v0.6.0

Release Notes for v0.8.2

Release Date: March 23, 2026

This is primarily a maintenance release focusing on security hardening and keeping dependencies up to date.

Improvements

Security Enhancements (#110, #111, #113, #115)

• Update github.com/crossplane/function-sdk-go to v0.6.2 to address CVE CVE-2026-33186
• GitHub Actions Security: Pinned all GitHub Actions to specific commit digests (SHA) to improve supply chain security and ensure reproducible builds. This prevents potential security issues from automatic action updates.
• Dependency Pinning: All dependencies are now pinned to specific versions for improved build reproducibility and security.

Dependency Updates

Go Modules

• github.com/crossplane/function-sdk-go: Updated from v0.6.0 → v0.6.1 → v0.6.2 (#113, #115)
  • Includes latest bug fixes and improvements from the Crossplane Function SDK
• github.com/go-git/go-git/v6: Updated to v6.0.0-20260320111621-ea91339c5263 (#102)
• kubernetes packages: Updated to v0.35.3 (#112)

CI/CD

• docker/build-push-action: Updated to v7 (#106)
  • Latest Docker build action with improved performance and features

---

Contributors

Thank you to all contributors who made this release possible:

• @stevendborrelli
• @renovate[bot]

Full Changelog: crossplane-contrib/function-tag-manager@v0.8.1...v0.8.2

v0.5.0

v0.5.0 brings several notable improvements:

• Support for the new function response cache in Crossplane 1.20, reducing the number of times the function is invoked.
• Addition of a fieldRef that can have a default value or an empty string
• Better error reporting when a shell command returns an error

What's Changed

• Update example with function package by @stevendborrelli in #64
• Update docker/login-action action to v3.5.0 by @renovate[bot] in #66
• Update dependency go to v1.24.6 by @renovate[bot] in #58
• Update module github.com/crossplane/crossplane-runtime to v1.20.0 by @renovate[bot] in #53
• Update module google.golang.org/protobuf to v1.36.7 by @renovate[bot] in #68
• Update actions/download-artifact action to v5 by @renovate[bot] in #67
• Update module github.com/alecthomas/kong to v1.12.1 by @renovate[bot] in #63
• Add fieldRef by @stevendborrelli in #74
• Add TTL support for function caching by @stevendborrelli in #70
• Update module google.golang.org/protobuf to v1.36.8 by @renovate[bot] in #77
• Update actions/checkout action to v4.3.0 by @renovate[bot] in #71
• Update module k8s.io/apimachinery to v0.33.4 by @renovate[bot] in #5
• Capture stdout and stderr even if cmd.Run fails by @stevendborrelli in #78
• Capture stdout and stderr even if cmd.Run fails by @mproffitt in #34
• Update files for v0.5.0 release by @stevendborrelli in #79

New Contributors

• @mproffitt made their first contribution in #34

Full Changelog: v0.4.1...v0.5.0

v0.4.1

What's Changed

Version v0.4.1 fixes a build issue in which x86 binaries and libraries were packaged in the arm64 image.

https://github.com/crossplane-contrib/function-shell/pkgs/container/function-shell/444879784?tag=v0.4.1

• move location of env vars by @stevendborrelli in #55
• Update xpkg.upbound.io/crossplane-contrib/function-extra-resources Docker tag to v0.1.0 by @renovate in #57
• Enable debugging on Docker builds by @stevendborrelli in #59
• remove buildplatform from runtime image by @stevendborrelli in #61
• Feat/owners by @humoflife in #62

Full Changelog: v0.4.0...v0.4.1

v0.4.0

What's Changed

The v0.4.0 release includes a Debian Bookworm base image to address rendering issues on M-based Mac devices.

• update build with common actions by @stevendborrelli in #48
• update for sdk 0.4.0 by @stevendborrelli in #49
• Update dependency go to v1.24.3 by @renovate in #10
• Update dependency ubuntu to v24 by @renovate in #51
• Update module github.com/alecthomas/kong to v1.10.0 by @renovate in #33
• Update docker/login-action action to v3.4.0 by @renovate in #50
• Update module sigs.k8s.io/controller-tools to v0.18.0 by @renovate in #11
• Update Dockerfile to use python base image by @stevendborrelli in #47
• Update module github.com/alecthomas/kong to v1.11.0 by @renovate in #52

Full Changelog: v0.3.0...v0.4.0

v0.3.0

What's Changed

• Update Dockerfile to add nonroot user and arm64 AWS binaries by @stevendborrelli in #25
• Update crossplane.yaml by @jastang in #22
• fixed 1 high + 2 medium CVEs by @humoflife in #27
• Update module google.golang.org/protobuf to v1.36.0 by @renovate in #29
• Update module github.com/alecthomas/kong to v1 by @renovate in #21
• Update dependency ubuntu to v24 by @renovate in #30
• Update docker/build-push-action action to v6 by @renovate in #17
• update package meta info by @humoflife in #31

New Contributors

• @stevendborrelli made their first contribution in #25
• @jastang made their first contribution in #22
• @renovate made their first contribution in #29

Full Changelog: v0.2.0...v0.3.0

v0.2.0

• feat: add ability for function-shell to use ProviderConfig to auth to AWS cloud account
• feat: add AWS CLI to the build
• feat: add AWS CLI example
• feat: add valueRef to environment variables parameters
• feat: add air.toml for hot reload