Crossplane
v2.3.6Orchestration & ManagementSep 15, 2026
A maintenance release fixes package-revision handoff failures and updates security-sensitive dependencies. It adds no newly announced operator configuration requirements.
Action needed (2)
securityThe
golang.dependency updateorg/x/crypto The
golang.module is updated to v0.56.0 for a security-related dependency change.org/x/crypto securityThe
google.dependency updategolang. org/grpc The
google.module is updated to v1.83.2 for a security-related dependency change.golang. org/grpc
All 2 other recorded changesfixes 1 · value changes 1
fixes (1)
- * **Package revisions now take control of established objects from the revision they replace:** An outgoing package revision could fail to relinquish control of the package's CRDs, leaving the incoming revision permanently unhealthy with
cannot establish control of object. The provider's pod would never be created, so that provider could do no work without manual intervention by someone either deleting the stale revision or editing the CRD's owner reference by hand. Package revisions now directly take control from the revision they replace, so the hand-off succeeds without any intervention. Backported in #7827, originally fixed in #7733.
value changes (1)
- * [Backport release-2.3] Bump go to 1.26
Add Crossplane to your stack
A weekly email arrives when a release needs action. Like the security patches in this release.