From cc2ff5e80a465b0325e317aeedb3437165fa2e1b Mon Sep 17 00:00:00 2001
From: Guilhem Moulin <guilhem@fripost.org>
Date: Mon, 20 Jul 2026 19:52:28 +0200
Subject: Prepare new release v0.8.4.

---
 Changelog      | 12 ++++++++++++
 client         |  2 +-
 lacme          |  2 +-
 lacme-accountd |  2 +-
 4 files changed, 15 insertions(+), 3 deletions(-)

diff --git a/Changelog b/Changelog
index df987c6..358c53a 100644
--- a/Changelog
+++ b/Changelog
@@ -1,3 +1,15 @@
+lacme (0.8.4) upstream;
+
+  + accountd: Use PKCS#1 v1.5 signatures, as it's what JWT RS256 uses.
+    This change is needed for compatibility with Crypt::OpenSSL::RSA 0.38
+    and later.
+  + Fix 'drop-privileges' test.
+  + Update test suite to match staging server behavior.
+  + Drop OCSP must-staple extension test which is no longer available on
+    Let's Encrypt's ACME server.
+
+ -- Guilhem Moulin <guilhem@fripost.org>  Mon, 20 Jul 2026 19:52:28 +0200
+
 lacme (0.8.3) upstream;
 
   + Fix post-issuance validation logic.  We avoid pinning the
diff --git a/client b/client
index 2a5ee3c..be9a7f5 100755
--- a/client
+++ b/client
@@ -43,7 +43,7 @@ use warnings;
 # instance own by another user and created with umask 0177) is not a
 # problem since SOCKET_FD can be bound as root prior to the execve(2).
 
-our $VERSION = '0.8.3';
+our $VERSION = '0.8.4';
 my $PROTOCOL_VERSION = 1;
 my $NAME = 'lacme-client';
 
diff --git a/lacme b/lacme
index 37d3a51..c72628c 100755
--- a/lacme
+++ b/lacme
@@ -22,7 +22,7 @@ use v5.14.2;
 use strict;
 use warnings;
 
-our $VERSION = '0.8.3';
+our $VERSION = '0.8.4';
 my $NAME = 'lacme';
 
 use Errno 'EINTR';
diff --git a/lacme-accountd b/lacme-accountd
index a0cc15f..05fa227 100755
--- a/lacme-accountd
+++ b/lacme-accountd
@@ -23,7 +23,7 @@ use v5.14.2;
 use strict;
 use warnings;
 
-our $VERSION = '0.8.3';
+our $VERSION = '0.8.4';
 my $PROTOCOL_VERSION = 1;
 my $NAME = 'lacme-accountd';
 
-- 
cgit v1.2.3