dependabot[bot]
d560e099a8
Bump google.golang.org/api from 0.244.0 to 0.246.0
...
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client ) from 0.244.0 to 0.246.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases )
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md )
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.244.0...v0.246.0 )
---
updated-dependencies:
- dependency-name: google.golang.org/api
dependency-version: 0.246.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-08-11 19:52:41 +00:00
Herman Slatman
59e4583b81
Merge pull request #2354 from smallstep/herman/fix-oidc-upgrade
...
Upgrade `github.com/coreos/go-oidc/v3` to `v3.15.0`.
2025-08-05 13:17:12 +02:00
Herman Slatman
2bb1896db3
Change OIDC signature algorithm to RS256 to match JWT
...
In https://github.com/coreos/go-oidc/compare/v3.14.1...v3.15.0 , the
JWT signature algorithm verification is moved earlier into the
process, resulting in our existing test failing. The JWT has
algorithm `RS256` set, whereas the verifier had `ES256`. It needs
to have `RS256` to validate the token.
2025-08-05 13:16:36 +02:00
dependabot[bot]
6a9c8ae237
Bump github.com/coreos/go-oidc/v3 from 3.14.1 to 3.15.0
...
Bumps [github.com/coreos/go-oidc/v3](https://github.com/coreos/go-oidc ) from 3.14.1 to 3.15.0.
- [Release notes](https://github.com/coreos/go-oidc/releases )
- [Commits](https://github.com/coreos/go-oidc/compare/v3.14.1...v3.15.0 )
---
updated-dependencies:
- dependency-name: github.com/coreos/go-oidc/v3
dependency-version: 3.15.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-08-05 13:16:35 +02:00
step-ci
1eda025ec2
Merge pull request #2351 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.68.0
...
Bump go.step.sm/crypto from 0.67.0 to 0.68.0
2025-08-04 16:32:21 -05:00
dependabot[bot]
4aaf8bd4e9
Bump go.step.sm/crypto from 0.67.0 to 0.68.0
...
Bumps [go.step.sm/crypto](https://github.com/smallstep/crypto ) from 0.67.0 to 0.68.0.
- [Release notes](https://github.com/smallstep/crypto/releases )
- [Commits](https://github.com/smallstep/crypto/compare/v0.67.0...v0.68.0 )
---
updated-dependencies:
- dependency-name: go.step.sm/crypto
dependency-version: 0.68.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-08-04 21:09:24 +00:00
step-ci
4a4bb7dbce
Merge pull request #2349 from smallstep/dependabot/go_modules/google.golang.org/api-0.244.0
...
Bump google.golang.org/api from 0.243.0 to 0.244.0
2025-08-04 16:04:07 -05:00
step-ci
dbbcd7485c
Merge pull request #2353 from smallstep/dependabot/go_modules/github.com/prometheus/client_golang-1.23.0
...
Bump github.com/prometheus/client_golang from 1.22.0 to 1.23.0
2025-08-04 16:03:04 -05:00
dependabot[bot]
82585145de
Bump github.com/prometheus/client_golang from 1.22.0 to 1.23.0
...
Bumps [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang ) from 1.22.0 to 1.23.0.
- [Release notes](https://github.com/prometheus/client_golang/releases )
- [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md )
- [Commits](https://github.com/prometheus/client_golang/compare/v1.22.0...v1.23.0 )
---
updated-dependencies:
- dependency-name: github.com/prometheus/client_golang
dependency-version: 1.23.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-08-04 20:47:04 +00:00
dependabot[bot]
42a6b4bfaf
Bump google.golang.org/api from 0.243.0 to 0.244.0
...
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client ) from 0.243.0 to 0.244.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases )
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md )
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.243.0...v0.244.0 )
---
updated-dependencies:
- dependency-name: google.golang.org/api
dependency-version: 0.244.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-08-04 18:59:05 +00:00
step-ci
1b0815bae4
Merge pull request #2346 from smallstep/dependabot/go_modules/github.com/newrelic/go-agent/v3-3.40.1
...
Bump github.com/newrelic/go-agent/v3 from 3.39.0 to 3.40.1
2025-07-28 14:10:18 -05:00
dependabot[bot]
2ae5a8d62b
Bump github.com/newrelic/go-agent/v3 from 3.39.0 to 3.40.1
...
Bumps [github.com/newrelic/go-agent/v3](https://github.com/newrelic/go-agent ) from 3.39.0 to 3.40.1.
- [Release notes](https://github.com/newrelic/go-agent/releases )
- [Changelog](https://github.com/newrelic/go-agent/blob/master/CHANGELOG.md )
- [Commits](https://github.com/newrelic/go-agent/compare/v3.39.0...v3.40.1 )
---
updated-dependencies:
- dependency-name: github.com/newrelic/go-agent/v3
dependency-version: 3.40.1
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-07-28 18:50:26 +00:00
step-ci
2497a0eaf8
Merge pull request #2345 from smallstep/dependabot/go_modules/github.com/slackhq/nebula-1.9.6
...
Bump github.com/slackhq/nebula from 1.9.5 to 1.9.6
2025-07-28 13:45:04 -05:00
dependabot[bot]
b790eba7fe
Bump github.com/slackhq/nebula from 1.9.5 to 1.9.6
...
Bumps [github.com/slackhq/nebula](https://github.com/slackhq/nebula ) from 1.9.5 to 1.9.6.
- [Release notes](https://github.com/slackhq/nebula/releases )
- [Changelog](https://github.com/slackhq/nebula/blob/v1.9.6/CHANGELOG.md )
- [Commits](https://github.com/slackhq/nebula/compare/v1.9.5...v1.9.6 )
---
updated-dependencies:
- dependency-name: github.com/slackhq/nebula
dependency-version: 1.9.6
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-07-28 18:32:53 +00:00
step-ci
807b760276
Merge pull request #2347 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.74.2
...
Bump google.golang.org/grpc from 1.73.0 to 1.74.2
2025-07-28 13:30:32 -05:00
dependabot[bot]
2d83772368
Bump google.golang.org/grpc from 1.73.0 to 1.74.2
...
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go ) from 1.73.0 to 1.74.2.
- [Release notes](https://github.com/grpc/grpc-go/releases )
- [Commits](https://github.com/grpc/grpc-go/compare/v1.73.0...v1.74.2 )
---
updated-dependencies:
- dependency-name: google.golang.org/grpc
dependency-version: 1.74.2
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-07-28 17:21:48 +00:00
step-ci
6a12501312
Merge pull request #2340 from smallstep/dependabot/go_modules/google.golang.org/api-0.242.0
...
Bump google.golang.org/api from 0.240.0 to 0.242.0
2025-07-24 22:46:36 -05:00
dependabot[bot]
b291fb074f
Bump google.golang.org/api from 0.240.0 to 0.242.0
...
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client ) from 0.240.0 to 0.242.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases )
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md )
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.240.0...v0.242.0 )
---
updated-dependencies:
- dependency-name: google.golang.org/api
dependency-version: 0.242.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-07-24 20:40:51 -07:00
step-ci
0ed581a715
Merge pull request #2337 from smallstep/dependabot/go_modules/github.com/fxamacker/cbor/v2-2.9.0
...
Bump github.com/fxamacker/cbor/v2 from 2.8.0 to 2.9.0
2025-07-24 22:40:02 -05:00
dependabot[bot]
c90d32c78c
Bump github.com/fxamacker/cbor/v2 from 2.8.0 to 2.9.0
...
Bumps [github.com/fxamacker/cbor/v2](https://github.com/fxamacker/cbor ) from 2.8.0 to 2.9.0.
- [Release notes](https://github.com/fxamacker/cbor/releases )
- [Commits](https://github.com/fxamacker/cbor/compare/v2.8.0...v2.9.0 )
---
updated-dependencies:
- dependency-name: github.com/fxamacker/cbor/v2
dependency-version: 2.9.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-07-24 16:58:49 -07:00
step-ci
0807436e67
Merge pull request #2336 from smallstep/dependabot/go_modules/golang.org/x/net-0.42.0
...
Bump golang.org/x/net from 0.41.0 to 0.42.0
2025-07-24 14:46:36 -05:00
dependabot[bot]
9bbf732f23
Bump golang.org/x/net from 0.41.0 to 0.42.0
...
Bumps [golang.org/x/net](https://github.com/golang/net ) from 0.41.0 to 0.42.0.
- [Commits](https://github.com/golang/net/compare/v0.41.0...v0.42.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/net
dependency-version: 0.42.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-07-24 18:37:08 +00:00
step-ci
544197be34
Merge pull request #2335 from smallstep/dependabot/go_modules/cloud.google.com/go/security-1.19.0
...
Bump cloud.google.com/go/security from 1.18.5 to 1.19.0
2025-07-24 13:11:08 -05:00
dependabot[bot]
317acff9eb
Bump cloud.google.com/go/security from 1.18.5 to 1.19.0
...
Bumps [cloud.google.com/go/security](https://github.com/googleapis/google-cloud-go ) from 1.18.5 to 1.19.0.
- [Release notes](https://github.com/googleapis/google-cloud-go/releases )
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/documentai/CHANGES.md )
- [Commits](https://github.com/googleapis/google-cloud-go/compare/kms/v1.18.5...kms/v1.19.0 )
---
updated-dependencies:
- dependency-name: cloud.google.com/go/security
dependency-version: 1.19.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-07-24 17:29:54 +00:00
smst-jeff
2a51f17a22
Use errgroup to shutdown services concurrently. ( #2343 )
2025-07-24 10:29:29 -07:00
step-ci
b216b10bd2
Merge pull request #2334 from smallstep/dependabot/go_modules/github.com/googleapis/gax-go/v2-2.15.0
...
Bump github.com/googleapis/gax-go/v2 from 2.14.2 to 2.15.0
2025-07-24 12:27:13 -05:00
dependabot[bot]
52801d2e67
Bump github.com/googleapis/gax-go/v2 from 2.14.2 to 2.15.0
...
Bumps [github.com/googleapis/gax-go/v2](https://github.com/googleapis/gax-go ) from 2.14.2 to 2.15.0.
- [Release notes](https://github.com/googleapis/gax-go/releases )
- [Commits](https://github.com/googleapis/gax-go/compare/v2.14.2...v2.15.0 )
---
updated-dependencies:
- dependency-name: github.com/googleapis/gax-go/v2
dependency-version: 2.15.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-07-24 10:16:11 -07:00
Mariano Cano
8537aa802f
Merge pull request #2338 from smallstep/mariano/shutdown
...
Fix process hanging after SIGTERM
2025-07-16 12:08:16 -07:00
Mariano Cano
503f67dc61
Replace sync.WaitGroup with errgroup
2025-07-16 10:50:08 -07:00
Mariano Cano
a5fd0d0cfc
Fix process hanging after SIGTERM
...
This commit fixes a problem where step-ca hangs after a shutdown because
errors were sent to a channel without enough capacity.
2025-07-15 14:37:56 -07:00
Max
2c61c44176
Update changelog ( #2332 )
...
* Update changelog
* Fix a few revive linter issues
2025-07-13 16:22:20 -05:00
Mariano Cano
c86cf07be9
Merge pull request #2331 from smallstep/mariano/fix-tests
...
Fix gcp unit tests
2025-07-09 15:04:10 -07:00
Mariano Cano
831d005df8
Fix gcp unit tests
...
This PR fixes the gcp unit tests and delays the initialization of the
cloud resource manager client.
2025-07-09 12:20:29 -07:00
Mariano Cano
bc09e46c3c
Merge pull request #2133 from ericnorris/feat-gcp-enable-organization-checking
...
feat(gcp): enable organization validation
2025-07-09 11:10:47 -07:00
Max
0d9f0513cf
Merge branch 'master' into feat-gcp-enable-organization-checking
2025-07-09 08:49:52 -07:00
Max
197d0d3508
Changelog updates ( #2330 )
2025-07-08 18:10:37 -07:00
step-ci
2932225055
Merge pull request #2329 from smallstep/dependabot/go_modules/google.golang.org/api-0.240.0
...
Bump google.golang.org/api from 0.239.0 to 0.240.0
2025-07-07 17:24:45 -05:00
Mariano Cano
312d1a2f92
Merge pull request #2325 from smallstep/mariano/httpclient
...
Memory improvements
2025-07-07 11:11:37 -07:00
dependabot[bot]
b1dd5a6ebd
Bump google.golang.org/api from 0.239.0 to 0.240.0
...
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client ) from 0.239.0 to 0.240.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases )
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md )
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.239.0...v0.240.0 )
---
updated-dependencies:
- dependency-name: google.golang.org/api
dependency-version: 0.240.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-07-07 17:56:57 +00:00
Mariano Cano
244e610986
Merge pull request #2326 from smallstep/mariano/fix-2323
...
Allow to specify audience when generating JWK provisioner tokens
2025-07-03 11:00:15 -07:00
Mariano Cano
1ae78b803d
Make poolhttp thread safe.
2025-07-02 12:46:32 -07:00
Mariano Cano
2b13b82ee3
Apply suggestions from code review
...
Co-authored-by: Herman Slatman <hslatman@users.noreply.github.com >
2025-07-02 10:48:37 -07:00
Mariano Cano
d647ba3e9c
Allow to specify audience when generating JWK provisioner tokens
...
This commit allows to set custom audiences to generate X.509 and SSH
related tokens. This change is backward compatible with the current
interface.
Fixes @2323
2025-07-01 18:36:20 -07:00
Mariano Cano
b690e1214d
Remove commented code
2025-07-01 15:57:48 -07:00
Mariano Cano
f3c2e94576
Address linter errors
2025-07-01 14:58:57 -07:00
Mariano Cano
d4fd467e8a
Memory improvements
...
This commit replaces the client in provisioners and webhooks with an
interface. Then it implements the interface using the new poolhttp
package. This package implements the HTTPClient interface but it is
backed by a sync.Pool, this improves memory, allowing the GC to clean
more memory. It also removes the timer in the keystore to avoid
having extra goroutines if a provisioner goes away. This commit avoids
creating the templates func multiple times, reducing some memory in the
heap.
2025-07-01 13:53:52 -07:00
step-ci
a1067cab46
Merge pull request #2324 from smallstep/dependabot/go_modules/google.golang.org/api-0.239.0
...
Bump google.golang.org/api from 0.238.0 to 0.239.0
2025-07-01 04:42:37 -05:00
dependabot[bot]
8c66606300
Bump google.golang.org/api from 0.238.0 to 0.239.0
...
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client ) from 0.238.0 to 0.239.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases )
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md )
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.238.0...v0.239.0 )
---
updated-dependencies:
- dependency-name: google.golang.org/api
dependency-version: 0.239.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-06-30 18:38:06 +00:00
step-ci
46b1c4c124
Merge pull request #2315 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.67.0
...
Bump go.step.sm/crypto from 0.66.0 to 0.67.0
2025-06-25 04:16:24 -05:00
dependabot[bot]
7fcdbac351
Bump go.step.sm/crypto from 0.66.0 to 0.67.0
...
Bumps [go.step.sm/crypto](https://github.com/smallstep/crypto ) from 0.66.0 to 0.67.0.
- [Release notes](https://github.com/smallstep/crypto/releases )
- [Commits](https://github.com/smallstep/crypto/compare/v0.66.0...v0.67.0 )
---
updated-dependencies:
- dependency-name: go.step.sm/crypto
dependency-version: 0.67.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-06-25 09:11:51 +00:00