Release v0.63.0

What's Changed

• Allow locating certificates using issuer + subject CN in CAPI KMS. by @joshdrake in #696
• Add support for rsa.PSSSaltLengthAuto on capi by @maraino in #762

Dependencies:

• Bump go.uber.org/mock from 0.5.1 to 0.5.2 by @dependabot in #760
• Bump google.golang.org/api from 0.229.0 to 0.230.0 by @dependabot in #759
• Bump github.com/google/go-tpm from 0.9.3 to 0.9.4 by @dependabot in #761

Full Changelog: v0.62.0...v0.63.0

Release v0.62.0

What's Changed

• Extract public key from private by @maraino in #758

Dependencies:

• Bump google.golang.org/grpc from 1.71.1 to 1.72.0 by @dependabot in #756
• Bump cloud.google.com/go/kms from 1.21.1 to 1.21.2 by @dependabot in #757

Full Changelog: v0.61.0...v0.62.0

Release v0.61.0

What's Changed

• Fix templates with policies with Go 1.24 by @maraino in #744

Dependencies:

• Bump golang.org/x/net from 0.37.0 to 0.38.0 by @dependabot in #742
• Bump modernc.org/sqlite from 1.36.2 to 1.37.0 by @dependabot in #741
• Bump google.golang.org/api from 0.227.0 to 0.228.0 by @dependabot in #740
• Bump github.com/aws/aws-sdk-go-v2/config from 1.29.10 to 1.29.12 by @dependabot in #739
• Add a methods to verify Google's CloudHSM attestations by @maraino in #720
• Bump github.com/aws/aws-sdk-go-v2/service/kms from 1.38.1 to 1.38.2 by @dependabot in #745
• Bump go.uber.org/mock from 0.5.0 to 0.5.1 by @dependabot in #747
• Bump google.golang.org/grpc from 1.71.0 to 1.71.1 by @dependabot in #749
• Bump github.com/aws/aws-sdk-go-v2/config from 1.29.12 to 1.29.13 by @dependabot in #750
• Bump github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.17.1 to 1.18.0 by @dependabot in #746
• Bump golang.org/x/crypto from 0.36.0 to 0.37.0 by @dependabot in #748
• Bump golang.org/x/net from 0.38.0 to 0.39.0 by @dependabot in #755
• Bump github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.8.2 to 1.9.0 by @dependabot in #754
• Bump github.com/aws/aws-sdk-go-v2/config from 1.29.13 to 1.29.14 by @dependabot in #752
• Bump github.com/aws/aws-sdk-go-v2/service/kms from 1.38.2 to 1.38.3 by @dependabot in #751
• Bump google.golang.org/api from 0.228.0 to 0.229.0 by @dependabot in #753

Full Changelog: v0.60.0...v0.61.0

Release v0.60.0

What's Changed

• Add support for tokens with no pins by @maraino in #730

Dependencies:

• Bump github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.17.0 to 1.17.1 by @dependabot in #737
• Bump modernc.org/sqlite from 1.36.1 to 1.36.2 by @dependabot in #736
• Bump google.golang.org/protobuf from 1.36.5 to 1.36.6 by @dependabot in #733
• Bump github.com/aws/aws-sdk-go-v2/config from 1.29.9 to 1.29.10 by @dependabot in #734
• Bump google.golang.org/api from 0.226.0 to 0.227.0 by @dependabot in #735

Full Changelog: v0.59.2...v0.60.0

Release v0.59.2

What's Changed

• Fix open files with a full path in softkms by @maraino in #732

Dependencies

• Bump golang.org/x/sys from 0.30.0 to 0.31.0 by @dependabot in #723
• Bump github.com/aws/aws-sdk-go-v2/config from 1.29.6 to 1.29.9 by @dependabot in #722
• Bump github.com/aws/aws-sdk-go-v2/service/kms from 1.37.18 to 1.38.1 by @dependabot in #725
• Bump golang.org/x/crypto from 0.35.0 to 0.36.0 by @dependabot in #721
• Bump golang.org/x/net from 0.35.0 to 0.37.0 by @dependabot in #724
• Bump google.golang.org/grpc from 1.70.0 to 1.71.0 by @dependabot in #729
• Bump google.golang.org/api from 0.223.0 to 0.226.0 by @dependabot in #728
• Bump modernc.org/sqlite from 1.36.0 to 1.36.1 by @dependabot in #726
• Bump cloud.google.com/go/kms from 1.21.0 to 1.21.1 by @dependabot in #727
• Bump github.com/golang-jwt/jwt/v5 from 5.2.1 to 5.2.2 by @dependabot in #731

Full Changelog: v0.59.1...v0.59.2

Release v0.59.1

What's Changed

• Fix uint32 casting on linux/arm by @hslatman in #714
• Bump modernc.org/sqlite from 1.35.0 to 1.36.0 by @dependabot in #718
• Bump github.com/google/go-tpm-tools from 0.4.4 to 0.4.5 by @dependabot in #719
• Bump cloud.google.com/go/kms from 1.20.5 to 1.21.0 by @dependabot in #715
• Bump google.golang.org/api from 0.221.0 to 0.223.0 by @dependabot in #716
• Bump golang.org/x/crypto from 0.33.0 to 0.35.0 by @dependabot in #717

Full Changelog: v0.59.0...v0.59.1

Release v0.59.0

What's Changed

• Bump github.com/go-jose/go-jose/v3 from 3.0.3 to 3.0.4 by @dependabot in #712
• Add WithMinLenPasswordFile pemutil option by @dopey in #711

Full Changelog: v0.58.1...v0.59.0

Release v0.58.1

What's Changed

• Use utf8 string for private key subject with non-printable characters by @areed in #710

Full Changelog: v0.58.0...v0.58.1

Release v0.58.0

What's Changed

• Add nssdb package by @areed in #690
• Replace conflicting nssdb objects by @areed in #695
• Fix gosec (and other) linter issues and remove smallstep/assert by @hslatman in #704
• Use SHA-256 for subject key id on FIPS 140-3 mode by @maraino in #703
• Add CreateDecrypter support to AWS KMS by @hslatman in #702

Dependencies

• Bump google.golang.org/protobuf from 1.36.3 to 1.36.4 by @dependabot in #694
• Bump github.com/aws/aws-sdk-go-v2/service/kms from 1.37.14 to 1.37.16 by @dependabot in #693
• Bump github.com/aws/aws-sdk-go-v2/config from 1.29.2 to 1.29.4 by @dependabot in #691
• Bump google.golang.org/api from 0.218.0 to 0.219.0 by @dependabot in #692
• Bump golang.org/x/sys from 0.29.0 to 0.30.0 by @dependabot in #699
• Bump golang.org/x/net from 0.34.0 to 0.35.0 by @dependabot in #697
• Bump github.com/aws/aws-sdk-go-v2/service/kms from 1.37.16 to 1.37.18 by @dependabot in #698
• Bump google.golang.org/api from 0.219.0 to 0.220.0 by @dependabot in #700
• Bump github.com/aws/aws-sdk-go-v2/config from 1.29.4 to 1.29.6 by @dependabot in #709
• Bump modernc.org/sqlite from 1.34.5 to 1.35.0 by @dependabot in #707
• Bump github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.8.1 to 1.8.2 by @dependabot in #705
• Bump google.golang.org/protobuf from 1.36.4 to 1.36.5 by @dependabot in #706
• Bump google.golang.org/api from 0.220.0 to 0.221.0 by @dependabot in #708

Full Changelog: v0.57.1...v0.58.0

Release v0.57.1

What's Changed

• Bump google.golang.org/api from 0.216.0 to 0.217.0 by @dependabot in #679
• Bump github.com/aws/aws-sdk-go-v2/service/kms from 1.37.8 to 1.37.13 by @dependabot in #678
• Bump google.golang.org/protobuf from 1.36.2 to 1.36.3 by @dependabot in #680
• Bump github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.8.0 to 1.8.1 by @dependabot in #681
• Bump github.com/aws/aws-sdk-go-v2/config from 1.28.10 to 1.29.1 by @dependabot in #682
• Fix flaky behavior for tests using sprig's dateInZone by @hslatman in #683
• Bump cloud.google.com/go/kms from 1.20.4 to 1.20.5 by @dependabot in #688
• Bump google.golang.org/grpc from 1.69.4 to 1.70.0 by @dependabot in #687
• Bump github.com/aws/aws-sdk-go-v2/config from 1.29.1 to 1.29.2 by @dependabot in #686
• Bump google.golang.org/api from 0.217.0 to 0.218.0 by @dependabot in #685
• Bump github.com/aws/aws-sdk-go-v2/service/kms from 1.37.13 to 1.37.14 by @dependabot in #684
• Extend jose.NewSigner support for other types by @maraino in #689

Full Changelog: v0.57.0...v0.57.1