chore(deps): update module github.com/letsencrypt/boulder to v0.20260413.0 (main)

[elastic-renovate-prod]

This PR contains the following updates:

Package	Type	Update	Change
github.com/letsencrypt/boulder	indirect	minor	v0.20260223.0 -> v0.20260413.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

letsencrypt/boulder (github.com/letsencrypt/boulder)

v0.20260413.0

Compare Source

What's Changed

• Update to go1.26.2 by @​aarongable in https://github.com/letsencrypt/boulder/pull/8703
• iana: Fix GitHub Action by @​jprenken in https://github.com/letsencrypt/boulder/pull/8695
• va: log experiment results without base64 encoding by @​jsha in https://github.com/letsencrypt/boulder/pull/8707
• build(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.95.0 to 1.97.3 by @​dependabot[bot] inhttps://github.com/letsencrypt/boulder/pull/87055

Full Changelog: letsencrypt/boulder@v0.20260406.0...v0.20260413.0

v0.20260406.0

Compare Source

What's Changed

• test: Upgrade consul to 1.22.6 by @​inahga in https://github.com/letsencrypt/boulder/pull/8696
• Remove registrations.LockCol by @​aarongable in https://github.com/letsencrypt/boulder/pull/8698
• bad-key-revoker: Require maxExpectedReplicationLag by @​jprenken in https://github.com/letsencrypt/boulder/pull/8693
• deps: update pkcs11 and pkcs11key by @​jsha in https://github.com/letsencrypt/boulder/pull/8692
• build(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 by @​dependabot[bot] inhttps://github.com/letsencrypt/boulder/pull/86999

Full Changelog: letsencrypt/boulder@v0.20260331.0...v0.20260406.0

v0.20260331.0

Compare Source

What's Changed

• grpc: implement OnHealthy by @​jsha in https://github.com/letsencrypt/boulder/pull/8686
• deps: update grpc to 1.79.3 by @​jsha in https://github.com/letsencrypt/boulder/pull/8685
• Remove deprecated flags by @​jsha in https://github.com/letsencrypt/boulder/pull/8684
• test: make nonce-srv-v2 / noncev2 the default by @​jsha in https://github.com/letsencrypt/boulder/pull/8689
• va: Add experimental VA for testing Hickory by @​beautifulentropy in https://github.com/letsencrypt/boulder/pull/8688
• ra: remove MaxNames config field by @​jsha in https://github.com/letsencrypt/boulder/pull/8691
• grpc: Advertise h2 support in ALPN by @​inahga in https://github.com/letsencrypt/boulder/pull/8697

New Contributors

• @​inahga made their first contribution in https://github.com/letsencrypt/boulder/pull/8697

Full Changelog: letsencrypt/boulder@v0.20260324.0...v0.20260331.0

v0.20260324.0

Compare Source

What's Changed

• test: add health check for bvitess by @​jsha in https://github.com/letsencrypt/boulder/pull/8658
• crl/va/test: Let the bodies hit the Close() by @​beautifulentropy in https://github.com/letsencrypt/boulder/pull/8682
• noncebalancer: use endpointsharding, ignore ready status by @​jsha in https://github.com/letsencrypt/boulder/pull/8679
• wfe/ra/va/pa: Add support for draft-ietf-acme-dns-persist-00 by @​beautifulentropy in https://github.com/letsencrypt/boulder/pull/8660
• CTPolicy: always try to get SCTs from a tiled log first by @​aarongable in https://github.com/letsencrypt/boulder/pull/8676

Full Changelog: letsencrypt/boulder@v0.20260317.0...v0.20260324.0

v0.20260317.0

Compare Source

What's Changed

• test: Remove badNonce retries and increase nonce maxConnectionAge by @​beautifulentropy in https://github.com/letsencrypt/boulder/pull/8661
• Remove ra.validateContacts because it is unused by @​aarongable in https://github.com/letsencrypt/boulder/pull/8666
• Remove TODOs from challenge.RecordsSane by @​aarongable in https://github.com/letsencrypt/boulder/pull/8670
• Remove sa.Count[Pending|Invalid]Authorizations2 by @​aarongable in https://github.com/letsencrypt/boulder/pull/8669
• observer: add CCADB CRL prober by @​jsha in https://github.com/letsencrypt/boulder/pull/8644
• test: make health-checker quieter by @​jsha in https://github.com/letsencrypt/boulder/pull/8671
• CI: Drop go1.25.x by @​beautifulentropy in https://github.com/letsencrypt/boulder/pull/8675
• vitess: add vschemas with vindexes by @​jsha in https://github.com/letsencrypt/boulder/pull/8634
• Update publicsuffix-go (PSL) from v0.50.2 to v0.50.3 by @​jprenken in https://github.com/letsencrypt/boulder/pull/8678
• ratelimits: stricter() should always prefer denied decisions by @​beautifulentropy in https://github.com/letsencrypt/boulder/pull/8674

Full Changelog: letsencrypt/boulder@v0.20260309.0...v0.20260317.0

v0.20260309.0

Compare Source

What's Changed

• sa: improve errors from SetOrderError by @​jsha in https://github.com/letsencrypt/boulder/pull/8656
• test: Update from go1.25.5 and go1.25.7 to go1.25.8 and go1.26.1 by @​beautifulentropy in https://github.com/letsencrypt/boulder/pull/8664
• features: Small comment fix for DNSAccount01Enabled by @​beautifulentropy in https://github.com/letsencrypt/boulder/pull/8663
• CI: Update release jobs to use go1.25.8 and go1.26.1 by @​beautifulentropy in https://github.com/letsencrypt/boulder/pull/8665

Full Changelog: letsencrypt/boulder@v0.20260303.0...v0.20260309.0

v0.20260303.0

Compare Source

What's Changed

• Reduce maximum allowed valid authorization lifetime by @​aarongable in https://github.com/letsencrypt/boulder/pull/8648
• observer: Reduce memory usage by @​beautifulentropy in https://github.com/letsencrypt/boulder/pull/8649
• Remove extraneous top-level struct args to IsAnyNilOrZero by @​aarongable in https://github.com/letsencrypt/boulder/pull/8651
• Fix miscellaneous value/pointer receiver mismatches by @​aarongable in https://github.com/letsencrypt/boulder/pull/8652
• test: Update challtestsrv for dns-persist-01 by @​beautifulentropy in https://github.com/letsencrypt/boulder/pull/8653
• Exempt ARI renewals from on-demand blocklisting by @​aarongable in https://github.com/letsencrypt/boulder/pull/8655

Full Changelog: letsencrypt/boulder@v0.20260225.0...v0.20260303.0

v0.20260225.0

Compare Source

What's Changed

• build: support native architecture builds on ARM hosts by @​sheurich in https://github.com/letsencrypt/boulder/pull/8547
• Run go fix by @​mcpherrinm in https://github.com/letsencrypt/boulder/pull/8636
• release: tag based on refs/remotes/origin/main. by @​jsha in https://github.com/letsencrypt/boulder/pull/8640
• observer: remove TCP prober by @​jsha in https://github.com/letsencrypt/boulder/pull/8637
• Use context.WithoutCancel instead of context.Background by @​aarongable in https://github.com/letsencrypt/boulder/pull/8635
• Don't modify http.DefaultTransport by @​aarongable in https://github.com/letsencrypt/boulder/pull/8641
• VA: properly initialize slowRemoteTimeout by @​aarongable in https://github.com/letsencrypt/boulder/pull/8642
• VA: ensure wildcard hostname is lowercased by @​aarongable in https://github.com/letsencrypt/boulder/pull/8643
• Add blocklisting for recursive on-demand domains by @​aarongable in https://github.com/letsencrypt/boulder/pull/8646
• Improve error handling in admin block-key and revoke-cert by @​aarongable in https://github.com/letsencrypt/boulder/pull/8647

Full Changelog: letsencrypt/boulder@v0.20260223.0...v0.20260225.0

---

Configuration

📅 Schedule: Branch creation - "* 1 * * 1-5" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.