Skip to content

fix(deps): update module github.com/crossplane/crossplane-runtime/v2 to v2.4.0 - #389

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/github.com-crossplane-crossplane-runtime-v2-2.x
Open

fix(deps): update module github.com/crossplane/crossplane-runtime/v2 to v2.4.0#389
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/github.com-crossplane-crossplane-runtime-v2-2.x

Conversation

@renovate

@renovate renovate Bot commented Apr 20, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
github.com/crossplane/crossplane-runtime/v2 v2.2.0 → v2.4.0 age confidence

Release Notes

crossplane/crossplane-runtime (github.com/crossplane/crossplane-runtime/v2)

v2.4.0

Compare Source

The v2.4.0 release of crossplane-runtime is a regular quarterly release that accompanies Crossplane v2.4. It brings memory and reconciliation improvements for provider authors, along with security fixes in the library's dependencies.

🎉 Highlights

  • Strip CRD schemas from the informer cache: Providers that support "safe-start" cache every CRD in the cluster, including its full OpenAPI v3 validation schema. On clusters with a lot of CRDs this can cause excessive memory usage by the provider pod and lead to OOMKilled restarts. The new TransformStripCRDSchema drops non critical fields from the cached CRDs and helps providers drastically reduce their memory consumption. Added in #​1058, fixing #​1056.

    • Providers opt in by wiring it into their manager's cache options:

      cache.Options{
    ByObject: map[client.Object]cache.ByObject{
        &apiextensionsv1.CustomResourceDefinition{}: {
            Transform: customresourcesgate.TransformStripCRDSchema,
        },
    },
}

    • Measured against a cluster with 2,045 Upjet AWS CRDs, provider memory usage dropped from ~630 MiB to ~83 MiB.

What's Changed

New Contributors

Full Changelog: crossplane/crossplane-runtime@v2.3.0...v2.4.0

v2.3.4

Compare Source

What's Changed

Full Changelog: crossplane/crossplane-runtime@v2.3.3...v2.3.4

v2.3.3

Compare Source

🎉 Highlights

  • Fixed package signature verification TOCTOU (GHSA-mf7q-r4rv-jv94): A time-of-check-to-time-of-use flaw would let a malicious OCI registry serve a correctly signed image for verification and then an unsigned image for installation, because Crossplane resolved tag references separately for each step. Crossplane now resolves a tag to a digest once and uses that same digest for both signature verification and the image pull, so the content that is verified is exactly the content that is installed. This affected only users who enable package signature verification, install packages by tag, and pull from registries they don't control. Installing by digest would avoid this issue. Backported in #​1038, and reported independently by @​bugbunny-research and @​tonghuaroot.
    • Note this fix appears in crossplane for v2.2 and crossplane-runtime for v2.3 because the affected code was moved from crossplane to crossplane-runtime during the v2.3 milestone.

What's Changed

Full Changelog: crossplane/crossplane-runtime@v2.3.2...v2.3.3

v2.3.2

Compare Source

What's Changed

Full Changelog: crossplane/crossplane-runtime@v2.3.1...v2.3.2

v2.3.1

Compare Source

What's Changed

Full Changelog: crossplane/crossplane-runtime@v2.3.0...v2.3.1

v2.3.0

Compare Source

🚨 Notable and Breaking Changes

  • The common APIs from crossplane-runtime have moved to github.com/crossplane/crossplane/apis/v2/core

What's Changed

New Contributors

Full Changelog: crossplane/crossplane-runtime@v2.2.0...v2.3.0

v2.2.4

Compare Source

What's Changed

Full Changelog: crossplane/crossplane-runtime@v2.2.3...v2.2.4

v2.2.3

Compare Source

What's Changed

Full Changelog: crossplane/crossplane-runtime@v2.2.2...v2.2.3

v2.2.2

Compare Source

What's Changed

Full Changelog: crossplane/crossplane-runtime@v2.2.1...v2.2.2

v2.2.1

Compare Source

What's Changed

Full Changelog: crossplane/crossplane-runtime@v2.2.0...v2.2.1

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate

renovate Bot commented Apr 20, 2026

Copy link
Copy Markdown
Contributor Author

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 5 additional dependencies were updated
  • The go directive was updated for compatibility reasons

Details:

Package Change
go 1.25.8 -> 1.25.9
github.com/cncf/xds/go v0.0.0-20251022180443-0feb69152e9f -> v0.0.0-20251210132809-ee656c7534f5
github.com/envoyproxy/go-control-plane/envoy v1.35.0 -> v1.36.0
github.com/envoyproxy/protoc-gen-validate v1.2.1 -> v1.3.0
go.opentelemetry.io/contrib/detectors/gcp v1.38.0 -> v1.39.0
google.golang.org/grpc v1.78.0 -> v1.79.3

@renovate
renovate Bot force-pushed the renovate/github.com-crossplane-crossplane-runtime-v2-2.x branch from df01a79 to dad3ba6 Compare April 29, 2026 09:32
@renovate renovate Bot changed the title fix(deps): update module github.com/crossplane/crossplane-runtime/v2 to v2.2.1 fix(deps): update module github.com/crossplane/crossplane-runtime/v2 to v2.2.1 - autoclosed May 11, 2026
@renovate renovate Bot closed this May 11, 2026
@renovate
renovate Bot deleted the renovate/github.com-crossplane-crossplane-runtime-v2-2.x branch May 11, 2026 10:09
@renovate renovate Bot changed the title fix(deps): update module github.com/crossplane/crossplane-runtime/v2 to v2.2.1 - autoclosed fix(deps): update module github.com/crossplane/crossplane-runtime/v2 to v2.2.1 May 11, 2026
@renovate renovate Bot reopened this May 11, 2026
@renovate
renovate Bot force-pushed the renovate/github.com-crossplane-crossplane-runtime-v2-2.x branch 2 times, most recently from dad3ba6 to 529fad0 Compare May 11, 2026 15:41
@renovate renovate Bot changed the title fix(deps): update module github.com/crossplane/crossplane-runtime/v2 to v2.2.1 fix(deps): update module github.com/crossplane/crossplane-runtime/v2 to v2.2.1 - autoclosed May 20, 2026
@renovate renovate Bot closed this May 20, 2026
@renovate renovate Bot changed the title fix(deps): update module github.com/crossplane/crossplane-runtime/v2 to v2.2.1 - autoclosed fix(deps): update module github.com/crossplane/crossplane-runtime/v2 to v2.2.1 May 21, 2026
@renovate renovate Bot reopened this May 21, 2026
@renovate
renovate Bot force-pushed the renovate/github.com-crossplane-crossplane-runtime-v2-2.x branch 2 times, most recently from 78aa9b5 to 6e55f0b Compare May 21, 2026 17:15
@renovate renovate Bot changed the title fix(deps): update module github.com/crossplane/crossplane-runtime/v2 to v2.2.1 fix(deps): update module github.com/crossplane/crossplane-runtime/v2 to v2.3.0 May 21, 2026
@renovate

renovate Bot commented May 21, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor Author

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum
Command failed: go get -t ./...
go: downloading github.com/crossplane/crossplane-runtime/v2 v2.4.0
go: downloading golang.org/x/mod v0.40.0
go: downloading github.com/crossplane/crossplane/apis/v2 v2.3.4
go: downloading go.uber.org/zap v1.28.0
go: downloading golang.org/x/net v0.58.0
go: downloading golang.org/x/tools v0.49.0
go: downloading github.com/go-openapi/analysis v0.25.2
go: downloading github.com/go-openapi/errors v0.22.7
go: downloading github.com/go-openapi/loads v0.23.3
go: downloading github.com/go-openapi/spec v0.22.5
go: downloading github.com/go-openapi/strfmt v0.26.3
go: downloading github.com/go-openapi/validate v0.25.3
go: downloading github.com/sirupsen/logrus v1.9.4
go: downloading github.com/aws/aws-sdk-go-v2 v1.41.7
go: downloading github.com/aws/aws-sdk-go-v2/config v1.32.17
go: downloading github.com/aws/aws-sdk-go-v2/credentials v1.19.16
go: downloading github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.23
go: downloading github.com/klauspost/compress v1.18.7
go: downloading github.com/go-openapi/jsonreference v0.21.6
go: downloading github.com/go-viper/mapstructure/v2 v2.5.0
go: downloading github.com/oklog/ulid/v2 v2.1.1
go: downloading github.com/aws/smithy-go v1.25.1
go: downloading github.com/aws/aws-sdk-go-v2/service/signin v1.0.11
go: downloading github.com/aws/aws-sdk-go-v2/service/sso v1.30.17
go: downloading github.com/aws/aws-sdk-go-v2/service/ssooidc v1.35.21
go: downloading github.com/aws/aws-sdk-go-v2/service/sts v1.42.1
go: downloading github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.23
go: downloading github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.24
go: downloading github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.9
go: downloading github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.23
go: downloading golang.org/x/text v0.41.0
go: downloading github.com/google/cel-go v0.30.0
go: downloading golang.org/x/crypto v0.55.0
go: downloading github.com/docker/docker-credential-helpers v0.9.5
go: downloading github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.23
go: downloading github.com/crossplane/crossplane-runtime v1.20.10
go: github.com/crossplane-contrib/function-kcl/pkg/resource imports
	github.com/crossplane/crossplane-runtime/v2/apis/common/v1: cannot find module providing package github.com/crossplane/crossplane-runtime/v2/apis/common/v1

@renovate
renovate Bot force-pushed the renovate/github.com-crossplane-crossplane-runtime-v2-2.x branch from 6e55f0b to dda08b9 Compare May 22, 2026 21:28
@renovate renovate Bot changed the title fix(deps): update module github.com/crossplane/crossplane-runtime/v2 to v2.3.0 fix(deps): update module github.com/crossplane/crossplane-runtime/v2 to v2.3.1 May 22, 2026
@renovate renovate Bot changed the title fix(deps): update module github.com/crossplane/crossplane-runtime/v2 to v2.3.1 fix(deps): update module github.com/crossplane/crossplane-runtime/v2 to v2.3.1 - autoclosed Jun 4, 2026
@renovate renovate Bot closed this Jun 4, 2026
@renovate renovate Bot changed the title fix(deps): update module github.com/crossplane/crossplane-runtime/v2 to v2.3.1 - autoclosed fix(deps): update module github.com/crossplane/crossplane-runtime/v2 to v2.3.1 Jun 4, 2026
@renovate renovate Bot reopened this Jun 4, 2026
@renovate
renovate Bot force-pushed the renovate/github.com-crossplane-crossplane-runtime-v2-2.x branch 3 times, most recently from 4a64346 to 6816131 Compare June 9, 2026 01:59
@renovate renovate Bot changed the title fix(deps): update module github.com/crossplane/crossplane-runtime/v2 to v2.3.1 fix(deps): update module github.com/crossplane/crossplane-runtime/v2 to v2.3.2 Jun 9, 2026
@renovate
renovate Bot force-pushed the renovate/github.com-crossplane-crossplane-runtime-v2-2.x branch from 6816131 to 62a33f3 Compare June 22, 2026 18:48
@renovate renovate Bot changed the title fix(deps): update module github.com/crossplane/crossplane-runtime/v2 to v2.3.2 fix(deps): update module github.com/crossplane/crossplane-runtime/v2 to v2.3.3 Jun 22, 2026
@renovate
renovate Bot force-pushed the renovate/github.com-crossplane-crossplane-runtime-v2-2.x branch from 62a33f3 to 1a3025c Compare July 12, 2026 18:59
@renovate
renovate Bot force-pushed the renovate/github.com-crossplane-crossplane-runtime-v2-2.x branch 3 times, most recently from ce7ea1d to c62a393 Compare July 22, 2026 11:36
@renovate renovate Bot changed the title fix(deps): update module github.com/crossplane/crossplane-runtime/v2 to v2.3.3 fix(deps): update module github.com/crossplane/crossplane-runtime/v2 to v2.3.3 - autoclosed Jul 29, 2026
@renovate renovate Bot closed this Jul 29, 2026
@renovate renovate Bot changed the title fix(deps): update module github.com/crossplane/crossplane-runtime/v2 to v2.3.3 - autoclosed fix(deps): update module github.com/crossplane/crossplane-runtime/v2 to v2.3.3 Jul 29, 2026
@renovate renovate Bot reopened this Jul 29, 2026
@renovate
renovate Bot force-pushed the renovate/github.com-crossplane-crossplane-runtime-v2-2.x branch 2 times, most recently from c62a393 to 21523de Compare July 29, 2026 13:13
@renovate
renovate Bot force-pushed the renovate/github.com-crossplane-crossplane-runtime-v2-2.x branch 3 times, most recently from a73b2d7 to 9fb9773 Compare August 14, 2026 16:59
@renovate
renovate Bot force-pushed the renovate/github.com-crossplane-crossplane-runtime-v2-2.x branch from 9fb9773 to 5fe7017 Compare August 19, 2026 22:37
@renovate renovate Bot changed the title fix(deps): update module github.com/crossplane/crossplane-runtime/v2 to v2.3.3 fix(deps): update module github.com/crossplane/crossplane-runtime/v2 to v2.4.0 Aug 19, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants