fix(deps): update module github.com/crossplane/crossplane to v1.20.5

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	OpenSSF
github.com/crossplane/crossplane	require	patch	v1.20.3 → v1.20.5

---

Release Notes

crossplane/crossplane (github.com/crossplane/crossplane)

v1.20.5

Compare Source

This release backports #​7030 to the 1.20 branch to fix one of the issues reported in #​3423, where shared transitive dependencies could not be upgraded successfully. It also contains security updates to Crossplane's dependencies.

What's Changed

• Backport #​7030 to release-1.20 by @​adamwg in #​7052
• [release-1.20] Update sigstore dependencies to fix CVEs by @​negz in #​7066

Full Changelog: crossplane/crossplane@v1.20.4...v1.20.5

v1.20.4

Compare Source

What's Changed

• chore(deps): update module golang.org/x/crypto to v0.43.0 [security] (release-1.20) by @​crossplane-renovate[bot] in #​6922
• [Backport release-1.20] Fix XRD controller watch startup after transient failures by @​negz in #​6931
• [Backport release-1.20] Fix claim controller watch startup after transient failures by @​negz in #​6936
• chore(deps): update module golang.org/x/crypto to v0.45.0 [security] (release-1.20) by @​crossplane-renovate[bot] in #​6938
• [Backport release-1.20] fix: Add TLS as app protocol to function service by @​negz in #​6948

Full Changelog: crossplane/crossplane@v1.20.3...v1.20.4

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 62 additional dependencies were updated
• The go directive was updated for compatibility reasons

Details:

Package	Change
go	1.25.4 -> 1.25.6
golang.org/x/text	v0.31.0 -> v0.32.0
cloud.google.com/go/auth	v0.17.0 -> v0.18.0
github.com/aws/aws-sdk-go-v2	v1.39.6 -> v1.41.0
github.com/aws/aws-sdk-go-v2/config	v1.31.17 -> v1.32.5
github.com/aws/aws-sdk-go-v2/credentials	v1.18.21 -> v1.19.5
github.com/aws/aws-sdk-go-v2/feature/ec2/imds	v1.18.13 -> v1.18.16
github.com/aws/aws-sdk-go-v2/internal/configsources	v1.4.13 -> v1.4.16
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2	v2.7.13 -> v2.7.16
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding	v1.13.3 -> v1.13.4
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url	v1.13.13 -> v1.13.16
github.com/aws/aws-sdk-go-v2/service/sso	v1.30.1 -> v1.30.7
github.com/aws/aws-sdk-go-v2/service/ssooidc	v1.35.5 -> v1.35.12
github.com/aws/aws-sdk-go-v2/service/sts	v1.39.1 -> v1.41.5
github.com/aws/smithy-go	v1.23.2 -> v1.24.0
github.com/coreos/go-oidc/v3	v3.16.0 -> v3.17.0
github.com/docker/cli	v28.5.2+incompatible -> v29.0.3+incompatible
github.com/go-chi/chi/v5	v5.2.3 -> v5.2.4
github.com/go-openapi/analysis	v0.24.0 -> v0.24.1
github.com/go-openapi/errors	v0.22.3 -> v0.22.6
github.com/go-openapi/jsonpointer	v0.22.1 -> v0.22.4
github.com/go-openapi/jsonreference	v0.21.2 -> v0.21.4
github.com/go-openapi/loads	v0.23.1 -> v0.23.2
github.com/go-openapi/runtime	v0.29.0 -> v0.29.2
github.com/go-openapi/spec	v0.22.0 -> v0.22.3
github.com/go-openapi/strfmt	v0.24.0 -> v0.25.0
github.com/go-openapi/swag	v0.25.1 -> v0.25.4
github.com/go-openapi/swag/cmdutils	v0.25.1 -> v0.25.4
github.com/go-openapi/swag/conv	v0.25.1 -> v0.25.4
github.com/go-openapi/swag/fileutils	v0.25.1 -> v0.25.4
github.com/go-openapi/swag/jsonname	v0.25.1 -> v0.25.4
github.com/go-openapi/swag/jsonutils	v0.25.1 -> v0.25.4
github.com/go-openapi/swag/loading	v0.25.1 -> v0.25.4
github.com/go-openapi/swag/mangling	v0.25.1 -> v0.25.4
github.com/go-openapi/swag/netutils	v0.25.1 -> v0.25.4
github.com/go-openapi/swag/stringutils	v0.25.1 -> v0.25.4
github.com/go-openapi/swag/typeutils	v0.25.1 -> v0.25.4
github.com/go-openapi/swag/yamlutils	v0.25.1 -> v0.25.4
github.com/go-openapi/validate	v0.25.0 -> v0.25.1
github.com/google/go-containerregistry	v0.20.6 -> v0.20.7
github.com/googleapis/enterprise-certificate-proxy	v0.3.7 -> v0.3.9
github.com/googleapis/gax-go/v2	v2.15.0 -> v2.16.0
github.com/redis/go-redis/v9	v9.16.0 -> v9.17.2
github.com/sigstore/rekor	v1.4.2 -> v1.5.0
github.com/sigstore/sigstore	v1.9.6-0.20250729224751-181c5d3339b3 -> v1.10.4
github.com/sirupsen/logrus	v1.9.3 -> v1.9.4
github.com/spf13/cobra	v1.10.1 -> v1.10.2
go.uber.org/zap	v1.27.0 -> v1.27.1
golang.org/x/crypto	v0.45.0 -> v0.46.0
golang.org/x/mod	v0.29.0 -> v0.30.0
golang.org/x/oauth2	v0.32.0 -> v0.34.0
golang.org/x/sync	v0.18.0 -> v0.19.0
golang.org/x/sys	v0.38.0 -> v0.39.0
golang.org/x/term	v0.37.0 -> v0.38.0
golang.org/x/tools	v0.38.0 -> v0.39.0
google.golang.org/api	v0.255.0 -> v0.260.0
google.golang.org/genproto	v0.0.0-20251103181224-f26f9409b101 -> v0.0.0-20251202230838-ff82c1b0f217
google.golang.org/genproto/googleapis/api	v0.0.0-20251103181224-f26f9409b101 -> v0.0.0-20251202230838-ff82c1b0f217
google.golang.org/genproto/googleapis/rpc	v0.0.0-20251103181224-f26f9409b101 -> v0.0.0-20251222181119-0a764e51fe1b
google.golang.org/grpc	v1.76.0 -> v1.78.0
google.golang.org/protobuf	v1.36.10 -> v1.36.11
gopkg.in/ini.v1	v1.67.0 -> v1.67.1
sigs.k8s.io/release-utils	v0.12.2 -> v0.12.3