smallstep/cli v0.29.0-rc1 on GitHub

Official Release Artifacts

Below are the most popular artifacts for step on each platform.

For packaged versions (Homebrew, Scoop, etc.), see our installation docs.

Linux

macOS Darwin

Windows

Signatures and Checksums

step uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

cosign verify-blob \
  --certificate ~/Download/step_darwin_0.29.0-rc1_amd64.tar.gz.pem \
  --signature ~/Downloads/step_darwin_0.29.0-rc1_amd64.tar.gz.sig \
  --certificate-identity-regexp "https://github\.com/smallstep/workflows/.*" \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  ~/Downloads/step_darwin_0.29.0-rc1_amd64.tar.gz

The checksums.txt file (in the 'Assets' section below) contains a checksum for every artifact in the release.

Changelog

42d80a0 Update changelog for v0.29.0 (#1528)
c773a16 Merge pull request #1527 from smallstep/dependabot/github_actions/softprops/action-gh-release-2.5.0
10cda7c Bump softprops/action-gh-release from 2.4.2 to 2.5.0
2c7149f Merge pull request #1523 from smallstep/dependabot/go_modules/github.com/google/go-tpm-0.9.7
c5d31cf Bump github.com/google/go-tpm from 0.9.6 to 0.9.7
aca6309 Merge pull request #1519 from smallstep/dependabot/go_modules/golang.org/x/crypto-0.45.0
229c1bd Bump golang.org/x/crypto from 0.43.0 to 0.45.0
8fc072d Merge pull request #1524 from smallstep/dependabot/github_actions/actions/checkout-6.0.0
4785205 Merge pull request #1525 from smallstep/dependabot/github_actions/actions/setup-go-6.1.0
e3f0487 Bump actions/setup-go from 6.0.0 to 6.1.0
1a91c7c Bump actions/checkout from 5.0.1 to 6.0.0
5bcdad3 Merge pull request #1518 from smallstep/dependabot/github_actions/actions/checkout-5.0.1
c77f974 Bump actions/checkout from 5.0.0 to 5.0.1
142c0b1 Merge pull request #1516 from smallstep/mariano/fix-1492
9686d6f Make --attestation-uri incompatible with --kms
cde640b Merge pull request #1512 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.74.0
c15b854 Bump go.step.sm/crypto from 0.73.0 to 0.74.0
20a5ada Merge pull request #1513 from smallstep/dependabot/go_modules/golang.org/x/sys-0.38.0
07adb2a Merge pull request #1514 from smallstep/dependabot/go_modules/github.com/ccoveille/go-safecast-1.8.2
32f8ca1 Upgrade to v2 of github.com/ccoVeille/go-safecast
e1ab9d4 Bump github.com/ccoveille/go-safecast from 1.8.1 to 1.8.2
a3321a0 Merge pull request #1515 from smallstep/dependabot/github_actions/softprops/action-gh-release-2.4.2
de1f1d6 Bump softprops/action-gh-release from 2.4.1 to 2.4.2
de72540 Bump golang.org/x/sys from 0.37.0 to 0.38.0
60a338d Merge pull request #1511 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.73.0
dc1dc3d Bump go.step.sm/crypto from 0.72.0 to 0.73.0
ce1fb68 Merge pull request #1510 from smallstep/dependabot/go_modules/github.com/ccoveille/go-safecast-1.8.1
bccc1bc Use go-safecast generic Convert function to convert integers
03159db Remove deprecated +build tags
46ab13d Bump github.com/ccoveille/go-safecast from 1.7.0 to 1.8.1
9b02d1e Merge pull request #1508 from smallstep/dependabot/go_modules/github.com/smallstep/linkedca-0.25.0
df4cb83 Bump github.com/smallstep/linkedca from 0.24.0 to 0.25.0
092256d Merge pull request #1433 from itoffshore/jq
ac0f5c8 Merge pull request #1506 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.72.0
a8d42a7 Bump go.step.sm/crypto from 0.70.0 to 0.72.0
d2b42de Merge pull request #1504 from smallstep/dependabot/go_modules/github.com/ccoveille/go-safecast-1.7.0
c677881 Merge pull request #1505 from smallstep/dependabot/go_modules/github.com/smallstep/cli-utils-0.12.2
c0575b2 Bump github.com/smallstep/cli-utils from 0.12.1 to 0.12.2
800b3c0 Bump github.com/ccoveille/go-safecast from 1.6.1 to 1.7.0
2715db0 Merge pull request #1500 from smallstep/dependabot/go_modules/github.com/slackhq/nebula-1.9.7
656ab02 Merge pull request #1501 from smallstep/dependabot/github_actions/softprops/action-gh-release-2.4.1
9575fae Merge pull request #1502 from smallstep/dependabot/go_modules/golang.org/x/crypto-0.43.0
ca8f21c Bump golang.org/x/crypto from 0.42.0 to 0.43.0
4e5982c Bump softprops/action-gh-release from 2.3.4 to 2.4.1
5aae3da Bump github.com/slackhq/nebula from 1.9.6 to 1.9.7
d555219 Merge pull request #1495 from smallstep/mariano/client-authentication
c8fd9a7 Do not require client authentication if not enabled
48e8a11 Merge pull request #1493 from smallstep/dependabot/go_modules/google.golang.org/protobuf-1.36.10
869f9fb Merge pull request #1494 from smallstep/dependabot/github_actions/softprops/action-gh-release-2.3.4
19ad7fd Bump softprops/action-gh-release from 2.3.3 to 2.3.4
23fe796 Bump google.golang.org/protobuf from 1.36.9 to 1.36.10
6386950 Merge pull request #1490 from smallstep/mariano/gcp-organization-id
5c85efa Add remote configuration of the GCP organization id
57a60ca Merge pull request #1489 from smallstep/dependabot/go_modules/github.com/google/go-tpm-0.9.6
b5a19eb Bump github.com/google/go-tpm from 0.9.5 to 0.9.6
0049c9f Merge pull request #1486 from smallstep/dependabot/github_actions/ad-m/github-push-action-1.0.0
9c40432 Merge pull request #1487 from smallstep/dependabot/go_modules/google.golang.org/protobuf-1.36.9
c5a51f3 Bump google.golang.org/protobuf from 1.36.8 to 1.36.9
b345c89 Bump ad-m/github-push-action from 0.8.0 to 1.0.0
f9fbe9b Merge pull request #1483 from smallstep/dependabot/go_modules/golang.org/x/crypto-0.42.0
7e79592 Remove testscript conditionals for Go versions < 1.24
c186eb7 Update expected error message for insecure RSA key generation
ce15665 Make a bad RSA key by overriding the modulus
c104030 Bump golang.org/x/crypto from 0.41.0 to 0.42.0
5303cb0 Merge pull request #1481 from smallstep/dependabot/github_actions/softprops/action-gh-release-2.3.3
3d0f34b Merge pull request #1482 from smallstep/dependabot/github_actions/actions/setup-go-6.0.0
e40ebf4 Bump actions/setup-go from 5.5.0 to 6.0.0
719cc23 Bump softprops/action-gh-release from 2.3.2 to 2.3.3
cfc10e2 Merge pull request #1480 from smallstep/dependabot/go_modules/github.com/stretchr/testify-1.11.1
30767b3 Bump github.com/stretchr/testify from 1.11.0 to 1.11.1
c04ccf5 Merge pull request #1477 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.70.0
50d0121 Bump go.step.sm/crypto from 0.69.0 to 0.70.0
1e951c7 Merge pull request #1476 from smallstep/dependabot/go_modules/google.golang.org/protobuf-1.36.8
447e925 Merge pull request #1478 from smallstep/dependabot/go_modules/github.com/stretchr/testify-1.11.0
1cd0452 Bump github.com/stretchr/testify from 1.10.0 to 1.11.0
dc17d3d Bump google.golang.org/protobuf from 1.36.7 to 1.36.8
694966a Update certinfo to v1.15.0 (#1475)
b4bdba3 Merge pull request #1474 from smallstep/mariano/pkix-fingerprint
800d82a Add PKIX fingerprint support
36fa739 Merge pull request #1471 from smallstep/dependabot/go_modules/golang.org/x/crypto-0.41.0
60535e2 Bump golang.org/x/crypto from 0.40.0 to 0.41.0
937ceed Merge pull request #1470 from smallstep/dependabot/go_modules/google.golang.org/protobuf-1.36.7
1edf719 Bump google.golang.org/protobuf from 1.36.6 to 1.36.7
98e8525 Merge pull request #1468 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.69.0
8db2ad5 Bump go.step.sm/crypto from 0.68.0 to 0.69.0
031e74a Merge pull request #1469 from smallstep/dependabot/go_modules/golang.org/x/term-0.34.0
b68f708 Bump golang.org/x/term from 0.33.0 to 0.34.0
37a72c6 Merge pull request #1467 from smallstep/dependabot/github_actions/actions/checkout-5.0.0
4b0f664 Bump actions/checkout from 4.2.2 to 5.0.0
7bec522 Merge pull request #1466 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.68.0
31da36b Bump go.step.sm/crypto from 0.67.0 to 0.68.0
8dd49de Merge pull request #1465 from smallstep/dependabot/go_modules/software.sslmate.com/src/go-pkcs12-0.6.0
bd2ab50 Merge pull request #1464 from smallstep/dependabot/go_modules/github.com/slackhq/nebula-1.9.6
1b104f6 Bump software.sslmate.com/src/go-pkcs12 from 0.5.0 to 0.6.0
a00803d Bump github.com/slackhq/nebula from 1.9.5 to 1.9.6
1308bd9 Merge pull request #1462 from aleksipirttimaa/bug/makefile-darwin--arm64
8a0796a Merge pull request #1459 from smallstep/dependabot/go_modules/golang.org/x/crypto-0.40.0
25c7a68 Bump golang.org/x/crypto from 0.39.0 to 0.40.0
8960100 Merge pull request #1458 from smallstep/dependabot/go_modules/github.com/fxamacker/cbor/v2-2.9.0
2af176d Bump github.com/fxamacker/cbor/v2 from 2.8.0 to 2.9.0
3015473 Merge pull request #1463 from smallstep/carl/policy-scopes
450bd22 Add required param to help text for step ca policy
4cd5ad9 Fix Makefile for darwin/amd64 -targets
560e846 add jq to docker images

Thanks!

Those were the changes on v0.29.0-rc1!

Come join us on Discord to ask questions, chat about PKI, or get a sneak peek at the freshest PKI memes.

smallstep/cli v0.29.0-rc1 Step CLI v0.29.0-rc1 (25-12-02) on GitHub