Enhancements

• #1917 - It's now possible to globally configure your desired Powershell runtime, enabling you to use Powershell Core. The setting is under ScriptSettings.PowershellExecutablePath and defaults to the old powershell.exe, but you could for example use "C:\Program Files\PowerShell\7\pwsh.exe" instead. Note that this applies to all scripts, including previously configured ones, so make sure to test all of them. Requested by @MarcoEnxuto.
• #1896 - The --setuptaskscheduler switch is now also valid for use during the creation of a new renewal, forcing the recreation of an existing scheduled task. Requested by @remyblok.
• During DNS validation of wildcard domains, show the wildcard in the logs. This doesn't impact functionality, but just makes it more clear whether you're looking at the validation for *.example.com or example.com in the same renewal.
• #1886 - Add a new setting called RenewalMinimumValidDays that works in conjunction with the RenewalDays setting. This ensures that certificates are renewed when they are about to expire, even if they are not yet due according to the RenewalDays setting. It's main purpose is to not get caught off-guard when the servers issues certificates with a lifetime shorter than the RenewalDays setting. Default is 7 days. Based on feedback from @CvW.
• Cache logic was refactored, so that it now prevents the client from creating orders and running validation unless it's determined to be actually neccessary. This improves performance and helps to prevent people from running into rate limits.

Bug fixes

• #1872 - The Cloudflare validation plugin would fail if the hosted DNS zone is not the root zone, reported by @cartierinfo.
• #1843 - The logic to pick between alternative certificate chains was broken for chains longer than two certificates, which happens to be relevant for what Let's Encrypt are doing with their ISGR X1 chain. This will allow the PreferredIssuer setting to work properly for that scenario.
• #1887 - Use TTL zero for the GoDaddy plugin to prevent cached results from being served. Thanks @vdenisov for the report.
• Old certificates were not removed from the store if host names were added or removed during the renewal.
• The program could crash on servers that contained registry keys indicating the presence of IIS, yet not actually having IIS installed.