What's Changed

• Accept nonRepudiation when unmarshalling keyUsage by @neverpanic in #811
• Fix usage of azure keyvault client-secret when specified in URI by @dellekappa in #819
• Correctly set the machine store flag when requested by @areed in #802

Dependencies

• Bump google.golang.org/api from 0.240.0 to 0.244.0 by @dependabot[bot] in #816
• Bump github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.18.1 to 1.18.2 by @dependabot[bot] in #815
• Bump modernc.org/sqlite from 1.38.0 to 1.38.2 by @dependabot[bot] in #812
• Bump github.com/go-piv/piv-go/v2 from 2.3.0 to 2.4.0 by @dependabot[bot] in #813
• Bump github.com/aws/aws-sdk-go-v2/config from 1.29.17 to 1.30.3 by @dependabot[bot] in #817
• Bump github.com/aws/aws-sdk-go-v2/service/kms from 1.41.2 to 1.43.0 by @dependabot[bot] in #818

New Contributors

• @neverpanic made their first contribution in #811
• @dellekappa made their first contribution in #819

Full Changelog: v0.68.0...v0.69.0

What's Changed

• Add support for the Data Protection Keychain by @maraino in #793

Dependencies

• Bump google.golang.org/api from 0.234.0 to 0.235.0 by @dependabot[bot] in #780
• Bump github.com/aws/aws-sdk-go-v2/service/kms from 1.38.3 to 1.40.0 by @dependabot[bot] in #783
• Bump modernc.org/sqlite from 1.37.1 to 1.38.0 by @dependabot[bot] in #786
• Bump github.com/aws/aws-sdk-go-v2/config from 1.29.14 to 1.29.15 by @dependabot[bot] in #785
• Bump google.golang.org/grpc from 1.72.2 to 1.73.0 by @dependabot[bot] in #787
• Bump golang.org/x/crypto from 0.38.0 to 0.39.0 by @dependabot[bot] in #784
• Bump github.com/aws/aws-sdk-go-v2/config from 1.29.15 to 1.29.16 by @dependabot[bot] in #788
• Bump github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.10.0 to 1.10.1 by @dependabot[bot] in #790
• Bump golang.org/x/net from 0.40.0 to 0.41.0 by @dependabot[bot] in #789
• Bump github.com/aws/aws-sdk-go-v2/service/kms from 1.40.0 to 1.41.0 by @dependabot[bot] in #792
• Bump google.golang.org/api from 0.235.0 to 0.237.0 by @dependabot[bot] in #791

Full Changelog: v0.66.0...v0.67.0

What's Changed

• Add new extension fields on certificate requests by @maraino in #767

Full Changelog: v0.65.0...v0.66.0

What's Changed

• Upgrade github.com/smallstep/go-attestation to 2306d5b4 by @hslatman in #775, fixing an issue with ECDSA key signatures on Windows.

Dependencies:

• Bump github.com/googleapis/gax-go/v2 from 2.14.1 to 2.14.2 by @dependabot in #774
• Bump google.golang.org/grpc from 1.72.0 to 1.72.1 by @dependabot in #771
• Bump github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.9.0 to 1.10.0 by @dependabot in #773
• Bump google.golang.org/api from 0.232.0 to 0.234.0 by @dependabot in #778
• Bump cloud.google.com/go/kms from 1.21.2 to 1.22.0 by @dependabot in #776
• Bump modernc.org/sqlite from 1.37.0 to 1.37.1 by @dependabot in #777
• Bump google.golang.org/grpc from 1.72.1 to 1.72.2 by @dependabot in #779

Full Changelog: v0.64.0...v0.65.0

What's Changed

• Add support for 'DeleteKey' in CAPIKMS. by @joshdrake in #770

Dependencies:

• Bump golang.org/x/sys from 0.32.0 to 0.33.0 by @dependabot in #766
• Bump golang.org/x/crypto from 0.37.0 to 0.38.0 by @dependabot in #763
• Bump google.golang.org/api from 0.230.0 to 0.231.0 by @dependabot in #764
• Bump golang.org/x/net from 0.39.0 to 0.40.0 by @dependabot in #765
• Bump google.golang.org/api from 0.231.0 to 0.232.0 by @dependabot in #768
• Bump github.com/google/go-tpm from 0.9.4 to 0.9.5 by @dependabot in #769

Full Changelog: v0.63.0...v0.64.0

What's Changed

• Allow locating certificates using issuer + subject CN in CAPI KMS. by @joshdrake in #696
• Add support for rsa.PSSSaltLengthAuto on capi by @maraino in #762

Dependencies:

• Bump go.uber.org/mock from 0.5.1 to 0.5.2 by @dependabot in #760
• Bump google.golang.org/api from 0.229.0 to 0.230.0 by @dependabot in #759
• Bump github.com/google/go-tpm from 0.9.3 to 0.9.4 by @dependabot in #761

Full Changelog: v0.62.0...v0.63.0

What's Changed

• Extract public key from private by @maraino in #758

Dependencies:

• Bump google.golang.org/grpc from 1.71.1 to 1.72.0 by @dependabot in #756
• Bump cloud.google.com/go/kms from 1.21.1 to 1.21.2 by @dependabot in #757

Full Changelog: v0.61.0...v0.62.0

What's Changed

• Fix templates with policies with Go 1.24 by @maraino in #744

Dependencies:

• Bump golang.org/x/net from 0.37.0 to 0.38.0 by @dependabot in #742
• Bump modernc.org/sqlite from 1.36.2 to 1.37.0 by @dependabot in #741
• Bump google.golang.org/api from 0.227.0 to 0.228.0 by @dependabot in #740
• Bump github.com/aws/aws-sdk-go-v2/config from 1.29.10 to 1.29.12 by @dependabot in #739
• Add a methods to verify Google's CloudHSM attestations by @maraino in #720
• Bump github.com/aws/aws-sdk-go-v2/service/kms from 1.38.1 to 1.38.2 by @dependabot in #745
• Bump go.uber.org/mock from 0.5.0 to 0.5.1 by @dependabot in #747
• Bump google.golang.org/grpc from 1.71.0 to 1.71.1 by @dependabot in #749
• Bump github.com/aws/aws-sdk-go-v2/config from 1.29.12 to 1.29.13 by @dependabot in #750
• Bump github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.17.1 to 1.18.0 by @dependabot in #746
• Bump golang.org/x/crypto from 0.36.0 to 0.37.0 by @dependabot in #748
• Bump golang.org/x/net from 0.38.0 to 0.39.0 by @dependabot in #755
• Bump github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.8.2 to 1.9.0 by @dependabot in #754
• Bump github.com/aws/aws-sdk-go-v2/config from 1.29.13 to 1.29.14 by @dependabot in #752
• Bump github.com/aws/aws-sdk-go-v2/service/kms from 1.38.2 to 1.38.3 by @dependabot in #751
• Bump google.golang.org/api from 0.228.0 to 0.229.0 by @dependabot in #753

Full Changelog: v0.60.0...v0.61.0

What's Changed

• Add support for tokens with no pins by @maraino in #730

Dependencies:

• Bump github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.17.0 to 1.17.1 by @dependabot in #737
• Bump modernc.org/sqlite from 1.36.1 to 1.36.2 by @dependabot in #736
• Bump google.golang.org/protobuf from 1.36.5 to 1.36.6 by @dependabot in #733
• Bump github.com/aws/aws-sdk-go-v2/config from 1.29.9 to 1.29.10 by @dependabot in #734
• Bump google.golang.org/api from 0.226.0 to 0.227.0 by @dependabot in #735

Full Changelog: v0.59.2...v0.60.0

What's Changed

• Fix open files with a full path in softkms by @maraino in #732

Dependencies

• Bump golang.org/x/sys from 0.30.0 to 0.31.0 by @dependabot in #723
• Bump github.com/aws/aws-sdk-go-v2/config from 1.29.6 to 1.29.9 by @dependabot in #722
• Bump github.com/aws/aws-sdk-go-v2/service/kms from 1.37.18 to 1.38.1 by @dependabot in #725
• Bump golang.org/x/crypto from 0.35.0 to 0.36.0 by @dependabot in #721
• Bump golang.org/x/net from 0.35.0 to 0.37.0 by @dependabot in #724
• Bump google.golang.org/grpc from 1.70.0 to 1.71.0 by @dependabot in #729
• Bump google.golang.org/api from 0.223.0 to 0.226.0 by @dependabot in #728
• Bump modernc.org/sqlite from 1.36.0 to 1.36.1 by @dependabot in #726
• Bump cloud.google.com/go/kms from 1.21.0 to 1.21.1 by @dependabot in #727
• Bump github.com/golang-jwt/jwt/v5 from 5.2.1 to 5.2.2 by @dependabot in #731

Full Changelog: v0.59.1...v0.59.2