Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package python-certbot for openSUSE:Factory checked in at 2026-09-08 17:07:51 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/python-certbot (Old) and /work/SRC/openSUSE:Factory/.python-certbot.new.1265 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "python-certbot" Tue Sep 8 17:07:51 2026 rev:69 rq:1376372 version:5.8.0 Changes: -------- --- /work/SRC/openSUSE:Factory/python-certbot/python-certbot.changes 2026-07-23 23:17:58.932396885 +0200 +++ /work/SRC/openSUSE:Factory/.python-certbot.new.1265/python-certbot.changes 2026-09-08 17:07:59.275746814 +0200 @@ -1,0 +2,8 @@ +Tue Sep 8 13:05:58 UTC 2026 - Markéta Machová <[email protected]> + +- update to 5.8.0 + * certbot and its acme library now require cryptography>=47.0.0 + * Fixed removed domains being omitted from the certificate update + confirmation prompt + +------------------------------------------------------------------- Old: ---- certbot-5.7.0.tar.gz New: ---- certbot-5.8.0.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ python-certbot.spec ++++++ --- /var/tmp/diff_new_pack.aLDBU1/_old 2026-09-08 17:08:00.711807017 +0200 +++ /var/tmp/diff_new_pack.aLDBU1/_new 2026-09-08 17:08:00.713807101 +0200 @@ -23,7 +23,7 @@ %endif %{?sle15_python_module_pythons} Name: python-certbot -Version: 5.7.0 +Version: 5.8.0 Release: 0 Summary: ACME client License: Apache-2.0 @@ -32,7 +32,7 @@ BuildRequires: %{python_module acme >= %{version}} BuildRequires: %{python_module configargparse >= 1.5.3} BuildRequires: %{python_module configobj >= 5.0.6} -BuildRequires: %{python_module cryptography >= 43.0.0} +BuildRequires: %{python_module cryptography >= 47.0.0} BuildRequires: %{python_module distro >= 1.7} BuildRequires: %{python_module josepy >= 2.0.0} BuildRequires: %{python_module parsedatetime >= 2.6} @@ -46,7 +46,7 @@ Requires: python-acme >= %{version} Requires: python-configargparse >= 1.5.3 Requires: python-configobj >= 5.0.6 -Requires: python-cryptography >= 43.0.0 +Requires: python-cryptography >= 47.0.0 Requires: python-distro >= 1.7 Requires: python-josepy >= 2.0.0 Requires: python-parsedatetime >= 2.6 ++++++ certbot-5.7.0.tar.gz -> certbot-5.8.0.tar.gz ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/certbot-5.7.0/CHANGELOG.md new/certbot-5.8.0/CHANGELOG.md --- old/certbot-5.7.0/CHANGELOG.md 2026-07-07 20:28:27.000000000 +0200 +++ new/certbot-5.8.0/CHANGELOG.md 2026-09-01 19:52:19.534951000 +0200 @@ -4,7 +4,18 @@ <!-- towncrier release notes start --> -## 5.7.0 - 2026-07-07 +## 5.8.0 - 2026-09-01 + +### Changed + +- certbot and its acme library now require cryptography>=47.0.0. ([#10748](https://github.com/certbot/certbot/issues/10748)) + +### Fixed + +- Fixed removed domains being omitted from the certificate update confirmation prompt. ([#10767](https://github.com/certbot/certbot/issues/10767)) + + +## 5.7.0 - 2026-07-15 ### Fixed diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/certbot-5.7.0/PKG-INFO new/certbot-5.8.0/PKG-INFO --- old/certbot-5.7.0/PKG-INFO 2026-07-07 20:28:27.783317300 +0200 +++ new/certbot-5.8.0/PKG-INFO 2026-09-01 19:52:20.645508000 +0200 @@ -1,6 +1,6 @@ Metadata-Version: 2.4 Name: certbot -Version: 5.7.0 +Version: 5.8.0 Summary: ACME client Author: Certbot Project License-Expression: Apache-2.0 @@ -25,10 +25,10 @@ Requires-Python: >=3.10 Description-Content-Type: text/x-rst License-File: LICENSE.txt -Requires-Dist: acme>=5.7.0 +Requires-Dist: acme>=5.8.0 Requires-Dist: ConfigArgParse>=1.5.3 Requires-Dist: configobj>=5.0.6 -Requires-Dist: cryptography>=43.0.0 +Requires-Dist: cryptography>=47.0.0 Requires-Dist: distro>=1.7.0 Requires-Dist: importlib_metadata>=8.6.1; python_version < "3.10" Requires-Dist: josepy>=2.0.0 @@ -65,10 +65,10 @@ Requires-Dist: uv; extra == "test" Requires-Dist: wheel; extra == "test" Provides-Extra: apache -Requires-Dist: certbot-apache>=5.7.0; extra == "apache" +Requires-Dist: certbot-apache>=5.8.0; extra == "apache" Requires-Dist: python-augeas; extra == "apache" Provides-Extra: nginx -Requires-Dist: certbot-nginx>=5.7.0; extra == "nginx" +Requires-Dist: certbot-nginx>=5.8.0; extra == "nginx" Requires-Dist: PyOpenSSL>=25.0.0; extra == "nginx" Requires-Dist: pyparsing>=3.0.0; extra == "nginx" Provides-Extra: all diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/certbot-5.7.0/docs/cli-help.txt new/certbot-5.8.0/docs/cli-help.txt --- old/certbot-5.7.0/docs/cli-help.txt 2026-07-07 20:28:26.000000000 +0200 +++ new/certbot-5.8.0/docs/cli-help.txt 2026-09-01 19:52:18.828124500 +0200 @@ -147,7 +147,7 @@ case, and to know when to deprecate support for past Python versions and flags. If you wish to hide this information from the Let's Encrypt server, set this to - "". (default: CertbotACMEClient/5.6.0 (certbot; + "". (default: CertbotACMEClient/5.7.0 (certbot; OS_NAME OS_VERSION) Authenticator/XXX Installer/YYY (SUBCOMMAND; flags: FLAGS) Py/major.minor.patchlevel). The flags encoded in the user agent are: --duplicate, diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/certbot-5.7.0/docs/using.rst new/certbot-5.8.0/docs/using.rst --- old/certbot-5.7.0/docs/using.rst 2026-07-07 20:28:26.000000000 +0200 +++ new/certbot-5.8.0/docs/using.rst 2026-09-01 19:52:18.829250600 +0200 @@ -337,6 +337,7 @@ dns-czechia_ Y N DNS Authentication for czechia.com dns-eurodns_ Y N DNS Authentication for EuroDNS dns-dnscale_ Y N DNS Authenticator for DNScale +dns-feno_ Y N DNS Authentication using the FENO (feno.no) API for .no domains ======================= ==== ==== ================================================================= .. _haproxy: https://github.com/greenhost/certbot-haproxy @@ -375,6 +376,7 @@ .. _dns-czechia: https://github.com/CZECHIA-COM/certbot-dns-czechia .. _dns-eurodns: https://pypi.org/project/certbot-dns-eurodns/ .. _dns-dnscale: https://github.com/dnscaleou/certbot-dns-dnscale +.. _dns-feno: https://github.com/mrerikcodes/certbot-dns-feno If you're interested, you can also :ref:`write your own plugin <dev-plugin>`. diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/certbot-5.7.0/setup.py new/certbot-5.8.0/setup.py --- old/certbot-5.7.0/setup.py 2026-07-07 20:28:26.000000000 +0200 +++ new/certbot-5.8.0/setup.py 2026-09-01 19:52:18.830102200 +0200 @@ -29,7 +29,7 @@ f'acme>={version}', 'ConfigArgParse>=1.5.3', 'configobj>=5.0.6', - 'cryptography>=43.0.0', + 'cryptography>=47.0.0', 'distro>=1.7.0', 'importlib_metadata>=8.6.1; python_version < "3.10"', 'josepy>=2.0.0', diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/certbot-5.7.0/src/certbot/__init__.py new/certbot-5.8.0/src/certbot/__init__.py --- old/certbot-5.7.0/src/certbot/__init__.py 2026-07-07 20:28:27.000000000 +0200 +++ new/certbot-5.8.0/src/certbot/__init__.py 2026-09-01 19:52:19.798805700 +0200 @@ -1,4 +1,4 @@ """Certbot client.""" # version number like 1.2.3a0, must have at least 2 parts, like 1.2 -__version__ = '5.7.0' +__version__ = '5.8.0' diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/certbot-5.7.0/src/certbot/_internal/main.py new/certbot-5.8.0/src/certbot/_internal/main.py --- old/certbot-5.7.0/src/certbot/_internal/main.py 2026-07-07 20:28:26.000000000 +0200 +++ new/certbot-5.8.0/src/certbot/_internal/main.py 2026-09-01 19:52:18.833178800 +0200 @@ -420,8 +420,11 @@ """Get lists of items removed from `before` and a lists of items added to `after` """ - added = list(set(after) - set(before)) - removed = list(set(before) - set(after)) + after_set = set(after) + before_set = set(before) + + added = list(after_set - before_set) + removed = list(before_set - after_set) added.sort() removed.sort() return added, removed diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/certbot-5.7.0/src/certbot/_internal/tests/main_test.py new/certbot-5.8.0/src/certbot/_internal/tests/main_test.py --- old/certbot-5.7.0/src/certbot/_internal/tests/main_test.py 2026-07-07 20:28:26.000000000 +0200 +++ new/certbot-5.8.0/src/certbot/_internal/tests/main_test.py 2026-09-01 19:52:18.856622200 +0200 @@ -47,6 +47,16 @@ SS_CERT_PATH = test_util.vector_path('cert_2048.pem') +def test_get_added_removed_with_iterators(): + after = map(str, [san.DNSName("example.com"), san.DNSName("new.example.com")]) + before = map(str, [san.DNSName("example.com"), san.DNSName("old.example.com")]) + + added, removed = main._get_added_removed(after, before) + + assert added == ["new.example.com"] + assert removed == ["old.example.com"] + + class TestHandleCerts(unittest.TestCase): """Test for certbot._internal.main._handle_* methods""" @mock.patch("certbot._internal.main._handle_unexpected_key_type_migration") diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/certbot-5.7.0/src/certbot/crypto_util.py new/certbot-5.8.0/src/certbot/crypto_util.py --- old/certbot-5.7.0/src/certbot/crypto_util.py 2026-07-07 20:28:26.000000000 +0200 +++ new/certbot-5.8.0/src/certbot/crypto_util.py 2026-09-01 19:52:18.874962300 +0200 @@ -25,6 +25,12 @@ from cryptography.hazmat.primitives.asymmetric.dsa import DSAPublicKey from cryptography.hazmat.primitives.asymmetric.ec import ECDSA from cryptography.hazmat.primitives.asymmetric.ec import EllipticCurvePublicKey +from cryptography.hazmat.primitives.asymmetric.mldsa import ( + MLDSA44PublicKey, + MLDSA65PublicKey, + MLDSA87PublicKey, +) +from cryptography.hazmat.primitives.asymmetric.mlkem import MLKEM768PublicKey, MLKEM1024PublicKey from cryptography.hazmat.primitives.asymmetric.padding import PKCS1v15 from cryptography.hazmat.primitives.asymmetric.rsa import RSAPublicKey from cryptography.hazmat.primitives.serialization import Encoding @@ -346,7 +352,9 @@ def verify_signed_payload(public_key: Union[DSAPublicKey, 'Ed25519PublicKey', 'Ed448PublicKey', - EllipticCurvePublicKey, RSAPublicKey, + EllipticCurvePublicKey, MLDSA44PublicKey, + MLDSA65PublicKey, MLDSA87PublicKey, MLKEM768PublicKey, + MLKEM1024PublicKey, RSAPublicKey, 'X25519PublicKey', 'X448PublicKey'], signature: bytes, payload: bytes, signature_hash_algorithm: hashes.HashAlgorithm) -> None: diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/certbot-5.7.0/src/certbot.egg-info/PKG-INFO new/certbot-5.8.0/src/certbot.egg-info/PKG-INFO --- old/certbot-5.7.0/src/certbot.egg-info/PKG-INFO 2026-07-07 20:28:27.000000000 +0200 +++ new/certbot-5.8.0/src/certbot.egg-info/PKG-INFO 2026-09-01 19:52:20.556334500 +0200 @@ -1,6 +1,6 @@ Metadata-Version: 2.4 Name: certbot -Version: 5.7.0 +Version: 5.8.0 Summary: ACME client Author: Certbot Project License-Expression: Apache-2.0 @@ -25,10 +25,10 @@ Requires-Python: >=3.10 Description-Content-Type: text/x-rst License-File: LICENSE.txt -Requires-Dist: acme>=5.7.0 +Requires-Dist: acme>=5.8.0 Requires-Dist: ConfigArgParse>=1.5.3 Requires-Dist: configobj>=5.0.6 -Requires-Dist: cryptography>=43.0.0 +Requires-Dist: cryptography>=47.0.0 Requires-Dist: distro>=1.7.0 Requires-Dist: importlib_metadata>=8.6.1; python_version < "3.10" Requires-Dist: josepy>=2.0.0 @@ -65,10 +65,10 @@ Requires-Dist: uv; extra == "test" Requires-Dist: wheel; extra == "test" Provides-Extra: apache -Requires-Dist: certbot-apache>=5.7.0; extra == "apache" +Requires-Dist: certbot-apache>=5.8.0; extra == "apache" Requires-Dist: python-augeas; extra == "apache" Provides-Extra: nginx -Requires-Dist: certbot-nginx>=5.7.0; extra == "nginx" +Requires-Dist: certbot-nginx>=5.8.0; extra == "nginx" Requires-Dist: PyOpenSSL>=25.0.0; extra == "nginx" Requires-Dist: pyparsing>=3.0.0; extra == "nginx" Provides-Extra: all diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/certbot-5.7.0/src/certbot.egg-info/requires.txt new/certbot-5.8.0/src/certbot.egg-info/requires.txt --- old/certbot-5.7.0/src/certbot.egg-info/requires.txt 2026-07-07 20:28:27.000000000 +0200 +++ new/certbot-5.8.0/src/certbot.egg-info/requires.txt 2026-09-01 19:52:20.557262000 +0200 @@ -1,7 +1,7 @@ -acme>=5.7.0 +acme>=5.8.0 ConfigArgParse>=1.5.3 configobj>=5.0.6 -cryptography>=43.0.0 +cryptography>=47.0.0 distro>=1.7.0 josepy>=2.0.0 parsedatetime>=2.6 @@ -17,7 +17,7 @@ certbot[apache,dev,docs,nginx,test] [apache] -certbot-apache>=5.7.0 +certbot-apache>=5.8.0 python-augeas [dev] @@ -34,7 +34,7 @@ sphinx_rtd_theme [nginx] -certbot-nginx>=5.7.0 +certbot-nginx>=5.8.0 PyOpenSSL>=25.0.0 pyparsing>=3.0.0
