Autocert v0.20.3 (25-12-03)
Signatures and Checksums
autocert uses sigstore/cosign for signing and verifying release artifacts.
Below is an example using cosign to verify a release artifact:
COSIGN_EXPERIMENTAL=1 cosign verify-blob \
--certificate ~/Downloads/autocert_linux_0.20.3_amd64.tar.gz.pem \
--signature ~/Downloads/autocert_linux0.20.3_amd64.tar.gz.sig \
~/Downloads/autocert_linux0.20.3_amd64.tar.gz
The checksums.txt file (in the 'Assets' section below) contains a checksum for every artifact in the release.
Changelog
- e51d243 Merge pull request #408 from smallstep/dependabot/go_modules/golang.org/x/crypto-0.45.0
- 42712a5 build(deps): bump golang.org/x/crypto from 0.43.0 to 0.45.0
- c91b949 Merge pull request #410 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.77.0
- 1f30d8f build(deps): bump google.golang.org/grpc from 1.76.0 to 1.77.0
- 8460f84 Merge pull request #405 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.74.0
- 062aa5b build(deps): bump go.step.sm/crypto from 0.73.0 to 0.74.0
- e4b2eba Merge pull request #407 from smallstep/dependabot/github_actions/softprops/action-gh-release-2.4.2
- 47add74 build(deps): bump softprops/action-gh-release from 2.4.1 to 2.4.2
- d6abd57 Merge pull request #403 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.73.0
- 4dda1bc build(deps): bump go.step.sm/crypto from 0.70.0 to 0.73.0
- 6a1550d Merge pull request #400 from smallstep/dependabot/go_modules/github.com/slackhq/nebula-1.9.7
- 7898fd6 build(deps): bump github.com/slackhq/nebula from 1.9.5 to 1.9.7
- 6e8ee42 Merge pull request #399 from smallstep/dependabot/go_modules/github.com/smallstep/cli-utils-0.12.2
- 15f66f5 build(deps): bump github.com/smallstep/cli-utils from 0.12.1 to 0.12.2
- 6cc12d0 Merge pull request #397 from smallstep/dependabot/github_actions/softprops/action-gh-release-2.4.1
- 30f362d Merge pull request #393 from smallstep/dependabot/go_modules/golang.org/x/net-0.46.0
- e065157 build(deps): bump golang.org/x/net from 0.44.0 to 0.46.0
- 67d6af7 Merge pull request #396 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.76.0
- e069a12 build(deps): bump softprops/action-gh-release from 2.3.4 to 2.4.1
- 3ca773c build(deps): bump google.golang.org/grpc from 1.75.1 to 1.76.0
- 2a3e211 Merge pull request #392 from smallstep/dependabot/github_actions/softprops/action-gh-release-2.3.4
- 2b93af4 build(deps): bump softprops/action-gh-release from 2.3.3 to 2.3.4
- af6e0c3 Merge pull request #391 from smallstep/dependabot/go_modules/golang.org/x/net-0.44.0
- 24aa2d1 build(deps): bump golang.org/x/net from 0.43.0 to 0.44.0
- 4b6baf8 Merge pull request #390 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.75.1
- abc3ae1 build(deps): bump google.golang.org/grpc from 1.75.0 to 1.75.1
- 9e1f602 Merge pull request #389 from smallstep/dependabot/github_actions/softprops/action-gh-release-2.3.3
- 45dfbfa build(deps): bump softprops/action-gh-release from 2.3.2 to 2.3.3
- 26f1a2a Merge pull request #383 from smallstep/dependabot/go_modules/k8s.io/api-0.35.0-alpha.0
- c16eade build(deps): bump k8s.io/api from 0.33.0-alpha.2 to 0.35.0-alpha.0
- 52d2243 Merge pull request #384 from smallstep/dependabot/go_modules/k8s.io/apimachinery-0.35.0-alpha.0
- 4f926e0 Merge pull request #388 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.70.0
- 3d70876 build(deps): bump k8s.io/apimachinery
- 9f5e88b build(deps): bump go.step.sm/crypto from 0.69.0 to 0.70.0
- a2f8b6b Merge pull request #387 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.75.0
- 7614120 build(deps): bump google.golang.org/grpc from 1.74.2 to 1.75.0
- afac7f5 Merge pull request #385 from smallstep/dependabot/go_modules/golang.org/x/net-0.43.0
- fb660e5 build(deps): bump golang.org/x/net from 0.42.0 to 0.43.0
- 1841ae6 Merge pull request #386 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.69.0
- cfa8936 build(deps): bump go.step.sm/crypto from 0.68.0 to 0.69.0
- ca611a3 Merge pull request #382 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.68.0
- 9db9fe9 build(deps): bump go.step.sm/crypto from 0.67.0 to 0.68.0
- 9597ce0 Merge pull request #380 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.74.2
- 9a1ba4e Merge pull request #381 from smallstep/dependabot/go_modules/sigs.k8s.io/yaml-1.6.0
- 1650195 build(deps): bump sigs.k8s.io/yaml from 1.5.0 to 1.6.0
- 65e7309 build(deps): bump google.golang.org/grpc from 1.73.0 to 1.74.2
- ce3ffdb Merge pull request #377 from smallstep/dependabot/go_modules/golang.org/x/net-0.42.0
- 90d5cc8 build(deps): bump golang.org/x/net from 0.41.0 to 0.42.0
- e1a7aea Merge pull request #374 from smallstep/dependabot/go_modules/github.com/smallstep/certificates-0.28.4
- 3fd7946 build(deps): bump github.com/smallstep/certificates
- 35883f6 Merge pull request #371 from smallstep/dependabot/go_modules/sigs.k8s.io/yaml-1.5.0
- 7075216 build(deps): bump sigs.k8s.io/yaml from 1.4.0 to 1.5.0
Thanks!
Those were the changes on v0.20.3!
Come join us on Discord to ask questions, chat about PKI, or get a sneak peak at the freshest PKI memes.