Merge pull request #10594 from certbot/candidate-5.4.0

Candidate 5.4.0

acme/setup.py

@@ -1,6 +1,6 @@
 from setuptools import setup
 
-version = '5.4.0.dev0'
+version = '5.5.0.dev0'
 
 setup(
     version=version,

certbot-apache/setup.py

@@ -1,6 +1,6 @@
 from setuptools import setup
 
-version = '5.4.0.dev0'
+version = '5.5.0.dev0'
 
 install_requires = [
     # We specify the minimum acme and certbot version as the current plugin

certbot-ci/setup.py

@@ -1,6 +1,6 @@
 from setuptools import setup
 
-version = '5.4.0.dev0'
+version = '5.5.0.dev0'
 
 setup(
     version=version,

certbot-compatibility-test/setup.py

@@ -1,6 +1,6 @@
 from setuptools import setup
 
-version = '5.4.0.dev0'
+version = '5.5.0.dev0'
 
 setup(
     version=version,

certbot-dns-cloudflare/setup.py

@@ -2,7 +2,7 @@ import os
 
 from setuptools import setup
 
-version = '5.4.0.dev0'
+version = '5.5.0.dev0'
 
 install_requires = [
     # for now, do not upgrade to cloudflare>=2.20 to avoid deprecation warnings and the breaking

certbot-dns-digitalocean/setup.py

@@ -2,7 +2,7 @@ import os
 
 from setuptools import setup
 
-version = '5.4.0.dev0'
+version = '5.5.0.dev0'
 
 install_requires = [
     'python-digitalocean>=1.15.0', # 1.15.0 or newer is recommended for TTL support

certbot-dns-dnsimple/setup.py

@@ -2,7 +2,7 @@ import os
 
 from setuptools import setup
 
-version = '5.4.0.dev0'
+version = '5.5.0.dev0'
 
 install_requires = [
     # This version of lexicon is required to address the problem described in

certbot-dns-dnsmadeeasy/setup.py

@@ -2,7 +2,7 @@ import os
 
 from setuptools import setup
 
-version = '5.4.0.dev0'
+version = '5.5.0.dev0'
 
 install_requires = [
     'dns-lexicon>=3.14.1',

certbot-dns-gehirn/setup.py

@@ -2,7 +2,7 @@ import os
 
 from setuptools import setup
 
-version = '5.4.0.dev0'
+version = '5.5.0.dev0'
 
 install_requires = [
     'dns-lexicon>=3.14.1',

certbot-dns-google/setup.py

@@ -2,7 +2,7 @@ import os
 
 from setuptools import setup
 
-version = '5.4.0.dev0'
+version = '5.5.0.dev0'
 
 install_requires = [
     'google-api-python-client>=1.6.5',

certbot-dns-linode/setup.py

@@ -2,7 +2,7 @@ import os
 
 from setuptools import setup
 
-version = '5.4.0.dev0'
+version = '5.5.0.dev0'
 
 install_requires = [
     'dns-lexicon>=3.14.1',

certbot-dns-luadns/setup.py

@@ -2,7 +2,7 @@ import os
 
 from setuptools import setup
 
-version = '5.4.0.dev0'
+version = '5.5.0.dev0'
 
 install_requires = [
     'dns-lexicon>=3.14.1',

certbot-dns-nsone/setup.py

@@ -2,7 +2,7 @@ import os
 
 from setuptools import setup
 
-version = '5.4.0.dev0'
+version = '5.5.0.dev0'
 
 install_requires = [
     'dns-lexicon>=3.14.1',

certbot-dns-ovh/setup.py

@@ -2,7 +2,7 @@ import os
 
 from setuptools import setup
 
-version = '5.4.0.dev0'
+version = '5.5.0.dev0'
 
 install_requires = [
     'dns-lexicon>=3.15.1',

certbot-dns-rfc2136/setup.py

@@ -2,7 +2,7 @@ import os
 
 from setuptools import setup
 
-version = '5.4.0.dev0'
+version = '5.5.0.dev0'
 
 install_requires = [
     # This version was chosen because it is the version packaged in RHEL 9 and Debian unstable. It

certbot-dns-route53/setup.py

@@ -2,7 +2,7 @@ import os
 
 from setuptools import setup
 
-version = '5.4.0.dev0'
+version = '5.5.0.dev0'
 
 install_requires = [
     'boto3>=1.20.34',

certbot-dns-sakuracloud/setup.py

@@ -2,7 +2,7 @@ import os
 
 from setuptools import setup
 
-version = '5.4.0.dev0'
+version = '5.5.0.dev0'
 
 install_requires = [
     'dns-lexicon>=3.14.1',

certbot-nginx/setup.py

@@ -1,6 +1,6 @@
 from setuptools import setup
 
-version = '5.4.0.dev0'
+version = '5.5.0.dev0'
 
 install_requires = [
     # We specify the minimum acme and certbot version as the current plugin

certbot/CHANGELOG.md

@@ -4,6 +4,17 @@ Certbot adheres to [Semantic Versioning](https://semver.org/).
 
 <!-- towncrier release notes start -->
 
+## 5.4.0 - 2026-03-10
+
+### Added
+
+- The webroot plugin now supports IP address issuance. ([#10543](https://github.com/certbot/certbot/issues/10543))
+
+### Changed
+
+- certbot-nginx now requires pyparsing>=3.0.0. ([#10560](https://github.com/certbot/certbot/issues/10560))
+
+
 ## 5.3.1 - 2026-02-09
 
 ### Fixed

certbot/docs/cli-help.txt

@@ -147,7 +147,7 @@ options:
                         case, and to know when to deprecate support for past
                         Python versions and flags. If you wish to hide this
                         information from the Let's Encrypt server, set this to
-                        "". (default: CertbotACMEClient/5.3.1 (certbot;
+                        "". (default: CertbotACMEClient/5.4.0 (certbot;
                         OS_NAME OS_VERSION) Authenticator/XXX Installer/YYY
                         (SUBCOMMAND; flags: FLAGS) Py/major.minor.patchlevel).
                         The flags encoded in the user agent are: --duplicate,
@@ -759,18 +759,18 @@ webroot:
 
   --webroot-path WEBROOT_PATH, -w WEBROOT_PATH
                         public_html / webroot path. This can be specified
-                        multiple times to handle different domains; each
+                        multiple times to handle different identifiers; each
-                        domain will have the webroot path that preceded it.
+                        identifier will have the webroot path that preceded
-                        For instance: `-w /var/www/example -d example.com -d
+                        it. For instance: `-w /var/www/example -d example.com
-                        www.example.com -w /var/www/thing -d thing.net -d
+                        -d www.example.com -w /var/www/thing -d thing.net -d
                         m.thing.net` (default: Ask)
   --webroot-map WEBROOT_MAP
-                        JSON dictionary mapping domains to webroot paths; this
+                        JSON dictionary mapping identifiers to webroot paths;
-                        implies -d for each entry. You may need to escape this
+                        this implies -d or --ip-address for each entry. You
-                        from your shell. E.g.: --webroot-map
+                        may need to escape this from your shell. E.g.:
-                        '{"eg1.is,m.eg1.is":"/www/eg1/", "eg2.is":"/www/eg2"}'
+                        --webroot-map '{"eg1.is,m.eg1.is":"/www/eg1/",
-                        This option is merged with, but takes precedence over,
+                        "eg2.is":"/www/eg2"}' This option is merged with, but
-                        -w / -d entries. At present, if you put webroot-map in
+                        takes precedence over, -w / -d entries. At present, if
-                        a config file, it needs to be on a single line, like:
+                        you put webroot-map in a config file, it needs to be
-                        webroot-map = {"example.com":"/var/www"}. (default:
+                        on a single line, like: webroot-map =
-                        {})
+                        {"example.com":"/var/www"}. (default: {})

certbot/src/certbot/__init__.py

@@ -1,4 +1,4 @@
 """Certbot client."""
 
 # version number like 1.2.3a0, must have at least 2 parts, like 1.2
-__version__ = '5.4.0.dev0'
+__version__ = '5.5.0.dev0'

letstest/setup.py

@@ -1,6 +1,6 @@
 from setuptools import setup
 
-version = '5.4.0.dev0'
+version = '5.5.0.dev0'
 
 setup(
     version=version,

newsfragments/10543.added

@@ -1 +0,0 @@
-The webroot plugin now supports IP address issuance.

newsfragments/10560.changed

@@ -1 +0,0 @@
-certbot-nginx now requires pyparsing>=3.0.0.