This release backports #7030 to the 2.0 branch to fix one of the issues reported in #3423, where shared transitive dependencies could not be upgraded successfully. It also contains security updates to Crossplane's dependencies.

What's Changed

• Backport #7030 to release-2.0 by @adamwg in https://github.com/crossplane/crossplane/pull/7053
• [Backport release-2.0] fix(render): propagate root composite identity through nested XR trees by @github-actions[bot] in https://github.com/crossplane/crossplane/pull/6973
• [release-2.0] Update sigstore dependencies to fix CVEs by @negz in https://github.com/crossplane/crossplane/pull/7065
• chore(deps): update module github.com/theupdateframework/go-tuf/v2 to v2.4.1 [security] (release-2.0) by @crossplane-renovate[bot] in https://github.com/crossplane/crossplane/pull/7094

Full Changelog: https://github.com/crossplane/crossplane/compare/v2.0.6...v2.0.7