Autocert v0.18.0 (23-11-28)

Signatures and Checksums

autocert uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

COSIGN_EXPERIMENTAL=1 cosign verify-blob \
  --certificate ~/Downloads/autocert_linux_0.18.0_amd64.tar.gz.pem \
  --signature ~/Downloads/autocert_linux0.18.0_amd64.tar.gz.sig \
  ~/Downloads/autocert_linux0.18.0_amd64.tar.gz

The checksums.txt file (in the 'Assets' section below) contains a checksum for every artifact in the release.

Changelog

• ba08028 Fix go.mod for codeql
• 172596c Merge branch 'voxel-ai-jorge/fix-bootstrap-rerun'
• 0c11f3a Merge branch 'master' into voxel-ai-jorge/fix-bootstrap-rerun
• d3154af Bump k8s.io/apimachinery from 0.29.0-alpha.2 to 0.29.0-alpha.3
• 143a699 Merge pull request #176 from smallstep/dependabot/go_modules/k8s.io/apimachinery-0.29.0-alpha.3
• 3e62139 Bump k8s.io/apimachinery from 0.29.0-alpha.2 to 0.29.0-alpha.3
• 5bdd216 wip: fix an error in the bash script
• e45ad39 fix: make the bootstrapper exit cleanly on subsequent runs
• 8b71e7f Merge pull request #172 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.59.0
• 3537c9a Bump google.golang.org/grpc from 1.58.3 to 1.59.0
• a2cdfa5 Merge pull request #171 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.36.1
• 21dc2ce [action] fix actionlint warnings
• d9d0807 Bump go.step.sm/crypto from 0.36.0 to 0.36.1
• af15e1f Merge pull request #169 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.58.3
• 901a80d Bump google.golang.org/grpc from 1.58.2 to 1.58.3
• 12f43f5 Merge pull request #170 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.36.0
• a5c6f7e Bump go.step.sm/crypto from 0.35.1 to 0.36.0
• a897c24 Merge pull request #168 from smallstep/dependabot/go_modules/k8s.io/api-0.29.0-alpha.2
• 28f135e Bump k8s.io/api from 0.29.0-alpha.0 to 0.29.0-alpha.2
• 39e2cf3 Merge pull request #167 from smallstep/dependabot/go_modules/golang.org/x/net-0.17.0
• 34e323d Bump golang.org/x/net from 0.15.0 to 0.17.0
• 2625b96 Merge pull request #165 from smallstep/dependabot/go_modules/github.com/smallstep/certificates-0.25.0
• 4d7e029 Bump github.com/smallstep/certificates from 0.24.2 to 0.25.0
• 5d61da1 Merge pull request #160 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.58.2
• 58f4119 Bump google.golang.org/grpc from 1.58.1 to 1.58.2
• bbf52b6 Merge pull request #163 from smallstep/dependabot/go_modules/k8s.io/apimachinery-0.29.0-alpha.1
• c3163a4 Merge pull request #166 from smallstep/max/remove-gitleaksignore
• c8519af Remove gitleaksignore file
• e0fff55 Merge pull request #162 from smallstep/max/remove-gitleaks
• 067068b Bump k8s.io/apimachinery from 0.29.0-alpha.0 to 0.29.0-alpha.1
• 163b423 [action] remove gitleaks secret from code scan cron workflow
• b1c43af Merge pull request #158 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.58.1
• 8c83a36 Bump google.golang.org/grpc from 1.58.0 to 1.58.1
• 7ac7dd5 Merge pull request #157 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.58.0
• 0c82b04 Bump google.golang.org/grpc from 1.57.0 to 1.58.0
• 9125804 Merge pull request #156 from smallstep/dependabot/go_modules/golang.org/x/net-0.15.0
• db088e5 Bump golang.org/x/net from 0.14.0 to 0.15.0
• 9c66dec Merge pull request #155 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.35.0
• 85ee5c0 Bump go.step.sm/crypto from 0.34.0 to 0.35.0
• 8c7e02d Merge pull request #154 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.34.0
• ea96a73 Bump go.step.sm/crypto from 0.33.0 to 0.34.0
• 2623e92 Merge pull request #153 from smallstep/dependabot/go_modules/golang.org/x/net-0.14.0
• c96643a Bump golang.org/x/net from 0.12.0 to 0.14.0
• 586d699 Merge pull request #152 from smallstep/steppath
• 8c2cb98 Initialize STEPPATH
• 0f2de71 Merge pull request #148 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.57.0
• 2da107f Bump google.golang.org/grpc from 1.56.2 to 1.57.0
• 80d1308 Merge pull request #147 from smallstep/dependabot/go_modules/k8s.io/api-0.29.0-alpha.0
• 68d7103 Bump k8s.io/api from 0.28.0-beta.0 to 0.29.0-alpha.0
• 631c544 Merge pull request #149 from smallstep/dependabot/go_modules/k8s.io/apimachinery-0.29.0-alpha.0
• c4fe36d Merge pull request #150 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.33.0
• 5c25da5 Bump go.step.sm/crypto from 0.32.4 to 0.33.0
• 14cd2c1 Bump k8s.io/apimachinery from 0.28.0-beta.0 to 0.29.0-alpha.0
• 754afa6 Merge pull request #144 from smallstep/dependabot/go_modules/k8s.io/api-0.28.0-beta.0
• 08a53cb Merge pull request #145 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.32.4
• 6661247 Bump go.step.sm/crypto from 0.32.3 to 0.32.4
• 3f72dc6 Bump k8s.io/api from 0.28.0-alpha.4 to 0.28.0-beta.0
• 2150956 Merge pull request #142 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.32.3
• 58a77d9 Merge pull request #143 from smallstep/dependabot/go_modules/k8s.io/api-0.28.0-alpha.4
• 82c308d Bump k8s.io/api from 0.28.0-alpha.3 to 0.28.0-alpha.4
• b132011 Bump go.step.sm/crypto from 0.32.2 to 0.32.3
• 48b476d Merge pull request #139 from smallstep/dependabot/go_modules/golang.org/x/net-0.12.0
• f00a16b Bump golang.org/x/net from 0.11.0 to 0.12.0
• 879ec76 Merge pull request #140 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.56.2
• 1571e32 Bump google.golang.org/grpc from 1.56.1 to 1.56.2
• 8472a12 Merge pull request #138 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.32.2
• 49e1741 Bump go.step.sm/crypto from 0.32.1 to 0.32.2
• de3599c Merge pull request #137 from smallstep/dependabot/go_modules/k8s.io/api-0.28.0-alpha.3
• 65f7bca Bump k8s.io/api from 0.28.0-alpha.2 to 0.28.0-alpha.3
• 4fb9578 Merge pull request #136 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.56.1
• 30d2fd0 Bump google.golang.org/grpc from 1.56.0 to 1.56.1
• 0afad44 Merge pull request #135 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.32.1
• d9efb73 Merge pull request #134 from smallstep/dependabot/go_modules/k8s.io/apimachinery-0.28.0-alpha.3
• 6dac801 Bump go.step.sm/crypto from 0.32.0 to 0.32.1
• bc8a29b Bump k8s.io/apimachinery from 0.28.0-alpha.2 to 0.28.0-alpha.3
• f726654 Merge pull request #133 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.56.0
• 4d228da Bump google.golang.org/grpc from 1.55.0 to 1.56.0
• fe36a38 Merge pull request #131 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.32.0
• 72098eb Bump go.step.sm/crypto from 0.31.2 to 0.32.0
• 2d4c611 Merge pull request #132 from smallstep/dependabot/go_modules/golang.org/x/net-0.11.0
• c42d5bf Bump golang.org/x/net from 0.10.0 to 0.11.0
• 758df19 Merge pull request #129 from smallstep/dependabot/go_modules/k8s.io/api-0.28.0-alpha.2
• c8dde5c Bump k8s.io/api from 0.28.0-alpha.1 to 0.28.0-alpha.2
• 2b6a6fd Merge pull request #128 from smallstep/max/goreleaser
• fc469c3 [action] use common goreleaser workflow
• bbd7aa2 Merge pull request #125 from smallstep/dependabot/go_modules/k8s.io/api-0.28.0-alpha.1
• b99211b Bump k8s.io/api from 0.28.0-alpha.0 to 0.28.0-alpha.1
• 12627a2 Merge pull request #127 from smallstep/dependabot/go_modules/github.com/sirupsen/logrus-1.9.3
• 9db6bbd Merge pull request #124 from smallstep/dependabot/go_modules/k8s.io/apimachinery-0.28.0-alpha.1
• 6613cbb Bump github.com/sirupsen/logrus from 1.9.2 to 1.9.3
• 919220d Merge pull request #126 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.31.2
• d4ea8a1 Bump go.step.sm/crypto from 0.31.0 to 0.31.2
• 912615f Bump k8s.io/apimachinery from 0.28.0-alpha.0 to 0.28.0-alpha.1
• 34ac6b9 Merge pull request #123 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.31.0
• 2adce64 Bump go.step.sm/crypto from 0.30.0 to 0.31.0
• f1f6ebc Merge pull request #122 from smallstep/dependabot/go_modules/github.com/sirupsen/logrus-1.9.2
• e9eb22a Bump github.com/sirupsen/logrus from 1.9.0 to 1.9.2
• 8a33e79 Merge pull request #119 from smallstep/dependabot/go_modules/github.com/smallstep/certificates-0.24.2
• 4dd0d10 Bump github.com/smallstep/certificates from 0.24.1 to 0.24.2
• 3be0dbd Merge pull request #117 from smallstep/dependabot/go_modules/golang.org/x/net-0.10.0
• e6723af Bump golang.org/x/net from 0.9.0 to 0.10.0
• 2a42de7 Merge pull request #116 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.55.0
• ccc3f3c Bump google.golang.org/grpc from 1.54.0 to 1.55.0
• 7e74fd4 Merge pull request #113 from smallstep/dependabot/go_modules/go.step.sm/cli-utils-0.7.6
• 7d7ecd6 Bump go.step.sm/cli-utils from 0.7.5 to 0.7.6
• d0a5956 Merge pull request #114 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.29.3
• f5e2df3 Bump go.step.sm/crypto from 0.29.0 to 0.29.3
• e8d401a Merge pull request #112 from smallstep/dependabot/go_modules/github.com/smallstep/certificates-0.24.1
• 214cf23 Bump github.com/smallstep/certificates from 0.23.2 to 0.24.1
• f57456d Merge pull request #111 from smallstep/carl/update-readme
• 207cde2 Update README.md
• 4f6ce8b Merge pull request #110 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.29.0
• ca0cae4 Bump go.step.sm/crypto from 0.28.0 to 0.29.0
• 66c552f Merge pull request #109 from smallstep/dependabot/go_modules/golang.org/x/net-0.9.0
• 77a7ee5 Bump golang.org/x/net from 0.8.0 to 0.9.0
• 39898d8 Merge pull request #106 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.54.0
• d0faddd Bump google.golang.org/grpc from 1.53.0 to 1.54.0
• 30588ad Merge pull request #105 from smallstep/dependabot/go_modules/k8s.io/api-0.28.0-alpha.0
• c89e312 Bump k8s.io/api from 0.27.0-beta.0 to 0.28.0-alpha.0
• 831e9ae Merge pull request #107 from smallstep/dependabot/go_modules/k8s.io/apimachinery-0.28.0-alpha.0
• 1a14836 Merge pull request #104 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.28.0
• 896ac87 Bump k8s.io/apimachinery from 0.27.0-beta.0 to 0.28.0-alpha.0
• cdae6f2 Bump go.step.sm/crypto from 0.27.0 to 0.28.0
• 0053b61 Merge pull request #102 from smallstep/dependabot/go_modules/k8s.io/api-0.27.0-beta.0
• 6d9f293 Bump k8s.io/api from 0.27.0-alpha.3 to 0.27.0-beta.0
• 0405c62 Merge pull request #103 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.27.0
• d1b2fc2 Bump go.step.sm/crypto from 0.26.0 to 0.27.0
• 681561a Merge pull request #100 from smallstep/goreleaser-clean
• 0e03ad3 Replace deprecated GoReleaser --rm-dist flag with --clean
• 2ae9146 Merge pull request #99 from smallstep/dependabot/go_modules/github.com/golang/protobuf-1.5.3
• c074ba7 Merge pull request #98 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.26.0
• 5ee9244 Bump github.com/golang/protobuf from 1.5.2 to 1.5.3
• c7753f0 Bump go.step.sm/crypto from 0.25.2 to 0.26.0
• 4264ab8 Merge pull request #95 from smallstep/dependabot/go_modules/k8s.io/api-0.27.0-alpha.3
• 33ebd7c Bump k8s.io/api from 0.27.0-alpha.2 to 0.27.0-alpha.3
• b694a8c Merge pull request #96 from smallstep/dependabot/go_modules/k8s.io/apimachinery-0.27.0-alpha.3
• d2cfb39 Merge pull request #97 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.25.2
• e14c8fe Bump k8s.io/apimachinery from 0.27.0-alpha.2 to 0.27.0-alpha.3
• bb6ed44 Bump go.step.sm/crypto from 0.25.0 to 0.25.2
• ea50dfb Merge pull request #94 from smallstep/dependabot/go_modules/golang.org/x/net-0.8.0
• d396b41 Bump golang.org/x/net from 0.7.0 to 0.8.0
• 05fa3ab Merge pull request #93 from smallstep/dependabot/go_modules/k8s.io/api-0.27.0-alpha.2
• f3fd162 Bump k8s.io/api from 0.0.0-20190327184913-92d2ee7fc726 to 0.27.0-alpha.2
• 33fda88 Merge pull request #92 from smallstep/dependabot/go_modules/golang.org/x/net-0.7.0
• 2815317 Bump golang.org/x/net from 0.6.0 to 0.7.0
• d59de71 Merge pull request #91 from smallstep/readme-update
• b07e6a6 More readme updates
• 07d0ee6 More readme updates
• f32282b More readme updates
• a7cd292 Update README.md
• fbdf0d3 Merge pull request #87 from smallstep/dependabot/go_modules/golang.org/x/net-0.6.0
• d3e64f4 Bump golang.org/x/net from 0.5.0 to 0.6.0
• 6a05812 Merge pull request #88 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.53.0
• be90948 Bump google.golang.org/grpc from 1.52.3 to 1.53.0
• af2028f Merge pull request #89 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.25.0
• e8d7023 Merge pull request #90 from smallstep/max/dpependabot-auto-merge
• 95dd186 Enable auto-merge for dependabot PRs
• 9fa84e7 Bump go.step.sm/crypto from 0.23.2 to 0.25.0
• db42d2e Merge pull request #86 from smallstep/dependabot/go_modules/github.com/smallstep/certificates-0.23.2
• 3c1d865 Bump github.com/smallstep/certificates from 0.23.1 to 0.23.2
• 2e79f5e Merge pull request #84 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.23.2
• 4d73665 Bump go.step.sm/crypto from 0.23.1 to 0.23.2
• 0a2518e Merge pull request #85 from smallstep/dependabot/go_modules/google.golang.org/grpc-1.52.3
• aa75feb Bump google.golang.org/grpc from 1.52.0 to 1.52.3
• 2ae4fe8 Merge pull request #83 from smallstep/dependabot/go_modules/k8s.io/apimachinery-0.26.1
• 0585771 Bump k8s.io/apimachinery from 0.26.0 to 0.26.1

Thanks!

Those were the changes on v0.18.0!

Come join us on Discord to ask questions, chat about PKI, or get a sneak peak at the freshest PKI memes.