Summary
This release includes new Azure resources, security fixes, dependency updates, and API enhancements.
Highlights
New Resources
- FlexibleServerActiveDirectoryAdministrator (dbforpostgresql) - Support for Entra ID authentication on PostgreSQL Flexible Servers
- CacheRule (containerregistry) - Azure Container Registry cache rule management
- AutonomousDatabase resources (oracle) - Full support for Oracle Autonomous Database on Azure, including backups and cloning operations
- Cluster (eventhub) - Azure Event Hub cluster management
- Key (appconfiguration) - Azure App Configuration key management
Features
- Elastic Pool References for MSSQLDatabase - Added
elasticPoolIdRefandelasticPoolIdSelectorfields for declarative resource references - ProviderConfig ReconciliationPolicy API - Configurable exponential failure rate limiting
- API Version Management - Bumped storage and controller versions for multi-version CRDs, starting deprecation process for older API versions
Security {{RELEASE_CHANGES}} Dependencies
- Go 1.25.11 - Addresses CVE-2026-42504, CVE-2026-42507, CVE-2026-27145, and related Go vulnerabilities
- golang.org/x/crypto v0.52.0 - Remediates multiple cryptography-related vulnerabilities
- golang.org/x/net v0.55.0 - Addresses network stack vulnerabilities
- golang.org/x/sys v0.45.0 - System library security updates
- google.golang.org/grpc v1.79.3 - gRPC security update
- go.opentelemetry.io/otel v1.41.0 - OpenTelemetry security update
- github.com/antchfx/xpath v1.3.6 - XPath library security update
Bug Fixes {{RELEASE_CHANGES}} Improvements
- Fixed missing field backports in v1beta1 APIs (SecretRef, identity fields, singleton list fields)
- Added missing
api_idreference in Subscription.apimanagement - Fixed ProviderConfig lookup issue in controller
- Added API conversion roundtrip tests for multi-version support
- Updated CI workflows with latest GitHub Actions
- Improved uptest cleanup with
--all-namespacesflag - Enhanced Go version management by using go.mod as single source of truth
Infrastructure Updates
- Bumped upjet to 0beea8e928de (includes crossplane-runtime v2.2.1, k8s v0.35.5, controller-runtime v0.23.3)
- Updated crossplane-cli to v2.3.0
- Updated Alpine base image to v3.23.4
- Updated multiple GitHub Actions to latest versions