crypt/step-ca-cli
1
0
Fork 0
mirror of https://github.com/smallstep/cli.git synced 2026-10-24 11:19:19 +03:00
Code Activity
4,039 Commits 27 Branches 361 Tags
v0.30.6
Commit Graph

4039 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Max
f662820e13 empty commit (#1651) v0.30.6 2026-06-10 13:34:39 -07:00
Max
27f49f3908 Fix release workflow to work with immutable releases setting (#1650) 
A repo setting change enabled immutable releases, which prevents
uploading assets to a release once it's published. Creating the
release as a draft here lets goreleaser upload all assets first,
then publish as its final step.

Change-Type: fix
Release-Note: no
Audience: internal
Impact: medium
Breaking: false

Co-authored-by: Claude <noreply@anthropic.com>
v0.30.5 		2026-06-09 22:25:21 -07:00
Max
33ab772fe3 Restore pull-requests: write permission in triage workflow (#1649) 
Commit 527b8bd removed this permission, but the reusable
smallstep/workflows triage.yml still requires it for the
label-pr job — causing a startup_failure on every PR open event.

Change-Type: ci
Release-Note: no
Audience: internal
Impact: none
Breaking: false

Co-authored-by: Claude <noreply@anthropic.com>
v0.30.3 v0.30.4 		2026-06-09 19:55:45 -07:00
Max
f247663955 Update CHANGELOG for v0.30.3 (#1648) 
Change-Type: docs
Release-Note: no
Audience: developer
Impact: none
Breaking: false

Co-authored-by: Claude <noreply@anthropic.com>
 2026-06-09 19:55:29 -07:00
Carl Tashian
00b371a6ce Merge pull request #1647 from smallstep/fix/proxycommand-deadlock-1641 
Fix proxycommand hang when server closes before stdin closes
 2026-06-09 10:59:37 -07:00
step-ci
cd9b4bc96d Merge pull request #1646 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.82.0 
Bump go.step.sm/crypto from 0.81.1 to 0.82.0
 2026-06-09 09:45:51 -07:00
dependabot[bot]
360643eda1 Bump go.step.sm/crypto from 0.81.1 to 0.82.0 
Bumps [go.step.sm/crypto](https://github.com/smallstep/crypto) from 0.81.1 to 0.82.0.
- [Release notes](https://github.com/smallstep/crypto/releases)
- [Commits](https://github.com/smallstep/crypto/compare/v0.81.1...v0.82.0)

---
updated-dependencies:
- dependency-name: go.step.sm/crypto
  dependency-version: 0.82.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-09 16:41:40 +00:00
step-ci
9edcbcf84a Merge pull request #1645 from smallstep/dependabot/go_modules/golang.org/x/crypto-0.53.0 
Bump golang.org/x/crypto from 0.52.0 to 0.53.0
 2026-06-09 09:40:14 -07:00
dependabot[bot]
24c64cdac0 Bump golang.org/x/crypto from 0.52.0 to 0.53.0 
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.52.0 to 0.53.0.
- [Commits](https://github.com/golang/crypto/compare/v0.52.0...v0.53.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-version: 0.53.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-09 16:37:18 +00:00
step-ci
8094e86465 Merge pull request #1644 from smallstep/dependabot/go_modules/golang.org/x/term-0.44.0 
Bump golang.org/x/term from 0.43.0 to 0.44.0
 2026-06-09 09:35:24 -07:00
dependabot[bot]
21dc5d4322 Bump golang.org/x/term from 0.43.0 to 0.44.0 
Bumps [golang.org/x/term](https://github.com/golang/term) from 0.43.0 to 0.44.0.
- [Commits](https://github.com/golang/term/compare/v0.43.0...v0.44.0)

---
updated-dependencies:
- dependency-name: golang.org/x/term
  dependency-version: 0.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-09 16:31:44 +00:00
step-ci
2adf4100bf Merge pull request #1643 from smallstep/dependabot/go_modules/golang.org/x/sys-0.46.0 
Bump golang.org/x/sys from 0.45.0 to 0.46.0
 2026-06-09 09:29:44 -07:00
Carl Tashian
5b50ed3b49 Fix proxycommand hang when server closes before stdin closes 
proxyDirect waited for both copy goroutines via wg.Wait(). When the
server closes the connection mid-session, the stdin->conn goroutine
stays blocked reading a stdin that never reaches EOF (the ssh client
holds the proxycommand's stdin open until it exits), deadlocking until
an OS-level timeout reaps the process.

Return as soon as either direction finishes instead. Extracted a
testable proxyDirectWithIO and added a regression test.

Fixes #1641

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
 2026-06-09 08:27:53 -07:00
dependabot[bot]
ccc870a597 Bump golang.org/x/sys from 0.45.0 to 0.46.0 
Bumps [golang.org/x/sys](https://github.com/golang/sys) from 0.45.0 to 0.46.0.
- [Commits](https://github.com/golang/sys/compare/v0.45.0...v0.46.0)

---
updated-dependencies:
- dependency-name: golang.org/x/sys
  dependency-version: 0.46.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-08 16:32:49 +00:00
step-ci
26b2814300 Merge pull request #1637 from smallstep/dependabot/go_modules/github.com/rogpeppe/go-internal-1.15.0 
Bump github.com/rogpeppe/go-internal from 1.14.1 to 1.15.0
 2026-06-03 03:35:45 -07:00
step-ci
49eaf58252 Merge pull request #1640 from smallstep/dependabot/github_actions/actions/checkout-6.0.3 
Bump actions/checkout from 6.0.2 to 6.0.3
 2026-06-03 03:27:57 -07:00
dependabot[bot]
2759592c94 Bump github.com/rogpeppe/go-internal from 1.14.1 to 1.15.0 
Bumps [github.com/rogpeppe/go-internal](https://github.com/rogpeppe/go-internal) from 1.14.1 to 1.15.0.
- [Release notes](https://github.com/rogpeppe/go-internal/releases)
- [Commits](https://github.com/rogpeppe/go-internal/compare/v1.14.1...v1.15.0)

---
updated-dependencies:
- dependency-name: github.com/rogpeppe/go-internal
  dependency-version: 1.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-03 10:25:41 +00:00
step-ci
e26ec82709 Merge pull request #1639 from smallstep/dependabot/go_modules/github.com/ccoveille/go-safecast/v2-2.0.1 
Bump github.com/ccoveille/go-safecast/v2 from 2.0.0 to 2.0.1
 2026-06-03 03:24:16 -07:00
step-ci
24bfc382ba Merge pull request #1638 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.81.1 
Bump go.step.sm/crypto from 0.81.0 to 0.81.1
 2026-06-03 03:23:35 -07:00
dependabot[bot]
28ae410f96 Bump actions/checkout from 6.0.2 to 6.0.3 
Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.2 to 6.0.3.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](de0fac2e45...df4cb1c069)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 6.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-02 23:48:59 +00:00
dependabot[bot]
627cf9796d Bump github.com/ccoveille/go-safecast/v2 from 2.0.0 to 2.0.1 
Bumps [github.com/ccoveille/go-safecast/v2](https://github.com/ccoveille/go-safecast) from 2.0.0 to 2.0.1.
- [Release notes](https://github.com/ccoveille/go-safecast/releases)
- [Commits](https://github.com/ccoveille/go-safecast/compare/v2.0.0...v2.0.1)

---
updated-dependencies:
- dependency-name: github.com/ccoveille/go-safecast/v2
  dependency-version: 2.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-02 23:48:12 +00:00
dependabot[bot]
e240ec0207 Bump go.step.sm/crypto from 0.81.0 to 0.81.1 
Bumps [go.step.sm/crypto](https://github.com/smallstep/crypto) from 0.81.0 to 0.81.1.
- [Release notes](https://github.com/smallstep/crypto/releases)
- [Commits](https://github.com/smallstep/crypto/compare/v0.81.0...v0.81.1)

---
updated-dependencies:
- dependency-name: go.step.sm/crypto
  dependency-version: 0.81.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-06-02 23:48:06 +00:00
step-ci
04caeaf5ef Merge pull request #1635 from smallstep/dependabot/github_actions/ad-m/github-push-action-1.3.0 
Bump ad-m/github-push-action from 1.1.0 to 1.3.0
 2026-05-27 06:29:01 -07:00
dependabot[bot]
59ab91c965 Bump ad-m/github-push-action from 1.1.0 to 1.3.0 
Bumps [ad-m/github-push-action](https://github.com/ad-m/github-push-action) from 1.1.0 to 1.3.0.
- [Release notes](https://github.com/ad-m/github-push-action/releases)
- [Commits](4cc7477323...881a6320fd)

---
updated-dependencies:
- dependency-name: ad-m/github-push-action
  dependency-version: 1.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-05-27 13:17:46 +00:00
step-ci
887b62ff68 Merge pull request #1633 from smallstep/dependabot/go_modules/golang.org/x/crypto-0.52.0 
Bump golang.org/x/crypto from 0.51.0 to 0.52.0
 2026-05-27 05:17:54 -07:00
Herman Slatman
dffda1e1e7 Upgrade golang.org/x/net to v0.55.0 2026-05-27 13:53:16 +02:00
dependabot[bot]
49330b9db4 Bump golang.org/x/crypto from 0.51.0 to 0.52.0 
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.51.0 to 0.52.0.
- [Commits](https://github.com/golang/crypto/compare/v0.51.0...v0.52.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-version: 0.52.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-05-25 22:34:33 +00:00
Panagiotis Siatras
5746dd253b Merge pull request #1631 from smallstep/panos/workflows 
gh: aligned workflow permissions with smallstep/workflows#324
 2026-05-20 17:22:46 +03:00
Panagiotis Siatras
527b8bd524 gh: aligned workflow permissions with smallstep/workflows#324 2026-05-20 14:45:42 +03:00
step-ci
9b9c95e18c Merge pull request #1630 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.81.0 
Bump go.step.sm/crypto from 0.79.0 to 0.81.0
 2026-05-18 22:03:18 -07:00
dependabot[bot]
18da89f425 Bump go.step.sm/crypto from 0.79.0 to 0.81.0 
Bumps [go.step.sm/crypto](https://github.com/smallstep/crypto) from 0.79.0 to 0.81.0.
- [Release notes](https://github.com/smallstep/crypto/releases)
- [Commits](https://github.com/smallstep/crypto/compare/v0.79.0...v0.81.0)

---
updated-dependencies:
- dependency-name: go.step.sm/crypto
  dependency-version: 0.81.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-05-19 02:10:14 +00:00
step-ci
509de5a887 Merge pull request #1626 from smallstep/dependabot/go_modules/golang.org/x/crypto-0.51.0 
Bump golang.org/x/crypto from 0.50.0 to 0.51.0
 2026-05-12 03:14:30 -07:00
dependabot[bot]
1e3eca2924 Bump golang.org/x/crypto from 0.50.0 to 0.51.0 
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.50.0 to 0.51.0.
- [Commits](https://github.com/golang/crypto/compare/v0.50.0...v0.51.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-version: 0.51.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-05-12 09:23:20 +00:00
step-ci
0f566d2c1d Merge pull request #1628 from smallstep/dependabot/go_modules/golang.org/x/term-0.43.0 
Bump golang.org/x/term from 0.42.0 to 0.43.0
 2026-05-12 02:22:28 -07:00
step-ci
b74236335f Merge pull request #1629 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.79.0 
Bump go.step.sm/crypto from 0.77.9 to 0.79.0
 2026-05-12 02:22:06 -07:00
dependabot[bot]
b83c95c240 Bump go.step.sm/crypto from 0.77.9 to 0.79.0 
Bumps [go.step.sm/crypto](https://github.com/smallstep/crypto) from 0.77.9 to 0.79.0.
- [Release notes](https://github.com/smallstep/crypto/releases)
- [Commits](https://github.com/smallstep/crypto/compare/v0.77.9...v0.79.0)

---
updated-dependencies:
- dependency-name: go.step.sm/crypto
  dependency-version: 0.79.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-05-12 00:01:24 +00:00
dependabot[bot]
d41bde3c86 Bump golang.org/x/term from 0.42.0 to 0.43.0 
Bumps [golang.org/x/term](https://github.com/golang/term) from 0.42.0 to 0.43.0.
- [Commits](https://github.com/golang/term/compare/v0.42.0...v0.43.0)

---
updated-dependencies:
- dependency-name: golang.org/x/term
  dependency-version: 0.43.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-05-12 00:01:14 +00:00
step-ci
1e7aeef7d9 Merge pull request #1619 from smallstep/dependabot/go_modules/github.com/jackc/pgx/v5-5.9.2 
Bump github.com/jackc/pgx/v5 from 5.9.0 to 5.9.2
 2026-05-05 11:52:30 -07:00
dependabot[bot]
3cac2623f1 Bump github.com/jackc/pgx/v5 from 5.9.0 to 5.9.2 
Bumps [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) from 5.9.0 to 5.9.2.
- [Changelog](https://github.com/jackc/pgx/blob/master/CHANGELOG.md)
- [Commits](https://github.com/jackc/pgx/compare/v5.9.0...v5.9.2)

---
updated-dependencies:
- dependency-name: github.com/jackc/pgx/v5
  dependency-version: 5.9.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-05-05 18:47:33 +00:00
step-ci
eb850e51fc Merge pull request #1623 from smallstep/dependabot/go_modules/github.com/fxamacker/cbor/v2-2.9.2 
Bump github.com/fxamacker/cbor/v2 from 2.9.1 to 2.9.2
 2026-05-05 10:11:27 -07:00
dependabot[bot]
5ac2707730 Bump github.com/fxamacker/cbor/v2 from 2.9.1 to 2.9.2 
Bumps [github.com/fxamacker/cbor/v2](https://github.com/fxamacker/cbor) from 2.9.1 to 2.9.2.
- [Release notes](https://github.com/fxamacker/cbor/releases)
- [Commits](https://github.com/fxamacker/cbor/compare/v2.9.1...v2.9.2)

---
updated-dependencies:
- dependency-name: github.com/fxamacker/cbor/v2
  dependency-version: 2.9.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-05-05 16:14:19 +00:00
step-ci
382cf58e07 Merge pull request #1624 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.77.9 
Bump go.step.sm/crypto from 0.77.2 to 0.77.9
 2026-05-05 09:00:56 -07:00
Herman Slatman
af2b67c0c5 Add nosec exclusions 2026-05-05 17:43:05 +02:00
Herman Slatman
925f087819 Update golangci-lint to v2.12.1 2026-05-05 16:58:36 +02:00
dependabot[bot]
fa89529b6e Bump go.step.sm/crypto from 0.77.2 to 0.77.9 
Bumps [go.step.sm/crypto](https://github.com/smallstep/crypto) from 0.77.2 to 0.77.9.
- [Release notes](https://github.com/smallstep/crypto/releases)
- [Commits](https://github.com/smallstep/crypto/compare/v0.77.2...v0.77.9)

---
updated-dependencies:
- dependency-name: go.step.sm/crypto
  dependency-version: 0.77.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-05-04 21:03:31 +00:00
step-ci
ef4d129088 Merge pull request #1618 from smallstep/dependabot/go_modules/github.com/jackc/pgx/v5-5.9.0 
Bump github.com/jackc/pgx/v5 from 5.8.0 to 5.9.0
 2026-04-17 11:29:03 -07:00
dependabot[bot]
7026648b77 Bump github.com/jackc/pgx/v5 from 5.8.0 to 5.9.0 
Bumps [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) from 5.8.0 to 5.9.0.
- [Changelog](https://github.com/jackc/pgx/blob/master/CHANGELOG.md)
- [Commits](https://github.com/jackc/pgx/compare/v5.8.0...v5.9.0)

---
updated-dependencies:
- dependency-name: github.com/jackc/pgx/v5
  dependency-version: 5.9.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-04-16 23:32:20 +00:00
step-ci
8dbc64cd59 Merge pull request #1612 from smallstep/dependabot/go_modules/golang.org/x/crypto-0.50.0 
Bump golang.org/x/crypto from 0.49.0 to 0.50.0
 2026-04-15 05:32:31 -07:00
dependabot[bot]
3a3b6afeee Bump golang.org/x/crypto from 0.49.0 to 0.50.0 
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.49.0 to 0.50.0.
- [Commits](https://github.com/golang/crypto/compare/v0.49.0...v0.50.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-version: 0.50.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-04-15 12:03:42 +00:00
step-ci
f1b243cc69 Merge pull request #1615 from smallstep/dependabot/go_modules/golang.org/x/term-0.42.0 
Bump golang.org/x/term from 0.41.0 to 0.42.0
 2026-04-15 05:02:31 -07:00