AI-analyzed release notes for CNCF graduated and incubating projects.
This release updates the Go toolchain in Crossplane to 1.. The change addresses undisclosed standard-library CVEs.
Action needed (1)
securityThe Go toolchain, updated to 1.
Crossplane v1.20.7 updates the Go toolchain to 1.. The update addresses undisclosed standard-library CVEs.
Crossplane v2.2.1 includes security-focused dependency updates and a move to Go 1.25.9. It also corrects operator-facing behavior around dependency upgrades with ImageConfig prefix rewrites and resource selectors, and bumps Crossplane Runtime to v2.2.1.
Action needed (10)
securityThe github. module, updated to v1.6.3
Crossplane v2.2.1 updates the github. module to v1.6.3 as a security dependency change.
securityThe go. module, updated to v1.43.0
Crossplane v2.2.1 updates the go. module to v1.43.0 as a security dependency change.
securityThe github. module, updated to v4.1.4
Crossplane v2.2.1 updates the github. module to v4.1.4 as a security dependency change.
securityThe github. module, updated to v3.0.5
Crossplane v2.2.1 updates the github. module to v3.0.5 as a security dependency change.
securityThe github. module, updated to v5.17.1
Crossplane v2.2.1 updates the github. module to v5.17.1 as a security dependency change.
securityThe github. module, updated to v29.2.0+incompatible
Crossplane v2.2.1 updates the github. module to v29.2.0+incompatible as a security dependency change.
securityGo 1.25.9
Crossplane v2.2.1 updates Go to 1.25.9 as a security dependency change.
securityThe github. module, updated to v0.5.1
Crossplane v2.2.1 updates the github. module to v0.5.1 as a security dependency change.
securityThe github. module, updated to v2.0.6
Crossplane v2.2.1 updates the github. module to v2.0.6 as a security dependency change.
securityThe github. module, updated to v5.18.0
Crossplane v2.2.1 updates the github. module to v5.18.0 as a security dependency change.
Crossplane v2.1.5 combines correctness fixes with dependency and Go toolchain updates. The release includes updated versions of several modules used by Crossplane.
Action needed (10)
securityThe github. module, updated to v1.6.3
Crossplane v2.1.5 updates the github. module to v1.6.3.
securityThe google. module, updated to v1.79.3
Crossplane v2.1.5 updates the google. module to v1.79.3.
securityThe go. module, updated to v1.43.0
Crossplane v2.1.5 updates the go. module to v1.43.0.
securityThe github. module, updated to v4.1.4
Crossplane v2.1.5 updates the github. module to v4.1.4.
securityThe Go toolchain, updated to 1.25.9
Crossplane v2.1.5 updates the Go toolchain to 1.25.9.
securityThe github. module, updated to v5.17.1
Crossplane v2.1.5 updates the github. module to v5.17.1.
securityThe github. module, updated to v0.5.1
Crossplane v2.1.5 updates the github. module to v0.5.1.
securityThe github. module, updated to v2.0.6
Crossplane v2.1.5 updates the github. module to v2.0.6.
securityThe github. module, updated to v29.2.0+incompatible
Crossplane v2.1.5 updates the github. module to v29.2.0+incompatible.
securityThe github. module, updated to v5.18.0
Crossplane v2.1.5 updates the github. module to v5.18.0.
Crossplane v2.0.8 corrects two operator-visible defects and updates Go plus several dependencies. The dependency changes are marked for security, but the disclosures identify only the affected components rather than specific advisory IDs.
Action needed (9)
securityThe github. module update
The github. module is updated to v1. in Crossplane v2.0.8.
securityThe OTLP HTTP trace exporter module update
The go. module is updated to v1. in Crossplane v2.0.8.
securityThe github. module update
The github. module is updated to v4. in Crossplane v2.0.8.
securityThe Go version update to 1.
Go is updated to 1. in Crossplane v2.0.8.
securityThe github. module update to v5.
The github. module is updated to v5. in Crossplane v2.0.8.
securityThe github. module update
The github. module is updated to v0. in Crossplane v2.0.8.
securityThe github. module update
The github. module is updated to v29. in Crossplane v2.0.8.
securityThe github. module update
The github. module is updated to v2. in Crossplane v2.0.8.
securityThe github. module update to v5.
The github. module is updated to v5. in Crossplane v2.0.8.
Crossplane v1. is a dependency-focused release with updates to several Go modules, including security-marked changes. It also includes an update to crossplane-runtime v1..
Action needed (5)
securityThe github. module, updated to v1.
The github. module is updated to v1. in Crossplane v1.. The release note marks this dependency update as security-related.
securityThe go. module, updated to v1.
The go. module is updated to v1. in Crossplane v1.. The release note marks this dependency update as security-related.
securityThe github. module, updated to v5.
The github. module is updated to v5. in Crossplane v1.. The release note marks this dependency update as security-related.
securityThe github. module, updated to v0.
The github. module is updated to v0. in Crossplane v1.. The release note marks this dependency update as security-related.
securityThe github. module, updated to v5.
The github. module is updated to v5. in Crossplane v1.. The release note marks this dependency update as security-related.
