Home Original page

Releases · smallstep/autocert

Autocert v0.20.6 (26-03-23)

Signatures and Checksums

autocert uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

cosign verify-blob \
  --bundle ~/Downloads/autocert_linux_0.20.6_amd64.tar.gz.sigstore.json \
  --certificate-identity-regexp "https://github\.com/smallstep/workflows/.*" \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  ~/Downloads/autocert_linux0.20.6_amd64.tar.gz

The checksums.txt file (in the 'Assets' section below) contains a checksum for every artifact in the release.

Changelog

  • 31cf68a Merge pull request #439 from smallstep/max/certificates-0.30.2
  • 03467ef Update certificate to v0.30.2
  • 4c328e6 Merge pull request #438 from smallstep/max/dependabot
  • 555d858 Group Dependabot updates to reduce PR noise

Thanks!

Those were the changes on v0.20.6!

Come join us on Discord to ask questions, chat about PKI, or get a sneak peak at the freshest PKI memes.

Autocert v0.20.5 (26-03-19)

Signatures and Checksums

autocert uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

cosign verify-blob \
  --bundle ~/Downloads/autocert_linux_0.20.5_amd64.tar.gz.sigstore.json \
  --certificate-identity-regexp "https://github\.com/smallstep/workflows/.*" \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  ~/Downloads/autocert_linux0.20.5_amd64.tar.gz

The checksums.txt file (in the 'Assets' section below) contains a checksum for every artifact in the release.

Changelog

  • 27724ef Merge pull request #437 from smallstep/max/certificates-v0.30.1
  • b0ac901 Update certificates to v0.30.1
  • 857c451 Merge pull request #436 from smallstep/max/fix-release-ci-permissions

Thanks!

Those were the changes on v0.20.5!

Come join us on Discord to ask questions, chat about PKI, or get a sneak peak at the freshest PKI memes.

Autocert v0.20.5-rc2 (26-03-19)

Signatures and Checksums

autocert uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

cosign verify-blob \
  --bundle ~/Downloads/autocert_linux_0.20.5-rc2_amd64.tar.gz.sigstore.json \
  --certificate-identity-regexp "https://github\.com/smallstep/workflows/.*" \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  ~/Downloads/autocert_linux0.20.5-rc2_amd64.tar.gz

The checksums.txt file (in the 'Assets' section below) contains a checksum for every artifact in the release.

Changelog

  • 2c635ba Grant CI job required permissions in release workflow
  • 4942f88 Merge pull request #426 from smallstep/dependabot/go_modules/k8s.io/api-0.36.0-alpha.1
  • 31ab85a build(deps): bump k8s.io/api from 0.35.0-alpha.0 to 0.36.0-alpha.1
  • 9c02102 Merge pull request #435 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.79.3
  • 422c0ca build(deps): bump google.golang.org/grpc from 1.79.1 to 1.79.3
  • cbe8729 Merge pull request #434 from smallstep/max/certificates-v0.30.0
  • 0b67c0e Fix lint warnings across controller and examples
  • d58f6a5 go mod tidy
  • e9aaadb Merge branch 'master' into max/certificates-v0.30.0
  • 4fdbed6 Merge pull request #424 from smallstep/dependabot/go_modules/github.com/slackhq/nebula-1.10.3
  • 4bf975a build(deps): bump github.com/slackhq/nebula from 1.9.7 to 1.10.3
  • 6d842cd Merge pull request #428 from smallstep/dependabot/go_modules/golang.org/x/net-0.50.0
  • 56c4c2c Merge pull request #429 from smallstep/dependabot/go_modules/filippo.io/edwards25519-1.1.1
  • 0388cbe ci: Enable zizmor GitHub Advanced Security upload (#432)
  • ba71de0 Merge pull request #433 from smallstep/dependabot/github_actions/softprops/action-gh-release-2.6.1
  • 9bf690b Update certificates to v0.30.0
  • 9204b3a build(deps): bump softprops/action-gh-release from 2.5.0 to 2.6.1
  • 8e53541 Add actionci.yml (#431)
  • 0fff58a Merge pull request #430 from smallstep/carl/cicd-security-hardening
  • 8e4f3c0 Add least-privilege permissions to triage workflow
  • 2af649b build(deps): bump golang.org/x/net from 0.49.0 to 0.50.0
  • 9b85295 Merge pull request #427 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.79.1
  • 5a62e72 build(deps): bump filippo.io/edwards25519 from 1.1.0 to 1.1.1
  • 490348c build(deps): bump google.golang.org/grpc from 1.78.0 to 1.79.1
  • 0950fd1 Merge pull request #423 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.76.0
  • e505cbe build(deps): bump go.step.sm/crypto from 0.75.0 to 0.76.0
  • 86d0525 Merge pull request #422 from smallstep/mariano/cosign
  • 8aaaebe Update header with cosign instructions

Thanks!

Those were the changes on v0.20.5-rc2!

Come join us on Discord to ask questions, chat about PKI, or get a sneak peak at the freshest PKI memes.

Autocert v0.20.5-rc1 (26-01-22)

Signatures and Checksums

autocert uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

COSIGN_EXPERIMENTAL=1 cosign verify-blob \
  --certificate ~/Downloads/autocert_linux_0.20.5-rc1_amd64.tar.gz.pem \
  --signature ~/Downloads/autocert_linux0.20.5-rc1_amd64.tar.gz.sig \
  ~/Downloads/autocert_linux0.20.5-rc1_amd64.tar.gz

The checksums.txt file (in the 'Assets' section below) contains a checksum for every artifact in the release.

Changelog

  • 1b3565e Update cosign command
  • b813206 Merge pull request #421 from smallstep/dependabot/go_modules/github.com/sirupsen/logrus-1.9.4
  • 8568712 build(deps): bump github.com/sirupsen/logrus from 1.9.3 to 1.9.4
  • c501e42 Merge pull request #420 from smallstep/dependabot/go_modules/golang.org/x/net-0.49.0
  • 69a6cb2 build(deps): bump golang.org/x/net from 0.48.0 to 0.49.0
  • 6e4c3d4 Merge pull request #419 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.78.0
  • 813c2dd build(deps): bump google.golang.org/grpc from 1.77.0 to 1.78.0
  • e8e4367 Merge pull request #418 from smallstep/dependabot/go_modules/golang.org/x/net-0.48.0
  • f8a853b build(deps): bump golang.org/x/net from 0.47.0 to 0.48.0
  • c74e086 Merge pull request #415 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.75.0
  • b604cb5 Merge pull request #417 from smallstep/dependabot/github_actions/softprops/action-gh-release-2.5.0
  • 21c352b build(deps): bump softprops/action-gh-release from 2.4.2 to 2.5.0
  • 3379439 build(deps): bump go.step.sm/crypto from 0.74.0 to 0.75.0

Thanks!

Those were the changes on v0.20.5-rc1!

Come join us on Discord to ask questions, chat about PKI, or get a sneak peak at the freshest PKI memes.

Autocert v0.20.4 (25-12-03)

Signatures and Checksums

autocert uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

COSIGN_EXPERIMENTAL=1 cosign verify-blob \
  --certificate ~/Downloads/autocert_linux_0.20.4_amd64.tar.gz.pem \
  --signature ~/Downloads/autocert_linux0.20.4_amd64.tar.gz.sig \
  ~/Downloads/autocert_linux0.20.4_amd64.tar.gz

The checksums.txt file (in the 'Assets' section below) contains a checksum for every artifact in the release.

Changelog

  • a0fb1a5 Merge pull request #413 from smallstep/dependabot/go_modules/github.com/smallstep/certificates-0.29.0
  • 4ffb6b0 build(deps): bump github.com/smallstep/certificates

Thanks!

Those were the changes on v0.20.4!

Come join us on Discord to ask questions, chat about PKI, or get a sneak peak at the freshest PKI memes.

Autocert v0.20.3 (25-12-03)

Signatures and Checksums

autocert uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

COSIGN_EXPERIMENTAL=1 cosign verify-blob \
  --certificate ~/Downloads/autocert_linux_0.20.3_amd64.tar.gz.pem \
  --signature ~/Downloads/autocert_linux0.20.3_amd64.tar.gz.sig \
  ~/Downloads/autocert_linux0.20.3_amd64.tar.gz

The checksums.txt file (in the 'Assets' section below) contains a checksum for every artifact in the release.

Changelog

  • e51d243 Merge pull request #408 from smallstep/dependabot/go_modules/golang.org/x/crypto-0.45.0
  • 42712a5 build(deps): bump golang.org/x/crypto from 0.43.0 to 0.45.0
  • c91b949 Merge pull request #410 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.77.0
  • 1f30d8f build(deps): bump google.golang.org/grpc from 1.76.0 to 1.77.0
  • 8460f84 Merge pull request #405 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.74.0
  • 062aa5b build(deps): bump go.step.sm/crypto from 0.73.0 to 0.74.0
  • e4b2eba Merge pull request #407 from smallstep/dependabot/github_actions/softprops/action-gh-release-2.4.2
  • 47add74 build(deps): bump softprops/action-gh-release from 2.4.1 to 2.4.2
  • d6abd57 Merge pull request #403 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.73.0
  • 4dda1bc build(deps): bump go.step.sm/crypto from 0.70.0 to 0.73.0
  • 6a1550d Merge pull request #400 from smallstep/dependabot/go_modules/github.com/slackhq/nebula-1.9.7
  • 7898fd6 build(deps): bump github.com/slackhq/nebula from 1.9.5 to 1.9.7
  • 6e8ee42 Merge pull request #399 from smallstep/dependabot/go_modules/github.com/smallstep/cli-utils-0.12.2
  • 15f66f5 build(deps): bump github.com/smallstep/cli-utils from 0.12.1 to 0.12.2
  • 6cc12d0 Merge pull request #397 from smallstep/dependabot/github_actions/softprops/action-gh-release-2.4.1
  • 30f362d Merge pull request #393 from smallstep/dependabot/go_modules/golang.org/x/net-0.46.0
  • e065157 build(deps): bump golang.org/x/net from 0.44.0 to 0.46.0
  • 67d6af7 Merge pull request #396 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.76.0
  • e069a12 build(deps): bump softprops/action-gh-release from 2.3.4 to 2.4.1
  • 3ca773c build(deps): bump google.golang.org/grpc from 1.75.1 to 1.76.0
  • 2a3e211 Merge pull request #392 from smallstep/dependabot/github_actions/softprops/action-gh-release-2.3.4
  • 2b93af4 build(deps): bump softprops/action-gh-release from 2.3.3 to 2.3.4
  • af6e0c3 Merge pull request #391 from smallstep/dependabot/go_modules/golang.org/x/net-0.44.0
  • 24aa2d1 build(deps): bump golang.org/x/net from 0.43.0 to 0.44.0
  • 4b6baf8 Merge pull request #390 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.75.1
  • abc3ae1 build(deps): bump google.golang.org/grpc from 1.75.0 to 1.75.1
  • 9e1f602 Merge pull request #389 from smallstep/dependabot/github_actions/softprops/action-gh-release-2.3.3
  • 45dfbfa build(deps): bump softprops/action-gh-release from 2.3.2 to 2.3.3
  • 26f1a2a Merge pull request #383 from smallstep/dependabot/go_modules/k8s.io/api-0.35.0-alpha.0
  • c16eade build(deps): bump k8s.io/api from 0.33.0-alpha.2 to 0.35.0-alpha.0
  • 52d2243 Merge pull request #384 from smallstep/dependabot/go_modules/k8s.io/apimachinery-0.35.0-alpha.0
  • 4f926e0 Merge pull request #388 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.70.0
  • 3d70876 build(deps): bump k8s.io/apimachinery
  • 9f5e88b build(deps): bump go.step.sm/crypto from 0.69.0 to 0.70.0
  • a2f8b6b Merge pull request #387 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.75.0
  • 7614120 build(deps): bump google.golang.org/grpc from 1.74.2 to 1.75.0
  • afac7f5 Merge pull request #385 from smallstep/dependabot/go_modules/golang.org/x/net-0.43.0
  • fb660e5 build(deps): bump golang.org/x/net from 0.42.0 to 0.43.0
  • 1841ae6 Merge pull request #386 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.69.0
  • cfa8936 build(deps): bump go.step.sm/crypto from 0.68.0 to 0.69.0
  • ca611a3 Merge pull request #382 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.68.0
  • 9db9fe9 build(deps): bump go.step.sm/crypto from 0.67.0 to 0.68.0
  • 9597ce0 Merge pull request #380 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.74.2
  • 9a1ba4e Merge pull request #381 from smallstep/dependabot/go_modules/sigs.k8s.io/yaml-1.6.0
  • 1650195 build(deps): bump sigs.k8s.io/yaml from 1.5.0 to 1.6.0
  • 65e7309 build(deps): bump google.golang.org/grpc from 1.73.0 to 1.74.2
  • ce3ffdb Merge pull request #377 from smallstep/dependabot/go_modules/golang.org/x/net-0.42.0
  • 90d5cc8 build(deps): bump golang.org/x/net from 0.41.0 to 0.42.0
  • e1a7aea Merge pull request #374 from smallstep/dependabot/go_modules/github.com/smallstep/certificates-0.28.4
  • 3fd7946 build(deps): bump github.com/smallstep/certificates
  • 35883f6 Merge pull request #371 from smallstep/dependabot/go_modules/sigs.k8s.io/yaml-1.5.0
  • 7075216 build(deps): bump sigs.k8s.io/yaml from 1.4.0 to 1.5.0

Thanks!

Those were the changes on v0.20.3!

Come join us on Discord to ask questions, chat about PKI, or get a sneak peak at the freshest PKI memes.

Autocert v0.20.2-rc1 (25-07-14)

Signatures and Checksums

autocert uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

COSIGN_EXPERIMENTAL=1 cosign verify-blob \
  --certificate ~/Downloads/autocert_linux_0.20.2-rc1_amd64.tar.gz.pem \
  --signature ~/Downloads/autocert_linux0.20.2-rc1_amd64.tar.gz.sig \
  ~/Downloads/autocert_linux0.20.2-rc1_amd64.tar.gz

The checksums.txt file (in the 'Assets' section below) contains a checksum for every artifact in the release.

Changelog

  • 19e53f7 empty commit
  • 4fec122 Merge pull request #367 from smallstep/dependabot/go_modules/github.com/go-chi/chi/v5-5.2.2
  • 48c57cb Merge pull request #370 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.67.0
  • 6677eb9 build(deps): bump go.step.sm/crypto from 0.66.0 to 0.67.0
  • 8952d7e build(deps): bump github.com/go-chi/chi/v5 from 5.2.1 to 5.2.2
  • 226c87d Merge pull request #366 from smallstep/dependabot/github_actions/softprops/action-gh-release-2.3.2
  • fda2040 build(deps): bump softprops/action-gh-release from 2.2.2 to 2.3.2
  • 929460d Merge pull request #364 from smallstep/dependabot/go_modules/golang.org/x/net-0.41.0
  • 22ec0e7 build(deps): bump golang.org/x/net from 0.40.0 to 0.41.0
  • 5f684e2 Merge pull request #365 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.73.0
  • c4a8f5d build(deps): bump google.golang.org/grpc from 1.72.2 to 1.73.0
  • 00ece25 Merge pull request #363 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.66.0
  • 6f1a454 build(deps): bump go.step.sm/crypto from 0.64.0 to 0.66.0
  • 78d294d Merge pull request #362 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.72.2
  • f21cfb0 build(deps): bump google.golang.org/grpc from 1.72.1 to 1.72.2
  • e964ef4 Merge pull request #360 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.64.0
  • 8f08392 build(deps): bump go.step.sm/crypto from 0.63.0 to 0.64.0
  • 2644499 Merge pull request #359 from smallstep/herman/fix-example-linting-issues
  • 96fc385 Fix linting issues in examples
  • afe2f67 build(deps): bump google.golang.org/grpc from 1.72.0 to 1.72.1
  • 5971033 Merge pull request #357 from smallstep/dependabot/go_modules/golang.org/x/net-0.40.0
  • dee9d06 build(deps): bump golang.org/x/net from 0.39.0 to 0.40.0
  • 74a013b Merge pull request #356 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.63.0
  • 8796f4d build(deps): bump go.step.sm/crypto from 0.61.0 to 0.63.0
  • fd73e22 Merge pull request #355 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.72.0
  • f4143f7 build(deps): bump google.golang.org/grpc from 1.71.1 to 1.72.0
  • 365e0be Merge pull request #353 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.61.0
  • 0a248ce Merge pull request #354 from smallstep/dependabot/github_actions/softprops/action-gh-release-2.2.2
  • 8c8c586 build(deps): bump softprops/action-gh-release from 2.2.1 to 2.2.2
  • e12ea5e build(deps): bump go.step.sm/crypto from 0.60.0 to 0.61.0
  • aa9a8af Merge pull request #350 from smallstep/dependabot/go_modules/golang.org/x/net-0.39.0
  • 157860f build(deps): bump golang.org/x/net from 0.38.0 to 0.39.0
  • 2af9637 Merge pull request #349 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.71.1
  • 341d723 build(deps): bump google.golang.org/grpc from 1.71.0 to 1.71.1
  • 283d1d2 Merge pull request #348 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.60.0
  • f3c2e66 build(deps): bump go.step.sm/crypto from 0.59.1 to 0.60.0
  • 0ed792c Merge pull request #347 from smallstep/dependabot/go_modules/golang.org/x/net-0.38.0
  • a4cb288 build(deps): bump golang.org/x/net from 0.37.0 to 0.38.0
  • e0e1f05 Merge pull request #346 from smallstep/dependabot/go_modules/github.com/smallstep/certificates-0.28.3
  • 86c0f66 build(deps): bump github.com/smallstep/certificates

Thanks!

Those were the changes on v0.20.2-rc1!

Come join us on Discord to ask questions, chat about PKI, or get a sneak peak at the freshest PKI memes.

Autocert v0.20.2 (25-07-14)

Signatures and Checksums

autocert uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

COSIGN_EXPERIMENTAL=1 cosign verify-blob \
  --certificate ~/Downloads/autocert_linux_0.20.2_amd64.tar.gz.pem \
  --signature ~/Downloads/autocert_linux0.20.2_amd64.tar.gz.sig \
  ~/Downloads/autocert_linux0.20.2_amd64.tar.gz

The checksums.txt file (in the 'Assets' section below) contains a checksum for every artifact in the release.

Changelog

  • 4fec122 Merge pull request #367 from smallstep/dependabot/go_modules/github.com/go-chi/chi/v5-5.2.2
  • 48c57cb Merge pull request #370 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.67.0
  • 6677eb9 build(deps): bump go.step.sm/crypto from 0.66.0 to 0.67.0
  • 8952d7e build(deps): bump github.com/go-chi/chi/v5 from 5.2.1 to 5.2.2
  • 226c87d Merge pull request #366 from smallstep/dependabot/github_actions/softprops/action-gh-release-2.3.2
  • fda2040 build(deps): bump softprops/action-gh-release from 2.2.2 to 2.3.2
  • 929460d Merge pull request #364 from smallstep/dependabot/go_modules/golang.org/x/net-0.41.0
  • 22ec0e7 build(deps): bump golang.org/x/net from 0.40.0 to 0.41.0
  • 5f684e2 Merge pull request #365 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.73.0
  • c4a8f5d build(deps): bump google.golang.org/grpc from 1.72.2 to 1.73.0
  • 00ece25 Merge pull request #363 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.66.0
  • 6f1a454 build(deps): bump go.step.sm/crypto from 0.64.0 to 0.66.0
  • 78d294d Merge pull request #362 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.72.2
  • f21cfb0 build(deps): bump google.golang.org/grpc from 1.72.1 to 1.72.2
  • e964ef4 Merge pull request #360 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.64.0
  • 8f08392 build(deps): bump go.step.sm/crypto from 0.63.0 to 0.64.0
  • 2644499 Merge pull request #359 from smallstep/herman/fix-example-linting-issues
  • 96fc385 Fix linting issues in examples
  • afe2f67 build(deps): bump google.golang.org/grpc from 1.72.0 to 1.72.1
  • 5971033 Merge pull request #357 from smallstep/dependabot/go_modules/golang.org/x/net-0.40.0
  • dee9d06 build(deps): bump golang.org/x/net from 0.39.0 to 0.40.0
  • 74a013b Merge pull request #356 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.63.0
  • 8796f4d build(deps): bump go.step.sm/crypto from 0.61.0 to 0.63.0
  • fd73e22 Merge pull request #355 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.72.0
  • f4143f7 build(deps): bump google.golang.org/grpc from 1.71.1 to 1.72.0
  • 365e0be Merge pull request #353 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.61.0
  • 0a248ce Merge pull request #354 from smallstep/dependabot/github_actions/softprops/action-gh-release-2.2.2
  • 8c8c586 build(deps): bump softprops/action-gh-release from 2.2.1 to 2.2.2
  • e12ea5e build(deps): bump go.step.sm/crypto from 0.60.0 to 0.61.0
  • aa9a8af Merge pull request #350 from smallstep/dependabot/go_modules/golang.org/x/net-0.39.0
  • 157860f build(deps): bump golang.org/x/net from 0.38.0 to 0.39.0
  • 2af9637 Merge pull request #349 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.71.1
  • 341d723 build(deps): bump google.golang.org/grpc from 1.71.0 to 1.71.1
  • 283d1d2 Merge pull request #348 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.60.0
  • f3c2e66 build(deps): bump go.step.sm/crypto from 0.59.1 to 0.60.0
  • 0ed792c Merge pull request #347 from smallstep/dependabot/go_modules/golang.org/x/net-0.38.0
  • a4cb288 build(deps): bump golang.org/x/net from 0.37.0 to 0.38.0
  • e0e1f05 Merge pull request #346 from smallstep/dependabot/go_modules/github.com/smallstep/certificates-0.28.3
  • 86c0f66 build(deps): bump github.com/smallstep/certificates

Thanks!

Those were the changes on v0.20.2!

Come join us on Discord to ask questions, chat about PKI, or get a sneak peak at the freshest PKI memes.

Autocert v0.20.1-rc4 (25-03-18)

Signatures and Checksums

autocert uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

COSIGN_EXPERIMENTAL=1 cosign verify-blob \
  --certificate ~/Downloads/autocert_linux_0.20.1-rc4_amd64.tar.gz.pem \
  --signature ~/Downloads/autocert_linux0.20.1-rc4_amd64.tar.gz.sig \
  ~/Downloads/autocert_linux0.20.1-rc4_amd64.tar.gz

The checksums.txt file (in the 'Assets' section below) contains a checksum for every artifact in the release.

Changelog

  • deebf9a empty commit
  • d306f63 Merge pull request #341 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.59.1
  • 664a150 build(deps): bump go.step.sm/crypto from 0.59.0 to 0.59.1
  • 1896188 Merge pull request #343 from smallstep/dependabot/go_modules/golang.org/x/net-0.37.0
  • f07cab3 build(deps): bump golang.org/x/net from 0.35.0 to 0.37.0
  • eae2a64 Merge pull request #339 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.71.0
  • 015fe4d build(deps): bump google.golang.org/grpc from 1.70.0 to 1.71.0
  • 10534c3 Merge pull request #338 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.59.0
  • f88e0f0 build(deps): bump go.step.sm/crypto from 0.58.0 to 0.59.0
  • b272d34 Merge pull request #337 from smallstep/dependabot/go_modules/github.com/smallstep/cli-utils-0.12.1
  • 36f71b1 build(deps): bump github.com/smallstep/cli-utils from 0.10.0 to 0.12.1
  • f1c6458 Merge pull request #336 from smallstep/dependabot/go_modules/github.com/go-jose/go-jose/v3-3.0.4
  • aa9a51a build(deps): bump github.com/go-jose/go-jose/v3 from 3.0.3 to 3.0.4
  • ac8fa05 Merge pull request #335 from smallstep/dependabot/go_modules/github.com/go-jose/go-jose/v4-4.0.5
  • 60a286e build(deps): bump github.com/go-jose/go-jose/v4 from 4.0.2 to 4.0.5
  • 1c1c99d Merge pull request #332 from smallstep/dependabot/go_modules/k8s.io/api-0.33.0-alpha.2
  • 0d2da32 build(deps): bump k8s.io/api from 0.32.0-alpha.0 to 0.33.0-alpha.2
  • fc8bbe1 Merge pull request #331 from smallstep/dependabot/go_modules/k8s.io/apimachinery-0.33.0-alpha.2
  • 49a27a9 build(deps): bump k8s.io/apimachinery
  • 3774c48 Merge pull request #333 from smallstep/dependabot/go_modules/github.com/smallstep/certificates-0.28.2
  • f454044 build(deps): bump github.com/smallstep/certificates
  • d55beec Merge pull request #334 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.58.0
  • b31f3bc Use Go 1.23 and run go mod tidy
  • be39a67 build(deps): bump go.step.sm/crypto from 0.57.1 to 0.58.0
  • 3c488bc Merge pull request #330 from smallstep/dependabot/go_modules/golang.org/x/net-0.35.0
  • b15e3b9 build(deps): bump golang.org/x/net from 0.34.0 to 0.35.0
  • 3fe24cc Merge pull request #327 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.57.1
  • 74c3670 build(deps): bump go.step.sm/crypto from 0.57.0 to 0.57.1
  • ed40d84 Merge pull request #325 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.70.0
  • ef16513 build(deps): bump google.golang.org/grpc from 1.69.4 to 1.70.0
  • b69d70c Merge pull request #326 from smallstep/dependabot/go_modules/github.com/golang/glog-1.2.4
  • 0763dd8 build(deps): bump github.com/golang/glog from 1.2.2 to 1.2.4
  • d425590 Merge pull request #323 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.57.0
  • c1d3c50 build(deps): bump go.step.sm/crypto from 0.56.0 to 0.57.0
  • bdfba60 Merge pull request #324 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.69.4
  • d998d11 build(deps): bump google.golang.org/grpc from 1.69.2 to 1.69.4
  • f39dbb1 Merge pull request #321 from smallstep/dependabot/go_modules/golang.org/x/net-0.34.0
  • 06db4fe Merge pull request #322 from smallstep/dependabot/github_actions/softprops/action-gh-release-2.2.1
  • 19db1da build(deps): bump softprops/action-gh-release from 2.2.0 to 2.2.1
  • 1017219 build(deps): bump golang.org/x/net from 0.33.0 to 0.34.0
  • fdd29c6 Merge pull request #319 from smallstep/dependabot/go_modules/golang.org/x/net-0.33.0
  • 0b75e1c build(deps): bump golang.org/x/net from 0.32.0 to 0.33.0
  • 186603e Merge pull request #318 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.69.2
  • fa54028 build(deps): bump google.golang.org/grpc from 1.69.0 to 1.69.2
  • d2660e1 Merge pull request #320 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.56.0
  • ffe5e52 build(deps): bump go.step.sm/crypto from 0.55.0 to 0.56.0
  • 9e763bc Merge pull request #316 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.69.0
  • 63ef3c7 Merge pull request #317 from smallstep/dependabot/go_modules/golang.org/x/crypto-0.31.0
  • 1330879 build(deps): bump golang.org/x/crypto from 0.30.0 to 0.31.0
  • 10d9180 Merge pull request #315 from smallstep/dependabot/github_actions/softprops/action-gh-release-2.2.0
  • ec3e097 build(deps): bump google.golang.org/grpc from 1.68.1 to 1.69.0
  • 4e6dd8e build(deps): bump softprops/action-gh-release from 2.1.0 to 2.2.0
  • 6827cb0 Merge pull request #313 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.68.1
  • ce19e89 build(deps): bump google.golang.org/grpc from 1.67.1 to 1.68.1
  • 3ca0ef8 Merge pull request #314 from smallstep/dependabot/go_modules/golang.org/x/net-0.32.0
  • aa0af60 build(deps): bump golang.org/x/net from 0.31.0 to 0.32.0
  • 8ceedfa Merge pull request #312 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.55.0
  • fa4bde5 build(deps): bump go.step.sm/crypto from 0.54.2 to 0.55.0

Thanks!

Those were the changes on v0.20.1-rc4!

Come join us on Discord to ask questions, chat about PKI, or get a sneak peak at the freshest PKI memes.

Autocert v0.20.1 (25-03-18)

Signatures and Checksums

autocert uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

COSIGN_EXPERIMENTAL=1 cosign verify-blob \
  --certificate ~/Downloads/autocert_linux_0.20.1_amd64.tar.gz.pem \
  --signature ~/Downloads/autocert_linux0.20.1_amd64.tar.gz.sig \
  ~/Downloads/autocert_linux0.20.1_amd64.tar.gz

The checksums.txt file (in the 'Assets' section below) contains a checksum for every artifact in the release.

Changelog

  • d306f63 Merge pull request #341 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.59.1
  • 664a150 build(deps): bump go.step.sm/crypto from 0.59.0 to 0.59.1
  • 1896188 Merge pull request #343 from smallstep/dependabot/go_modules/golang.org/x/net-0.37.0
  • f07cab3 build(deps): bump golang.org/x/net from 0.35.0 to 0.37.0
  • eae2a64 Merge pull request #339 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.71.0
  • 015fe4d build(deps): bump google.golang.org/grpc from 1.70.0 to 1.71.0
  • 10534c3 Merge pull request #338 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.59.0
  • f88e0f0 build(deps): bump go.step.sm/crypto from 0.58.0 to 0.59.0
  • b272d34 Merge pull request #337 from smallstep/dependabot/go_modules/github.com/smallstep/cli-utils-0.12.1
  • 36f71b1 build(deps): bump github.com/smallstep/cli-utils from 0.10.0 to 0.12.1
  • f1c6458 Merge pull request #336 from smallstep/dependabot/go_modules/github.com/go-jose/go-jose/v3-3.0.4
  • aa9a51a build(deps): bump github.com/go-jose/go-jose/v3 from 3.0.3 to 3.0.4
  • ac8fa05 Merge pull request #335 from smallstep/dependabot/go_modules/github.com/go-jose/go-jose/v4-4.0.5
  • 60a286e build(deps): bump github.com/go-jose/go-jose/v4 from 4.0.2 to 4.0.5
  • 1c1c99d Merge pull request #332 from smallstep/dependabot/go_modules/k8s.io/api-0.33.0-alpha.2
  • 0d2da32 build(deps): bump k8s.io/api from 0.32.0-alpha.0 to 0.33.0-alpha.2
  • fc8bbe1 Merge pull request #331 from smallstep/dependabot/go_modules/k8s.io/apimachinery-0.33.0-alpha.2
  • 49a27a9 build(deps): bump k8s.io/apimachinery
  • 3774c48 Merge pull request #333 from smallstep/dependabot/go_modules/github.com/smallstep/certificates-0.28.2
  • f454044 build(deps): bump github.com/smallstep/certificates
  • d55beec Merge pull request #334 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.58.0
  • b31f3bc Use Go 1.23 and run go mod tidy
  • be39a67 build(deps): bump go.step.sm/crypto from 0.57.1 to 0.58.0
  • 3c488bc Merge pull request #330 from smallstep/dependabot/go_modules/golang.org/x/net-0.35.0
  • b15e3b9 build(deps): bump golang.org/x/net from 0.34.0 to 0.35.0
  • 3fe24cc Merge pull request #327 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.57.1
  • 74c3670 build(deps): bump go.step.sm/crypto from 0.57.0 to 0.57.1
  • ed40d84 Merge pull request #325 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.70.0
  • ef16513 build(deps): bump google.golang.org/grpc from 1.69.4 to 1.70.0
  • b69d70c Merge pull request #326 from smallstep/dependabot/go_modules/github.com/golang/glog-1.2.4
  • 0763dd8 build(deps): bump github.com/golang/glog from 1.2.2 to 1.2.4
  • d425590 Merge pull request #323 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.57.0
  • c1d3c50 build(deps): bump go.step.sm/crypto from 0.56.0 to 0.57.0
  • bdfba60 Merge pull request #324 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.69.4
  • d998d11 build(deps): bump google.golang.org/grpc from 1.69.2 to 1.69.4
  • f39dbb1 Merge pull request #321 from smallstep/dependabot/go_modules/golang.org/x/net-0.34.0
  • 06db4fe Merge pull request #322 from smallstep/dependabot/github_actions/softprops/action-gh-release-2.2.1
  • 19db1da build(deps): bump softprops/action-gh-release from 2.2.0 to 2.2.1
  • 1017219 build(deps): bump golang.org/x/net from 0.33.0 to 0.34.0
  • fdd29c6 Merge pull request #319 from smallstep/dependabot/go_modules/golang.org/x/net-0.33.0
  • 0b75e1c build(deps): bump golang.org/x/net from 0.32.0 to 0.33.0
  • 186603e Merge pull request #318 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.69.2
  • fa54028 build(deps): bump google.golang.org/grpc from 1.69.0 to 1.69.2
  • d2660e1 Merge pull request #320 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.56.0
  • ffe5e52 build(deps): bump go.step.sm/crypto from 0.55.0 to 0.56.0
  • 9e763bc Merge pull request #316 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.69.0
  • 63ef3c7 Merge pull request #317 from smallstep/dependabot/go_modules/golang.org/x/crypto-0.31.0
  • 1330879 build(deps): bump golang.org/x/crypto from 0.30.0 to 0.31.0
  • 10d9180 Merge pull request #315 from smallstep/dependabot/github_actions/softprops/action-gh-release-2.2.0
  • ec3e097 build(deps): bump google.golang.org/grpc from 1.68.1 to 1.69.0
  • 4e6dd8e build(deps): bump softprops/action-gh-release from 2.1.0 to 2.2.0
  • 6827cb0 Merge pull request #313 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.68.1
  • ce19e89 build(deps): bump google.golang.org/grpc from 1.67.1 to 1.68.1
  • 3ca0ef8 Merge pull request #314 from smallstep/dependabot/go_modules/golang.org/x/net-0.32.0
  • aa0af60 build(deps): bump golang.org/x/net from 0.31.0 to 0.32.0
  • 8ceedfa Merge pull request #312 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.55.0
  • fa4bde5 build(deps): bump go.step.sm/crypto from 0.54.2 to 0.55.0

Thanks!

Those were the changes on v0.20.1!

Come join us on Discord to ask questions, chat about PKI, or get a sneak peak at the freshest PKI memes.