# Crossplane v1.20.12

> Orchestration & Management · 2026-08-21

A maintenance release with security-related dependency and toolchain updates, along with routine dependency and runtime version changes. No advisory identifiers are stated.

## Action needed
- **[security]** Vulnerable dependency fixes
  - Vulnerable dependencies were updated in the release-1.20 branch.
- **[security]** Vulnerable dependency updates
  - Vulnerable dependencies were updated in the release-1.20 branch.
- **[security]** The `github.com/go-git/go-git/v5` module update
  - The `github.com/go-git/go-git/v5` module was updated to version `v5.19.2` in the release-1.20 branch.
- **[security]** The `golang.org/x/mod` module update
  - The `golang.org/x/mod` module was updated to version `v0.40.0` in the release-1.20 branch.
- **[security]** The `Go` toolchain version `1.25.13`
  - The `Go` toolchain was updated to version `1.25.13` in the release-1.20 branch.

## Other recorded changes
- 3 (value_changed 3)

[Full analysis](https://ratatosk.io/en/releases/crossplane/v1.20.12)

[Original release notes](https://github.com/crossplane/crossplane/releases/tag/v1.20.12)