v0.8.0

Summary

This release includes new features, bug fixes, and security updates.

Highlights

• New Feature: Match labels from environment field path (FromEnvironmentFieldPath) for dynamic environment configuration selection
• Bug Fix: Resolve FromEnvironmentFieldPath selectors against merged environment, fixing an issue where selectors reading values from EnvironmentConfigs resolved by the same step would fail or be silently dropped
• Dependency Update: Bump crossplane-runtime to v2.4.0
• Security: Remediate multiple CVE vulnerabilities including:
  • Updated Go to 1.26.5 (fixes 13 Go standard library vulnerabilities)
  • Updated golang.org/x/net to v0.56.0 (fixes 9 vulnerabilities including GHSA-5cv4-jp36-h3mw)
  • Updated golang.org/x/text to v0.39.0 (fixes GO-2026-5970)
  • Updated google.golang.org/grpc to v1.82.1 (fixes GHSA-hrxh-6v49-42gf)
  • Updated golang.org/x/sys to v0.46.0 (fixes GO-2026-5024)

Other Improvements

• Refactored match label building and environment map extraction for better code organization
• Updated CI workflow to use Go 1.26.5

What's Changed

• chore: run go generate by @tenstad in #120
• feat: match labels FromEnvironmentFieldPath by @tenstad in #119
• fix(security): remediate CVE vulnerabilities by @ulucinar in #128
• docs: document FromEnvironmentFieldPath rerun on updated value by @tenstad in #129
• deps: update renovate configuration by @erhancagirici in #130
• fix(renovate): match ARG GO_VERSION in Dockerfile by @phisco in #132
• feat: Update crossplane runtime to v2.4.0 by @yeldiRium in #135
• Update codeowners by @sergenyalcin in #145
• fix(security): remediate CVE vulnerabilities in google.golang.org/grpc by @ulucinar in #143

New Contributors

• @yeldiRium made their first contribution in #135
• @sergenyalcin made their first contribution in #145

Full Changelog: v0.7.5...v0.8.0