v0.20260817.0

What's Changed

• go: Update from 1.26.3 to 1.26.6 by @beautifulentropy in #8937
• mtpublisher: ML-DSA signatures using trees/cosignature by @beautifulentropy in #8933
• sa: Preserve enabled state when updating rate limit overrides by @SashaMIT in #8935
• mtca: Use mtpublisher implementation by @beautifulentropy in #8934
• Apply ErrOnLimitReader to io.ReadAll() calls. by @ezekiel in #8834
• Add Authz revocation upon Cert revocation, by feature flag. by @ezekiel in #8799
• wfe: Early return after malformed JWK for KeyRollover by @beautifulentropy in #8938
• bs3: Improve FakeS3 by @beautifulentropy in #8940
• trees/checkpoint, trees/cosignature: Accept and return bytes by @beautifulentropy in #8941
• Add custom lints covering our CP/CPS profiles by @aarongable in #8485
• Revert "Remove GetRevocationStatus dead code" by @aarongable in #8939
• Add lint - CP/CPS correspondence check to CI by @aarongable in #8947
• Add lint for CCADB Section 6.3 by @aarongable in #8948

New Contributors

• @SashaMIT made their first contribution in #8935

Full Changelog: v0.20260811.0...v0.20260817.0