Step CLI v0.27.5 (24-10-17)

Official Release Artifacts

Below are the most popular artifacts for step on each platform.

For packaged versions (Homebrew, Scoop, etc.), see our installation docs.

Linux

• 📦 step_linux_0.27.5_amd64.tar.gz
• 📦 step_linux_0.27.5_arm64.tar.gz
• 📦 step_linux_0.27.5_armv7.tar.gz
• 📦 step-cli_0.27.5-1_amd64.deb
• 📦 step-cli-0.27.5-1.x86_64.rpm
• 📦 step-cli_0.27.5-1_arm64.deb
• 📦 step-cli-0.27.5-1.aarch64.rpm
• see Assets below for more builds

macOS Darwin

• 📦 step_darwin_0.27.5_amd64.tar.gz
• 📦 step_darwin_0.27.5_arm64.tar.gz

Windows

• 📦 step_windows_0.27.5_amd64.zip
• 📦 step_windows_0.27.5_arm64.zip

Signatures and Checksums

step uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

cosign verify-blob \
  --certificate ~/Download/step_darwin_0.27.5_amd64.tar.gz.pem \
  --signature ~/Downloads/step_darwin_0.27.5_amd64.tar.gz.sig \
  --certificate-identity-regexp "https://github\.com/smallstep/workflows/.*" \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  ~/Downloads/step_darwin_0.27.5_amd64.tar.gz

The checksums.txt file (in the 'Assets' section below) contains a checksum for every artifact in the release.

Changelog

• b436480 Bump certificates to 0.27.5 (#1299)
• 3b5bc1a Update changelog for 0.27.5 (#1298)
• e2ff4af Merge pull request #1297 from smallstep/dependabot/go_modules/github.com/urfave/cli-1.22.16
• 1380634 Bump github.com/urfave/cli from 1.22.15 to 1.22.16
• 87bcf1a Merge pull request #1296 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.54.0
• b4d19af Bump go.step.sm/crypto from 0.53.0 to 0.54.0
• 3d38cfe Merge pull request #1292 from smallstep/dependabot/go_modules/google.golang.org/protobuf-1.35.1
• ea6c385 Bump google.golang.org/protobuf from 1.34.2 to 1.35.1
• bb7bdfe Merge pull request #1293 from smallstep/dependabot/github_actions/actions/checkout-4.2.1
• 5accd75 Merge pull request #1290 from smallstep/dependabot/go_modules/golang.org/x/crypto-0.28.0
• b2e9c34 Bump actions/checkout from 4.2.0 to 4.2.1
• a54eb69 Bump golang.org/x/crypto from 0.27.0 to 0.28.0
• e19cb50 Merge pull request #1287 from smallstep/herman/remove-scope-flag
• 9cbb404 Add --remove-scope flag
• d8ddcb6 Merge pull request #1285 from smallstep/dependabot/github_actions/actions/checkout-4.2.0
• b8de57f Merge pull request #1286 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.53.0
• 4aef7d0 Bump go.step.sm/crypto from 0.51.2 to 0.53.0
• dd2c416 Bump actions/checkout from 4.1.7 to 4.2.0
• e3c3f20 Merge pull request #1273 from smallstep/herman/use-renamed-cli-utils-module
• 24f94b0 Add basic tests for CLI app initialization and execution
• 177f391 Use github.com/smallstep/cli-utils in CLI main
• de85fd0 Use github.com/smallstep/cli-utils and reorder imports
• bec3072 Merge pull request #1284 from smallstep/herman/768kb-docker-fix
• 6d6af3a Add missing backslash
• c7fbf85 Do same commands as alpine Dockerfile
• cd6758c Merge pull request #1279 from smallstep/dependabot/go_modules/go.step.sm/crypto-0.52.0
• 36e355b Merge pull request #1278 from smallstep/dependabot/go_modules/github.com/slackhq/nebula-1.9.4
• f089b5e Bump go.step.sm/crypto from 0.51.2 to 0.52.0
• bf61efc Bump github.com/slackhq/nebula from 1.9.3 to 1.9.4
• 88d6a6f Merge pull request #1277 from smallstep/jdoss/Filter_armhf6_deb
• 053f042 Add if statement to skip uploading armhf6 deb due to GCP AR issues.

Thanks!

Those were the changes on v0.27.5!

Come join us on Discord to ask questions, chat about PKI, or get a sneak peek at the freshest PKI memes.