# Crossplane v2.3.6

> Orchestration & Management · 2026-09-15

A maintenance release fixes package-revision handoff failures and updates security-sensitive dependencies. It adds no newly announced operator configuration requirements.

## Action needed
- **[security]** The `golang.org/x/crypto` dependency update
  - The `golang.org/x/crypto` module is updated to v0.56.0 for a security-related dependency change.
- **[security]** The `google.golang.org/grpc` dependency update
  - The `google.golang.org/grpc` module is updated to v1.83.2 for a security-related dependency change.

## Other recorded changes
- 2 (value_changed 1, defect_corrected 1)

[Full analysis](https://ratatosk.io/en/releases/crossplane/v2.3.6)

[Original release notes](https://github.com/crossplane/crossplane/releases/tag/v2.3.6)