v1.17.1

This is a patch release scoped to fixing issues reported by users of Crossplane v1.17.

What's Changed

• [Backport release-1.17] Omit docker login registry arg when promoting tag in Docker Hub by @github-actions in #5916
• [Backport release-1.17] Make composition revision numbers mutable by @github-actions in #5943
• [Backport release-1.17] Fix "Missing node in tree error" after updating a package source by @github-actions in #5954
• [Backport release-1.17] Retry on conflict during CRD dry-run updates in XRD validation webhook by @github-actions in #5956

Full Changelog: v1.17.0...v1.17.1

v1.16.2

This is a patch release scoped to fixing issues reported by users of Crossplane v1.16.

What's Changed

• [Backport release-1.16] Fix "Missing node in tree error" after updating a package source by @github-actions in #5953
• [release-1.16] Delete resources that don't have a controller but appear in resourceRefs by @negz in #5950

Full Changelog: v1.16.1...v1.16.2

v1.15.5

This is a patch release scoped to fixing issues reported by users of Crossplane v1.15.

What's Changed

• [release-1.15] Delete resources that don't have a controller but appear in resourceRefs by @negz in #5951
• [Backport release-1.15] Fix "Missing node in tree error" after updating a package source by @github-actions in #5952

Full Changelog: v1.15.4...v1.15.5

v1.16.1

This is a patch release scoped to fixing issues reported by users of Crossplane v1.16.

What's Changed

• [Backport release-1.16] fix(trace): set default qps and burst back by @github-actions in #5742
• fix(deps): update module github.com/docker/docker to v25.0.6+incompatible [security] (release-1.16) by @crossplane-renovate in #5855
• [Backport release-1.16] Fix race condition creating certs in init. by @github-actions in #5894
• [Backport release-1.16] Add secrets.crossplane.io grant rules to RBAC manager roles, even though the feature is alpha. by @github-actions in #5903

Full Changelog: v1.16.0...v1.16.1

v1.15.4

This is a patch release scoped to fixing issues reported by users of Crossplane v1.15.

What's Changed

• fix(deps): update module github.com/docker/docker to v25.0.6+incompatible [security] (release-1.15) by @crossplane-renovate in #5854
• chore(deps): update module github.com/rs/cors to v1.11.0 [security] (release-1.15) by @crossplane-renovate in #5847
• [Backport release-1.15] Fix race condition creating certs in init. by @github-actions in #5893
• [Backport release-1.15] Add secrets.crossplane.io grant rules to RBAC manager roles, even though the feature is alpha. by @github-actions in #5902

Full Changelog: v1.15.3...v1.15.4

v1.17.0

The v1.17.0 release is a regular quarterly Crossplane release that is focused on maturing a number of key areas of functionality across the project, as Crossplane continues to become more capable, more reliable, and more performant for your production workloads.

🎉 Highlights

• New Contributors! This release has 14 new contributors! A huge thank you to all contributors as always.
• Composition Functions graduation to v1: #5885 graduated Composition Functions to v1 while deprecating native patch and transform compositions. For a few releases, Crossplane will handle both beta and alpha composition Functions, and updated SDKs will be released soon.
• Errors/Conditions on claims: It is now possible for Functions to communicate errors, events, and conditions up to the Claim level that occur during the execution of the composition function pipeline. Added with #5450, this means that consumers of Claims can get helpful and relevant observability into what may be happening with the composed resources underneath their claim. This keeps a strong separation of concerns still between Claims and Composite Resources, while providing useful curated information to the claim consumer that can help them drive to a resolution and a healthy resource on their own.
• Cloud Change Logs: The runtime support for cloud change logs is included in the crossplane-runtime v1.17.0 release. Starting with this release, it will be possible for providers to track and log all changes they are making to their managed resources. You can expect new provider releases in the near future with this functionality enabled.
• CLI updates:
  • crossplane beta render was promoted and is now available as crossplane render. Added support for render.crossplane.io/runtime-docker-cleanup to allow removing images after run if needed.
  • crossplane beta xpkg init was promoted too and is now available as crossplane xpkg init.
  • crossplane beta validate:
    • can now validate Crossplane resources and can also validate Functions' inputs against their schema.
    • can now catch unknown fields errors too.
    • is now able to download and cache the whole tree of transitive dependencies for a Package.
    • is now using a global cache directory in the home instead of creating one in the current directory.
  • crossplane beta trace is now much more performant for really deep dependency trees.

🚨 Warnings and breaking changes

• Deprecated: Native patch and transform is now deprecated, see #5885
  • We don't plan to remove native patch and transform from Crossplane, but we no longer recommend using it. Use composition functions (mode: Pipeline) instead, as described in the updated documentation: https://docs.crossplane.io/latest/concepts/compositions/
  • As of Crossplane v1.17.0, development on native patch and transform will stop, and we'll only accept security related contributions to that part of the codebase.
• crossplane CLI beta render and beta xpkg init were promoted to GA, meaning you no longer need to include the beta part of the command.

🏅 Release MVP

For our very first Crossplane "Release MVP", we're proud to select @dalton-hill-0 for his thorough and useful contribution on #5450 to enable Claims to have selective errors/events/conditions surfaced to them. This has been functionality that the community desired for a long time and it really moves the needle on the end user developer/consumer experience with Crossplane. They will now be able to get relevant actionable information on their Claims to troubleshoot issues and get the infrastructure they need. Dalton did a great job of driving the complicated design and thinking through the edge cases with a critical eye on user experience throughout. Great work @dalton-hill-0! 🙇‍♂️ 🏅

📖 Full Changelog

• Remove the RBAC namespace controller by @negz in #5657
• Add Hyland Software to Adopters by @sethfduke in #5660
• Enhance permissions for Crossplane managed-roles by allowing access to the status subresource for Claims/Composites by @turkenh in #5663
• Fix unit test coverage reports, add E2E flake reports by @negz in #5668
• Fix locking in the PackagedFunctionRunner by @negz in #5662
• chore(deps): pin dependencies (master) by @crossplane-renovate in #5677
• Add Skillsoft to ADOPTERS.md by @brandon-powers in #5670
• correcting help tag by @akhyaradn in #5678
• chore(deps): update actions/checkout digest to 0ad4b8f (master) by @crossplane-renovate in #5679
• chore(deps): update actions/create-github-app-token digest to a0de6af (master) by @crossplane-renovate in #5680
• chore(deps): update actions/setup-go digest to cdcb360 (master) by @crossplane-renovate in #5683
• chore(deps): update golang version to v1.22.3 (master) by @crossplane-renovate in #5684
• tests: AllOf failing immediately if fail-fast by @phisco in #5673
• build: add release-1.16 to Renovate baseBranches by @jbw976 in #5694
• Don't check for buf breaking changes on release branches by @negz in #5692
• Use a stripped out crossplane/build submodule fork by @negz in #5693
• Update releases table and renovate branches post 1.16 by @jbw976 in #5697
• chore(deps): update renovatebot/github-action action to v40.1.11 (master) by @crossplane-renovate in #5685
• chore(deps): update actions/upload-artifact digest to 6546280 (master) by @crossplane-renovate in #5699
• chore(deps): update codecov/codecov-action digest to 6d79887 (master) by @crossplane-renovate in #5700
• chore(deps): update actions/checkout action to v4.1.5 (master) by @crossplane-renovate in #5704
• chore(deps): update gcr.io/distroless/static docker digest to 4197211 (master) by @crossplane-renovate in #5701
• Add Sopra Steria NO to ADOPTERS.md by @tomberget in #5689
• chore(deps): update github/codeql-action digest to b7cec75 (master) by @crossplane-renovate in #5702
• chore(deps): update golangci/golangci-lint-action digest to d6238b0 (master) by @crossplane-renovate in #5703
• adopters: Clarify production usage for Hyland Software by @jbw976 in #5712
• Add the pkg directory to GO_SUBDIRS by @negz in #5708
• fix(deps): update module github.com/emicklei/dot to v1.6.2 (master) by @crossplane-renovate in #5714
• chore(deps): update actions/checkout action to v4.1.6 (master) by @crossplane-renovate in #5713
• Update Claim CRD and XR CRD Reconciliation Filters by @dalton-hill-0 in #5716
• Use a single cache for all dynamic controllers (i.e. XRs and claims) by @negz in #5651
• chore(deps): update actions/checkout digest to a5ac7e5 (master) by @crossplane-renovate in #5718
• fix: crossplane xpkg init doesn't close file by @cychiang in #5720
• Unset some UP env vars to avoid unexpect test behaviour. by @cychiang in #5724
• Enhanced error logging by @NeerajNagure in #5698
• chore(deps): update github/codeql-action digest to 9fdb3e4 (master) by @crossplane-renovate in #5725
• fix(deps): update module github.com/docker/docker-credential-helpers to v0.8.2 (master) by @crossplane-renovate in #5731
• chore(deps): update dependency golangci/golangci-lint to v1.58.2 (master) by @crossplane-renovate in #5648
• Update ADOPTERS.md by @xcloudscript in #5603
• adopters: add Zuru Tech Italy to ADOPTERS.md by @jbw976 in #5732
• chore(deps): update codecov/codecov-action digest to 125fc84 (master) by @crossplane-renovate in #5719
• chore: ignore checklist for renovate prs by @phisco in #5736
• chore(deps): update aquasecurity/trivy-action action to v0.21.0 (master) by @crossplane-renovate in #5735
• fix(deps): update module github.com/golang-jwt/jwt/v5 to v5.2.1 (master) by @crossplane-renovate in #5733
• fix(trace): set ...

v1.17.0-rc.1

What's Changed

• Bump crossplane-runtime to v1.17.0-rc.0 by @jbw976 in #5652
• Remove the RBAC namespace controller by @negz in #5657
• Add Hyland Software to Adopters by @sethfduke in #5660
• Enhance permissions for Crossplane managed-roles by allowing access to the status subresource for Claims/Composites by @turkenh in #5663
• Fix unit test coverage reports, add E2E flake reports by @negz in #5668
• Fix locking in the PackagedFunctionRunner by @negz in #5662
• chore(deps): pin dependencies (master) by @crossplane-renovate in #5677
• Add Skillsoft to ADOPTERS.md by @brandon-powers in #5670
• correcting help tag by @akhyaradn in #5678
• chore(deps): update actions/checkout digest to 0ad4b8f (master) by @crossplane-renovate in #5679
• chore(deps): update actions/create-github-app-token digest to a0de6af (master) by @crossplane-renovate in #5680
• chore(deps): update actions/setup-go digest to cdcb360 (master) by @crossplane-renovate in #5683
• chore(deps): update golang version to v1.22.3 (master) by @crossplane-renovate in #5684
• tests: AllOf failing immediately if fail-fast by @phisco in #5673
• build: add release-1.16 to Renovate baseBranches by @jbw976 in #5694
• Don't check for buf breaking changes on release branches by @negz in #5692
• Use a stripped out crossplane/build submodule fork by @negz in #5693
• Update releases table and renovate branches post 1.16 by @jbw976 in #5697
• chore(deps): update renovatebot/github-action action to v40.1.11 (master) by @crossplane-renovate in #5685
• chore(deps): update actions/upload-artifact digest to 6546280 (master) by @crossplane-renovate in #5699
• chore(deps): update codecov/codecov-action digest to 6d79887 (master) by @crossplane-renovate in #5700
• chore(deps): update actions/checkout action to v4.1.5 (master) by @crossplane-renovate in #5704
• chore(deps): update gcr.io/distroless/static docker digest to 4197211 (master) by @crossplane-renovate in #5701
• Add Sopra Steria NO to ADOPTERS.md by @tomberget in #5689
• chore(deps): update github/codeql-action digest to b7cec75 (master) by @crossplane-renovate in #5702
• chore(deps): update golangci/golangci-lint-action digest to d6238b0 (master) by @crossplane-renovate in #5703
• adopters: Clarify production usage for Hyland Software by @jbw976 in #5712
• Add the pkg directory to GO_SUBDIRS by @negz in #5708
• fix(deps): update module github.com/emicklei/dot to v1.6.2 (master) by @crossplane-renovate in #5714
• chore(deps): update actions/checkout action to v4.1.6 (master) by @crossplane-renovate in #5713
• Update Claim CRD and XR CRD Reconciliation Filters by @dalton-hill-0 in #5716
• Use a single cache for all dynamic controllers (i.e. XRs and claims) by @negz in #5651
• chore(deps): update actions/checkout digest to a5ac7e5 (master) by @crossplane-renovate in #5718
• fix: crossplane xpkg init doesn't close file by @cychiang in #5720
• Unset some UP env vars to avoid unexpect test behaviour. by @cychiang in #5724
• Enhanced error logging by @NeerajNagure in #5698
• chore(deps): update github/codeql-action digest to 9fdb3e4 (master) by @crossplane-renovate in #5725
• fix(deps): update module github.com/docker/docker-credential-helpers to v0.8.2 (master) by @crossplane-renovate in #5731
• chore(deps): update dependency golangci/golangci-lint to v1.58.2 (master) by @crossplane-renovate in #5648
• Update ADOPTERS.md by @xcloudscript in #5603
• adopters: add Zuru Tech Italy to ADOPTERS.md by @jbw976 in #5732
• chore(deps): update codecov/codecov-action digest to 125fc84 (master) by @crossplane-renovate in #5719
• chore: ignore checklist for renovate prs by @phisco in #5736
• chore(deps): update aquasecurity/trivy-action action to v0.21.0 (master) by @crossplane-renovate in #5735
• fix(deps): update module github.com/golang-jwt/jwt/v5 to v5.2.1 (master) by @crossplane-renovate in #5733
• fix(trace): set default qps and burst back by @phisco in #5737
• build: allow CRD patch dir to already exist by @jbw976 in #5739
• Proposal: Try using Earthly instead of Make for one release by @negz in #5711
• Enable Earthly remote caching, pass AWS credentials explicitly by @negz in #5746
• chore(deps): update zeebe-io/backport-action action to v2.5.0 (master) by @crossplane-renovate in #5741
• fix(deps): update module github.com/google/go-containerregistry to v0.19.1 by @jbw976 in #5744
• Fix Earthly remote cache, and typo in Renovate configuration by @negz in #5747
• chore(deps): pin dependencies (master) by @crossplane-renovate in #5748
• chore(deps): update docker/login-action digest to 0d4c9c5 (master) by @crossplane-renovate in #5749
• Set --cache-control flag when copying Helm index by @negz in #5751
• Enforced immutable fields using CEL rules by @NeerajNagure in #5682
• Make Renovate play nice with Earthly by @negz in #5754
• Don't re-run CodeQL or E2E tests if nothing but the git commit changes by @negz in #5755
• chore(deps): update dependency helm/helm to v3.15.1 (master) by @crossplane-renovate in #5756
• Bump golangci-lint to v1.59.0 by @negz in #5758
• Fix earthly E2E test results, CodeQL Renovate version by @negz in #5757
• Fix EARTHLY_VERSION matching in GitHub Workflows by @negz in #5759
• chore(deps): update dependency norwoodj/helm-docs to v1.13.1 (master) by @crossplane-renovate in #5761
• chore(deps): update dependency earthly/earthly to v0.8.13 (master) by @crossplane-renovate in #5760
• chore(deps): update dependency gotestyourself/gotestsum to v1.12.0 (master) by @crossplane-renovate in #5763
• Fix Renovate running earthly by @negz in #5762
• fix(deps): update module github.com/alecthomas/kong to v0.9.0 (master) by @crossplane-renovate in #5764
• Match build submodule artifact pushing behavior by @negz in #5765
• fix(deps): update module github.com/aws/smithy-go to v1.20.2 (master) by @crossplane-renovate in #5767
• fix(deps): update module github.com/go-git/go-git/v5 to v5.12.0 (master) by @crossplane-renovate in #5768
• chore(deps): update amazon/aws-cli docker tag to v2.15.61 (master) by @crossplane-renovate in #5769
• Fix check for master branch to enable pushing by @negz in #5772
• chore(deps): update dependency kubernetes-sigs/kind to v0.23.0 (master) by @crossplane-renovate in #5770
• fix(deps): update module github.com/prometheus/client_golang to v1.19.1 (master) by @crossplane-renovate in #5773
• Reported the status as deleted for the deleted resources in crossplane beta trace by @NeerajNagure in #5775
• chore(deps): update github/codeql-action digest to f079b84 (master) by @crossplane-renovate in h...

v1.16.0

The v1.16.0 release is a regular quarterly Crossplane release that is focused on maturing a number of key areas of functionality across the project, as Crossplane continues to become more capable, more reliable, and more performant for your production workloads.

🎉 Highlights

• New Contributors! This release has the most new contributors than any other release before - 24 community members made their first code contribution in this release, so a huge thank you to everyone starting to get more involved in the project! 🙇‍♂️
• High level metrics: Providers in the Crossplane ecosystem are now able to export fine grained data about the operations they are performing on Crossplane managed resources. Questions like "How long is it taking to discover that a resource is out of sync and needs to be updated?" can now be answered with these new metrics.
• Usage clean-up significantly faster: Resources protected by a Usage object can take a long time to be fully deleted. A solution for this is now available via a new replayDeletion field on the Usage object. Read more about this capability in the Usage docs.
• Credentials for Functions: Crossplane now provides a secure way via a new credentials field on function pipeline steps for a Composition Function to authenticate to external systems while they are executing their logic, for example to look up information from a remote service.
• Developer Experience improvements: DevEx continues to get plenty of love with numerous enhancements added in this release.

🚨 Warnings and breaking changes

• The crossplane CLI --version flag has been converted to a top level version command.
  • crossplane version can be used to retrieve the version of the Crossplane CLI software as well as the version of the Crossplane server side software running in the control plane.
  • crossplane --version is no longer supported and will return crossplane: error: unknown flag --version.
  • Thank you @phclark for calling this change out!

📖 Full Changelog

• Bump crossplane-runtime to v1.16.0-rc.1 by @phisco in #5345
• Update Consensys in ADOPTERS.md by @clementblaise in #5343
• feat(crank/trace): show resource name in wide if available by @phisco in #5347
• fix(crank/render): conditions' lastTransitionTime can not be null by @phisco in #5346
• chore(deps): update actions/upload-artifact digest to 5d5d22a (master) by @renovate in #5340
• Do not use version when indexing Used resources in Usage Handler by @turkenh in #5353
• Accept version changes in composed templates by @turkenh in #5369
• Adopters: Update SAPs entry by @maximilianbraun in #5352
• chore(deps): update dependency golang to v1.22.0 (master) by @renovate in #5350
• feat: drop aggregate-to-ns-* clusterroles by @phisco in #5373
• fix(crank/xpkg): push properly retrieve upbound credentials by @phisco in #5367
• chore(deps): update xpkg.upbound.io/crossplane-contrib/provider-nop docker tag to v0.2.1 (master) by @renovate in #5374
• Improve render debug logs style by @lsviben in #5384
• Reorganize the growing set of badges in the main README.md by @jbw976 in #5378
• Update ignore-changes docs managementPolicy => managementPolicies by @turkenf in #5383
• Add configuration-template to well known xpkg init templates by @jbw976 in #5389
• init - add option to select branch/tag by @lsviben in #5391
• Update ADOPTERS.md with Elastic Serverless information by @hwoarang in #5397
• chore: bump README and renovate for 1.15 by @phisco in #5396
• Bump golangci-lint to v1.56.2 by @negz in #5414
• Update claim status to Deleting while waiting for foreground deletion by @bobh66 in #5425
• Add a retroactive one-pager for rate limiting by @negz in #5415
• logging: wire klog backend, but only output request throttling logs by @sttts in #5419
• Recommend unwinding constant error string pattern by @negz in #4515
• Update ADOPTERS.md with Deutsche Bahn by @gandhiano in #5366
• Poll more frequently when waiting for composed resources to become ready by @negz in #5427
• Add Akamai to list of adopters by @nolancon in #5443
• apiextension/definition: don't attempt to start composite controllers multiple times by @sttts in #5437
• Add Variphy to ADOPTERS.MD by @dmvariphy in #5451
• Enable all golangci-lint linters by default by @negz in #5445
• Update steering committee listing with lindblombr by @jbw976 in #5452
• fix: ignore invalid resources when composing by @phisco in #5365
• Ability to replay deletion with Usage spec by @turkenh in #5394
• chore: remove repetitive words by @avoidalone in #5467
• Allow group changes in composed templates by @turkenh in #5474
• Bump default max reconcile rate and resource limits by @turkenh in #5478
• chore: remove repetitive words by @majorteach in #5502
• Update ADOPTERS.md by @simlarsen in #5505
• Update Upjet SIG by @jeanduplessis in #5508
• Add dnsPolicy as parameter to Helm chart #5500 by @Argannor in #5501
• fix: include generatName field in default metadata property by @amotolani in #5510
• Adds Xata to ADOPTERS list by @mattfield in #5509
• chore(deps): update gcr.io/distroless/static docker digest to 7e5c6a2 (master) by @renovate in #5516
• Fix broken links in CRD source by @plumbis in #5515
• Tweaks description of entry in ADOPTERS.md to include mention of dev, staging, and production by @mattfield in #5518
• tests(e2e): allow passing options when decoding files by @phisco in #5517
• fix(deps): update module github.com/docker/docker to v25.0.5+incompatible [security] (master) by @renovate in #5496
• Allow kubernetes service annotations by @AtzeDeVries in #5471
• chore(deps): update golangci/golangci-lint-action action to v4 (master) by @renovate in #5380
• fix(deps): update module golang.org/x/term to v0.18.0 (master) by @renovate in #5359
• Proposal to Allow Composition Functions to Set Claim Conditions by @dalton-hill-0 in #5426
• Add missing scrape annotations to provider pods by @turkenh in #5529
• docs: Adding AlphaSense to Crossplane adopters list by @abhihendre in #5528
• fix(helm): Explicitly set divisor in rbac-manager resources by @mboutet in #5526
• Add --context option to crossplane cli beta trace command by @padlar in #5542
• Update roadmap links to prioritized list view by @jbw976 in #5546
• feat(cli): add server version if available and subcommand by @haarchri in #5457
• Expand and improve docstrings to comply with Vale by @plumbis in #5527
• Update community meeting schedule by @jbw976 in #5556
• Add ToAdler32 to CRDs by @eskabetxe in #5560
• fix(sa): Merge image pull secrets created by other controllers by @bobh66 in #5558
• Run Renovate as a Github Action by @enesonus in #5493
• chore(deps): pin dependencies (master) by @crossplane-renovate in #5575
• cli: tilde expansion for validate command by @santhoshivan23 in https...

v1.15.3

This is a patch release scoped to fixing issues reported by users of Crossplane v1.15.

What's Changed

• [Backport release-1.15] Adding support for Functions in crank validate (fixes #5491) by @github-actions in #5585
• [Backport release-1.15] fix(helm): Explicitly set divisor in rbac-manager resources by @github-actions in #5622
• [Backport release-1.15] Enhance permissions for Crossplane managed-roles by allowing access to the status subresource for Claims/Composites by @github-actions in #5666
• chore(deps): update xpkg.upbound.io/crossplane-contrib/provider-nop docker tag to v0.2.1 (release-1.15) by @crossplane-renovate in #5688
• chore(deps): update gcr.io/distroless/static docker digest to 4197211 (release-1.15) by @crossplane-renovate in #5687
• [Backport release-1.15] Fix locking in the PackagedFunctionRunner by @negz in #5690

Full Changelog: v1.15.2...v1.15.3

v1.14.9

This is a patch release scoped to fixing issues reported by users of Crossplane v1.14.

What's Changed

• chore(deps): update module golang.org/x/net to v0.23.0 [security] (release-1.14) by @renovate in #5563
• [Backport release-1.14] Enhance permissions for Crossplane managed-roles by allowing access to the status subresource for Claims/Composites by @github-actions in #5665
• [Backport release 1.14] Fix locking in the PackagedFunctionRunner by @negz in #5691

Full Changelog: v1.14.8...v1.14.9