crypt/step-ca-cli
1
0
Fork 0
mirror of https://github.com/smallstep/cli.git synced 2026-10-24 11:19:19 +03:00
Code Activity
4,038 Commits 27 Branches 361 Tags
v0.30.5
Commit Graph

4038 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Max
27f49f3908 Fix release workflow to work with immutable releases setting (#1650) 
A repo setting change enabled immutable releases, which prevents
uploading assets to a release once it's published. Creating the
release as a draft here lets goreleaser upload all assets first,
then publish as its final step.

Change-Type: fix
Release-Note: no
Audience: internal
Impact: medium
Breaking: false

Co-authored-by: Claude <noreply@anthropic.com>
v0.30.5 		2026-06-09 22:25:21 -07:00
Max
33ab772fe3 Restore pull-requests: write permission in triage workflow (#1649) 
Commit 527b8bd removed this permission, but the reusable
smallstep/workflows triage.yml still requires it for the
label-pr job — causing a startup_failure on every PR open event.

Change-Type: ci
Release-Note: no
Audience: internal
Impact: none
Breaking: false

Co-authored-by: Claude <noreply@anthropic.com>
v0.30.3 v0.30.4 		2026-06-09 19:55:45 -07:00
Max
f247663955 Update CHANGELOG for v0.30.3 (#1648) 
Change-Type: docs
Release-Note: no
Audience: developer
Impact: none
Breaking: false

Co-authored-by: Claude <noreply@anthropic.com>
 2026-06-09 19:55:29 -07:00
Carl Tashian
00b371a6ce Merge pull request #1647 from smallstep/fix/proxycommand-deadlock-1641 
Fix proxycommand hang when server closes before stdin closes
 2026-06-09 10:59:37 -07:00
step-ci
cd9b4bc96d Merge pull request #1646 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.82.0 
Bump go.step.sm/crypto from 0.81.1 to 0.82.0
 2026-06-09 09:45:51 -07:00
dependabot[bot]
360643eda1 Bump go.step.sm/crypto from 0.81.1 to 0.82.0 
Bumps [go.step.sm/crypto](https://github.com/smallstep/crypto) from 0.81.1 to 0.82.0.
- [Release notes](https://github.com/smallstep/crypto/releases)
- [Commits](https://github.com/smallstep/crypto/compare/v0.81.1...v0.82.0)

---
updated-dependencies:
- dependency-name: go.step.sm/crypto
  dependency-version: 0.82.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-09 16:41:40 +00:00
step-ci
9edcbcf84a Merge pull request #1645 from smallstep/dependabot/go_modules/golang.org/x/crypto-0.53.0 
Bump golang.org/x/crypto from 0.52.0 to 0.53.0
 2026-06-09 09:40:14 -07:00
dependabot[bot]
24c64cdac0 Bump golang.org/x/crypto from 0.52.0 to 0.53.0 
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.52.0 to 0.53.0.
- [Commits](https://github.com/golang/crypto/compare/v0.52.0...v0.53.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-version: 0.53.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-09 16:37:18 +00:00
step-ci
8094e86465 Merge pull request #1644 from smallstep/dependabot/go_modules/golang.org/x/term-0.44.0 
Bump golang.org/x/term from 0.43.0 to 0.44.0
 2026-06-09 09:35:24 -07:00
dependabot[bot]
21dc5d4322 Bump golang.org/x/term from 0.43.0 to 0.44.0 
Bumps [golang.org/x/term](https://github.com/golang/term) from 0.43.0 to 0.44.0.
- [Commits](https://github.com/golang/term/compare/v0.43.0...v0.44.0)

---
updated-dependencies:
- dependency-name: golang.org/x/term
  dependency-version: 0.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-09 16:31:44 +00:00
step-ci
2adf4100bf Merge pull request #1643 from smallstep/dependabot/go_modules/golang.org/x/sys-0.46.0 
Bump golang.org/x/sys from 0.45.0 to 0.46.0
 2026-06-09 09:29:44 -07:00
Carl Tashian
5b50ed3b49 Fix proxycommand hang when server closes before stdin closes 
proxyDirect waited for both copy goroutines via wg.Wait(). When the
server closes the connection mid-session, the stdin->conn goroutine
stays blocked reading a stdin that never reaches EOF (the ssh client
holds the proxycommand's stdin open until it exits), deadlocking until
an OS-level timeout reaps the process.

Return as soon as either direction finishes instead. Extracted a
testable proxyDirectWithIO and added a regression test.

Fixes #1641

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
 2026-06-09 08:27:53 -07:00
dependabot[bot]
ccc870a597 Bump golang.org/x/sys from 0.45.0 to 0.46.0 
Bumps [golang.org/x/sys](https://github.com/golang/sys) from 0.45.0 to 0.46.0.
- [Commits](https://github.com/golang/sys/compare/v0.45.0...v0.46.0)

---
updated-dependencies:
- dependency-name: golang.org/x/sys
  dependency-version: 0.46.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-08 16:32:49 +00:00
step-ci
26b2814300 Merge pull request #1637 from smallstep/dependabot/go_modules/github.com/rogpeppe/go-internal-1.15.0 
Bump github.com/rogpeppe/go-internal from 1.14.1 to 1.15.0
 2026-06-03 03:35:45 -07:00
step-ci
49eaf58252 Merge pull request #1640 from smallstep/dependabot/github_actions/actions/checkout-6.0.3 
Bump actions/checkout from 6.0.2 to 6.0.3
 2026-06-03 03:27:57 -07:00
dependabot[bot]
2759592c94 Bump github.com/rogpeppe/go-internal from 1.14.1 to 1.15.0 
Bumps [github.com/rogpeppe/go-internal](https://github.com/rogpeppe/go-internal) from 1.14.1 to 1.15.0.
- [Release notes](https://github.com/rogpeppe/go-internal/releases)
- [Commits](https://github.com/rogpeppe/go-internal/compare/v1.14.1...v1.15.0)

---
updated-dependencies:
- dependency-name: github.com/rogpeppe/go-internal
  dependency-version: 1.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-03 10:25:41 +00:00
step-ci
e26ec82709 Merge pull request #1639 from smallstep/dependabot/go_modules/github.com/ccoveille/go-safecast/v2-2.0.1 
Bump github.com/ccoveille/go-safecast/v2 from 2.0.0 to 2.0.1
 2026-06-03 03:24:16 -07:00
step-ci
24bfc382ba Merge pull request #1638 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.81.1 
Bump go.step.sm/crypto from 0.81.0 to 0.81.1
 2026-06-03 03:23:35 -07:00
dependabot[bot]
28ae410f96 Bump actions/checkout from 6.0.2 to 6.0.3 
Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.2 to 6.0.3.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](de0fac2e45...df4cb1c069)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 6.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-02 23:48:59 +00:00
dependabot[bot]
627cf9796d Bump github.com/ccoveille/go-safecast/v2 from 2.0.0 to 2.0.1 
Bumps [github.com/ccoveille/go-safecast/v2](https://github.com/ccoveille/go-safecast) from 2.0.0 to 2.0.1.
- [Release notes](https://github.com/ccoveille/go-safecast/releases)
- [Commits](https://github.com/ccoveille/go-safecast/compare/v2.0.0...v2.0.1)

---
updated-dependencies:
- dependency-name: github.com/ccoveille/go-safecast/v2
  dependency-version: 2.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-02 23:48:12 +00:00
dependabot[bot]
e240ec0207 Bump go.step.sm/crypto from 0.81.0 to 0.81.1 
Bumps [go.step.sm/crypto](https://github.com/smallstep/crypto) from 0.81.0 to 0.81.1.
- [Release notes](https://github.com/smallstep/crypto/releases)
- [Commits](https://github.com/smallstep/crypto/compare/v0.81.0...v0.81.1)

---
updated-dependencies:
- dependency-name: go.step.sm/crypto
  dependency-version: 0.81.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-02 23:48:06 +00:00
step-ci
04caeaf5ef Merge pull request #1635 from smallstep/dependabot/github_actions/ad-m/github-push-action-1.3.0 
Bump ad-m/github-push-action from 1.1.0 to 1.3.0
 2026-05-27 06:29:01 -07:00
dependabot[bot]
59ab91c965 Bump ad-m/github-push-action from 1.1.0 to 1.3.0 
Bumps [ad-m/github-push-action](https://github.com/ad-m/github-push-action) from 1.1.0 to 1.3.0.
- [Release notes](https://github.com/ad-m/github-push-action/releases)
- [Commits](4cc7477323...881a6320fd)

---
updated-dependencies:
- dependency-name: ad-m/github-push-action
  dependency-version: 1.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-05-27 13:17:46 +00:00
step-ci
887b62ff68 Merge pull request #1633 from smallstep/dependabot/go_modules/golang.org/x/crypto-0.52.0 
Bump golang.org/x/crypto from 0.51.0 to 0.52.0
 2026-05-27 05:17:54 -07:00
Herman Slatman
dffda1e1e7 Upgrade golang.org/x/net to v0.55.0 2026-05-27 13:53:16 +02:00
dependabot[bot]
49330b9db4 Bump golang.org/x/crypto from 0.51.0 to 0.52.0 
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.51.0 to 0.52.0.
- [Commits](https://github.com/golang/crypto/compare/v0.51.0...v0.52.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-version: 0.52.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-05-25 22:34:33 +00:00
Panagiotis Siatras
5746dd253b Merge pull request #1631 from smallstep/panos/workflows 
gh: aligned workflow permissions with smallstep/workflows#324
 2026-05-20 17:22:46 +03:00
Panagiotis Siatras
527b8bd524 gh: aligned workflow permissions with smallstep/workflows#324 2026-05-20 14:45:42 +03:00
step-ci
9b9c95e18c Merge pull request #1630 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.81.0 
Bump go.step.sm/crypto from 0.79.0 to 0.81.0
 2026-05-18 22:03:18 -07:00
dependabot[bot]
18da89f425 Bump go.step.sm/crypto from 0.79.0 to 0.81.0 
Bumps [go.step.sm/crypto](https://github.com/smallstep/crypto) from 0.79.0 to 0.81.0.
- [Release notes](https://github.com/smallstep/crypto/releases)
- [Commits](https://github.com/smallstep/crypto/compare/v0.79.0...v0.81.0)

---
updated-dependencies:
- dependency-name: go.step.sm/crypto
  dependency-version: 0.81.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-05-19 02:10:14 +00:00
step-ci
509de5a887 Merge pull request #1626 from smallstep/dependabot/go_modules/golang.org/x/crypto-0.51.0 
Bump golang.org/x/crypto from 0.50.0 to 0.51.0
 2026-05-12 03:14:30 -07:00
dependabot[bot]
1e3eca2924 Bump golang.org/x/crypto from 0.50.0 to 0.51.0 
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.50.0 to 0.51.0.
- [Commits](https://github.com/golang/crypto/compare/v0.50.0...v0.51.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-version: 0.51.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-05-12 09:23:20 +00:00
step-ci
0f566d2c1d Merge pull request #1628 from smallstep/dependabot/go_modules/golang.org/x/term-0.43.0 
Bump golang.org/x/term from 0.42.0 to 0.43.0
 2026-05-12 02:22:28 -07:00
step-ci
b74236335f Merge pull request #1629 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.79.0 
Bump go.step.sm/crypto from 0.77.9 to 0.79.0
 2026-05-12 02:22:06 -07:00
dependabot[bot]
b83c95c240 Bump go.step.sm/crypto from 0.77.9 to 0.79.0 
Bumps [go.step.sm/crypto](https://github.com/smallstep/crypto) from 0.77.9 to 0.79.0.
- [Release notes](https://github.com/smallstep/crypto/releases)
- [Commits](https://github.com/smallstep/crypto/compare/v0.77.9...v0.79.0)

---
updated-dependencies:
- dependency-name: go.step.sm/crypto
  dependency-version: 0.79.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-05-12 00:01:24 +00:00
dependabot[bot]
d41bde3c86 Bump golang.org/x/term from 0.42.0 to 0.43.0 
Bumps [golang.org/x/term](https://github.com/golang/term) from 0.42.0 to 0.43.0.
- [Commits](https://github.com/golang/term/compare/v0.42.0...v0.43.0)

---
updated-dependencies:
- dependency-name: golang.org/x/term
  dependency-version: 0.43.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-05-12 00:01:14 +00:00
step-ci
1e7aeef7d9 Merge pull request #1619 from smallstep/dependabot/go_modules/github.com/jackc/pgx/v5-5.9.2 
Bump github.com/jackc/pgx/v5 from 5.9.0 to 5.9.2
 2026-05-05 11:52:30 -07:00
dependabot[bot]
3cac2623f1 Bump github.com/jackc/pgx/v5 from 5.9.0 to 5.9.2 
Bumps [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) from 5.9.0 to 5.9.2.
- [Changelog](https://github.com/jackc/pgx/blob/master/CHANGELOG.md)
- [Commits](https://github.com/jackc/pgx/compare/v5.9.0...v5.9.2)

---
updated-dependencies:
- dependency-name: github.com/jackc/pgx/v5
  dependency-version: 5.9.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-05-05 18:47:33 +00:00
step-ci
eb850e51fc Merge pull request #1623 from smallstep/dependabot/go_modules/github.com/fxamacker/cbor/v2-2.9.2 
Bump github.com/fxamacker/cbor/v2 from 2.9.1 to 2.9.2
 2026-05-05 10:11:27 -07:00
dependabot[bot]
5ac2707730 Bump github.com/fxamacker/cbor/v2 from 2.9.1 to 2.9.2 
Bumps [github.com/fxamacker/cbor/v2](https://github.com/fxamacker/cbor) from 2.9.1 to 2.9.2.
- [Release notes](https://github.com/fxamacker/cbor/releases)
- [Commits](https://github.com/fxamacker/cbor/compare/v2.9.1...v2.9.2)

---
updated-dependencies:
- dependency-name: github.com/fxamacker/cbor/v2
  dependency-version: 2.9.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-05-05 16:14:19 +00:00
step-ci
382cf58e07 Merge pull request #1624 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.77.9 
Bump go.step.sm/crypto from 0.77.2 to 0.77.9
 2026-05-05 09:00:56 -07:00
Herman Slatman
af2b67c0c5 Add nosec exclusions 2026-05-05 17:43:05 +02:00
Herman Slatman
925f087819 Update golangci-lint to v2.12.1 2026-05-05 16:58:36 +02:00
dependabot[bot]
fa89529b6e Bump go.step.sm/crypto from 0.77.2 to 0.77.9 
Bumps [go.step.sm/crypto](https://github.com/smallstep/crypto) from 0.77.2 to 0.77.9.
- [Release notes](https://github.com/smallstep/crypto/releases)
- [Commits](https://github.com/smallstep/crypto/compare/v0.77.2...v0.77.9)

---
updated-dependencies:
- dependency-name: go.step.sm/crypto
  dependency-version: 0.77.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-05-04 21:03:31 +00:00
step-ci
ef4d129088 Merge pull request #1618 from smallstep/dependabot/go_modules/github.com/jackc/pgx/v5-5.9.0 
Bump github.com/jackc/pgx/v5 from 5.8.0 to 5.9.0
 2026-04-17 11:29:03 -07:00
dependabot[bot]
7026648b77 Bump github.com/jackc/pgx/v5 from 5.8.0 to 5.9.0 
Bumps [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) from 5.8.0 to 5.9.0.
- [Changelog](https://github.com/jackc/pgx/blob/master/CHANGELOG.md)
- [Commits](https://github.com/jackc/pgx/compare/v5.8.0...v5.9.0)

---
updated-dependencies:
- dependency-name: github.com/jackc/pgx/v5
  dependency-version: 5.9.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-04-16 23:32:20 +00:00
step-ci
8dbc64cd59 Merge pull request #1612 from smallstep/dependabot/go_modules/golang.org/x/crypto-0.50.0 
Bump golang.org/x/crypto from 0.49.0 to 0.50.0
 2026-04-15 05:32:31 -07:00
dependabot[bot]
3a3b6afeee Bump golang.org/x/crypto from 0.49.0 to 0.50.0 
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.49.0 to 0.50.0.
- [Commits](https://github.com/golang/crypto/compare/v0.49.0...v0.50.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-version: 0.50.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-04-15 12:03:42 +00:00
step-ci
f1b243cc69 Merge pull request #1615 from smallstep/dependabot/go_modules/golang.org/x/term-0.42.0 
Bump golang.org/x/term from 0.41.0 to 0.42.0
 2026-04-15 05:02:31 -07:00
step-ci
df0c6fae5a Merge pull request #1617 from smallstep/dependabot/github_actions/ad-m/github-push-action-1.1.0 
Bump ad-m/github-push-action from 1.0.0 to 1.1.0
 2026-04-15 04:58:07 -07:00