Summary

This release includes new features, security fixes, dependency updates, and API improvements for the GCP provider.

Highlights

• New Resources: Added Model Armor resources (Template and FloorSetting) for AI/ML workload protection
• Enhanced ServiceAccount Resource: Added projectRef support enabling project references via projectRef/projectSelector
• Security Updates: Remediated multiple CVE vulnerabilities including critical Go standard library updates (CVE-2026-42504, CVE-2026-42507, CVE-2026-27145) and dependency updates for golang.org/x/crypto, golang.org/x/net, and golang.org/x/sys
• API Improvements:
  • Bumped storage {{RELEASE_CHANGES}} controller versions for multi-version CRDs and started deprecation process
  • Fixed missing field backports in v1beta1 cluster-scoped APIs
  • Added API conversion roundtrip tests for improved stability
  • Added ProviderConfig ReconciliationPolicy API
• GKE Enhancements:
  • Added topology_manager and memory_manager fields to node_config
  • Fixed validatefunc and diffsuppress for container.Cluster resource
  • Fixed reference resolution for gkehub.MembershipIAMMember resource
• Infrastructure Updates:
  • Updated to Go 1.25.11
  • Bumped Upjet with crossplane-runtime v2.2.1, k8s libs to v0.35.5, and controller-runtime to v0.23.3
  • Updated Alpine base image to v3.23.4
  • Unified Go version management to use go.mod as single source of truth
• Package Metadata: Added comprehensive GCP service metadata with category classifications and validation tests
• GitHub Actions: Updated multiple actions to latest versions (checkout v6, cache v5, upload-artifact v7, setup-go v6)