Skip to content

fix(deps): update module github.com/go-acme/lego/v4 to v5#724

Open
gardener-ci-robot wants to merge 8 commits into
masterfrom
renovate/github.com-go-acme-lego-v4-5.x
Open

fix(deps): update module github.com/go-acme/lego/v4 to v5#724
gardener-ci-robot wants to merge 8 commits into
masterfrom
renovate/github.com-go-acme-lego-v4-5.x

Conversation

@gardener-ci-robot
Copy link
Copy Markdown
Collaborator

@gardener-ci-robot gardener-ci-robot commented May 12, 2026

This PR contains the following updates:

Package Change Age Confidence
github.com/go-acme/lego/v4 v4.35.2v5.0.4 age confidence

Release Notes

go-acme/lego (github.com/go-acme/lego/v4)

v5.0.4

Compare Source

  • Release date: 2026-05-14
  • Tag: v5.0.4
Fixed
  • [cli,hooks] Missing hook env vars
  • [cli] Allow account registration in all cases

v5.0.3

Compare Source

  • Release date: 2026-05-13
  • Tag: v5.0.3
Fixed
  • [httpprovider] Context propagation to server listeners
  • [lib,challenge/dns-01] Recursive NSs propagation checks
Added
  • [documentation,migration] Add a note about JSON files migration inside the documentation

v5.0.2

Compare Source

  • Release date: 2026-05-12
  • Tag: v5.0.2
Fixed
  • [cli,httpprovider] Invalid default port for the HTTP server
  • [cli,migration] Account migration with missing registration

v5.0.1

Compare Source

  • Release date: 2026-05-11
  • Tag: v5.0.1
Fixed
  • [cli] remove a duplicate key-type flag
  • [config] default hook timeout (configuration)

v5.0.0

Compare Source

  • Release date: 2026-05-11
  • Tag: v5.0.0
Added
  • [challenge/dns-persist-01] Add support for DNS-PERSIST-01 challenge type
  • [cli,config] Add experimental support for dotenv files
  • [cli,config] Support a configuration file
  • [cli,migration,config] generate configuration file during migration
  • [cli] Add --cert.name flag
  • [cli] Add account key rollover
  • [cli] Add commands related to archives management
  • [cli] Add logger flags
  • [cli] Add register command
  • [cli] Add server shortcodes
  • [cli] Flag names and environment variables
  • [cli] Hook manager
  • [cli] One command to run or renew a certificate.
  • [cli] Recover/import an account from the private key
  • [cli] Refactor: clean flag names
  • [dnsprovider] artfiles: add server name option
  • [dnsprovider] manual: add PropagationTimeout and PollingInterval options
  • [lib,cli] Add GetServerMetadata
  • [lib,cli] Choose a network stack for challenges
  • [lib,dnsprovider] New approach of the DNS calls
  • [lib,httpprovider] New HTTP-01 and TLS-ALPN-01 servers constructors
  • [lib,log] New logger (slog)
  • [lib] ACME error codes
  • [lib] Add Account Key Rollover support
  • [lib] Add support for context
  • [dnsprovider] Add DNS provider for 51DNS
  • [dnsprovider] Add DNS provider for Abion
  • [dnsprovider] Add DNS provider for Curanet
  • [dnsprovider] Add DNS provider for DanDomain
  • [dnsprovider] Add DNS provider for ScanNet
  • [dnsprovider] Add DNS provider for Wannafind
  • [dnsprovider] Add DNS provider for Dinahosting
  • [dnsprovider] Add DNS provider for DNS.services
  • [dnsprovider] Add DNS provider for Veesp
  • [dnsprovider] Add DNS provider for DNScale
  • [dnsprovider] Add DNS provider for dnsla
  • [dnsprovider] Add DNS provider for EUsrv
  • [dnsprovider] Add DNS provider for Fornex
  • [dnsprovider] Add DNS provider for Gehirn
  • [dnsprovider] Add DNS provider for Gname
  • [dnsprovider] Add DNS provider for HostUp
  • [dnsprovider] Add DNS provider for Katapult
  • [dnsprovider] Add DNS provider for NederHost
  • [dnsprovider] Add DNS provider for NGENIX
  • [dnsprovider] Add DNS provider for omg.lol
  • [dnsprovider] Add DNS provider for PointDNS/PointHQ
  • [dnsprovider] Add DNS provider for Rage4
  • [dnsprovider] Add DNS provider for Tele3
  • [dnsprovider] Add DNS provider for Xinnet
  • [dnsprovider] Add DNS provider for Zilore
  • [documentation] Update to lego v5
Changed
  • [challenge/dns-persist-01] Update draft-ietf-acme-dns-persist-00 support to 01
  • [challenge/http-01] Case insensitive match domain
  • [cli,config] Move revoke command
  • [cli,log] Format renewal duration
  • [cli] Add subcommands to the list subcommand
  • [cli] Certificates sub command
  • [cli] Move the main package to the root.
  • [cli] Rename flags tls.port and http.port to tls.address and http.address
  • [cli] Replace --run-hook and --renew-hook with --deploy-hook
  • [cli] Require EAB parameters only when needed
  • [dnsprovider] conoha,conohav3: remove get token from the constructor
  • [dnsprovider] mijnhost: use single endpoints
  • [dnsprovider] rfc2136: rename to dnsupdate
  • [httpprovider] Convert SetProxyHeader to an option
  • [lib,cli] Change registar method returns
  • [lib,cli] Use PKCS#8 instead of PKCS#1
  • [lib] Change CertificateService and GetRenewalInfo signatures
  • [lib] Disable Common Name by default
  • [lib] Move enableCommonName option to Request
  • [lib] Replace crypto.PrivateKey with crypto.Signer
  • [lib] Use duration as RetryAfter field type
  • [lib] Use the public key corresponding to the opaque
  • [log] Improve some log and error messages
Removed
  • [dnsprovider] Remove deprecated DNS providers: googledomains, azure (replaced by azuredns), cloudxns, dnspod, brandit, iwantmyname, iij (replaced by iijdpf).

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

@gardener-ci-robot gardener-ci-robot added the kind/enhancement Enhancement, improvement, extension label May 12, 2026
@gardener-prow gardener-prow Bot added cla: yes Indicates the PR's author has signed the cla-assistant.io CLA. size/XS Denotes a PR that changes 0-9 lines, ignoring generated files. labels May 12, 2026
@gardener-ci-robot gardener-ci-robot force-pushed the renovate/github.com-go-acme-lego-v4-5.x branch 5 times, most recently from 55d462d to bdb76bb Compare May 13, 2026 12:55
@MartinWeindel MartinWeindel self-assigned this May 13, 2026
@gardener-ci-robot gardener-ci-robot force-pushed the renovate/github.com-go-acme-lego-v4-5.x branch from bdb76bb to 5a23fdf Compare May 13, 2026 18:52
@gardener-prow
Copy link
Copy Markdown

gardener-prow Bot commented May 13, 2026

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please ask for approval from martinweindel. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@gardener-ci-robot gardener-ci-robot force-pushed the renovate/github.com-go-acme-lego-v4-5.x branch 3 times, most recently from f552350 to 272166b Compare May 15, 2026 10:55
@gardener-ci-robot
Copy link
Copy Markdown
Collaborator Author

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum
Command failed: go get -t ./...
go: module github.com/go-acme/lego/v4/challenge: reading http://athens-proxy.athens.svc.cluster.local/github.com/go-acme/lego/v4/challenge/@v/list: 500 Internal Server Error
go: module github.com/go-acme/lego/v4/challenge: reading http://athens-proxy.athens.svc.cluster.local/github.com/go-acme/lego/v4/challenge/@v/list: 500 Internal Server Error

@gardener-prow gardener-prow Bot added size/L Denotes a PR that changes 100-499 lines, ignoring generated files. and removed size/XS Denotes a PR that changes 0-9 lines, ignoring generated files. labels May 15, 2026
@gardener-ci-robot
Copy link
Copy Markdown
Collaborator Author

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

@MartinWeindel MartinWeindel force-pushed the renovate/github.com-go-acme-lego-v4-5.x branch from 95d7494 to 7f78a09 Compare May 15, 2026 14:46
@gardener-prow gardener-prow Bot added size/XL Denotes a PR that changes 500-999 lines, ignoring generated files. and removed size/L Denotes a PR that changes 100-499 lines, ignoring generated files. labels May 15, 2026
@MartinWeindel
Copy link
Copy Markdown
Member

/hold needs more testing

@gardener-prow gardener-prow Bot added do-not-merge/hold Indicates that a PR should not merge because someone has issued a /hold command. size/XXL Denotes a PR that changes 1000+ lines, ignoring generated files. and removed size/XL Denotes a PR that changes 500-999 lines, ignoring generated files. labels May 15, 2026
@MartinWeindel
Copy link
Copy Markdown
Member

/unhold also tested with precheck namespaces

@gardener-prow gardener-prow Bot removed the do-not-merge/hold Indicates that a PR should not merge because someone has issued a /hold command. label May 19, 2026
@MartinWeindel
Copy link
Copy Markdown
Member

/cc @marc1404

@gardener-prow gardener-prow Bot requested a review from marc1404 May 19, 2026 06:56
@MartinWeindel MartinWeindel force-pushed the renovate/github.com-go-acme-lego-v4-5.x branch from 2b00c93 to adb9583 Compare May 19, 2026 13:19
@MartinWeindel
Copy link
Copy Markdown
Member

rebased to resolve merge conflict

@MartinWeindel
Copy link
Copy Markdown
Member

/cla

@gardener-prow
Copy link
Copy Markdown

gardener-prow Bot commented May 19, 2026

Successfully reached out to cla-assistant.io to initialize recheck of PR #724

@gardener-prow gardener-prow Bot added the needs-rebase Indicates a PR cannot be merged because it has merge conflicts with HEAD. label May 22, 2026
Copy link
Copy Markdown
Member

@marc1404 marc1404 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thank you for taking care of doing all the necessary steps to adapt to the changes in v5 of the library! 🙏
With the help of Claude or not, I appreciate the added test that covers the v4->v5 migration path: 17c7515 (this PR)

A few comments below 👇

Comment thread pkg/certman2/controller/issuer/controlplane/acme/handler_test.go Outdated
Comment thread pkg/certman2/controller/issuer/controlplane/acme/handler_test.go Outdated
Comment thread pkg/shared/dns_utils.go
Comment on lines +200 to +213
// parseNameservers ensures that all nameservers have a port number, and adds the default DNS port 53 if not.
// This function replicates functionality that was removed from lego v5.
func parseNameservers(servers []string) []string {
var resolvers []string
for _, resolver := range servers {
// ensure all servers have a port number
if _, _, err := net.SplitHostPort(resolver); err != nil {
resolvers = append(resolvers, net.JoinHostPort(resolver, "53"))
} else {
resolvers = append(resolvers, resolver)
}
}
return resolvers
}
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This function could be covered by unit tests

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is indirectly already covered by unit tests for the PreparePrecheckNameservers method.
A few more test cases have been added for IPv6.

Comment thread pkg/shared/legobridge/reguser_test.go Outdated
@MartinWeindel MartinWeindel force-pushed the renovate/github.com-go-acme-lego-v4-5.x branch from adb9583 to 83bd76d Compare May 22, 2026 14:39
@gardener-prow gardener-prow Bot removed the needs-rebase Indicates a PR cannot be merged because it has merge conflicts with HEAD. label May 22, 2026
@MartinWeindel MartinWeindel force-pushed the renovate/github.com-go-acme-lego-v4-5.x branch from 83bd76d to 250f380 Compare May 22, 2026 14:43
@MartinWeindel
Copy link
Copy Markdown
Member

rebased to resolve merge conflict

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

cla: yes Indicates the PR's author has signed the cla-assistant.io CLA. kind/enhancement Enhancement, improvement, extension size/XXL Denotes a PR that changes 1000+ lines, ignoring generated files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants