What's Changed

• build(deps): bump the aws group across 1 directory with 4 updates by @dependabot[bot] in #8544
• observer: remove redundant manual config validators by @sheurich in #8538
• va: Avoid creating multiple slow remote timers in doRemoteOperation by @aaomidi in #8516
• ct-test-srv: remove logging at startup by @jsha in #8551

Full Changelog: v0.20260105.0...v0.20260112.0

What's Changed

• lint: fix staticcheck QF issues by @alexandear in #8524
• fix: correct typos in test and documentation comments by @alexandear in #8526
• test: Refactor initSA to simplify cleanup in tests by @alexandear in #8525
• add bsetup notes to README by @acaird in #8521
• CA: Log error instead of cert upon storage failure by @aarongable in #8528
• web: No longer escape HTML characters in SendError by @beautifulentropy in #8533

New Contributors

• @alexandear made their first contribution in #8524
• @acaird made their first contribution in #8521

Full Changelog: v0.20251216.0...v0.20260105.0

What's Changed

• build(deps): bump the aws group across 1 directory with 4 updates by @dependabot[bot] in #8496
• Remove usage of subtle.ConstantTimeCompare in validation by @aarongable in #8519
• docker: Add build context for vtcomboserver service by @sheurich in #8520
• Fix wildcard authorization reuse with DNS-Account-01 by @sheurich in #8504
• Refactor DNS to pass full messages up to the VA by @aarongable in #8513
• ca/cert-checker: Support test log submissions by @beautifulentropy in #8522

Full Changelog: v0.20251208.0...v0.20251216.0

What's Changed

• ratelimits: Refactor Reset() to accept a batch of Transactions by @beautifulentropy in #8503
• Update CI to go1.25.5 by @aarongable in #8511
• Store authzIDs directly in order table by @jsha in #8460
• Add current datetime column to orderFqdnSets and authz2 tables by @aarongable in #8512
• sa: Fix modelToOrder to populate V2Authorizations from Authzs column by @aaomidi in #8514
• Remove ECDSA P-224 curve support from the ceremony tool by @pgporada in #8515
• Allow monitoring_only logs as well as test logs for submitToTestLogs by @mcpherrinm in #8510
• database: Add vitess + mysql 8.4 to our development environment by @beautifulentropy in #8468

Full Changelog: v0.20251202.0...v0.20251208.0

What's Changed

• sa: use dummy date instead of zero date by @jsha in #8481
• borp/sa: Update borp to pass Transaction args through BoulderTypeConverter by @beautifulentropy in #8494
• sfe: Keep loading intervals in sync with promise, fix wording by @beautifulentropy in #8500
• sfe/redis: Add limiter config to SFE and cleanup creds by @beautifulentropy in #8501
• Make CAA checking more like DCV checking by @aarongable in #8491
• Update Public Suffix List to v0.50.1 by @aarongable in #8495
• sa: Stop injecting max_statement_time and long_query_time into DSNs by @beautifulentropy in #8490
• Remove dead code by @mcpherrinm in #8506
• build(deps): bump github/codeql-action from 3 to 4 by @dependabot[bot] in #8507

Full Changelog: v0.20251118.0...v0.20251202.0

What's Changed

• build(deps): bump actions/github-script from 7 to 8 by @dependabot[bot] in #8472
• wfe: Add healthz endpoint by @jprenken in #8484
• Use promauto.With(stats) instead of stats.MustRegister() by @aarongable in #8483
• database: Remove Partitions from our tables by @beautifulentropy in #8489
• sfe/overrides: Update agreements with revised wording from legal by @beautifulentropy in #8488

Full Changelog: v0.20251110.0...v0.20251118.0

What's Changed

• Remove 10-second timeout from RA's override loading code by @jprenken in #8477
• test: Remove queries containing DDL from unit tests by @beautifulentropy in #8479
• Refactor GetSCTs to use a single loop with a ticker by @mcpherrinm in #8470
• Use promauto to register stats in bdns by @mcpherrinm in #8480
• Export prometheus client_golang's Go build_info metric by @mcpherrinm in #8482

Full Changelog: v0.20251103.0...v0.20251110.0

What's Changed

• sa: NewOrderAndAuthzs checks that nonzero authzs were provided by @jsha in #8464
• Add visibility into nonce redemption failure causes by @aarongable in #8448
• Use json tags to suppress Account fields in API responses by @aarongable in #8455
• Deprecate NoPendingAuthzReuse flag by @jsha in #8458
• build(deps): bump the aws group with 3 updates by @dependabot[bot] in #8467
• iana: Remove hardcoded multicast prefixes by @jprenken in #8456
• Remove Python tests for TLS-ALPN-01 by @jsha in #8457
• wfe/ra: Periodically load rate limit overrides from the database by @jprenken in #8407
• sfe: Create Salesforce Case at override request form submission time by @beautifulentropy in #8438
• Clean up dangling OCSP configs by @jenhagg in #8461

New Contributors

• @jenhagg made their first contribution in #8461

Full Changelog: v0.20251027.0...v0.20251103.0

What's Changed

• Add an extra timeout waiting for RVAs by @mcpherrinm in #8434
• Use a newer version of proxysql, consul, and redis by @pgporada in #8450
• Bind issuers to only issue for specified profiles by @aarongable in #8409
• build(deps): bump golang.org/x/sync from 0.16.0 to 0.17.0 by @dependabot[bot] in #8449
• Remove requirement for IncludeCRLDistributionPoints config by @aarongable in #8462
• Update README to reference t.sh and tn.sh by @aarongable in #8463
• bdns: remove logDNSError by @jsha in #8445
• Remove deprecated Temporary() usage in DNS retry logic by @sheurich in #8441
• Make release workflow compatible with immutable releases by @aarongable in #8454

Full Changelog: v0.20251021.0...v0.20251027.0

What's Changed

• Reduce nonce redemption flake by giving WFE time to mark SubConns READY by @aarongable in #8442
• Simplify IssueCertificate into straight-line code by @aarongable in #8424
• Delete sa.GetMaxExpiration and sa.GetRevokedCerts by @aarongable in #8401
• Ceremony: add checks for too-large validity period by @aarongable in #8446
• build(deps): bump the aws group with 3 updates by @dependabot[bot] in #8444
• Remove support for the old log line checksum format by @mcpherrinm in #8416

Full Changelog: v0.20251014.0...v0.20251021.0