crossplane-contrib/provider-upjet-azuread v2.3.0 on GitHub

Summary

This release includes new features, security fixes, bug fixes, and dependency updates.

New Resource: Added support for FlexibleFederatedIdentityCredential resource
New API: Added ProviderConfig ReconciliationPolicy API for enhanced reconciliation control
Security: Remediated multiple CVE vulnerabilities in Alpine base image and Go dependencies
- Alpine: CVE-2025-15467, CVE-2025-69420, CVE-2025-69421, CVE-2025-69419, CVE-2026-22796, CVE-2025-66199, CVE-2025-15468, CVE-2026-22795, CVE-2025-68160, CVE-2025-11187, CVE-2025-15469, CVE-2025-69418
- Go dependencies: golang.org/x/crypto, golang.org/x/net, golang.org/x/sys (GO-2026-5006, GO-2026-5023, GO-2026-5017, GO-2026-5020, GO-2026-5013, GO-2026-5005, GO-2026-5021, GO-2026-5019, GO-2026-5018, GO-2026-5033, GO-2026-5014, GO-2026-5015, GO-2026-5016, GO-2026-5026, GO-2026-5028, GO-2026-5025, GO-2026-5027, GO-2026-5029, GO-2026-5030, GO-2026-4918, GO-2026-5024)
- Security updates for github.com/cloudflare/circl, github.com/antchfx/xpath, and go.opentelemetry.io/otel
Bug Fix: Fixed incorrect ProviderConfig lookup behavior
Bug Fix: Backported missing fields membersRef and membersSelector in Group.groups/v1beta1 resource
Enhancement: Bumped storage and controller versions for multi-version CRDs and initiated deprecation process
Testing: Added API conversion roundtrip tests and improved uptest cleanup with --all-namespaces