Crossplane v1.20.12

v1.20.12 is a patch release scoped to fixing issues reported by users of Crossplane v1.20 and fixing security related issues in Crossplane's dependencies.

🎉 Highlights

• Dependency security updates: Bumps the Go toolchain to 1.25.13 (#7755), go-git (#7722), and golang.org/x/mod (#7740), plus two combined sets of vulnerable dependency updates (#7646, #7675), to pick up upstream CVE fixes. crossplane-runtime is also bumped to v1.20.11 (#7767), which carries its own set of security dependency updates.

What's Changed

• fix(deps): update vulnerable dependencies [security] (release-1.20) by @crossplane-renovate[bot] in https://github.com/crossplane/crossplane/pull/7646
• chore(deps): update amazon/aws-cli docker tag to v2.36.13 (release-1.20) by @crossplane-renovate[bot] in https://github.com/crossplane/crossplane/pull/7514
• chore(deps): update gcr.io/distroless/static docker digest to 9197324 (release-1.20) by @crossplane-renovate[bot] in https://github.com/crossplane/crossplane/pull/7512
• chore(deps): update vulnerable dependencies [security] (release-1.20) by @crossplane-renovate[bot] in https://github.com/crossplane/crossplane/pull/7675
• fix(deps): update module github.com/go-git/go-git/v5 to v5.19.2 [security] (release-1.20) by @crossplane-renovate[bot] in https://github.com/crossplane/crossplane/pull/7722
• chore(deps): update module golang.org/x/mod to v0.40.0 [security] (release-1.20) by @crossplane-renovate[bot] in https://github.com/crossplane/crossplane/pull/7740
• build(deps): bump Go to 1.25.13 [security] [release-1.20] by @phisco in https://github.com/crossplane/crossplane/pull/7755
• chore(deps): bump crossplane-runtime to v1.20.11 by @jbw976 in https://github.com/crossplane/crossplane/pull/7767

Full Changelog: https://github.com/crossplane/crossplane/compare/v1.20.11...v1.20.12