Release 0.16.0-rc1. (#1360)

Breaking changes

* Reverted the use of Roto API for the ROA analysis to downloading
  RISwhois route origin data and optimized the way this data is stored in
  memory.

  Removed the `bgp_api_enabled`, `bgp_api_uri`, and `bgp_api_cache_duration`
  fields and added `bgp_riswhois_enabled`, `bgp_riswhois_v4_uri`,
  `bgp_riswhois_v6_uri`, and `bgp_riswhois_refresh_duration` fields, all of
  which are optional. ([#1329]
* Krill will now refuse to start if the config file contains unknown
  options. ([#1322])

New

* A local `krillc` can now talk to the server via a Unix socket. In this
  case it will use the name of the local user for authentication purposes.
  By default, only the `root` user is allowed with the `admin` role, but
  both allowed users and what role they are mapped to can be configure.
  ([#1322])
* Added a `krillc parents refresh` command to allow refreshing the parents
  of a single CA rather than having to do a bulk refresh which can take a
  very long time if there are many CAs. ([#1353])

Bug fixes

* Fixed an issue  with the new BGP API code which false returns missing
  announcement info. ([#1326])
* Fixed an issue where deleting children or parents of a CA fails before a
  successful communication with the remote CA. ([#1331])
* Fixed an error message when trying to delete a CA which does not
  have any parents, children, or repositories despite actually removing
  the CA. ([#1331])
* Start sweeping the authenticator cache upon daemon startup. This merely
  reduces memory consumption of the cache. Expired authentication tokens
  were not used either way. ([#1337])
* Fixed a bug introduced in 0.15.0 where CAs do to not clear fulfilled
  certification requests causing them to re-request a certificate every
  time they contact their parent. ([#1345])
* Do not re-try syncing with a parent of a CA when that parent isn’t
  known. ([#1349])
* Fixed un-suspending child CAs: rather then re-publishing the previously
  revoked certificate, a new certificate is now issued. ([#1341])

Other changes

* The default config files don’t serve as config documentation any more.
  Rather, there is now a `krill.conf.5` manual page. This manual page is
  also included in the Krill manual. ([#1322])
* The cryptography library used by the rustls TLS implementation has been
  switched to aws-lc-rs. This has some consequences for packaging:
* Dropped packaging for Ubuntu 20.04 (Focal Fossa). ([#1359])

Cargo.lock

@@ -1505,7 +1505,7 @@ dependencies = [
 
 [[package]]
 name = "krill"
-version = "0.15.1-dev"
+version = "0.16.0-rc1"
 dependencies = [
  "arc-swap",
  "backoff",

Cargo.toml

@@ -1,7 +1,7 @@
 [package]
 # Note: some of these values are also used when building Debian packages below.
 name = "krill"
-version = "0.15.1-dev"
+version = "0.16.0-rc1"
 edition = "2024"
 rust-version = "1.88"
 authors = ["NLnet Labs <rpki-team@nlnetlabs.nl>"]