v0.2.3

What's Changed

• Dependabot config by @mcpherrinm in #43
• Bump golangci/golangci-lint-action from 3 to 6 by @dependabot in #44
• Bump actions/setup-go from 4 to 5 by @dependabot in #45
• Update AWS SDK dependencies by @mcpherrinm in #51
• Update diagram to note random subset of serials are checked by @mcpherrinm in #52
• Group aws-sdk-go dependencies in dependabot config by @mcpherrinm in #58
• Update crl-checker to use math/rand/v2, generate RSA keys sometimes by @mcpherrinm in #60
• Run github actions on ubuntu-24.04 by @mcpherrinm in #76
• deps: update acmez to v3 by @jsha in #79
• churner: replace Z with z by @jsha in #80
• Check for CRLDistributionPoint in certificates. by @jsha in #78
• Bump the aws-sdk-go group across 1 directory with 5 updates by @dependabot in #81
• Bump github.com/stretchr/testify from 1.9.0 to 1.10.0 by @dependabot in #82
• Bump the aws-sdk-go group with 3 updates by @dependabot in #83

New Contributors

• @jsha made their first contribution in #79

Full Changelog: v0.2.2...v0.2.3

v0.2.2

What's Changed

• Update to new staging intermediates by @mcpherrinm in #41

We decided to re-issue staging intermediates

Full Changelog: v0.2.1...v0.2.2

v0.2.1

What's Changed

• Remove deprecated use of EndpointResolverWithOptions by @mcpherrinm in #33
• Update dependencies by @mcpherrinm in #36
• Add new intermediates by @mcpherrinm in #39
• Update boulder and Go by @mcpherrinm in #40

Full Changelog: v0.1.2...v0.2.1

v0.1.2

What's Changed

• Use errors.Join instead of multierr by @mcpherrinm in #31
• Add a retry loop around obtaining certs by @mcpherrinm in #32

Full Changelog: v0.1.1...v0.1.2

Re-release with fixed permissions on github action

The release.yml workflow needs permission to read the repository (#30)

Also bump configure-aws-credentials to the latest major version.

Release crl-monitor to s3

This release adds S3 uploading of the lambda for deployment inside Let's Encrypt.

Tag initial release of crl-monitor

The CRL Monitor is a set of AWS Lambdas for monitoring CRLs stored in S3 buckets.

Its primary features are:

• Issue and revoke certificates, checking that the revoked certificates are added to CRLs on time
• Check that all serial numbers removed from CRLs are after their expiry by diffing with the previous CRL version
• Run lints from Boulder, and transitively zlint, on the CRLs