chore(deps): update dependency smallstep/cli to v0.28.7 #40

Merged

GregoryDosh merged 1 commit from renovate/smallstep-cli-0.x into main 2025-07-17 12:20:00 +00:00

Conversation 0 Commits 1 Files changed 1 +1 -1

svc-renovate-bot commented 2025-07-14 12:30:45 +00:00

Member

Copy link

This PR contains the following updates:

Package	Update	Change
smallstep/cli	patch	v0.28.6 -> v0.28.7

---

Release Notes

smallstep/cli (smallstep/cli)

v0.28.7: Step CLI v0.28.7 (25-07-14)

Compare Source

Official Release Artifacts

Below are the most popular artifacts for step on each platform.

For packaged versions (Homebrew, Scoop, etc.), see our installation docs.

Linux

• 📦 step_linux_0.28.7_amd64.tar.gz
• 📦 step_linux_0.28.7_arm64.tar.gz
• 📦 step_linux_0.28.7_armv7.tar.gz
• 📦 step-cli_0.28.7-1_amd64.deb
• 📦 step-cli-0.28.7-1.x86_64.rpm
• 📦 step-cli_0.28.7-1_arm64.deb
• 📦 step-cli-0.28.7-1.aarch64.rpm
• see Assets below for more builds

macOS Darwin

• 📦 step_darwin_0.28.7_amd64.tar.gz
• 📦 step_darwin_0.28.7_arm64.tar.gz

Windows

• 📦 step_windows_0.28.7_amd64.zip
• 📦 step_windows_0.28.7_arm64.zip

Signatures and Checksums

step uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

cosign verify-blob \
  --certificate ~/Download/step_darwin_0.28.7_amd64.tar.gz.pem \
  --signature ~/Downloads/step_darwin_0.28.7_amd64.tar.gz.sig \
  --certificate-identity-regexp "https://github\.com/smallstep/workflows/.*" \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  ~/Downloads/step_darwin_0.28.7_amd64.tar.gz

The checksums.txt file (in the 'Assets' section below) contains a checksum for every artifact in the release.

Changelog

• 6bc838d Bump to certificates@v0.28.4 (#​1454)
• 939805a Fix broken test (#​1452)
• 3e9adc2 Changelog updates (#​1448)
• 60a4eef Fix linter warnings (#​1450)
• cb9a523 Merge pull request #​1451 from smallstep/carl/readme
• 7725db9 Small tweaks to README
• 632b477 Merge pull request #​1447 from smallstep/mariano/plugin
• 12ad189 Fix step-kms-plugin name
• de23b94 Apply suggestions from code review
• e18fcdc Add a plugins section to the README
• b578783 Merge pull request #​1446 from smallstep/herman/fix-testscript-runmain-deprecation
• 6a18dda Fix deprecation of testscript.RunMain
• fdc34f4 Merge pull request #​1445 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.67.0
• d9ae211 Bump go.step.sm/crypto from 0.66.0 to 0.67.0
• f7dac16 Bump github.com/rogpeppe/go-internal from 1.13.1 to 1.14.1
• ec725b7 Merge pull request #​1442 from smallstep/dependabot/go_modules/github.com/go-chi/chi/v5-5.2.2
• b99c3df Bump github.com/go-chi/chi/v5 from 5.2.1 to 5.2.2
• c791bbf Merge pull request #​1426 from smallstep/herman/testscript
• 279e638 Allow changing the app name at compile time through AppName
• 1932842 Add check_certificate and check_jwk_without_password
• 9cce28a Merge pull request #​1440 from smallstep/dependabot/go_modules/github.com/urfave/cli-1.22.17
• c030605 Bump github.com/urfave/cli from 1.22.16 to 1.22.17
• 5e20728 Merge pull request #​1439 from smallstep/dependabot/github_actions/softprops/action-gh-release-2.3.2
• 7fb48a6 Bump softprops/action-gh-release from 2.2.2 to 2.3.2
• 2944159 Refactor step crypto jwk create commands into using testscript
• 1a494ce Refactor step crypto jwt sign and step crypto jwt verify tests
• 298ff27 Refactor step crypto otp tests into using testscript
• f641332 Use --password-file to provide password to step crypto keypair
• 1fc663b Refactor step crypto keypair tests to use testscript
• 825b161 Replace several old integration style tests with testscript tests
• f338d80 Refactor CLI to make it testable using testscript
• a4a846a Merge pull request #​1436 from smallstep/dependabot/go_modules/golang.org/x/crypto-0.39.0
• f8c1eaf Ignore insecure ssh.KeyAlgoDSA usages using nolint
• edca39f Bump golang.org/x/crypto from 0.38.0 to 0.39.0

Thanks!

Those were the changes on v0.28.7!

Come join us on Discord to ask questions, chat about PKI, or get a sneak peek at the freshest PKI memes.

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [smallstep/cli](https://github.com/smallstep/cli) | patch | `v0.28.6` -> `v0.28.7` | --- ### Release Notes <details> <summary>smallstep/cli (smallstep/cli)</summary> ### [`v0.28.7`](https://github.com/smallstep/cli/releases/tag/v0.28.7): Step CLI v0.28.7 (25-07-14) [Compare Source](https://github.com/smallstep/cli/compare/v0.28.6...v0.28.7) #### Official Release Artifacts Below are the most popular artifacts for `step` on each platform. For packaged versions (Homebrew, Scoop, etc.), see our [installation docs](https://smallstep.com/docs/step-cli/installation). ##### Linux - 📦 [step\_linux\_0.28.7\_amd64.tar.gz](https://dl.smallstep.com/gh-release/cli/gh-release-header/v0.28.7/step_linux_0.28.7_amd64.tar.gz) - 📦 [step\_linux\_0.28.7\_arm64.tar.gz](https://dl.smallstep.com/gh-release/cli/gh-release-header/v0.28.7/step_linux_0.28.7_arm64.tar.gz) - 📦 [step\_linux\_0.28.7\_armv7.tar.gz](https://dl.smallstep.com/gh-release/cli/gh-release-header/v0.28.7/step_linux_0.28.7_armv7.tar.gz) - 📦 [step-cli\_0.28.7-1\_amd64.deb](https://dl.smallstep.com/gh-release/cli/gh-release-header/v0.28.7/step-cli_0.28.7-1_amd64.deb) - 📦 [step-cli-0.28.7-1.x86\_64.rpm](https://dl.smallstep.com/gh-release/cli/gh-release-header/v0.28.7/step-cli-0.28.7-1.x86_64.rpm) - 📦 [step-cli\_0.28.7-1\_arm64.deb](https://dl.smallstep.com/gh-release/cli/gh-release-header/v0.28.7/step-cli_0.28.7-1_arm64.deb) - 📦 [step-cli-0.28.7-1.aarch64.rpm](https://dl.smallstep.com/gh-release/cli/gh-release-header/v0.28.7/step-cli-0.28.7-1.aarch64.rpm) - see `Assets` below for more builds ##### macOS Darwin - 📦 [step\_darwin\_0.28.7\_amd64.tar.gz](https://dl.smallstep.com/gh-release/cli/gh-release-header/v0.28.7/step_darwin_0.28.7_amd64.tar.gz) - 📦 [step\_darwin\_0.28.7\_arm64.tar.gz](https://dl.smallstep.com/gh-release/cli/gh-release-header/v0.28.7/step_darwin_0.28.7_arm64.tar.gz) ##### Windows - 📦 [step\_windows\_0.28.7\_amd64.zip](https://dl.smallstep.com/gh-release/cli/gh-release-header/v0.28.7/step_windows_0.28.7_amd64.zip) - 📦 [step\_windows\_0.28.7\_arm64.zip](https://dl.smallstep.com/gh-release/cli/gh-release-header/v0.28.7/step_windows_0.28.7_arm64.zip) #### Signatures and Checksums `step` uses [sigstore/cosign](https://github.com/sigstore/cosign) for signing and verifying release artifacts. Below is an example using `cosign` to verify a release artifact: ``` cosign verify-blob \ --certificate ~/Download/step_darwin_0.28.7_amd64.tar.gz.pem \ --signature ~/Downloads/step_darwin_0.28.7_amd64.tar.gz.sig \ --certificate-identity-regexp "https://github\.com/smallstep/workflows/.*" \ --certificate-oidc-issuer https://token.actions.githubusercontent.com \ ~/Downloads/step_darwin_0.28.7_amd64.tar.gz ``` The `checksums.txt` file (in the 'Assets' section below) contains a checksum for every artifact in the release. #### Changelog - [`6bc838d`](https://github.com/smallstep/cli/commit/6bc838deba11fd4c1ffbcc8aaf19aa650ca77418) Bump to certificates@v0.28.4 ([#&#8203;1454](https://github.com/smallstep/cli/issues/1454)) - [`939805a`](https://github.com/smallstep/cli/commit/939805a52f893eeea919018f0cd02ad6cea3e55e) Fix broken test ([#&#8203;1452](https://github.com/smallstep/cli/issues/1452)) - [`3e9adc2`](https://github.com/smallstep/cli/commit/3e9adc26b1c143d699b1ea0efbe8f0da90621763) Changelog updates ([#&#8203;1448](https://github.com/smallstep/cli/issues/1448)) - [`60a4eef`](https://github.com/smallstep/cli/commit/60a4eef3de63c3238bc61174f84521d6f144f16c) Fix linter warnings ([#&#8203;1450](https://github.com/smallstep/cli/issues/1450)) - [`cb9a523`](https://github.com/smallstep/cli/commit/cb9a523656920d648898c5a6026e0980fbebc26c) Merge pull request [#&#8203;1451](https://github.com/smallstep/cli/issues/1451) from smallstep/carl/readme - [`7725db9`](https://github.com/smallstep/cli/commit/7725db9968a62b4c1058de75418a1c6cbdcb5066) Small tweaks to README - [`632b477`](https://github.com/smallstep/cli/commit/632b477733348073b50efc5c90343974e863c478) Merge pull request [#&#8203;1447](https://github.com/smallstep/cli/issues/1447) from smallstep/mariano/plugin - [`12ad189`](https://github.com/smallstep/cli/commit/12ad1891f0fca4bf00a09d7df0bf60b1fbe8e2c9) Fix step-kms-plugin name - [`de23b94`](https://github.com/smallstep/cli/commit/de23b9419af2dd80b8f935a18af102a4b57f591f) Apply suggestions from code review - [`e18fcdc`](https://github.com/smallstep/cli/commit/e18fcdc5223b767a0cd0bc1bb6001bfbde129155) Add a plugins section to the README - [`b578783`](https://github.com/smallstep/cli/commit/b578783ef408328c994e0f67587210fc72c6c5d7) Merge pull request [#&#8203;1446](https://github.com/smallstep/cli/issues/1446) from smallstep/herman/fix-testscript-runmain-deprecation - [`6a18dda`](https://github.com/smallstep/cli/commit/6a18ddaf61684ca14369ed962aadeccfc6e59665) Fix deprecation of `testscript.RunMain` - [`fdc34f4`](https://github.com/smallstep/cli/commit/fdc34f44331384eae787a1a7263a65de6231273c) Merge pull request [#&#8203;1445](https://github.com/smallstep/cli/issues/1445) from smallstep/dependabot/go\_modules/go.step.sm/crypto-0.67.0 - [`d9ae211`](https://github.com/smallstep/cli/commit/d9ae211cd9a2c382c94ab16a4bc887101998834c) Bump go.step.sm/crypto from 0.66.0 to 0.67.0 - [`f7dac16`](https://github.com/smallstep/cli/commit/f7dac164c018fda0640d2858f2238528db25110e) Bump github.com/rogpeppe/go-internal from 1.13.1 to 1.14.1 - [`ec725b7`](https://github.com/smallstep/cli/commit/ec725b744b80a91a1a5009ef0c78bfc4f7befc31) Merge pull request [#&#8203;1442](https://github.com/smallstep/cli/issues/1442) from smallstep/dependabot/go\_modules/github.com/go-chi/chi/v5-5.2.2 - [`b99c3df`](https://github.com/smallstep/cli/commit/b99c3df7ec4b81abc2eede4f890baa89b1e669f2) Bump github.com/go-chi/chi/v5 from 5.2.1 to 5.2.2 - [`c791bbf`](https://github.com/smallstep/cli/commit/c791bbfc19c9f5cb9fe7494398623ede1557c333) Merge pull request [#&#8203;1426](https://github.com/smallstep/cli/issues/1426) from smallstep/herman/testscript - [`279e638`](https://github.com/smallstep/cli/commit/279e638d2b96f518eb370cc1f82f1f711a6ca73b) Allow changing the app name at compile time through `AppName` - [`1932842`](https://github.com/smallstep/cli/commit/193284278388d3dc819250eede53f781ac2097aa) Add `check_certificate` and `check_jwk_without_password` - [`9cce28a`](https://github.com/smallstep/cli/commit/9cce28a1424d48b45e1e46f083475d60eefe20b5) Merge pull request [#&#8203;1440](https://github.com/smallstep/cli/issues/1440) from smallstep/dependabot/go\_modules/github.com/urfave/cli-1.22.17 - [`c030605`](https://github.com/smallstep/cli/commit/c0306050d3433a2c5432df532edddc653109befb) Bump github.com/urfave/cli from 1.22.16 to 1.22.17 - [`5e20728`](https://github.com/smallstep/cli/commit/5e2072874f2da466d69ba9554524089c1ce1fca4) Merge pull request [#&#8203;1439](https://github.com/smallstep/cli/issues/1439) from smallstep/dependabot/github\_actions/softprops/action-gh-release-2.3.2 - [`7fb48a6`](https://github.com/smallstep/cli/commit/7fb48a694c3c9e37405d245736ebdef7cc8e0fef) Bump softprops/action-gh-release from 2.2.2 to 2.3.2 - [`2944159`](https://github.com/smallstep/cli/commit/2944159d9c2a4f44ad1c43517982985712d362af) Refactor `step crypto jwk create` commands into using `testscript` - [`1a494ce`](https://github.com/smallstep/cli/commit/1a494cea4fc6cde5c2eb63f303c6cd7a80ed5bab) Refactor `step crypto jwt sign` and `step crypto jwt verify` tests - [`298ff27`](https://github.com/smallstep/cli/commit/298ff27d8c204e0ebca62817eb72766da2931091) Refactor `step crypto otp` tests into using `testscript` - [`f641332`](https://github.com/smallstep/cli/commit/f641332c41659cd06673d9612950a81bba4eabb7) Use `--password-file` to provide password to `step crypto keypair` - [`1fc663b`](https://github.com/smallstep/cli/commit/1fc663b97a5ab3d3d5d09f3083cb37a19c87ff15) Refactor `step crypto keypair` tests to use `testscript` - [`825b161`](https://github.com/smallstep/cli/commit/825b1617e3b34ac7ea8b410c1259bf939cb0c0b1) Replace several old integration style tests with `testscript` tests - [`f338d80`](https://github.com/smallstep/cli/commit/f338d80d64888364c9988503930da011786c4812) Refactor CLI to make it testable using `testscript` - [`a4a846a`](https://github.com/smallstep/cli/commit/a4a846a327b5e7e7f1b37d9591908ec28449faea) Merge pull request [#&#8203;1436](https://github.com/smallstep/cli/issues/1436) from smallstep/dependabot/go\_modules/golang.org/x/crypto-0.39.0 - [`f8c1eaf`](https://github.com/smallstep/cli/commit/f8c1eaf36f689f4f219d01e9065bbdc402c00dbd) Ignore insecure `ssh.KeyAlgoDSA` usages using `nolint` - [`edca39f`](https://github.com/smallstep/cli/commit/edca39fb963678923c09f72b1e50847a054c8d37) Bump golang.org/x/crypto from 0.38.0 to 0.39.0 #### Thanks! Those were the changes on v0.28.7! Come join us on [Discord](https://discord.gg/X2RKGwEbV9) to ask questions, chat about PKI, or get a sneak peek at the freshest PKI memes. </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MC4zNy4xIiwidXBkYXRlZEluVmVyIjoiNDEuMzIuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiZGVwZW5kZW5jaWVzIl19-->

svc-renovate-bot added the

dependencies

label 2025-07-14 12:30:45 +00:00

svc-renovate-bot added 1 commit 2025-07-14 12:30:45 +00:00

chore(deps): update dependency smallstep/cli to v0.28.7 f769280fc8

GregoryDosh merged commit 09fc11f9f9 into main 2025-07-17 12:20:00 +00:00

GregoryDosh deleted branch renovate/smallstep-cli-0.x 2025-07-17 12:20:00 +00:00

GregoryDosh referenced this pull request from a commit 2025-07-17 12:20:01 +00:00

Merge pull request 'chore(deps): update dependency smallstep/cli to v0.28.7' (#40) from renovate/smallstep-cli-0.x into main

svc-renovate-bot referenced this pull request from homelab/image-renovate 2025-07-17 12:31:30 +00:00

chore(deps): update https://git.auengun.net/homelab/action-common-setup action to v1.3.6 #816

svc-renovate-bot referenced this pull request from homelab/image-forgejo-runner 2025-07-17 12:37:18 +00:00

chore(deps): update https://git.auengun.net/homelab/action-common-setup action to v1.3.6 #272

svc-renovate-bot referenced this pull request from homelab/host-git 2025-07-17 12:38:08 +00:00

chore(deps): update https://git.auengun.net/homelab/action-common-setup action to v1.3.6 #227

svc-renovate-bot referenced this pull request from homelab/bin-caddy 2025-07-17 12:42:47 +00:00

chore(deps): update https://git.auengun.net/homelab/action-common-setup action to v1.3.6 #31

svc-renovate-bot referenced this pull request from GregoryDosh/automidically 2025-07-17 13:21:56 +00:00

chore(deps): update https://git.auengun.net/homelab/action-common-setup action to v1.3.6 #54

svc-renovate-bot referenced this pull request from GregoryDosh/pam_ussh 2025-07-17 13:23:23 +00:00

chore(deps): update https://git.auengun.net/homelab/action-common-setup action to v1.3.6 #46

svc-renovate-bot referenced this pull request from renovate-config/renovate-config 2025-07-17 13:23:44 +00:00

chore(deps): update https://git.auengun.net/homelab/action-common-setup action to v1.3.6 #471

svc-renovate-bot referenced this pull request from homelab/host-forgejo-runner 2025-07-18 00:10:23 +00:00

chore(deps): update https://git.auengun.net/homelab/action-common-setup action to v1.3.6 #373

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

  

action

Forgejo Action

  

automerge

  

dependencies

  

docker

  

pin-digest

  

skip-ci

No labels

action

automerge

dependencies

docker

pin-digest

skip-ci

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

homelab/action-common-setup!40

No description provided.