fix(deps): update module go.step.sm/crypto to v0.89.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
go.step.sm/crypto	v0.73.0 → v0.89.0

---

Release Notes

smallstep/crypto (go.step.sm/crypto)

v0.89.0

Compare Source

What's Changed

• Recertify a TPM key with new qualifying data by @​tedmalone in #​1092

New Contributors

• @​tedmalone made their first contribution in #​1092

Full Changelog: smallstep/crypto@v0.88.0...v0.89.0

v0.88.0

Compare Source

What's Changed

• Fix pkcs11 tests on macOS by @​maraino in #​1104
• Add support for subject DN components in MacKMS certificate URIs by @​joshdrake in #​1073

Dependencies

• chore(deps): Bump google.golang.org/api from 0.290.0 to 0.291.0 by @​dependabot[bot] in #​1093
• chore(deps): Bump github.com/aws/aws-sdk-go-v2/config from 1.32.31 to 1.32.34 by @​dependabot[bot] in #​1094
• chore(deps): Bump modernc.org/sqlite from 1.54.0 to 1.55.0 by @​dependabot[bot] in #​1097
• chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/kms from 1.55.0 to 1.55.3 by @​dependabot[bot] in #​1095
• chore(deps): Bump google.golang.org/grpc from 1.82.1 to 1.83.0 by @​dependabot[bot] in #​1096
• chore(deps): Bump google.golang.org/api from 0.291.0 to 0.292.0 by @​dependabot[bot] in #​1100
• chore(deps): Bump modernc.org/sqlite from 1.55.0 to 1.56.0 by @​dependabot[bot] in #​1101
• chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/kms from 1.55.3 to 1.55.4 by @​dependabot[bot] in #​1102
• chore(deps): Bump github.com/aws/aws-sdk-go-v2/config from 1.32.34 to 1.32.35 by @​dependabot[bot] in #​1103

Full Changelog: smallstep/crypto@v0.87.0...v0.88.0

v0.87.0

Compare Source

v0.86.0

Compare Source

What's Changed

• fipsutil: report which module is linked, not just the mode by @​joshdrake in #​1090
• Fix issues on gotip by @​hslatman in #​1072

Dependencies

• chore(deps): Bump github.com/googleapis/gax-go/v2 from 2.22.0 to 2.23.0 by @​dependabot[bot] in #​1081
• chore(deps): Bump golang.org/x/term from 0.44.0 to 0.45.0 by @​dependabot[bot] in #​1080
• chore(deps): Bump golang.org/x/crypto from 0.53.0 to 0.54.0 by @​dependabot[bot] in #​1077
• chore(deps): Bump golang.org/x/net from 0.56.0 to 0.57.0 by @​dependabot[bot] in #​1079
• chore(deps): Bump google.golang.org/grpc from 1.82.0 to 1.82.1 by @​dependabot[bot] in #​1082
• chore(deps): Bump cloud.google.com/go/kms from 1.31.0 to 1.32.0 by @​dependabot[bot] in #​1078

Full Changelog: smallstep/crypto@v0.85.0...v0.86.0

v0.85.0

Compare Source

What's Changed

• Make TPM dirstore cache size configurable by @​darkfronza in #​1070

Dependencies

• chore(deps): Bump google.golang.org/api from 0.286.0 to 0.288.0 by @​dependabot[bot] in #​1068
• chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/kms from 1.53.5 to 1.54.1 by @​dependabot[bot] in #​1065
• chore(deps): Bump github.com/aws/aws-sdk-go-v2/config from 1.32.26 to 1.32.30 by @​dependabot[bot] in #​1067
• chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/kms from 1.53.4 to 1.53.5 by @​dependabot[bot] in #​1064
• chore(deps): Bump github.com/aws/aws-sdk-go-v2/config from 1.32.25 to 1.32.26 by @​dependabot[bot] in #​1063
• chore(deps): Bump github.com/ThalesGroup/crypto11 from 1.6.0 to 1.6.2 by @​dependabot[bot] in #​1069
• chore(deps): Bump google.golang.org/grpc from 1.81.1 to 1.82.0 by @​dependabot[bot] in #​1066

Full Changelog: smallstep/crypto@v0.84.1...v0.85.0

v0.84.1

Compare Source

What's Changed

• Delete CNG private keys when CleanupCredentials removes expired certs by @​darkfronza in #​1030

Full Changelog: smallstep/crypto@v0.84.0...v0.84.1

v0.84.0

Compare Source

What's Changed

• Fix pull-requests: write permission for triage workflow by @​hslatman in #​1054
• Use correct CNG-key value for 'dwKeySpec' when setting key provider info by @​joshdrake in #​1062

Dependencies

• chore(deps): Bump golang.org/x/crypto from 0.52.0 to 0.53.0 by @​dependabot[bot] in #​1051
• chore(deps): Bump golang.org/x/term from 0.43.0 to 0.44.0 by @​dependabot[bot] in #​1049
• chore(deps): Bump github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.21.1 to 1.22.0 by @​dependabot[bot] in #​1047
• chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/kms from 1.53.2 to 1.53.4 by @​dependabot[bot] in #​1048
• chore(deps): Bump github.com/google/go-tpm-tools from 0.4.8 to 0.4.9 by @​dependabot[bot] in #​1050
• chore(deps): Bump github.com/aws/aws-sdk-go-v2/config from 1.32.22 to 1.32.25 by @​dependabot[bot] in #​1055
• chore(deps): Bump modernc.org/sqlite from 1.51.0 to 1.52.0 by @​dependabot[bot] in #​1056
• chore(deps): Bump github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.13.1 to 1.14.0 by @​dependabot[bot] in #​1057
• chore(deps): Bump golang.org/x/net from 0.55.0 to 0.56.0 by @​dependabot[bot] in #​1059
• chore(deps): Bump google.golang.org/api from 0.283.0 to 0.285.0 by @​dependabot[bot] in #​1058
• chore(deps): Bump google.golang.org/api from 0.285.0 to 0.286.0 by @​dependabot[bot] in #​1061
• chore(deps): Bump modernc.org/sqlite from 1.52.0 to 1.53.0 by @​dependabot[bot] in #​1060

Full Changelog: smallstep/crypto@v0.83.0...v0.84.0

v0.83.0

Compare Source

What's Changed

• fix(windows): associate machine-scoped TPM keys with stored certificates by @​darkfronza in #​1053

Full Changelog: smallstep/crypto@v0.82.0...v0.83.0

v0.82.0

Compare Source

What's Changed

• Add per-key key-scope option for Windows machine vs user key store by @​joshdrake in #​1021

Dependencies:

• chore(deps): Bump github.com/aws/aws-sdk-go-v2/config from 1.32.17 to 1.32.22 by @​dependabot[bot] in #​1046
• chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/kms from 1.52.0 to 1.53.2 by @​dependabot[bot] in #​1043
• chore(deps): Bump modernc.org/sqlite from 1.50.1 to 1.51.0 by @​dependabot[bot] in #​1044
• chore(deps): Bump google.golang.org/api from 0.280.0 to 0.283.0 by @​dependabot[bot] in #​1045

Full Changelog: smallstep/crypto@v0.81.1...v0.82.0

v0.81.1

Compare Source

What's Changed

• gh: aligned workflow permissions with smallstep/workflows#324 by @​azazeal in #​1035

Dependencies

• chore(deps): Bump modernc.org/sqlite from 1.49.1 to 1.50.1 by @​dependabot[bot] in #​1024
• chore(deps): Bump golang.org/x/term from 0.42.0 to 0.43.0 by @​dependabot[bot] in #​1023
• chore(deps): Bump google.golang.org/grpc from 1.81.0 to 1.81.1 by @​dependabot[bot] in #​1034
• chore(deps): Bump golang.org/x/net from 0.53.0 to 0.54.0 by @​dependabot[bot] in #​1033
• chore(deps): Bump google.golang.org/api from 0.277.0 to 0.280.0 by @​dependabot[bot] in #​1032
• chore(deps): Bump github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys from 1.4.0 to 1.5.0 by @​dependabot[bot] in #​1042
• chore(deps): Bump golang.org/x/net from 0.54.0 to 0.55.0 by @​dependabot[bot] in #​1039
• chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/kms from 1.51.1 to 1.52.0 by @​dependabot[bot] in #​1038

New Contributors

• @​azazeal made their first contribution in #​1035

Full Changelog: smallstep/crypto@v0.81.0...v0.81.1

v0.81.0

Compare Source

v0.80.0

Compare Source

v0.79.0

Compare Source

What's Changed

• Rename ThalesIgnite/crypto11 to ThalesGroup/crypto11 by @​sastorsl in #​1020

Dependencies

• chore(deps): Bump google.golang.org/api from 0.276.0 to 0.277.0 by @​dependabot[bot] in #​1012
• chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/kms from 1.51.0 to 1.51.1 by @​dependabot[bot] in #​1014
• chore(deps): Bump google.golang.org/grpc from 1.80.0 to 1.81.0 by @​dependabot[bot] in #​1015
• chore(deps): Bump github.com/aws/aws-sdk-go-v2/config from 1.32.16 to 1.32.17 by @​dependabot[bot] in #​1016
• chore(deps): Bump cloud.google.com/go/kms from 1.28.0 to 1.30.0 by @​dependabot[bot] in #​1013

New Contributors

• @​sastorsl made their first contribution in #​1020

Full Changelog: smallstep/crypto@v0.78.0...v0.79.0

v0.78.0

Compare Source

What's Changed

• Add support for additional CAPI certificate context properties by @​joshdrake in #​873

Full Changelog: smallstep/crypto@v0.77.9...v0.78.0

v0.77.9

Compare Source

What's Changed

• Retract v0.77.3 - v0.77.7 by @​hslatman in #​1011

Full Changelog: smallstep/crypto@v0.77.8...v0.77.9

v0.77.8

Compare Source

What's Changed

Dependencies

• chore(deps): Bump modernc.org/sqlite from 1.47.0 to 1.48.0 by @​dependabot[bot] in #​988
• chore(deps): Bump google.golang.org/api from 0.272.0 to 0.273.0 by @​dependabot[bot] in #​990
• chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/kms from 1.50.3 to 1.50.4 by @​dependabot[bot] in #​989
• chore(deps): Bump github.com/aws/aws-sdk-go-v2/config from 1.32.12 to 1.32.13 by @​dependabot[bot] in #​987
• chore(deps): Bump github.com/googleapis/gax-go/v2 from 2.19.0 to 2.21.0 by @​dependabot[bot] in #​995
• chore(deps): Bump google.golang.org/api from 0.273.0 to 0.274.0 by @​dependabot[bot] in #​993
• chore(deps): Bump cloud.google.com/go/kms from 1.26.0 to 1.27.0 by @​dependabot[bot] in #​994
• chore(deps): Bump github.com/go-jose/go-jose/v3 from 3.0.4 to 3.0.5 by @​dependabot[bot] in #​991
• chore(deps): Bump google.golang.org/grpc from 1.79.3 to 1.80.0 by @​dependabot[bot] in #​992
• chore(deps): Bump modernc.org/sqlite from 1.48.0 to 1.48.2 by @​dependabot[bot] in #​1000
• chore(deps): Bump golang.org/x/term from 0.41.0 to 0.42.0 by @​dependabot[bot] in #​999
• chore(deps): Bump cloud.google.com/go/kms from 1.27.0 to 1.28.0 by @​dependabot[bot] in #​998
• chore(deps): Bump github.com/aws/aws-sdk-go-v2/config from 1.32.13 to 1.32.14 by @​dependabot[bot] in #​997
• chore(deps): Bump golang.org/x/crypto from 0.49.0 to 0.50.0 by @​dependabot[bot] in #​996
• chore(deps): Bump golang.org/x/net from 0.52.0 to 0.53.0 by @​dependabot[bot] in #​1002
• chore(deps): Bump github.com/googleapis/gax-go/v2 from 2.21.0 to 2.22.0 by @​dependabot[bot] in #​1005
• chore(deps): Bump modernc.org/sqlite from 1.48.2 to 1.49.1 by @​dependabot[bot] in #​1003
• chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/kms from 1.50.4 to 1.50.5 by @​dependabot[bot] in #​1001
• chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/kms from 1.50.5 to 1.51.0 by @​dependabot[bot] in #​1010
• chore(deps): Bump github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.21.0 to 1.21.1 by @​dependabot[bot] in #​1009
• chore(deps): Bump google.golang.org/api from 0.274.0 to 0.276.0 by @​dependabot[bot] in #​1008
• chore(deps): Bump github.com/aws/aws-sdk-go-v2/config from 1.32.14 to 1.32.16 by @​dependabot[bot] in #​1007
• chore(deps): Bump github.com/go-piv/piv-go/v2 from 2.5.0 to 2.6.0 by @​dependabot[bot] in #​1004

Full Changelog: smallstep/crypto@v0.77.2...v0.77.8

v0.77.7

Compare Source

v0.77.6

Compare Source

v0.77.5

Compare Source

v0.77.4

Compare Source

v0.77.3

Compare Source

v0.77.2

Compare Source

v0.77.1

Compare Source

v0.77.0

Compare Source

v0.76.2

Compare Source

v0.76.1

Compare Source

v0.76.0

Compare Source

v0.75.0

Compare Source

What's Changed

• Add support for P-384 keys on the secure enclave by @​maraino in #​904

Dependencies

• chore(deps): Bump github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.19.1 to 1.20.0 by @​dependabot[bot] in #​892
• chore(deps): Bump google.golang.org/api from 0.254.0 to 0.255.0 by @​dependabot[bot] in #​894
• chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/kms from 1.47.0 to 1.48.0 by @​dependabot[bot] in #​893
• chore(deps): Bump golang.org/x/sys from 0.37.0 to 0.38.0 by @​dependabot[bot] in #​890
• chore(deps): Bump github.com/google/go-tpm-tools from 0.4.6 to 0.4.7 by @​dependabot[bot] in #​891
• chore(deps): Bump modernc.org/sqlite from 1.40.0 to 1.40.1 by @​dependabot[bot] in #​899
• chore(deps): Bump golang.org/x/term from 0.36.0 to 0.37.0 by @​dependabot[bot] in #​898
• chore(deps): Bump github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.13.0 to 1.13.1 by @​dependabot[bot] in #​897
• chore(deps): Bump github.com/aws/aws-sdk-go-v2/config from 1.31.16 to 1.31.20 by @​dependabot[bot] in #​896
• chore(deps): Bump google.golang.org/api from 0.255.0 to 0.256.0 by @​dependabot[bot] in #​903
• chore(deps): Bump github.com/aws/aws-sdk-go-v2/config from 1.31.20 to 1.32.1 by @​dependabot[bot] in #​902
• chore(deps): Bump golang.org/x/crypto from 0.43.0 to 0.45.0 by @​dependabot[bot] in #​900
• chore(deps): Bump google.golang.org/grpc from 1.76.0 to 1.77.0 by @​dependabot[bot] in #​901

Full Changelog: smallstep/crypto@v0.74.0...v0.75.0

v0.74.0

Compare Source

What's Changed

• Add support for providing *tpm.TPM instance when creating a TPMKMS by @​maraino in #​885

Dependencies

• Bump github.com/aws/aws-sdk-go-v2/config from 1.31.15 to 1.31.16 by @​dependabot[bot] in #​889
• Bump modernc.org/sqlite from 1.39.1 to 1.40.0 by @​dependabot[bot] in #​888
• Bump github.com/aws/aws-sdk-go-v2/service/kms from 1.46.2 to 1.47.0 by @​dependabot[bot] in #​887
• Bump google.golang.org/api from 0.253.0 to 0.254.0 by @​dependabot[bot] in #​886

Full Changelog: smallstep/crypto@v0.73.0...v0.74.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 12 additional dependencies were updated

Details:

Package	Change
golang.org/x/oauth2	v0.32.0 -> v0.33.0
go.opentelemetry.io/auto/sdk	v1.1.0 -> v1.2.1
golang.org/x/mod	v0.28.0 -> v0.29.0
golang.org/x/sync	v0.17.0 -> v0.18.0
golang.org/x/tools	v0.37.0 -> v0.38.0
google.golang.org/genproto/googleapis/api	v0.0.0-20250825161204-c5933d9347a5 -> v0.0.0-20251022142026-3a174f9686a8
google.golang.org/genproto/googleapis/rpc	v0.0.0-20251014184007-4626949a642f -> v0.0.0-20251103181224-f26f9409b101
golang.org/x/crypto	v0.43.0 -> v0.45.0
golang.org/x/net	v0.46.0 -> v0.47.0
golang.org/x/sys	v0.37.0 -> v0.38.0
golang.org/x/text	v0.30.0 -> v0.31.0
google.golang.org/grpc	v1.76.0 -> v1.77.0

[renovate]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 24 additional dependencies were updated
• The go directive was updated for compatibility reasons

Details:

Package	Change
go	1.24.3 -> 1.25.8
github.com/go-jose/go-jose/v3	v3.0.4 -> v3.0.5
github.com/golang-jwt/jwt/v5	v5.3.0 -> v5.3.1
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp	v0.63.0 -> v0.67.0
go.opentelemetry.io/otel	v1.38.0 -> v1.44.0
go.opentelemetry.io/otel/sdk	v1.38.0 -> v1.44.0
golang.org/x/oauth2	v0.32.0 -> v0.36.0
filippo.io/edwards25519	v1.1.0 -> v1.2.0
github.com/google/go-tpm	v0.9.6 -> v0.9.8
go.opentelemetry.io/auto/sdk	v1.1.0 -> v1.2.1
golang.org/x/mod	v0.28.0 -> v0.37.0
golang.org/x/sync	v0.17.0 -> v0.22.0
golang.org/x/time	v0.14.0 -> v0.15.0
golang.org/x/tools	v0.37.0 -> v0.47.0
google.golang.org/genproto/googleapis/api	v0.0.0-20250825161204-c5933d9347a5 -> v0.0.0-20260630182238-925bb5da69e7
google.golang.org/genproto/googleapis/rpc	v0.0.0-20251014184007-4626949a642f -> v0.0.0-20260803160001-6ac0973c030d
github.com/mattn/go-isatty	v0.0.20 -> v0.0.24
go.opentelemetry.io/otel/metric	v1.38.0 -> v1.44.0
go.opentelemetry.io/otel/trace	v1.38.0 -> v1.44.0
golang.org/x/crypto	v0.43.0 -> v0.54.0
golang.org/x/net	v0.46.0 -> v0.57.0
golang.org/x/sys	v0.37.0 -> v0.47.0
golang.org/x/text	v0.30.0 -> v0.40.0
google.golang.org/grpc	v1.76.0 -> v1.83.0
google.golang.org/protobuf	v1.36.10 -> v1.36.11