Crossplane v2.3.4

Version v2.3.4 is a critical patch release that stabilizes the Usage controller to prevent reconciliation loops, improves security transparency by making container images scannable, and addresses multiple CVEs in core dependencies.

Prevent repeated owner updates for composed Usages — This prevents an infinite reconciliation loop that could trigger the composite resource (XR) circuit breaker, ensuring stable resource management and reducing unnecessary API server load.

Enhanced container image vulnerability scanning support — By changing the build process, Crossplane images are now compatible with industry-standard vulnerability scanners, allowing security teams to verify the integrity and safety of the software within their clusters.

Critical security dependency updates — Protects your control plane from known vulnerabilities in core networking and signing libraries, including gRPC and the sigstore stack used for verifying software provenance.

Stability improvements for crossplane render — Improves the reliability of local development and debugging workflows by ensuring the render command respects existing identifiers and validates resources before processing.