Update module github.com/crossplane/crossplane/apis/v2 to v2.3.3#322
Open
renovate[bot] wants to merge 1 commit into
Open
Update module github.com/crossplane/crossplane/apis/v2 to v2.3.3#322renovate[bot] wants to merge 1 commit into
renovate[bot] wants to merge 1 commit into
Conversation
Contributor
Author
ℹ️ Artifact update noticeFile name: go.modIn order to perform the update(s) described in the table above, Renovate ran the
Details:
|
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v2.3.1→v2.3.3Release Notes
crossplane/crossplane (github.com/crossplane/crossplane/apis/v2)
v2.3.3Compare Source
v2.3.3is a patch release scoped to fixing issues reported by users of Crossplanev2.3and fixing security related issues in Crossplane's dependencies.🎉 Highlights
GHSA-mf7q-r4rv-jv94): A time-of-check-to-time-of-use flaw could let a malicious OCI registry pass signature verification with a signed image and then serve unsigned content for installation. Forv2.3this fix ships via the crossplane-runtimev2.3.3bump in #7541, since the affected code moved fromcrossplanetocrossplane-runtimeduring thev2.3milestone. See the crossplane-runtimev2.3.3release notes for the full details.crossplane render:crossplane renderpreviously set a namespace on every injected resource reference, which is inaccurate for namespaced XRs (whose resource refs are local and carry no namespace) and broke composition functions with strict schemas, such as the generated KCL bindings used in control plane projects. Render now matches the real reconciler and sets the namespace only for cluster-scoped XRs. Backported in #7525, originally fixed in #7523.1.25.11andgolang.org/x/netandgolang.org/x/sysin theapismodule to pick up CVE fixes (#7530). See## What's Changedbelow for the full list.What's Changed
Full Changelog: crossplane/crossplane@v2.3.2...v2.3.3
v2.3.2Compare Source
v2.3.2 is a patch release scoped to fixing issues reported by users of Crossplane v2.3 and fixing security related issues in Crossplane's dependencies. The primary goal of this release is to fix regressions in the Crossplane CLI's
rendercommands.What's Changed
Full Changelog: crossplane/crossplane@v2.3.1...v2.3.2
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.