Skip to content

chore(deps): update module github.com/crossplane/crossplane to v2#149

Open
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/github.com-crossplane-crossplane-2.x
Open

chore(deps): update module github.com/crossplane/crossplane to v2#149
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/github.com-crossplane-crossplane-2.x

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate Bot commented Aug 11, 2025 •
edited
Loading

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
github.com/crossplane/crossplane v1.20.7 → v2.3.1 age adoption passing confidence

Release Notes

crossplane/crossplane (github.com/crossplane/crossplane)

v2.3.1

Compare Source

v2.3.1 is a patch release scoped to fixing issues reported by users of Crossplane v2.3 and fixing security related issues in Crossplane's dependencies.

What's Changed

Full Changelog: crossplane/crossplane@v2.3.0...v2.3.1

v2.3.0

Compare Source

The v2.3.0 release is a regular quarterly Crossplane release that is focused on maturing a number of key areas of functionality across the project, as Crossplane continues to become more capable, more reliable, and more performant for your production workloads. This release includes a new high-fidelity local rendering engine, finer-grained reconciliation control for both XRs and managed resources, new alpha deletion protection for Provider packages, and a wide range of fixes and reliability improvements. It also includes security fixes in Crossplane's Go toolchain and dependencies.

ℹ️ Extended support for v1.20

Because v1.20 is the last minor release of the v1 series and major version upgrades require additional planning for users, v1.20 will continue to receive critical fixes. The final EOL date for v1.20 is to be determined.

⚠️ Upgrade from v2.2

It is strongly advised to upgrade to v2.3 from the previous minor version, which is v2.2. Upon upgrade for each minor release, Crossplane performs any necessary migrations of its CRDs to ensure the latest versions are stored in the Kubernetes API server. Therefore, it is important to upgrade sequentially through one minor version at a time as described in the upgrade docs.

🚨 Notable and Breaking Changes
  • github.com/crossplane/crossplane/apis/v2 is now a separate Go module from the rest of Crossplane. #​7019
    • External consumers of Crossplane APIs should update their dependencies from github.com/crossplane/crossplane/v2/apis to github.com/crossplane/crossplane/apis/v2.
    • The common APIs from crossplane-runtime have moved to github.com/crossplane/crossplane/apis/v2/core.
    • v1 and v2 of the common APIs have been collapsed into a single v2 package. The old v1.Resource* types are now v2.ClusterManagedResource* to differentiate them from v2.ManagedResource*, which are the namespaced versions.
  • The Crossplane CLI (formerly crank) has moved into its own repository, https://github.com/crossplane/cli, and will be released separately from Crossplane core going forward. #​7355
    • A v2.3.0 release of the CLI coincides with this Crossplane core v2.3.0 release and has been dual published to the typical release location on releases.crossplane.io to help ease the transition. After the v2.3.0 release, version numbers and release schedules will diverge as the Crossplane CLI will have its own independent release schedule. Learn more and provide feedback in #​7350.
    • Commands have been re-organized into a noun-first tree.
    • Alpha and beta commands that previously lived in the crossplane alpha and crossplane beta trees have moved into the main tree.
    • Example: crossplane beta trace is now crossplane resource trace
    • See full release CLI notes (including full details on these breaking changes): https://github.com/crossplane/cli/releases/tag/v2.3.0
🎉 Highlights
  • High-fidelity render engine: crossplane render now drives the real composite reconciler via a new hidden crossplane internal render subcommand, instead of maintaining a parallel reimplementation. The output of crossplane render (and downstream tools like crossplane-diff) now matches what would actually happen in-cluster, eliminating differences between local rendering and real reconciliation. By default it pulls the Crossplane container image to run the reconcile, so a separate controller binary is not required. See #​7280 and #​7339.
  • Provider deletion protection: A new alpha feature automatically protects Provider packages from accidental deletion while instances of their managed resources still exist. When --enable-provider-deletion-protection is set, Crossplane will automatically create ClusterUsage resources that block Provider deletion through the existing Usage webhook. #​7362
  • Per-resource reconciliation control: Two new annotations give users fine-grained control over when individual resources reconcile. crossplane.io/poll-interval overrides the controller-level poll interval for a specific resource (e.g. "24h", "30m"), and crossplane.io/reconcile-requested-at triggers an immediate reconciliation when its value changes. This works immediately for XRs, but requires providers to release a new version based on crossplane-runtime v.2.3.0 to gain this behavior for their managed resources #​7239
  • Composition functions can now select all resources of a given kind: When a composition function returned a Requirements.ResourceSelector with only apiVersion and kind set (no matchName or matchLabels), Crossplane previously rejected this as an invalid request. A selector with no match field is now correctly interpreted as "all resources of that kind". #​7241
  • Scale subresource for XRs: CompositeResourceDefinition can now configure the scale subresource on the XRs it defines, so composite resources can be scaled with kubectl scale and other standard tooling. #​7004
  • Other notable improvements:
    • Improved docker network configuration support for crank render: A new render.crossplane.io/runtime-docker-network annotation on Function resources tells the Docker runtime which network function containers should join. This makes crossplane render work inside container jobs (such as GitHub Actions container jobs) where the default bridge network is unreachable from the caller. #​7216
    • commonAnnotations in compositions: Compositions can now propagate a set of common annotations to every composed resource, mirroring the existing commonLabels behavior. #​7211
    • crossplane beta validate now correctly resolves and caches dependencies that use semantic version ranges (e.g. ">=v0.6.0,<v1.0.0"), and adds an --update-cache flag to always check upstream for newer matching versions. #​7050
    • crossplane beta trace adds a YAML output format. #​7275
    • The XR circuit breaker now resets its state when the XR is deleted, so a new resource with the same name starts fresh instead of inheriting an open circuit. #​7201
    • CompositionRevision and composite reconcilers now skip no-op status updates, eliminating an unnecessary reconcile loop that prevented steady state convergence. #​7283
🏅 Release MVP

For the v2.3 release cycle, we'd like to recognize two amazing community members for their contributions and name them the v2.3 release MVPs! 🎉

  • @​yordis delivered one of this release's headline features in #​7239 as a first-time contributor to core Crossplane (but long time contributor to the Crossplane ecosystem 😉) : the per-resource reconciliation control. This work gives operators fine-grained control over when individual resources reconcile, and required coordinated changes across both the core composite reconciler and the managed reconciler in crossplane-runtime. Thank you @​yordis!
  • @​fernandezcuesta has had a sustained impact on the broader Crossplane ecosystem, contributing to and releasing a steady stream of community providers and extensions that expand what users can build on Crossplane, e.g. provider-kafka, provider-mongodbatlas, and provider-pagerduty. To top that off, they also landed new support in core Crossplane for commonAnnotations for compositions in #​7211. Thank you, @​fernandezcuesta!
What's Changed
New Contributors

Full Changelog: crossplane/crossplane@v2.2.0...v2.3.0

v2.2.2

Compare Source

v2.2.2 is a patch release scoped to fixing issues reported by users of Crossplane v2.2 and fixing security related issues in Crossplane's dependencies.

What's Changed

Full Changelog: crossplane/crossplane@v2.2.1...v2.2.2

v2.2.1

Compare Source

v2.2.1 is a patch release scoped to fixing issues reported by users of Crossplane v2.2 and fixing security related issues in Crossplane's dependencies.

🎉 Highlights

  • Dependency upgrades work correctly with ImageConfig prefix rewriting: Packages installed via an ImageConfig prefix rewrite were previously not being upgraded when their dependencies changed, leaving users stuck on stale versions of dependent packages. Dependency upgrades now behave as expected when prefix rewrites are in use. Backported in #​7277, originally fixed in #​7233.

  • Composition functions can now select all resources of a given kind: When a composition function returned a Requirements.ResourceSelector with only apiVersion and kind set (no matchName or matchLabels), Crossplane previously rejected this as an invalid request. A selector with no match field is now correctly interpreted as "all resources of that kind". Backported in #​7247, originally fixed in #​7241.

This release also bumps Go to 1.25.9 and pulls in security related updates for a number of Crossplane's upstream dependencies, including cosign, go-git, go-jose, cloudflare/circl, moby/spdystream, sigstore/timestamp-authority, docker/cli, and the OpenTelemetry OTLP HTTP trace exporter

What's Changed

Full Changelog: crossplane/crossplane@v2.2.0...v2.2.1

v2.2.0

Compare Source

The v2.2.0 release is a regular quarterly Crossplane release that is focused on maturing a number of key areas of functionality across the project, as Crossplane continues to become more capable, more reliable, and more performant for your production workloads. This release includes many fixes and reliability improvements, a new alpha feature for debugging (the pipeline inspector), and usability improvements.

ℹ️ Extended support for v1.20

Normally, the release of v2.2 would correspond with the end-of-life for v1.20. However, because v1.20 is the last minor release of the v1 series and major version upgrades require additional planning for users, v1.20 will continue to receive critical fixes. The final EOL date for v1.20 is to be determined.

⚠️ Upgrade from v2.1

It is strongly advised to upgrade to v2.2 from the previous minor version, which is v2.1. Upon upgrade for each minor release, Crossplane performs any necessary migrations of its CRDs to ensure the latest versions are stored in the Kubernetes API server. Therefore, it is important to upgrade sequentially through one minor version at a time as described in the upgrade docs.

🚨 Notable and Breaking Changes

  • Input CRDs included in Function packages are no longer installed by the package manager, following the xpkg specification. Unknown or disallowed resources in a package are now ignored instead of causing package installation to fail. See #​6976.
  • The on-disk structure of the package cache has changed. This breaks an undocumented behavior via which packages could be side-loaded into Crossplane, which was especially useful for testing. See #​6981 for details on the change and #​7147 for discussion of the test changes necessary to accommodate it.

🎉 Highlights

  • ImageConfig can now be used to configure the DeploymentRuntimeConfig used for packages, including those installed as dependencies. Note that a matching ImageConfig takes precedence over the runtimeConfigRef in a package spec if both are present. See #​6382.
  • The MRD controller now uses server-side apply to update CRDs, improving reliability. See #​6934.
  • The pipeline inspector is now available as an alpha feature (disabled by default). When enabled, the inspector forwards function requests and responses to a user-configured gRPC endpoint for debugging or observability. See #​7025 and #​7031.
  • XRDs can now configure x-kubernetes-validations outside of the spec. This allows for validation of metadata such as names and labels. See #​7018.
  • Composition and operation functions can now request OpenAPI schemas for any resource kind in the cluster using the RequiredSchemas field in the function response. Crossplane now advertises capabilities (including required schemas) to functions in a new function request field. See #​7022.
  • The crossplane beta trace CLI command now supports tracing all resources of a given kind, and supports watching resources. See #​6552 and #​7015.
  • New documentation has been added regarding connection details for composite resources and workload identity with Crossplane.

🏅 Release MVP

@​jonasz-lasut is the v2.2 release MVP! Their work driving enhancements, fixing bugs, and maintaining quality across Crossplane and its ecosystem is much appreciated by the Crossplane maintainers. Additionally, @​jonasz-lasut is an active participant on the Crossplane Slack instance, answering questions and providing guidance to many new and experienced members of the community. Thank you for your dedication, @​jonasz-lasut! 🎉

What's Changed

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot requested a review from a team as a code owner August 11, 2025 21:45
@renovate
Copy link
Copy Markdown
Contributor Author

renovate Bot commented Aug 11, 2025 •
edited
Loading

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 3 additional dependencies were updated

Details:

Package Change
dario.cat/mergo v1.0.1 -> v1.0.2
sigs.k8s.io/controller-runtime v0.20.4 -> v0.22.2
sigs.k8s.io/controller-tools v0.17.3 -> v0.18.0

@coveralls
Copy link
Copy Markdown

coveralls commented Aug 11, 2025 •
edited by github-actions Bot
Loading

Pull Request Test Coverage Report for Build 19130679485

Details

  • 0 of 0 changed or added relevant lines in 0 files are covered.
  • No unchanged relevant lines lost coverage.
  • Overall coverage remained the same at 66.587%
Totals Coverage Status
Change from base Build 19130629727: 0.0%
Covered Lines: 560
Relevant Lines: 841
💛 - Coveralls

@renovate renovate Bot force-pushed the renovate/github.com-crossplane-crossplane-2.x branch 3 times, most recently from 0a90fe5 to f4c65ce Compare August 17, 2025 06:28
@renovate renovate Bot force-pushed the renovate/github.com-crossplane-crossplane-2.x branch from f4c65ce to 4581fda Compare August 31, 2025 12:25
@renovate renovate Bot force-pushed the renovate/github.com-crossplane-crossplane-2.x branch from 4581fda to 73fbdef Compare September 14, 2025 08:10
@renovate renovate Bot force-pushed the renovate/github.com-crossplane-crossplane-2.x branch 2 times, most recently from aa7f806 to 26f7a94 Compare October 2, 2025 16:42
@renovate renovate Bot force-pushed the renovate/github.com-crossplane-crossplane-2.x branch 4 times, most recently from 9848fd0 to 55961ea Compare November 9, 2025 14:59
@renovate renovate Bot force-pushed the renovate/github.com-crossplane-crossplane-2.x branch 2 times, most recently from 014e4fc to 28eabdb Compare November 15, 2025 22:57
@renovate renovate Bot force-pushed the renovate/github.com-crossplane-crossplane-2.x branch 3 times, most recently from 6fe6f75 to 155d963 Compare December 5, 2025 02:38
@renovate renovate Bot force-pushed the renovate/github.com-crossplane-crossplane-2.x branch from 155d963 to b4b3b63 Compare December 5, 2025 06:38
@renovate renovate Bot force-pushed the renovate/github.com-crossplane-crossplane-2.x branch from b4b3b63 to c78ff0c Compare December 13, 2025 10:10
@renovate
Copy link
Copy Markdown
Contributor Author

renovate Bot commented Dec 13, 2025 •
edited
Loading

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 24 additional dependencies were updated

Details:

Package Change
k8s.io/utils v0.0.0-20251002143259-bc988d571ff4 -> v0.0.0-20260108192941-914a6e750570
dario.cat/mergo v1.0.1 -> v1.0.2
github.com/docker/docker-credential-helpers v0.9.3 -> v0.9.4
github.com/emicklei/go-restful/v3 v3.12.2 -> v3.13.0
github.com/go-openapi/jsonpointer v0.22.4 -> v0.22.5
github.com/go-openapi/jsonreference v0.21.4 -> v0.21.5
github.com/go-openapi/swag v0.25.4 -> v0.25.5
github.com/go-openapi/swag/cmdutils v0.25.4 -> v0.25.5
github.com/go-openapi/swag/conv v0.25.4 -> v0.25.5
github.com/go-openapi/swag/fileutils v0.25.4 -> v0.25.5
github.com/go-openapi/swag/jsonname v0.25.4 -> v0.25.5
github.com/go-openapi/swag/jsonutils v0.25.4 -> v0.25.5
github.com/go-openapi/swag/loading v0.25.4 -> v0.25.5
github.com/go-openapi/swag/mangling v0.25.4 -> v0.25.5
github.com/go-openapi/swag/netutils v0.25.4 -> v0.25.5
github.com/go-openapi/swag/stringutils v0.25.4 -> v0.25.5
github.com/go-openapi/swag/typeutils v0.25.4 -> v0.25.5
github.com/go-openapi/swag/yamlutils v0.25.4 -> v0.25.5
github.com/google/gnostic-models v0.7.0 -> v0.7.1
golang.org/x/time v0.14.0 -> v0.15.0
k8s.io/kube-openapi v0.0.0-20250910181357-589584f1c912 -> v0.0.0-20260127142750-a19766b6e2d4
sigs.k8s.io/controller-runtime v0.20.4 -> v0.23.1
sigs.k8s.io/controller-tools v0.17.3 -> v0.20.0
sigs.k8s.io/structured-merge-diff/v6 v6.3.0 -> v6.3.2-0.20260122202528-d9cc6641c482

@renovate renovate Bot force-pushed the renovate/github.com-crossplane-crossplane-2.x branch 2 times, most recently from 766fe8c to d24a6ed Compare February 3, 2026 20:46
@github-actions github-actions Bot added the size/L label Feb 3, 2026
@github-actions github-actions Bot removed the size/M label Feb 3, 2026
@renovate renovate Bot force-pushed the renovate/github.com-crossplane-crossplane-2.x branch from d24a6ed to ae2d707 Compare February 7, 2026 01:15
@github-actions github-actions Bot added size/M and removed size/L labels Feb 7, 2026
@renovate renovate Bot force-pushed the renovate/github.com-crossplane-crossplane-2.x branch 2 times, most recently from 4d60477 to 3ac815f Compare February 14, 2026 04:34
@renovate renovate Bot force-pushed the renovate/github.com-crossplane-crossplane-2.x branch from 3ac815f to 118d06b Compare February 20, 2026 22:10
@github-actions github-actions Bot added size/L and removed size/M labels Feb 20, 2026
@renovate renovate Bot force-pushed the renovate/github.com-crossplane-crossplane-2.x branch from 118d06b to f3061c3 Compare March 4, 2026 22:17
@renovate renovate Bot force-pushed the renovate/github.com-crossplane-crossplane-2.x branch 2 times, most recently from 564fa7a to 9ce7166 Compare April 9, 2026 15:12
@renovate renovate Bot force-pushed the renovate/github.com-crossplane-crossplane-2.x branch from 9ce7166 to e1988fe Compare April 23, 2026 13:08
@renovate renovate Bot force-pushed the renovate/github.com-crossplane-crossplane-2.x branch 2 times, most recently from 3257c52 to 9d214fa Compare May 22, 2026 01:39
@renovate renovate Bot force-pushed the renovate/github.com-crossplane-crossplane-2.x branch from 9d214fa to f1daa2f Compare May 24, 2026 16:46
@renovate
Copy link
Copy Markdown
Contributor Author

renovate Bot commented May 24, 2026 •
edited
Loading

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum
Command failed: go mod tidy
go: downloading github.com/crossplane/crossplane/v2 v2.3.1
go: downloading github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2
go: downloading github.com/onsi/gomega v1.38.3
go: downloading github.com/go-openapi/testify/v2 v2.4.0
go: downloading github.com/prometheus/common v0.67.5
go: downloading github.com/prometheus/procfs v0.19.2
go: downloading github.com/go-openapi/swag/jsonutils/fixtures_test v0.25.5
go: downloading github.com/go-openapi/testify/enable/yaml/v2 v2.4.0
go: finding module for package github.com/crossplane/crossplane/v2/apis/apiextensions/v1
go: finding module for package github.com/crossplane/crossplane/v2/apis/pkg/v1
go: github.com/doodlescheduling/xunpack imports
	github.com/crossplane/crossplane/v2/apis/apiextensions/v1: module github.com/crossplane/crossplane/v2@latest found (v2.3.1), but does not contain package github.com/crossplane/crossplane/v2/apis/apiextensions/v1
go: github.com/doodlescheduling/xunpack imports
	github.com/crossplane/crossplane/v2/apis/pkg/v1: module github.com/crossplane/crossplane/v2@latest found (v2.3.1), but does not contain package github.com/crossplane/crossplane/v2/apis/pkg/v1

@github-actions github-actions Bot added size/XS and removed size/L labels May 24, 2026
@renovate renovate Bot force-pushed the renovate/github.com-crossplane-crossplane-2.x branch from f1daa2f to 295724e Compare May 25, 2026 22:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies gomod size/XS

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@coveralls