Summary

This release includes security fixes and dependency updates.

Highlights

• Security: Remediated multiple CVE vulnerabilities in Go dependencies
  • Updated Go to 1.25.12 (fixes GO-2026-5856, GO-2026-4970)
  • Updated golang.org/x/text to v0.39.0 (fixes GO-2026-5970)
  • Updated golang.org/x/net to v0.56.0 (fixes GO-2026-5942)
  • Updated google.golang.org/grpc to v1.82.1 (fixes GHSA-hrxh-6v49-42gf)
• Testing: Resolved composition test failures by updating test expectations for Deployment and Service resources

Summary

This release includes security fixes and dependency updates.

Highlights

• Security vulnerability remediation: Updated Go to 1.25.11 and multiple Go dependencies to address CVE vulnerabilities
• Go compiler updates: Fixed CVE-2026-42504, CVE-2026-42507, and CVE-2026-27145
• Dependency updates:
  • golang.org/x/crypto to v0.52.0 (addresses multiple security vulnerabilities)
  • golang.org/x/net to v0.55.0 (addresses multiple security vulnerabilities)
  • golang.org/x/sys to v0.45.0 (fixes GO-2026-5024)
• CI improvements: Updated workflow to use Go 1.25.11

Summary

This release includes security fixes, dependency updates, and CI improvements.

Highlights

• Security vulnerability remediation for Go dependencies (updated to Go 1.25.10)
• Addressed multiple CVE vulnerabilities: CVE-2026-39820, CVE-2026-42499, CVE-2026-39836, CVE-2026-33814, CVE-2026-33811, CVE-2026-42501, CVE-2026-39817, CVE-2026-39826, CVE-2026-39825, CVE-2026-39823, CVE-2026-39819
• Updated Crossplane CLI configuration to use stable channel with version v2.3.0
• Fixed CI pipeline issues related to Crossplane CLI installation

Summary

This release includes critical security fixes for multiple CVE vulnerabilities.

Security Updates

• Updated Go runtime to version 1.25.9
• Remediated 7 CVE vulnerabilities (CVE-2026-27140, CVE-2026-32283, CVE-2026-32280, CVE-2026-32281, CVE-2026-32289, CVE-2026-32282, CVE-2026-32288)

This patch release focuses exclusively on security vulnerability remediation and includes no functional changes.

Summary

This release includes security fixes for critical CVE vulnerabilities in Go dependencies.

Highlights

• Security vulnerability remediation for Go runtime
• Updated Go to version 1.25.9 to address multiple CVEs:
  • CVE-2026-27140
  • CVE-2026-32283
  • CVE-2026-32280
  • CVE-2026-32281
  • CVE-2026-32289
  • CVE-2026-32282
  • CVE-2026-32288

Summary

This release includes security fixes and dependency updates.

Highlights

• Security vulnerability remediation: Updated Go to 1.25.8 to address CVE-2026-25679, CVE-2026-27142, and CVE-2026-27139
• Dependency updates: Updated google.golang.org/grpc to v1.79.3 (fixes GHSA-p77j-4mvh-x3m3) and github.com/buger/jsonparser to v1.1.2 (fixes GHSA-6g7g-w4f8-9c9x)
• CI improvements: Upgraded golangci-lint to v2.11.4 with updated configuration for Go 1.25.8 compatibility

Summary

This release includes critical security fixes and dependency updates.

Highlights

• Security vulnerability remediation for Go runtime and dependencies
  • Updated Go to version 1.25.8 (fixes CVE-2026-25679, CVE-2026-27142, CVE-2026-27139)
  • Updated google.golang.org/grpc to v1.79.3 (fixes GHSA-p77j-4mvh-x3m3)
  • Updated github.com/buger/jsonparser to v1.1.2 (fixes GHSA-6g7g-w4f8-9c9x)
• CI/CD improvements
  • Upgraded golangci-lint to v2.11.4 for Go 1.25 compatibility
  • Updated golangci-lint configuration to v2.x format
  • Updated CI workflow Go version to 1.25.8

Summary

This release includes security fixes and dependency updates.

Highlights

• Security vulnerability remediation addressing CVE-2025-68121 and CVE-2025-61732
• Updated Go version to 1.24.13

Summary

This release includes security fixes and CI improvements.

Highlights

• Security vulnerability remediation: Updated Go version to 1.24.13 to address CVE-2025-68121 and CVE-2025-61732
• CI workflow updates to ensure consistent Go version across build and runtime environments

Summary

This release includes critical security fixes.

Highlights

• Security vulnerability remediation: Updated Go version to 1.24.12 to address multiple CVEs:
  • CVE-2025-61726
  • CVE-2025-61728
  • CVE-2025-61730
  • CVE-2025-61731
• Updated CI configuration to match the new Go version