Skip to content

Releases: smallstep/cli

Step CLI v0.28.3 (25-02-20)

20 Feb 17:49
74c1b44
Compare
Choose a tag to compare

Official Release Artifacts

Below are the most popular artifacts for step on each platform.

For packaged versions (Homebrew, Scoop, etc.), see our installation docs.

Linux

macOS Darwin

Windows

Signatures and Checksums

step uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

cosign verify-blob \
  --certificate ~/Download/step_darwin_0.28.3_amd64.tar.gz.pem \
  --signature ~/Downloads/step_darwin_0.28.3_amd64.tar.gz.sig \
  --certificate-identity-regexp "https://github\.com/smallstep/workflows/.*" \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  ~/Downloads/step_darwin_0.28.3_amd64.tar.gz

The checksums.txt file (in the 'Assets' section below) contains a checksum for every artifact in the release.

Changelog

  • 74c1b44 Bump certificates to v0.28.2 | updated go.mod golang to 1.23 (#1365)
  • 140b479 Changelog for v0.28.3 (#1364)
  • 3c3c6bf Merge pull request #1363 from smallstep/herman/fix-gosec
  • 475b7eb Fix new golangci-lint issues
  • cee7040 Merge pull request #1355 from smallstep/dependabot/go_modules/golang.org/x/crypto-0.33.0
  • 6c2b99b Bump golang.org/x/crypto from 0.32.0 to 0.33.0
  • 1d86322 Merge pull request #1357 from smallstep/dependabot/go_modules/golang.org/x/term-0.29.0
  • 0a0c3cd Bump golang.org/x/term from 0.28.0 to 0.29.0
  • 367528b Merge pull request #1356 from smallstep/dependabot/go_modules/golang.org/x/sys-0.30.0
  • 168e5f8 Merge pull request #1358 from smallstep/dependabot/go_modules/google.golang.org/protobuf-1.36.5
  • f0226bc Bump google.golang.org/protobuf from 1.36.4 to 1.36.5
  • 0ecda7b Bump golang.org/x/sys from 0.29.0 to 0.30.0
  • ef5521b Merge pull request #1350 from smallstep/mariano/redirect-uri
  • 283c2d5 Update utils/cautils/bootstrap.go
  • 4f2b63a Merge pull request #1353 from smallstep/mariano/renew
  • 36d189b Use a released version of crypto
  • 153b692 Add help with the limitations of the --kms flag
  • da3b6d3 Apply suggestions from code review
  • 1c4695d Use go.step.sm/crypto from smallstep/crypto#689
  • 611b9a7 Fix linter errors
  • 0bd0223 Merge pull request #1354 from smallstep/dependabot/go_modules/github.com/golang/glog-1.2.4
  • b4efcff Bump github.com/golang/glog from 1.2.2 to 1.2.4
  • bbc2f41 Add support for KMS in the ca renew and rekey commands
  • fba09a1 Merge pull request #1352 from smallstep/dependabot/github_actions/actions/setup-go-5.3.0
  • b8d5614 Bump actions/setup-go from 5.2.0 to 5.3.0
  • 996e323 Merge pull request #1351 from smallstep/dependabot/go_modules/google.golang.org/protobuf-1.36.4
  • 00d5eab Bump google.golang.org/protobuf from 1.36.3 to 1.36.4
  • 0ae8763 Handle the redirect-url flag
  • 4fbb813 Merge pull request #1347 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.57.0
  • 0d3bd60 Bump go.step.sm/crypto from 0.56.0 to 0.57.0
  • fc73499 Merge pull request #1348 from smallstep/dependabot/go_modules/google.golang.org/protobuf-1.36.3
  • 49aa134 Bump google.golang.org/protobuf from 1.36.2 to 1.36.3
  • 7362344 Merge pull request #1346 from smallstep/dependabot/github_actions/softprops/action-gh-release-2.2.1
  • 5eee4c4 Bump softprops/action-gh-release from 2.2.0 to 2.2.1
  • bb5069f Merge pull request #1345 from smallstep/dependabot/go_modules/google.golang.org/protobuf-1.36.2
  • 6af48cf Bump google.golang.org/protobuf from 1.36.1 to 1.36.2
  • 45676f9 Merge pull request #1339 from smallstep/herman/upgrade-linkedca-v0.23.0
  • 49c4f76 Upgrade github.com/smallstep/certificates to cda0eec3
  • afa6eac Use github.com/smallstep/linkedca @ v0.23.0
  • 7a16b1f Merge pull request #1342 from smallstep/dependabot/go_modules/golang.org/x/crypto-0.32.0
  • e6d561e Bump golang.org/x/crypto from 0.31.0 to 0.32.0
  • 178edd4 Merge pull request #1340 from smallstep/dependabot/go_modules/golang.org/x/term-0.28.0
  • 4619d7a Bump golang.org/x/term from 0.27.0 to 0.28.0
  • 53acb17 Merge pull request #1341 from smallstep/dependabot/go_modules/golang.org/x/sys-0.29.0
  • df2f690 Bump golang.org/x/sys from 0.28.0 to 0.29.0
  • 79884f7 Merge pull request #1338 from smallstep/dependabot/go_modules/github.com/google/go-tpm-0.9.3
  • 31dfee4 Bump github.com/google/go-tpm from 0.9.2 to 0.9.3
  • d51feb2 Merge pull request #1337 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.56.0
  • e7f97f9 Bump go.step.sm/crypto from 0.55.0 to 0.56.0
  • 151fdb3 Merge pull request #1336 from smallstep/dependabot/go_modules/google.golang.org/protobuf-1.36.1
  • efba69c Upgrade golang.org/x/net to v0.33.0
  • d885bcc Bump google.golang.org/protobuf from 1.36.0 to 1.36.1
  • b597c44 Merge pull request #1333 from smallstep/dependabot/go_modules/github.com/google/go-tpm-0.9.2
  • 05f9342 Merge pull request #1334 from smallstep/dependabot/go_modules/google.golang.org/protobuf-1.36.0
  • a1502e6 Bump google.golang.org/protobuf from 1.35.2 to 1.36.0
  • 03fb39a Bump github.com/google/go-tpm from 0.9.1 to 0.9.2
  • a3be82f Merge pull request #1331 from smallstep/dependabot/github_actions/actions/setup-go-5.2.0
  • 2c6f460 Merge pull request #1332 from smallstep/dependabot/github_actions/softprops/action-gh-release-2.2.0
  • 37e7da5 Bump softprops/action-gh-release from 2.1.0 to 2.2.0
  • ce9f6da Bump actions/setup-go from 5.1.0 to 5.2.0
  • 6d65706 Merge pull request #1328 from smallstep/dependabot/go_modules/golang.org/x/crypto-0.31.0
  • d2c05a3 Bump golang.org/x/crypto from 0.30.0 to 0.31.0
  • e7cd11a Merge pull request #1326 from smallstep/dependabot/go_modules/github.com/slackhq/nebula-1.9.5
  • 4de3f87 Update to github.com/smallstep/certificates @ 51e253be
  • b509945 Bump github.com/slackhq/nebula from 1.9.4 to 1.9.5
  • 503a05e Merge pull request #1324 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.55.0
  • f7fa6c4 Bump go.step.sm/crypto from 0.54.2 to 0.55.0
  • 739bf9a Merge pull request #1327 from smallstep/dependabot/go_modules/golang.org/x/crypto-0.30.0
  • e01cd4b Bump golang.org/x/crypto from 0.29.0 to 0.30.0
  • 3548dcf Merge pull request #1325 from smallstep/dependabot/go_modules/golang.org/x/sys-0.28.0
  • 6b2d879...
Read more

Step CLI v0.28.2 (24-11-20)

20 Nov 19:13
6fb3e24
Compare
Choose a tag to compare

Official Release Artifacts

Below are the most popular artifacts for step on each platform.

For packaged versions (Homebrew, Scoop, etc.), see our installation docs.

Linux

macOS Darwin

Windows

Signatures and Checksums

step uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

cosign verify-blob \
  --certificate ~/Download/step_darwin_0.28.2_amd64.tar.gz.pem \
  --signature ~/Downloads/step_darwin_0.28.2_amd64.tar.gz.sig \
  --certificate-identity-regexp "https://github\.com/smallstep/workflows/.*" \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  ~/Downloads/step_darwin_0.28.2_amd64.tar.gz

The checksums.txt file (in the 'Assets' section below) contains a checksum for every artifact in the release.

Changelog

Thanks!

Those were the changes on v0.28.2!

Come join us on Discord to ask questions, chat about PKI, or get a sneak peek at the freshest PKI memes.

Step CLI v0.28.2-rc2 (24-11-20)

20 Nov 18:43
1dc2642
Compare
Choose a tag to compare
Pre-release

Official Release Artifacts

Below are the most popular artifacts for step on each platform.

For packaged versions (Homebrew, Scoop, etc.), see our installation docs.

Linux

macOS Darwin

Windows

Signatures and Checksums

step uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

cosign verify-blob \
  --certificate ~/Download/step_darwin_0.28.2-rc2_amd64.tar.gz.pem \
  --signature ~/Downloads/step_darwin_0.28.2-rc2_amd64.tar.gz.sig \
  --certificate-identity-regexp "https://github\.com/smallstep/workflows/.*" \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  ~/Downloads/step_darwin_0.28.2-rc2_amd64.tar.gz

The checksums.txt file (in the 'Assets' section below) contains a checksum for every artifact in the release.

Changelog

  • 1dc2642 [ci] fix deprecation warnings from goreleaser linter

Thanks!

Those were the changes on v0.28.2-rc2!

Come join us on Discord to ask questions, chat about PKI, or get a sneak peek at the freshest PKI memes.

Step CLI v0.28.2-rc1 (24-11-20)

20 Nov 18:26
ba888b4
Compare
Choose a tag to compare
Pre-release

Official Release Artifacts

Below are the most popular artifacts for step on each platform.

For packaged versions (Homebrew, Scoop, etc.), see our installation docs.

Linux

macOS Darwin

Windows

Signatures and Checksums

step uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

cosign verify-blob \
  --certificate ~/Download/step_darwin_0.28.2-rc1_amd64.tar.gz.pem \
  --signature ~/Downloads/step_darwin_0.28.2-rc1_amd64.tar.gz.sig \
  --certificate-identity-regexp "https://github\.com/smallstep/workflows/.*" \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  ~/Downloads/step_darwin_0.28.2-rc1_amd64.tar.gz

The checksums.txt file (in the 'Assets' section below) contains a checksum for every artifact in the release.

Changelog

  • ba888b4 Use * rather than explicit version to find arm64 builds
  • d49e5c5 [ci] goreleaser changed build directory for arm64 to arm64_v8.0

Thanks!

Those were the changes on v0.28.2-rc1!

Come join us on Discord to ask questions, chat about PKI, or get a sneak peek at the freshest PKI memes.

Release v0.28.1

20 Nov 02:00
a7ea59b
Compare
Choose a tag to compare
Changelog for 0.28.1 (#1318)

Step CLI v0.28.0 (24-10-30)

30 Oct 00:03
874a879
Compare
Choose a tag to compare

Official Release Artifacts

Below are the most popular artifacts for step on each platform.

For packaged versions (Homebrew, Scoop, etc.), see our installation docs.

Linux

macOS Darwin

Windows

Signatures and Checksums

step uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

cosign verify-blob \
  --certificate ~/Download/step_darwin_0.28.0_amd64.tar.gz.pem \
  --signature ~/Downloads/step_darwin_0.28.0_amd64.tar.gz.sig \
  --certificate-identity-regexp "https://github\.com/smallstep/workflows/.*" \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  ~/Downloads/step_darwin_0.28.0_amd64.tar.gz

The checksums.txt file (in the 'Assets' section below) contains a checksum for every artifact in the release.

Changelog

  • 874a879 Bump certificates to 0.28.0 (#1307)
  • 5415196 Update changelog for v0.28.0 (#1306)
  • e3a16d4 Remove --bundle from step ca certificate usage text (#1302)
  • b226259 Merge pull request #1301 from smallstep/herman/fix-step-context-cli-utils
  • ebeca4f Add disableSSHCAUser and disableSSHCAHost attributes to GCP provisioner (#1305)
  • 4dfc345 Merge pull request #1304 from smallstep/dependabot/github_actions/actions/checkout-4.2.2
  • 924009d Merge pull request #1303 from smallstep/dependabot/github_actions/actions/setup-go-5.1.0
  • 4cba2d4 Bump actions/checkout from 4.2.1 to 4.2.2
  • eaff111 Bump actions/setup-go from 5.0.2 to 5.1.0
  • 8bd4d48 Fix --context being ignored in commands that rely on certificates
  • f619bce Merge pull request #1300 from stefaanderoeck/stefaan/android-v0.20.0
  • 51bf14b OpenInBrowser on Android as well

Thanks!

Those were the changes on v0.28.0!

Come join us on Discord to ask questions, chat about PKI, or get a sneak peek at the freshest PKI memes.

Step CLI v0.27.5 (24-10-17)

17 Oct 01:40
b436480
Compare
Choose a tag to compare

Official Release Artifacts

Below are the most popular artifacts for step on each platform.

For packaged versions (Homebrew, Scoop, etc.), see our installation docs.

Linux

macOS Darwin

Windows

Signatures and Checksums

step uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

cosign verify-blob \
  --certificate ~/Download/step_darwin_0.27.5_amd64.tar.gz.pem \
  --signature ~/Downloads/step_darwin_0.27.5_amd64.tar.gz.sig \
  --certificate-identity-regexp "https://github\.com/smallstep/workflows/.*" \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  ~/Downloads/step_darwin_0.27.5_amd64.tar.gz

The checksums.txt file (in the 'Assets' section below) contains a checksum for every artifact in the release.

Changelog

  • b436480 Bump certificates to 0.27.5 (#1299)
  • 3b5bc1a Update changelog for 0.27.5 (#1298)
  • e2ff4af Merge pull request #1297 from smallstep/dependabot/go_modules/github.com/urfave/cli-1.22.16
  • 1380634 Bump github.com/urfave/cli from 1.22.15 to 1.22.16
  • 87bcf1a Merge pull request #1296 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.54.0
  • b4d19af Bump go.step.sm/crypto from 0.53.0 to 0.54.0
  • 3d38cfe Merge pull request #1292 from smallstep/dependabot/go_modules/google.golang.org/protobuf-1.35.1
  • ea6c385 Bump google.golang.org/protobuf from 1.34.2 to 1.35.1
  • bb7bdfe Merge pull request #1293 from smallstep/dependabot/github_actions/actions/checkout-4.2.1
  • 5accd75 Merge pull request #1290 from smallstep/dependabot/go_modules/golang.org/x/crypto-0.28.0
  • b2e9c34 Bump actions/checkout from 4.2.0 to 4.2.1
  • a54eb69 Bump golang.org/x/crypto from 0.27.0 to 0.28.0
  • e19cb50 Merge pull request #1287 from smallstep/herman/remove-scope-flag
  • 9cbb404 Add --remove-scope flag
  • d8ddcb6 Merge pull request #1285 from smallstep/dependabot/github_actions/actions/checkout-4.2.0
  • b8de57f Merge pull request #1286 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.53.0
  • 4aef7d0 Bump go.step.sm/crypto from 0.51.2 to 0.53.0
  • dd2c416 Bump actions/checkout from 4.1.7 to 4.2.0
  • e3c3f20 Merge pull request #1273 from smallstep/herman/use-renamed-cli-utils-module
  • 24f94b0 Add basic tests for CLI app initialization and execution
  • 177f391 Use github.com/smallstep/cli-utils in CLI main
  • de85fd0 Use github.com/smallstep/cli-utils and reorder imports
  • bec3072 Merge pull request #1284 from smallstep/herman/768kb-docker-fix
  • 6d6af3a Add missing backslash
  • c7fbf85 Do same commands as alpine Dockerfile
  • cd6758c Merge pull request #1279 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.52.0
  • 36e355b Merge pull request #1278 from smallstep/dependabot/go_modules/github.com/slackhq/nebula-1.9.4
  • f089b5e Bump go.step.sm/crypto from 0.51.2 to 0.52.0
  • bf61efc Bump github.com/slackhq/nebula from 1.9.3 to 1.9.4
  • 88d6a6f Merge pull request #1277 from smallstep/jdoss/Filter_armhf6_deb
  • 053f042 Add if statement to skip uploading armhf6 deb due to GCP AR issues.

Thanks!

Those were the changes on v0.27.5!

Come join us on Discord to ask questions, chat about PKI, or get a sneak peek at the freshest PKI memes.

Step CLI v0.27.4 (24-09-13)

13 Sep 17:37
acb623a
Compare
Choose a tag to compare

Official Release Artifacts

Below are the most popular artifacts for step on each platform.

For packaged versions (Homebrew, Scoop, etc.), see our installation docs.

Linux

macOS Darwin

Windows

Signatures and Checksums

step uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

cosign verify-blob \
  --certificate ~/Download/step_darwin_0.27.4_amd64.tar.gz.pem \
  --signature ~/Downloads/step_darwin_0.27.4_amd64.tar.gz.sig \
  --certificate-identity-regexp "https://github\.com/smallstep/workflows/.*" \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  ~/Downloads/step_darwin_0.27.4_amd64.tar.gz

The checksums.txt file (in the 'Assets' section below) contains a checksum for every artifact in the release.

Changelog

  • acb623a Bump smallstep/certificates to 0.27.4 (#1276)
  • 111bcb9 Bumping CHANGELOG to 0.27.4 (#1275)
  • 897b9de Update changelog for 0.27.3 (#1272)
  • ded1861 Allow input from stdin for 'certificate fingerprint' command (#1270)
  • 33edf23 Merge pull request #1269 from smallstep/dependabot/go_modules/go.mozilla.org/pkcs7-0.9.0
  • c5c31ea Merge pull request #1268 from smallstep/dependabot/go_modules/golang.org/x/crypto-0.27.0
  • 90241e5 Bump go.mozilla.org/pkcs7
  • f5d9998 Bump golang.org/x/crypto from 0.26.0 to 0.27.0
  • a1fa442 Merge pull request #1264 from smallstep/dependabot/go_modules/software.sslmate.com/src/go-pkcs12-0.5.0
  • 4dc4f3d Merge pull request #1265 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.51.2
  • 936fb7b Bump go.step.sm/crypto from 0.51.1 to 0.51.2
  • 203d34e Bump software.sslmate.com/src/go-pkcs12 from 0.4.0 to 0.5.0
  • 036917a Merge pull request #1262 from magnuswatn/parse_crl_entry_extensions
  • 88765a7 Parse crlEntryExtensions in CRLs
  • d4fc1e9 Merge pull request #1202 from smallstep/dependabot/go_modules/github.com/google/go-tpm-0.9.1
  • f14730a Bump github.com/google/go-tpm from 0.9.0 to 0.9.1
  • 5df4a21 Merge pull request #1190 from smallstep/dependabot/go_modules/github.com/slackhq/nebula-1.9.3
  • a6a4214 Fix linter issues
  • 1e8f43b Run go mod tidy
  • f89eeab Bump github.com/slackhq/nebula from 1.8.2 to 1.9.3
  • 01b22f4 Fix Release URLs with new file name formats. (#1256)
  • 8880c6c Merge pull request #1257 from smallstep/carl/powershell-vt100
  • d591655 Guard legacy Windows vt100 setup syscall on more recent builds of Windows
  • 0671a3d Merge pull request #1254 from smallstep/jdoss/Prerelease_fixes
  • 6e72a38 Switch to goreleaser.yml@main.

Thanks!

Those were the changes on v0.27.4!

Come join us on Discord to ask questions, chat about PKI, or get a sneak peek at the freshest PKI memes.

Step CLI v0.27.3-rc25 (24-08-15)

15 Aug 16:32
b7500df
Compare
Choose a tag to compare
Pre-release

Official Release Artifacts

Below are the most popular artifacts for step on each platform.

For packaged versions (Homebrew, Scoop, etc.), see our installation docs.

Linux

macOS Darwin

Windows

Signatures and Checksums

step uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

cosign verify-blob \
  --certificate ~/Download/step_darwin_0.27.3-rc25_amd64.tar.gz.pem \
  --signature ~/Downloads/step_darwin_0.27.3-rc25_amd64.tar.gz.sig \
  --certificate-identity-regexp "https://github\.com/smallstep/workflows/.*" \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  ~/Downloads/step_darwin_0.27.3-rc25_amd64.tar.gz

The checksums.txt file (in the 'Assets' section below) contains a checksum for every artifact in the release.

Changelog

Thanks!

Those were the changes on v0.27.3-rc25!

Come join us on Discord to ask questions, chat about PKI, or get a sneak peek at the freshest PKI memes.

Release v0.27.3-rc24

15 Aug 16:19
a210e4f
Compare
Choose a tag to compare
Release v0.27.3-rc24 Pre-release
Pre-release
Disable CI again.