1
0
mirror of https://github.com/smallstep/cli.git synced 2025-04-19 10:42:15 +03:00

3685 Commits

Author SHA1 Message Date
Herman Slatman
1bf3d3bd69
Merge pull request #1409 from smallstep/herman/goreleaser-improvements
Use `envOrDefault` for `GPG_PRIVATE_KEY_FILE` environment variable
2025-04-17 17:37:55 +02:00
step-ci
4688e729ad
Merge pull request #1412 from smallstep/dependabot/go_modules/golang.org/x/net-0.38.0
Bump golang.org/x/net from 0.37.0 to 0.38.0
2025-04-16 22:50:26 -07:00
dependabot[bot]
8b9d442808
Bump golang.org/x/net from 0.37.0 to 0.38.0
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.37.0 to 0.38.0.
- [Commits](https://github.com/golang/net/compare/v0.37.0...v0.38.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-version: 0.38.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-04-16 23:28:13 +00:00
Herman Slatman
c60d625eda
Use envOrDefault for GPG_PRIVATE_KEY_FILE environment variable
By using `envOrDefault` an issue is prevented in evaluating the
template before a release is created. By setting the default value
to `ENV_VAR_GPG_PRIVATE_KEY_FILE_NOT_SET`, this value is then shown
in the error message at signing time.

The reason for changing this is so that it becomes possible to
create local, unsigned releases when creating a release as follows:

 `goreleaser release --snapshot --clean --skip sign,after`
2025-04-16 13:18:22 +02:00
Herman Slatman
c4a49973ff
Merge pull request #1408 from smallstep/herman/goreleaser-improvements
Improve local GoReleaser build process and development docs
2025-04-16 11:56:56 +02:00
Herman Slatman
5d86f91a2d
Remove goreleaser-local target in lieu of goreleaser
The new target isn't needed, as the existing `goreleaser` target
was created primarily for running it local and manually. There's
no need to push artifacts when running that target.
2025-04-15 16:06:35 +02:00
Herman Slatman
b14f5534e0
Fix tests for token flow having different error message
Depending on whether the test is executed in CI/VSCode vs. running
them locally with `make test`, the resulting error message was
different for the `multiple-select-ui` and `ignore-provisioner-flag`
test cases. For now we just test for an error, but it would be
nice to refactor a bit and trigger specific error cases in the
future.
2025-04-15 14:59:23 +02:00
Herman Slatman
65cf93ec88
Replace list of linters with link to current golangci-lint config 2025-04-15 12:59:36 +02:00
Herman Slatman
832bd0699b
Update contribution and local development guides 2025-04-15 12:47:52 +02:00
Herman Slatman
9d7ece2157
Set HOSTARCH for download URL for AMD64 properly
See https://github.com/smallstep/cli/issues/1403.

Fixes #1403
2025-04-15 12:21:37 +02:00
Herman Slatman
b42bf1424a
Fix archives.format_overrides.format deprecation
See https://goreleaser.com/deprecations#archivesformat_overridesformat
for more info

Also fix error in Makefile documentation for the GORELEASER_SKIP
variable.
2025-04-14 14:15:30 +02:00
Herman Slatman
739e48d6a6
Fix archives.builds deprecation
See https://goreleaser.com/deprecations#archivesbuilds for more info
2025-04-14 14:05:36 +02:00
Herman Slatman
13cad74939
Fix nfpms.builds deprecation
See https://goreleaser.com/deprecations#nfpmsbuilds for more info
2025-04-14 14:04:21 +02:00
Herman Slatman
89e2bf53d0
Change GoReleaser main entrypoint so that git info gets embedded 2025-04-14 14:02:41 +02:00
Herman Slatman
6340fbf9b2
Add support for local GoReleaser builds with goreleaser-local target
The new `goreleaser-local` target allows building CLI releases that
are very similar to the ones that we release as part of our GitHub
Actions release process. The target skips the hooks that trigger
binaries to be pushed to GCP, allowing the release process to happen
locally. Otherwise it's the same as the existing `goreleaser` target,
which is intended for local snapshot builds of the CLI binary.

This PR also allows the GoReleaser process to be performed with
either its Pro or OSS version.
2025-04-14 13:58:03 +02:00
step-ci
00cb2f6ae1
Merge pull request #1406 from smallstep/dependabot/go_modules/golang.org/x/crypto-0.37.0
Bump golang.org/x/crypto from 0.36.0 to 0.37.0
2025-04-07 13:36:53 -07:00
dependabot[bot]
2a2f4dac53
Bump golang.org/x/crypto from 0.36.0 to 0.37.0
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.36.0 to 0.37.0.
- [Commits](https://github.com/golang/crypto/compare/v0.36.0...v0.37.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-version: 0.37.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-04-07 20:34:09 +00:00
step-ci
e97d7323f6
Merge pull request #1407 from smallstep/dependabot/go_modules/golang.org/x/term-0.31.0
Bump golang.org/x/term from 0.30.0 to 0.31.0
2025-04-07 13:32:57 -07:00
dependabot[bot]
02e513d4c3
Bump golang.org/x/term from 0.30.0 to 0.31.0
Bumps [golang.org/x/term](https://github.com/golang/term) from 0.30.0 to 0.31.0.
- [Commits](https://github.com/golang/term/compare/v0.30.0...v0.31.0)

---
updated-dependencies:
- dependency-name: golang.org/x/term
  dependency-version: 0.31.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-04-07 20:31:03 +00:00
step-ci
bc9f2c6c66
Merge pull request #1405 from smallstep/dependabot/go_modules/golang.org/x/sys-0.32.0
Bump golang.org/x/sys from 0.31.0 to 0.32.0
2025-04-07 13:29:54 -07:00
dependabot[bot]
cc8a0543de
Bump golang.org/x/sys from 0.31.0 to 0.32.0
Bumps [golang.org/x/sys](https://github.com/golang/sys) from 0.31.0 to 0.32.0.
- [Commits](https://github.com/golang/sys/compare/v0.31.0...v0.32.0)

---
updated-dependencies:
- dependency-name: golang.org/x/sys
  dependency-version: 0.32.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-04-07 17:19:49 +00:00
step-ci
bfab7772bb
Merge pull request #1400 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.60.0
Bump go.step.sm/crypto from 0.59.1 to 0.60.0
2025-04-01 01:46:10 -07:00
Herman Slatman
9445725dbd
Remove toolchain 2025-04-01 10:39:03 +02:00
step-ci
d5670abe04
Merge pull request #1401 from smallstep/dependabot/go_modules/github.com/fxamacker/cbor/v2-2.8.0
Bump github.com/fxamacker/cbor/v2 from 2.7.0 to 2.8.0
2025-03-31 10:25:49 -07:00
Herman Slatman
d1277406af
Remove toolchain and use Go 1.23.7 2025-03-31 19:19:04 +02:00
dependabot[bot]
e5b312d41b
Bump github.com/fxamacker/cbor/v2 from 2.7.0 to 2.8.0
Bumps [github.com/fxamacker/cbor/v2](https://github.com/fxamacker/cbor) from 2.7.0 to 2.8.0.
- [Release notes](https://github.com/fxamacker/cbor/releases)
- [Commits](https://github.com/fxamacker/cbor/compare/v2.7.0...v2.8.0)

---
updated-dependencies:
- dependency-name: github.com/fxamacker/cbor/v2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-03-31 16:38:11 +00:00
dependabot[bot]
bca38e687f
Bump go.step.sm/crypto from 0.59.1 to 0.60.0
Bumps [go.step.sm/crypto](https://github.com/smallstep/crypto) from 0.59.1 to 0.60.0.
- [Release notes](https://github.com/smallstep/crypto/releases)
- [Commits](https://github.com/smallstep/crypto/compare/v0.59.1...v0.60.0)

---
updated-dependencies:
- dependency-name: go.step.sm/crypto
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-03-31 16:38:01 +00:00
Herman Slatman
f1aadbbcaa
Merge pull request #1391 from smallstep/herman/policy-scep-prompt-fixes
Fix some provisioner and policy prompt issues
2025-03-28 19:11:23 +01:00
Herman Slatman
1156e4475b
Use existing provisioner flag instead of redefining one 2025-03-28 19:06:14 +01:00
Herman Slatman
c153ef3e75
Simplify ingoring usage of provisioner flag when managing policies 2025-03-27 21:56:54 +01:00
Herman Slatman
064866f86c
Refactor ignoring of provisioner flag to not rely on package globals 2025-03-27 19:50:31 +01:00
Herman Slatman
9e636181c4
Rename some usages of "issuer" to "provisionerName"
Long ago the "issuer" flag was used to denote what we not call
provisioners. There were still some uses of `issuer` in the code,
which have now been renamed to reflect their current usage. Only
when the actual token is going to be signed, will it be called
an `issuer` again.
2025-03-27 19:50:31 +01:00
Herman Slatman
1cec31e5b4
Fix some provisioner prompt issues related to SCEP and policies
This PR fixes the following issues:

 - SCEP provisioners not detected in admin token flows
 - Invalid provisioner selection logic when managing provisioner policies
 - Unexpected error messages showing "issuer" instead or "provisioner" flag
2025-03-27 19:50:30 +01:00
step-ci
2122975d75
Merge pull request #1393 from smallstep/dependabot/github_actions/actions/setup-go-5.4.0
Bump actions/setup-go from 5.3.0 to 5.4.0
2025-03-24 16:22:56 -07:00
dependabot[bot]
c4aa2936e2
Bump actions/setup-go from 5.3.0 to 5.4.0
Bumps [actions/setup-go](https://github.com/actions/setup-go) from 5.3.0 to 5.4.0.
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](f111f3307d...0aaccfd150)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-03-24 23:03:39 +00:00
step-ci
f2ec3cb293
Merge pull request #1396 from smallstep/dependabot/go_modules/github.com/ccoveille/go-safecast-1.6.1
Bump github.com/ccoveille/go-safecast from 1.6.0 to 1.6.1
2025-03-24 16:02:41 -07:00
step-ci
38c7400492
Merge pull request #1395 from smallstep/dependabot/go_modules/google.golang.org/protobuf-1.36.6
Bump google.golang.org/protobuf from 1.36.5 to 1.36.6
2025-03-24 16:02:10 -07:00
step-ci
c17bb44729
Merge pull request #1394 from smallstep/dependabot/github_actions/webfactory/ssh-agent-0.9.1
Bump webfactory/ssh-agent from 0.9.0 to 0.9.1
2025-03-24 16:01:43 -07:00
dependabot[bot]
bf45851f4b
Bump github.com/ccoveille/go-safecast from 1.6.0 to 1.6.1
Bumps [github.com/ccoveille/go-safecast](https://github.com/ccoveille/go-safecast) from 1.6.0 to 1.6.1.
- [Release notes](https://github.com/ccoveille/go-safecast/releases)
- [Commits](https://github.com/ccoveille/go-safecast/compare/v1.6.0...v1.6.1)

---
updated-dependencies:
- dependency-name: github.com/ccoveille/go-safecast
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-03-24 18:12:30 +00:00
dependabot[bot]
a953d2e74b
Bump google.golang.org/protobuf from 1.36.5 to 1.36.6
Bumps google.golang.org/protobuf from 1.36.5 to 1.36.6.

---
updated-dependencies:
- dependency-name: google.golang.org/protobuf
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-03-24 18:11:48 +00:00
dependabot[bot]
f5c2cd69e3
Bump webfactory/ssh-agent from 0.9.0 to 0.9.1
Bumps [webfactory/ssh-agent](https://github.com/webfactory/ssh-agent) from 0.9.0 to 0.9.1.
- [Release notes](https://github.com/webfactory/ssh-agent/releases)
- [Changelog](https://github.com/webfactory/ssh-agent/blob/master/CHANGELOG.md)
- [Commits](dc588b651f...a6f90b1f12)

---
updated-dependencies:
- dependency-name: webfactory/ssh-agent
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-03-24 17:28:30 +00:00
step-ci
130fa5692d
Merge pull request #1392 from smallstep/dependabot/go_modules/github.com/golang-jwt/jwt/v5-5.2.2
Bump github.com/golang-jwt/jwt/v5 from 5.2.1 to 5.2.2
2025-03-24 05:17:45 -07:00
dependabot[bot]
73feab9d1c
Bump github.com/golang-jwt/jwt/v5 from 5.2.1 to 5.2.2
Bumps [github.com/golang-jwt/jwt/v5](https://github.com/golang-jwt/jwt) from 5.2.1 to 5.2.2.
- [Release notes](https://github.com/golang-jwt/jwt/releases)
- [Changelog](https://github.com/golang-jwt/jwt/blob/main/VERSION_HISTORY.md)
- [Commits](https://github.com/golang-jwt/jwt/compare/v5.2.1...v5.2.2)

---
updated-dependencies:
- dependency-name: github.com/golang-jwt/jwt/v5
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-03-21 22:12:10 +00:00
Max
ea5f95efa7
Bump certificates to 0.28.3 (#1390) v0.28.6 2025-03-17 19:20:44 -07:00
Max
2e5b5c918d
Add changelog for 0.28.6 (#1389) 2025-03-17 18:03:46 -07:00
step-ci
20a81b4b8a
Merge pull request #1387 from smallstep/dependabot/go_modules/golang.org/x/net-0.36.0
Bump golang.org/x/net from 0.35.0 to 0.36.0
2025-03-17 16:12:15 -07:00
dependabot[bot]
fe48303d26
Bump golang.org/x/net from 0.35.0 to 0.36.0
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.35.0 to 0.36.0.
- [Commits](https://github.com/golang/net/compare/v0.35.0...v0.36.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-03-13 02:06:26 +00:00
step-ci
af579f3895
Merge pull request #1384 from smallstep/dependabot/go_modules/golang.org/x/crypto-0.36.0
Bump golang.org/x/crypto from 0.35.0 to 0.36.0
2025-03-10 11:04:41 -07:00
dependabot[bot]
533f832ac7
Bump golang.org/x/crypto from 0.35.0 to 0.36.0
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.35.0 to 0.36.0.
- [Commits](https://github.com/golang/crypto/compare/v0.35.0...v0.36.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-03-10 18:01:45 +00:00
step-ci
26abca7e5b
Merge pull request #1386 from smallstep/dependabot/go_modules/golang.org/x/term-0.30.0
Bump golang.org/x/term from 0.29.0 to 0.30.0
2025-03-10 11:00:29 -07:00