fix(deps): update module github.com/crossplane/crossplane/v2 to v2.1.4

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/crossplane/crossplane/v2	v2.1.3 → v2.1.4

---

Release Notes

crossplane/crossplane (github.com/crossplane/crossplane/v2)

v2.1.4

Compare Source

This release backports #​7030 to the 2.1 branch to fix one of the issues reported in #​3423, where shared transitive dependencies could not be upgraded successfully. It also contains security updates to Crossplane's dependencies.

What's Changed

• chore(deps): update module github.com/quic-go/quic-go to v0.57.0 [security] (release-2.1) by @​crossplane-renovate[bot] in #​6978
• Backport #​7030 to release-2.1 by @​adamwg in #​7054
• [release-2.1] Update sigstore dependencies to fix CVEs by @​negz in #​7064
• chore(deps): update module github.com/theupdateframework/go-tuf/v2 to v2.4.1 [security] (release-2.1) by @​crossplane-renovate[bot] in #​7067
• chore(deps): update module github.com/go-chi/chi/v5 to v5.2.4 [security] (release-2.1) by @​crossplane-renovate[bot] in #​7040
• [Backport release-2.1] fix(render): propagate root composite identity through nested XR trees by @​github-actions[bot] in #​6974

Full Changelog: crossplane/crossplane@v2.1.3...v2.1.4

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 11 additional dependencies were updated
• The go directive was updated for compatibility reasons

Details:

Package	Change
go	1.25.0 -> 1.25.6
github.com/go-openapi/jsonpointer	v0.21.0 -> v0.22.4
github.com/go-openapi/jsonreference	v0.21.0 -> v0.21.4
github.com/go-openapi/swag	v0.23.0 -> v0.25.4
github.com/prometheus/common	v0.66.1 -> v0.67.4
github.com/prometheus/procfs	v0.16.1 -> v0.17.0
github.com/spf13/afero	v1.12.0 -> v1.15.0
go.uber.org/zap	v1.27.0 -> v1.27.1
golang.org/x/oauth2	v0.30.0 -> v0.34.0
golang.org/x/time	v0.11.0 -> v0.14.0
google.golang.org/genproto/googleapis/rpc	v0.0.0-20251007200510-49b9836ed3ff -> v0.0.0-20251222181119-0a764e51fe1b
google.golang.org/grpc	v1.75.1 -> v1.78.0