Summary
This release includes new features, bug fixes, and security updates.
Highlights
- New Feature: Match labels from environment field path (
FromEnvironmentFieldPath) for dynamic environment configuration selection - Bug Fix: Resolve
FromEnvironmentFieldPathselectors against merged environment, fixing an issue where selectors reading values from EnvironmentConfigs resolved by the same step would fail or be silently dropped - Dependency Update: Bump crossplane-runtime to
v2.4.0 - Security: Remediate multiple CVE vulnerabilities including:
- Updated Go to 1.26.5 (fixes 13 Go standard library vulnerabilities)
- Updated golang.org/x/net to v0.56.0 (fixes 9 vulnerabilities including GHSA-5cv4-jp36-h3mw)
- Updated golang.org/x/text to v0.39.0 (fixes GO-2026-5970)
- Updated google.golang.org/grpc to v1.82.1 (fixes GHSA-hrxh-6v49-42gf)
- Updated golang.org/x/sys to v0.46.0 (fixes GO-2026-5024)
Other Improvements
- Refactored match label building and environment map extraction for better code organization
- Updated CI workflow to use Go 1.26.5
What's Changed
- chore: run go generate by @tenstad in #120
- feat: match labels FromEnvironmentFieldPath by @tenstad in #119
- fix(security): remediate CVE vulnerabilities by @ulucinar in #128
- docs: document FromEnvironmentFieldPath rerun on updated value by @tenstad in #129
- deps: update renovate configuration by @erhancagirici in #130
- fix(renovate): match ARG GO_VERSION in Dockerfile by @phisco in #132
- feat: Update crossplane runtime to v2.4.0 by @yeldiRium in #135
- Update codeowners by @sergenyalcin in #145
- fix(security): remediate CVE vulnerabilities in google.golang.org/grpc by @ulucinar in #143
New Contributors
- @yeldiRium made their first contribution in #135
- @sergenyalcin made their first contribution in #145
Full Changelog: v0.7.5...v0.8.0