Summary

This release includes security vulnerability remediation, Terraform provider updates, and API improvements.

Highlights

• Security: Remediated 46 CVE vulnerabilities in Go dependencies

  • Updated Go to 1.25.11 (fixes 28 CVEs in stdlib)
  • Updated golang.org/x/crypto to v0.52.0 (fixes 12 critical/high severity CVEs)
  • Updated golang.org/x/net to v0.55.0 (fixes 5 CVEs including 1 critical)
  • Updated golang.org/x/sys to v0.45.0

• Terraform Provider: Bumped Azure API provider to v2.9.0

  • Added identity support for resources
  • Fixed ResourceAction external name type
  • Fixed sensitive_body field type for DataplaneResource v1beta1

• API Improvements:

  • Bumped storage and controller versions for multi-version CRDs
  • Started deprecation process for old API versions
  • Added API conversion roundtrip tests

• CI/CD Enhancements:

  • Unified Go version management across workflows (now reads from go.mod)
  • Updated multiple GitHub Actions to latest versions
  • Updated golangci-lint to v2.8.0

• Dependencies: Updated various dependencies including crossplane/crossplane to v2.2.1