chore(deps): update dependency smallstep/cli to v0.28.5 #65

svc-renovate-bot · 2025-03-05T02:37:09Z

svc-renovate-bot commented

2025-03-05 02:37:09 +00:00

This PR contains the following updates:

Package	Update	Change
smallstep/cli	patch	`0.28.3` -> `0.28.5`

Release Notes

smallstep/cli (smallstep/cli)

`v0.28.5`: Step CLI v0.28.5 (25-03-05)

Compare Source

Official Release Artifacts

Below are the most popular artifacts for step on each platform.

For packaged versions (Homebrew, Scoop, etc.), see our installation docs.

Linux

macOS Darwin

📦 step_darwin_0.28.5_amd64.tar.gz
📦 step_darwin_0.28.5_arm64.tar.gz

Windows

📦 step_windows_0.28.5_amd64.zip
📦 step_windows_0.28.5_arm64.zip

Signatures and Checksums

step uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

cosign verify-blob \
  --certificate ~/Download/step_darwin_0.28.5_amd64.tar.gz.pem \
  --signature ~/Downloads/step_darwin_0.28.5_amd64.tar.gz.sig \
  --certificate-identity-regexp "https://github\.com/smallstep/workflows/.*" \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  ~/Downloads/step_darwin_0.28.5_amd64.tar.gz

The checksums.txt file (in the 'Assets' section below) contains a checksum for every artifact in the release.

Changelog

144d46a Merge pull request #1382 from smallstep/herman/crypto-v0.59.1
9006f26 Merge pull request #1383 from smallstep/herman/fix-token-user-braces
565dcf0 Change .Token.user.field to not use curly braces
015bf37 Upgrade go.step.sm/crypto to v0.59.1

Thanks!

Those were the changes on v0.28.5!

Come join us on Discord to ask questions, chat about PKI, or get a sneak peek at the freshest PKI memes.

`v0.28.4`

Compare Source

Changelog

Replace jq --argfile with --slurpfile by @hslatman in https://github.com/smallstep/cli/pull/1366
Fix cast package tests for linux/arm32 by @hslatman in https://github.com/smallstep/cli/pull/1368
Bump github.com/google/go-cmp from 0.6.0 to 0.7.0 by @dependabot in https://github.com/smallstep/cli/pull/1370
Bump go.step.sm/crypto from 0.57.1 to 0.58.0 by @dependabot in https://github.com/smallstep/cli/pull/1372
Bump golang.org/x/crypto from 0.33.0 to 0.35.0 by @dependabot in https://github.com/smallstep/cli/pull/1373
Bump github.com/smallstep/cli-utils from 0.10.0 to 0.11.0 by @dependabot in https://github.com/smallstep/cli/pull/1369
Bump github.com/go-jose/go-jose/v4 from 4.0.2 to 4.0.5 by @dependabot in https://github.com/smallstep/cli/pull/1374
Skip opening the default browser if STEP_OPEN_BROWSER=false by @jdoss in https://github.com/smallstep/cli/pull/1361
Bump github.com/go-jose/go-jose/v3 from 3.0.3 to 3.0.4 by @dependabot in https://github.com/smallstep/cli/pull/1376
Bump github.com/smallstep/cli-utils from 0.11.0 to 0.12.1 by @dependabot in https://github.com/smallstep/cli/pull/1379
Bump go.step.sm/crypto from 0.58.0 to 0.59.0 by @dependabot in https://github.com/smallstep/cli/pull/1378
command/ca/token: support custom "user" claim by @fuhry in https://github.com/smallstep/cli/pull/1375
Allow a few global defaults to be pulled from the CA by @dopey in https://github.com/smallstep/cli/pull/1377
Update changelog for v0.28.4 by @dopey in https://github.com/smallstep/cli/pull/1380

New Contributors

@fuhry made their first contribution in https://github.com/smallstep/cli/pull/1375

Full Changelog: https://github.com/smallstep/cli/compare/v0.28.3...v0.28.4

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [smallstep/cli](https://github.com/smallstep/cli) | patch | `0.28.3` -> `0.28.5` | --- ### Release Notes <details> <summary>smallstep/cli (smallstep/cli)</summary> ### [`v0.28.5`](https://github.com/smallstep/cli/releases/tag/v0.28.5): Step CLI v0.28.5 (25-03-05) [Compare Source](https://github.com/smallstep/cli/compare/v0.28.4...v0.28.5) #### Official Release Artifacts Below are the most popular artifacts for `step` on each platform. For packaged versions (Homebrew, Scoop, etc.), see our [installation docs](https://smallstep.com/docs/step-cli/installation). ##### Linux - 📦 [step_linux\_0.28.5\_amd64.tar.gz](https://dl.smallstep.com/gh-release/cli/gh-release-header/v0.28.5/step_linux\_0.28.5\_amd64.tar.gz) - 📦 [step_linux\_0.28.5\_arm64.tar.gz](https://dl.smallstep.com/gh-release/cli/gh-release-header/v0.28.5/step_linux\_0.28.5\_arm64.tar.gz) - 📦 [step_linux\_0.28.5\_armv7.tar.gz](https://dl.smallstep.com/gh-release/cli/gh-release-header/v0.28.5/step_linux\_0.28.5\_armv7.tar.gz) - 📦 [step-cli\_0.28.5-1\_amd64.deb](https://dl.smallstep.com/gh-release/cli/gh-release-header/v0.28.5/step-cli\_0.28.5-1\_amd64.deb) - 📦 [step-cli-0.28.5-1.x86\_64.rpm](https://dl.smallstep.com/gh-release/cli/gh-release-header/v0.28.5/step-cli-0.28.5-1.x86\_64.rpm) - 📦 [step-cli\_0.28.5-1\_arm64.deb](https://dl.smallstep.com/gh-release/cli/gh-release-header/v0.28.5/step-cli\_0.28.5-1\_arm64.deb) - 📦 [step-cli-0.28.5-1.aarch64.rpm](https://dl.smallstep.com/gh-release/cli/gh-release-header/v0.28.5/step-cli-0.28.5-1.aarch64.rpm) - see `Assets` below for more builds ##### macOS Darwin - 📦 [step_darwin\_0.28.5\_amd64.tar.gz](https://dl.smallstep.com/gh-release/cli/gh-release-header/v0.28.5/step_darwin\_0.28.5\_amd64.tar.gz) - 📦 [step_darwin\_0.28.5\_arm64.tar.gz](https://dl.smallstep.com/gh-release/cli/gh-release-header/v0.28.5/step_darwin\_0.28.5\_arm64.tar.gz) ##### Windows - 📦 [step_windows\_0.28.5\_amd64.zip](https://dl.smallstep.com/gh-release/cli/gh-release-header/v0.28.5/step_windows\_0.28.5\_amd64.zip) - 📦 [step_windows\_0.28.5\_arm64.zip](https://dl.smallstep.com/gh-release/cli/gh-release-header/v0.28.5/step_windows\_0.28.5\_arm64.zip) #### Signatures and Checksums `step` uses [sigstore/cosign](https://github.com/sigstore/cosign) for signing and verifying release artifacts. Below is an example using `cosign` to verify a release artifact: cosign verify-blob \ --certificate ~/Download/step_darwin_0.28.5_amd64.tar.gz.pem \ --signature ~/Downloads/step_darwin_0.28.5_amd64.tar.gz.sig \ --certificate-identity-regexp "https://github\.com/smallstep/workflows/.*" \ --certificate-oidc-issuer https://token.actions.githubusercontent.com \ ~/Downloads/step_darwin_0.28.5_amd64.tar.gz The `checksums.txt` file (in the 'Assets' section below) contains a checksum for every artifact in the release. #### Changelog - [`144d46a`](https://github.com/smallstep/cli/commit/144d46a02b260a212cdf29dee4cab25630da8901) Merge pull request [#1382](https://github.com/smallstep/cli/issues/1382) from smallstep/herman/crypto-v0.59.1 - [`9006f26`](https://github.com/smallstep/cli/commit/9006f26116d89c221073ac4b8e01e6d2806406c2) Merge pull request [#1383](https://github.com/smallstep/cli/issues/1383) from smallstep/herman/fix-token-user-braces - [`565dcf0`](https://github.com/smallstep/cli/commit/565dcf0ebbd2cca91fbed3acfed21be58875f610) Change `.Token.user.field` to not use curly braces - [`015bf37`](https://github.com/smallstep/cli/commit/015bf375c53e1ac5c504a0d99d63428aa1fbdec5) Upgrade `go.step.sm/crypto` to `v0.59.1` #### Thanks! Those were the changes on v0.28.5! Come join us on [Discord](https://discord.gg/X2RKGwEbV9) to ask questions, chat about PKI, or get a sneak peek at the freshest PKI memes. ### [`v0.28.4`](https://github.com/smallstep/cli/releases/tag/v0.28.4) [Compare Source](https://github.com/smallstep/cli/compare/v0.28.3...v0.28.4) #### Changelog - Replace `jq` `--argfile` with `--slurpfile` by [@hslatman](https://github.com/hslatman) in https://github.com/smallstep/cli/pull/1366 - Fix `cast` package tests for `linux/arm32` by [@hslatman](https://github.com/hslatman) in https://github.com/smallstep/cli/pull/1368 - Bump github.com/google/go-cmp from 0.6.0 to 0.7.0 by [@dependabot](https://github.com/dependabot) in https://github.com/smallstep/cli/pull/1370 - Bump go.step.sm/crypto from 0.57.1 to 0.58.0 by [@dependabot](https://github.com/dependabot) in https://github.com/smallstep/cli/pull/1372 - Bump golang.org/x/crypto from 0.33.0 to 0.35.0 by [@dependabot](https://github.com/dependabot) in https://github.com/smallstep/cli/pull/1373 - Bump github.com/smallstep/cli-utils from 0.10.0 to 0.11.0 by [@dependabot](https://github.com/dependabot) in https://github.com/smallstep/cli/pull/1369 - Bump github.com/go-jose/go-jose/v4 from 4.0.2 to 4.0.5 by [@dependabot](https://github.com/dependabot) in https://github.com/smallstep/cli/pull/1374 - Skip opening the default browser if STEP_OPEN_BROWSER=false by [@jdoss](https://github.com/jdoss) in https://github.com/smallstep/cli/pull/1361 - Bump github.com/go-jose/go-jose/v3 from 3.0.3 to 3.0.4 by [@dependabot](https://github.com/dependabot) in https://github.com/smallstep/cli/pull/1376 - Bump github.com/smallstep/cli-utils from 0.11.0 to 0.12.1 by [@dependabot](https://github.com/dependabot) in https://github.com/smallstep/cli/pull/1379 - Bump go.step.sm/crypto from 0.58.0 to 0.59.0 by [@dependabot](https://github.com/dependabot) in https://github.com/smallstep/cli/pull/1378 - command/ca/token: support custom "user" claim by [@fuhry](https://github.com/fuhry) in https://github.com/smallstep/cli/pull/1375 - Allow a few global defaults to be pulled from the CA by [@dopey](https://github.com/dopey) in https://github.com/smallstep/cli/pull/1377 - Update changelog for v0.28.4 by [@dopey](https://github.com/dopey) in https://github.com/smallstep/cli/pull/1380 #### New Contributors - [@fuhry](https://github.com/fuhry) made their first contribution in https://github.com/smallstep/cli/pull/1375 **Full Changelog**: https://github.com/smallstep/cli/compare/v0.28.3...v0.28.4 </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).

svc-renovate-bot added the

dependencies

label

2025-03-05 02:37:09 +00:00

svc-renovate-bot changed title from ~~chore(deps): update dependency smallstep/cli to v0.28.4~~ to chore(deps): update dependency smallstep/cli to v0.28.5

2025-03-05 12:33:50 +00:00

svc-renovate-bot force-pushed renovate/smallstep-cli-0.x from d5284fbda8 to 4902e93fc9

2025-03-05 12:33:52 +00:00

Compare

GregoryDosh merged commit e1f5d44263 into main

2025-03-05 15:22:49 +00:00

GregoryDosh deleted branch renovate/smallstep-cli-0.x

2025-03-05 15:22:49 +00:00

GregoryDosh referenced this pull request from a commit

2025-03-05 15:22:50 +00:00

Merge pull request 'chore(deps): update dependency smallstep/cli to v0.28.5' (#65) from renovate/smallstep-cli-0.x into main

Sign in to join this conversation.