Bump certbot from 4.0.0 to 5.3.0 in /server

[dependabot]

Bumps certbot from 4.0.0 to 5.3.0.

Release notes

Sourced from certbot's releases.

Certbot 5.3.0

Added

• A new command line flag, --ip-address, has been added. This requests certificates with IP address SANs when using the standalone or manual plugin. Note that for Let's Encrypt's implementation of IP address certificates, you'll also need to pass --preferred-profile shortlived. (#10465)

Changed

• Deploy directory hooks are now also run when using certbot certonly or certbot run to get a new cert. This change was made for pre and post directory hooks in our 3.2.0 release so this change unifies Certbot's behavior here. (#9978)
• A few largely unused functions/types have been deprecated in our effort to remove our pyOpenSSL dependency: * Deprecated: certbot.crypto_util.get_sans_from_cert * Deprecated: certbot.crypto_util.get_names_from_cert * Deprecated: certbot.crypto_util.get_names_from_req * Deprecated: certbot.crypto_util.import_csr_file (and replaced by certbot.crypto_util.read_csr_file) * Deprecated: acme.crypto_util.Format (#10433)
• achallenges.KeyAuthorizationAnnotatedChallenge, achallenges.DNS, and achallenges.Other have a new field identifier, of type acme.messages.Identifier. This should be used in place of the domain field, which is now deprecated both as an attribute and during object creation. (#10491)
• Authenticator.get_chall_pref's argument has been renamed from domain to identifier, and can now receive string-formatted IP addresses in addition to domain names. (#10495)
• san.DNSName now calls util.enforce_domain_sanity to reduce code duplication (#10519)

Fixed

• Removed the outdated email address from our Python packages' metadata. (#10533)
• The HTTP01.uri method will now properly enclose IPv6 addresses in square brackets. (#10548)

Certbot 5.2.2

Fixed

• Fixed a regression that caused certbot to crash if multiple --webroot-path values were set on the command line. (#10509)

Certbot 5.2.1

Added

• Support for Python 3.14 was added. (#10477)

Changed

• While nothing significant should have changed from the user's perspective, we've been doing a lot of internal refactoring in preparation for soon adding support for IP address certificates to Certbot. (#10468, #10478)

Fixed

• Removed vhost_combined and vhost_common log formats from included Apache configuration file. (#9769)
• Due to a mistake on our end playing with GitHub's new immutable releases

... (truncated)

Commits

• 54a3078 Release 5.3.0
• 6b8bb6c Update changelog for 5.3.0 release
• e7c539d Deprecate functions using acme.crypto_util.Formatto be able to soon remove ...
• 5cc2f6b List certbot-dns-czechia under 3rd party plugins (#10557)
• b362109 Fix certbot tests after updating pytest to 9.0.2 (#10545)
• 88af129 Granular permissions (#9922)
• 991ecd7 update dependencies (#10552)
• 1b7c11e manual plugin: add IP address support (#10544)
• b00e3de Completely aligns deploy and renew hook behaviors, fully fixing #9978 (#10534)
• bd7b64f Fix HTTP01.uri for IPv6 addresses (#10548)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)