chore(deps): update module github.com/letsencrypt/boulder to v0.20260512.0 (8.19)

[elastic-renovate-prod]

This PR contains the following updates:

Package	Type	Update	Change	Pending
github.com/letsencrypt/boulder	indirect	minor	v0.20260223.0 -> v0.20260512.0	v0.20260518.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

letsencrypt/boulder (github.com/letsencrypt/boulder)

v0.20260512.0

Compare Source

What's Changed

• admin: Support creating incidents and adding serials by @​beautifulentropy in https://github.com/letsencrypt/boulder/pull/8740
• ceremony: Add support for configuring cross-sign EKUs by @​aarongable in https://github.com/letsencrypt/boulder/pull/8750

Full Changelog: letsencrypt/boulder@v0.20260504.0...v0.20260512.0

v0.20260504.0

Compare Source

What's Changed

• Replace docker/login-action with inline docker login by @​inahga in https://github.com/letsencrypt/boulder/pull/8694
• Update draft-ietf-acme-dns-persist-00 support to 01 by @​beautifulentropy in https://github.com/letsencrypt/boulder/pull/8725
• cert-checker: remove use of SelectNullInt by @​jsha in https://github.com/letsencrypt/boulder/pull/8734
• Remove dead code from integration/ari_test.go by @​aarongable in https://github.com/letsencrypt/boulder/pull/8729
• Remove deprecated Active bool config by @​mcpherrinm in https://github.com/letsencrypt/boulder/pull/8741
• build(deps): bump actions/github-script from 8 to 9 by @​dependabot[bot] inhttps://github.com/letsencrypt/boulder/pull/87422
• Immediately replace a failed CT submission by @​mcpherrinm in https://github.com/letsencrypt/boulder/pull/8737
• Replace CA-enforcement for MaxNames with Custom Lint by @​ezekiel in https://github.com/letsencrypt/boulder/pull/8739
• build(deps): bump go.opentelemetry.io/otel from 1.40.0 to 1.41.0 by @​dependabot[bot] inhttps://github.com/letsencrypt/boulder/pull/87355
• when GOMEMLIMIT is set, write profiles by @​jsha in https://github.com/letsencrypt/boulder/pull/8743

Full Changelog: letsencrypt/boulder@v0.20260428.0...v0.20260504.0

v0.20260428.0

Compare Source

What's Changed

• Supply authz ID in CAA rechecks by @​aarongable in https://github.com/letsencrypt/boulder/pull/8730
• Update go.mod to go1.26 by @​aarongable in https://github.com/letsencrypt/boulder/pull/8727
• db: remove IsNoRows by @​jsha in https://github.com/letsencrypt/boulder/pull/8733
• db: remove MockSQLExecutor by @​jsha in https://github.com/letsencrypt/boulder/pull/8731
• Add gauges for CRL size in bytes and num entries by @​aarongable in https://github.com/letsencrypt/boulder/pull/8720
• ca: rand.Read is infallible by @​jsha in https://github.com/letsencrypt/boulder/pull/8736
• sa: deprecate parallelismPerRPC by @​jsha in https://github.com/letsencrypt/boulder/pull/8728
• sa: check for sql.ErrNoRows on Get() by @​jsha in https://github.com/letsencrypt/boulder/pull/8732

Full Changelog: letsencrypt/boulder@v0.20260420.0...v0.20260428.0

v0.20260420.0

Compare Source

What's Changed

• bump pkimetal to v1.41.0 and ignore new ctlint warning by @​mcpherrinm in https://github.com/letsencrypt/boulder/pull/8713
• observer: use new URL for AllCertificates by @​jsha in https://github.com/letsencrypt/boulder/pull/8718
• observer: use CCADB AllCertificates V5 URL by @​jsha in https://github.com/letsencrypt/boulder/pull/8719

Full Changelog: letsencrypt/boulder@v0.20260413.0...v0.20260420.0

v0.20260413.0

Compare Source

What's Changed

• Update to go1.26.2 by @​aarongable in https://github.com/letsencrypt/boulder/pull/8703
• iana: Fix GitHub Action by @​jprenken in https://github.com/letsencrypt/boulder/pull/8695
• va: log experiment results without base64 encoding by @​jsha in https://github.com/letsencrypt/boulder/pull/8707
• build(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.95.0 to 1.97.3 by @​dependabot[bot] inhttps://github.com/letsencrypt/boulder/pull/87055

Full Changelog: letsencrypt/boulder@v0.20260406.0...v0.20260413.0

v0.20260406.0

Compare Source

What's Changed

• test: Upgrade consul to 1.22.6 by @​inahga in https://github.com/letsencrypt/boulder/pull/8696
• Remove registrations.LockCol by @​aarongable in https://github.com/letsencrypt/boulder/pull/8698
• bad-key-revoker: Require maxExpectedReplicationLag by @​jprenken in https://github.com/letsencrypt/boulder/pull/8693
• deps: update pkcs11 and pkcs11key by @​jsha in https://github.com/letsencrypt/boulder/pull/8692
• build(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 by @​dependabot[bot] inhttps://github.com/letsencrypt/boulder/pull/86999

Full Changelog: letsencrypt/boulder@v0.20260331.0...v0.20260406.0

v0.20260331.0

Compare Source

What's Changed

• grpc: implement OnHealthy by @​jsha in https://github.com/letsencrypt/boulder/pull/8686
• deps: update grpc to 1.79.3 by @​jsha in https://github.com/letsencrypt/boulder/pull/8685
• Remove deprecated flags by @​jsha in https://github.com/letsencrypt/boulder/pull/8684
• test: make nonce-srv-v2 / noncev2 the default by @​jsha in https://github.com/letsencrypt/boulder/pull/8689
• va: Add experimental VA for testing Hickory by @​beautifulentropy in https://github.com/letsencrypt/boulder/pull/8688
• ra: remove MaxNames config field by @​jsha in https://github.com/letsencrypt/boulder/pull/8691
• grpc: Advertise h2 support in ALPN by @​inahga in https://github.com/letsencrypt/boulder/pull/8697

New Contributors

• @​inahga made their first contribution in https://github.com/letsencrypt/boulder/pull/8697

Full Changelog: letsencrypt/boulder@v0.20260324.0...v0.20260331.0

v0.20260324.0

Compare Source

What's Changed

• test: add health check for bvitess by @​jsha in https://github.com/letsencrypt/boulder/pull/8658
• crl/va/test: Let the bodies hit the Close() by @​beautifulentropy in https://github.com/letsencrypt/boulder/pull/8682
• noncebalancer: use endpointsharding, ignore ready status by @​jsha in https://github.com/letsencrypt/boulder/pull/8679
• wfe/ra/va/pa: Add support for draft-ietf-acme-dns-persist-00 by @​beautifulentropy in https://github.com/letsencrypt/boulder/pull/8660
• CTPolicy: always try to get SCTs from a tiled log first by @​aarongable in https://github.com/letsencrypt/boulder/pull/8676

Full Changelog: letsencrypt/boulder@v0.20260317.0...v0.20260324.0

v0.20260317.0

Compare Source

What's Changed

• test: Remove badNonce retries and increase nonce maxConnectionAge by @​beautifulentropy in https://github.com/letsencrypt/boulder/pull/8661
• Remove ra.validateContacts because it is unused by @​aarongable in https://github.com/letsencrypt/boulder/pull/8666
• Remove TODOs from challenge.RecordsSane by @​aarongable in https://github.com/letsencrypt/boulder/pull/8670
• Remove sa.Count[Pending|Invalid]Authorizations2 by @​aarongable in https://github.com/letsencrypt/boulder/pull/8669
• observer: add CCADB CRL prober by @​jsha in https://github.com/letsencrypt/boulder/pull/8644
• test: make health-checker quieter by @​jsha in https://github.com/letsencrypt/boulder/pull/8671
• CI: Drop go1.25.x by @​beautifulentropy in https://github.com/letsencrypt/boulder/pull/8675
• vitess: add vschemas with vindexes by @​jsha in https://github.com/letsencrypt/boulder/pull/8634
• Update publicsuffix-go (PSL) from v0.50.2 to v0.50.3 by @​jprenken in https://github.com/letsencrypt/boulder/pull/8678
• ratelimits: stricter() should always prefer denied decisions by @​beautifulentropy in https://github.com/letsencrypt/boulder/pull/8674

Full Changelog: letsencrypt/boulder@v0.20260309.0...v0.20260317.0

v0.20260309.0

Compare Source

What's Changed

• sa: improve errors from SetOrderError by @​jsha in https://github.com/letsencrypt/boulder/pull/8656
• test: Update from go1.25.5 and go1.25.7 to go1.25.8 and go1.26.1 by @​beautifulentropy in https://github.com/letsencrypt/boulder/pull/8664
• features: Small comment fix for DNSAccount01Enabled by @​beautifulentropy in https://github.com/letsencrypt/boulder/pull/8663
• CI: Update release jobs to use go1.25.8 and go1.26.1 by @​beautifulentropy in https://github.com/letsencrypt/boulder/pull/8665

Full Changelog: letsencrypt/boulder@v0.20260303.0...v0.20260309.0

v0.20260303.0

Compare Source

What's Changed

• Reduce maximum allowed valid authorization lifetime by @​aarongable in https://github.com/letsencrypt/boulder/pull/8648
• observer: Reduce memory usage by @​beautifulentropy in https://github.com/letsencrypt/boulder/pull/8649
• Remove extraneous top-level struct args to IsAnyNilOrZero by @​aarongable in https://github.com/letsencrypt/boulder/pull/8651
• Fix miscellaneous value/pointer receiver mismatches by @​aarongable in https://github.com/letsencrypt/boulder/pull/8652
• test: Update challtestsrv for dns-persist-01 by @​beautifulentropy in https://github.com/letsencrypt/boulder/pull/8653
• Exempt ARI renewals from on-demand blocklisting by @​aarongable in https://github.com/letsencrypt/boulder/pull/8655

Full Changelog: letsencrypt/boulder@v0.20260225.0...v0.20260303.0

v0.20260225.0

Compare Source

What's Changed

• build: support native architecture builds on ARM hosts by @​sheurich in https://github.com/letsencrypt/boulder/pull/8547
• Run go fix by @​mcpherrinm in https://github.com/letsencrypt/boulder/pull/8636
• release: tag based on refs/remotes/origin/main. by @​jsha in https://github.com/letsencrypt/boulder/pull/8640
• observer: remove TCP prober by @​jsha in https://github.com/letsencrypt/boulder/pull/8637
• Use context.WithoutCancel instead of context.Background by @​aarongable in https://github.com/letsencrypt/boulder/pull/8635
• Don't modify http.DefaultTransport by @​aarongable in https://github.com/letsencrypt/boulder/pull/8641
• VA: properly initialize slowRemoteTimeout by @​aarongable in https://github.com/letsencrypt/boulder/pull/8642
• VA: ensure wildcard hostname is lowercased by @​aarongable in https://github.com/letsencrypt/boulder/pull/8643
• Add blocklisting for recursive on-demand domains by @​aarongable in https://github.com/letsencrypt/boulder/pull/8646
• Improve error handling in admin block-key and revoke-cert by @​aarongable in https://github.com/letsencrypt/boulder/pull/8647

Full Changelog: letsencrypt/boulder@v0.20260223.0...v0.20260225.0

---

Configuration

📅 Schedule: Branch creation - "* 1 * * 1-5" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.