v2.4.0

The v2.4.0 release of crossplane-runtime is a regular quarterly release that accompanies Crossplane v2.4. It brings memory and reconciliation improvements for provider authors, along with security fixes in the library's dependencies.

🎉 Highlights

• Strip CRD schemas from the informer cache: Providers that support "safe-start" cache every CRD in the cluster, including its full OpenAPI v3 validation schema. On clusters with a lot of CRDs this can cause excessive memory usage by the provider pod and lead to OOMKilled restarts. The new TransformStripCRDSchema drops non critical fields from the cached CRDs and helps providers drastically reduce their memory consumption. Added in #1058, fixing #1056.

  • Providers opt in by wiring it into their manager's cache options:

    cache.Options{
        ByObject: map[client.Object]cache.ByObject{
            &apiextensionsv1.CustomResourceDefinition{}: {
                Transform: customresourcesgate.TransformStripCRDSchema,
            },
        },
    }

  • For more integration details, see reference PR crossplane-contrib/provider-helm#392

  • Measured against a cluster with 2,045 Upjet AWS CRDs, provider memory usage dropped from ~630 MiB to ~83 MiB.

What's Changed

• build: add release-2.3 to renovate baseBranches by @jbw976 in #995
• chore: remove release-2.0 from renovate baseBranches by @jbw976 in #997
• chore(deps): update module golang.org/x/crypto to v0.52.0 [security] (main) by @crossplane-renovate[bot] in #998
• chore(deps): update renovatebot/github-action action to v46.1.14 (main) by @crossplane-renovate[bot] in #981
• chore(deps): update module golang.org/x/net to v0.55.0 [security] (main) by @crossplane-renovate[bot] in #1000
• chore(deps): update actions/checkout digest to df4cb1c (main) by @crossplane-renovate[bot] in #1012
• chore(deps): update cachix/install-nix-action digest to 8aa0397 (main) by @crossplane-renovate[bot] in #983
• chore(deps): update github/codeql-action digest to 8aad20d (main) by @crossplane-renovate[bot] in #969
• chore(deps): update actions/checkout action to v6.0.3 (main) by @crossplane-renovate[bot] in #1014
• chore(deps): update renovatebot/github-action action to v46.1.15 (main) by @crossplane-renovate[bot] in #1015
• chore(deps): update actions/stale action to v10 (main) by @crossplane-renovate[bot] in #1016
• chore(deps): update cachix/cachix-action action to v17 (main) by @crossplane-renovate[bot] in #1017
• chore(deps): update codecov/codecov-action action to v7 (main) by @crossplane-renovate[bot] in #1018
• chore(deps): update dependency ubuntu to v24 (main) by @crossplane-renovate[bot] in #1019
• fix(deps): update module github.com/sigstore/sigstore to v1.10.8 (main) by @crossplane-renovate[bot] in #1020
• chore(deps): update zeebe-io/backport-action action to v4.5.2 (main) by @crossplane-renovate[bot] in #1021
• chore(deps): update actions/create-github-app-token action to v3 (main) by @crossplane-renovate[bot] in #1023
• chore(deps): update actions/github-script action to v9 (main) by @crossplane-renovate[bot] in #1024
• fix(deps): update module github.com/google/go-containerregistry to v0.21.6 (main) by @crossplane-renovate[bot] in #1028
• fix(deps): update module github.com/in-toto/attestation to v1.2.0 (main) by @crossplane-renovate[bot] in #1029
• fix(tests): update error messages for semver v3.5.0 constraint quotes by @boxcee-interview in #1031
• fix(deps): update module github.com/masterminds/semver/v3 to v3.5.0 (main) by @crossplane-renovate[bot] in #1030
• fix(deps): update module google.golang.org/grpc to v1.81.1 (main) by @crossplane-renovate[bot] in #1032
• chore(deps): update gomod2nix digest to 1201ddd (main) by @crossplane-renovate[bot] in #1033
• fix(deps): update k8s.io/utils digest to ff6756f (main) by @crossplane-renovate[bot] in #1035
• fix(deps): update module k8s.io/klog/v2 to v2.140.0 (main) by @crossplane-renovate[bot] in #1036
• fix(deps): bump k8schain to pick up moby module migration by @lsviben in #1039
• chore(deps): update actions/checkout action to v7 (main) by @crossplane-renovate[bot] in #1042
• fix(deps): update module github.com/google/go-containerregistry to v0.21.7 (main) by @crossplane-renovate[bot] in #1041
• chore(deps): update module github.com/sigstore/rekor to v1.5.2 [security] (main) by @crossplane-renovate[bot] in #1044
• fix(deps): update module github.com/sigstore/cosign/v3 to v3.0.6 [security] (main) by @crossplane-renovate[bot] in #1045
• chore(deps): update module github.com/sigstore/timestamp-authority/v2 to v2.1.0 [security] (main) by @crossplane-renovate[bot] in #1050
• chore(deps): update module github.com/sigstore/sigstore-go to v1.2.0 [security] (main) by @crossplane-renovate[bot] in #1054
• fix(deps): combined security bumps (grpc, x/text) (main) by @lsviben in #1077
• chore(deps): update module github.com/klauspost/compress to v1.18.7 [security] (main) by @crossplane-renovate[bot] in #1083
• chore(deps): update module github.com/google/cel-go to v0.29.0 [security] (main) by @crossplane-renovate[bot] in #1078
• fix(ci): clean /homeless-shelter between Renovate's Nix builds by @jbw976 in #1085
• feat: add TransformStripCRDSchema for reduced cache memory usage by @rafal-jan in #1058
• chore(ci): enable weekly flake.lock maintenance for nix manager by @pujitha24 in #1087
• ci(renovate): disable the per-hour PR creation throttle by @jbw976 in #1091
• chore(deps): update cachix/install-nix-action digest to 630ae54 (main) by @crossplane-renovate[bot] in #1093
• chore(deps): update module github.com/sigstore/sigstore-go to v1.2.1 [security] (main) by @crossplane-renovate[bot] in #1092
• chore(deps): update actions/checkout digest to 3d3c42e (main) by @crossplane-renovate[bot] in #1089
• chore(deps): update actions/stale digest to 1e223db (main) by @crossplane-renovate[bot] in #1090
• fix(ci): prioritize flake.lock maintenance updates by @jbw976 in #1096
• chore(deps): update github/codeql-action digest to d1ba80a (main) by @crossplane-renovate[bot] in #1098
• chore(deps): update actions/checkout action to v7.0.1 (main) by @crossplane-renovate[bot] in #1099
• chore(deps): lock file maintenance (main) by @crossplane-renovate[bot] in #1097
• fix(deps): update module github.com/go-logr/logr to v1.4.4 (main) by @crossplane-renovate[bot] in #1100
• fix(deps): update module github.com/crossplane/crossplane/apis/v2 to v2.3.4 (main) by @crossplane-renovate[bot] in #1027
• fix(managed): requeue absent observe-only resources after the poll interval by @erikmiller-gusto in #1088
• fix(ci): pin which Nix Renovate's post-upgrade tasks use by @jbw976 in #1107
• build: bump pinned nixpkgs channel from nixos-25.11 to nixos-26.05 by @jbw976 in #1108
• chore(deps): update zeebe-io/backport-action action to v4.6.0 (main) by @crossplane-renovate[bot] in #1104
• chore(deps): update renovatebot/github-action action to v46.2.2 (main) by @crossplane-renovate[bot] in #1103
• chore(deps): lock file maintenance (main) by @crossplane-renovate[bot] in #1114
• chore(deps): update github/codeql-action digest to 5595cca (main) by @crossplane-renovate[bot] in #1115
• chore(deps): update module golang.org/x/mod to v0.40.0 [security] (release-2.4) by @crossplane-renovate[bot] in #1128
• chore(deps): lock file maintenance (release-2.4) by @crossplane-renovate[bot] in #1137
• chore(deps): update module github.com/google/cel-go to v0.30.0 [security] (release-2.4) by @crossplane-renovate[bot] in #1134

New Contributors

• @boxcee-interview made their first contribution in #1031
• @rafal-jan made their first contribution in #1058
• @pujitha24 made their first contribution in #1087
• @erikmiller-gusto made their first contribution in #1088

Full Changelog: v2.3.0...v2.4.0