v0.20261105.0

What's Changed

• mtcb: support subtrees that don't start at 0 by @jsha in #9120
• bdns: improve error handling by @jsha in #9122
• web: honor X-Forwarded-Host in relative endpoints by @lukevalenta in #9095
• mtcb: Return berrors.OrderNotReady for uncosigned standalone certificates by @beautifulentropy in #9130
• wfe: New endpoint for serving standalone MTCs by @ezekiel in #9102
• add subtree.Contains() helper by @jsha in #9124
• Update zlint to v3.7.3-rc1 by @aarongable in #9132
• Ceremony: add enforcement of acceptable revocation dates and reasons by @aarongable in #9136
• Add CPS CRL Profile lints by @aarongable in #9129
• trees: replace uint64 types with int64 by @jsha in #9133
• test: Change the dev MTC log number from 44 to 3 by @beautifulentropy in #9137
• mirror: Update to Sunlight v0.10.2 and align with tlog-witness v1.1.0 and tlog-mirror v0.1.0 by @beautifulentropy in #9135
• update go-jose to v4.1.7 by @jsha in #9138
• Describe in detail why trees.MaxSize is 2^48 - 1 by @aarongable in #9139
• go-jose: bump to v4.1.8 by @jsha in #9141
• Align our MTC implementation with draft-07 by @beautifulentropy in #9134
• t.sh: better Ctrl-C handling by @jsha in #9131
• sa: return NotFound for invalid serials by @jsha in #9150
• mtcb: self-verify standalone certificates by @jsha in #9119
• Plumb issuance eventIDs from RA to CA/MTCA and log by @ezekiel in #9151
• build(deps): bump github/codeql-action/autobuild from 4.38.2 to 4.39.1 by @dependabot[bot] in #9140

New Contributors

• @lukevalenta made their first contribution in #9095

Full Changelog: v0.20261027.0...v0.20261105.0