dependabot[bot]
67276b5bca
Bump go.step.sm/crypto from 0.74.0 to 0.75.0
...
Bumps [go.step.sm/crypto](https://github.com/smallstep/crypto ) from 0.74.0 to 0.75.0.
- [Release notes](https://github.com/smallstep/crypto/releases )
- [Commits](https://github.com/smallstep/crypto/compare/v0.74.0...v0.75.0 )
---
updated-dependencies:
- dependency-name: go.step.sm/crypto
dependency-version: 0.75.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-12-08 15:03:25 +00:00
Herman Slatman
86bea27867
Merge pull request #2492 from smallstep/herman/enable-govulncheck
...
Revert "Disable govulncheck until go 1.25.5 is available in github ac…
2025-12-04 00:49:36 +01:00
Herman Slatman
3e90f37689
Revert "Disable govulncheck until go 1.25.5 is available in github actions ( #2490 )"
...
This reverts commit 8e76e290c0 .
2025-12-03 14:55:50 +01:00
Mariano Cano
992ff696e9
Merge pull request #2491 from smallstep/mariano/update
...
Improve validation in authorization path
2025-12-02 19:41:31 -08:00
Mariano Cano
9d79c59c1d
Merge branch 'master' into mariano/update
2025-12-02 19:39:35 -08:00
Max
8e76e290c0
Disable govulncheck until go 1.25.5 is available in github actions ( #2490 )
2025-12-02 19:39:12 -08:00
Mariano Cano
1011f5f540
Improve validation in authorization path
2025-12-02 16:54:44 -08:00
Max
48ed3a5d17
Changelog updates for preparing for v0.29.0 ( #2488 )
2025-12-01 18:00:51 -08:00
step-ci
008e6ae94a
Merge pull request #2487 from smallstep/dependabot/github_actions/softprops/action-gh-release-2.5.0
...
Bump softprops/action-gh-release from 2.4.2 to 2.5.0
2025-12-01 19:33:14 -06:00
dependabot[bot]
895e8c61bf
Bump softprops/action-gh-release from 2.4.2 to 2.5.0
...
Bumps [softprops/action-gh-release](https://github.com/softprops/action-gh-release ) from 2.4.2 to 2.5.0.
- [Release notes](https://github.com/softprops/action-gh-release/releases )
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md )
- [Commits](5be0e66d93...a06a81a03e )
---
updated-dependencies:
- dependency-name: softprops/action-gh-release
dependency-version: 2.5.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-12-01 17:04:12 +00:00
step-ci
930e8fc146
Merge pull request #2477 from smallstep/dependabot/go_modules/golang.org/x/crypto-0.45.0
...
Bump golang.org/x/crypto from 0.44.0 to 0.45.0
2025-11-25 05:59:58 -06:00
dependabot[bot]
d7537894c5
Bump golang.org/x/crypto from 0.44.0 to 0.45.0
...
Bumps [golang.org/x/crypto](https://github.com/golang/crypto ) from 0.44.0 to 0.45.0.
- [Commits](https://github.com/golang/crypto/compare/v0.44.0...v0.45.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/crypto
dependency-version: 0.45.0
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-11-25 11:31:38 +00:00
step-ci
07fa3454c6
Merge pull request #2481 from smallstep/dependabot/go_modules/github.com/newrelic/go-agent/v3-3.42.0
...
Bump github.com/newrelic/go-agent/v3 from 3.41.0 to 3.42.0
2025-11-25 05:30:27 -06:00
dependabot[bot]
2d6b35945a
Bump github.com/newrelic/go-agent/v3 from 3.41.0 to 3.42.0
...
Bumps [github.com/newrelic/go-agent/v3](https://github.com/newrelic/go-agent ) from 3.41.0 to 3.42.0.
- [Release notes](https://github.com/newrelic/go-agent/releases )
- [Changelog](https://github.com/newrelic/go-agent/blob/master/CHANGELOG.md )
- [Commits](https://github.com/newrelic/go-agent/compare/v3.41.0...v3.42.0 )
---
updated-dependencies:
- dependency-name: github.com/newrelic/go-agent/v3
dependency-version: 3.42.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-11-25 11:16:21 +00:00
step-ci
b15aea56bf
Merge pull request #2482 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.77.0
...
Bump google.golang.org/grpc from 1.76.0 to 1.77.0
2025-11-25 05:14:46 -06:00
step-ci
562fb7dd51
Merge pull request #2483 from smallstep/dependabot/go_modules/github.com/coreos/go-oidc/v3-3.17.0
...
Bump github.com/coreos/go-oidc/v3 from 3.16.0 to 3.17.0
2025-11-25 05:14:24 -06:00
dependabot[bot]
0b1ac14bf6
Bump github.com/coreos/go-oidc/v3 from 3.16.0 to 3.17.0
...
Bumps [github.com/coreos/go-oidc/v3](https://github.com/coreos/go-oidc ) from 3.16.0 to 3.17.0.
- [Release notes](https://github.com/coreos/go-oidc/releases )
- [Commits](https://github.com/coreos/go-oidc/compare/v3.16.0...v3.17.0 )
---
updated-dependencies:
- dependency-name: github.com/coreos/go-oidc/v3
dependency-version: 3.17.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-11-24 15:39:15 +00:00
dependabot[bot]
bbbe61ef1f
Bump google.golang.org/grpc from 1.76.0 to 1.77.0
...
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go ) from 1.76.0 to 1.77.0.
- [Release notes](https://github.com/grpc/grpc-go/releases )
- [Commits](https://github.com/grpc/grpc-go/compare/v1.76.0...v1.77.0 )
---
updated-dependencies:
- dependency-name: google.golang.org/grpc
dependency-version: 1.77.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-11-24 15:39:10 +00:00
step-ci
2746cd06fb
Merge pull request #2474 from smallstep/dependabot/go_modules/golang.org/x/net-0.47.0
...
Bump golang.org/x/net from 0.46.0 to 0.47.0
2025-11-18 06:39:46 -06:00
dependabot[bot]
5e8fa9e909
Bump golang.org/x/net from 0.46.0 to 0.47.0
...
Bumps [golang.org/x/net](https://github.com/golang/net ) from 0.46.0 to 0.47.0.
- [Commits](https://github.com/golang/net/compare/v0.46.0...v0.47.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/net
dependency-version: 0.47.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-11-18 12:31:43 +00:00
step-ci
1bd985412e
Merge pull request #2472 from smallstep/dependabot/go_modules/google.golang.org/api-0.256.0
...
Bump google.golang.org/api from 0.255.0 to 0.256.0
2025-11-18 06:30:28 -06:00
dependabot[bot]
d37d1cb4b3
Bump google.golang.org/api from 0.255.0 to 0.256.0
...
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client ) from 0.255.0 to 0.256.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases )
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md )
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.255.0...v0.256.0 )
---
updated-dependencies:
- dependency-name: google.golang.org/api
dependency-version: 0.256.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-11-18 11:05:19 +00:00
step-ci
1cf5fd4483
Merge pull request #2471 from smallstep/dependabot/go_modules/golang.org/x/crypto-0.44.0
...
Bump golang.org/x/crypto from 0.43.0 to 0.44.0
2025-11-18 05:04:04 -06:00
step-ci
6315e2c167
Merge pull request #2473 from smallstep/dependabot/go_modules/github.com/google/go-tpm-0.9.7
...
Bump github.com/google/go-tpm from 0.9.6 to 0.9.7
2025-11-18 05:03:27 -06:00
dependabot[bot]
0f77bf645b
Bump github.com/google/go-tpm from 0.9.6 to 0.9.7
...
Bumps [github.com/google/go-tpm](https://github.com/google/go-tpm ) from 0.9.6 to 0.9.7.
- [Release notes](https://github.com/google/go-tpm/releases )
- [Commits](https://github.com/google/go-tpm/compare/v0.9.6...v0.9.7 )
---
updated-dependencies:
- dependency-name: github.com/google/go-tpm
dependency-version: 0.9.7
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-11-17 15:03:53 +00:00
dependabot[bot]
d722add402
Bump golang.org/x/crypto from 0.43.0 to 0.44.0
...
Bumps [golang.org/x/crypto](https://github.com/golang/crypto ) from 0.43.0 to 0.44.0.
- [Commits](https://github.com/golang/crypto/compare/v0.43.0...v0.44.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/crypto
dependency-version: 0.44.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-11-17 15:03:36 +00:00
Herman Slatman
b5e87345c0
Merge pull request #2463 from provokateurin/feat/sd_notify
...
Add sd_notify support
2025-11-12 14:39:28 +01:00
Herman Slatman
ae730987ff
Merge pull request #2468 from smallstep/herman/upgrade-safecast-v2
...
Update to `v2` of `github.com/ccoVeille/go-safecast`
2025-11-11 10:38:13 +01:00
Herman Slatman
c39ef92af9
Update to v2 of github.com/ccoVeille/go-safecast
2025-11-11 10:20:21 +01:00
step-ci
5205cc08ca
Merge pull request #2466 from smallstep/dependabot/go_modules/golang.org/x/sync-0.18.0
...
Bump golang.org/x/sync from 0.17.0 to 0.18.0
2025-11-11 03:18:49 -06:00
dependabot[bot]
23fb09fd13
Bump golang.org/x/sync from 0.17.0 to 0.18.0
...
Bumps [golang.org/x/sync](https://github.com/golang/sync ) from 0.17.0 to 0.18.0.
- [Commits](https://github.com/golang/sync/compare/v0.17.0...v0.18.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/sync
dependency-version: 0.18.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-11-11 09:09:06 +00:00
step-ci
5f6353b9a0
Merge pull request #2464 from smallstep/dependabot/go_modules/google.golang.org/api-0.255.0
...
Bump google.golang.org/api from 0.254.0 to 0.255.0
2025-11-11 03:07:42 -06:00
dependabot[bot]
130d0fca2d
Bump google.golang.org/api from 0.254.0 to 0.255.0
...
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client ) from 0.254.0 to 0.255.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases )
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md )
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.254.0...v0.255.0 )
---
updated-dependencies:
- dependency-name: google.golang.org/api
dependency-version: 0.255.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-11-11 00:31:44 +00:00
step-ci
1b93a9873e
Merge pull request #2465 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.74.0
...
Bump go.step.sm/crypto from 0.73.0 to 0.74.0
2025-11-10 18:30:27 -06:00
step-ci
68173e3009
Merge pull request #2467 from smallstep/dependabot/github_actions/softprops/action-gh-release-2.4.2
...
Bump softprops/action-gh-release from 2.4.1 to 2.4.2
2025-11-10 18:23:23 -06:00
dependabot[bot]
35702e7390
Bump softprops/action-gh-release from 2.4.1 to 2.4.2
...
Bumps [softprops/action-gh-release](https://github.com/softprops/action-gh-release ) from 2.4.1 to 2.4.2.
- [Release notes](https://github.com/softprops/action-gh-release/releases )
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md )
- [Commits](6da8fa9354...5be0e66d93 )
---
updated-dependencies:
- dependency-name: softprops/action-gh-release
dependency-version: 2.4.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-11-10 16:36:17 +00:00
dependabot[bot]
a05f003e82
Bump go.step.sm/crypto from 0.73.0 to 0.74.0
...
Bumps [go.step.sm/crypto](https://github.com/smallstep/crypto ) from 0.73.0 to 0.74.0.
- [Release notes](https://github.com/smallstep/crypto/releases )
- [Commits](https://github.com/smallstep/crypto/compare/v0.73.0...v0.74.0 )
---
updated-dependencies:
- dependency-name: go.step.sm/crypto
dependency-version: 0.74.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-11-10 15:43:42 +00:00
provokateurin
0c79ee2093
feat: Add sd_notify support
2025-11-09 09:44:26 +01:00
Carl Tashian
2204af10fd
Merge pull request #2461 from roeldev/feat-add-docker-init-envs
...
Add additional DOCKER_STEPCA_INIT_* envs
2025-11-06 17:46:00 +00:00
roeldev
61e37b79fc
Add additional DOCKER_STEPCA_INIT_* envs
...
Add additional DOCKER_STEPCA_INIT_* environment variables to entrypoint.sh so 'step ca init' also accepts the --root, --key, --key-password-file, --deployment-type and --with-ca-url arguments.
2025-11-06 14:51:30 +01:00
step-ci
8f558df122
Merge pull request #2456 from smallstep/dependabot/go_modules/google.golang.org/api-0.254.0
...
Bump google.golang.org/api from 0.253.0 to 0.254.0
2025-11-04 05:52:55 -06:00
dependabot[bot]
ea7a7f87cf
Bump google.golang.org/api from 0.253.0 to 0.254.0
...
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client ) from 0.253.0 to 0.254.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases )
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md )
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.253.0...v0.254.0 )
---
updated-dependencies:
- dependency-name: google.golang.org/api
dependency-version: 0.254.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-11-04 11:17:44 +00:00
step-ci
9fe89baf32
Merge pull request #2457 from smallstep/dependabot/go_modules/github.com/ccoveille/go-safecast-1.8.1
...
Bump github.com/ccoveille/go-safecast from 1.7.0 to 1.8.1
2025-11-04 05:16:28 -06:00
Herman Slatman
6dd0965d24
Use go-safecast generic Convert function to convert integers
2025-11-04 12:07:57 +01:00
dependabot[bot]
0f80781b71
Bump github.com/ccoveille/go-safecast from 1.7.0 to 1.8.1
...
Bumps [github.com/ccoveille/go-safecast](https://github.com/ccoveille/go-safecast ) from 1.7.0 to 1.8.1.
- [Release notes](https://github.com/ccoveille/go-safecast/releases )
- [Commits](https://github.com/ccoveille/go-safecast/compare/v1.7.0...v1.8.1 )
---
updated-dependencies:
- dependency-name: github.com/ccoveille/go-safecast
dependency-version: 1.8.1
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-11-04 10:55:48 +00:00
step-ci
bfbe9db2ed
Merge pull request #2455 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.73.0
...
Bump go.step.sm/crypto from 0.72.0 to 0.73.0
2025-11-04 04:26:48 -06:00
Herman Slatman
69d8dd8d6f
Add additional gosec linter exceptions to ACME linker
2025-11-04 00:28:25 +01:00
Herman Slatman
745fb7a68e
Remove deprecated +build tags
2025-11-04 00:27:47 +01:00
dependabot[bot]
18b418bc8e
Bump go.step.sm/crypto from 0.72.0 to 0.73.0
...
Bumps [go.step.sm/crypto](https://github.com/smallstep/crypto ) from 0.72.0 to 0.73.0.
- [Release notes](https://github.com/smallstep/crypto/releases )
- [Commits](https://github.com/smallstep/crypto/compare/v0.72.0...v0.73.0 )
---
updated-dependencies:
- dependency-name: go.step.sm/crypto
dependency-version: 0.73.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-11-03 15:14:01 +00:00
step-ci
cc7f1470e3
Merge pull request #2447 from smallstep/dependabot/go_modules/google.golang.org/api-0.253.0
...
Bump google.golang.org/api from 0.252.0 to 0.253.0
2025-10-27 11:16:47 -05:00