1. Support ACME Renewal Information (ARI, RFC 9773), enabled by default. Renewals now follow the renewal window suggested by the CA. Set NO_ARI=1 to disable. The installed cron job now runs every 6 hours to react to ARI renewal windows in time.
2. Support the dns-persist-01 challenge, with --dns-persist-days.
3. A negative --days schedules renewal relative to the cert expiration date, and can be combined with --valid-to to set a renewal margin.
4. Support ACME account key rollover.
5. Support multiple account emails. --update-account now persists the new email.
6. Retry failed install/deploy steps on the next renewal.
7. Add bash completion, installed via --install.
8. New DNS providers: Level27, CDMON, Poweradmin, IP-Projects, EuroDNS, Firestorm, creoline, LaoDC, WEDOS, muumuu, Volcano Engine, Glesys, Aruba Business, Calrissia, Hostinger. New deploy hooks: FortiGate, Baidu Cloud CDN, Windows RDP. New notify hook: customscript.
9. dns_hetzner.sh was removed (#6990).
10. Docker images are now also published to ghcr.io.
11. A lot of bug fixes.