Certbot 5.9.0 Release

Certbot 5.9.0 has just been released. The changelog for the release is:

Added

  • Added an OCI image source label to Docker images, allowing third-party tools such as Renovate to discover the source repository. (#10808)

Fixed

  • Fixes a bug where certbot would sometimes incorrectly pass failed SANs as successfully renewed SANs to renewal hooks. (#10780)
  • The account to deactivate is selected before Certbot asks for irreversible deactivation confirmation.

This release also updates Certbot's certifi version, removing the emSign roots after the eMudhra intermediate CA compromise.