[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/crossplane/crossplane-runtime/v2	v2.3.3 → v2.4.3

---

Release Notes

crossplane/crossplane-runtime (github.com/crossplane/crossplane-runtime/v2)

v2.4.3

Compare Source

What's Changed

• chore(deps): update module golang.org/x/net to v0.60.0 [security] (release-2.4) by @​crossplane-renovate[bot] in #​1198
• [Backport release-2.4] Don't cache truncated package downloads in xpkg by @​github-actions[bot] in #​1200
• chore(deps): lock file maintenance (release-2.4) by @​crossplane-renovate[bot] in #​1179
• chore(deps): lock file maintenance (release-2.4) by @​crossplane-renovate[bot] in #​1213

Full Changelog: crossplane/crossplane-runtime@v2.4.2...v2.4.3

v2.4.2

Compare Source

What's Changed

• chore(deps): update module go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc to v1.45.0 [security] (release-2.4) by @​crossplane-renovate[bot] in #​1158
• fix(deps): update module google.golang.org/grpc to v1.83.2 [security] (release-2.4) by @​crossplane-renovate[bot] in #​1146
• [Backport release-2.4] Skip Update and LateInitialize for non-existent external resources by @​github-actions[bot] in #​1167
• chore(deps): update module golang.org/x/crypto to v0.56.0 [security] (release-2.4) by @​crossplane-renovate[bot] in #​1149

Full Changelog: crossplane/crossplane-runtime@v2.4.0...v2.4.2

v2.4.0

Compare Source

The v2.4.0 release of crossplane-runtime is a regular quarterly release that accompanies Crossplane v2.4. It brings memory and reconciliation improvements for provider authors, along with security fixes in the library's dependencies.

🎉 Highlights

• Strip CRD schemas from the informer cache: Providers that support "safe-start" cache every CRD in the cluster, including its full OpenAPI v3 validation schema. On clusters with a lot of CRDs this can cause excessive memory usage by the provider pod and lead to OOMKilled restarts. The new TransformStripCRDSchema drops non critical fields from the cached CRDs and helps providers drastically reduce their memory consumption. Added in #​1058, fixing #​1056.

  • Providers opt in by wiring it into their manager's cache options:

    cache.Options{
        ByObject: map[client.Object]cache.ByObject{
            &apiextensionsv1.CustomResourceDefinition{}: {
                Transform: customresourcesgate.TransformStripCRDSchema,
            },
        },
    }

  • For more integration details, see reference PR crossplane-contrib/provider-helm#392

  • Measured against a cluster with 2,045 Upjet AWS CRDs, provider memory usage dropped from ~630 MiB to ~83 MiB.

What's Changed

• build: add release-2.3 to renovate baseBranches by @​jbw976 in #​995
• chore: remove release-2.0 from renovate baseBranches by @​jbw976 in #​997
• chore(deps): update module golang.org/x/crypto to v0.52.0 [security] (main) by @​crossplane-renovate[bot] in #​998
• chore(deps): update renovatebot/github-action action to v46.1.14 (main) by @​crossplane-renovate[bot] in #​981
• chore(deps): update module golang.org/x/net to v0.55.0 [security] (main) by @​crossplane-renovate[bot] in #​1000
• chore(deps): update actions/checkout digest to df4cb1c (main) by @​crossplane-renovate[bot] in #​1012
• chore(deps): update cachix/install-nix-action digest to 8aa0397 (main) by @​crossplane-renovate[bot] in #​983
• chore(deps): update github/codeql-action digest to 8aad20d (main) by @​crossplane-renovate[bot] in #​969
• chore(deps): update actions/checkout action to v6.0.3 (main) by @​crossplane-renovate[bot] in #​1014
• chore(deps): update renovatebot/github-action action to v46.1.15 (main) by @​crossplane-renovate[bot] in #​1015
• chore(deps): update actions/stale action to v10 (main) by @​crossplane-renovate[bot] in #​1016
• chore(deps): update cachix/cachix-action action to v17 (main) by @​crossplane-renovate[bot] in #​1017
• chore(deps): update codecov/codecov-action action to v7 (main) by @​crossplane-renovate[bot] in #​1018
• chore(deps): update dependency ubuntu to v24 (main) by @​crossplane-renovate[bot] in #​1019
• fix(deps): update module github.com/sigstore/sigstore to v1.10.8 (main) by @​crossplane-renovate[bot] in #​1020
• chore(deps): update zeebe-io/backport-action action to v4.5.2 (main) by @​crossplane-renovate[bot] in #​1021
• chore(deps): update actions/create-github-app-token action to v3 (main) by @​crossplane-renovate[bot] in #​1023
• chore(deps): update actions/github-script action to v9 (main) by @​crossplane-renovate[bot] in #​1024
• fix(deps): update module github.com/google/go-containerregistry to v0.21.6 (main) by @​crossplane-renovate[bot] in #​1028
• fix(deps): update module github.com/in-toto/attestation to v1.2.0 (main) by @​crossplane-renovate[bot] in #​1029
• fix(tests): update error messages for semver v3.5.0 constraint quotes by @​boxcee-interview in #​1031
• fix(deps): update module github.com/masterminds/semver/v3 to v3.5.0 (main) by @​crossplane-renovate[bot] in #​1030
• fix(deps): update module google.golang.org/grpc to v1.81.1 (main) by @​crossplane-renovate[bot] in #​1032
• chore(deps): update gomod2nix digest to 1201ddd (main) by @​crossplane-renovate[bot] in #​1033
• fix(deps): update k8s.io/utils digest to ff6756f (main) by @​crossplane-renovate[bot] in #​1035
• fix(deps): update module k8s.io/klog/v2 to v2.140.0 (main) by @​crossplane-renovate[bot] in #​1036
• fix(deps): bump k8schain to pick up moby module migration by @​lsviben in #​1039
• chore(deps): update actions/checkout action to v7 (main) by @​crossplane-renovate[bot] in #​1042
• fix(deps): update module github.com/google/go-containerregistry to v0.21.7 (main) by @​crossplane-renovate[bot] in #​1041
• chore(deps): update module github.com/sigstore/rekor to v1.5.2 [security] (main) by @​crossplane-renovate[bot] in #​1044
• fix(deps): update module github.com/sigstore/cosign/v3 to v3.0.6 [security] (main) by @​crossplane-renovate[bot] in #​1045
• chore(deps): update module github.com/sigstore/timestamp-authority/v2 to v2.1.0 [security] (main) by @​crossplane-renovate[bot] in #​1050
• chore(deps): update module github.com/sigstore/sigstore-go to v1.2.0 [security] (main) by @​crossplane-renovate[bot] in #​1054
• fix(deps): combined security bumps (grpc, x/text) (main) by @​lsviben in #​1077
• chore(deps): update module github.com/klauspost/compress to v1.18.7 [security] (main) by @​crossplane-renovate[bot] in #​1083
• chore(deps): update module github.com/google/cel-go to v0.29.0 [security] (main) by @​crossplane-renovate[bot] in #​1078
• fix(ci): clean /homeless-shelter between Renovate's Nix builds by @​jbw976 in #​1085
• feat: add TransformStripCRDSchema for reduced cache memory usage by @​rafal-jan in #​1058
• chore(ci): enable weekly flake.lock maintenance for nix manager by @​pujitha24 in #​1087
• ci(renovate): disable the per-hour PR creation throttle by @​jbw976 in #​1091
• chore(deps): update cachix/install-nix-action digest to 630ae54 (main) by @​crossplane-renovate[bot] in #​1093
• chore(deps): update module github.com/sigstore/sigstore-go to v1.2.1 [security] (main) by @​crossplane-renovate[bot] in #​1092
• chore(deps): update actions/checkout digest to 3d3c42e (main) by @​crossplane-renovate[bot] in #​1089
• chore(deps): update actions/stale digest to 1e223db (main) by @​crossplane-renovate[bot] in #​1090
• fix(ci): prioritize flake.lock maintenance updates by @​jbw976 in #​1096
• chore(deps): update github/codeql-action digest to d1ba80a (main) by @​crossplane-renovate[bot] in #​1098
• chore(deps): update actions/checkout action to v7.0.1 (main) by @​crossplane-renovate[bot] in #​1099
• chore(deps): lock file maintenance (main) by @​crossplane-renovate[bot] in #​1097
• fix(deps): update module github.com/go-logr/logr to v1.4.4 (main) by @​crossplane-renovate[bot] in #​1100
• fix(deps): update module github.com/crossplane/crossplane/apis/v2 to v2.3.4 (main) by @​crossplane-renovate[bot] in #​1027
• fix(managed): requeue absent observe-only resources after the poll interval by @​erikmiller-gusto in #​1088
• fix(ci): pin which Nix Renovate's post-upgrade tasks use by @​jbw976 in #​1107
• build: bump pinned nixpkgs channel from nixos-25.11 to nixos-26.05 by @​jbw976 in #​1108
• chore(deps): update zeebe-io/backport-action action to v4.6.0 (main) by @​crossplane-renovate[bot] in #​1104
• chore(deps): update renovatebot/github-action action to v46.2.2 (main) by @​crossplane-renovate[bot] in #​1103
• chore(deps): lock file maintenance (main) by @​crossplane-renovate[bot] in #​1114
• chore(deps): update github/codeql-action digest to 5595cca (main) by @​crossplane-renovate[bot] in #​1115
• chore(deps): update module golang.org/x/mod to v0.40.0 [security] (release-2.4) by @​crossplane-renovate[bot] in #​1128
• chore(deps): lock file maintenance (release-2.4) by @​crossplane-renovate[bot] in #​1137
• chore(deps): update module github.com/google/cel-go to v0.30.0 [security] (release-2.4) by @​crossplane-renovate[bot] in #​1134

New Contributors

• @​boxcee-interview made their first contribution in #​1031
• @​rafal-jan made their first contribution in #​1058
• @​pujitha24 made their first contribution in #​1087
• @​erikmiller-gusto made their first contribution in #​1088

Full Changelog: crossplane/crossplane-runtime@v2.3.0...v2.4.0

v2.3.5

Compare Source

What's Changed

• chore(deps): update module go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc to v1.45.0 [security] (release-2.3) by @​crossplane-renovate[bot] in #​1157
• fix(deps): update module google.golang.org/grpc to v1.83.2 [security] (release-2.3) by @​crossplane-renovate[bot] in #​1145
• [Backport release-2.3] Don't cache truncated package downloads in xpkg by @​github-actions[bot] in #​1199
• chore(deps): update module golang.org/x/net to v0.60.0 [security] (release-2.3) by @​crossplane-renovate[bot] in #​1197
• chore(deps): lock file maintenance (release-2.3) by @​crossplane-renovate[bot] in #​1178
• chore(deps): lock file maintenance (release-2.3) by @​crossplane-renovate[bot] in #​1212

Full Changelog: crossplane/crossplane-runtime@v2.3.4...v2.3.5

v2.3.4

Compare Source

What's Changed

• chore(deps): update module github.com/sigstore/rekor to v1.5.2 [security] (release-2.3) by @​crossplane-renovate[bot] in #​1046
• fix(deps): update module github.com/sigstore/cosign/v3 to v3.0.6 [security] (release-2.3) by @​crossplane-renovate[bot] in #​1047
• chore(deps): update module github.com/sigstore/timestamp-authority/v2 to v2.1.0 [security] (release-2.3) by @​crossplane-renovate[bot] in #​1051
• chore(deps): update module github.com/sigstore/sigstore-go to v1.2.0 [security] (release-2.3) by @​crossplane-renovate[bot] in #​1055
• fix(deps): combined security bumps (grpc, x/net, x/text) (release-2.3) by @​lsviben in #​1076
• chore(deps): update module github.com/klauspost/compress to v1.18.7 [security] (release-2.3) by @​crossplane-renovate[bot] in #​1084
• chore(deps): update module github.com/google/cel-go to v0.29.0 [security] (release-2.3) by @​crossplane-renovate[bot] in #​1082
• chore(deps): update module github.com/sigstore/sigstore-go to v1.2.1 [security] (release-2.3) by @​crossplane-renovate[bot] in #​1094
• [Backport release-2.3] feat: add TransformStripCRDSchema for reduced cache memory usage by @​github-actions[bot] in #​1109
• [Backport release-2.3] build: bump pinned nixpkgs channel from nixos-25.11 to nixos-26.05 by @​jbw976 in #​1110
• chore(deps): update module golang.org/x/mod to v0.40.0 [security] (release-2.3) by @​crossplane-renovate[bot] in #​1127
• chore(deps): lock file maintenance (release-2.3) by @​crossplane-renovate[bot] in #​1136
• chore(deps): update module github.com/google/cel-go to v0.30.0 [security] (release-2.3) by @​crossplane-renovate[bot] in #​1133

Full Changelog: crossplane/crossplane-runtime@v2.3.3...v2.3.4

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 11 additional dependencies were updated

Details:

Package	Change
github.com/crossplane/crossplane/apis/v2	v2.3.1 -> v2.3.4
github.com/go-logr/logr	v1.4.3 -> v1.4.4
github.com/go-openapi/jsonreference	v0.21.5 -> v0.21.6
golang.org/x/mod	v0.38.0 -> v0.41.0
golang.org/x/net	v0.58.0 -> v0.60.0
golang.org/x/sync	v0.22.0 -> v0.23.0
golang.org/x/sys	v0.47.0 -> v0.48.0
golang.org/x/term	v0.45.0 -> v0.46.0
golang.org/x/text	v0.41.0 -> v0.42.0
golang.org/x/tools	v0.48.0 -> v0.49.0
google.golang.org/genproto/googleapis/rpc	v0.0.0-20260706201446-f0a921348800 -> v0.0.0-20260803160001-6ac0973c030d