f1a2c68f43
Merge pull request #1798 from smallstep/herman/fix-instrumented-key-manager
...
Add support for `kmsapi.Decrypter` to instrumented key manager
2 months ago
7df3ad05ed
Merge pull request #1797 from smallstep/mariano/init-scep
...
Allow custom SCEP key manager
2 months ago
4202d6673c
Remove debug statement
2 months ago
d6bbe5b06b
Add support for `kmsapi.Decrypter` to instrumented key manager
2 months ago
721345eea6
Merge pull request #1793 from verytrap/master
...
chore: fix function names in comment
2 months ago
db92404342
chore: fix function names in comment
...
Signed-off-by: verytrap <wangqiuyue@outlook.com>
2 months ago
725a913f66
Allow custom SCEP key manager
...
This commit allows to inject a custom key manger for SCEP.
2 months ago
397877a7b6
Merge pull request #1795 from smallstep/herman/fix-scep-failinfo-oid
...
Prevent exposing any internal details in SCEP failure message
2 months ago
b226b6eb4c
Prevent exposing any internal details in SCEP failure message
...
To be on the safe side, block errors from signing operations from
being returned to the client. We should revisit, and make it return
a more informative error, but with high assurance that no sensitive
information is added to the message.
2 months ago
02956ad0e3
Merge pull request #1794 from smallstep/herman/fix-scep-failinfo-oid
...
Fix the `id-scep-failInfoText` OID
2 months ago
037554e774
Fix the `id-scep-failInfoText` OID
2 months ago
1513152cb2
Merge pull request #1791 from smallstep/dependabot/go_modules/github.com/newrelic/go-agent/v3-3.32.0
...
Bump github.com/newrelic/go-agent/v3 from 3.31.0 to 3.32.0
2 months ago
c9ba31ae61
Bump github.com/newrelic/go-agent/v3 from 3.31.0 to 3.32.0
...
Bumps [github.com/newrelic/go-agent/v3](https://github.com/newrelic/go-agent ) from 3.31.0 to 3.32.0.
- [Release notes](https://github.com/newrelic/go-agent/releases )
- [Changelog](https://github.com/newrelic/go-agent/blob/master/CHANGELOG.md )
- [Commits](https://github.com/newrelic/go-agent/compare/v3.31.0...v3.32.0 )
---
updated-dependencies:
- dependency-name: github.com/newrelic/go-agent/v3
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2 months ago
1f69ff84a1
Merge pull request #1792 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.63.2
...
Bump google.golang.org/grpc from 1.62.1 to 1.63.2
2 months ago
a76f07143b
Bump google.golang.org/grpc from 1.62.1 to 1.63.2
...
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go ) from 1.62.1 to 1.63.2.
- [Release notes](https://github.com/grpc/grpc-go/releases )
- [Commits](https://github.com/grpc/grpc-go/compare/v1.62.1...v1.63.2 )
---
updated-dependencies:
- dependency-name: google.golang.org/grpc
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2 months ago
08ef9fe245
Merge pull request #1789 from smallstep/dependabot/go_modules/golang.org/x/net-0.24.0
...
Bump golang.org/x/net from 0.22.0 to 0.24.0
2 months ago
57d628513b
Bump golang.org/x/net from 0.22.0 to 0.24.0
...
Bumps [golang.org/x/net](https://github.com/golang/net ) from 0.22.0 to 0.24.0.
- [Commits](https://github.com/golang/net/compare/v0.22.0...v0.24.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/net
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2 months ago
d5758ba3a3
Merge pull request #1784 from smallstep/dependabot/go_modules/github.com/newrelic/go-agent/v3-3.31.0
...
Bump github.com/newrelic/go-agent/v3 from 3.30.0 to 3.31.0
2 months ago
166c4968cf
Merge pull request #1785 from smallstep/dependabot/go_modules/google.golang.org/api-0.172.0
...
Bump google.golang.org/api from 0.171.0 to 0.172.0
2 months ago
1be0932a0f
Merge pull request #1786 from smallstep/carl/winget-fix
...
Fix winget release notes URL
2 months ago
f04a5e39c4
Fix winget release URL
2 months ago
d1523c93bc
Bump google.golang.org/api from 0.171.0 to 0.172.0
...
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client ) from 0.171.0 to 0.172.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases )
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md )
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.171.0...v0.172.0 )
---
updated-dependencies:
- dependency-name: google.golang.org/api
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2 months ago
44c48a7494
Bump github.com/newrelic/go-agent/v3 from 3.30.0 to 3.31.0
...
Bumps [github.com/newrelic/go-agent/v3](https://github.com/newrelic/go-agent ) from 3.30.0 to 3.31.0.
- [Release notes](https://github.com/newrelic/go-agent/releases )
- [Changelog](https://github.com/newrelic/go-agent/blob/master/CHANGELOG.md )
- [Commits](https://github.com/newrelic/go-agent/compare/v3.30.0...v3.31.0 )
---
updated-dependencies:
- dependency-name: github.com/newrelic/go-agent/v3
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2 months ago
188e4e3ff3
Add version number to winget branch name ( #1783 )
2 months ago
395a3eeb93
Update go.step.sm/crypto ( #1781 )
2 months ago
4772d7cc28
Merge pull request #1780 from smallstep/herman/update-changelog-20240328
...
Update changelog for `v0.26.0` release
2 months ago
854288a0cb
Update changelog for `v0.26.0` release
2 months ago
4016b69b28
Merge pull request #1776 from smallstep/dependabot/go_modules/github.com/hashicorp/vault/api-1.12.2
...
Bump github.com/hashicorp/vault/api from 1.12.1 to 1.12.2
2 months ago
b5b723e835
Merge pull request #1775 from smallstep/dependabot/go_modules/google.golang.org/api-0.171.0
...
Bump google.golang.org/api from 0.169.0 to 0.171.0
2 months ago
0a6e79a745
Merge pull request #1778 from smallstep/dependabot/github_actions/dependabot/fetch-metadata-2.0.0
...
Bump dependabot/fetch-metadata from 1.6.0 to 2.0.0
2 months ago
9d86361ae3
Bump github.com/hashicorp/vault/api from 1.12.1 to 1.12.2
...
Bumps [github.com/hashicorp/vault/api](https://github.com/hashicorp/vault ) from 1.12.1 to 1.12.2.
- [Release notes](https://github.com/hashicorp/vault/releases )
- [Changelog](https://github.com/hashicorp/vault/blob/main/CHANGELOG.md )
- [Commits](https://github.com/hashicorp/vault/compare/v1.12.1...v1.12.2 )
---
updated-dependencies:
- dependency-name: github.com/hashicorp/vault/api
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2 months ago
7e053437b1
Merge pull request #1774 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.44.1
...
Bump go.step.sm/crypto from 0.43.1 to 0.44.1
2 months ago
014b4ef2c0
Bump dependabot/fetch-metadata from 1.6.0 to 2.0.0
...
Bumps [dependabot/fetch-metadata](https://github.com/dependabot/fetch-metadata ) from 1.6.0 to 2.0.0.
- [Release notes](https://github.com/dependabot/fetch-metadata/releases )
- [Commits](https://github.com/dependabot/fetch-metadata/compare/v1.6.0...v2.0.0 )
---
updated-dependencies:
- dependency-name: dependabot/fetch-metadata
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
2 months ago
21734f7742
Bump google.golang.org/api from 0.169.0 to 0.171.0
...
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client ) from 0.169.0 to 0.171.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases )
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md )
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.169.0...v0.171.0 )
---
updated-dependencies:
- dependency-name: google.golang.org/api
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2 months ago
927cd97bd5
Bump go.step.sm/crypto from 0.43.1 to 0.44.1
...
Bumps [go.step.sm/crypto](https://github.com/smallstep/crypto ) from 0.43.1 to 0.44.1.
- [Release notes](https://github.com/smallstep/crypto/releases )
- [Commits](https://github.com/smallstep/crypto/compare/v0.43.1...v0.44.1 )
---
updated-dependencies:
- dependency-name: go.step.sm/crypto
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2 months ago
2650944d65
Merge pull request #1773 from smallstep/herman/cosign-2.x
...
Use `--yes` to acknowledge user prompts for `cosign` signing
2 months ago
7888d868ba
Use `--yes` to acknowledge user prompts for `cosign` signing
2 months ago
56c4f3bdd5
Merge pull request #1772 from smallstep/jdoss/Enable_tpmkms
...
Enable tpmkms
2 months ago
14c9de2570
Enable tpmkms.
2 months ago
44f44e34e4
Merge pull request #1767 from smallstep/dependabot/go_modules/cloud.google.com/go/longrunning-0.5.6
...
Bump cloud.google.com/go/longrunning from 0.5.5 to 0.5.6
2 months ago
73c827c7fa
Merge pull request #1768 from smallstep/dependabot/go_modules/github.com/hashicorp/vault/api-1.12.1
...
Bump github.com/hashicorp/vault/api from 1.12.0 to 1.12.1
2 months ago
9874214669
Bump cloud.google.com/go/longrunning from 0.5.5 to 0.5.6
...
Bumps [cloud.google.com/go/longrunning](https://github.com/googleapis/google-cloud-go ) from 0.5.5 to 0.5.6.
- [Release notes](https://github.com/googleapis/google-cloud-go/releases )
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md )
- [Commits](https://github.com/googleapis/google-cloud-go/compare/longrunning/v0.5.5...longrunning/v0.5.6 )
---
updated-dependencies:
- dependency-name: cloud.google.com/go/longrunning
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2 months ago
c5a13d86ba
Merge pull request #1766 from smallstep/dependabot/go_modules/golang.org/x/net-0.22.0
...
Bump golang.org/x/net from 0.21.0 to 0.22.0
2 months ago
70085fcfeb
Merge pull request #1769 from smallstep/dependabot/go_modules/cloud.google.com/go/security-1.15.6
...
Bump cloud.google.com/go/security from 1.15.5 to 1.15.6
2 months ago
1a768ad522
Bump cloud.google.com/go/security from 1.15.5 to 1.15.6
...
Bumps [cloud.google.com/go/security](https://github.com/googleapis/google-cloud-go ) from 1.15.5 to 1.15.6.
- [Release notes](https://github.com/googleapis/google-cloud-go/releases )
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md )
- [Commits](https://github.com/googleapis/google-cloud-go/compare/kms/v1.15.5...kms/v1.15.6 )
---
updated-dependencies:
- dependency-name: cloud.google.com/go/security
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2 months ago
4dfade10b8
Bump github.com/hashicorp/vault/api from 1.12.0 to 1.12.1
...
Bumps [github.com/hashicorp/vault/api](https://github.com/hashicorp/vault ) from 1.12.0 to 1.12.1.
- [Release notes](https://github.com/hashicorp/vault/releases )
- [Changelog](https://github.com/hashicorp/vault/blob/main/CHANGELOG.md )
- [Commits](https://github.com/hashicorp/vault/compare/v1.12.0...v1.12.1 )
---
updated-dependencies:
- dependency-name: github.com/hashicorp/vault/api
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2 months ago
9a75f93250
Bump golang.org/x/net from 0.21.0 to 0.22.0
...
Bumps [golang.org/x/net](https://github.com/golang/net ) from 0.21.0 to 0.22.0.
- [Commits](https://github.com/golang/net/compare/v0.21.0...v0.22.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/net
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2 months ago
fe364d5081
Merge pull request #1764 from smallstep/mariano/ra-lifetime
...
Let the CA determine the RA lifetime
3 months ago
0ac9023590
Fix typo in error message and comment
3 months ago
10f6a901ec
Let the CA determine the RA lifetime
...
When the RA mode with StepCAS is used, let the CA decide which lifetime
the RA should get instead of requiring always 24h.
This commit also fixes linter warnings.
Related to #1094
3 months ago
Herman Slatman
Mariano Cano
Mariano Cano
Herman Slatman
verytrap
github-actions[bot]
dependabot[bot]
Carl Tashian
Max
Joe Doss
Joe Doss