Update changelog for release (#1020)

* Update changelog for release
* Bump certificates to v0.25.0

Author: dopey

CHANGELOG.md

@@ -26,46 +26,54 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
 
 ---
 
-## [Unreleased]
+## [v0.25.0] - 2023-09-26
 
 ### Added
 
 - Add support for provisioner claim `disableSmallstepExtensions`
-  (smallstep/cli#986).
-- Add support for PowerShell plugins on Windows (smallstep/certificates#992).
-- Create API token using team slug (smallstep/cli#980).
-- Detect OIDC tokens issued by Kubernetes (smallstep/cli#953).
+  (smallstep/cli#986)
+- Add support for PowerShell plugins on Windows (smallstep/cli#992)
+- Create API token using team slug (smallstep/cli#980)
+- Detect OIDC tokens issued by Kubernetes (smallstep/cli#953)
 - Add support for Smallstep Managed Endpoint X509 extension
-  (smallstep/cli#989).
+  (smallstep/cli#989)
 - Support signing a certificate for a private key that can only be used for 
   encryption with the `--skip-csr-signature` flag in `step certificate create`. 
   Some KMSs restrict key usage to a single type of cryptographic operation. 
   This blocks RSA decryption keys from being used to sign a CSR for their public 
   key. Using the `--skip-csr-signature` flag, the public key is used directly 
   with a certificate template, removing the need for the CSR signature.
 - Add all AWS identity document certificates (smallstep/certificates#1510)
+- Add SCEP decrypter configuration flags (smallstep/cli#950)
+- Add detection of OIDC tokens issued by Kubernetes (smallstep/cli#953)
+- Add unversioned release artifacts to build (smallstep/cli#965)
 
 ### Changed
 
-- Increase PBKDF2 iterations to 600k (smallstep/cli#949).
-- `--kms` flag is no longer used for the CA (signing) key for `step certificate create`. It was replaced by the `--ca-kms` flag (smallstep/cli#942).
+- Increase PBKDF2 iterations to 600k (smallstep/cli#949)
+- `--kms` flag is no longer used for the CA (signing) key for 
+`step certificate create`. It was replaced by the `--ca-kms` flag 
+(smallstep/cli#942).
+- Hide `step oauth command` on failure (smallstep/cli#993)
 
 ### Fixed
 
 - Look for Windows plugins with executable extensions
   (smallstep/certificates#976)
-- Fix empty ca.json with invalid template data (smallstep/certificates#1501).
-- Fix interactive prompt on docker builds (smallstep/cli#963).
+- Fix empty ca.json with invalid template data (smallstep/certificates#1501)
+- Fix interactive prompt on docker builds (smallstep/cli#963)
 - `step certificate fingerprint` correctly parse PEM files with non-PEM header
   (smallstep/crypto#311)
 - `step certificate format` correctly parse PEM files with non-PEM header
   (smallstep/cli#1006)
+- Fix TOFU flag in `ca provisioner update` (smallstep/cli#941)
+- Make `--team` incompatible with `--fingerprint` and `--ca-url` in 
+  `step ca bootstrap (smallstep/cli#1017)
 
 ### Remove
 
 - Remove automatic creation of the step path (smallstep/certificates#991)
 
-
 ## [v0.24.4] - 2023-05-11
 
 ### Added

go.mod

@@ -15,7 +15,7 @@ require (
 	github.com/pquerna/otp v1.4.0
 	github.com/slackhq/nebula v1.6.1
 	github.com/smallstep/assert v0.0.0-20200723003110-82e2b9b3b262
-	github.com/smallstep/certificates v0.24.3-rc.5.0.20230926202547-f9db22d3117c
+	github.com/smallstep/certificates v0.25.0
 	github.com/smallstep/certinfo v1.12.0
 	github.com/smallstep/go-attestation v0.4.4-0.20230627102604-cf579e53cbd2
 	github.com/smallstep/truststore v0.12.1

go.sum

@@ -351,8 +351,8 @@ github.com/slackhq/nebula v1.6.1 h1:/OCTR3abj0Sbf2nGoLUrdDXImrCv0ZVFpVPP5qa0DsM=
 github.com/slackhq/nebula v1.6.1/go.mod h1:UmkqnXe4O53QwToSl/gG7sM4BroQwAB7dd4hUaT6MlI=
 github.com/smallstep/assert v0.0.0-20200723003110-82e2b9b3b262 h1:unQFBIznI+VYD1/1fApl1A+9VcBk+9dcqGfnePY87LY=
 github.com/smallstep/assert v0.0.0-20200723003110-82e2b9b3b262/go.mod h1:MyOHs9Po2fbM1LHej6sBUT8ozbxmMOFG+E+rx/GSGuc=
-github.com/smallstep/certificates v0.24.3-rc.5.0.20230926202547-f9db22d3117c h1:SL6aWjPd5o3qM2YPiwfc5s4O5X/jd7QbYmPzGTc4TxQ=
-github.com/smallstep/certificates v0.24.3-rc.5.0.20230926202547-f9db22d3117c/go.mod h1:thJmekMKUplKYip+la99Lk4IwQej/oVH/zS9PVMagEE=
+github.com/smallstep/certificates v0.25.0 h1:WWihtjQ7SprnRxDV44mBp8t5SMsNO5EWsQaEwy1rgFg=
+github.com/smallstep/certificates v0.25.0/go.mod h1:thJmekMKUplKYip+la99Lk4IwQej/oVH/zS9PVMagEE=
 github.com/smallstep/certinfo v1.12.0 h1://wFrL/oiFvyFinnFg9siOlccaKuae4kGITdsR0kryk=
 github.com/smallstep/certinfo v1.12.0/go.mod h1:paO7ecrG1zFy+c8vw+8/Qy9TRA/R7ImAb8+/eOzWrmg=
 github.com/smallstep/go-attestation v0.4.4-0.20230627102604-cf579e53cbd2 h1:UIAS8DTWkeclraEGH2aiJPyNPu16VbT41w4JoBlyFfU=