Failing DNS-based certificate renewal since migration from v2.12.3 to v2.12.4

[cpainchaud]

Checklist

• Have you pulled and found the error with jc21/nginx-proxy-manager:latest docker image?
  • Yes
• Are you sure you're not using someone else's docker image?
  • Yes
• Have you searched for similar issues (both open and closed)?
  • Yes

Describe the bug
When renewing certificates (wildcard DNS challenge with Gandi) I get the following:

[7/2/2025] [11:44:25 AM] [SSL      ] › ℹ  info      Renewing Let'sEncrypt certificates via Gandi Live DNS for Cert #11: *.rp.home.warmbread.dev
[7/2/2025] [11:44:25 AM] [SSL      ] › ℹ  info      Command: certbot renew --force-renewal --config "/etc/letsencrypt.ini" --work-dir "/tmp/letsencrypt-lib" --logs-dir "/tmp/letsencrypt-log" --cert-name 'npm-11' --disable-hook-validation --no-random-sleep-on-renew
[7/2/2025] [11:44:25 AM] [Global   ] › ⬤  debug     CMD: certbot renew --force-renewal --config "/etc/letsencrypt.ini" --work-dir "/tmp/letsencrypt-lib" --logs-dir "/tmp/letsencrypt-log" --cert-name 'npm-11' --disable-hook-validation --no-random-sleep-on-renew
[7/2/2025] [11:44:27 AM] [Express  ] › ⚠  warning   Saving debug log to /tmp/letsencrypt-log/letsencrypt.log
Failed to renew certificate npm-11 with error: Missing property in credentials configuration file /etc/letsencrypt/credentials/credentials-11: dns_gandi_token must be set
All renewals failed. The following certificates could not be renewed:
  /etc/letsencrypt/live/npm-11/fullchain.pem (failure)
1 renew failure(s), 0 parse failure(s)

Nginx Proxy Manager Version
v2.12.4

To Reproduce
Steps to reproduce the behavior:
1- try to renew certificate

Expected behavior
certificate renewed

Operating System
Docker official image

Additional context
I have recreated a brand new certificate and renewed it a few minutes later and it worked. It's only affecting old certificates

[cpainchaud]

It's actually caused by a change in CertBot + Gandi switching to a new type of token (you will need to get a new token and edit /etc/letsencrypt/credentials/credentials-XX files to replace dns_gandi_api_key=XXXX by dns_gandi_token=MYNEWKEY or create a new certificate entirely)