# Crossplane v2.3.5

> Orchestration & Management · 2026-08-21

A maintenance release corrects binary checksum handling and the `Usage` index key, alongside updates to security-sensitive and build dependencies. The dependency changes require the new release, with no operator configuration migration stated.

## Action needed
- **[security]** The `golang.org/x/mod` dependency update
  - The release updates `golang.org/x/mod` as a security-related dependency change.
- **[security]** The `github.com/sigstore/sigstore-go` dependency, updated to `v1.2.1`
  - The release updates `github.com/sigstore/sigstore-go` to `v1.2.1` as a security-related dependency change.
- **[security]** The `github.com/google/cel-go` dependency, updated to `v0.30.0`
  - The release updates `github.com/google/cel-go` to `v0.30.0` as a security-related dependency change.
- **[security]** The `crossplane-runtime` dependency, bumped to `v2.3.4`
  - The release bumps `crossplane-runtime` to `v2.3.4` as a security-related dependency change.

## Other recorded changes
- 4 (value_changed 2, defect_corrected 2)

[Full analysis](https://ratatosk.io/en/releases/crossplane/v2.3.5)

[Original release notes](https://github.com/crossplane/crossplane/releases/tag/v2.3.5)