chore(deps): update dependency crossplane-contrib/function-patch-and-transform to v0.10.4

[renovate]

This PR contains the following updates:

Package	Update	Change
crossplane-contrib/function-patch-and-transform	minor	v0.4.0 → v0.10.4

---

Release Notes

crossplane-contrib/function-patch-and-transform (crossplane-contrib/function-patch-and-transform)

v0.10.4

Compare Source

Summary

This release includes security fixes and dependency updates.

Highlights

• Security vulnerability remediation for Go standard library
• Updated Go version to 1.25.9 to address CVE-2026-27140, CVE-2026-32283, CVE-2026-32280, CVE-2026-32281, CVE-2026-32289, CVE-2026-32282, and CVE-2026-32288

v0.10.3

Compare Source

Summary

This release includes security fixes for gRPC dependencies.

Highlights

• Security vulnerability remediation for Google gRPC
• Updated google.golang.org/grpc to v1.79.3 to address GHSA-p77j-4mvh-x3m3

Security Fixes

• GHSA-p77j-4mvh-x3m3: Fixed by updating gRPC to v1.79.3

v0.10.2

Compare Source

Summary

This release includes security fixes.

Highlights

• Security vulnerability remediation by updating Go version to 1.25.8
• Addresses CVE-2026-25679, CVE-2026-27142, and CVE-2026-27139

v0.10.1

Compare Source

This release fixes CVE vulnerabilities identified by security scanning.

CVE/GHSA	Severity	Package	Fixed Version
CVE-2025-68121	Critical	stdlib	go1.24.13
CVE-2025-61726	High	stdlib	go1.24.13
CVE-2025-61731	High	stdlib	go1.24.13
CVE-2025-61732	High	stdlib	go1.24.13
CVE-2025-61728	Medium	stdlib	go1.24.13
CVE-2025-61730	Medium	stdlib	go1.24.13

What's Changed

• fix(security): remediate CVE vulnerabilities by @​upbound-bot in #​289

Full Changelog: crossplane-contrib/function-patch-and-transform@v0.10.0...v0.10.1

v0.10.0

Compare Source

Highlights 🎉

• Connection details support: This function now supports XR connection details for v2 XRs. This native functionality was removed from core Crossplane in v2, but has now been restored within the function itself to improve backward compatibility of this function. Using connectionDetails for composed resources in a v2 XR now causes this function to compose a Secret containing the connection details and include it along with the XR's other composed resources. More details about how to use this feature can be found in the README.

What's Changed

• Add option for max grpc message size by @​stevendborrelli in #​219
• fix(deps): update module github.com/crossplane/crossplane-runtime to v1.20.0 by @​renovate[bot] in #​167
• Do not gate publishing to ghcr.io on a token for Upbound registry by @​jastang in #​181
• fix(deps): update k8s.io/utils digest to 4c0f3b2 by @​renovate[bot] in #​143
• [main]: Update go.mod dependencies [SECURITY] by @​upbound-bot in #​259
• chore: fix owners emails by @​jbw976 in #​261
• chore(deps): update actions/checkout action to v4.3.1 by @​renovate[bot] in #​257
• fix(deps): update k8s.io/utils digest to 61b37f7 by @​renovate[bot] in #​255
• chore(deps): update github artifact actions (major) by @​renovate[bot] in #​239
• fix(deps): update module github.com/alecthomas/kong to v1 by @​renovate[bot] in #​145
• chore(deps): update dependency ubuntu to v24 by @​renovate[bot] in #​150
• chore(deps): update docker/login-action action to v3.6.0 by @​renovate[bot] in #​176
• fix(deps): update module github.com/google/go-cmp to v0.7.0 by @​renovate[bot] in #​269
• fix(deps): update module google.golang.org/protobuf to v1.36.11 by @​renovate[bot] in #​270
• Update to crossplane-runtime v2 and function-sdk-go 0.5.0 by @​bobh66 in #​272
• chore(deps): update actions/checkout action to v6 by @​renovate[bot] in #​273
• chore(deps): update actions/setup-go action to v6 by @​renovate[bot] in #​274
• fix(deps): update k8s.io/utils digest to 98d557b - autoclosed by @​renovate[bot] in #​276
• Update OWNERS by @​bobh66 in #​271
• feat: automatic connection details support for v2 XRs by @​jbw976 in #​278

New Contributors

• @​jastang made their first contribution in #​181
• @​bobh66 made their first contribution in #​272

Full Changelog: crossplane-contrib/function-patch-and-transform@v0.9.0...v0.10.0

v0.9.3

Compare Source

This release updates go mod dependencies to fix the following CVEs:

• CVE-2025-61729
• CVE-2025-61727

What's Changed

• [release-0.9]: Update go.mod dependencies [SECURITY] by @​upbound-bot in #​268

Full Changelog: crossplane-contrib/function-patch-and-transform@v0.9.2...v0.9.3

v0.9.2

Compare Source

This release updates go mod dependencies to fix the following CVEs:

• CVE-2025-61723
• CVE-2025-61725
• CVE-2025-58186
• CVE-2025-61724
• CVE-2025-47912
• CVE-2025-58188
• CVE-2025-58189
• CVE-2025-58185
• CVE-2025-58187
• CVE-2025-58183

What's Changed

• [release-0.9]: Update go.mod dependencies [SECURITY] by @​upbound-bot in #​266

Full Changelog: crossplane-contrib/function-patch-and-transform@v0.9.1...v0.9.2

v0.9.1

Compare Source

This release updates go mod dependencies to fix the following CVEs:

• GHSA-wprm-fgrx-xj42
• GHSA-62jj-gr2r-5c34
• GHSA-gwrf-jf3h-w649
• GHSA-j5pm-7495-qmr3
• GHSA-6v2p-p543-phr9

What's Changed

• [release-0.9]: Update go.mod dependencies [SECURITY] by @​upbound-bot in #​258

Full Changelog: crossplane-contrib/function-patch-and-transform@v0.9.0...v0.9.1

v0.9.0

Compare Source

What's Changed

• chore: update golang.org/x/net to v0.33.0 by @​AbrohamLincoln in #​159
• Add a new github workflow 'tag' by @​turkenf in #​164
• Update Go version and enable pushing to ghcr.io in CI by @​turkenf in #​171
• Fix broken links in README.md by @​viallikavoo in #​192
• Update go mod dependencies [Security] by @​turkenf in #​215

New Contributors

• @​viallikavoo made their first contribution in #​192

Full Changelog: crossplane-contrib/function-patch-and-transform@v0.8.2...v0.9.0

v0.8.2

Compare Source

What's Changed

• [release-0.8] Update Go version and enable pushing to ghcr.io in CI by @​turkenf in #​172

Full Changelog: crossplane-contrib/function-patch-and-transform@v0.8.1...v0.8.2

v0.8.1

Compare Source

What's Changed

• Update module golang.org/x/net to v0.33.0 release-0.8 [SECURITY] by @​turkenf in #​163

Full Changelog: crossplane-contrib/function-patch-and-transform@v0.8.0...v0.8.1

v0.8.0

Compare Source

What's Changed

• chore(deps): update dependency go to v1.22.6 by @​renovate in #​140
• fixed missing mergeoptions for CombineFromVariablesPatch by @​gschei in #​141
• Use distroless/static image instead of distroless/base since glibc is not used by @​vilmosmartinek in #​157
• chore: update go to 1.22.9 by @​AbrohamLincoln in #​154
• fix: Mark composite as unready if resources are skipped by @​MisterMX in #​137
• fix(deps): update module github.com/crossplane/function-sdk-go to v0.4.0 by @​renovate in #​148

New Contributors

• @​vilmosmartinek made their first contribution in #​157
• @​AbrohamLincoln made their first contribution in #​154

Full Changelog: crossplane-contrib/function-patch-and-transform@v0.7.0...v0.8.0

v0.7.0

Compare Source

What's Changed

• added string transform replace by @​gschei in #​135
• add required to resources.patches.transforms.string.type by @​jaymiracola in #​131
• Update go.mod dependencies regarding CVE issue by @​turkenf in #​138
• chore(deps): update dependency go to v1.22.5 by @​renovate in #​126
• fix(deps): update module google.golang.org/protobuf to v1.34.2 by @​renovate in #​128
• chore(deps): update docker/build-push-action action to v6 by @​renovate in #​129
• fix(deps): update k8s.io/utils digest to 18e509b by @​renovate in #​134
• added string transform join by @​gschei in #​133
• Check and run go mod tidy by @​Moulick in #​139

New Contributors

• @​gschei made their first contribution in #​135
• @​jaymiracola made their first contribution in #​131
• @​turkenf made their first contribution in #​138
• @​Moulick made their first contribution in #​139

Full Changelog: crossplane-contrib/function-patch-and-transform@v0.6.0...v0.7.0

v0.6.0

Compare Source

What's Changed

• chore(deps): update golangci/golangci-lint-action action to v5 by @​renovate in #​111
• Clarify mergeOptions to toFieldPath migration logic by @​jbw976 in #​112
• Provider multistep pipeline example mixing P&T and Go Templating by @​ytsarev in #​115
• chore(deps): update dependency go to v1.22.3 by @​renovate in #​118
• chore(deps): update golangci/golangci-lint-action action to v6 by @​renovate in #​117
• fix(deps): update module google.golang.org/protobuf to v1.34.1 by @​renovate in #​113
• fix(deps): update module k8s.io/utils to v0.0.0-20240502163921-fe8a2dddb1d0 by @​renovate in #​114
• fix: allow using function only to patch to and from the environment by @​phisco in #​122
• fix: Add back support for To|FromEnvironmentFieldPath type in environment patches by @​truongnht in #​125

New Contributors

• @​ytsarev made their first contribution in #​115
• @​truongnht made their first contribution in #​125

Full Changelog: crossplane-contrib/function-patch-and-transform@v0.5.0...v0.6.0

v0.5.0

Compare Source

Notable Changes

• Update toFieldPath policies with options compatible to upstream mergeOptions by @​ravilr in #​102

What's Changed

• fix(deps): update kubernetes packages to v0.29.3 by @​renovate in #​100
• pass down mergeOptions for wildcarded toField patches by @​ravilr in #​103
• round-trip the fieldPath value in FromFieldPath patches through integer-preserving JSON unmarhsal by @​ravilr in #​105
• chore(deps): update dependency go to v1.22.2 by @​renovate in #​108

New Contributors

• @​ravilr made their first contribution in #​102

Full Changelog: crossplane-contrib/function-patch-and-transform@v0.4.0...v0.5.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[haarchri]

we need to update first our configuration repos - to have the same p&t function running