Skip to content

Merge upstream shibayan/keyvault-acmebot (NET10, ARI, project restructure)#6

Merged
JakeMF merged 38 commits into
masterfrom
feature/upstream-merge-2026-02
Feb 26, 2026
Merged

Merge upstream shibayan/keyvault-acmebot (NET10, ARI, project restructure)#6
JakeMF merged 38 commits into
masterfrom
feature/upstream-merge-2026-02

Conversation

@JakeMF
Copy link
Copy Markdown

@JakeMF JakeMF commented Feb 26, 2026

Summary

  • Merges latest upstream changes from shibayan/keyvault-acmebot into our fork
  • Bumps target framework to .NET 10
  • Adds ACME Renewal Information (ARI) support for smarter renewal scheduling
  • Major project restructure: KeyVault.Acmebot/src/Acmebot/, deploy templates moved to deploy/
  • Adds Akamai Edge DNS provider
  • Removes deprecated MitigateChainOrder property

Custom features preserved

  • Certificate Tags feature (SharedActivity.FinalizeOrder)
  • FUNCTIONS_WORKER_RUNTIME = dotnet-isolated
  • WEBSITE_RUN_FROM_PACKAGE pointing to Azure Gov Cloud blob storage
  • Bicep version updated to 0.40.2 to match local tooling

Testing

  • New cert creation verified working in test environment
  • Renewal error observed was confirmed as a pre-existing stale test cert (unrelated to this merge)
  • dotnet build passes (0 errors, warnings are from upstream code)
  • bicep build passes (BCP187 warning on onedeploy resource is a type library inaccuracy, not a functional issue)

Upstream commits included

shibayan and others added 30 commits October 16, 2025 16:01
Bumps [ACMESharpCore](https://github.com/shibayan/ACMESharpCore) from `aa40536` to `f05287c`.
- [Commits](shibayan/ACMESharpCore@aa40536...f05287c)

---
updated-dependencies:
- dependency-name: ACMESharpCore
  dependency-version: f05287c7483848fc224a66ec4942becfe6db0fe2
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Initial implementation of ACME Renewal Information

* Fixed copilot review

* Fixed lint error
* Fixed CodeQL autobuild config

* Set build mode to autobuild for CodeQL initialization

* Update CodeQL build mode to conditionally use autobuild for C# language

* Remove debug code
…n permissions (polymind-inc#900)

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
* Migrate to .NET 10

* Use preview version .NET SDK

* Update .NET SDK version in Bicep

* Autobuild C# in CodeQL

* Streamlined csproj properties

* Remove unused using

* Update nuget packages

* Update Function SDKs

* Upgrade to .NET 10 GA

* Remove preview flag

* Update template

* Revert deploy template
…-inc#920)

Bumps the dependencies group with 1 update: [actions/checkout](https://github.com/actions/checkout).


Updates `actions/checkout` from 5 to 6
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v5...v6)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Remove ACMESharpCore submodule

* Rename to Acmebot

* Adjust namespace to Acmebot

* Fixed errors custom dns sample

* Update bicep for flex consumption
…-inc#934)

* Add CodeQL configuration file and update workflow to use it

* Refactor CodeQL queries for clarity by separating them into individual lines
* Remove Buypass GO SSL configuration

* Rebuild from bicep
Bumps the dependencies group with 2 updates: [actions/setup-dotnet](https://github.com/actions/setup-dotnet) and [github/codeql-action](https://github.com/github/codeql-action).


Updates `actions/setup-dotnet` from 5.0.1 to 5.1.0
- [Release notes](https://github.com/actions/setup-dotnet/releases)
- [Commits](actions/setup-dotnet@2016bd2...baa11fb)

Updates `github/codeql-action` from 4.31.9 to 4.31.10
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@5d4e8d1...cdefb33)

---
updated-dependencies:
- dependency-name: actions/setup-dotnet
  dependency-version: 5.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: github/codeql-action
  dependency-version: 4.31.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…olymind-inc#940)

Revert "Add CodeQL configuration file and update workflow to use it (polymind-inc#934)"

This reverts commit 93ff822.
Removed specific queries from CodeQL initialization.
* Support Certificate profile selection

* Update src/Acmebot/Functions/StaticPage.cs

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

---------

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
joostdebruijn and others added 8 commits January 31, 2026 12:57
* feat: add akamai dns provider

* fix: copilot review suggestions

* fix: formatting

* fix: rename to AkamaiEdgeDns
* Support to Flex Consumption deployment

* Update generatedToken to use resourceGroup.id for consistency
…d-inc#950)

* Update README for clarity and add commercial support section

* Apply suggestions from code review

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

---------

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Comprehensive implementation plan for disaster recovery KeyVault replication feature.
Includes architecture, file modifications, data flow, testing checklist, and resolved questions.

Co-Authored-By: Jake Farley with Claude Code
Upstream changes incorporated:
- Bump to .NET 10 target framework
- Rename GetExpiringCertificates -> GetRenewalCertificates
- Add ACME Renewal Information (ARI) support
- Remove MitigateChainOrder property
- Add Akamai Edge DNS provider
- Add X509Certificate2Extensions.GetCertificateId() for ARI
- Restructure project: KeyVault.Acmebot/ -> src/Acmebot/
- Move deploy templates to deploy/ directory (v5)
- Add createUiDefinition.json
- CodeQL and workflow permission fixes

Custom features preserved:
- Certificate Tags feature in SharedActivity.FinalizeOrder
- FUNCTIONS_WORKER_RUNTIME = dotnet-isolated
- WEBSITE_RUN_FROM_PACKAGE = Azure Gov Cloud blob storage URL
- Bicep version pinned to 0.40.2 to match local tooling

Co-Authored-By: Jake Farley with Claude Code
@JakeMF JakeMF merged commit f195a5f into master Feb 26, 2026
1 check passed
@JakeMF JakeMF deleted the feature/upstream-merge-2026-02 branch February 26, 2026 19:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants