1
0
mirror of synced 2026-10-24 12:59:18 +03:00

Commit Graph

  • 2b827f35a9 build(deps): bump golang.org/x/crypto from 0.54.0 to 0.55.0 dependabot[bot] 2026-08-17 15:32:51 +00:00
  • 6669f8ff39 Merge pull request #2761 from smallstep/dependabot/go_modules/google.golang.org/api-0.292.0 step-ci 2026-08-12 04:40:45 -05:00
  • 0b6b5c8052 build(deps): bump google.golang.org/api from 0.291.0 to 0.292.0 dependabot[bot] 2026-08-11 23:08:49 +00:00
  • a3aa8a1fec Merge pull request #2759 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.83.0 step-ci 2026-08-11 18:07:34 -05:00
  • 18dd915ca0 Merge pull request #2757 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.87.0 step-ci 2026-08-11 18:07:13 -05:00
  • 96d749f99c Merge pull request #2758 from smallstep/dependabot/go_modules/github.com/smallstep/pkcs7-0.2.3 step-ci 2026-08-11 18:06:52 -05:00
  • 9173bfc5e9 build(deps): bump google.golang.org/grpc from 1.82.1 to 1.83.0 dependabot[bot] 2026-08-03 15:33:18 +00:00
  • 6d37088828 build(deps): bump github.com/smallstep/pkcs7 from 0.2.2 to 0.2.3 dependabot[bot] 2026-08-03 15:33:11 +00:00
  • 5ac6419cb2 build(deps): bump go.step.sm/crypto from 0.85.0 to 0.87.0 dependabot[bot] 2026-08-03 15:33:00 +00:00
  • 1fb5a2879f Preserve legacy provisioner reload compatibility thor/admin-api-input-validation Thorsten Spieker 2026-07-30 15:14:27 +02:00
  • 9c0c39c5db Centralize admin provisioner validation Thorsten Spieker 2026-07-30 14:24:54 +02:00
  • 528921b70d Return bad requests for invalid provisioner conversions Thorsten Spieker 2026-07-30 14:17:07 +02:00
  • c9400bc7aa Validate provisioner type and details during conversion Thorsten Spieker 2026-07-30 14:11:53 +02:00
  • 31d11b4c58 Add changelog entry for admin API validation and webhook status fix Thorsten Spieker 2026-07-29 15:55:54 +02:00
  • 4913ab2f38 Return 200 instead of 201 on provisioner webhook update Thorsten Spieker 2026-07-29 15:52:17 +02:00
  • 1cafc3d609 Return 400 for invalid provisioner configuration on update Thorsten Spieker 2026-07-29 15:47:37 +02:00
  • 4bf182bae2 Validate provisioner payloads in admin create/update handlers Thorsten Spieker 2026-07-29 15:39:45 +02:00
  • 9eb2849a2e Add API-layer input validation for admin provisioner payloads Thorsten Spieker 2026-07-29 15:27:49 +02:00
  • ce31750efa Merge pull request #2754 from smallstep/dependabot/go_modules/github.com/prometheus/client_golang-1.24.1 step-ci 2026-07-29 08:06:26 -05:00
  • bd059c8a90 build(deps): bump github.com/prometheus/client_golang dependabot[bot] 2026-07-29 12:04:38 +00:00
  • df0f943ecb Merge pull request #2752 from smallstep/dependabot/go_modules/google.golang.org/api-0.290.0 step-ci 2026-07-29 07:03:20 -05:00
  • be14fc1c11 build(deps): bump google.golang.org/api from 0.289.0 to 0.291.0 dependabot[bot] 2026-07-29 11:56:13 +00:00
  • 45fe289fd5 Merge pull request #2751 from smallstep/dependabot/go_modules/github.com/smallstep/pkcs7-0.2.2 step-ci 2026-07-29 06:54:57 -05:00
  • 1a8dbcb74f build(deps): bump github.com/smallstep/pkcs7 from 0.2.1 to 0.2.2 dependabot[bot] 2026-07-27 15:32:41 +00:00
  • 7ee99a5f99 Merge pull request #2750 from smallstep/herman/android-crl Herman Slatman 2026-07-27 17:12:42 +02:00
  • c5be1ef87e Fix revoked Android Key Attestation serial lookup to use hex serials Herman Slatman 2026-07-24 12:52:22 +02:00
  • ba0c761af4 Merge pull request #2743 from smallstep/dependabot/github_actions/actions/checkout-7.0.1 step-ci 2026-07-23 17:14:47 -05:00
  • 11522db9fe build(deps): bump actions/checkout from 7.0.0 to 7.0.1 dependabot[bot] 2026-07-23 15:02:00 +00:00
  • 4306f2a946 Merge pull request #2749 from smallstep/herman/android Herman Slatman 2026-07-23 16:58:21 +02:00
  • c4ca1a6a4d Pass Android Key Attestation CRL checker from authority creation Herman Slatman 2026-07-23 11:31:25 +02:00
  • b451816298 Use github.com/smallstep/android-attestation fork Herman Slatman 2026-07-22 22:36:14 +02:00
  • 2e708c9593 Disable CRL lookup when custom roots are configured for android-key Herman Slatman 2026-07-22 22:29:13 +02:00
  • 82bf34423c Fix linter issues Herman Slatman 2026-07-22 15:14:07 +02:00
  • 415969f86e Make Android Key Attestation CRL retrieval more robust Herman Slatman 2026-07-22 14:21:23 +02:00
  • b335becce2 Improve android-key x5c verification Herman Slatman 2026-07-22 13:18:30 +02:00
  • e3d6949bfc Make Android Key Attestation CRL check (partially) configurable Herman Slatman 2026-07-22 12:02:43 +02:00
  • 7370ea1c85 Update trusted Google roots and support custom attestation roots Herman Slatman 2026-07-22 01:01:39 +02:00
  • 9e8986c9c4 Improve some wording and style in doAndroidKeyAttestationFormat Herman Slatman 2026-07-22 00:16:36 +02:00
  • f500b3baad Fix android-key test cases Herman Slatman 2026-07-21 23:47:38 +02:00
  • 06a185f2b8 Use ANDROID_KEY enum, and do appropriate linkedca mapping Herman Slatman 2026-07-10 10:52:19 +02:00
  • 5e3b8433cf Add android-key attestation format support Jean-Baptiste Pin 2025-06-30 11:14:47 +02:00
  • 46148e2db4 Merge pull request #2745 from smallstep/dependabot/go_modules/github.com/prometheus/client_golang-1.24.0 step-ci 2026-07-21 14:53:07 -07:00
  • d9fbb2541f build(deps): bump github.com/prometheus/client_golang dependabot[bot] 2026-07-21 16:27:35 +00:00
  • aadb755df8 Merge pull request #2744 from smallstep/dependabot/go_modules/github.com/coreos/go-oidc/v3-3.20.0 step-ci 2026-07-21 09:25:39 -07:00
  • 217e0663c3 Merge pull request #2746 from smallstep/dependabot/go_modules/google.golang.org/api-0.289.0 step-ci 2026-07-21 09:15:12 -07:00
  • 7fec9ad347 build(deps): bump github.com/coreos/go-oidc/v3 from 3.19.0 to 3.20.0 dependabot[bot] 2026-07-21 11:49:42 +00:00
  • 8e1bbdbbfa build(deps): bump google.golang.org/api from 0.288.0 to 0.289.0 dependabot[bot] 2026-07-21 11:49:42 +00:00
  • 563a30af8a Merge pull request #2747 from smallstep/dependabot/go_modules/cloud.google.com/go/security-1.26.0 step-ci 2026-07-21 04:47:59 -07:00
  • bcae638ff8 Merge pull request #2748 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.82.1 step-ci 2026-07-21 04:47:41 -07:00
  • fffb153d70 build(deps): bump google.golang.org/grpc from 1.82.0 to 1.82.1 dependabot[bot] 2026-07-20 15:33:29 +00:00
  • 67e1402b5c build(deps): bump cloud.google.com/go/security from 1.25.0 to 1.26.0 dependabot[bot] 2026-07-20 15:33:23 +00:00
  • 754893df3e Merge pull request #2715 from kanywst/fix/name-policy-empty-domain-panic Herman Slatman 2026-07-14 15:38:02 +02:00
  • 922bb24ba3 Merge pull request #2737 from maxtaran2010/fix/typos-in-comments Herman Slatman 2026-07-14 15:32:38 +02:00
  • 849efbdbff Fix typo in tests Herman Slatman 2026-07-14 15:25:47 +02:00
  • 70f3415ee1 fix: correct typos in comments and error messages maxtaran2010 2026-07-10 01:09:31 +03:00
  • c0aa959dca Merge pull request #2741 from smallstep/dependabot/go_modules/golang.org/x/net-0.57.0 step-ci 2026-07-14 06:12:16 -07:00
  • 79ef750062 build(deps): bump golang.org/x/net from 0.56.0 to 0.57.0 dependabot[bot] 2026-07-14 09:06:44 +00:00
  • 6b8343c6b8 Merge pull request #2739 from smallstep/dependabot/go_modules/google.golang.org/api-0.288.0 step-ci 2026-07-14 02:04:49 -07:00
  • 9ace804882 build(deps): bump google.golang.org/api from 0.287.1 to 0.288.0 dependabot[bot] 2026-07-14 08:46:14 +00:00
  • bd4e63ad21 Merge pull request #2740 from smallstep/dependabot/go_modules/golang.org/x/crypto-0.54.0 step-ci 2026-07-14 01:44:23 -07:00
  • b82e371861 build(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0 dependabot[bot] 2026-07-14 07:50:37 +00:00
  • c7549d4cf1 Merge pull request #2738 from smallstep/dependabot/go_modules/cloud.google.com/go/longrunning-1.2.0 step-ci 2026-07-14 00:49:05 -07:00
  • b1da8f46df Merge pull request #2742 from smallstep/dependabot/go_modules/golang.org/x/sync-0.22.0 step-ci 2026-07-14 00:48:32 -07:00
  • b2040ae96d build(deps): bump golang.org/x/sync from 0.21.0 to 0.22.0 dependabot[bot] 2026-07-13 15:33:30 +00:00
  • 1edc995526 build(deps): bump cloud.google.com/go/longrunning from 1.1.0 to 1.2.0 dependabot[bot] 2026-07-13 15:33:02 +00:00
  • b923c9dedd Merge pull request #2733 from smallstep/dependabot/go_modules/google.golang.org/api-0.287.0 step-ci 2026-07-09 07:58:10 -07:00
  • 5004d1f9cc build(deps): bump google.golang.org/api from 0.286.0 to 0.287.1 dependabot[bot] 2026-07-09 14:33:08 +00:00
  • 9870a3a4d6 Merge pull request #2734 from smallstep/dependabot/go_modules/github.com/go-chi/chi/v5-5.3.1 step-ci 2026-07-09 02:21:21 -07:00
  • 7152f33271 Merge pull request #2735 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.82.0 step-ci 2026-07-09 02:20:52 -07:00
  • 7d9cf028df build(deps): bump google.golang.org/grpc from 1.81.1 to 1.82.0 dependabot[bot] 2026-07-06 15:34:50 +00:00
  • 8cac371dfa build(deps): bump github.com/go-chi/chi/v5 from 5.3.0 to 5.3.1 dependabot[bot] 2026-07-06 15:34:46 +00:00
  • afa2e3d6d2 Merge pull request #2727 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.84.1 step-ci 2026-06-30 07:13:12 -07:00
  • da019a587d build(deps): bump go.step.sm/crypto from 0.83.0 to 0.84.1 dependabot[bot] 2026-06-30 14:04:39 +00:00
  • 3092b38cdd Merge pull request #2726 from smallstep/dependabot/go_modules/github.com/newrelic/go-agent/v3-3.44.1 step-ci 2026-06-30 07:03:21 -07:00
  • 4f4656c986 Merge pull request #2728 from smallstep/dependabot/go_modules/google.golang.org/api-0.286.0 step-ci 2026-06-30 07:02:54 -07:00
  • 30a299ede6 Merge pull request #2729 from smallstep/dependabot/go_modules/cloud.google.com/go/longrunning-1.1.0 step-ci 2026-06-30 07:02:32 -07:00
  • 9dba070525 build(deps): bump cloud.google.com/go/longrunning from 1.0.0 to 1.1.0 dependabot[bot] 2026-06-29 15:33:26 +00:00
  • 790003271b build(deps): bump google.golang.org/api from 0.285.0 to 0.286.0 dependabot[bot] 2026-06-29 15:33:13 +00:00
  • bd73408a18 build(deps): bump github.com/newrelic/go-agent/v3 from 3.44.0 to 3.44.1 dependabot[bot] 2026-06-29 15:32:56 +00:00
  • af6ef0cd10 Merge pull request #2718 from smallstep/dependabot/go_modules/github.com/coreos/go-oidc/v3-3.19.0 step-ci 2026-06-24 05:54:58 -07:00
  • eb3196c06f build(deps): bump github.com/coreos/go-oidc/v3 from 3.18.0 to 3.19.0 dependabot[bot] 2026-06-24 12:50:27 +00:00
  • b054c44424 Merge pull request #2720 from smallstep/dependabot/github_actions/actions/checkout-7.0.0 step-ci 2026-06-23 04:03:10 -07:00
  • 3ed3113c80 Merge pull request #2719 from smallstep/dependabot/go_modules/github.com/newrelic/go-agent/v3-3.44.0 step-ci 2026-06-23 03:55:52 -07:00
  • 8bfcef1ebe build(deps): bump actions/checkout from 6.0.3 to 7.0.0 dependabot[bot] 2026-06-22 15:32:52 +00:00
  • e5a50334f0 build(deps): bump github.com/newrelic/go-agent/v3 from 3.43.3 to 3.44.0 dependabot[bot] 2026-06-22 15:32:40 +00:00
  • 0840e23d32 Merge pull request #2711 from smallstep/dependabot/go_modules/google.golang.org/api-0.284.0 step-ci 2026-06-18 05:39:42 -07:00
  • 6f2fc88782 build(deps): bump google.golang.org/api from 0.283.0 to 0.285.0 dependabot[bot] 2026-06-18 12:35:58 +00:00
  • df97461bbd Merge pull request #2709 from smallstep/dependabot/go_modules/golang.org/x/net-0.56.0 step-ci 2026-06-18 05:34:48 -07:00
  • 07d7963497 build(deps): bump golang.org/x/net from 0.55.0 to 0.56.0 dependabot[bot] 2026-06-18 11:50:48 +00:00
  • 36b13b741c Merge pull request #2710 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.83.0 step-ci 2026-06-18 04:49:25 -07:00
  • be771f437d Merge pull request #2712 from smallstep/dependabot/go_modules/golang.org/x/crypto-0.53.0 step-ci 2026-06-18 04:48:41 -07:00
  • 95a4f61ae6 Fix name policy panic on empty or short domain kanywst 2026-06-18 20:00:55 +09:00
  • 02a931be3d build(deps): bump golang.org/x/crypto from 0.52.0 to 0.53.0 dependabot[bot] 2026-06-15 15:33:24 +00:00
  • c061a65974 build(deps): bump go.step.sm/crypto from 0.82.0 to 0.83.0 dependabot[bot] 2026-06-15 15:33:09 +00:00
  • 3e9e8bee0c Delegate GitHub Release creation to goreleaser, tighten permissions (#2708) Max 2026-06-10 21:54:41 -07:00
  • be187b2b9b Merge pull request #2707 from smallstep/herman/fix-triage-workflow-permission Herman Slatman 2026-06-10 09:08:40 +02:00
  • 8a369ffe6c Fix pull-requests: write permission in triage workflow Herman Slatman 2026-06-10 08:38:35 +02:00
  • 2e23209ac8 Merge pull request #2706 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.82.0 step-ci 2026-06-09 07:27:08 -07:00
  • c7e95d9d05 build(deps): bump go.step.sm/crypto from 0.81.1 to 0.82.0 dependabot[bot] 2026-06-09 14:19:29 +00:00
  • 5b543a494c Merge pull request #2705 from smallstep/dependabot/go_modules/golang.org/x/sync-0.21.0 step-ci 2026-06-09 07:17:28 -07:00