Autocert v0.20.2-rc1 (25-07-14)

Signatures and Checksums

autocert uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

COSIGN_EXPERIMENTAL=1 cosign verify-blob \
  --certificate ~/Downloads/autocert_linux_0.20.2-rc1_amd64.tar.gz.pem \
  --signature ~/Downloads/autocert_linux0.20.2-rc1_amd64.tar.gz.sig \
  ~/Downloads/autocert_linux0.20.2-rc1_amd64.tar.gz

The checksums.txt file (in the 'Assets' section below) contains a checksum for every artifact in the release.

Changelog

• 19e53f7 empty commit
• 4fec122 Merge pull request #367 from smallstep/dependabot/go_modules/github.com/go-chi/chi/v5-5.2.2
• 48c57cb Merge pull request #370 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.67.0
• 6677eb9 build(deps): bump go.step.sm/crypto from 0.66.0 to 0.67.0
• 8952d7e build(deps): bump github.com/go-chi/chi/v5 from 5.2.1 to 5.2.2
• 226c87d Merge pull request #366 from smallstep/dependabot/github_actions/softprops/action-gh-release-2.3.2
• fda2040 build(deps): bump softprops/action-gh-release from 2.2.2 to 2.3.2
• 929460d Merge pull request #364 from smallstep/dependabot/go_modules/golang.org/x/net-0.41.0
• 22ec0e7 build(deps): bump golang.org/x/net from 0.40.0 to 0.41.0
• 5f684e2 Merge pull request #365 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.73.0
• c4a8f5d build(deps): bump google.golang.org/grpc from 1.72.2 to 1.73.0
• 00ece25 Merge pull request #363 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.66.0
• 6f1a454 build(deps): bump go.step.sm/crypto from 0.64.0 to 0.66.0
• 78d294d Merge pull request #362 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.72.2
• f21cfb0 build(deps): bump google.golang.org/grpc from 1.72.1 to 1.72.2
• e964ef4 Merge pull request #360 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.64.0
• 8f08392 build(deps): bump go.step.sm/crypto from 0.63.0 to 0.64.0
• 2644499 Merge pull request #359 from smallstep/herman/fix-example-linting-issues
• 96fc385 Fix linting issues in examples
• afe2f67 build(deps): bump google.golang.org/grpc from 1.72.0 to 1.72.1
• 5971033 Merge pull request #357 from smallstep/dependabot/go_modules/golang.org/x/net-0.40.0
• dee9d06 build(deps): bump golang.org/x/net from 0.39.0 to 0.40.0
• 74a013b Merge pull request #356 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.63.0
• 8796f4d build(deps): bump go.step.sm/crypto from 0.61.0 to 0.63.0
• fd73e22 Merge pull request #355 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.72.0
• f4143f7 build(deps): bump google.golang.org/grpc from 1.71.1 to 1.72.0
• 365e0be Merge pull request #353 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.61.0
• 0a248ce Merge pull request #354 from smallstep/dependabot/github_actions/softprops/action-gh-release-2.2.2
• 8c8c586 build(deps): bump softprops/action-gh-release from 2.2.1 to 2.2.2
• e12ea5e build(deps): bump go.step.sm/crypto from 0.60.0 to 0.61.0
• aa9a8af Merge pull request #350 from smallstep/dependabot/go_modules/golang.org/x/net-0.39.0
• 157860f build(deps): bump golang.org/x/net from 0.38.0 to 0.39.0
• 2af9637 Merge pull request #349 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.71.1
• 341d723 build(deps): bump google.golang.org/grpc from 1.71.0 to 1.71.1
• 283d1d2 Merge pull request #348 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.60.0
• f3c2e66 build(deps): bump go.step.sm/crypto from 0.59.1 to 0.60.0
• 0ed792c Merge pull request #347 from smallstep/dependabot/go_modules/golang.org/x/net-0.38.0
• a4cb288 build(deps): bump golang.org/x/net from 0.37.0 to 0.38.0
• e0e1f05 Merge pull request #346 from smallstep/dependabot/go_modules/github.com/smallstep/certificates-0.28.3
• 86c0f66 build(deps): bump github.com/smallstep/certificates

Thanks!

Those were the changes on v0.20.2-rc1!

Come join us on Discord to ask questions, chat about PKI, or get a sneak peak at the freshest PKI memes.