Skip to content

Releases: smallstep/cli

Release list

Step CLI v0.31.0 (26-09-25)

Step CLI v0.31.0 (26-09-25) Latest
Latest

Choose a tag to compare

View all tags
@step-ci step-ci released this 25 Sep 20:09
Immutable release. Only release title and notes can be modified.
v0.31.0
8301c0d
This commit was created on GitHub.com and signed with GitHub鈥檚 verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Official Release Artifacts

Below are the most popular artifacts for step on each platform.

For packaged versions (Homebrew, Scoop, etc.), see our installation docs.

Linux

macOS Darwin

Windows

Signatures and Checksums

step uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

cosign verify-blob \
  --bundle ~/Downloads/step_darwin_0.31.0_amd64.tar.gz.sigstore.json \
  --certificate-identity-regexp "https://github\.com/smallstep/workflows/.*" \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  ~/Downloads/step_darwin_0.31.0_amd64.tar.gz

The checksums.txt file (in the 'Assets' section below) contains a checksum for every artifact in the release.

Changelog

Thanks!

Those were the changes on v0.31.0!

Come join us on Discord to ask questions, chat about PKI, or get a sneak peek at the freshest PKI memes.

Assets 135

Step CLI v0.31.0-rc1 (26-09-25)

Step CLI v0.31.0-rc1 (26-09-25) Pre-release
Pre-release

Choose a tag to compare

View all tags
@step-ci step-ci released this 25 Sep 19:12
Immutable release. Only release title and notes can be modified.
v0.31.0-rc1
562202d
This commit was created on GitHub.com and signed with GitHub鈥檚 verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Official Release Artifacts

Below are the most popular artifacts for step on each platform.

For packaged versions (Homebrew, Scoop, etc.), see our installation docs.

Linux

macOS Darwin

Windows

Signatures and Checksums

step uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

cosign verify-blob \
  --bundle ~/Downloads/step_darwin_0.31.0-rc1_amd64.tar.gz.sigstore.json \
  --certificate-identity-regexp "https://github\.com/smallstep/workflows/.*" \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  ~/Downloads/step_darwin_0.31.0-rc1_amd64.tar.gz

The checksums.txt file (in the 'Assets' section below) contains a checksum for every artifact in the release.

Changelog

  • 562202d Merge pull request #1711 from smallstep/mariano/changelog
  • 166e059 Update changelog for 0.30.4 through 0.31.0
  • faffa73 Merge pull request #1709 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.91.0
  • 626f71a Bump go.step.sm/crypto from 0.90.0 to 0.91.0

Thanks!

Those were the changes on v0.31.0-rc1!

Come join us on Discord to ask questions, chat about PKI, or get a sneak peek at the freshest PKI memes.

Loading

Step CLI v0.30.7-rc2 (26-09-22)

Step CLI v0.30.7-rc2 (26-09-22) Pre-release
Pre-release

Choose a tag to compare

View all tags
@step-ci step-ci released this 22 Sep 20:19
Immutable release. Only release title and notes can be modified.
v0.30.7-rc2
b33bd26
This commit was created on GitHub.com and signed with GitHub鈥檚 verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Official Release Artifacts

Below are the most popular artifacts for step on each platform.

For packaged versions (Homebrew, Scoop, etc.), see our installation docs.

Linux

macOS Darwin

Windows

Signatures and Checksums

step uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

cosign verify-blob \
  --bundle ~/Downloads/step_darwin_0.30.7-rc2_amd64.tar.gz.sigstore.json \
  --certificate-identity-regexp "https://github\.com/smallstep/workflows/.*" \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  ~/Downloads/step_darwin_0.30.7-rc2_amd64.tar.gz

The checksums.txt file (in the 'Assets' section below) contains a checksum for every artifact in the release.

Changelog

  • b33bd26 Merge pull request #1708 from smallstep/dependabot/go_modules/github.com/fxamacker/cbor/v2-2.9.4
  • fac49b0 Bump github.com/fxamacker/cbor/v2 from 2.9.3 to 2.9.4
  • acd06df Merge pull request #1695 from smallstep/dependabot/go_modules/github.com/slackhq/nebula-1.11.1
  • 21b0e50 Bump github.com/slackhq/nebula from 1.10.3 to 1.11.1
  • 865fb02 Merge pull request #1703 from smallstep/dependabot/go_modules/golang.org/x/crypto-0.57.0
  • c20bbe0 Bump golang.org/x/crypto from 0.56.0 to 0.57.0
  • b69dce7 Merge pull request #1698 from smallstep/mariano/mldsa
  • c512b82 Fix typo in kty flag
  • a1b7caf Use go.step.sm/crypto@v0.90.0
  • e76ae13 Fix test case
  • b27a6d3 Support for ML-DSA keys
  • eb1901e Merge pull request #1696 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.83.1
  • 30b6082 Bump google.golang.org/grpc from 1.83.0 to 1.83.1
  • f7b2bd2 Merge pull request #1690 from smallstep/dependabot/go_modules/github.com/stretchr/testify-1.12.1
  • ec1fe50 Bump github.com/stretchr/testify from 1.12.0 to 1.12.1
  • e1e0466 Merge pull request #1691 from smallstep/dependabot/go_modules/github.com/fxamacker/cbor/v2-2.9.3
  • abb9631 Merge pull request #1689 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.89.0
  • 8ec9a5d Bump github.com/fxamacker/cbor/v2 from 2.9.2 to 2.9.3
  • 9f09d2b Bump go.step.sm/crypto from 0.87.0 to 0.89.0
  • 8a55e83 Merge pull request #1683 from smallstep/dependabot/go_modules/google.golang.org/protobuf-1.36.12
  • 77737c2 Bump google.golang.org/protobuf from 1.36.11 to 1.36.12
  • 11bacc8 Merge pull request #1682 from smallstep/dependabot/go_modules/golang.org/x/crypto-0.55.0
  • 3e74915 Bump golang.org/x/crypto from 0.54.0 to 0.55.0
  • 11a8c63 Merge pull request #1684 from smallstep/dependabot/go_modules/github.com/stretchr/testify-1.12.0
  • 15ccfb1 Bump github.com/stretchr/testify from 1.11.1 to 1.12.0
  • bdac2d1 Merge pull request #1681 from smallstep/dependabot/go_modules/github.com/rogpeppe/go-internal-1.16.0
  • bf6cdd0 Bump github.com/rogpeppe/go-internal from 1.15.0 to 1.16.0
  • 848725c Merge pull request #1679 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.87.0
  • 7255dde Bump go.step.sm/crypto from 0.85.0 to 0.87.0
  • 44df573 Merge pull request #1677 from smallstep/dependabot/go_modules/github.com/smallstep/linkedca-0.26.0
  • e7bbd54 Bump github.com/smallstep/linkedca from 0.25.0 to 0.26.0
  • f47f51a Merge pull request #1676 from smallstep/dependabot/go_modules/go.mozilla.org/pkcs7-0.10.0
  • 57f19f1 Bump go.mozilla.org/pkcs7 from 0.9.0 to 0.10.0
  • 305fded Merge pull request #1671 from smallstep/dependabot/github_actions/actions/setup-go-7.0.0
  • e0dfb60 Bump actions/setup-go from 6.5.0 to 7.0.0
  • e3a41c1 Merge pull request #1674 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.82.1
  • bc7aecd Bump google.golang.org/grpc from 1.82.0 to 1.82.1
  • 8a85393 Merge pull request #1670 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.85.0
  • a1e9fc6 Bump go.step.sm/crypto from 0.84.1 to 0.85.0
  • 4f5ed52 Merge pull request #1672 from smallstep/dependabot/github_actions/actions/checkout-7.0.1
  • 99fef1d Bump actions/checkout from 7.0.0 to 7.0.1
  • 3a11654 Merge pull request #1665 from smallstep/dependabot/go_modules/golang.org/x/crypto-0.54.0
  • 771e967 Bump golang.org/x/crypto from 0.53.0 to 0.54.0
  • 75a8c4c Merge pull request #1666 from smallstep/dependabot/go_modules/golang.org/x/term-0.45.0
  • 999b2d1 Bump golang.org/x/term from 0.44.0 to 0.45.0
  • cd14edd Merge pull request #1667 from smallstep/dependabot/go_modules/golang.org/x/sys-0.47.0
  • 24317e8 Bump golang.org/x/sys from 0.46.0 to 0.47.0
  • 1dd6c64 Merge pull request #1662 from smallstep/dependabot/go_modules/software.sslmate.com/src/go-pkcs12-0.7.3
  • 9b204b5 Bump software.sslmate.com/src/go-pkcs12 from 0.7.2 to 0.7.3
  • 26eafec Merge pull request #1660 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.84.1
  • 90e5a9f Merge pull request #1661 from smallstep/dependabot/github_actions/actions/setup-go-6.5.0
  • a683f63 Bump actions/setup-go from 6.4.0 to 6.5.0
  • 3aa9ec6 Bump go.step.sm/crypto from 0.83.0 to 0.84.1
  • ac5379a Merge pull request #1658 from smallstep/dependabot/github_actions/actions/checkout-7.0.0
  • 2f05447 Bump actions/checkout from 6.0.3 to 7.0.0
  • abd06dc Merge pull request #1656 from smallstep/dependabot/go_modules/software.sslmate.com/src/go-pkcs12-0.7.2
  • 21b62ba Bump software.sslmate.com/src/go-pkcs12 from 0.7.1 to 0.7.2
  • 895d791 Merge pull request #1655 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.83.0
  • 06d4a9f Bump go.step.sm/crypto from 0.82.0 to 0.83.0
  • 075e845 Fix release workflow leaving permanent draft releases on GitHub (#1652)

Thanks!

Those were the changes on v0.30.7-rc2!

Come join us on Discord to ask questions, chat about PKI, or get a sneak peek at the freshest PKI memes.

Loading

Step CLI v0.30.7-rc1 (26-06-11)

Step CLI v0.30.7-rc1 (26-06-11) Pre-release
Pre-release

Choose a tag to compare

View all tags
@step-ci step-ci released this 11 Jun 01:39
Immutable release. Only release title and notes can be modified.
v0.30.7-rc1
2215d18
This commit was signed with the committer鈥檚 verified signature.
dopey Max
SSH Key Fingerprint: XqwT0oeU2w7K2xi256NPKLR78lp+Z9ZEastRNQDD49Q
Verified
Learn about vigilant mode.

Official Release Artifacts

Below are the most popular artifacts for step on each platform.

For packaged versions (Homebrew, Scoop, etc.), see our installation docs.

Linux

macOS Darwin

Windows

Signatures and Checksums

step uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

cosign verify-blob \
  --bundle ~/Downloads/step_darwin_0.30.7-rc1_amd64.tar.gz.sigstore.json \
  --certificate-identity-regexp "https://github\.com/smallstep/workflows/.*" \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  ~/Downloads/step_darwin_0.30.7-rc1_amd64.tar.gz

The checksums.txt file (in the 'Assets' section below) contains a checksum for every artifact in the release.

Changelog

  • 2215d18 Fix release workflow leaving permanent draft releases on GitHub

Thanks!

Those were the changes on v0.30.7-rc1!

Come join us on Discord to ask questions, chat about PKI, or get a sneak peek at the freshest PKI memes.

Loading

Step CLI v0.30.6 (26-06-10)

Step CLI v0.30.6 (26-06-10)

Choose a tag to compare

View all tags
@step-ci step-ci released this 10 Jun 20:55
Immutable release. Only release title and notes can be modified.
v0.30.6
f662820
This commit was created on GitHub.com and signed with GitHub鈥檚 verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Official Release Artifacts

Below are the most popular artifacts for step on each platform.

For packaged versions (Homebrew, Scoop, etc.), see our installation docs.

Linux

macOS Darwin

Windows

Signatures and Checksums

step uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

cosign verify-blob \
  --bundle ~/Downloads/step_darwin_0.30.6_amd64.tar.gz.sigstore.json \
  --certificate-identity-regexp "https://github\.com/smallstep/workflows/.*" \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  ~/Downloads/step_darwin_0.30.6_amd64.tar.gz

The checksums.txt file (in the 'Assets' section below) contains a checksum for every artifact in the release.

Changelog

Thanks!

Those were the changes on v0.30.6!

Come join us on Discord to ask questions, chat about PKI, or get a sneak peek at the freshest PKI memes.

Loading

Step CLI v0.30.5 (26-06-10)

Step CLI v0.30.5 (26-06-10)

Choose a tag to compare

View all tags
@step-ci step-ci released this 10 Jun 17:55
v0.30.5
27f49f3
This commit was created on GitHub.com and signed with GitHub鈥檚 verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Official Release Artifacts

Below are the most popular artifacts for step on each platform.

For packaged versions (Homebrew, Scoop, etc.), see our installation docs.

Linux

macOS Darwin

Windows

Signatures and Checksums

step uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

cosign verify-blob \
  --bundle ~/Downloads/step_darwin_0.30.5_amd64.tar.gz.sigstore.json \
  --certificate-identity-regexp "https://github\.com/smallstep/workflows/.*" \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  ~/Downloads/step_darwin_0.30.5_amd64.tar.gz

The checksums.txt file (in the 'Assets' section below) contains a checksum for every artifact in the release.

Changelog

  • 27f49f3 Fix release workflow to work with immutable releases setting (#1650)

Thanks!

Those were the changes on v0.30.5!

Come join us on Discord to ask questions, chat about PKI, or get a sneak peek at the freshest PKI memes.

Loading

Step CLI v0.30.4 (26-06-10)

Step CLI v0.30.4 (26-06-10)

Choose a tag to compare

View all tags
@github-actions github-actions released this 10 Jun 06:09
v0.30.4
33ab772
This commit was created on GitHub.com and signed with GitHub鈥檚 verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Official Release Artifacts

Below are the most popular artifacts for step on each platform.

For packaged versions (Homebrew, Scoop, etc.), see our installation docs.

Linux

macOS Darwin

Windows

Signatures and Checksums

step uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

cosign verify-blob \
  --bundle ~/Downloads/step_darwin_0.30.4_amd64.tar.gz.sigstore.json \
  --certificate-identity-regexp "https://github\.com/smallstep/workflows/.*" \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  ~/Downloads/step_darwin_0.30.4_amd64.tar.gz

The checksums.txt file (in the 'Assets' section below) contains a checksum for every artifact in the release.

Changelog

  • 33ab772 Restore pull-requests: write permission in triage workflow (#1649)
  • f247663 Update CHANGELOG for v0.30.3 (#1648)
  • 00b371a Merge pull request #1647 from smallstep/fix/proxycommand-deadlock-1641
  • cd9b4bc Merge pull request #1646 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.82.0
  • 360643e Bump go.step.sm/crypto from 0.81.1 to 0.82.0
  • 9edcbcf Merge pull request #1645 from smallstep/dependabot/go_modules/golang.org/x/crypto-0.53.0
  • 24c64cd Bump golang.org/x/crypto from 0.52.0 to 0.53.0
  • 8094e86 Merge pull request #1644 from smallstep/dependabot/go_modules/golang.org/x/term-0.44.0
  • 21dc5d4 Bump golang.org/x/term from 0.43.0 to 0.44.0
  • 2adf410 Merge pull request #1643 from smallstep/dependabot/go_modules/golang.org/x/sys-0.46.0
  • 5b50ed3 Fix proxycommand hang when server closes before stdin closes
  • ccc870a Bump golang.org/x/sys from 0.45.0 to 0.46.0
  • 26b2814 Merge pull request #1637 from smallstep/dependabot/go_modules/github.com/rogpeppe/go-internal-1.15.0
  • 49eaf58 Merge pull request #1640 from smallstep/dependabot/github_actions/actions/checkout-6.0.3
  • 2759592 Bump github.com/rogpeppe/go-internal from 1.14.1 to 1.15.0
  • e26ec82 Merge pull request #1639 from smallstep/dependabot/go_modules/github.com/ccoveille/go-safecast/v2-2.0.1
  • 24bfc38 Merge pull request #1638 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.81.1
  • 28ae410 Bump actions/checkout from 6.0.2 to 6.0.3
  • 627cf97 Bump github.com/ccoveille/go-safecast/v2 from 2.0.0 to 2.0.1
  • e240ec0 Bump go.step.sm/crypto from 0.81.0 to 0.81.1
  • 04caeaf Merge pull request #1635 from smallstep/dependabot/github_actions/ad-m/github-push-action-1.3.0
  • 59ab91c Bump ad-m/github-push-action from 1.1.0 to 1.3.0
  • 887b62f Merge pull request #1633 from smallstep/dependabot/go_modules/golang.org/x/crypto-0.52.0
  • dffda1e Upgrade golang.org/x/net to v0.55.0
  • 49330b9 Bump golang.org/x/crypto from 0.51.0 to 0.52.0
  • 5746dd2 Merge pull request #1631 from smallstep/panos/workflows
  • 527b8bd gh: aligned workflow permissions with smallstep/workflows#324
  • 9b9c95e Merge pull request #1630 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.81.0
  • 18da89f Bump go.step.sm/crypto from 0.79.0 to 0.81.0
  • 509de5a Merge pull request #1626 from smallstep/dependabot/go_modules/golang.org/x/crypto-0.51.0
  • 1e3eca2 Bump golang.org/x/crypto from 0.50.0 to 0.51.0
  • 0f566d2 Merge pull request #1628 from smallstep/dependabot/go_modules/golang.org/x/term-0.43.0
  • b742363 Merge pull request #1629 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.79.0
  • b83c95c Bump go.step.sm/crypto from 0.77.9 to 0.79.0
  • d41bde3 Bump golang.org/x/term from 0.42.0 to 0.43.0
  • 1e7aeef Merge pull request #1619 from smallstep/dependabot/go_modules/github.com/jackc/pgx/v5-5.9.2
  • 3cac262 Bump github.com/jackc/pgx/v5 from 5.9.0 to 5.9.2
  • eb850e5 Merge pull request #1623 from smallstep/dependabot/go_modules/github.com/fxamacker/cbor/v2-2.9.2
  • 5ac2707 Bump github.com/fxamacker/cbor/v2 from 2.9.1 to 2.9.2
  • 382cf58 Merge pull request #1624 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.77.9
  • af2b67c Add nosec exclusions
  • 925f087 Update golangci-lint to v2.12.1
  • fa89529 Bump go.step.sm/crypto from 0.77.2 to 0.77.9
  • ef4d129 Merge pull request #1618 from smallstep/dependabot/go_modules/github.com/jackc/pgx/v5-5.9.0
  • 7026648 Bump github.com/jackc/pgx/v5 from 5.8.0 to 5.9.0
  • 8dbc64c Merge pull request #1612 from smallstep/dependabot/go_modules/golang.org/x/crypto-0.50.0
  • 3a3b6af Bump golang.org/x/crypto from 0.49.0 to 0.50.0
  • f1b243c Merge pull request #1615 from smallstep/dependabot/go_modules/golang.org/x/term-0.42.0
  • df0c6fa Merge pull request #1617 from smallstep/dependabot/github_actions/ad-m/github-push-action-1.1.0
  • 3374539 Bump golang.org/x/term from 0.41.0 to 0.42.0
  • 992a6f5 Merge pull request #1614 from smallstep/dependabot/go_modules/software.sslmate.com/src/go-pkcs12-0.7.1
  • 0092dad Merge pull request #1616 from smallstep/dependabot/github_actions/softprops/action-gh-release-3.0.0
  • eb79a73 Bump ad-m/github-push-action from 1.0.0 to 1.1.0
  • 2efd39c Bump softprops/action-gh-release from 2.6.1 to 3.0.0
  • 4b4df8f Bump software.sslmate.com/src/go-pkcs12 from 0.7.0 to 0.7.1
  • e104d03 Merge pull request #1610 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.77.2
  • ee5d454 Bump go.step.sm/crypto from 0.77.1 to 0.77.2
  • 563699f Merge pull request #1608 from smallstep/dependabot/go_modules/github.com/go-jose/go-jose/v4-4.1.4
  • 55bed2a Bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4
  • fb0d43f Merge pull request #1607 from smallstep/dependabot/go_modules/github.com/go-jose/go-jose/v3-3.0.5
  • 595a1ec Bump github.com/go-jose/go-jose/v3 from 3.0.4 to 3.0.5
  • cbff10c Merge pull request #1605 from smallstep/mariano/bump-certinfo
  • b4a9af9 Bump certinfo
  • 03db1fb Merge pull request #1604 from smallstep/mariano/fix-1601
  • dd664ad Fix isFilename to detect files by existence check
  • 23b67fc Merge pull request #1603 from smallstep/dependabot/github_actions/actions/setup-go-6.4.0
  • 46e7c69 Merge pull request #1602 from smallstep/dependabot/go_modules/github.com/fxamacker/cbor/v2-2.9.1
  • 342d0d0 Bump actions/setup-go from 6.3.0 to 6.4.0
  • 43bdb0c Bump github.com/fxamacker/cbor/v2 from 2.9.0 to 2.9.1

Thanks!

Those were the changes on ...

Read more
Loading

Step CLI v0.30.3-rc1 (26-06-10)

Step CLI v0.30.3-rc1 (26-06-10) Pre-release
Pre-release

Choose a tag to compare

View all tags
@github-actions github-actions released this 10 Jun 02:06
Immutable release. Only release title and notes can be modified.
v0.30.3-rc1
98e884c
This commit was signed with the committer鈥檚 verified signature.
dopey Max
SSH Key Fingerprint: XqwT0oeU2w7K2xi256NPKLR78lp+Z9ZEastRNQDD49Q
Verified
Learn about vigilant mode.

Official Release Artifacts

Below are the most popular artifacts for step on each platform.

For packaged versions (Homebrew, Scoop, etc.), see our installation docs.

Linux

macOS Darwin

Windows

Signatures and Checksums

step uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

cosign verify-blob \
  --bundle ~/Downloads/step_darwin_0.30.3-rc1_amd64.tar.gz.sigstore.json \
  --certificate-identity-regexp "https://github\.com/smallstep/workflows/.*" \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  ~/Downloads/step_darwin_0.30.3-rc1_amd64.tar.gz

The checksums.txt file (in the 'Assets' section below) contains a checksum for every artifact in the release.

Changelog

  • 98e884c Update CHANGELOG for v0.30.3
  • 00b371a Merge pull request #1647 from smallstep/fix/proxycommand-deadlock-1641
  • cd9b4bc Merge pull request #1646 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.82.0
  • 360643e Bump go.step.sm/crypto from 0.81.1 to 0.82.0
  • 9edcbcf Merge pull request #1645 from smallstep/dependabot/go_modules/golang.org/x/crypto-0.53.0
  • 24c64cd Bump golang.org/x/crypto from 0.52.0 to 0.53.0
  • 8094e86 Merge pull request #1644 from smallstep/dependabot/go_modules/golang.org/x/term-0.44.0
  • 21dc5d4 Bump golang.org/x/term from 0.43.0 to 0.44.0
  • 2adf410 Merge pull request #1643 from smallstep/dependabot/go_modules/golang.org/x/sys-0.46.0
  • 5b50ed3 Fix proxycommand hang when server closes before stdin closes
  • ccc870a Bump golang.org/x/sys from 0.45.0 to 0.46.0
  • 26b2814 Merge pull request #1637 from smallstep/dependabot/go_modules/github.com/rogpeppe/go-internal-1.15.0
  • 49eaf58 Merge pull request #1640 from smallstep/dependabot/github_actions/actions/checkout-6.0.3
  • 2759592 Bump github.com/rogpeppe/go-internal from 1.14.1 to 1.15.0
  • e26ec82 Merge pull request #1639 from smallstep/dependabot/go_modules/github.com/ccoveille/go-safecast/v2-2.0.1
  • 24bfc38 Merge pull request #1638 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.81.1
  • 28ae410 Bump actions/checkout from 6.0.2 to 6.0.3
  • 627cf97 Bump github.com/ccoveille/go-safecast/v2 from 2.0.0 to 2.0.1
  • e240ec0 Bump go.step.sm/crypto from 0.81.0 to 0.81.1
  • 04caeaf Merge pull request #1635 from smallstep/dependabot/github_actions/ad-m/github-push-action-1.3.0
  • 59ab91c Bump ad-m/github-push-action from 1.1.0 to 1.3.0
  • 887b62f Merge pull request #1633 from smallstep/dependabot/go_modules/golang.org/x/crypto-0.52.0
  • dffda1e Upgrade golang.org/x/net to v0.55.0
  • 49330b9 Bump golang.org/x/crypto from 0.51.0 to 0.52.0
  • 5746dd2 Merge pull request #1631 from smallstep/panos/workflows
  • 527b8bd gh: aligned workflow permissions with smallstep/workflows#324
  • 9b9c95e Merge pull request #1630 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.81.0
  • 18da89f Bump go.step.sm/crypto from 0.79.0 to 0.81.0
  • 509de5a Merge pull request #1626 from smallstep/dependabot/go_modules/golang.org/x/crypto-0.51.0
  • 1e3eca2 Bump golang.org/x/crypto from 0.50.0 to 0.51.0
  • 0f566d2 Merge pull request #1628 from smallstep/dependabot/go_modules/golang.org/x/term-0.43.0
  • b742363 Merge pull request #1629 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.79.0
  • b83c95c Bump go.step.sm/crypto from 0.77.9 to 0.79.0
  • d41bde3 Bump golang.org/x/term from 0.42.0 to 0.43.0
  • 1e7aeef Merge pull request #1619 from smallstep/dependabot/go_modules/github.com/jackc/pgx/v5-5.9.2
  • 3cac262 Bump github.com/jackc/pgx/v5 from 5.9.0 to 5.9.2
  • eb850e5 Merge pull request #1623 from smallstep/dependabot/go_modules/github.com/fxamacker/cbor/v2-2.9.2
  • 5ac2707 Bump github.com/fxamacker/cbor/v2 from 2.9.1 to 2.9.2
  • 382cf58 Merge pull request #1624 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.77.9
  • af2b67c Add nosec exclusions
  • 925f087 Update golangci-lint to v2.12.1
  • fa89529 Bump go.step.sm/crypto from 0.77.2 to 0.77.9
  • ef4d129 Merge pull request #1618 from smallstep/dependabot/go_modules/github.com/jackc/pgx/v5-5.9.0
  • 7026648 Bump github.com/jackc/pgx/v5 from 5.8.0 to 5.9.0
  • 8dbc64c Merge pull request #1612 from smallstep/dependabot/go_modules/golang.org/x/crypto-0.50.0
  • 3a3b6af Bump golang.org/x/crypto from 0.49.0 to 0.50.0
  • f1b243c Merge pull request #1615 from smallstep/dependabot/go_modules/golang.org/x/term-0.42.0
  • df0c6fa Merge pull request #1617 from smallstep/dependabot/github_actions/ad-m/github-push-action-1.1.0
  • 3374539 Bump golang.org/x/term from 0.41.0 to 0.42.0
  • 992a6f5 Merge pull request #1614 from smallstep/dependabot/go_modules/software.sslmate.com/src/go-pkcs12-0.7.1
  • 0092dad Merge pull request #1616 from smallstep/dependabot/github_actions/softprops/action-gh-release-3.0.0
  • eb79a73 Bump ad-m/github-push-action from 1.0.0 to 1.1.0
  • 2efd39c Bump softprops/action-gh-release from 2.6.1 to 3.0.0
  • 4b4df8f Bump software.sslmate.com/src/go-pkcs12 from 0.7.0 to 0.7.1
  • e104d03 Merge pull request #1610 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.77.2
  • ee5d454 Bump go.step.sm/crypto from 0.77.1 to 0.77.2
  • 563699f Merge pull request #1608 from smallstep/dependabot/go_modules/github.com/go-jose/go-jose/v4-4.1.4
  • 55bed2a Bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4
  • fb0d43f Merge pull request #1607 from smallstep/dependabot/go_modules/github.com/go-jose/go-jose/v3-3.0.5
  • 595a1ec Bump github.com/go-jose/go-jose/v3 from 3.0.4 to 3.0.5
  • cbff10c Merge pull request #1605 from smallstep/mariano/bump-certinfo
  • b4a9af9 Bump certinfo
  • 03db1fb Merge pull request #1604 from smallstep/mariano/fix-1601
  • dd664ad Fix isFilename to detect files by existence check
  • 23b67fc Merge pull request #1603 from smallstep/dependabot/github_actions/actions/setup-go-6.4.0
  • 46e7c69 Merge pull request #1602 from smallstep/dependabot/go_modules/github.com/fxamacker/cbor/v2-2.9.1
  • 342d0d0 Bump actions/setup-go from 6.3.0 to 6.4.0
  • 43bdb0c Bump github.com/fxamacker/cbor/v2 from 2.9.0 to 2.9.1

Thanks!

Thos...

Read more
Loading

Step CLI v0.30.2 (26-03-22)

Step CLI v0.30.2 (26-03-22)

Choose a tag to compare

View all tags
@github-actions github-actions released this 22 Mar 23:20
v0.30.2
8da21e8
This commit was created on GitHub.com and signed with GitHub鈥檚 verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Official Release Artifacts

Below are the most popular artifacts for step on each platform.

For packaged versions (Homebrew, Scoop, etc.), see our installation docs.

Linux

macOS Darwin

Windows

Signatures and Checksums

step uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

cosign verify-blob \
  --bundle ~/Downloads/step_darwin_0.30.2_amd64.tar.gz.sigstore.json \
  --certificate-identity-regexp "https://github\.com/smallstep/workflows/.*" \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  ~/Downloads/step_darwin_0.30.2_amd64.tar.gz

The checksums.txt file (in the 'Assets' section below) contains a checksum for every artifact in the release.

Changelog

  • 8da21e8 Update certificates to v0.30.2 | CHANGELOG update (#1600)

Thanks!

Those were the changes on v0.30.2!

Come join us on Discord to ask questions, chat about PKI, or get a sneak peek at the freshest PKI memes.

Loading

Step CLI v0.30.1 (26-03-19)

Step CLI v0.30.1 (26-03-19)

Choose a tag to compare

View all tags
@github-actions github-actions released this 19 Mar 01:24
v0.30.1
1c10067
This commit was created on GitHub.com and signed with GitHub鈥檚 verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Official Release Artifacts

Below are the most popular artifacts for step on each platform.

For packaged versions (Homebrew, Scoop, etc.), see our installation docs.

Linux

macOS Darwin

Windows

Signatures and Checksums

step uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

cosign verify-blob \
  --bundle ~/Downloads/step_darwin_0.30.1_amd64.tar.gz.sigstore.json \
  --certificate-identity-regexp "https://github\.com/smallstep/workflows/.*" \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  ~/Downloads/step_darwin_0.30.1_amd64.tar.gz

The checksums.txt file (in the 'Assets' section below) contains a checksum for every artifact in the release.

Changelog

  • 1c10067 Bump certificates to v0.30.1 (#1598)
  • a46cdfb Merge pull request #1597 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.79.3
  • bfa8de1 Bump google.golang.org/grpc from 1.79.2 to 1.79.3

Thanks!

Those were the changes on v0.30.1!

Come join us on Discord to ask questions, chat about PKI, or get a sneak peek at the freshest PKI memes.

Loading