com/google/cel-go to v0.30.0 as a security-related dependency change.

  • securityThe crossplane-runtime dependency, bumped to v2.3.4

    The release bumps crossplane-runtime to v2.3.4 as a security-related dependency change.

All 4 other recorded changesfixes 2 · value changes 2

fixes (2)

  • **Correct crank checksums for amd64 binaries (#7666, originally #7660):** The published .sha256 files for linux_amd64 binaries had not matched the binaries themselves since v2.2.0, so any install script or Dockerfile that verified the amd64 checksum failed. Checksums are now calculated after Nix strips the binary, and the release workflow verifies them before uploading. Fixes #7467.
  • **Unambiguous Usage index key (#7630, originally #7508):** The deletion protection webhook indexed Usage resources by joining API group, kind, name, and namespace with .. Since groups and names can contain . themselves, two distinct resources could collapse to the same key, causing the webhook to block a deletion that should have been allowed. The key now joins with /, which cannot appear in any of those fields.

value changes (2)

  • [Backport release-2.3] build: point docker-client at docker_29 in the nix overlay
  • [Backport release-2.3] build: bump pinned nixpkgs channel from nixos-25.11 to nixos-26.05
Add Crossplane to your stack

A weekly email arrives when a release needs action. Like the security patches in this release.

Add to stack