Merge branch 'main' into rm-sa-methods

Author: aarongable

.github/workflows/boulder-ci.yml

@@ -36,7 +36,7 @@ jobs:
       matrix:
         # Add additional docker image tags here and all tests will be run with the additional image.
         BOULDER_TOOLS_TAG:
-          - go1.25.0_2025-08-15
+          - go1.25.2_2025-10-07
         # Tests command definitions. Use the entire "docker compose" command you want to run.
         tests:
           # Run ./test.sh --help for a description of each of the flags.
@@ -71,7 +71,7 @@ jobs:
       - name: Docker Login
         # You may pin to the exact commit or the version.
         # uses: docker/login-action@f3364599c6aa293cdc2b8391b1b56d0c30e45c8a
-        uses: docker/login-action@v3.5.0
+        uses: docker/login-action@v3.6.0
         with:
           # Username used to log against the Docker registry
           username: ${{ secrets.DOCKER_USERNAME}}
@@ -122,7 +122,7 @@ jobs:
       # When set to true, GitHub cancels all in-progress jobs if any matrix job fails. Default: true
       fail-fast: false
       matrix:
-        go-version: [ '1.25.0' ]
+        go-version: [ '1.25.2' ]
 
     steps:
       # Checks out your repository under $GITHUB_WORKSPACE, so your job can access it

.github/workflows/release.yml

@@ -15,7 +15,7 @@ jobs:
       fail-fast: false
       matrix:
         GO_VERSION:
-          - "1.25.0"
+          - "1.25.2"
     runs-on: ubuntu-24.04
     permissions:
       contents: write

.github/workflows/try-release.yml

@@ -19,7 +19,7 @@ jobs:
       fail-fast: false
       matrix:
         GO_VERSION:
-          - "1.25.0"
+          - "1.25.2"
     runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@v4

ca/ca.go

@@ -295,7 +295,7 @@ func (ca *certificateAuthorityImpl) issuePrecertificate(ctx context.Context, cer
 }
 
 func (ca *certificateAuthorityImpl) IssueCertificate(ctx context.Context, issueReq *capb.IssueCertificateRequest) (*capb.IssueCertificateResponse, error) {
-	if core.IsAnyNilOrZero(issueReq, issueReq.Csr, issueReq.RegistrationID, issueReq.OrderID) {
+	if core.IsAnyNilOrZero(issueReq, issueReq.RegistrationID, issueReq.OrderID, issueReq.CertProfileName, issueReq.Csr) {
 		return nil, berrors.InternalServerError("Incomplete issue certificate request")
 	}