Commit Graph

5290 Commits

Author SHA1 Message Date
Herman Slatman
3e90f37689 Revert "Disable govulncheck until go 1.25.5 is available in github actions (#2490)"
This reverts commit 8e76e290c0.
2025-12-03 14:55:50 +01:00
Mariano Cano
992ff696e9 Merge pull request #2491 from smallstep/mariano/update
Improve validation in authorization path
2025-12-02 19:41:31 -08:00
Mariano Cano
9d79c59c1d Merge branch 'master' into mariano/update 2025-12-02 19:39:35 -08:00
Max
8e76e290c0 Disable govulncheck until go 1.25.5 is available in github actions (#2490) 2025-12-02 19:39:12 -08:00
Mariano Cano
1011f5f540 Improve validation in authorization path 2025-12-02 16:54:44 -08:00
Max
48ed3a5d17 Changelog updates for preparing for v0.29.0 (#2488) 2025-12-01 18:00:51 -08:00
step-ci
008e6ae94a Merge pull request #2487 from smallstep/dependabot/github_actions/softprops/action-gh-release-2.5.0
Bump softprops/action-gh-release from 2.4.2 to 2.5.0
2025-12-01 19:33:14 -06:00
dependabot[bot]
895e8c61bf Bump softprops/action-gh-release from 2.4.2 to 2.5.0
Bumps [softprops/action-gh-release](https://github.com/softprops/action-gh-release) from 2.4.2 to 2.5.0.
- [Release notes](https://github.com/softprops/action-gh-release/releases)
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md)
- [Commits](5be0e66d93...a06a81a03e)

---
updated-dependencies:
- dependency-name: softprops/action-gh-release
  dependency-version: 2.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-12-01 17:04:12 +00:00
step-ci
930e8fc146 Merge pull request #2477 from smallstep/dependabot/go_modules/golang.org/x/crypto-0.45.0
Bump golang.org/x/crypto from 0.44.0 to 0.45.0
2025-11-25 05:59:58 -06:00
dependabot[bot]
d7537894c5 Bump golang.org/x/crypto from 0.44.0 to 0.45.0
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.44.0 to 0.45.0.
- [Commits](https://github.com/golang/crypto/compare/v0.44.0...v0.45.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-version: 0.45.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-11-25 11:31:38 +00:00
step-ci
07fa3454c6 Merge pull request #2481 from smallstep/dependabot/go_modules/github.com/newrelic/go-agent/v3-3.42.0
Bump github.com/newrelic/go-agent/v3 from 3.41.0 to 3.42.0
2025-11-25 05:30:27 -06:00
dependabot[bot]
2d6b35945a Bump github.com/newrelic/go-agent/v3 from 3.41.0 to 3.42.0
Bumps [github.com/newrelic/go-agent/v3](https://github.com/newrelic/go-agent) from 3.41.0 to 3.42.0.
- [Release notes](https://github.com/newrelic/go-agent/releases)
- [Changelog](https://github.com/newrelic/go-agent/blob/master/CHANGELOG.md)
- [Commits](https://github.com/newrelic/go-agent/compare/v3.41.0...v3.42.0)

---
updated-dependencies:
- dependency-name: github.com/newrelic/go-agent/v3
  dependency-version: 3.42.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-11-25 11:16:21 +00:00
step-ci
b15aea56bf Merge pull request #2482 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.77.0
Bump google.golang.org/grpc from 1.76.0 to 1.77.0
2025-11-25 05:14:46 -06:00
step-ci
562fb7dd51 Merge pull request #2483 from smallstep/dependabot/go_modules/github.com/coreos/go-oidc/v3-3.17.0
Bump github.com/coreos/go-oidc/v3 from 3.16.0 to 3.17.0
2025-11-25 05:14:24 -06:00
dependabot[bot]
0b1ac14bf6 Bump github.com/coreos/go-oidc/v3 from 3.16.0 to 3.17.0
Bumps [github.com/coreos/go-oidc/v3](https://github.com/coreos/go-oidc) from 3.16.0 to 3.17.0.
- [Release notes](https://github.com/coreos/go-oidc/releases)
- [Commits](https://github.com/coreos/go-oidc/compare/v3.16.0...v3.17.0)

---
updated-dependencies:
- dependency-name: github.com/coreos/go-oidc/v3
  dependency-version: 3.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-11-24 15:39:15 +00:00
dependabot[bot]
bbbe61ef1f Bump google.golang.org/grpc from 1.76.0 to 1.77.0
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.76.0 to 1.77.0.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.76.0...v1.77.0)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-version: 1.77.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-11-24 15:39:10 +00:00
step-ci
2746cd06fb Merge pull request #2474 from smallstep/dependabot/go_modules/golang.org/x/net-0.47.0
Bump golang.org/x/net from 0.46.0 to 0.47.0
2025-11-18 06:39:46 -06:00
dependabot[bot]
5e8fa9e909 Bump golang.org/x/net from 0.46.0 to 0.47.0
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.46.0 to 0.47.0.
- [Commits](https://github.com/golang/net/compare/v0.46.0...v0.47.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-version: 0.47.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-11-18 12:31:43 +00:00
step-ci
1bd985412e Merge pull request #2472 from smallstep/dependabot/go_modules/google.golang.org/api-0.256.0
Bump google.golang.org/api from 0.255.0 to 0.256.0
2025-11-18 06:30:28 -06:00
dependabot[bot]
d37d1cb4b3 Bump google.golang.org/api from 0.255.0 to 0.256.0
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.255.0 to 0.256.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.255.0...v0.256.0)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-version: 0.256.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-11-18 11:05:19 +00:00
step-ci
1cf5fd4483 Merge pull request #2471 from smallstep/dependabot/go_modules/golang.org/x/crypto-0.44.0
Bump golang.org/x/crypto from 0.43.0 to 0.44.0
2025-11-18 05:04:04 -06:00
step-ci
6315e2c167 Merge pull request #2473 from smallstep/dependabot/go_modules/github.com/google/go-tpm-0.9.7
Bump github.com/google/go-tpm from 0.9.6 to 0.9.7
2025-11-18 05:03:27 -06:00
dependabot[bot]
0f77bf645b Bump github.com/google/go-tpm from 0.9.6 to 0.9.7
Bumps [github.com/google/go-tpm](https://github.com/google/go-tpm) from 0.9.6 to 0.9.7.
- [Release notes](https://github.com/google/go-tpm/releases)
- [Commits](https://github.com/google/go-tpm/compare/v0.9.6...v0.9.7)

---
updated-dependencies:
- dependency-name: github.com/google/go-tpm
  dependency-version: 0.9.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-11-17 15:03:53 +00:00
dependabot[bot]
d722add402 Bump golang.org/x/crypto from 0.43.0 to 0.44.0
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.43.0 to 0.44.0.
- [Commits](https://github.com/golang/crypto/compare/v0.43.0...v0.44.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-version: 0.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-11-17 15:03:36 +00:00
Herman Slatman
b5e87345c0 Merge pull request #2463 from provokateurin/feat/sd_notify
Add sd_notify support
2025-11-12 14:39:28 +01:00
Herman Slatman
ae730987ff Merge pull request #2468 from smallstep/herman/upgrade-safecast-v2
Update to `v2` of `github.com/ccoVeille/go-safecast`
2025-11-11 10:38:13 +01:00
Herman Slatman
c39ef92af9 Update to v2 of github.com/ccoVeille/go-safecast 2025-11-11 10:20:21 +01:00
step-ci
5205cc08ca Merge pull request #2466 from smallstep/dependabot/go_modules/golang.org/x/sync-0.18.0
Bump golang.org/x/sync from 0.17.0 to 0.18.0
2025-11-11 03:18:49 -06:00
dependabot[bot]
23fb09fd13 Bump golang.org/x/sync from 0.17.0 to 0.18.0
Bumps [golang.org/x/sync](https://github.com/golang/sync) from 0.17.0 to 0.18.0.
- [Commits](https://github.com/golang/sync/compare/v0.17.0...v0.18.0)

---
updated-dependencies:
- dependency-name: golang.org/x/sync
  dependency-version: 0.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-11-11 09:09:06 +00:00
step-ci
5f6353b9a0 Merge pull request #2464 from smallstep/dependabot/go_modules/google.golang.org/api-0.255.0
Bump google.golang.org/api from 0.254.0 to 0.255.0
2025-11-11 03:07:42 -06:00
dependabot[bot]
130d0fca2d Bump google.golang.org/api from 0.254.0 to 0.255.0
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.254.0 to 0.255.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.254.0...v0.255.0)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-version: 0.255.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-11-11 00:31:44 +00:00
step-ci
1b93a9873e Merge pull request #2465 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.74.0
Bump go.step.sm/crypto from 0.73.0 to 0.74.0
2025-11-10 18:30:27 -06:00
step-ci
68173e3009 Merge pull request #2467 from smallstep/dependabot/github_actions/softprops/action-gh-release-2.4.2
Bump softprops/action-gh-release from 2.4.1 to 2.4.2
2025-11-10 18:23:23 -06:00
dependabot[bot]
35702e7390 Bump softprops/action-gh-release from 2.4.1 to 2.4.2
Bumps [softprops/action-gh-release](https://github.com/softprops/action-gh-release) from 2.4.1 to 2.4.2.
- [Release notes](https://github.com/softprops/action-gh-release/releases)
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md)
- [Commits](6da8fa9354...5be0e66d93)

---
updated-dependencies:
- dependency-name: softprops/action-gh-release
  dependency-version: 2.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-11-10 16:36:17 +00:00
dependabot[bot]
a05f003e82 Bump go.step.sm/crypto from 0.73.0 to 0.74.0
Bumps [go.step.sm/crypto](https://github.com/smallstep/crypto) from 0.73.0 to 0.74.0.
- [Release notes](https://github.com/smallstep/crypto/releases)
- [Commits](https://github.com/smallstep/crypto/compare/v0.73.0...v0.74.0)

---
updated-dependencies:
- dependency-name: go.step.sm/crypto
  dependency-version: 0.74.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-11-10 15:43:42 +00:00
provokateurin
0c79ee2093 feat: Add sd_notify support 2025-11-09 09:44:26 +01:00
Carl Tashian
2204af10fd Merge pull request #2461 from roeldev/feat-add-docker-init-envs
Add additional DOCKER_STEPCA_INIT_* envs
2025-11-06 17:46:00 +00:00
roeldev
61e37b79fc Add additional DOCKER_STEPCA_INIT_* envs
Add additional DOCKER_STEPCA_INIT_* environment variables to entrypoint.sh so 'step ca init' also accepts the --root, --key, --key-password-file, --deployment-type and --with-ca-url arguments.
2025-11-06 14:51:30 +01:00
step-ci
8f558df122 Merge pull request #2456 from smallstep/dependabot/go_modules/google.golang.org/api-0.254.0
Bump google.golang.org/api from 0.253.0 to 0.254.0
2025-11-04 05:52:55 -06:00
dependabot[bot]
ea7a7f87cf Bump google.golang.org/api from 0.253.0 to 0.254.0
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.253.0 to 0.254.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.253.0...v0.254.0)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-version: 0.254.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-11-04 11:17:44 +00:00
step-ci
9fe89baf32 Merge pull request #2457 from smallstep/dependabot/go_modules/github.com/ccoveille/go-safecast-1.8.1
Bump github.com/ccoveille/go-safecast from 1.7.0 to 1.8.1
2025-11-04 05:16:28 -06:00
Herman Slatman
6dd0965d24 Use go-safecast generic Convert function to convert integers 2025-11-04 12:07:57 +01:00
dependabot[bot]
0f80781b71 Bump github.com/ccoveille/go-safecast from 1.7.0 to 1.8.1
Bumps [github.com/ccoveille/go-safecast](https://github.com/ccoveille/go-safecast) from 1.7.0 to 1.8.1.
- [Release notes](https://github.com/ccoveille/go-safecast/releases)
- [Commits](https://github.com/ccoveille/go-safecast/compare/v1.7.0...v1.8.1)

---
updated-dependencies:
- dependency-name: github.com/ccoveille/go-safecast
  dependency-version: 1.8.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-11-04 10:55:48 +00:00
step-ci
bfbe9db2ed Merge pull request #2455 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.73.0
Bump go.step.sm/crypto from 0.72.0 to 0.73.0
2025-11-04 04:26:48 -06:00
Herman Slatman
69d8dd8d6f Add additional gosec linter exceptions to ACME linker 2025-11-04 00:28:25 +01:00
Herman Slatman
745fb7a68e Remove deprecated +build tags 2025-11-04 00:27:47 +01:00
dependabot[bot]
18b418bc8e Bump go.step.sm/crypto from 0.72.0 to 0.73.0
Bumps [go.step.sm/crypto](https://github.com/smallstep/crypto) from 0.72.0 to 0.73.0.
- [Release notes](https://github.com/smallstep/crypto/releases)
- [Commits](https://github.com/smallstep/crypto/compare/v0.72.0...v0.73.0)

---
updated-dependencies:
- dependency-name: go.step.sm/crypto
  dependency-version: 0.73.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-11-03 15:14:01 +00:00
step-ci
cc7f1470e3 Merge pull request #2447 from smallstep/dependabot/go_modules/google.golang.org/api-0.253.0
Bump google.golang.org/api from 0.252.0 to 0.253.0
2025-10-27 11:16:47 -05:00
step-ci
d314d7f962 Merge pull request #2446 from smallstep/dependabot/go_modules/github.com/smallstep/linkedca-0.25.0
Bump github.com/smallstep/linkedca from 0.24.0 to 0.25.0
2025-10-27 10:37:36 -05:00
dependabot[bot]
130ab6fb78 Bump google.golang.org/api from 0.252.0 to 0.253.0
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.252.0 to 0.253.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.252.0...v0.253.0)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-version: 0.253.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-10-27 15:36:50 +00:00