step-ca/0.28.1-r0: cve remediation (#36952)

step-ca/0.28.1-r0: fix GHSA-v778-237x-gjrc Advisory data: https://github.com/wolfi-dev/advisories/blob/main/step-ca.advisories.yaml Co-authored-by: octo-sts[bot] <[email protected]>
wolfi-dev · Dec 13, 2024 · d600b6d · d600b6d
1 parent 8dad169
commit d600b6d
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/step-ca.yaml b/step-ca.yaml
@@ -1,7 +1,7 @@
 package:
   name: step-ca
   version: 0.28.1
-  epoch: 0
+  epoch: 1
   description: A private certificate authority (X.509 & SSH) & ACME server for secure automated certificate management, so you can use TLS everywhere & SSO for SSH.
   copyright:
     - license: Apache-2.0
@@ -20,6 +20,10 @@ pipeline:
       tag: v${{package.version}}
       expected-commit: d327203c1c2a1900bd019a0d9b38bd280fbd5c24
 
+  - uses: go/bump
+    with:
+      deps: golang.org/x/[email protected]
+
   - runs: |
       CGO_ENABLED=0 go build -v \
         -ldflags='-w -X "main.Version=${{package.version}}"' \