v0.20260518.0

What's Changed

• ct-test-srv: cap tracked submissions by @mcpherrinm in #8752
• build(deps): bump the aws group across 1 directory with 3 updates by @dependabot[bot] in #8746
• sa: getAuthorizationStatuses checks results by @jsha in #8726
• Use a unix socket to talk to pkimetal by @mcpherrinm in #8715

Full Changelog: v0.20260512.0...v0.20260518.0

v0.20260512.0

What's Changed

• admin: Support creating incidents and adding serials by @beautifulentropy in #8740
• ceremony: Add support for configuring cross-sign EKUs by @aarongable in #8750

Full Changelog: v0.20260504.0...v0.20260512.0

v0.20260504.0

What's Changed

• Replace docker/login-action with inline docker login by @inahga in #8694
• Update draft-ietf-acme-dns-persist-00 support to 01 by @beautifulentropy in #8725
• cert-checker: remove use of SelectNullInt by @jsha in #8734
• Remove dead code from integration/ari_test.go by @aarongable in #8729
• Remove deprecated Active bool config by @mcpherrinm in #8741
• build(deps): bump actions/github-script from 8 to 9 by @dependabot[bot] in #8742
• Immediately replace a failed CT submission by @mcpherrinm in #8737
• Replace CA-enforcement for MaxNames with Custom Lint by @ezekiel in #8739
• build(deps): bump go.opentelemetry.io/otel from 1.40.0 to 1.41.0 by @dependabot[bot] in #8735
• when GOMEMLIMIT is set, write profiles by @jsha in #8743

Full Changelog: v0.20260428.0...v0.20260504.0

v0.20260428.0

What's Changed

• Supply authz ID in CAA rechecks by @aarongable in #8730
• Update go.mod to go1.26 by @aarongable in #8727
• db: remove IsNoRows by @jsha in #8733
• db: remove MockSQLExecutor by @jsha in #8731
• Add gauges for CRL size in bytes and num entries by @aarongable in #8720
• ca: rand.Read is infallible by @jsha in #8736
• sa: deprecate parallelismPerRPC by @jsha in #8728
• sa: check for sql.ErrNoRows on Get() by @jsha in #8732

Full Changelog: v0.20260420.0...v0.20260428.0

v0.20260420.0

What's Changed

• bump pkimetal to v1.41.0 and ignore new ctlint warning by @mcpherrinm in #8713
• observer: use new URL for AllCertificates by @jsha in #8718
• observer: use CCADB AllCertificates V5 URL by @jsha in #8719

Full Changelog: v0.20260413.0...v0.20260420.0

v0.20260413.0

What's Changed

• Update to go1.26.2 by @aarongable in #8703
• iana: Fix GitHub Action by @jprenken in #8695
• va: log experiment results without base64 encoding by @jsha in #8707
• build(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.95.0 to 1.97.3 by @dependabot[bot] in #8705

Full Changelog: v0.20260406.0...v0.20260413.0

v0.20260406.0

What's Changed

• test: Upgrade consul to 1.22.6 by @inahga in #8696
• Remove registrations.LockCol by @aarongable in #8698
• bad-key-revoker: Require maxExpectedReplicationLag by @jprenken in #8693
• deps: update pkcs11 and pkcs11key by @jsha in #8692
• build(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 by @dependabot[bot] in #8699

Full Changelog: v0.20260331.0...v0.20260406.0

v0.20260331.0

What's Changed

• grpc: implement OnHealthy by @jsha in #8686
• deps: update grpc to 1.79.3 by @jsha in #8685
• Remove deprecated flags by @jsha in #8684
• test: make nonce-srv-v2 / noncev2 the default by @jsha in #8689
• va: Add experimental VA for testing Hickory by @beautifulentropy in #8688
• ra: remove MaxNames config field by @jsha in #8691
• grpc: Advertise h2 support in ALPN by @inahga in #8697

New Contributors

• @inahga made their first contribution in #8697

Full Changelog: v0.20260324.0...v0.20260331.0

v0.20260324.0

What's Changed

• test: add health check for bvitess by @jsha in #8658
• crl/va/test: Let the bodies hit the Close() by @beautifulentropy in #8682
• noncebalancer: use endpointsharding, ignore ready status by @jsha in #8679
• wfe/ra/va/pa: Add support for draft-ietf-acme-dns-persist-00 by @beautifulentropy in #8660
• CTPolicy: always try to get SCTs from a tiled log first by @aarongable in #8676

Full Changelog: v0.20260317.0...v0.20260324.0

v0.20260317.0

What's Changed

• test: Remove badNonce retries and increase nonce maxConnectionAge by @beautifulentropy in #8661
• Remove ra.validateContacts because it is unused by @aarongable in #8666
• Remove TODOs from challenge.RecordsSane by @aarongable in #8670
• Remove sa.Count[Pending|Invalid]Authorizations2 by @aarongable in #8669
• observer: add CCADB CRL prober by @jsha in #8644
• test: make health-checker quieter by @jsha in #8671
• CI: Drop go1.25.x by @beautifulentropy in #8675
• vitess: add vschemas with vindexes by @jsha in #8634
• Update publicsuffix-go (PSL) from v0.50.2 to v0.50.3 by @jprenken in #8678
• ratelimits: stricter() should always prefer denied decisions by @beautifulentropy in #8674

Full Changelog: v0.20260309.0...v0.20260317.0