Summary

This release includes important security fixes, dependency updates, and API improvements.

Highlights

• Security vulnerability remediation: Updated Go to 1.25.11 and critical dependencies (golang.org/x/crypto, golang.org/x/net, golang.org/x/sys) to address 28 CVEs including critical vulnerabilities
• API improvements: Bumped upjet to v2.2.1 with updated Crossplane runtime (v2.2.1), Kubernetes libraries (v0.35.5), and controller-runtime (v0.23.3)
• Testing enhancements: Added API conversion roundtrip tests and bumped uptest to v2.2.0
• Multi-version CRD support: Upgraded storage and controller versions for CRDs serving multiple API versions, with deprecation process started for older versions
• CI/CD improvements: Migrated to golangci-lint v2, updated GitHub Actions, and improved workflow reliability

Security Fixes

Remediated 28 CVEs across Go standard library and golang.org/x dependencies:

• 8 Critical severity vulnerabilities
• 4 High severity vulnerabilities
• 15 Medium severity vulnerabilities
• 1 Low severity vulnerability

See PR #131 for complete details.