Autocert v0.20.1-rc4 (25-03-18)

Signatures and Checksums

autocert uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

COSIGN_EXPERIMENTAL=1 cosign verify-blob \
  --certificate ~/Downloads/autocert_linux_0.20.1-rc4_amd64.tar.gz.pem \
  --signature ~/Downloads/autocert_linux0.20.1-rc4_amd64.tar.gz.sig \
  ~/Downloads/autocert_linux0.20.1-rc4_amd64.tar.gz

The checksums.txt file (in the 'Assets' section below) contains a checksum for every artifact in the release.

Changelog

• deebf9a empty commit
• d306f63 Merge pull request #341 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.59.1
• 664a150 build(deps): bump go.step.sm/crypto from 0.59.0 to 0.59.1
• 1896188 Merge pull request #343 from smallstep/dependabot/go_modules/golang.org/x/net-0.37.0
• f07cab3 build(deps): bump golang.org/x/net from 0.35.0 to 0.37.0
• eae2a64 Merge pull request #339 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.71.0
• 015fe4d build(deps): bump google.golang.org/grpc from 1.70.0 to 1.71.0
• 10534c3 Merge pull request #338 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.59.0
• f88e0f0 build(deps): bump go.step.sm/crypto from 0.58.0 to 0.59.0
• b272d34 Merge pull request #337 from smallstep/dependabot/go_modules/github.com/smallstep/cli-utils-0.12.1
• 36f71b1 build(deps): bump github.com/smallstep/cli-utils from 0.10.0 to 0.12.1
• f1c6458 Merge pull request #336 from smallstep/dependabot/go_modules/github.com/go-jose/go-jose/v3-3.0.4
• aa9a51a build(deps): bump github.com/go-jose/go-jose/v3 from 3.0.3 to 3.0.4
• ac8fa05 Merge pull request #335 from smallstep/dependabot/go_modules/github.com/go-jose/go-jose/v4-4.0.5
• 60a286e build(deps): bump github.com/go-jose/go-jose/v4 from 4.0.2 to 4.0.5
• 1c1c99d Merge pull request #332 from smallstep/dependabot/go_modules/k8s.io/api-0.33.0-alpha.2
• 0d2da32 build(deps): bump k8s.io/api from 0.32.0-alpha.0 to 0.33.0-alpha.2
• fc8bbe1 Merge pull request #331 from smallstep/dependabot/go_modules/k8s.io/apimachinery-0.33.0-alpha.2
• 49a27a9 build(deps): bump k8s.io/apimachinery
• 3774c48 Merge pull request #333 from smallstep/dependabot/go_modules/github.com/smallstep/certificates-0.28.2
• f454044 build(deps): bump github.com/smallstep/certificates
• d55beec Merge pull request #334 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.58.0
• b31f3bc Use Go 1.23 and run go mod tidy
• be39a67 build(deps): bump go.step.sm/crypto from 0.57.1 to 0.58.0
• 3c488bc Merge pull request #330 from smallstep/dependabot/go_modules/golang.org/x/net-0.35.0
• b15e3b9 build(deps): bump golang.org/x/net from 0.34.0 to 0.35.0
• 3fe24cc Merge pull request #327 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.57.1
• 74c3670 build(deps): bump go.step.sm/crypto from 0.57.0 to 0.57.1
• ed40d84 Merge pull request #325 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.70.0
• ef16513 build(deps): bump google.golang.org/grpc from 1.69.4 to 1.70.0
• b69d70c Merge pull request #326 from smallstep/dependabot/go_modules/github.com/golang/glog-1.2.4
• 0763dd8 build(deps): bump github.com/golang/glog from 1.2.2 to 1.2.4
• d425590 Merge pull request #323 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.57.0
• c1d3c50 build(deps): bump go.step.sm/crypto from 0.56.0 to 0.57.0
• bdfba60 Merge pull request #324 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.69.4
• d998d11 build(deps): bump google.golang.org/grpc from 1.69.2 to 1.69.4
• f39dbb1 Merge pull request #321 from smallstep/dependabot/go_modules/golang.org/x/net-0.34.0
• 06db4fe Merge pull request #322 from smallstep/dependabot/github_actions/softprops/action-gh-release-2.2.1
• 19db1da build(deps): bump softprops/action-gh-release from 2.2.0 to 2.2.1
• 1017219 build(deps): bump golang.org/x/net from 0.33.0 to 0.34.0
• fdd29c6 Merge pull request #319 from smallstep/dependabot/go_modules/golang.org/x/net-0.33.0
• 0b75e1c build(deps): bump golang.org/x/net from 0.32.0 to 0.33.0
• 186603e Merge pull request #318 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.69.2
• fa54028 build(deps): bump google.golang.org/grpc from 1.69.0 to 1.69.2
• d2660e1 Merge pull request #320 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.56.0
• ffe5e52 build(deps): bump go.step.sm/crypto from 0.55.0 to 0.56.0
• 9e763bc Merge pull request #316 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.69.0
• 63ef3c7 Merge pull request #317 from smallstep/dependabot/go_modules/golang.org/x/crypto-0.31.0
• 1330879 build(deps): bump golang.org/x/crypto from 0.30.0 to 0.31.0
• 10d9180 Merge pull request #315 from smallstep/dependabot/github_actions/softprops/action-gh-release-2.2.0
• ec3e097 build(deps): bump google.golang.org/grpc from 1.68.1 to 1.69.0
• 4e6dd8e build(deps): bump softprops/action-gh-release from 2.1.0 to 2.2.0
• 6827cb0 Merge pull request #313 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.68.1
• ce19e89 build(deps): bump google.golang.org/grpc from 1.67.1 to 1.68.1
• 3ca0ef8 Merge pull request #314 from smallstep/dependabot/go_modules/golang.org/x/net-0.32.0
• aa0af60 build(deps): bump golang.org/x/net from 0.31.0 to 0.32.0
• 8ceedfa Merge pull request #312 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.55.0
• fa4bde5 build(deps): bump go.step.sm/crypto from 0.54.2 to 0.55.0

Thanks!

Those were the changes on v0.20.1-rc4!

Come join us on Discord to ask questions, chat about PKI, or get a sneak peak at the freshest PKI memes.