Release v0.3.0-beta3

Added

• Load Balancer certificate idempotency:
  • Implemented idempotency check for SLB certificate uploads to prevent duplicate certificates and resource waste
  • Before uploading, the system now queries existing certificates in the region and reuses a certificate with the same fingerprint if found
  • Optimized API usage and robust error handling (fail-safe fallback to upload)

Improved

• Webhook robustness:
  • Webhook failures are now treated as non-critical warnings and do not halt the main renewal process
  • Added safe execution wrappers for webhook threads to prevent crashes
• Documentation:
  • Added slb:SetLoadBalancerHTTPSListenerAttribute and slb:DescribeLoadBalancerHTTPSListenerAttribute to required IAM permissions documentation
  • Added granular, resource-specific IAM policy examples for better security in helm/cloud-cert-renewer/README.md

Artifacts

Docker Image

GitHub Container Registry:

• ghcr.io/maskshell/cloud-cert-renewer:0.3.0-beta3
• ghcr.io/maskshell/cloud-cert-renewer:v0.3.0-beta3
• ghcr.io/maskshell/cloud-cert-renewer:latest

Docker Hub:

• analyser/cloud-cert-renewer:0.3.0-beta3
• analyser/cloud-cert-renewer:v0.3.0-beta3
• analyser/cloud-cert-renewer:latest

Custom Registry:

• registry.cn-hangzhou.aliyuncs.com/dianplus/cloud-cert-renewer:0.3.0-beta3

• registry.cn-hangzhou.aliyuncs.com/dianplus/cloud-cert-renewer:v0.3.0-beta3

• registry.cn-hangzhou.aliyuncs.com/dianplus/cloud-cert-renewer:latest

• Multi-architecture: Supports amd64 and arm64 platforms

• Digest consistency: All registries contain identical image content (same digest for each architecture)

Helm Chart

• Chart version: 0.3.0-beta3
• Repository: https://maskshell.github.io/cloud-cert-renewer/
• Install: >-
  helm repo add cloud-cert-renewer https://maskshell.github.io/cloud-cert-renewer/ && helm install cloud-cert-renewer cloud-cert-renewer/cloud-cert-renewer

PyPI Package

• Package: cloud-cert-renewer==0.3.0-beta3
• Install: pip install cloud-cert-renewer==0.3.0-beta3
• URL: https://pypi.org/project/cloud-cert-renewer/

Source Code

• Source archive: cloud-cert-renewer-0.3.0-beta3.tar.gz
• Checksums: checksums.txt (SHA256)

Release v0.3.0-beta2

Fixed

• Alibaba Cloud SDK integration:
  • Fixed method name typo in SLB listener configuration query: describe_load_balancer_https_listener_attribute_with_options → describe_load_balancer_httpslistener_attribute_with_options
  • This fixes the error: 'Client' object has no attribute 'describe_load_balancer_https_listener_attribute_with_options'

Artifacts

Docker Image

GitHub Container Registry:

• ghcr.io/maskshell/cloud-cert-renewer:0.3.0-beta2
• ghcr.io/maskshell/cloud-cert-renewer:v0.3.0-beta2
• ghcr.io/maskshell/cloud-cert-renewer:latest

Docker Hub:

• analyser/cloud-cert-renewer:0.3.0-beta2
• analyser/cloud-cert-renewer:v0.3.0-beta2
• analyser/cloud-cert-renewer:latest

Custom Registry:

• registry.cn-hangzhou.aliyuncs.com/dianplus/cloud-cert-renewer:0.3.0-beta2

• registry.cn-hangzhou.aliyuncs.com/dianplus/cloud-cert-renewer:v0.3.0-beta2

• registry.cn-hangzhou.aliyuncs.com/dianplus/cloud-cert-renewer:latest

• Multi-architecture: Supports amd64 and arm64 platforms

• Digest consistency: All registries contain identical image content (same digest for each architecture)

Helm Chart

• Chart version: 0.3.0-beta2
• Repository: https://maskshell.github.io/cloud-cert-renewer/
• Install: >-
  helm repo add cloud-cert-renewer https://maskshell.github.io/cloud-cert-renewer/ && helm install cloud-cert-renewer cloud-cert-renewer/cloud-cert-renewer

PyPI Package

• Package: cloud-cert-renewer==0.3.0-beta2
• Install: pip install cloud-cert-renewer==0.3.0-beta2
• URL: https://pypi.org/project/cloud-cert-renewer/

Source Code

• Source archive: cloud-cert-renewer-0.3.0-beta2.tar.gz
• Checksums: checksums.txt (SHA256)

Release v0.3.0-beta1

Fixed

• Alibaba Cloud SDK integration:
  • Fixed method name typo in SLB certificate update: set_load_balancer_https_listener_attribute_with_options → set_load_balancer_httpslistener_attribute_with_options
  • Resolved cryptography deprecation warnings by using not_valid_after_utc and not_valid_before_utc properties instead of deprecated not_valid_after and not_valid_before
  • Removed unnecessary timezone import from certificate renewer base class

Artifacts

Docker Image

GitHub Container Registry:

• ghcr.io/maskshell/cloud-cert-renewer:0.3.0-beta1
• ghcr.io/maskshell/cloud-cert-renewer:v0.3.0-beta1
• ghcr.io/maskshell/cloud-cert-renewer:latest

Docker Hub:

• analyser/cloud-cert-renewer:0.3.0-beta1
• analyser/cloud-cert-renewer:v0.3.0-beta1
• analyser/cloud-cert-renewer:latest

Custom Registry:

• registry.cn-hangzhou.aliyuncs.com/dianplus/cloud-cert-renewer:0.3.0-beta1

• registry.cn-hangzhou.aliyuncs.com/dianplus/cloud-cert-renewer:v0.3.0-beta1

• registry.cn-hangzhou.aliyuncs.com/dianplus/cloud-cert-renewer:latest

• Multi-architecture: Supports amd64 and arm64 platforms

• Digest consistency: All registries contain identical image content (same digest for each architecture)

Helm Chart

• Chart version: 0.3.0-beta1
• Repository: https://maskshell.github.io/cloud-cert-renewer/
• Install: >-
  helm repo add cloud-cert-renewer https://maskshell.github.io/cloud-cert-renewer/ && helm install cloud-cert-renewer cloud-cert-renewer/cloud-cert-renewer

PyPI Package

• Package: cloud-cert-renewer==0.3.0-beta1
• Install: pip install cloud-cert-renewer==0.3.0-beta1
• URL: https://pypi.org/project/cloud-cert-renewer/

Source Code

• Source archive: cloud-cert-renewer-0.3.0-beta1.tar.gz
• Checksums: checksums.txt (SHA256)

Release v0.2.9-beta2

Added

• Webhook message format configuration:
  • Added messageFormat option in webhook configuration to control payload format (e.g., generic, wechat_work)
  • Updated example values files to document message format settings for WeChat Work integration
  • Deployment now conditionally sets WEBHOOK_MESSAGE_FORMAT environment variable based on configuration

Artifacts

Docker Image

GitHub Container Registry:

• ghcr.io/maskshell/cloud-cert-renewer:0.2.9-beta2
• ghcr.io/maskshell/cloud-cert-renewer:v0.2.9-beta2
• ghcr.io/maskshell/cloud-cert-renewer:latest

Docker Hub:

• analyser/cloud-cert-renewer:0.2.9-beta2
• analyser/cloud-cert-renewer:v0.2.9-beta2
• analyser/cloud-cert-renewer:latest

Custom Registry:

• registry.cn-hangzhou.aliyuncs.com/dianplus/cloud-cert-renewer:0.2.9-beta2

• registry.cn-hangzhou.aliyuncs.com/dianplus/cloud-cert-renewer:v0.2.9-beta2

• registry.cn-hangzhou.aliyuncs.com/dianplus/cloud-cert-renewer:latest

• Multi-architecture: Supports amd64 and arm64 platforms

• Digest consistency: All registries contain identical image content (same digest for each architecture)

Helm Chart

• Chart version: 0.2.9-beta2
• Repository: https://maskshell.github.io/cloud-cert-renewer/
• Install: >-
  helm repo add cloud-cert-renewer https://maskshell.github.io/cloud-cert-renewer/ && helm install cloud-cert-renewer cloud-cert-renewer/cloud-cert-renewer

PyPI Package

• Package: cloud-cert-renewer==0.2.9-beta2
• Install: pip install cloud-cert-renewer==0.2.9-beta2
• URL: https://pypi.org/project/cloud-cert-renewer/

Source Code

• Source archive: cloud-cert-renewer-0.2.9-beta2.tar.gz
• Checksums: checksums.txt (SHA256)

Release v0.2.9-beta1

Added

• Webhook testing and diagnostics:
  • Added scripts/test-webhook.py helper script for sending test events to configured webhook endpoints
  • Enables local verification of webhook configuration and payload formatting

Improved

• Webhook delivery error handling:
  • Enhanced error handling and logging for webhook delivery failures to improve reliability and troubleshooting

Artifacts

Docker Image

GitHub Container Registry:

• ghcr.io/maskshell/cloud-cert-renewer:0.2.9-beta1
• ghcr.io/maskshell/cloud-cert-renewer:v0.2.9-beta1
• ghcr.io/maskshell/cloud-cert-renewer:latest

Docker Hub:

• analyser/cloud-cert-renewer:0.2.9-beta1
• analyser/cloud-cert-renewer:v0.2.9-beta1
• analyser/cloud-cert-renewer:latest

Custom Registry:

• registry.cn-hangzhou.aliyuncs.com/dianplus/cloud-cert-renewer:0.2.9-beta1

• registry.cn-hangzhou.aliyuncs.com/dianplus/cloud-cert-renewer:v0.2.9-beta1

• registry.cn-hangzhou.aliyuncs.com/dianplus/cloud-cert-renewer:latest

• Multi-architecture: Supports amd64 and arm64 platforms

• Digest consistency: All registries contain identical image content (same digest for each architecture)

Helm Chart

• Chart version: 0.2.9-beta1
• Repository: https://maskshell.github.io/cloud-cert-renewer/
• Install: >-
  helm repo add cloud-cert-renewer https://maskshell.github.io/cloud-cert-renewer/ && helm install cloud-cert-renewer cloud-cert-renewer/cloud-cert-renewer

PyPI Package

• Package: cloud-cert-renewer==0.2.9-beta1
• Install: pip install cloud-cert-renewer==0.2.9-beta1
• URL: https://pypi.org/project/cloud-cert-renewer/

Source Code

• Source archive: cloud-cert-renewer-0.2.9-beta1.tar.gz
• Checksums: checksums.txt (SHA256)

Release v0.2.8-beta3

Added

• CI/CD release workflow enhancements:
  • Added source code archive generation for GitHub releases (.tar.gz format)
  • Added SHA256 checksums file generation for all release artifacts (source archive and Helm chart)
  • Added chart file filtering to ensure only the current version's chart is included in releases
  • Improved release artifact organization with explicit file paths

Improved

• CI/CD release workflow reliability:
  • Added chart directory cleanup step before downloading artifacts
  • Enhanced chart file filtering with fallback logic for better error handling
  • Release artifacts now include source code archive and checksums for verification

Artifacts

Docker Image

GitHub Container Registry:

• ghcr.io/maskshell/cloud-cert-renewer:0.2.8-beta3
• ghcr.io/maskshell/cloud-cert-renewer:v0.2.8-beta3
• ghcr.io/maskshell/cloud-cert-renewer:latest

Docker Hub:

• analyser/cloud-cert-renewer:0.2.8-beta3
• analyser/cloud-cert-renewer:v0.2.8-beta3
• analyser/cloud-cert-renewer:latest

Custom Registry:

• registry.cn-hangzhou.aliyuncs.com/dianplus/cloud-cert-renewer:0.2.8-beta3

• registry.cn-hangzhou.aliyuncs.com/dianplus/cloud-cert-renewer:v0.2.8-beta3

• registry.cn-hangzhou.aliyuncs.com/dianplus/cloud-cert-renewer:latest

• Multi-architecture: Supports amd64 and arm64 platforms

• Digest consistency: All registries contain identical image content (same digest for each architecture)

Helm Chart

• Chart version: 0.2.8-beta3
• Repository: https://maskshell.github.io/cloud-cert-renewer/
• Install: >-
  helm repo add cloud-cert-renewer https://maskshell.github.io/cloud-cert-renewer/ && helm install cloud-cert-renewer cloud-cert-renewer/cloud-cert-renewer

PyPI Package

• Package: cloud-cert-renewer==0.2.8-beta3
• Install: pip install cloud-cert-renewer==0.2.8-beta3
• URL: https://pypi.org/project/cloud-cert-renewer/

Source Code

• Source archive: cloud-cert-renewer-0.2.8-beta3.tar.gz
• Checksums: checksums.txt (SHA256)

Release v0.2.8-beta2

Improved

• Webhook event handling:
  • Added support for 'all' keyword in enabled_events to enable all event types at once
  • Added INFO-level logging when webhook is triggered, including event type and event ID for better observability

Artifacts

Docker Image

GitHub Container Registry:

• ghcr.io/maskshell/cloud-cert-renewer:0.2.8-beta2
• ghcr.io/maskshell/cloud-cert-renewer:v0.2.8-beta2
• ghcr.io/maskshell/cloud-cert-renewer:latest

Docker Hub:

• analyser/cloud-cert-renewer:0.2.8-beta2
• analyser/cloud-cert-renewer:v0.2.8-beta2
• analyser/cloud-cert-renewer:latest

Custom Registry:

• registry.cn-hangzhou.aliyuncs.com/dianplus/cloud-cert-renewer:0.2.8-beta2

• registry.cn-hangzhou.aliyuncs.com/dianplus/cloud-cert-renewer:v0.2.8-beta2

• registry.cn-hangzhou.aliyuncs.com/dianplus/cloud-cert-renewer:latest

• Multi-architecture: Supports amd64 and arm64 platforms

• Digest consistency: All registries contain identical image content (same digest for each architecture)

Helm Chart

• Chart version: 0.2.8-beta2
• Repository: https://maskshell.github.io/cloud-cert-renewer/
• Install: >-
  helm repo add cloud-cert-renewer https://maskshell.github.io/cloud-cert-renewer/ && helm install cloud-cert-renewer cloud-cert-renewer/cloud-cert-renewer

PyPI Package

• Package: cloud-cert-renewer==0.2.8-beta2
• Install: pip install cloud-cert-renewer==0.2.8-beta2
• URL: https://pypi.org/project/cloud-cert-renewer/

Release v0.2.8-beta1

Added

• Webhook builders and formatters with WeChat Work support:
  • Added webhook builder pattern with WeChat Work implementation for flexible webhook client creation
  • Added webhook formatter pattern with base, generic, and WeChat Work formatters for customizable message formatting
  • Updated configuration loader to support webhook builder and formatter selection via environment variables
  • Added comprehensive tests for builders and formatters (100% coverage)
  • Backward compatible with existing webhook configuration
• Webhook diagnostic and troubleshooting tools:
  • Added scripts/check-webhook-secret.sh script to verify webhook secret existence and configuration
  • Added scripts/diagnose-webhook.sh comprehensive diagnostic script for webhook configuration issues
  • Added detailed webhook troubleshooting section to TROUBLESHOOTING.md with step-by-step solutions

Improved

• Webhook configuration logging:
  • Added logging when webhook URL is found or not found during configuration loading
  • Added logging for webhook service initialization status with URL and enabled events information
  • Improved debug logging for webhook configuration troubleshooting

Artifacts

Docker Image

GitHub Container Registry:

• ghcr.io/maskshell/cloud-cert-renewer:0.2.8-beta1
• ghcr.io/maskshell/cloud-cert-renewer:v0.2.8-beta1
• ghcr.io/maskshell/cloud-cert-renewer:latest

Docker Hub:

• analyser/cloud-cert-renewer:0.2.8-beta1
• analyser/cloud-cert-renewer:v0.2.8-beta1
• analyser/cloud-cert-renewer:latest

Custom Registry:

• registry.cn-hangzhou.aliyuncs.com/dianplus/cloud-cert-renewer:0.2.8-beta1

• registry.cn-hangzhou.aliyuncs.com/dianplus/cloud-cert-renewer:v0.2.8-beta1

• registry.cn-hangzhou.aliyuncs.com/dianplus/cloud-cert-renewer:latest

• Multi-architecture: Supports amd64 and arm64 platforms

• Digest consistency: All registries contain identical image content (same digest for each architecture)

Helm Chart

• Chart version: 0.2.8-beta1
• Repository: https://maskshell.github.io/cloud-cert-renewer/
• Install: >-
  helm repo add cloud-cert-renewer https://maskshell.github.io/cloud-cert-renewer/ && helm install cloud-cert-renewer cloud-cert-renewer/cloud-cert-renewer

PyPI Package

• Package: cloud-cert-renewer==0.2.8-beta1
• Install: pip install cloud-cert-renewer==0.2.8-beta1
• URL: https://pypi.org/project/cloud-cert-renewer/

Release v0.2.7-beta1

Added

• Local GitHub Actions workflow testing support:
  • Added act configuration file (.actrc) for local workflow testing
  • Added .secrets.example template for local testing secrets
  • Added scripts/test-workflow.sh helper script for testing workflows locally
  • Added scripts/test-workflow-output.sh test script for verifying GitHub Actions output handling
  • Added documentation section in DEVELOPMENT.md for local workflow testing with act
  • Added .secrets to .gitignore to prevent committing local testing secrets

Fixed

• CI/CD workflow improvements:
  • Improved heredoc delimiter handling in release workflow by using unique delimiter (CUSTOM_SECTION_EOF) to avoid conflicts with content

Artifacts

Docker Image

GitHub Container Registry:

• ghcr.io/maskshell/cloud-cert-renewer:0.2.7-beta1
• ghcr.io/maskshell/cloud-cert-renewer:v0.2.7-beta1
• ghcr.io/maskshell/cloud-cert-renewer:latest

Docker Hub:

• analyser/cloud-cert-renewer:0.2.7-beta1
• analyser/cloud-cert-renewer:v0.2.7-beta1
• analyser/cloud-cert-renewer:latest

Custom Registry:

• registry.cn-hangzhou.aliyuncs.com/dianplus/cloud-cert-renewer:0.2.7-beta1

• registry.cn-hangzhou.aliyuncs.com/dianplus/cloud-cert-renewer:v0.2.7-beta1

• registry.cn-hangzhou.aliyuncs.com/dianplus/cloud-cert-renewer:latest

• Multi-architecture: Supports amd64 and arm64 platforms

• Digest consistency: All registries contain identical image content (same digest for each architecture)

Helm Chart

• Chart version: 0.2.7-beta1
• Repository: https://maskshell.github.io/cloud-cert-renewer/
• Install: >-
  helm repo add cloud-cert-renewer https://maskshell.github.io/cloud-cert-renewer/ && helm install cloud-cert-renewer cloud-cert-renewer/cloud-cert-renewer

PyPI Package

• Package: cloud-cert-renewer==0.2.7-beta1
• Install: pip install cloud-cert-renewer==0.2.7-beta1
• URL: https://pypi.org/project/cloud-cert-renewer/

Release v0.2.6-beta3

Fixed

• CI/CD workflow improvements:
  • Fixed Docker Hub description update "Forbidden" error by making the step non-blocking (continue-on-error: true)
  • Updated documentation to clarify Docker Hub token requires Read, Write & Delete permissions (not just Read & Write)
  • Added workflow comments explaining token permission requirements

Artifacts

Docker Image

GitHub Container Registry:

• ghcr.io/maskshell/cloud-cert-renewer:0.2.6-beta3
• ghcr.io/maskshell/cloud-cert-renewer:v0.2.6-beta3
• ghcr.io/maskshell/cloud-cert-renewer:latest

Docker Hub:

• analyser/cloud-cert-renewer:0.2.6-beta3

• analyser/cloud-cert-renewer:v0.2.6-beta3

• analyser/cloud-cert-renewer:latest

• Multi-architecture: Supports amd64 and arm64 platforms

• Digest consistency: Both registries contain identical image content (same digest for each architecture)

Helm Chart

• Chart version: 0.2.6-beta3
• Repository: https://maskshell.github.io/cloud-cert-renewer/
• Install: >-
  helm repo add cloud-cert-renewer https://maskshell.github.io/cloud-cert-renewer/ && helm install cloud-cert-renewer cloud-cert-renewer/cloud-cert-renewer

PyPI Package

• Package: cloud-cert-renewer==0.2.6-beta3
• Install: pip install cloud-cert-renewer==0.2.6-beta3
• URL: https://pypi.org/project/cloud-cert-renewer/