chore(deps): update support-deps to v0.28.0

[renovate]

This PR contains the following updates:

Package	Update	Change
smallstep/cli	minor	0.27.5 -> 0.28.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

smallstep/cli (smallstep/cli)

v0.28.0: Step CLI v0.28.0 (24-10-30)

Compare Source

Official Release Artifacts

Below are the most popular artifacts for step on each platform.

For packaged versions (Homebrew, Scoop, etc.), see our installation docs.

Linux

• 📦 step_linux_0.28.0_amd64.tar.gz
• 📦 step_linux_0.28.0_arm64.tar.gz
• 📦 step_linux_0.28.0_armv7.tar.gz
• 📦 step-cli_0.28.0-1_amd64.deb
• 📦 step-cli-0.28.0-1.x86_64.rpm
• 📦 step-cli_0.28.0-1_arm64.deb
• 📦 step-cli-0.28.0-1.aarch64.rpm
• see Assets below for more builds

macOS Darwin

• 📦 step_darwin_0.28.0_amd64.tar.gz
• 📦 step_darwin_0.28.0_arm64.tar.gz

Windows

• 📦 step_windows_0.28.0_amd64.zip
• 📦 step_windows_0.28.0_arm64.zip

Signatures and Checksums

step uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:

cosign verify-blob \
  --certificate ~/Download/step_darwin_0.28.0_amd64.tar.gz.pem \
  --signature ~/Downloads/step_darwin_0.28.0_amd64.tar.gz.sig \
  --certificate-identity-regexp "https://github\.com/smallstep/workflows/.*" \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  ~/Downloads/step_darwin_0.28.0_amd64.tar.gz

The checksums.txt file (in the 'Assets' section below) contains a checksum for every artifact in the release.

Changelog

• 874a879 Bump certificates to 0.28.0 (#​1307)
• 5415196 Update changelog for v0.28.0 (#​1306)
• e3a16d4 Remove --bundle from step ca certificate usage text (#​1302)
• b226259 Merge pull request #​1301 from smallstep/herman/fix-step-context-cli-utils
• ebeca4f Add disableSSHCAUser and disableSSHCAHost attributes to GCP provisioner (#​1305)
• 4dfc345 Merge pull request #​1304 from smallstep/dependabot/github_actions/actions/checkout-4.2.2
• 924009d Merge pull request #​1303 from smallstep/dependabot/github_actions/actions/setup-go-5.1.0
• 4cba2d4 Bump actions/checkout from 4.2.1 to 4.2.2
• eaff111 Bump actions/setup-go from 5.0.2 to 5.1.0
• 8bd4d48 Fix --context being ignored in commands that rely on certificates
• f619bce Merge pull request #​1300 from stefaanderoeck/stefaan/android-v0.20.0
• 51bf14b OpenInBrowser on Android as well

Thanks!

Those were the changes on v0.28.0!

Come join us on Discord to ask questions, chat about PKI, or get a sneak peek at the freshest PKI memes.

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.