This release includes 1 breaking change for platform teams planning a safe upgrade.
✓ No known CVEs patched in this version
Topics
+10 more
Affected surfaces
Summary
AI summarydns_hetzner.sh was removed.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Medium |
Support ACME Renewal Information (ARI) enabled by default. Support ACME Renewal Information (ARI) enabled by default. Source: llm_adapter@2026-07-17 Confidence: high |
— |
| Feature | Medium |
Support dns-persist-01 challenge with --dns-persist-days option. Support dns-persist-01 challenge with --dns-persist-days option. Source: llm_adapter@2026-07-17 Confidence: high |
— |
| Feature | Medium |
Negative --days schedules renewal relative to cert expiration date. Negative --days schedules renewal relative to cert expiration date. Source: llm_adapter@2026-07-17 Confidence: high |
— |
| Feature | Medium |
Support ACME account key rollover. Support ACME account key rollover. Source: llm_adapter@2026-07-17 Confidence: high |
— |
| Feature | Medium |
Support multiple account emails; --update-account persists new email. Support multiple account emails; --update-account persists new email. Source: llm_adapter@2026-07-17 Confidence: high |
— |
| Feature | Medium |
Add new DNS providers: Level27, CDMON, Poweradmin, IP-Projects, EuroDNS, Firestorm, creoline, LaoDC, WEDOS, muumuu, Volcano Engine, Glesys, Aruba Business, Calrissia, Hostinger. Add new DNS providers: Level27, CDMON, Poweradmin, IP-Projects, EuroDNS, Firestorm, creoline, LaoDC, WEDOS, muumuu, Volcano Engine, Glesys, Aruba Business, Calrissia, Hostinger. Source: llm_adapter@2026-07-17 Confidence: high |
— |
| Feature | Medium |
Add new deploy hooks: FortiGate, Baidu Cloud CDN, Windows RDP. Add new deploy hooks: FortiGate, Baidu Cloud CDN, Windows RDP. Source: llm_adapter@2026-07-17 Confidence: high |
— |
| Feature | Medium |
Add customscript notify hook. Add customscript notify hook. Source: llm_adapter@2026-07-17 Confidence: high |
— |
| Feature | Low |
Add bash completion, installed via --install. Add bash completion, installed via --install. Source: llm_adapter@2026-07-17 Confidence: high |
— |
| Feature | Low |
Renewals follow CA-suggested renewal window when ARI is used. Renewals follow CA-suggested renewal window when ARI is used. Source: granite4.1:30b@2026-07-17-audit Confidence: low |
— |
| Feature | Low |
Cron job runs every 6 hours to react to ARI windows. Cron job runs every 6 hours to react to ARI windows. Source: granite4.1:30b@2026-07-17-audit Confidence: low |
— |
| Feature | Low |
Negative --days can be combined with --valid-to for renewal margin. Negative --days can be combined with --valid-to for renewal margin. Source: granite4.1:30b@2026-07-17-audit Confidence: low |
— |
| Feature | Low |
Docker images are now also published to ghcr.io registry. Docker images are now also published to ghcr.io registry. Source: granite4.1:30b@2026-07-17-audit Confidence: low |
— |
| Deprecation | Medium |
Remove dns_hetzner.sh script (issue #6990). Remove dns_hetzner.sh script (issue #6990). Source: granite4.1:30b@2026-07-17-audit Confidence: low |
— |
| Bugfix | Medium |
Retry failed install/deploy steps on the next renewal. Retry failed install/deploy steps on the next renewal. Source: llm_adapter@2026-07-17 Confidence: low |
— |
Full changelog
- Support ACME Renewal Information (ARI, RFC 9773), enabled by default. Renewals now follow the renewal window suggested by the CA. Set NO_ARI=1 to disable. The installed cron job now runs every 6 hours to react to ARI renewal windows in time.
- Support the dns-persist-01 challenge, with --dns-persist-days.
- A negative --days schedules renewal relative to the cert expiration date, and can be combined with --valid-to to set a renewal margin.
- Support ACME account key rollover.
- Support multiple account emails. --update-account now persists the new email.
- Retry failed install/deploy steps on the next renewal.
- Add bash completion, installed via --install.
- New DNS providers: Level27, CDMON, Poweradmin, IP-Projects, EuroDNS, Firestorm, creoline, LaoDC, WEDOS, muumuu, Volcano Engine, Glesys, Aruba Business, Calrissia, Hostinger. New deploy hooks: FortiGate, Baidu Cloud CDN, Windows RDP. New notify hook: customscript.
- dns_hetzner.sh was removed (#6990).
- Docker images are now also published to ghcr.io.
- A lot of bug fixes.
Breaking Changes
- Removed dns_hetzner.sh plugin
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About acme.sh
All releases →Related context
Beta — feedback welcome: [email protected]