Bump go.step.sm/crypto from 0.25.1 to 0.75.0

Open dependabot[bot] opened this issue 1 month ago • 0 comments

Bumps go.step.sm/crypto from 0.25.1 to 0.75.0.

Release notes

Sourced from go.step.sm/crypto's releases.

Release v0.74.0

What's Changed

Add support for providing *tpm.TPM instance when creating a TPMKMS by @maraino in smallstep/crypto#885

Dependencies

Bump github.com/aws/aws-sdk-go-v2/config from 1.31.15 to 1.31.16 by @dependabot[bot] in smallstep/crypto#889

Bump modernc.org/sqlite from 1.39.1 to 1.40.0 by @dependabot[bot] in smallstep/crypto#888

Bump github.com/aws/aws-sdk-go-v2/service/kms from 1.46.2 to 1.47.0 by @dependabot[bot] in smallstep/crypto#887

Bump google.golang.org/api from 0.253.0 to 0.254.0 by @dependabot[bot] in smallstep/crypto#886

Full Changelog: https://github.com/smallstep/crypto/compare/v0.73.0...v0.74.0

Release v0.73.0

What's Changed

Add support for AES128 and AES256 YubiKey management keys by @hslatman in smallstep/crypto#884

Dependencies

chore(deps): Bump github.com/aws/aws-sdk-go-v2/config from 1.31.12 to 1.31.13 by @dependabot[bot] in smallstep/crypto#875

chore(deps): Bump google.golang.org/api from 0.251.0 to 0.252.0 by @dependabot[bot] in smallstep/crypto#877

chore(deps): Bump github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.12.0 to 1.13.0 by @dependabot[bot] in smallstep/crypto#879

chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/kms from 1.45.6 to 1.46.0 by @dependabot[bot] in smallstep/crypto#878

chore(deps): Bump cloud.google.com/go/kms from 1.23.1 to 1.23.2 by @dependabot[bot] in smallstep/crypto#876

chore(deps): Bump github.com/aws/aws-sdk-go-v2/config from 1.31.13 to 1.31.15 by @dependabot[bot] in smallstep/crypto#882

chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/kms from 1.46.0 to 1.46.2 by @dependabot[bot] in smallstep/crypto#880

chore(deps): Bump google.golang.org/api from 0.252.0 to 0.253.0 by @dependabot[bot] in smallstep/crypto#881

Full Changelog: https://github.com/smallstep/crypto/compare/v0.72.0...v0.73.0

Release v0.72.0

No release notes provided.

Release v0.71.0

No release notes provided.

Release v0.70.0

No release notes provided.

Release v0.69.0

What's Changed

Accept nonRepudiation when unmarshalling keyUsage by @neverpanic in smallstep/crypto#811

Fix usage of azure keyvault client-secret when specified in URI by @dellekappa in smallstep/crypto#819

Correctly set the machine store flag when requested by @areed in smallstep/crypto#802

... (truncated)

Commits

cd9e473 Merge pull request #904 from smallstep/mariano/mackms-se
95d1c3c Add support for P-384 keys on the secure enclave
da4056b Merge pull request #901 from smallstep/dependabot/go_modules/google.golang.or...
29de973 chore(deps): Bump google.golang.org/grpc from 1.76.0 to 1.77.0
e07fa48 Merge pull request #900 from smallstep/dependabot/go_modules/golang.org/x/cry...
fac6cb4 Merge pull request #902 from smallstep/dependabot/go_modules/github.com/aws/a...
b62fe19 chore(deps): Bump golang.org/x/crypto from 0.43.0 to 0.45.0
663c594 chore(deps): Bump github.com/aws/aws-sdk-go-v2/config
d878b9f Merge pull request #903 from smallstep/dependabot/go_modules/google.golang.or...
179b104 Skip Cavium root validity test until January 15th, 2026
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Dec 03 '25 10:12 dependabot[bot]