Herman Slatman
1bf3d3bd69
Merge pull request #1409 from smallstep/herman/goreleaser-improvements
...
Use `envOrDefault` for `GPG_PRIVATE_KEY_FILE` environment variable
2025-04-17 17:37:55 +02:00
step-ci
4688e729ad
Merge pull request #1412 from smallstep/dependabot/go_modules/golang.org/x/net-0.38.0
...
Bump golang.org/x/net from 0.37.0 to 0.38.0
2025-04-16 22:50:26 -07:00
dependabot[bot]
8b9d442808
Bump golang.org/x/net from 0.37.0 to 0.38.0
...
Bumps [golang.org/x/net](https://github.com/golang/net ) from 0.37.0 to 0.38.0.
- [Commits](https://github.com/golang/net/compare/v0.37.0...v0.38.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/net
dependency-version: 0.38.0
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-04-16 23:28:13 +00:00
Herman Slatman
c60d625eda
Use envOrDefault
for GPG_PRIVATE_KEY_FILE
environment variable
...
By using `envOrDefault` an issue is prevented in evaluating the
template before a release is created. By setting the default value
to `ENV_VAR_GPG_PRIVATE_KEY_FILE_NOT_SET`, this value is then shown
in the error message at signing time.
The reason for changing this is so that it becomes possible to
create local, unsigned releases when creating a release as follows:
`goreleaser release --snapshot --clean --skip sign,after`
2025-04-16 13:18:22 +02:00
Herman Slatman
c4a49973ff
Merge pull request #1408 from smallstep/herman/goreleaser-improvements
...
Improve local GoReleaser build process and development docs
2025-04-16 11:56:56 +02:00
Herman Slatman
5d86f91a2d
Remove goreleaser-local
target in lieu of goreleaser
...
The new target isn't needed, as the existing `goreleaser` target
was created primarily for running it local and manually. There's
no need to push artifacts when running that target.
2025-04-15 16:06:35 +02:00
Herman Slatman
b14f5534e0
Fix tests for token flow having different error message
...
Depending on whether the test is executed in CI/VSCode vs. running
them locally with `make test`, the resulting error message was
different for the `multiple-select-ui` and `ignore-provisioner-flag`
test cases. For now we just test for an error, but it would be
nice to refactor a bit and trigger specific error cases in the
future.
2025-04-15 14:59:23 +02:00
Herman Slatman
65cf93ec88
Replace list of linters with link to current golangci-lint
config
2025-04-15 12:59:36 +02:00
Herman Slatman
832bd0699b
Update contribution and local development guides
2025-04-15 12:47:52 +02:00
Herman Slatman
9d7ece2157
Set HOSTARCH
for download URL for AMD64
properly
...
See https://github.com/smallstep/cli/issues/1403 .
Fixes #1403
2025-04-15 12:21:37 +02:00
Herman Slatman
b42bf1424a
Fix archives.format_overrides.format
deprecation
...
See https://goreleaser.com/deprecations#archivesformat_overridesformat
for more info
Also fix error in Makefile documentation for the GORELEASER_SKIP
variable.
2025-04-14 14:15:30 +02:00
Herman Slatman
739e48d6a6
Fix archives.builds
deprecation
...
See https://goreleaser.com/deprecations#archivesbuilds for more info
2025-04-14 14:05:36 +02:00
Herman Slatman
13cad74939
Fix nfpms.builds
deprecation
...
See https://goreleaser.com/deprecations#nfpmsbuilds for more info
2025-04-14 14:04:21 +02:00
Herman Slatman
89e2bf53d0
Change GoReleaser main
entrypoint so that git info gets embedded
2025-04-14 14:02:41 +02:00
Herman Slatman
6340fbf9b2
Add support for local GoReleaser builds with goreleaser-local
target
...
The new `goreleaser-local` target allows building CLI releases that
are very similar to the ones that we release as part of our GitHub
Actions release process. The target skips the hooks that trigger
binaries to be pushed to GCP, allowing the release process to happen
locally. Otherwise it's the same as the existing `goreleaser` target,
which is intended for local snapshot builds of the CLI binary.
This PR also allows the GoReleaser process to be performed with
either its Pro or OSS version.
2025-04-14 13:58:03 +02:00
step-ci
00cb2f6ae1
Merge pull request #1406 from smallstep/dependabot/go_modules/golang.org/x/crypto-0.37.0
...
Bump golang.org/x/crypto from 0.36.0 to 0.37.0
2025-04-07 13:36:53 -07:00
dependabot[bot]
2a2f4dac53
Bump golang.org/x/crypto from 0.36.0 to 0.37.0
...
Bumps [golang.org/x/crypto](https://github.com/golang/crypto ) from 0.36.0 to 0.37.0.
- [Commits](https://github.com/golang/crypto/compare/v0.36.0...v0.37.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/crypto
dependency-version: 0.37.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-04-07 20:34:09 +00:00
step-ci
e97d7323f6
Merge pull request #1407 from smallstep/dependabot/go_modules/golang.org/x/term-0.31.0
...
Bump golang.org/x/term from 0.30.0 to 0.31.0
2025-04-07 13:32:57 -07:00
dependabot[bot]
02e513d4c3
Bump golang.org/x/term from 0.30.0 to 0.31.0
...
Bumps [golang.org/x/term](https://github.com/golang/term ) from 0.30.0 to 0.31.0.
- [Commits](https://github.com/golang/term/compare/v0.30.0...v0.31.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/term
dependency-version: 0.31.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-04-07 20:31:03 +00:00
step-ci
bc9f2c6c66
Merge pull request #1405 from smallstep/dependabot/go_modules/golang.org/x/sys-0.32.0
...
Bump golang.org/x/sys from 0.31.0 to 0.32.0
2025-04-07 13:29:54 -07:00
dependabot[bot]
cc8a0543de
Bump golang.org/x/sys from 0.31.0 to 0.32.0
...
Bumps [golang.org/x/sys](https://github.com/golang/sys ) from 0.31.0 to 0.32.0.
- [Commits](https://github.com/golang/sys/compare/v0.31.0...v0.32.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/sys
dependency-version: 0.32.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-04-07 17:19:49 +00:00
step-ci
bfab7772bb
Merge pull request #1400 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.60.0
...
Bump go.step.sm/crypto from 0.59.1 to 0.60.0
2025-04-01 01:46:10 -07:00
Herman Slatman
9445725dbd
Remove toolchain
2025-04-01 10:39:03 +02:00
step-ci
d5670abe04
Merge pull request #1401 from smallstep/dependabot/go_modules/github.com/fxamacker/cbor/v2-2.8.0
...
Bump github.com/fxamacker/cbor/v2 from 2.7.0 to 2.8.0
2025-03-31 10:25:49 -07:00
Herman Slatman
d1277406af
Remove toolchain
and use Go 1.23.7
2025-03-31 19:19:04 +02:00
dependabot[bot]
e5b312d41b
Bump github.com/fxamacker/cbor/v2 from 2.7.0 to 2.8.0
...
Bumps [github.com/fxamacker/cbor/v2](https://github.com/fxamacker/cbor ) from 2.7.0 to 2.8.0.
- [Release notes](https://github.com/fxamacker/cbor/releases )
- [Commits](https://github.com/fxamacker/cbor/compare/v2.7.0...v2.8.0 )
---
updated-dependencies:
- dependency-name: github.com/fxamacker/cbor/v2
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-03-31 16:38:11 +00:00
dependabot[bot]
bca38e687f
Bump go.step.sm/crypto from 0.59.1 to 0.60.0
...
Bumps [go.step.sm/crypto](https://github.com/smallstep/crypto ) from 0.59.1 to 0.60.0.
- [Release notes](https://github.com/smallstep/crypto/releases )
- [Commits](https://github.com/smallstep/crypto/compare/v0.59.1...v0.60.0 )
---
updated-dependencies:
- dependency-name: go.step.sm/crypto
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-03-31 16:38:01 +00:00
Herman Slatman
f1aadbbcaa
Merge pull request #1391 from smallstep/herman/policy-scep-prompt-fixes
...
Fix some provisioner and policy prompt issues
2025-03-28 19:11:23 +01:00
Herman Slatman
1156e4475b
Use existing provisioner flag instead of redefining one
2025-03-28 19:06:14 +01:00
Herman Slatman
c153ef3e75
Simplify ingoring usage of provisioner flag when managing policies
2025-03-27 21:56:54 +01:00
Herman Slatman
064866f86c
Refactor ignoring of provisioner flag to not rely on package globals
2025-03-27 19:50:31 +01:00
Herman Slatman
9e636181c4
Rename some usages of "issuer" to "provisionerName"
...
Long ago the "issuer" flag was used to denote what we not call
provisioners. There were still some uses of `issuer` in the code,
which have now been renamed to reflect their current usage. Only
when the actual token is going to be signed, will it be called
an `issuer` again.
2025-03-27 19:50:31 +01:00
Herman Slatman
1cec31e5b4
Fix some provisioner prompt issues related to SCEP and policies
...
This PR fixes the following issues:
- SCEP provisioners not detected in admin token flows
- Invalid provisioner selection logic when managing provisioner policies
- Unexpected error messages showing "issuer" instead or "provisioner" flag
2025-03-27 19:50:30 +01:00
step-ci
2122975d75
Merge pull request #1393 from smallstep/dependabot/github_actions/actions/setup-go-5.4.0
...
Bump actions/setup-go from 5.3.0 to 5.4.0
2025-03-24 16:22:56 -07:00
dependabot[bot]
c4aa2936e2
Bump actions/setup-go from 5.3.0 to 5.4.0
...
Bumps [actions/setup-go](https://github.com/actions/setup-go ) from 5.3.0 to 5.4.0.
- [Release notes](https://github.com/actions/setup-go/releases )
- [Commits](f111f3307d...0aaccfd150
)
---
updated-dependencies:
- dependency-name: actions/setup-go
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-03-24 23:03:39 +00:00
step-ci
f2ec3cb293
Merge pull request #1396 from smallstep/dependabot/go_modules/github.com/ccoveille/go-safecast-1.6.1
...
Bump github.com/ccoveille/go-safecast from 1.6.0 to 1.6.1
2025-03-24 16:02:41 -07:00
step-ci
38c7400492
Merge pull request #1395 from smallstep/dependabot/go_modules/google.golang.org/protobuf-1.36.6
...
Bump google.golang.org/protobuf from 1.36.5 to 1.36.6
2025-03-24 16:02:10 -07:00
step-ci
c17bb44729
Merge pull request #1394 from smallstep/dependabot/github_actions/webfactory/ssh-agent-0.9.1
...
Bump webfactory/ssh-agent from 0.9.0 to 0.9.1
2025-03-24 16:01:43 -07:00
dependabot[bot]
bf45851f4b
Bump github.com/ccoveille/go-safecast from 1.6.0 to 1.6.1
...
Bumps [github.com/ccoveille/go-safecast](https://github.com/ccoveille/go-safecast ) from 1.6.0 to 1.6.1.
- [Release notes](https://github.com/ccoveille/go-safecast/releases )
- [Commits](https://github.com/ccoveille/go-safecast/compare/v1.6.0...v1.6.1 )
---
updated-dependencies:
- dependency-name: github.com/ccoveille/go-safecast
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-03-24 18:12:30 +00:00
dependabot[bot]
a953d2e74b
Bump google.golang.org/protobuf from 1.36.5 to 1.36.6
...
Bumps google.golang.org/protobuf from 1.36.5 to 1.36.6.
---
updated-dependencies:
- dependency-name: google.golang.org/protobuf
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-03-24 18:11:48 +00:00
dependabot[bot]
f5c2cd69e3
Bump webfactory/ssh-agent from 0.9.0 to 0.9.1
...
Bumps [webfactory/ssh-agent](https://github.com/webfactory/ssh-agent ) from 0.9.0 to 0.9.1.
- [Release notes](https://github.com/webfactory/ssh-agent/releases )
- [Changelog](https://github.com/webfactory/ssh-agent/blob/master/CHANGELOG.md )
- [Commits](dc588b651f...a6f90b1f12
)
---
updated-dependencies:
- dependency-name: webfactory/ssh-agent
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-03-24 17:28:30 +00:00
step-ci
130fa5692d
Merge pull request #1392 from smallstep/dependabot/go_modules/github.com/golang-jwt/jwt/v5-5.2.2
...
Bump github.com/golang-jwt/jwt/v5 from 5.2.1 to 5.2.2
2025-03-24 05:17:45 -07:00
dependabot[bot]
73feab9d1c
Bump github.com/golang-jwt/jwt/v5 from 5.2.1 to 5.2.2
...
Bumps [github.com/golang-jwt/jwt/v5](https://github.com/golang-jwt/jwt ) from 5.2.1 to 5.2.2.
- [Release notes](https://github.com/golang-jwt/jwt/releases )
- [Changelog](https://github.com/golang-jwt/jwt/blob/main/VERSION_HISTORY.md )
- [Commits](https://github.com/golang-jwt/jwt/compare/v5.2.1...v5.2.2 )
---
updated-dependencies:
- dependency-name: github.com/golang-jwt/jwt/v5
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-03-21 22:12:10 +00:00
Max
ea5f95efa7
Bump certificates to 0.28.3 ( #1390 )
v0.28.6
2025-03-17 19:20:44 -07:00
Max
2e5b5c918d
Add changelog for 0.28.6 ( #1389 )
2025-03-17 18:03:46 -07:00
step-ci
20a81b4b8a
Merge pull request #1387 from smallstep/dependabot/go_modules/golang.org/x/net-0.36.0
...
Bump golang.org/x/net from 0.35.0 to 0.36.0
2025-03-17 16:12:15 -07:00
dependabot[bot]
fe48303d26
Bump golang.org/x/net from 0.35.0 to 0.36.0
...
Bumps [golang.org/x/net](https://github.com/golang/net ) from 0.35.0 to 0.36.0.
- [Commits](https://github.com/golang/net/compare/v0.35.0...v0.36.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/net
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-03-13 02:06:26 +00:00
step-ci
af579f3895
Merge pull request #1384 from smallstep/dependabot/go_modules/golang.org/x/crypto-0.36.0
...
Bump golang.org/x/crypto from 0.35.0 to 0.36.0
2025-03-10 11:04:41 -07:00
dependabot[bot]
533f832ac7
Bump golang.org/x/crypto from 0.35.0 to 0.36.0
...
Bumps [golang.org/x/crypto](https://github.com/golang/crypto ) from 0.35.0 to 0.36.0.
- [Commits](https://github.com/golang/crypto/compare/v0.35.0...v0.36.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/crypto
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2025-03-10 18:01:45 +00:00
step-ci
26abca7e5b
Merge pull request #1386 from smallstep/dependabot/go_modules/golang.org/x/term-0.30.0
...
Bump golang.org/x/term from 0.29.0 to 0.30.0
2025-03-10 11:00:29 -07:00