Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 7, 2025

Bumps github.com/crossplane/upjet from 1.9.0 to 1.10.0.

Release notes

Sourced from github.com/crossplane/upjet's releases.

v1.10.0

Critical Race Condition Fix - Conversion Webhooks

Important Stability Improvement: This release resolves a critical race condition in conversion path registration that was causing intermittent failures in provider packages.

Technical Details:

  • Problem: A data race existed in the conversion.Convert method where multiple goroutines could simultaneously modify registered conversion paths during in-place sorting
  • Impact: This race condition was observed in provider packages and could cause unexpected conversion webhook failures
  • Solution: Fixed by creating a copy of registered conversion paths before performing in-place sorting, preventing concurrent modifications

This fix addresses reliability issues that users may have experienced with conversion webhooks, particularly in high-load environments or during rapid resource operations.

Additional Bug Fixes

  • Panic Prevention: Fixed potential panic when ts.FrameworkProvider is nil (#500)
  • Wildcard Conversion: Corrected wildcard expand behavior during resource conversion (#504)
  • Connection Strings: Fixed incorrectly generated connection string maps (#506)
  • External Names: Removed unnecessary ID validation for resources without ID fields (#507)
  • State Management: Added custom state check configuration for Terraform Plugin Framework resources (#515)

What's Changed

New Contributors

Full Changelog: crossplane/upjet@v1.9.0...v1.10.0

Commits
  • bc8ec41 Merge pull request #552 from crossplane/prep-release-1.10
  • 2136cc6 Fix the race on the registered conversion paths in conversion.Convert
  • 7662364 Merge pull request #515 from sergenyalcin/custom-state-check
  • 9505d31 Change function name to TerraformPluginFrameworkIsStateEmptyFn
  • 5ac5cb0 Custom nil check for state
  • 0af42ca Merge pull request #507 from erhancagirici/remove-id-check-in-externalname-fw
  • f794e5e remove id validation from setExternalName for resources without id field
  • c4332e6 Merge pull request #506 from sergenyalcin/fix-sensitive-parameter-generation
  • dd08349 Fix linter
  • c42638e Fix incorrectly generated connection string map
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/crossplane/upjet](https://github.com/crossplane/upjet) from 1.9.0 to 1.10.0.
- [Release notes](https://github.com/crossplane/upjet/releases)
- [Commits](crossplane/upjet@v1.9.0...v1.10.0)

---
updated-dependencies:
- dependency-name: github.com/crossplane/upjet
  dependency-version: 1.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Nov 7, 2025
@dependabot dependabot bot requested a review from yfodil as a code owner November 7, 2025 09:08
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Nov 7, 2025
@codecov-commenter
Copy link

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 0.00%. Comparing base (07f2813) to head (fc856a2).

Additional details and impacted files
@@          Coverage Diff          @@
##            main    #186   +/-   ##
=====================================
  Coverage   0.00%   0.00%           
=====================================
  Files        476     476           
  Lines      60567   60567           
=====================================
  Misses     60567   60567           
Flag Coverage Δ
unittests 0.00% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Nov 10, 2025

Superseded by #187.

@dependabot dependabot bot closed this Nov 10, 2025
@dependabot dependabot bot deleted the dependabot/go_modules/github.com/crossplane/upjet-1.10.0 branch November 10, 2025 09:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants