Commit 46a317d
authored
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?v=4&size=40){kind=avatar}
Bump github.com/smallstep/certificates from 0.26.1 to 0.28.3 (#1)
Bumps
[github.com/smallstep/certificates](https://github.com/smallstep/certificates)
from 0.26.1 to 0.28.3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/smallstep/certificates/releases">github.com/smallstep/certificates's
releases</a>.</em></p>
<blockquote>
<h2>Step CA v0.28.3 (25-03-18)</h2>
<h2>Official Release Artifacts</h2>
<h4>Linux</h4>
<ul>
<li>📦 <a
href="https://dl.smallstep.com/gh-release/certificates/gh-release-header/v0.28.3/step-ca_linux_0.28.3_amd64.tar.gz">step-ca_linux_0.28.3_amd64.tar.gz</a></li>
<li>📦 <a
href="https://dl.smallstep.com/gh-release/certificates/gh-release-header/v0.28.3/step-ca_0.28.3-1_amd64.deb">step-ca_0.28.3-1_amd64.deb</a></li>
<li>📦 <a
href="https://dl.smallstep.com/gh-release/certificates/gh-release-header/v0.28.3/step-ca-0.28.3-1.x86_64.rpm">step-ca-0.28.3-1.x86_64.rpm</a></li>
<li>📦 <a
href="https://dl.smallstep.com/gh-release/certificates/gh-release-header/v0.28.3/step-ca_0.28.3-1_arm64.deb">step-ca_0.28.3-1_arm64.deb</a></li>
<li>📦 <a
href="https://dl.smallstep.com/gh-release/certificates/gh-release-header/v0.28.3/step-ca-0.28.3-1.aarch64.rpm">step-ca-0.28.3-1.aarch64.rpm</a></li>
</ul>
<h4>OSX Darwin</h4>
<ul>
<li>📦 <a
href="https://dl.smallstep.com/gh-release/certificates/gh-release-header/v0.28.3/step-ca_darwin_0.28.3_amd64.tar.gz">step-ca_darwin_0.28.3_amd64.tar.gz</a></li>
<li>📦 <a
href="https://dl.smallstep.com/gh-release/certificates/gh-release-header/v0.28.3/step-ca_darwin_0.28.3_arm64.tar.gz">step-ca_darwin_0.28.3_arm64.tar.gz</a></li>
</ul>
<h4>Windows</h4>
<ul>
<li>📦 <a
href="https://dl.smallstep.com/gh-release/certificates/gh-release-header/v0.28.3/step-ca_windows_0.28.3_amd64.zip">step-ca_windows_0.28.3_amd64.zip</a></li>
</ul>
<p>For more builds across platforms and architectures, see the
<code>Assets</code> section below.
And for packaged versions (Docker, k8s, Homebrew), see our <a
href="https://smallstep.com/docs/step-ca/installation">installation
docs</a>.</p>
<p>Don't see the artifact you need? Open an issue <a
href="https://github.com/smallstep/certificates/issues/new/choose">here</a>.</p>
<h2>Signatures and Checksums</h2>
<p><code>step-ca</code> uses <a
href="https://github.com/sigstore/cosign">sigstore/cosign</a> for
signing and verifying release artifacts.</p>
<p>Below is an example using <code>cosign</code> to verify a release
artifact:</p>
<pre><code>cosign verify-blob \
--certificate step-ca_darwin_0.28.3_amd64.tar.gz.sig.pem \
--signature step-ca_darwin_0.28.3_amd64.tar.gz.sig \
--certificate-identity-regexp
"https://github\.com/smallstep/workflows/.*" \
--certificate-oidc-issuer https://token.actions.githubusercontent.com \
step-ca_darwin_0.28.3_amd64.tar.gz
</code></pre>
<p>The <code>checksums.txt</code> file (in the <code>Assets</code>
section below) contains a checksum for every artifact in the
release.</p>
<h2>Changelog</h2>
<ul>
<li>0cf1c5688708ec4a910c007d7f151c617b722268 empty commit</li>
<li>78745ba9ff05d489f4bb95789f163217818adf26 empty commit (<a
href="https://redirect.github.com/smallstep/certificates/issues/2216">#2216</a>)</li>
</ul>
<h2>Thanks!</h2>
<p>Those were the changes on v0.28.3!</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/smallstep/certificates/blob/master/CHANGELOG.md">github.com/smallstep/certificates's
changelog</a>.</em></p>
<blockquote>
<h2>[0.28.3] - 2025-03-17</h2>
<ul>
<li>dependabot updates</li>
</ul>
<h2>[0.28.2] - 2025-02-20</h2>
<h3>Added</h3>
<ul>
<li><code>smallstep/certificates#2113</code></li>
<li><code>smallstep/certificates#2114</code></li>
<li><code>smallstep/certificates#2124</code></li>
</ul>
<h3>Changed</h3>
<ul>
<li><code>smallstep/certificates#2098</code><a
href="https://redirect.github.com/smallstep/certificates/issues/2103">smallstep/certificates#2103</a>,
<a
href="https://redirect.github.com/smallstep/certificates/issues/2104">smallstep/certificates#2104</a>)
<ul>
<li>For example, replacing http.DefaultTransport clone in provisioner
webhook business logic.</li>
</ul>
</li>
</ul>
<h2>[0.28.1] - 2024-11-19</h2>
<h3>Added</h3>
<ul>
<li><code>smallstep/certificates#2065</code></li>
<li><code>smallstep/certificates#2066</code><a
href="https://redirect.github.com/smallstep/certificates/issues/2069">smallstep/certificates#2069</a>)</li>
<li><code>smallstep/certificates#2076</code></li>
<li><code>smallstep/certificates#2077</code></li>
</ul>
<h3>Changed</h3>
<ul>
<li><code>smallstep/certificates#2076</code></li>
</ul>
<h2>[0.28.0] - 2024-10-29</h2>
<h3>Added</h3>
<ul>
<li><code>smallstep/certificates#2045</code></li>
</ul>
<h3>Changed</h3>
<ul>
<li>For IID provisioners with disableCustomSANs set to true, validate
that the
requested DNS names are a subset of the allowed DNS names (based on the
IID token),
<code>smallstep/certificates#2044</code></li>
</ul>
<h2>[0.27.5] - 2024-10-17</h2>
<h3>Added</h3>
<ul>
<li><code>smallstep/certificates#2002</code></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/smallstep/certificates/commit/0cf1c5688708ec4a910c007d7f151c617b722268"><code>0cf1c56</code></a>
empty commit</li>
<li><a
href="https://github.com/smallstep/certificates/commit/78745ba9ff05d489f4bb95789f163217818adf26"><code>78745ba</code></a>
empty commit (<a
href="https://redirect.github.com/smallstep/certificates/issues/2216">#2216</a>)</li>
<li><a
href="https://github.com/smallstep/certificates/commit/dfdb7795b41a19772acb0cd9856ddb93a0391f77"><code>dfdb779</code></a>
Changelog for v0.28.3 (<a
href="https://redirect.github.com/smallstep/certificates/issues/2215">#2215</a>)</li>
<li><a
href="https://github.com/smallstep/certificates/commit/d17e2c586d61ff5ae402930478d872ab7b8489a8"><code>d17e2c5</code></a>
Merge pull request <a
href="https://redirect.github.com/smallstep/certificates/issues/2214">#2214</a>
from smallstep/dependabot/go_modules/github.com/ccov...</li>
<li><a
href="https://github.com/smallstep/certificates/commit/4865fdb85c262db33eab462f7aef5a4f66cd9d18"><code>4865fdb</code></a>
Bump github.com/ccoveille/go-safecast from 1.5.0 to 1.6.0</li>
<li><a
href="https://github.com/smallstep/certificates/commit/ac9048d6b1bc95cf92b47019ac42509e6d9ddfdb"><code>ac9048d</code></a>
Merge pull request <a
href="https://redirect.github.com/smallstep/certificates/issues/2212">#2212</a>
from smallstep/dependabot/go_modules/cloud.google.co...</li>
<li><a
href="https://github.com/smallstep/certificates/commit/450a35037bb21f9af9d0b508b7af831ff66a2e09"><code>450a350</code></a>
Bump cloud.google.com/go/security from 1.18.3 to 1.18.4</li>
<li><a
href="https://github.com/smallstep/certificates/commit/7afff07965487b4dd2e7cbea0674039db9e8e533"><code>7afff07</code></a>
Merge pull request <a
href="https://redirect.github.com/smallstep/certificates/issues/2213">#2213</a>
from smallstep/dependabot/go_modules/github.com/core...</li>
<li><a
href="https://github.com/smallstep/certificates/commit/fa6fd96636eea8efd062fd36a24f0d8e93addb88"><code>fa6fd96</code></a>
Merge pull request <a
href="https://redirect.github.com/smallstep/certificates/issues/2210">#2210</a>
from smallstep/dependabot/go_modules/cloud.google.co...</li>
<li><a
href="https://github.com/smallstep/certificates/commit/67aadedf2f3251c4410ae42971c0cd3d9404d67b"><code>67aaded</code></a>
Bump github.com/coreos/go-oidc/v3 from 3.12.0 to 3.13.0</li>
<li>Additional commits viewable in <a
href="https://github.com/smallstep/certificates/compare/v0.26.1...v0.28.3">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>1 parent c5fb7f7 commit 46a317d
2 files changed
+198
-287
lines changed| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
7 | 7 | | |
8 | 8 | | |
9 | 9 | | |
10 | | - | |
| 10 | + | |
11 | 11 | | |
12 | 12 | | |
13 | 13 | | |
| |||
27 | 27 | | |
28 | 28 | | |
29 | 29 | | |
| 30 | + | |
30 | 31 | | |
31 | 32 | | |
32 | 33 | | |
33 | 34 | | |
| 35 | + | |
34 | 36 | | |
35 | 37 | | |
36 | 38 | | |
| |||
39 | 41 | | |
40 | 42 | | |
41 | 43 | | |
42 | | - | |
43 | | - | |
44 | | - | |
45 | | - | |
| 44 | + | |
| 45 | + | |
46 | 46 | | |
47 | 47 | | |
48 | 48 | | |
| |||
51 | 51 | | |
52 | 52 | | |
53 | 53 | | |
54 | | - | |
55 | | - | |
56 | | - | |
57 | 54 | | |
58 | | - | |
59 | 55 | | |
60 | | - | |
61 | | - | |
| 56 | + | |
| 57 | + | |
62 | 58 | | |
63 | 59 | | |
64 | 60 | | |
| |||
70 | 66 | | |
71 | 67 | | |
72 | 68 | | |
| 69 | + | |
73 | 70 | | |
74 | 71 | | |
75 | 72 | | |
76 | | - | |
77 | | - | |
78 | | - | |
79 | | - | |
| 73 | + | |
| 74 | + | |
| 75 | + | |
| 76 | + | |
80 | 77 | | |
81 | 78 | | |
82 | | - | |
| 79 | + | |
83 | 80 | | |
84 | 81 | | |
85 | 82 | | |
86 | | - | |
87 | | - | |
88 | | - | |
89 | | - | |
| 83 | + | |
| 84 | + | |
| 85 | + | |
| 86 | + | |
| 87 | + | |
| 88 | + | |
90 | 89 | | |
91 | 90 | | |
92 | 91 | | |
93 | 92 | | |
94 | | - | |
| 93 | + | |
95 | 94 | | |
96 | | - | |
97 | | - | |
98 | | - | |
99 | | - | |
| 95 | + | |
| 96 | + | |
100 | 97 | | |
101 | 98 | | |
102 | 99 | | |
103 | 100 | | |
104 | 101 | | |
105 | 102 | | |
106 | | - | |
| 103 | + | |
107 | 104 | | |
108 | 105 | | |
| 106 | + | |
109 | 107 | | |
110 | 108 | | |
111 | 109 | | |
112 | 110 | | |
113 | 111 | | |
114 | 112 | | |
115 | | - | |
116 | | - | |
117 | | - | |
118 | | - | |
| 113 | + | |
| 114 | + | |
| 115 | + | |
| 116 | + | |
| 117 | + | |
119 | 118 | | |
120 | 119 | | |
121 | 120 | | |
0 commit comments