Skip to content

build(deps): bump github.com/smallstep/certificates from 0.30.0-rc3 to 0.30.0#877

Open
dependabot[bot] wants to merge 1 commit intov5-devfrom
dependabot/go_modules/github.com/smallstep/certificates-0.30.0
Open

build(deps): bump github.com/smallstep/certificates from 0.30.0-rc3 to 0.30.0#877
dependabot[bot] wants to merge 1 commit intov5-devfrom
dependabot/go_modules/github.com/smallstep/certificates-0.30.0

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Mar 19, 2026

Bumps github.com/smallstep/certificates from 0.30.0-rc3 to 0.30.0.

Release notes

Sourced from github.com/smallstep/certificates's releases.

Release v0.30.0

No release notes provided.

Step CA v0.30.0-rc7 (26-03-18)

Official Release Artifacts

Linux

OSX Darwin

Windows

For more builds across platforms and architectures, see the Assets section below. And for packaged versions (Docker, k8s, Homebrew), see our installation docs.

Don't see the artifact you need? Open an issue here.

Signatures and Checksums

step-ca uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

cosign verify-blob \
  --bundle step-ca_darwin_0.30.0-rc7_amd64.tar.gz.sigstore.json \
  --certificate-identity-regexp "https://github\.com/smallstep/workflows/.*" \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  step-ca_darwin_0.30.0-rc7_amd64.tar.gz

The checksums.txt file (in the Assets section below) contains a checksum for every artifact in the release.

Changelog

  • d34619c55e5cd46ce08d8bdb8c846df2c4d8aca0 Update CHANGELOG for 0.30.0 (#2603)
  • cfcbe4c2f93ec7e7f0347b4d0190353946189be7 Merge pull request #2602 from smallstep/mariano/scep-type-check
  • e6da031d5125cfd99fe9a26f74bb41e4dacca4ef Add scep integration tests
  • d4103d6626a6b1e95223610b7fc46757aaa255b8 Merge pull request #2511 from savely-krasovsky/master
  • 07e4424836212198eaabed92517a98e0ec993175 Add revocation reason code to CRL | replace deprecated pkix.RevokeCertificate

... (truncated)

Changelog

Sourced from github.com/smallstep/certificates's changelog.

[0.30.0] - 2026-03-18

Added

  • smallstep/certificates#2526
  • smallstep/certificates#2570
  • smallstep/certificates#2533

Changed

  • Upgrade HSM-enabled Docker images from Debian Bookworm (12) to Debian Trixie smallstep/certificates#2493
  • Use JSON array format for Dockerfile's CMD instruction. This prevents shell interpolation of environment variables like CONFIGPATH and PWDPATH, ensuring consistent command execution. Commands can still be overridden via smallstep/certificates#2493

Fixed

  • Fix CRL IssuingDistributionPoint marshaling to correctly unset OnlyContainsUserCerts and OnlyContainsCACertssmallstep/certificates#2511
  • Fix CRL DER download content-disposition filename extension from .der to .crlsmallstep/certificates#2537
  • smallstep/certificates#2379
  • smallstep/certificates#1893
  • smallstep/certificates#2513
  • smallstep/certificates#2569
  • smallstep/certificates#2517
  • smallstep/certificates#2515

[0.29.0] - 2025-12-03

Added

  • smallstep/certificates#2370
  • smallstep/certificates#2382
  • smallstep/certificates#2408
  • smallstep/certificates#2461
  • smallstep/certificates#2463

Changed

  • smallstep/certificates#2343

Fixed

  • smallstep/certificates#2338
  • smallstep/certificates#2435
  • smallstep/certificates#2444

Security

... (truncated)

Commits
  • d34619c Update CHANGELOG for 0.30.0 (#2603)
  • cfcbe4c Merge pull request #2602 from smallstep/mariano/scep-type-check
  • e6da031 Add scep integration tests
  • d4103d6 Merge pull request #2511 from savely-krasovsky/master
  • 07e4424 Add revocation reason code to CRL | replace deprecated pkix.RevokeCertificate
  • 3ce5113 Bump nosql and crypto (#2600)
  • 927ecc7 Add actions and security-events permissions to release CI job (#2593)
  • c14008e Fix the test for CRL disposition (#2599)
  • 10cd5c2 Merge pull request #2537 from filimonic/crl-fix-crl-file-extension
  • 6f1a228 Merge pull request #2594 from smallstep/dependabot/go_modules/github.com/goog...
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [github.com/smallstep/certificates](https://github.com/smallstep/certificates) from 0.30.0-rc3 to 0.30.0.
- [Release notes](https://github.com/smallstep/certificates/releases)
- [Changelog](https://github.com/smallstep/certificates/blob/master/CHANGELOG.md)
- [Commits](smallstep/certificates@v0.30.0-rc3...v0.30.0)

---
updated-dependencies:
- dependency-name: github.com/smallstep/certificates
  dependency-version: 0.30.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Mar 19, 2026
@CLAassistant
Copy link

CLA assistant check
Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
You have signed the CLA already but the status is still pending? Let us recheck it.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant