302 Commits

Include renames

• Move the release signing baseline to 3.1.6 and catch lightweight tags in CI

  The 3.1.5 tag was created server-side by publishing the GitHub release,
  which can only produce a lightweight ref, so it carries no signature and
  git verify-tag fails on it. Rather than force-move a published tag, state
  that signing starts at 3.1.6 and cut that tag locally with git tag -s
  before the release is published.
  
  vtag.yml now fails the run when the pushed tag is not a tag object, so the
  same mistake shows up as a red check on the release instead of arriving as
  a user report. The mirror step runs first, so v<tag> is still created; its
  early "already exists" return became an else branch so the check is never
  skipped.
  
  https://github.com/acmesh-official/acme.sh/issues/7273

  neil 2026-09-20 13:06:37 +02:00
  138e0dff84
• ci: run Pebble with PEBBLE_AUTHZREUSE=0 in PebbleStrict

  Pebble reuses a valid authorization in a new order 50% of the time by
  default, so the dns manual mode case was a coin flip: a reused
  authorization left nothing for the TXT record to answer.

  neil 2026-09-11 14:23:38 +08:00
  efecf2a308
• ci: enable the dns manual mode case in PebbleStrict

  TEST_DNS_MANUAL=1 turns on le_test_dns_manual_renew, which answers the
  dns-01 challenge through the pebble-challtestsrv that the compose setup
  already runs.

  neil 2026-09-10 21:56:59 +08:00
  15bed65ce1
• ci: tolerate 422 when the latest release tag has no workflow_dispatch
  neil 2026-09-07 12:33:21 +08:00
  63ee7cb16e
• fix
  neil 2026-09-04 15:51:12 +08:00
  94d2f62626
• add trigger
  neil 2026-09-04 15:27:06 +08:00
  f2b0484137
• Add OPNsense and HardenedBSD to CI
  neil 2026-08-30 17:46:48 +08:00
  cdca555cad
• Fix the standalone port check on the bsds, macos and haiku
  neil 2026-08-30 17:39:57 +08:00
  cce4a28b99
• Mirror the tag object, not the commit, in vtag.yml

  The v-prefixed mirror was created from github.sha, so for an annotated or
  signed tag it would point at the commit and drop the signature: "git
  verify-tag v3.1.3" fails with "cannot verify a non-tag object of type
  commit" while "git verify-tag 3.1.3" succeeds. Resolve refs/tags/<tag>
  and mirror whatever object it points at instead, which keeps the current
  behaviour for lightweight tags. Also move the workflow expressions into
  env instead of interpolating them into the shell command.

  neil 2026-08-14 11:53:43 +08:00
  5ff7f0a4e7
• add OpenEuler
  neil 2026-07-26 15:01:41 +08:00
  057c940895
• add GNU hurd
  neil 2026-07-22 20:42:14 +08:00
  1774d838ca
• add cache-after-prepare: true
  neil 2026-07-18 09:32:26 +08:00
  97c5aca136
• fix bug for solaris.

  dnsapi/deploy: remove POSIX character classes from sed/grep patterns
  
  Solaris /usr/bin/sed and /usr/bin/grep parse [[:space:]] etc. as a
  literal bracket set and silently mis-match. Replace with [ ]* for
  JSON matching, a printf-tab bracket for user-input trimming, and
  [0-9] for digits; also drop GNU-only sed -r/-E in rage4, selfhost
  and selectel, and reuse _strip_blank_lines in byteplus_alb.

  neil 2026-07-17 12:38:14 +08:00
  59a97d7f8b
• minor
  neil 2026-07-16 20:09:10 +08:00
  745a42f193
• issue bot: tell reporters to redact secrets before posting logs

  Debug logs occasionally contain private keys or tokens (issue 6267);
  the code-side leak in the haproxy hook was fixed by #6268, this adds
  the missing warning to the auto-comment that asks for logs.

  neil 2026-07-12 12:32:54 +08:00
  eacf0d6a87
• workflows: run issue/wiki automation only in the upstream repo
  neil 2026-07-12 11:49:53 +08:00
  a9590c5bd7
• wiki-guard: skip on forks (no <fork>.wiki repo to check out)
  neil 2026-07-12 11:43:07 +08:00
  c0d62eb934
• issue.yml: match tracking issue title variants
  neil 2026-07-10 10:02:59 +08:00
  ca118be754
• one-click revert and ban
  neil 2026-07-06 17:39:56 +08:00
  cc64a73230
• add more events
  neil 2026-07-06 16:36:16 +08:00
  f2b37b32ff
• clean
  neil 2026-07-06 16:30:41 +08:00
  73df21abc4
• wiki-guard: use WIKI_GUARD_TOKEN (PAT with read:org) to enumerate org write members
  neil 2026-07-06 16:27:26 +08:00
  919492df13
• wiki-guard: log the number of write-access members loaded
  neil 2026-07-06 15:23:45 +08:00
  e4eaa59063
• wiki-guard: trust repo/org members with write access in all rule checks
  neil 2026-07-06 15:11:35 +08:00
  2b5a19d34a
• issue.yml: assign and label "Report bugs to" tracking issues instead of posting the upgrade boilerplate
  neil 2026-07-06 14:27:00 +08:00
  dc1b06006f
• wiki-monitor: skip notification for the maintainer's own wiki changes
  neil 2026-07-06 14:23:51 +08:00
  8585d9f4a7
• add wiki-guard workflow: auto-restore wiki pages deleted or renamed by non-maintainer
  neil 2026-07-06 13:35:37 +08:00
  ca8ab7f8b5
• add Apache workflow to test the --apache mode

  Runs le_test_apache from acmetest against Pebble, with Apache
  listening on Pebble's HTTP-01 validation port.

  neil 2026-07-05 16:31:51 +08:00
  1f94fd7fd5
• add Nginx workflow to test the --nginx mode

  Runs le_test_nginx from acmetest against Pebble: nginx listens on
  Pebble's HTTP-01 validation port with an aaPanel/BT style
  "location ^~ /" reverse proxy block, the regression case of #6125.

  neil 2026-07-05 16:18:37 +08:00
  cacafc9c23
• DNS.yml: fix workflow warnings

  - replace deprecated set-output with GITHUB_OUTPUT
  - untap aws/tap before brew install to silence tap trust warning
  - inject safe.directory=* for cygwin git so the checkout post step
    no longer fails with dubious ownership (exit 128)

  neil 2026-07-05 15:51:38 +08:00
  31b13caf8b
• fix
  neil 2026-07-01 21:33:24 +08:00
  a7ccfcf91d
• fix ghostbsd
  neil 2026-07-01 18:59:14 +08:00
  c38182897d
• add GhostBSD
  neil 2026-06-05 23:01:42 +02:00
  4575877d48
• upgrade
  neil 2026-06-04 22:57:50 +02:00
  0e5f1518aa
• add tribblix
  neil 2026-06-04 22:34:36 +02:00
  2e4e5d7955
• ci: add GitHub Container Registry (ghcr.io) publishing (#7005)
  terafin 2026-06-04 21:25:38 +02:00
  c7c903fba3
• add MidnightBSD
  neil 2026-04-24 22:43:25 +02:00
  0b2187ab3f
• fix ca name
  neil 2026-04-24 21:47:27 +02:00
  4b8b23bb90
• Update copilot-instructions.md
  neil 2026-04-05 10:40:35 +08:00
  346acc3f33
• Update copilot-instructions.md
  neil 2026-04-04 21:16:40 +08:00
  cf9c70a6c7
• fix rule
  neil 2026-04-03 11:33:05 +08:00
  fe5d2e3ef7
• Update copilot instruction to match actual PR rule (#6873)

  old version had instruction to use bash-only [[ ]] test, remove it and add rules for DNS script writing from https://github.com/acmesh-official/acme.sh/issues/343

  orangepizza 2026-03-28 09:26:47 +08:00
  bf486bb988
• fix https://github.com/acmesh-official/acme.sh/issues/6856#issuecomment-4054175916
  neil 2026-03-13 20:10:22 +08:00
  3198c1af6e
• update
  neil 2026-03-13 18:41:02 +08:00
  fc8a61f10f
• minor
  neil 2026-03-08 18:43:39 +08:00
  cc677ba9f1
• add copilot
  neil 2026-03-01 13:13:07 +08:00
  fdd2e4f19a
• fix https://github.com/acmesh-official/acme.sh/issues/6196#issuecomment-3777530678
  neil 2026-01-21 20:00:27 +01:00
  0cef5edac2
• disable notifications for myself

  disable notifications for myself

  neil 2026-01-13 21:43:46 +01:00
  e2882c536b
• fix haiku
  neil 2026-01-11 21:28:45 +01:00
  d57ab0ab7d
• fix haiku
  neil 2026-01-11 21:21:08 +01:00
  d8c062defb