New

• Added support for a new type of plugin to send notifications to custom channels. For years win-acme has supported sending email notifications, but many organisations prefer different channels like Slack, Discourse or even Teams. If you're familiar with C#, you can implement the INotificationTarget interface with just a handful of functions to send notifications however you want. If you're willing to show and share your work, contributions are obviously welcome!
• Example script for SQL Server contributed by @zivillian (add ImportSQL.ps1 #2458)

Enhancements

• Force black background for TUI rendering, to accomodate people with custom console themes with light backgrounds (Color text menus fail if background is white #2451, requested by @prensing)
• Log all HTTP requests that do not return a success code as warnings to make potential API/connection problems easier to spot (More graceful warning on unauthorized API request (TransIP or generic?) #2505, based on feedback by @djoris)
• Software name and version now displayed in console title.
• Add --acl-read parameter for the CertificateStore plugin, granting local principals read access to the private key, complementing the pre-existing --acl-fullcontrol parameter.
• Add a new setting Validation.ParallelBatchSize that can be used to limit the number of simultaneous validations happening. In extreme cases, unlimited parallelism can lead to problems like overrunning the maximum size of a DNS response. Default for existing installations is 100 and for new installations 20.
• Use DER instead of BER encoding for internal certificate processing in hopes of avoiding "Bad Data" errors reported by some users (System.Security.Cryptography.CryptographicException: Bad Data #2493)
• Add support for certificates without common name which have been supported by Let's Encrypt since November. Also added addional validation to prevent attempts to order certificates with common names longer than 64 characters.
• @christaylorcodes added a retry mechanism to the ImportRSDFull.ps1 example, thanks for helping!
• Update various third-party dependencies.

Bugfixes

• Crash when sorting on due date in the renewal manager (Sorting failed (option 4 descending) #2449, thanks @nrcionline!)
• Crash when the settings.json file cannot be (fully) parsed.
• Superfluous prevalidation checks could be done when using multithreaded validation (Validation multiple domains with RFC2136 #2485, discovered by @JensSpanier)
• Renewal information from services outside Let's Encrypt could not be retrieved due to missing / in url (Forward slash is missing in renewal-info path #2498, reported by @grindsa)
• TransIP DNS validation plugin would not handle errors during initial authentication properly (More graceful warning on unauthorized API request (TransIP or generic?) #2505, found by @djoris)