chore(deps): update module github.com/letsencrypt/boulder to v0.20251103.0 #1110

red-hat-konflux · 2025-11-06T08:26:46Z

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/letsencrypt/boulder	`v0.0.0-20240620165639-de9c06129bec` -> `v0.20251103.0`

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

Release Notes

letsencrypt/boulder (github.com/letsencrypt/boulder)

`v0.20251103.0`

Compare Source

What's Changed

sa: NewOrderAndAuthzs checks that nonzero authzs were provided by @jsha in #8464
Add visibility into nonce redemption failure causes by @aarongable in #8448
Use json tags to suppress Account fields in API responses by @aarongable in #8455
Deprecate NoPendingAuthzReuse flag by @jsha in #8458
build(deps): bump the aws group with 3 updates by @dependabot[bot] in #8467
iana: Remove hardcoded multicast prefixes by @jprenken in #8456
Remove Python tests for TLS-ALPN-01 by @jsha in #8457
wfe/ra: Periodically load rate limit overrides from the database by @jprenken in #8407
sfe: Create Salesforce Case at override request form submission time by @beautifulentropy in #8438
Clean up dangling OCSP configs by @jenhagg in #8461

New Contributors

@jenhagg made their first contribution in #8461

Full Changelog: letsencrypt/boulder@v0.20251027.0...v0.20251103.0

`v0.20251027.0`

Compare Source

What's Changed

Add an extra timeout waiting for RVAs by @mcpherrinm in #8434
Use a newer version of proxysql, consul, and redis by @pgporada in #8450
Bind issuers to only issue for specified profiles by @aarongable in #8409
build(deps): bump golang.org/x/sync from 0.16.0 to 0.17.0 by @dependabot[bot] in #8449
Remove requirement for IncludeCRLDistributionPoints config by @aarongable in #8462
Update README to reference t.sh and tn.sh by @aarongable in #8463
bdns: remove logDNSError by @jsha in #8445
Remove deprecated Temporary() usage in DNS retry logic by @sheurich in #8441
Make release workflow compatible with immutable releases by @aarongable in #8454

Full Changelog: letsencrypt/boulder@v0.20251021.0...v0.20251027.0

`v0.20251021.0`

Compare Source

What's Changed

Reduce nonce redemption flake by giving WFE time to mark SubConns READY by @aarongable in #8442
Simplify IssueCertificate into straight-line code by @aarongable in #8424
Delete sa.GetMaxExpiration and sa.GetRevokedCerts by @aarongable in #8401
Ceremony: add checks for too-large validity period by @aarongable in #8446
build(deps): bump the aws group with 3 updates by @dependabot[bot] in #8444
Remove support for the old log line checksum format by @mcpherrinm in #8416

Full Changelog: letsencrypt/boulder@v0.20251014.0...v0.20251021.0

`v0.20251014.0`

Compare Source

What's Changed

build(deps): bump the otel group with 6 updates by @dependabot[bot] in #8437
sfe: Add configurable automatic approvals for first-tier limits by @beautifulentropy in #8381
Switch to new log checksum format by @mcpherrinm in #8415
Reland "SA: Stop supporting OCSP status NotReady" by @aarongable in #8430

Full Changelog: letsencrypt/boulder@v0.20251007.0...v0.20251014.0

`v0.20251007.0`

Compare Source

What's Changed

Revert "SA: Stop supporting OCSP status NotReady" by @aarongable in #8429
Introduce nonfunctional IssuerConfig.Profiles config field by @aarongable in #8423
Refactor CA unittests to focus on top-level IssueCertificate by @aarongable in #8422
Add logging of nonce prefix at nonce-service startup by @jsha in #8433
publisher: Do not log failures to submit to audit logs by @beautifulentropy in #8435
Update CI to go1.25.2 by @aarongable in #8436

Full Changelog: letsencrypt/boulder@v0.20251003.0...v0.20251007.0

`v0.20251003.0`

Compare Source

`v0.20250929.0`

Compare Source

What's Changed

CA: Stop using OCSP status NotReady by @aarongable in #8394
Remove support for temporally-sharded CRLs by @aarongable in #8400
wfe: Permit Transfer-Encoding: chunked HTTP request bodies by @benburkert in #8403
build(deps): bump the aws group with 4 updates by @dependabot[bot] in #8392
Use GetRevocationStatus instead of GetCertificateStatus by @aarongable in #8402
Start accepting a new log checksum format by @mcpherrinm in #8413

New Contributors

@benburkert made their first contribution in #8403

Full Changelog: letsencrypt/boulder@v0.20250922.0...v0.20250929.0

`v0.20250922.0`

Compare Source

What's Changed

Remove '-tags "integration"' from build by @jsha in #8383
feat: Support for dns-account-01 Challenge by @sheurich in #8149
test: Work around integration failures & flake by @jprenken in #8393
Delete akamai-purger by @aarongable in #8352
Upload releases to GHCR by @jprenken in #8386
Move //revocation/reasons.go into the post-OCSP world by @aarongable in #8355
Remove "ocsp-response" Ceremony type by @aarongable in #8396
Ceremony: remove support for AIA OCSP URIs by @aarongable in #8397
issuance: Remove last vestiges of OCSP support by @aarongable in #8398
Recognize, but do not process, issuevmc CAA tags by @BartG95 in #8374
Fix location of release.md by @pgporada in #8404

New Contributors

@BartG95 made their first contribution in #8374

Full Changelog: letsencrypt/boulder@v0.20250908.0...v0.20250922.0

`v0.20250908.0`

Compare Source

What's Changed

Upgrade to latest publicsuffix-go by @mcpherrinm in #8376
sfe: Export emails to mailing list at submission time by @beautifulentropy in #8378
sfe: Periodically import approved rate limit override tickets by @beautifulentropy in #8372
build(deps): bump docker/login-action from 3.4.0 to 3.5.0 by @dependabot[bot] in #8375

Full Changelog: letsencrypt/boulder@v0.20250902.0...v0.20250908.0

`v0.20250902.0`

Compare Source

What's Changed

test: Enable optional coverage reporting by @akshithg in #8306
sfe: Add rate limit override request portal Web UI and endpoints by @beautifulentropy in #8365
Run go's modernize tool by @mcpherrinm in #8371
sfe: Add per IP rate limits to the overrides request form submissions by @beautifulentropy in #8366

New Contributors

@akshithg made their first contribution in #8306

Full Changelog: letsencrypt/boulder@v0.20250825.0...v0.20250902.0

`v0.20250825.0`

Compare Source

What's Changed

test: rewrite CAA integration test in Go by @jsha in #8340
test: Remove go1.24.x by @beautifulentropy in #8364
RA: remove dependency on akamai-purger by @aarongable in #8353
CA: delete GenerateOCSP method by @aarongable in #8351
Ceremony: allow CRL ceremonies to skip certain lints by @aarongable in #8368
sfe/zendesk: Add support for status to Zendesk client by @beautifulentropy in #8367

Full Changelog: letsencrypt/boulder@v0.20250819.0...v0.20250825.0

`v0.20250819.0`

Compare Source

What's Changed

Add --generate-notes flag to gh release create by @mcpherrinm in #8337
admin: Add tooling to support rate limit overrides in the database by @beautifulentropy in #8281
Remove GO111MODULE and GOFLAGS. by @jsha in #8333
Add tool to generate, verify, and output a list of CRLDPs by @aarongable in #8329
Build Boulder in a container for release by @jsha in #8331
Restrict permissions of merged-to-main workflow by @aarongable in #8347
sfe/zendesk: Add a Zendesk API client implementation by @beautifulentropy in #8320
grpc: remove serverIPAddresses config option by @jsha in #8339
Remove ocsp-responder by @aarongable in #8344
Remove python integration test in-the-past scaffolding by @aarongable in #8086
go: Add go1.25.0 to the test suite by @beautifulentropy in #8357
sfe/test: Configure SFE to use a zendesk-test-srv by @beautifulentropy in #8354
RA: delete GenerateOCSP method by @aarongable in #8350
Remove Boulder's understanding of FAKECLOCK by @aarongable in #8356

Full Changelog: letsencrypt/boulder@v0.20250812.0...v0.20250819.0

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

…103.0 Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>

red-hat-konflux · 2025-11-06T08:26:47Z

ℹ Artifact update notice

File name: bib/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

20 additional dependencies were updated
The go directive was updated for compatibility reasons

Details:

Package	Change
`go`	`1.24.0` -> `1.25.0`
`github.com/aws/aws-sdk-go-v2`	`v1.38.3` -> `v1.39.2`
`github.com/aws/aws-sdk-go-v2/config`	`v1.31.6` -> `v1.31.11`
`github.com/aws/aws-sdk-go-v2/credentials`	`v1.18.10` -> `v1.18.15`
`github.com/aws/aws-sdk-go-v2/feature/ec2/imds`	`v1.18.6` -> `v1.18.9`
`github.com/aws/aws-sdk-go-v2/internal/configsources`	`v1.4.6` -> `v1.4.9`
`github.com/aws/aws-sdk-go-v2/internal/endpoints/v2`	`v2.7.6` -> `v2.7.9`
`github.com/aws/aws-sdk-go-v2/internal/v4a`	`v1.4.6` -> `v1.4.9`
`github.com/aws/aws-sdk-go-v2/service/internal/checksum`	`v1.8.6` -> `v1.8.9`
`github.com/aws/aws-sdk-go-v2/service/internal/presigned-url`	`v1.13.6` -> `v1.13.9`
`github.com/aws/aws-sdk-go-v2/service/internal/s3shared`	`v1.19.6` -> `v1.19.9`
`github.com/aws/aws-sdk-go-v2/service/s3`	`v1.87.3` -> `v1.88.3`
`github.com/aws/aws-sdk-go-v2/service/sso`	`v1.29.1` -> `v1.29.5`
`github.com/aws/aws-sdk-go-v2/service/ssooidc`	`v1.34.2` -> `v1.35.1`
`github.com/aws/aws-sdk-go-v2/service/sts`	`v1.38.2` -> `v1.38.6`
`github.com/go-jose/go-jose/v4`	`v4.0.5` -> `v4.1.2`
`go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp`	`v0.61.0` -> `v0.63.0`
`go.opentelemetry.io/otel`	`v1.36.0` -> `v1.38.0`
`go.opentelemetry.io/otel/metric`	`v1.36.0` -> `v1.38.0`
`go.opentelemetry.io/otel/trace`	`v1.36.0` -> `v1.38.0`
`google.golang.org/grpc`	`v1.74.2` -> `v1.75.0`

chore(deps): update module github.com/letsencrypt/boulder to v0.20251…

4373c3e

…103.0 Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>

red-hat-konflux bot requested a review from a team as a code owner November 6, 2025 08:26

red-hat-konflux bot requested review from achilleas-k, lzap and thozza and removed request for a team November 6, 2025 08:26

red-hat-konflux bot changed the title ~~chore(deps): update module github.com/letsencrypt/boulder to v0.20251103.0~~ chore(deps): update module github.com/letsencrypt/boulder to v0.20251103.0 - autoclosed Nov 7, 2025

red-hat-konflux bot closed this Nov 7, 2025

red-hat-konflux bot deleted the konflux/mintmaker/main/github.com-letsencrypt-boulder-0.x branch November 7, 2025 00:27

red-hat-konflux bot changed the title ~~chore(deps): update module github.com/letsencrypt/boulder to v0.20251103.0 - autoclosed~~ chore(deps): update module github.com/letsencrypt/boulder to v0.20251103.0 Nov 7, 2025

red-hat-konflux bot reopened this Nov 7, 2025

red-hat-konflux bot force-pushed the konflux/mintmaker/main/github.com-letsencrypt-boulder-0.x branch from 1cf058f to 4373c3e Compare November 7, 2025 04:28

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): update module github.com/letsencrypt/boulder to v0.20251103.0 #1110

chore(deps): update module github.com/letsencrypt/boulder to v0.20251103.0 #1110

Uh oh!

red-hat-konflux bot commented Nov 6, 2025

Uh oh!

red-hat-konflux bot commented Nov 6, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

chore(deps): update module github.com/letsencrypt/boulder to v0.20251103.0 #1110

Are you sure you want to change the base?

chore(deps): update module github.com/letsencrypt/boulder to v0.20251103.0 #1110

Uh oh!

Conversation

red-hat-konflux bot commented Nov 6, 2025

Release Notes

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

Configuration

Documentation

Uh oh!

red-hat-konflux bot commented Nov 6, 2025

ℹ Artifact update notice

File name: bib/go.mod

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant