boulder: 2024-07-16 -> 2025-04-17 (#399626)

pkgs/by-name/bo/boulder/package.nix

@@ -4,16 +4,17 @@
   buildGoModule,
   testers,
   boulder,
+  nix-update-script,
 }:
 
 buildGoModule rec {
   pname = "boulder";
-  version = "2024-07-16";
+  version = "2025-04-17";
 
   src = fetchFromGitHub {
     owner = "letsencrypt";
     repo = "boulder";
-    rev = "release-${version}";
+    tag = "release-${version}";
     leaveDotGit = true;
     postFetch = ''
       pushd $out
@@ -21,7 +22,7 @@ buildGoModule rec {
       find $out -name .git -print0 | xargs -0 rm -rf
       popd
     '';
-    hash = "sha256-mIUT9qVBPWrL0ySORwgEH6azaQmzMCl7ha/eYRtvAg4=";
+    hash = "sha256-FXk+JZJ1azpgN6IQ9aYmpUEO1CGs9/3sog1NjrfB4d8=";
   };
 
   vendorHash = null;
@@ -58,6 +59,7 @@ buildGoModule rec {
     "TestAddPrecertificateKeyHash"
     "TestAddPrecertificateNoOCSP"
     "TestAddRegistration"
+    "TestAddReplacementOrder"
     "TestAddSerial"
     "TestAdministrativelyRevokeCertificate"
     "TestAuthorization500"
@@ -81,6 +83,7 @@ buildGoModule rec {
     "TestCheckCertReturnsDNSNames"
     "TestCheckExactCertificateLimit"
     "TestCheckFQDNSetRateLimitOverride"
+    "TestCheckIdentifiersPaused"
     "TestCheckWildcardCert"
     "TestCheckWildcardCert"
     "TestClientTransportCredentials"
@@ -99,6 +102,7 @@ buildGoModule rec {
     "TestDeactivateAuthorization"
     "TestDeactivateRegistration"
     "TestDedupOnRegistration"
+    "TestDialerTimeout"
     "TestDirectory"
     "TestDontFindRevokedCert"
     "TestEarlyOrderRateLimiting"
@@ -106,9 +110,11 @@ buildGoModule rec {
     "TestEnforceJWSAuthType"
     "TestExactPublicSuffixCertLimit"
     "TestExtractJWK"
+    "TestFQDNSetExists"
     "TestFQDNSetTimestampsForWindow"
     "TestFQDNSets"
     "TestFQDNSetsExists"
+    "TestFQDNSetsExists"
     "TestFailExit"
     "TestFasterGetOrderForNames"
     "TestFinalizeAuthorization2"
@@ -116,6 +122,7 @@ buildGoModule rec {
     "TestFinalizeOrderWildcard"
     "TestFinalizeOrderWithMixedSANAndCN"
     "TestFinalizeSCTError"
+    "TestFinalizeWithMustStaple"
     "TestFindCertsAtCapacity"
     "TestFindExpiringCertificates"
     "TestFindIDs"
@@ -145,6 +152,8 @@ buildGoModule rec {
     "TestGetOrder"
     "TestGetOrderExpired"
     "TestGetOrderForNames"
+    "TestGetPausedIdentifiers"
+    "TestGetPausedIdentifiersOnlyUnpausesOneAccount"
     "TestGetPendingAuthorization2"
     "TestGetRevokedCerts"
     "TestGetSerialMetadata"
@@ -221,12 +230,15 @@ buildGoModule rec {
     "TestPOST404"
     "TestPanicStackTrace"
     "TestParseJWSRequest"
+    "TestPauseIdentifiers"
     "TestPendingAuthorizationsUnlimited"
     "TestPerformValidationAlreadyValid"
     "TestPerformValidationBadChallengeType"
     "TestPerformValidationExpired"
     "TestPerformValidationSuccess"
     "TestPerformValidationVAError"
+    "TestPerformValidation_FailedThenSuccessfulValidationResetsPauseIdentifiersRatelimit"
+    "TestPerformValidation_FailedValidationsTriggerPauseIdentifiersRatelimit"
     "TestPrepAuthzForDisplay"
     "TestPreresolvedDialerTimeout"
     "TestProcessCerts"
@@ -242,6 +254,7 @@ buildGoModule rec {
     "TestRegistrationsPerIPOverrideUsage"
     "TestRehydrateHostPort"
     "TestRelativeDirectory"
+    "TestReplacementOrderExists"
     "TestReplicationLagRetries"
     "TestResolveContacts"
     "TestRevokeCertByApplicant_Controller"
@@ -260,6 +273,7 @@ buildGoModule rec {
     "TestSerialsFromPrivateKey"
     "TestSetAndGet"
     "TestSetOrderProcessing"
+    "TestSetReplacementOrderFinalized"
     "TestSingleton"
     "TestStart"
     "TestStatusForOrder"
@@ -268,6 +282,7 @@ buildGoModule rec {
     "TestTLSALPN01DialTimeout"
     "TestTLSConfigLoad"
     "TestTimeouts"
+    "TestUnpauseAccount"
     "TestUpdateCRLShard"
     "TestUpdateChallengeFinalizedAuthz"
     "TestUpdateChallengeRAError"
@@ -275,6 +290,8 @@ buildGoModule rec {
     "TestUpdateMissingAuthorization"
     "TestUpdateNowWithAllFailingSRV"
     "TestUpdateNowWithOneFailingSRV"
+    "TestUpdateRegistrationContact"
+    "TestUpdateRegistrationKey"
     "TestUpdateRegistrationSame"
     "TestUpdateRevokedCertificate"
     "TestValidJWSForKey"
@@ -302,12 +319,15 @@ buildGoModule rec {
     done
   '';
 
-  passthru.tests.version = testers.testVersion {
-    package = boulder;
-    inherit version;
+  passthru = {
+    tests.version = testers.testVersion {
+      package = boulder;
+      inherit version;
+    };
+    updateScript = nix-update-script { };
   };
 
-  meta = with lib; {
+  meta = {
     homepage = "https://github.com/letsencrypt/boulder";
     description = "ACME-based certificate authority, written in Go";
     longDescription = ''
@@ -317,7 +337,7 @@ buildGoModule rec {
       revoke certificates for their domains. Boulder is the software that runs
       Let's Encrypt.
     '';
-    license = licenses.mpl20;
+    license = lib.licenses.mpl20;
     mainProgram = "boulder";
     maintainers = [ ];
   };