v0.11.6

Summary

This release includes security fixes for gRPC dependencies.

Highlights

• Security vulnerability remediation for Google gRPC
• Updated google.golang.org/grpc to v1.79.3 to address GHSA-p77j-4mvh-x3m3

Security Fixes

• GHSA-p77j-4mvh-x3m3: Fixed by updating gRPC to v1.79.3

v0.12.0

What's Changed

• Add support for template options by @twobiers in #488
• Add error context to YAML errors for better debugging by @twobiers in #487
• [main]: Update go.mod dependencies [SECURITY] by @upbound-bot in #491
• Write extra resources into context by @twobiers in #486
• fix(owners): set correct mail-address by @haarchri in #495
• Update examples to use xpkg.crossplane.io by @bobh66 in #482
• [main] Bump go mod dependencies to fix CVEs by @turkenf in #515
• Update to function-sdk-go 0.5.0 by @bobh66 in #498
• Update lint configuration by @bobh66 in #523
• Update README and examples for v2 connection details behavior by @jbw976 in #530
• fix nil pointer dereference by @avarei in #534
• Add "ulucinar" to the owner list by @ulucinar in #545
• Expose composite resource ready state in function response by @tenitski in #496
• pkg: switch Function package APIs from v1beta1 to v1 by @haarchri in #521
• add spec.capabilities by @jastang in #449
• feat: add support for multiple inline templates by @doxsch in #519
• Remove tag workflow, replace me with Ezgi and Philippe in maintainers by @negz in #158
• Add myself as a maintainer by @adamwg in #551
• Handle namespaced ExtraResources properly by @bobh66 in #537
• Allow a default source path to be specified via envvar by @adamwg in #397
• Many renovate dependency updates

New Contributors

• @haarchri made their first contribution in #495
• @jbw976 made their first contribution in #530
• @avarei made their first contribution in #534
• @ulucinar made their first contribution in #545
• @tenitski made their first contribution in #496
• @doxsch made their first contribution in #519
• @adamwg made their first contribution in #551

Full Changelog: v0.11.0...v0.12.0

v0.11.5

Summary

This release includes critical security fixes and tooling updates.

Highlights

• Security: Updated Go to 1.25.8 to remediate CVE-2026-25679, CVE-2026-27142, and CVE-2026-27139
• Tooling: Updated golangci-lint to v2.11.3 for Go 1.25 compatibility
• Code Quality: Fixed linter warnings for cleaner code

v0.11.4

This release updates go mod dependencies to fix the following CVEs:

CVE/GHSA	Severity	Package	Fixed Version
CVE-2025-68121	Critical	stdlib	go1.24.13
CVE-2025-61726	High	stdlib	go1.24.13
CVE-2025-61731	High	stdlib	go1.24.13
CVE-2025-61732	High	stdlib	go1.24.13
CVE-2025-61728	Medium	stdlib	go1.24.13
CVE-2025-61730	Medium	stdlib	go1.24.13

What's Changed

• fix(security): remediate CVE vulnerabilities by @upbound-bot in #542

Full Changelog: v0.11.3...v0.11.4

v0.11.3

This release updates go mod dependencies to fix the following CVEs:

• CVE-2025-61729
• CVE-2025-61727

What's Changed

• [release-0.11]: Update go.mod dependencies [SECURITY] by @upbound-bot in #522

Full Changelog: v0.11.2...v0.11.3

v0.11.2

This release updates go mod dependencies to fix the following CVEs:

• GHSA-j5w8-q4qc-rx2x
• GHSA-f6x5-jh6r-wrfv

What's Changed

• [release-0.11]: Update go.mod dependencies [SECURITY] by @aswnrana in #512

New Contributors

• @aswnrana made their first contribution in #512

v0.11.1

This release updates go mod dependencies to fix the following CVEs:

• CVE-2025-61723
• CVE-2025-61725
• CVE-2025-58186
• CVE-2025-61724
• CVE-2025-47912
• CVE-2025-58188
• CVE-2025-58189
• CVE-2025-58185
• CVE-2025-58187
• CVE-2025-58183

What's Changed

• [release-0.11]: Update go.mod dependencies [SECURITY] by @upbound-bot in #507

Full Changelog: v0.11.0...v0.11.1

v0.10.1

This release updates go mod dependencies to fix the following CVEs:

• GHSA-wprm-fgrx-xj42
• GHSA-62jj-gr2r-5c34
• GHSA-gwrf-jf3h-w649
• GHSA-j5pm-7495-qmr3
• GHSA-6v2p-p543-phr9

What's Changed

• [release-0.10]: Update go.mod dependencies [SECURITY] by @upbound-bot in #490

Full Changelog: v0.10.0...v0.10.1

v0.11.0

What's Changed

• Add support for reading templates from an environment key by @bobh66 in #438
• Add bobh66 to owners by @bobh66 in #470
• fix(deps): update module dario.cat/mergo to v1.0.2 by @renovate[bot] in #455
• chore(deps): update docker/login-action action to v3.5.0 by @renovate[bot] in #200
• fix(deps): update k8s.io/utils digest to 0af2bda by @renovate[bot] in #242
• fix(deps): update module github.com/alecthomas/kong to v1 by @renovate[bot] in #121
• fix(deps): update module github.com/google/go-cmp to v0.7.0 by @renovate[bot] in #169
• chore(deps): update examples by @renovate[bot] in #157
• chore(deps): update actions/checkout action to v4.3.0 by @renovate[bot] in #475
• fix(deps): update module google.golang.org/protobuf to v1.36.8 by @renovate[bot] in #476
• fix(deps): update module github.com/crossplane/crossplane-runtime to v1.20.0 by @renovate[bot] in #160
• chore(deps): update actions/checkout action to v5 by @renovate[bot] in #477
• Add tests for merging behaviour of ConnectionDetails and XR Status by @twobiers in #431
• Allow using getResourceCondition directly on observed resources by @olvesh in #463
• chore(deps): update actions/download-artifact action to v5 by @renovate[bot] in #478
• fix: update xpkg version in custom-delim example by @joebowbeer in #442
• fix header in README.md for include function by @piotrkorlaga in #175
• Chore: Change Log-Level to debug by @mattagohni in #173
• feat: add helper method to retreive extra resources by @twobiers in #177
• chore(deps): update xpkg.upbound.io/crossplane-contrib/function-go-templating docker tag to v0.10.0 by @renovate[bot] in #480
• feat: Add utility function to retrieve function credentials by @mcfarlanem in #151

New Contributors

• @olvesh made their first contribution in #463
• @joebowbeer made their first contribution in #442
• @piotrkorlaga made their first contribution in #175
• @mattagohni made their first contribution in #173
• @mcfarlanem made their first contribution in #151

Full Changelog: v0.10.0...v0.11.0

v0.10.0

What's Changed

• Update examples by @renovate in #150
• chore: update golang.org/x/net to v0.34.0 by @AbrohamLincoln in #152
• Add a new github workflow 'tag' by @turkenf in #156
• Update Go version and enable pushing to ghcr.io in CI by @turkenf in #171
• Update docker buildx version in ci.yml by @jastang in #392
• Test larger gRPC message size by @stevendborrelli in #391
• Update go mod dependencies [Security] by @turkenf in #419

New Contributors

• @AbrohamLincoln made their first contribution in #152
• @jastang made their first contribution in #392

Full Changelog: v0.9.2...v0.10.0