grafana / certmagic-gcs

GCS storage for Certmagic
GNU Affero General Public License v3.0
10 stars 5 forks source link

Bump github.com/caddyserver/certmagic from 0.19.2 to 0.20.0 #191

Closed dependabot[bot] closed 7 months ago

dependabot[bot] commented 7 months ago

Bumps github.com/caddyserver/certmagic from 0.19.2 to 0.20.0.

Release notes

Sourced from github.com/caddyserver/certmagic's releases.

v0.20.0

This release vastly improves storage cleaning as well improving a few smaller things. There is a minor breaking change as we get ever closer to v1.0.

  • :warning: The DecisionFunc for On-Demand TLS now takes a context.Context value as its first argument. The context carries the ClientHelloInfo value (keyed by ClientHelloInfoCtxKey) for logging purposes.
  • Storage cleaning is now synchronized across the cluster, including process restarts. The state of cleaning expired certificates and OCSP staples is written to storage, and distributed locking is used to ensure that only 1 instance does it at a time. This greatly reduces costs for expensive storage backends! Cleaning is also done less often when the process is frequently restarted because the state is written to storage, so it is not forgotten after shutting down.
  • .home.arpa is now considered an internal suffix.
  • Backoff timings have been tuned based on real-world experience.

What's Changed

New Contributors

Full Changelog: https://github.com/caddyserver/certmagic/compare/v0.19.2...v0.20.0

Commits
  • 707ebd9 Fix typo, tune backoff more
  • 2b4a688 Add OCSP stapling unit tests (#259)
  • 4574cfa Fix unserializable ClientHelloInfo
  • 7548446 Don't try to decode last clean data if file does not exist
  • e017bf7 Fix test (context can't be set in ClientHelloInfo)
  • db6a576 Add decoded ClientHello to DecisionFunc context
  • ee3b26a Global exclusion lock on storage cleaning
  • 6349355 Tune exponential backoff
  • e8e6167 Wrap error returned from checkIfCertShouldBeObtained (#256)
  • f0038ff Add context arg to DecisionFunc (#255)
  • Additional commits viewable in compare view


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)