Skip to content

chore(deps): update module github.com/crossplane/crossplane/v2 to v2.3.2#311

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/github.com-crossplane-crossplane-v2-2.x
Open

chore(deps): update module github.com/crossplane/crossplane/v2 to v2.3.2#311
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/github.com-crossplane-crossplane-v2-2.x

Conversation

@renovate

@renovate renovate Bot commented May 23, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change OpenSSF
github.com/crossplane/crossplane/v2 replace minor v2.2.1 → v2.3.2 OpenSSF Scorecard

Release Notes

crossplane/crossplane (github.com/crossplane/crossplane/v2)

v2.3.2

Compare Source

v2.3.2 is a patch release scoped to fixing issues reported by users of Crossplane v2.3 and fixing security related issues in Crossplane's dependencies. The primary goal of this release is to fix regressions in the Crossplane CLI's render commands.

What's Changed

Full Changelog: crossplane/crossplane@v2.3.1...v2.3.2

v2.3.1

Compare Source

v2.3.1 is a patch release scoped to fixing issues reported by users of Crossplane v2.3 and fixing security related issues in Crossplane's dependencies.

What's Changed

Full Changelog: crossplane/crossplane@v2.3.0...v2.3.1

v2.3.0

Compare Source

The v2.3.0 release is a regular quarterly Crossplane release that is focused on maturing a number of key areas of functionality across the project, as Crossplane continues to become more capable, more reliable, and more performant for your production workloads. This release includes a new high-fidelity local rendering engine, finer-grained reconciliation control for both XRs and managed resources, new alpha deletion protection for Provider packages, and a wide range of fixes and reliability improvements. It also includes security fixes in Crossplane's Go toolchain and dependencies.

ℹ️ Extended support for v1.20

Because v1.20 is the last minor release of the v1 series and major version upgrades require additional planning for users, v1.20 will continue to receive critical fixes. The final EOL date for v1.20 is to be determined.

⚠️ Upgrade from v2.2

It is strongly advised to upgrade to v2.3 from the previous minor version, which is v2.2. Upon upgrade for each minor release, Crossplane performs any necessary migrations of its CRDs to ensure the latest versions are stored in the Kubernetes API server. Therefore, it is important to upgrade sequentially through one minor version at a time as described in the upgrade docs.

🚨 Notable and Breaking Changes
  • github.com/crossplane/crossplane/apis/v2 is now a separate Go module from the rest of Crossplane. #​7019
    • External consumers of Crossplane APIs should update their dependencies from github.com/crossplane/crossplane/v2/apis to github.com/crossplane/crossplane/apis/v2.
    • The common APIs from crossplane-runtime have moved to github.com/crossplane/crossplane/apis/v2/core.
    • v1 and v2 of the common APIs have been collapsed into a single v2 package. The old v1.Resource* types are now v2.ClusterManagedResource* to differentiate them from v2.ManagedResource*, which are the namespaced versions.
  • The Crossplane CLI (formerly crank) has moved into its own repository, https://github.com/crossplane/cli, and will be released separately from Crossplane core going forward. #​7355
    • A v2.3.0 release of the CLI coincides with this Crossplane core v2.3.0 release and has been dual published to the typical release location on releases.crossplane.io to help ease the transition. After the v2.3.0 release, version numbers and release schedules will diverge as the Crossplane CLI will have its own independent release schedule. Learn more and provide feedback in #​7350.
    • Commands have been re-organized into a noun-first tree.
    • Alpha and beta commands that previously lived in the crossplane alpha and crossplane beta trees have moved into the main tree.
    • Example: crossplane beta trace is now crossplane resource trace
    • See full release CLI notes (including full details on these breaking changes): https://github.com/crossplane/cli/releases/tag/v2.3.0
🎉 Highlights
  • High-fidelity render engine: crossplane render now drives the real composite reconciler via a new hidden crossplane internal render subcommand, instead of maintaining a parallel reimplementation. The output of crossplane render (and downstream tools like crossplane-diff) now matches what would actually happen in-cluster, eliminating differences between local rendering and real reconciliation. By default it pulls the Crossplane container image to run the reconcile, so a separate controller binary is not required. See #​7280 and #​7339.
  • Provider deletion protection: A new alpha feature automatically protects Provider packages from accidental deletion while instances of their managed resources still exist. When --enable-provider-deletion-protection is set, Crossplane will automatically create ClusterUsage resources that block Provider deletion through the existing Usage webhook. #​7362
  • Per-resource reconciliation control: Two new annotations give users fine-grained control over when individual resources reconcile. crossplane.io/poll-interval overrides the controller-level poll interval for a specific resource (e.g. "24h", "30m"), and crossplane.io/reconcile-requested-at triggers an immediate reconciliation when its value changes. This works immediately for XRs, but requires providers to release a new version based on crossplane-runtime v.2.3.0 to gain this behavior for their managed resources #​7239
  • Composition functions can now select all resources of a given kind: When a composition function returned a Requirements.ResourceSelector with only apiVersion and kind set (no matchName or matchLabels), Crossplane previously rejected this as an invalid request. A selector with no match field is now correctly interpreted as "all resources of that kind". #​7241
  • Scale subresource for XRs: CompositeResourceDefinition can now configure the scale subresource on the XRs it defines, so composite resources can be scaled with kubectl scale and other standard tooling. #​7004
  • Other notable improvements:
    • Improved docker network configuration support for crank render: A new render.crossplane.io/runtime-docker-network annotation on Function resources tells the Docker runtime which network function containers should join. This makes crossplane render work inside container jobs (such as GitHub Actions container jobs) where the default bridge network is unreachable from the caller. #​7216
    • commonAnnotations in compositions: Compositions can now propagate a set of common annotations to every composed resource, mirroring the existing commonLabels behavior. #​7211
    • crossplane beta validate now correctly resolves and caches dependencies that use semantic version ranges (e.g. ">=v0.6.0,<v1.0.0"), and adds an --update-cache flag to always check upstream for newer matching versions. #​7050
    • crossplane beta trace adds a YAML output format. #​7275
    • The XR circuit breaker now resets its state when the XR is deleted, so a new resource with the same name starts fresh instead of inheriting an open circuit. #​7201
    • CompositionRevision and composite reconcilers now skip no-op status updates, eliminating an unnecessary reconcile loop that prevented steady state convergence. #​7283
🏅 Release MVP

For the v2.3 release cycle, we'd like to recognize two amazing community members for their contributions and name them the v2.3 release MVPs! 🎉

  • @​yordis delivered one of this release's headline features in #​7239 as a first-time contributor to core Crossplane (but long time contributor to the Crossplane ecosystem 😉) : the per-resource reconciliation control. This work gives operators fine-grained control over when individual resources reconcile, and required coordinated changes across both the core composite reconciler and the managed reconciler in crossplane-runtime. Thank you @​yordis!
  • @​fernandezcuesta has had a sustained impact on the broader Crossplane ecosystem, contributing to and releasing a steady stream of community providers and extensions that expand what users can build on Crossplane, e.g. provider-kafka, provider-mongodbatlas, and provider-pagerduty. To top that off, they also landed new support in core Crossplane for commonAnnotations for compositions in #​7211. Thank you, @​fernandezcuesta!
What's Changed
New Contributors

Full Changelog: crossplane/crossplane@v2.2.0...v2.3.0

v2.2.2

Compare Source

v2.2.2 is a patch release scoped to fixing issues reported by users of Crossplane v2.2 and fixing security related issues in Crossplane's dependencies.

What's Changed

Full Changelog: crossplane/crossplane@v2.2.1...v2.2.2

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate

renovate Bot commented May 23, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor Author

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum
Command failed: go get -t ./...
go: downloading github.com/openmcp-project/control-plane-operator v0.1.19
go: downloading github.com/openmcp-project/controller-utils v0.27.1
go: downloading github.com/openmcp-project/landscaper-service v1.2.0
go: downloading github.com/openmcp-project/openmcp-operator/api v0.19.1
go: downloading github.com/openmcp-project/service-provider-landscaper v0.18.0
go: downloading github.com/spf13/cobra v1.10.2
go: downloading github.com/spf13/pflag v1.0.10
go: downloading k8s.io/api v0.35.4
go: downloading k8s.io/apimachinery v0.35.4
go: downloading k8s.io/client-go v0.35.4
go: downloading k8s.io/utils v0.0.0-20260319190234-28399d86e0b5
go: downloading sigs.k8s.io/controller-runtime v0.23.3
go: downloading sigs.k8s.io/yaml v1.6.0
go: downloading gopkg.in/yaml.v3 v3.0.1
go: downloading k8s.io/apiextensions-apiserver v0.35.4
go: downloading github.com/onsi/ginkgo/v2 v2.28.3
go: downloading github.com/onsi/gomega v1.40.0
go: downloading github.com/openmcp-project/cluster-provider-gardener/api v0.12.0
go: downloading github.com/openmcp-project/openmcp-operator/lib v0.19.1
go: downloading github.com/Masterminds/semver/v3 v3.5.0
go: downloading github.com/apparentlymart/go-cidr v1.1.1
go: downloading github.com/stretchr/testify v1.11.1
go: downloading github.com/alitto/pond/v2 v2.7.1
go: downloading github.com/crossplane/crossplane/v2 v2.3.2
go: downloading github.com/google/uuid v1.6.0
go: downloading github.com/go-logr/logr v1.4.3
go: downloading github.com/go-logr/zapr v1.3.0
go: downloading go.uber.org/zap v1.27.1
go: downloading github.com/inconshreveable/mousetrap v1.1.0
go: downloading k8s.io/klog/v2 v2.130.1
go: downloading k8s.io/kube-openapi v0.0.0-20260414162039-ec9c827d403f
go: downloading sigs.k8s.io/structured-merge-diff/v6 v6.3.2
go: downloading github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822
go: downloading golang.org/x/net v0.55.0
go: downloading github.com/evanphx/json-patch/v5 v5.9.11
go: downloading github.com/prometheus/client_golang v1.23.2
go: downloading go.yaml.in/yaml/v2 v2.4.3
go: downloading sigs.k8s.io/randfill v1.0.0
go: downloading github.com/google/go-cmp v0.7.0
go: downloading github.com/gardener/gardener/pkg/apis v1.138.0
go: downloading github.com/openmcp-project/controller-utils/api v0.27.1
go: downloading golang.org/x/term v0.43.0
go: downloading gopkg.in/evanphx/json-patch.v4 v4.13.0
go: downloading github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc
go: downloading github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2
go: downloading github.com/openmcp-project/landscaper/apis v1.2.0
go: downloading golang.org/x/exp v0.0.0-20260410095643-746e56fc9e2f
go: downloading go.uber.org/multierr v1.11.0
go: downloading gomodules.xyz/jsonpatch/v2 v2.5.0
go: downloading sigs.k8s.io/json v0.0.0-20250730193827-2d320260d730
go: downloading github.com/json-iterator/go v1.1.13-0.20220915233716-71ac16282d12
go: downloading golang.org/x/oauth2 v0.36.0
go: downloading github.com/fxamacker/cbor/v2 v2.9.0
go: downloading golang.org/x/time v0.15.0
go: downloading github.com/prometheus/client_model v0.6.2
go: downloading github.com/prometheus/common v0.67.5
go: downloading github.com/fsnotify/fsnotify v1.9.0
go: downloading gopkg.in/inf.v0 v0.9.1
go: downloading golang.org/x/sys v0.45.0
go: downloading go.yaml.in/yaml/v3 v3.0.4
go: downloading github.com/fluxcd/pkg/apis/kustomize v1.14.0
go: downloading github.com/google/btree v1.1.3
go: downloading github.com/google/gnostic-models v0.7.1
go: downloading google.golang.org/protobuf v1.36.11
go: downloading github.com/openmcp-project/landscaper/legacy-component-spec/bindings-go v1.2.0
go: downloading github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd
go: downloading github.com/modern-go/reflect2 v1.0.3-0.20250322232337-35a7c28c31ee
go: downloading golang.org/x/text v0.37.0
go: downloading github.com/x448/float16 v0.8.4
go: downloading github.com/go-openapi/jsonreference v0.21.5
go: downloading github.com/go-openapi/swag v0.25.5
go: downloading github.com/beorn7/perks v1.0.1
go: downloading github.com/cespare/xxhash/v2 v2.3.0
go: downloading github.com/prometheus/procfs v0.19.2
go: downloading github.com/go-task/slim-sprig/v3 v3.0.0
go: downloading golang.org/x/tools v0.44.0
go: downloading golang.org/x/sync v0.20.0
go: downloading github.com/go-openapi/jsonpointer v0.22.5
go: downloading github.com/go-openapi/swag/cmdutils v0.25.5
go: downloading github.com/go-openapi/swag/conv v0.25.5
go: downloading github.com/go-openapi/swag/fileutils v0.25.5
go: downloading github.com/go-openapi/swag/jsonname v0.25.5
go: downloading github.com/go-openapi/swag/jsonutils v0.25.5
go: downloading github.com/go-openapi/swag/loading v0.25.5
go: downloading github.com/go-openapi/swag/mangling v0.25.5
go: downloading github.com/go-openapi/swag/netutils v0.25.5
go: downloading github.com/go-openapi/swag/stringutils v0.25.5
go: downloading github.com/go-openapi/swag/typeutils v0.25.5
go: downloading github.com/go-openapi/swag/yamlutils v0.25.5
go: downloading github.com/google/pprof v0.0.0-20260402051712-545e8a4df936
go: downloading github.com/xeipuuv/gojsonschema v1.2.0
go: downloading golang.org/x/mod v0.35.0
go: downloading github.com/emicklei/go-restful/v3 v3.13.0
go: downloading github.com/xeipuuv/gojsonreference v0.0.0-20180127040603-bd5ef7bd5415
go: downloading github.com/xeipuuv/gojsonpointer v0.0.0-20190905194746-02993c407bfb
go: github.com/openmcp-project/mcp-operator/cmd/mcp-operator/app imports
	github.com/openmcp-project/control-plane-operator/api/v1beta1 imports
	github.com/crossplane/crossplane/apis/pkg/v1: cannot find module providing package github.com/crossplane/crossplane/apis/pkg/v1

@renovate renovate Bot force-pushed the renovate/github.com-crossplane-crossplane-v2-2.x branch from 3c1ae3f to 3a37618 Compare May 28, 2026 07:39
@renovate renovate Bot force-pushed the renovate/github.com-crossplane-crossplane-v2-2.x branch from 3a37618 to 08eb2b3 Compare June 9, 2026 17:16
@renovate renovate Bot changed the title chore(deps): update module github.com/crossplane/crossplane/v2 to v2.3.1 chore(deps): update module github.com/crossplane/crossplane/v2 to v2.3.2 Jun 9, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants