Commit Graph

5254 Commits

Author SHA1 Message Date
Carl Tashian
2204af10fd Merge pull request #2461 from roeldev/feat-add-docker-init-envs
Add additional DOCKER_STEPCA_INIT_* envs
2025-11-06 17:46:00 +00:00
roeldev
61e37b79fc Add additional DOCKER_STEPCA_INIT_* envs
Add additional DOCKER_STEPCA_INIT_* environment variables to entrypoint.sh so 'step ca init' also accepts the --root, --key, --key-password-file, --deployment-type and --with-ca-url arguments.
2025-11-06 14:51:30 +01:00
step-ci
8f558df122 Merge pull request #2456 from smallstep/dependabot/go_modules/google.golang.org/api-0.254.0
Bump google.golang.org/api from 0.253.0 to 0.254.0
2025-11-04 05:52:55 -06:00
dependabot[bot]
ea7a7f87cf Bump google.golang.org/api from 0.253.0 to 0.254.0
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.253.0 to 0.254.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.253.0...v0.254.0)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-version: 0.254.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-11-04 11:17:44 +00:00
step-ci
9fe89baf32 Merge pull request #2457 from smallstep/dependabot/go_modules/github.com/ccoveille/go-safecast-1.8.1
Bump github.com/ccoveille/go-safecast from 1.7.0 to 1.8.1
2025-11-04 05:16:28 -06:00
Herman Slatman
6dd0965d24 Use go-safecast generic Convert function to convert integers 2025-11-04 12:07:57 +01:00
dependabot[bot]
0f80781b71 Bump github.com/ccoveille/go-safecast from 1.7.0 to 1.8.1
Bumps [github.com/ccoveille/go-safecast](https://github.com/ccoveille/go-safecast) from 1.7.0 to 1.8.1.
- [Release notes](https://github.com/ccoveille/go-safecast/releases)
- [Commits](https://github.com/ccoveille/go-safecast/compare/v1.7.0...v1.8.1)

---
updated-dependencies:
- dependency-name: github.com/ccoveille/go-safecast
  dependency-version: 1.8.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-11-04 10:55:48 +00:00
step-ci
bfbe9db2ed Merge pull request #2455 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.73.0
Bump go.step.sm/crypto from 0.72.0 to 0.73.0
2025-11-04 04:26:48 -06:00
Herman Slatman
69d8dd8d6f Add additional gosec linter exceptions to ACME linker 2025-11-04 00:28:25 +01:00
Herman Slatman
745fb7a68e Remove deprecated +build tags 2025-11-04 00:27:47 +01:00
dependabot[bot]
18b418bc8e Bump go.step.sm/crypto from 0.72.0 to 0.73.0
Bumps [go.step.sm/crypto](https://github.com/smallstep/crypto) from 0.72.0 to 0.73.0.
- [Release notes](https://github.com/smallstep/crypto/releases)
- [Commits](https://github.com/smallstep/crypto/compare/v0.72.0...v0.73.0)

---
updated-dependencies:
- dependency-name: go.step.sm/crypto
  dependency-version: 0.73.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-11-03 15:14:01 +00:00
step-ci
cc7f1470e3 Merge pull request #2447 from smallstep/dependabot/go_modules/google.golang.org/api-0.253.0
Bump google.golang.org/api from 0.252.0 to 0.253.0
2025-10-27 11:16:47 -05:00
step-ci
d314d7f962 Merge pull request #2446 from smallstep/dependabot/go_modules/github.com/smallstep/linkedca-0.25.0
Bump github.com/smallstep/linkedca from 0.24.0 to 0.25.0
2025-10-27 10:37:36 -05:00
dependabot[bot]
130ab6fb78 Bump google.golang.org/api from 0.252.0 to 0.253.0
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.252.0 to 0.253.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.252.0...v0.253.0)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-version: 0.253.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-10-27 15:36:50 +00:00
dependabot[bot]
5bb8ca5e55 Bump github.com/smallstep/linkedca from 0.24.0 to 0.25.0
Bumps [github.com/smallstep/linkedca](https://github.com/smallstep/linkedca) from 0.24.0 to 0.25.0.
- [Release notes](https://github.com/smallstep/linkedca/releases)
- [Commits](https://github.com/smallstep/linkedca/compare/v0.24.0...v0.25.0)

---
updated-dependencies:
- dependency-name: github.com/smallstep/linkedca
  dependency-version: 0.25.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-10-27 15:30:24 +00:00
Herman Slatman
2a4c7b94f4 Merge pull request #2444 from smallstep/herman/acme-order-backdate
Fix backdate support for ACME provisioner
2025-10-27 10:44:59 +01:00
Herman Slatman
17a37a13bf Fix backdate support for ACME provisioner
Other provisioners did take into account the authority-wide
certificate backdate configuration already, but the ACME
provisioner did not. This commit adds `authority.GetBackdate`,
so that the ACME provisioner can use it if set.

Fixes: #927
2025-10-22 16:05:45 +02:00
Herman Slatman
0f591d6168 Merge pull request #2435 from jas4711/chmod-x
Disable execute permission on source files (chmod -x)
2025-10-22 14:56:54 +02:00
step-ci
f5954be2fc Merge pull request #2436 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.72.0
Bump go.step.sm/crypto from 0.70.0 to 0.72.0
2025-10-20 17:46:00 -05:00
dependabot[bot]
dffe74cfbe Bump go.step.sm/crypto from 0.70.0 to 0.72.0
Bumps [go.step.sm/crypto](https://github.com/smallstep/crypto) from 0.70.0 to 0.72.0.
- [Release notes](https://github.com/smallstep/crypto/releases)
- [Commits](https://github.com/smallstep/crypto/compare/v0.70.0...v0.72.0)

---
updated-dependencies:
- dependency-name: go.step.sm/crypto
  dependency-version: 0.72.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-10-20 22:24:37 +00:00
step-ci
9364f1ab0f Merge pull request #2440 from smallstep/dependabot/go_modules/google.golang.org/api-0.252.0
Bump google.golang.org/api from 0.251.0 to 0.252.0
2025-10-20 11:50:41 -05:00
dependabot[bot]
5779f39168 Bump google.golang.org/api from 0.251.0 to 0.252.0
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.251.0 to 0.252.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.251.0...v0.252.0)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-version: 0.252.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-10-20 16:13:56 +00:00
step-ci
90c1265dfa Merge pull request #2438 from smallstep/dependabot/go_modules/cloud.google.com/go/longrunning-0.7.0
Bump cloud.google.com/go/longrunning from 0.6.7 to 0.7.0
2025-10-20 11:12:12 -05:00
dependabot[bot]
a0ed5954b1 Bump cloud.google.com/go/longrunning from 0.6.7 to 0.7.0
Bumps [cloud.google.com/go/longrunning](https://github.com/googleapis/google-cloud-go) from 0.6.7 to 0.7.0.
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-cloud-go/compare/longrunning/v0.6.7...v0.7.0)

---
updated-dependencies:
- dependency-name: cloud.google.com/go/longrunning
  dependency-version: 0.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-10-20 16:04:03 +00:00
step-ci
30289f0f05 Merge pull request #2439 from smallstep/dependabot/go_modules/github.com/smallstep/cli-utils-0.12.2
Bump github.com/smallstep/cli-utils from 0.12.1 to 0.12.2
2025-10-20 11:03:02 -05:00
step-ci
6acdeac3ee Merge pull request #2437 from smallstep/dependabot/go_modules/github.com/ccoveille/go-safecast-1.7.0
Bump github.com/ccoveille/go-safecast from 1.6.1 to 1.7.0
2025-10-20 11:02:12 -05:00
dependabot[bot]
83b41d653c Bump github.com/smallstep/cli-utils from 0.12.1 to 0.12.2
Bumps [github.com/smallstep/cli-utils](https://github.com/smallstep/cli-utils) from 0.12.1 to 0.12.2.
- [Release notes](https://github.com/smallstep/cli-utils/releases)
- [Commits](https://github.com/smallstep/cli-utils/compare/v0.12.1...v0.12.2)

---
updated-dependencies:
- dependency-name: github.com/smallstep/cli-utils
  dependency-version: 0.12.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-10-20 15:30:02 +00:00
dependabot[bot]
bcc8ce43ac Bump github.com/ccoveille/go-safecast from 1.6.1 to 1.7.0
Bumps [github.com/ccoveille/go-safecast](https://github.com/ccoveille/go-safecast) from 1.6.1 to 1.7.0.
- [Release notes](https://github.com/ccoveille/go-safecast/releases)
- [Commits](https://github.com/ccoveille/go-safecast/compare/v1.6.1...v1.7.0)

---
updated-dependencies:
- dependency-name: github.com/ccoveille/go-safecast
  dependency-version: 1.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-10-20 15:24:24 +00:00
Simon Josefsson
f253cf6050 Disable execute permission on source files (chmod -x) 2025-10-16 09:27:55 +02:00
step-ci
3207fcfdd7 Merge pull request #2428 from smallstep/dependabot/go_modules/github.com/slackhq/nebula-1.9.7
Bump github.com/slackhq/nebula from 1.9.6 to 1.9.7
2025-10-14 08:05:02 -05:00
dependabot[bot]
a4aaebdf94 Bump github.com/slackhq/nebula from 1.9.6 to 1.9.7
Bumps [github.com/slackhq/nebula](https://github.com/slackhq/nebula) from 1.9.6 to 1.9.7.
- [Release notes](https://github.com/slackhq/nebula/releases)
- [Changelog](https://github.com/slackhq/nebula/blob/v1.9.7/CHANGELOG.md)
- [Commits](https://github.com/slackhq/nebula/compare/v1.9.6...v1.9.7)

---
updated-dependencies:
- dependency-name: github.com/slackhq/nebula
  dependency-version: 1.9.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-10-14 09:46:53 +00:00
step-ci
f251f0eb0a Merge pull request #2429 from smallstep/dependabot/go_modules/github.com/hashicorp/vault/api-1.22.0
Bump github.com/hashicorp/vault/api from 1.21.0 to 1.22.0
2025-10-13 14:52:11 -05:00
step-ci
c12742aa5a Merge pull request #2426 from smallstep/dependabot/github_actions/softprops/action-gh-release-2.4.1
Bump softprops/action-gh-release from 2.3.4 to 2.4.1
2025-10-13 14:51:09 -05:00
step-ci
04851e5acc Merge pull request #2427 from smallstep/dependabot/go_modules/golang.org/x/net-0.46.0
Bump golang.org/x/net from 0.44.0 to 0.46.0
2025-10-13 14:49:50 -05:00
dependabot[bot]
3e2cd3bfe6 Bump golang.org/x/net from 0.44.0 to 0.46.0
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.44.0 to 0.46.0.
- [Commits](https://github.com/golang/net/compare/v0.44.0...v0.46.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-version: 0.46.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-10-13 16:13:53 +00:00
step-ci
6886f5d070 Merge pull request #2430 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.76.0
Bump google.golang.org/grpc from 1.75.1 to 1.76.0
2025-10-13 11:12:38 -05:00
dependabot[bot]
c604a7f294 Bump google.golang.org/grpc from 1.75.1 to 1.76.0
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.75.1 to 1.76.0.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.75.1...v1.76.0)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-version: 1.76.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-10-13 15:34:37 +00:00
dependabot[bot]
c15499a352 Bump github.com/hashicorp/vault/api from 1.21.0 to 1.22.0
Bumps [github.com/hashicorp/vault/api](https://github.com/hashicorp/vault) from 1.21.0 to 1.22.0.
- [Release notes](https://github.com/hashicorp/vault/releases)
- [Changelog](https://github.com/hashicorp/vault/blob/main/CHANGELOG-v1.10-v1.15.md)
- [Commits](https://github.com/hashicorp/vault/compare/api/v1.21.0...api/v1.22.0)

---
updated-dependencies:
- dependency-name: github.com/hashicorp/vault/api
  dependency-version: 1.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-10-13 15:34:29 +00:00
dependabot[bot]
ff3c08778f Bump softprops/action-gh-release from 2.3.4 to 2.4.1
Bumps [softprops/action-gh-release](https://github.com/softprops/action-gh-release) from 2.3.4 to 2.4.1.
- [Release notes](https://github.com/softprops/action-gh-release/releases)
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md)
- [Commits](62c96d0c4e...6da8fa9354)

---
updated-dependencies:
- dependency-name: softprops/action-gh-release
  dependency-version: 2.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-10-13 15:24:03 +00:00
step-ci
8f77cc7c2d Merge pull request #2421 from smallstep/dependabot/go_modules/github.com/coreos/go-oidc/v3-3.16.0
Bump github.com/coreos/go-oidc/v3 from 3.15.0 to 3.16.0
2025-10-07 12:03:35 -05:00
dependabot[bot]
1721ce6f84 Bump github.com/coreos/go-oidc/v3 from 3.15.0 to 3.16.0
Bumps [github.com/coreos/go-oidc/v3](https://github.com/coreos/go-oidc) from 3.15.0 to 3.16.0.
- [Release notes](https://github.com/coreos/go-oidc/releases)
- [Commits](https://github.com/coreos/go-oidc/compare/v3.15.0...v3.16.0)

---
updated-dependencies:
- dependency-name: github.com/coreos/go-oidc/v3
  dependency-version: 3.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-10-07 15:22:28 +00:00
step-ci
0b77f26e30 Merge pull request #2419 from smallstep/dependabot/go_modules/google.golang.org/api-0.251.0
Bump google.golang.org/api from 0.250.0 to 0.251.0
2025-10-07 10:20:35 -05:00
step-ci
040d74af3e Merge pull request #2418 from smallstep/dependabot/go_modules/github.com/hashicorp/vault/api/auth/approle-0.11.0
Bump github.com/hashicorp/vault/api/auth/approle from 0.10.0 to 0.11.0
2025-10-06 14:59:39 -05:00
dependabot[bot]
b307c52428 Bump github.com/hashicorp/vault/api/auth/approle from 0.10.0 to 0.11.0
Bumps [github.com/hashicorp/vault/api/auth/approle](https://github.com/hashicorp/vault) from 0.10.0 to 0.11.0.
- [Release notes](https://github.com/hashicorp/vault/releases)
- [Changelog](https://github.com/hashicorp/vault/blob/main/CHANGELOG-v0.md)
- [Commits](https://github.com/hashicorp/vault/compare/v0.10.0...v0.11.0)

---
updated-dependencies:
- dependency-name: github.com/hashicorp/vault/api/auth/approle
  dependency-version: 0.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-10-06 17:36:55 +00:00
dependabot[bot]
de02d0a4dc Bump google.golang.org/api from 0.250.0 to 0.251.0
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.250.0 to 0.251.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.250.0...v0.251.0)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-version: 0.251.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-10-06 17:36:22 +00:00
step-ci
45ab53127b Merge pull request #2420 from smallstep/dependabot/go_modules/github.com/hashicorp/vault/api/auth/aws-0.11.0
Bump github.com/hashicorp/vault/api/auth/aws from 0.10.0 to 0.11.0
2025-10-06 12:32:25 -05:00
step-ci
9adf0c175f Merge pull request #2422 from smallstep/dependabot/go_modules/google.golang.org/protobuf-1.36.10
Bump google.golang.org/protobuf from 1.36.9 to 1.36.10
2025-10-06 12:31:19 -05:00
step-ci
47fcb8d0c8 Merge pull request #2423 from smallstep/dependabot/github_actions/softprops/action-gh-release-2.3.4
Bump softprops/action-gh-release from 2.3.3 to 2.3.4
2025-10-06 12:30:33 -05:00
dependabot[bot]
3a421512f2 Bump softprops/action-gh-release from 2.3.3 to 2.3.4
Bumps [softprops/action-gh-release](https://github.com/softprops/action-gh-release) from 2.3.3 to 2.3.4.
- [Release notes](https://github.com/softprops/action-gh-release/releases)
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md)
- [Commits](6cbd405e2c...62c96d0c4e)

---
updated-dependencies:
- dependency-name: softprops/action-gh-release
  dependency-version: 2.3.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-10-06 15:20:37 +00:00
dependabot[bot]
e41ffef7be Bump google.golang.org/protobuf from 1.36.9 to 1.36.10
Bumps google.golang.org/protobuf from 1.36.9 to 1.36.10.

---
updated-dependencies:
- dependency-name: google.golang.org/protobuf
  dependency-version: 1.36.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-10-06 15:19:53 +00:00