Commit Graph

5306 Commits

Author SHA1 Message Date
dependabot[bot]
cf8479df17 Bump google.golang.org/api from 0.257.0 to 0.258.0
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.257.0 to 0.258.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.257.0...v0.258.0)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-version: 0.258.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-12-29 20:33:44 +01:00
step-ci
b1da00c811 Merge pull request #2508 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.78.0
Bump google.golang.org/grpc from 1.77.0 to 1.78.0
2025-12-29 10:14:22 -06:00
dependabot[bot]
c46e7ce99b Bump google.golang.org/grpc from 1.77.0 to 1.78.0
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.77.0 to 1.78.0.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.77.0...v1.78.0)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-version: 1.78.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-12-29 15:02:07 +00:00
step-ci
2f82cb13b2 Merge pull request #2506 from smallstep/dependabot/go_modules/github.com/googleapis/gax-go/v2-2.16.0
Bump github.com/googleapis/gax-go/v2 from 2.15.0 to 2.16.0
2025-12-22 15:42:01 -06:00
dependabot[bot]
b3734f0b18 Bump github.com/googleapis/gax-go/v2 from 2.15.0 to 2.16.0
Bumps [github.com/googleapis/gax-go/v2](https://github.com/googleapis/gax-go) from 2.15.0 to 2.16.0.
- [Release notes](https://github.com/googleapis/gax-go/releases)
- [Commits](https://github.com/googleapis/gax-go/compare/v2.15.0...v2.16.0)

---
updated-dependencies:
- dependency-name: github.com/googleapis/gax-go/v2
  dependency-version: 2.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-12-22 15:02:38 +00:00
step-ci
54715c850e Merge pull request #2502 from smallstep/dependabot/go_modules/google.golang.org/protobuf-1.36.11
Bump google.golang.org/protobuf from 1.36.10 to 1.36.11
2025-12-15 18:25:35 -06:00
dependabot[bot]
e5db0c2276 Bump google.golang.org/protobuf from 1.36.10 to 1.36.11
Bumps google.golang.org/protobuf from 1.36.10 to 1.36.11.

---
updated-dependencies:
- dependency-name: google.golang.org/protobuf
  dependency-version: 1.36.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-12-16 00:02:19 +00:00
step-ci
8f6304619f Merge pull request #2503 from smallstep/dependabot/go_modules/golang.org/x/net-0.48.0
Bump golang.org/x/net from 0.47.0 to 0.48.0
2025-12-15 18:01:00 -06:00
dependabot[bot]
ec3698dc2d Bump golang.org/x/net from 0.47.0 to 0.48.0
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.47.0 to 0.48.0.
- [Commits](https://github.com/golang/net/compare/v0.47.0...v0.48.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-version: 0.48.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-12-15 15:03:24 +00:00
step-ci
5398fc7653 Merge pull request #2495 from smallstep/dependabot/go_modules/google.golang.org/api-0.257.0
Bump google.golang.org/api from 0.256.0 to 0.257.0
2025-12-09 01:37:22 -06:00
dependabot[bot]
9dec8fca75 Bump google.golang.org/api from 0.256.0 to 0.257.0
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.256.0 to 0.257.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.256.0...v0.257.0)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-version: 0.257.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-12-09 07:32:19 +00:00
step-ci
b7ff5e9441 Merge pull request #2496 from smallstep/dependabot/go_modules/golang.org/x/sync-0.19.0
Bump golang.org/x/sync from 0.18.0 to 0.19.0
2025-12-09 01:31:11 -06:00
step-ci
7203cbfa17 Merge pull request #2494 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.75.0
Bump go.step.sm/crypto from 0.74.0 to 0.75.0
2025-12-09 01:30:39 -06:00
dependabot[bot]
576779073e Bump golang.org/x/sync from 0.18.0 to 0.19.0
Bumps [golang.org/x/sync](https://github.com/golang/sync) from 0.18.0 to 0.19.0.
- [Commits](https://github.com/golang/sync/compare/v0.18.0...v0.19.0)

---
updated-dependencies:
- dependency-name: golang.org/x/sync
  dependency-version: 0.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-12-08 15:03:40 +00:00
dependabot[bot]
67276b5bca Bump go.step.sm/crypto from 0.74.0 to 0.75.0
Bumps [go.step.sm/crypto](https://github.com/smallstep/crypto) from 0.74.0 to 0.75.0.
- [Release notes](https://github.com/smallstep/crypto/releases)
- [Commits](https://github.com/smallstep/crypto/compare/v0.74.0...v0.75.0)

---
updated-dependencies:
- dependency-name: go.step.sm/crypto
  dependency-version: 0.75.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-12-08 15:03:25 +00:00
Herman Slatman
86bea27867 Merge pull request #2492 from smallstep/herman/enable-govulncheck
Revert "Disable govulncheck until go 1.25.5 is available in github ac…
2025-12-04 00:49:36 +01:00
Herman Slatman
3e90f37689 Revert "Disable govulncheck until go 1.25.5 is available in github actions (#2490)"
This reverts commit 8e76e290c0.
2025-12-03 14:55:50 +01:00
Mariano Cano
992ff696e9 Merge pull request #2491 from smallstep/mariano/update
Improve validation in authorization path
2025-12-02 19:41:31 -08:00
Mariano Cano
9d79c59c1d Merge branch 'master' into mariano/update 2025-12-02 19:39:35 -08:00
Max
8e76e290c0 Disable govulncheck until go 1.25.5 is available in github actions (#2490) 2025-12-02 19:39:12 -08:00
Mariano Cano
1011f5f540 Improve validation in authorization path 2025-12-02 16:54:44 -08:00
Max
48ed3a5d17 Changelog updates for preparing for v0.29.0 (#2488) 2025-12-01 18:00:51 -08:00
step-ci
008e6ae94a Merge pull request #2487 from smallstep/dependabot/github_actions/softprops/action-gh-release-2.5.0
Bump softprops/action-gh-release from 2.4.2 to 2.5.0
2025-12-01 19:33:14 -06:00
dependabot[bot]
895e8c61bf Bump softprops/action-gh-release from 2.4.2 to 2.5.0
Bumps [softprops/action-gh-release](https://github.com/softprops/action-gh-release) from 2.4.2 to 2.5.0.
- [Release notes](https://github.com/softprops/action-gh-release/releases)
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md)
- [Commits](5be0e66d93...a06a81a03e)

---
updated-dependencies:
- dependency-name: softprops/action-gh-release
  dependency-version: 2.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-12-01 17:04:12 +00:00
step-ci
930e8fc146 Merge pull request #2477 from smallstep/dependabot/go_modules/golang.org/x/crypto-0.45.0
Bump golang.org/x/crypto from 0.44.0 to 0.45.0
2025-11-25 05:59:58 -06:00
dependabot[bot]
d7537894c5 Bump golang.org/x/crypto from 0.44.0 to 0.45.0
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.44.0 to 0.45.0.
- [Commits](https://github.com/golang/crypto/compare/v0.44.0...v0.45.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-version: 0.45.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-11-25 11:31:38 +00:00
step-ci
07fa3454c6 Merge pull request #2481 from smallstep/dependabot/go_modules/github.com/newrelic/go-agent/v3-3.42.0
Bump github.com/newrelic/go-agent/v3 from 3.41.0 to 3.42.0
2025-11-25 05:30:27 -06:00
dependabot[bot]
2d6b35945a Bump github.com/newrelic/go-agent/v3 from 3.41.0 to 3.42.0
Bumps [github.com/newrelic/go-agent/v3](https://github.com/newrelic/go-agent) from 3.41.0 to 3.42.0.
- [Release notes](https://github.com/newrelic/go-agent/releases)
- [Changelog](https://github.com/newrelic/go-agent/blob/master/CHANGELOG.md)
- [Commits](https://github.com/newrelic/go-agent/compare/v3.41.0...v3.42.0)

---
updated-dependencies:
- dependency-name: github.com/newrelic/go-agent/v3
  dependency-version: 3.42.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-11-25 11:16:21 +00:00
step-ci
b15aea56bf Merge pull request #2482 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.77.0
Bump google.golang.org/grpc from 1.76.0 to 1.77.0
2025-11-25 05:14:46 -06:00
step-ci
562fb7dd51 Merge pull request #2483 from smallstep/dependabot/go_modules/github.com/coreos/go-oidc/v3-3.17.0
Bump github.com/coreos/go-oidc/v3 from 3.16.0 to 3.17.0
2025-11-25 05:14:24 -06:00
dependabot[bot]
0b1ac14bf6 Bump github.com/coreos/go-oidc/v3 from 3.16.0 to 3.17.0
Bumps [github.com/coreos/go-oidc/v3](https://github.com/coreos/go-oidc) from 3.16.0 to 3.17.0.
- [Release notes](https://github.com/coreos/go-oidc/releases)
- [Commits](https://github.com/coreos/go-oidc/compare/v3.16.0...v3.17.0)

---
updated-dependencies:
- dependency-name: github.com/coreos/go-oidc/v3
  dependency-version: 3.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-11-24 15:39:15 +00:00
dependabot[bot]
bbbe61ef1f Bump google.golang.org/grpc from 1.76.0 to 1.77.0
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.76.0 to 1.77.0.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.76.0...v1.77.0)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-version: 1.77.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-11-24 15:39:10 +00:00
step-ci
2746cd06fb Merge pull request #2474 from smallstep/dependabot/go_modules/golang.org/x/net-0.47.0
Bump golang.org/x/net from 0.46.0 to 0.47.0
2025-11-18 06:39:46 -06:00
dependabot[bot]
5e8fa9e909 Bump golang.org/x/net from 0.46.0 to 0.47.0
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.46.0 to 0.47.0.
- [Commits](https://github.com/golang/net/compare/v0.46.0...v0.47.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-version: 0.47.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-11-18 12:31:43 +00:00
step-ci
1bd985412e Merge pull request #2472 from smallstep/dependabot/go_modules/google.golang.org/api-0.256.0
Bump google.golang.org/api from 0.255.0 to 0.256.0
2025-11-18 06:30:28 -06:00
dependabot[bot]
d37d1cb4b3 Bump google.golang.org/api from 0.255.0 to 0.256.0
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.255.0 to 0.256.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.255.0...v0.256.0)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-version: 0.256.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-11-18 11:05:19 +00:00
step-ci
1cf5fd4483 Merge pull request #2471 from smallstep/dependabot/go_modules/golang.org/x/crypto-0.44.0
Bump golang.org/x/crypto from 0.43.0 to 0.44.0
2025-11-18 05:04:04 -06:00
step-ci
6315e2c167 Merge pull request #2473 from smallstep/dependabot/go_modules/github.com/google/go-tpm-0.9.7
Bump github.com/google/go-tpm from 0.9.6 to 0.9.7
2025-11-18 05:03:27 -06:00
dependabot[bot]
0f77bf645b Bump github.com/google/go-tpm from 0.9.6 to 0.9.7
Bumps [github.com/google/go-tpm](https://github.com/google/go-tpm) from 0.9.6 to 0.9.7.
- [Release notes](https://github.com/google/go-tpm/releases)
- [Commits](https://github.com/google/go-tpm/compare/v0.9.6...v0.9.7)

---
updated-dependencies:
- dependency-name: github.com/google/go-tpm
  dependency-version: 0.9.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-11-17 15:03:53 +00:00
dependabot[bot]
d722add402 Bump golang.org/x/crypto from 0.43.0 to 0.44.0
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.43.0 to 0.44.0.
- [Commits](https://github.com/golang/crypto/compare/v0.43.0...v0.44.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-version: 0.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-11-17 15:03:36 +00:00
Herman Slatman
b5e87345c0 Merge pull request #2463 from provokateurin/feat/sd_notify
Add sd_notify support
2025-11-12 14:39:28 +01:00
Herman Slatman
ae730987ff Merge pull request #2468 from smallstep/herman/upgrade-safecast-v2
Update to `v2` of `github.com/ccoVeille/go-safecast`
2025-11-11 10:38:13 +01:00
Herman Slatman
c39ef92af9 Update to v2 of github.com/ccoVeille/go-safecast 2025-11-11 10:20:21 +01:00
step-ci
5205cc08ca Merge pull request #2466 from smallstep/dependabot/go_modules/golang.org/x/sync-0.18.0
Bump golang.org/x/sync from 0.17.0 to 0.18.0
2025-11-11 03:18:49 -06:00
dependabot[bot]
23fb09fd13 Bump golang.org/x/sync from 0.17.0 to 0.18.0
Bumps [golang.org/x/sync](https://github.com/golang/sync) from 0.17.0 to 0.18.0.
- [Commits](https://github.com/golang/sync/compare/v0.17.0...v0.18.0)

---
updated-dependencies:
- dependency-name: golang.org/x/sync
  dependency-version: 0.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-11-11 09:09:06 +00:00
step-ci
5f6353b9a0 Merge pull request #2464 from smallstep/dependabot/go_modules/google.golang.org/api-0.255.0
Bump google.golang.org/api from 0.254.0 to 0.255.0
2025-11-11 03:07:42 -06:00
dependabot[bot]
130d0fca2d Bump google.golang.org/api from 0.254.0 to 0.255.0
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.254.0 to 0.255.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.254.0...v0.255.0)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-version: 0.255.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-11-11 00:31:44 +00:00
step-ci
1b93a9873e Merge pull request #2465 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.74.0
Bump go.step.sm/crypto from 0.73.0 to 0.74.0
2025-11-10 18:30:27 -06:00
step-ci
68173e3009 Merge pull request #2467 from smallstep/dependabot/github_actions/softprops/action-gh-release-2.4.2
Bump softprops/action-gh-release from 2.4.1 to 2.4.2
2025-11-10 18:23:23 -06:00
dependabot[bot]
35702e7390 Bump softprops/action-gh-release from 2.4.1 to 2.4.2
Bumps [softprops/action-gh-release](https://github.com/softprops/action-gh-release) from 2.4.1 to 2.4.2.
- [Release notes](https://github.com/softprops/action-gh-release/releases)
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md)
- [Commits](6da8fa9354...5be0e66d93)

---
updated-dependencies:
- dependency-name: softprops/action-gh-release
  dependency-version: 2.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-11-10 16:36:17 +00:00