Commit e329abb

convex-renovate-runner[bot]

authored and

Convex, Inc.

committed

Update Rust crate hickory-resolver to 0.25.0 (#36883)

This PR contains the following updates: | Package | Type | Update | Change | Pending | |---|---|---|---|---| | [hickory-resolver](https://hickory-dns.org/) ([source](https://redirect.github.com/hickory-dns/hickory-dns)) | workspace.dependencies | minor | `0.24.2` -> `0.25.0` | `0.25.2` | --- ### Release Notes <details> <summary>hickory-dns/hickory-dns (hickory-resolver)</summary> ### [`v0.25.1`](https://redirect.github.com/hickory-dns/hickory-dns/releases/tag/v0.25.1): 0.25.1 [Compare Source](https://redirect.github.com/hickory-dns/hickory-dns/compare/v0.25.0...v0.25.1) This is a small patch release to address errors that prevented publication of version 0.25.0 of some crates. #### What's Changed - Make sure test-support is a dev-dependency by [@djc](https://redirect.github.com/djc) in [https://github.com/hickory-dns/hickory-dns/pull/2871](https://redirect.github.com/hickory-dns/hickory-dns/pull/2871) **Full Changelog**: https://github.com/hickory-dns/hickory-dns/compare/v0.25.0...v0.25.1 ### [`v0.25.0`](https://redirect.github.com/hickory-dns/hickory-dns/releases/tag/v0.25.0): 0.25.0 [Compare Source](https://redirect.github.com/hickory-dns/hickory-dns/compare/v0.24.4...v0.25.0) 0.25.0 represents a large release for the Hickory DNS project. Over 14 months since 0.24.0, we've added two new maintainers, divergentdave and marcus0x62, and have addressed many limitations. A team from Ferrous Systems [shored up our support for DNSSEC](https://ferrous-systems.com/blog/hickory-dns-client/), and we addressed a number of findings from [our first security audit](https://ostif.org/hickorydns-audit-complete/). #### Breaking changes This is not an exhaustive list of changes, but here are some of the most impactful breaking changes in this release: - Configuration for the Hickory DNS server crate has been reworked substantially to be more robust and secure. Most of the code related to the server binary has been moved out of the hickory-server library and into the hickory-dns binary crate. - Support for TLS using native-tls or OpenSSL has been removed. We now only provide first-party support for rustls (0.23, for DNS over TLS, HTTP/2, QUIC and HTTP/3). We support *ring* or aws-lc-rs for cryptographic operations both for DNSSEC and TLS. The `dns-over-rustls`,`dns-over-native-tls`, `dns-over-openssl`, `dns-over-https-rustls`, `dns-over-https`, `dns-over-quic` and `dns-over-h3` features have been removed in favor of a set of `{tls,https,quic,h3}-{aws-lc-rs,ring}` features across our library crates. - The synchronous API in the resolver and client crates, which previously provided a thin partial wrapper over the asynchronous API, has been removed. Downstream users will have to migrate to the asynchronous API. - Support for the async-std runtime has been removed following the deprecation of the async-std crate by upstream (see their README). The async-std-resolver crate will no longer be updated. - The DNSSEC API was reworked to extend coverage to the recursor, add support for NSEC3, and make the API more ergonomic and harder to misuse. - Moved the `RuntimeProvider` API into the proto crate and use it consistently across the project. - `Name` values are now rooted by default in many places, and more consistently maintain their `fqdn` status. - Error types are now exposed directly in the crate roots. - Top-level TLS configuration in the resolver crate has moved to the `ResolverOpts` type. Specific `NameServerConfig`s should implicitly set up the ALPN protocol appropriate for the DNS protocol. - The `ResolverOptions` fields `authentic_data` and `shuffle_dns_servers` were removed. The former field didn't do anything; and should be covered by new DNSSEC API. `shuffle_dns_servers` functionality has been subsumed into the `server_ordering_strategy` field. - The use of rustls-native-certs via the `native-certs` feature was replaced with rustls-platform-verifier. - The `tokio-runtime` feature was renamed to `tokio`. - The `serde-config` feature was renamed to `serde`. - Serializations (and what the new release can deserialize) has changed; data serialized by 0.24 may not deserialize correctly on 0.25, and vice versa. Please don't hesitate to file an [issue](https://redirect.github.com/hickory-dns/hickory-dns/issues) or ask on our [Discord](https://discord.gg/89nxE4n) server if you have issues upgrading. #### Detailed changes since alpha.5 - update logo to better for Github by [@bluejekyll](https://redirect.github.com/bluejekyll) in [https://github.com/hickory-dns/hickory-dns/pull/2063](https://redirect.github.com/hickory-dns/hickory-dns/pull/2063) - add blog post to release notes for Hickory by [@bluejekyll](https://redirect.github.com/bluejekyll) in [https://github.com/hickory-dns/hickory-dns/pull/2064](https://redirect.github.com/hickory-dns/hickory-dns/pull/2064) - update h3 and h3-quinn by [@zh-jq](https://redirect.github.com/zh-jq) in [https://github.com/hickory-dns/hickory-dns/pull/2077](https://redirect.github.com/hickory-dns/hickory-dns/pull/2077) - update to use ring 0.17 by [@zh-jq](https://redirect.github.com/zh-jq) in [https://github.com/hickory-dns/hickory-dns/pull/2076](https://redirect.github.com/hickory-dns/hickory-dns/pull/2076) - Bump rustix from 0.37.23 to 0.37.26 by [@dependabot](https://redirect.github.com/dependabot) in [https://github.com/hickory-dns/hickory-dns/pull/2078](https://redirect.github.com/hickory-dns/hickory-dns/pull/2078) - Marcbrevoort cyberhive patch 1 by [@bluejekyll](https://redirect.github.com/bluejekyll) in [https://github.com/hickory-dns/hickory-dns/pull/2088](https://redirect.github.com/hickory-dns/hickory-dns/pull/2088) - Fix initial vec capacity in `NameServerConfigGroup::from_ips_clear` by [@silverlyra](https://redirect.github.com/silverlyra) in [https://github.com/hickory-dns/hickory-dns/pull/2092](https://redirect.github.com/hickory-dns/hickory-dns/pull/2092) - Add getters for resolver config and options by [@hoxxep](https://redirect.github.com/hoxxep) in [https://github.com/hickory-dns/hickory-dns/pull/2093](https://redirect.github.com/hickory-dns/hickory-dns/pull/2093) - Remove generic Error from DnsHandle by [@bluejekyll](https://redirect.github.com/bluejekyll) in [https://github.com/hickory-dns/hickory-dns/pull/2094](https://redirect.github.com/hickory-dns/hickory-dns/pull/2094) - update test certs for 2023 by [@bluejekyll](https://redirect.github.com/bluejekyll) in [https://github.com/hickory-dns/hickory-dns/pull/2100](https://redirect.github.com/hickory-dns/hickory-dns/pull/2100) - Support getting and setting the EDNS Z flags by [@mattias-p](https://redirect.github.com/mattias-p) in [https://github.com/hickory-dns/hickory-dns/pull/2111](https://redirect.github.com/hickory-dns/hickory-dns/pull/2111) - get(0) to first() and zerocopy package updates to fix clippy and cargo audit errors. by [@marcus0x62](https://redirect.github.com/marcus0x62) in [https://github.com/hickory-dns/hickory-dns/pull/2121](https://redirect.github.com/hickory-dns/hickory-dns/pull/2121) - Increase source port entropy in UDP client by [@marcus0x62](https://redirect.github.com/marcus0x62) in [https://github.com/hickory-dns/hickory-dns/pull/2116](https://redirect.github.com/hickory-dns/hickory-dns/pull/2116) - Validate response query section by [@marcus0x62](https://redirect.github.com/marcus0x62) in [https://github.com/hickory-dns/hickory-dns/pull/2118](https://redirect.github.com/hickory-dns/hickory-dns/pull/2118) - Gate tests on required features by [@alexanderkjall](https://redirect.github.com/alexanderkjall) in [https://github.com/hickory-dns/hickory-dns/pull/2114](https://redirect.github.com/hickory-dns/hickory-dns/pull/2114) - Recursor: make nameserver and record cache sizes configurable by [@marcus0x62](https://redirect.github.com/marcus0x62) in [https://github.com/hickory-dns/hickory-dns/pull/2117](https://redirect.github.com/hickory-dns/hickory-dns/pull/2117) - when comparing IP addresses for UDP, only check IP and Port by [@bluejekyll](https://redirect.github.com/bluejekyll) in [https://github.com/hickory-dns/hickory-dns/pull/2124](https://redirect.github.com/hickory-dns/hickory-dns/pull/2124) - Bailiwick checking for the recursor by [@marcus0x62](https://redirect.github.com/marcus0x62) in [https://github.com/hickory-dns/hickory-dns/pull/2119](https://redirect.github.com/hickory-dns/hickory-dns/pull/2119) - Fixup lookup docs by [@bluejekyll](https://redirect.github.com/bluejekyll) in [https://github.com/hickory-dns/hickory-dns/pull/2123](https://redirect.github.com/hickory-dns/hickory-dns/pull/2123) - Bump actions/cache from 3 to 4 by [@dependabot](https://redirect.github.com/dependabot) in [https://github.com/hickory-dns/hickory-dns/pull/2129](https://redirect.github.com/hickory-dns/hickory-dns/pull/2129) - Update dependencies by [@djc](https://redirect.github.com/djc) in [https://github.com/hickory-dns/hickory-dns/pull/2112](https://redirect.github.com/hickory-dns/hickory-dns/pull/2112) - Fix a typo in crate description by [@wiktor-k](https://redirect.github.com/wiktor-k) in [https://github.com/hickory-dns/hickory-dns/pull/2132](https://redirect.github.com/hickory-dns/hickory-dns/pull/2132) - Only DNSKEY zone keys are allowed to match DS RR by [@justahero](https://redirect.github.com/justahero) in [https://github.com/hickory-dns/hickory-dns/pull/2131](https://redirect.github.com/hickory-dns/hickory-dns/pull/2131) - Use cargo environment variables for path to executable. by [@sjbronner](https://redirect.github.com/sjbronner) in [https://github.com/hickory-dns/hickory-dns/pull/2130](https://redirect.github.com/hickory-dns/hickory-dns/pull/2130) - Add option to specify a restricted set of networks capable of accessing the Hickory DNS server by [@bluejekyll](https://redirect.github.com/bluejekyll) in [https://github.com/hickory-dns/hickory-dns/pull/2126](https://redirect.github.com/hickory-dns/hickory-dns/pull/2126) - Bump baptiste0928/cargo-install from 2 to 3 by [@dependabot](https://redirect.github.com/dependabot) in [https://github.com/hickory-dns/hickory-dns/pull/2135](https://redirect.github.com/hickory-dns/hickory-dns/pull/2135) - Bump codecov/codecov-action from 3 to 4 by [@dependabot](https://redirect.github.com/dependabot) in [https://github.com/hickory-dns/hickory-dns/pull/2136](https://redirect.github.com/hickory-dns/hickory-dns/pull/2136) - Cleanliness for 1.76 by [@bluejekyll](https://redirect.github.com/bluejekyll) in [https://github.com/hickory-dns/hickory-dns/pull/2143](https://redirect.github.com/hickory-dns/hickory-dns/pull/2143) - update version for http/h2/h3 by [@zh-jq](https://redirect.github.com/zh-jq) in [https://github.com/hickory-dns/hickory-dns/pull/2138](https://redirect.github.com/hickory-dns/hickory-dns/pull/2138) - add getter/setter methods to ClientSubnet by [@leshow](https://redirect.github.com/leshow) in [https://github.com/hickory-dns/hickory-dns/pull/2146](https://redirect.github.com/hickory-dns/hickory-dns/pull/2146) - fix(proto): fix internal representation of OPT by [@esensar](https://redirect.github.com/esensar) in [https://github.com/hickory-dns/hickory-dns/pull/2151](https://redirect.github.com/hickory-dns/hickory-dns/pull/2151) - Better DNSSEC proofs by [@bluejekyll](https://redirect.github.com/bluejekyll) in [https://github.com/hickory-dns/hickory-dns/pull/2084](https://redirect.github.com/hickory-dns/hickory-dns/pull/2084) - feat: add setter methods for Message struct to improve configurability by [@situ2001](https://redirect.github.com/situ2001) in [https://github.com/hickory-dns/hickory-dns/pull/2147](https://redirect.github.com/hickory-dns/hickory-dns/pull/2147) - Forward hickory-dns's root cert features to hickory-resolver by [@hch12907](https://redirect.github.com/hch12907) in [https://github.com/hickory-dns/hickory-dns/pull/2153](https://redirect.github.com/hickory-dns/hickory-dns/pull/2153) - Fix formatting issue in crates/proto/src/op/message.rs by [@marcus0x62](https://redirect.github.com/marcus0x62) in [https://github.com/hickory-dns/hickory-dns/pull/2165](https://redirect.github.com/hickory-dns/hickory-dns/pull/2165) - Update mio to 0.8.11 to fix RUSTSEC-2024-0019 by [@marcus0x62](https://redirect.github.com/marcus0x62) in [https://github.com/hickory-dns/hickory-dns/pull/2166](https://redirect.github.com/hickory-dns/hickory-dns/pull/2166) - Handle shutdown sockets by [@dlon](https://redirect.github.com/dlon) in [https://github.com/hickory-dns/hickory-dns/pull/2171](https://redirect.github.com/hickory-dns/hickory-dns/pull/2171) - Bump extractions/setup-just from 1 to 2 by [@dependabot](https://redirect.github.com/dependabot) in [https://github.com/hickory-dns/hickory-dns/pull/2164](https://redirect.github.com/hickory-dns/hickory-dns/pull/2164) - Bump http from 1.0.0 to 1.1.0 by [@dependabot](https://redirect.github.com/dependabot) in [https://github.com/hickory-dns/hickory-dns/pull/2170](https://redirect.github.com/hickory-dns/hickory-dns/pull/2170) - Clippy 1.77 + dependency updates by [@djc](https://redirect.github.com/djc) in [https://github.com/hickory-dns/hickory-dns/pull/2174](https://redirect.github.com/hickory-dns/hickory-dns/pull/2174) - Update semver-compatible dependencies by [@djc](https://redirect.github.com/djc) in [https://github.com/hickory-dns/hickory-dns/pull/2177](https://redirect.github.com/hickory-dns/hickory-dns/pull/2177) - Make `hickory_proto::quic::QuicClientStream` Clonable by [@0xffffharry](https://redirect.github.com/0xffffharry) in [https://github.com/hickory-dns/hickory-dns/pull/2176](https://redirect.github.com/hickory-dns/hickory-dns/pull/2176) - error: wrap io::Error in Arc for clone by [@cpu](https://redirect.github.com/cpu) in [https://github.com/hickory-dns/hickory-dns/pull/2181](https://redirect.github.com/hickory-dns/hickory-dns/pull/2181) - resolver: err for dns-over-rustls w/o roots by [@cpu](https://redirect.github.com/cpu) in [https://github.com/hickory-dns/hickory-dns/pull/2179](https://redirect.github.com/hickory-dns/hickory-dns/pull/2179) - ignore portions of the README in Oranda site generation by [@bluejekyll](https://redirect.github.com/bluejekyll) in [https://github.com/hickory-dns/hickory-dns/pull/2180](https://redirect.github.com/hickory-dns/hickory-dns/pull/2180) - SVCB/HTTPS RFC updates, ECH config tweaks by [@cpu](https://redirect.github.com/cpu) in [https://github.com/hickory-dns/hickory-dns/pull/2183](https://redirect.github.com/hickory-dns/hickory-dns/pull/2183) - Merge 0.24.1 by [@bluejekyll](https://redirect.github.com/bluejekyll) in [https://github.com/hickory-dns/hickory-dns/pull/2185](https://redirect.github.com/hickory-dns/hickory-dns/pull/2185) - fix(test): update ip of `example.com` by [@situ2001](https://redirect.github.com/situ2001) in [https://github.com/hickory-dns/hickory-dns/pull/2187](https://redirect.github.com/hickory-dns/hickory-dns/pull/2187) - update rustls 0.21.11 to fix audit by [@bluejekyll](https://redirect.github.com/bluejekyll) in [https://github.com/hickory-dns/hickory-dns/pull/2189](https://redirect.github.com/hickory-dns/hickory-dns/pull/2189) - Bump parking_lot from 0.12.1 to 0.12.2 by [@dependabot](https://redirect.github.com/dependabot) in [https://github.com/hickory-dns/hickory-dns/pull/2202](https://redirect.github.com/hickory-dns/hickory-dns/pull/2202) - doc: fix misc typos in md files by [@divagant-martian](https://redirect.github.com/divagant-martian) in [https://github.com/hickory-dns/hickory-dns/pull/2198](https://redirect.github.com/hickory-dns/hickory-dns/pull/2198) - address new clippy lint assigning-clones by [@divagant-martian](https://redirect.github.com/divagant-martian) in [https://github.com/hickory-dns/hickory-dns/pull/2205](https://redirect.github.com/hickory-dns/hickory-dns/pull/2205) - Make `hickory_proto::h3::H3ClientStream` Clonable by [@0xffffharry](https://redirect.github.com/0xffffharry) in [https://github.com/hickory-dns/hickory-dns/pull/2182](https://redirect.github.com/hickory-dns/hickory-dns/pull/2182) - recursor: respect DO bit in incoming queries by [@japaric](https://redirect.github.com/japaric) in [https://github.com/hickory-dns/hickory-dns/pull/2196](https://redirect.github.com/hickory-dns/hickory-dns/pull/2196) - recursor: tweaks for security awareness by [@djc](https://redirect.github.com/djc) in [https://github.com/hickory-dns/hickory-dns/pull/2208](https://redirect.github.com/hickory-dns/hickory-dns/pull/2208) - Retry tcp on udp io errors by [@bluejekyll](https://redirect.github.com/bluejekyll) in [https://github.com/hickory-dns/hickory-dns/pull/2215](https://redirect.github.com/hickory-dns/hickory-dns/pull/2215) - recursor: send DS queries to the parent zone by [@japaric](https://redirect.github.com/japaric) in [https://github.com/hickory-dns/hickory-dns/pull/2203](https://redirect.github.com/hickory-dns/hickory-dns/pull/2203) - Adds deref call in assertion for hickory-client README example by [@akappel](https://redirect.github.com/akappel) in [https://github.com/hickory-dns/hickory-dns/pull/2173](https://redirect.github.com/hickory-dns/hickory-dns/pull/2173) - cargo: Enable LTO on release build by [@jpds](https://redirect.github.com/jpds) in [https://github.com/hickory-dns/hickory-dns/pull/2141](https://redirect.github.com/hickory-dns/hickory-dns/pull/2141) - add RFC2931 SIG(0) as supported by [@bluejekyll](https://redirect.github.com/bluejekyll) in [https://github.com/hickory-dns/hickory-dns/pull/2216](https://redirect.github.com/hickory-dns/hickory-dns/pull/2216) - Remove broken mtls code to fix CI by [@djc](https://redirect.github.com/djc) in [https://github.com/hickory-dns/hickory-dns/pull/2218](https://redirect.github.com/hickory-dns/hickory-dns/pull/2218) - ci: pin nightly version by [@japaric](https://redirect.github.com/japaric) in [https://github.com/hickory-dns/hickory-dns/pull/2224](https://redirect.github.com/hickory-dns/hickory-dns/pull/2224) - import DNSSEC conformance test suite repository by [@japaric](https://redirect.github.com/japaric) in [https://github.com/hickory-dns/hickory-dns/pull/2222](https://redirect.github.com/hickory-dns/hickory-dns/pull/2222) - Add just recipes to clean leftover containers and networks by [@pvdrz](https://redirect.github.com/pvdrz) in [https://github.com/hickory-dns/hickory-dns/pull/2232](https://redirect.github.com/hickory-dns/hickory-dns/pull/2232) - refactor the `Resource` data structure by [@japaric](https://redirect.github.com/japaric) in [https://github.com/hickory-dns/hickory-dns/pull/2231](https://redirect.github.com/hickory-dns/hickory-dns/pull/2231) - dns-test: make NameServer's FQDN more stable by [@japaric](https://redirect.github.com/japaric) in [https://github.com/hickory-dns/hickory-dns/pull/2235](https://redirect.github.com/hickory-dns/hickory-dns/pull/2235) - Apply clippy suggestions for Rust 1.79 by [@djc](https://redirect.github.com/djc) in [https://github.com/hickory-dns/hickory-dns/pull/2240](https://redirect.github.com/hickory-dns/hickory-dns/pull/2240) - prepare 0.25-alpha by [@bluejekyll](https://redirect.github.com/bluejekyll) in [https://github.com/hickory-dns/hickory-dns/pull/2242](https://redirect.github.com/hickory-dns/hickory-dns/pull/2242) - Expose query path for DoH by [@Skyxim](https://redirect.github.com/Skyxim) in [https://github.com/hickory-dns/hickory-dns/pull/2226](https://redirect.github.com/hickory-dns/hickory-dns/pull/2226) - DnsLru: cache RRSIG records together with the record they cover by [@japaric](https://redirect.github.com/japaric) in [https://github.com/hickory-dns/hickory-dns/pull/2239](https://redirect.github.com/hickory-dns/hickory-dns/pull/2239) - Add conformance tests for NSEC3 by [@pvdrz](https://redirect.github.com/pvdrz) in [https://github.com/hickory-dns/hickory-dns/pull/2238](https://redirect.github.com/hickory-dns/hickory-dns/pull/2238) - docs: add content from 2183 to changelog by [@cpu](https://redirect.github.com/cpu) in [https://github.com/hickory-dns/hickory-dns/pull/2243](https://redirect.github.com/hickory-dns/hickory-dns/pull/2243) - fix: make just to compile bind by [@sabify](https://redirect.github.com/sabify) in [https://github.com/hickory-dns/hickory-dns/pull/2248](https://redirect.github.com/hickory-dns/hickory-dns/pull/2248) - add conformance to CODEOWNERS by [@japaric](https://redirect.github.com/japaric) in [https://github.com/hickory-dns/hickory-dns/pull/2259](https://redirect.github.com/hickory-dns/hickory-dns/pull/2259) - just: document conformance-\* tasks by [@japaric](https://redirect.github.com/japaric) in [https://github.com/hickory-dns/hickory-dns/pull/2266](https://redirect.github.com/hickory-dns/hickory-dns/pull/2266) - recursor: strip dnssec records on cache hit by [@japaric](https://redirect.github.com/japaric) in [https://github.com/hickory-dns/hickory-dns/pull/2245](https://redirect.github.com/hickory-dns/hickory-dns/pull/2245) - dns-test: do not run `docker network create` in parallel by [@japaric](https://redirect.github.com/japaric) in [https://github.com/hickory-dns/hickory-dns/pull/2265](https://redirect.github.com/hickory-dns/hickory-dns/pull/2265) - `DnssecDnsHandle`: check RRSIG validity as per RFC4035 by [@japaric](https://redirect.github.com/japaric) in [https://github.com/hickory-dns/hickory-dns/pull/2213](https://redirect.github.com/hickory-dns/hickory-dns/pull/2213) - NextRandomUdpSocket: fall back to port 0 if no port was found by [@Luap99](https://redirect.github.com/Luap99) in [https://github.com/hickory-dns/hickory-dns/pull/2260](https://redirect.github.com/hickory-dns/hickory-dns/pull/2260) - CI: also run hickory unit tests when only /conformance changes by [@japaric](https://redirect.github.com/japaric) in [https://github.com/hickory-dns/hickory-dns/pull/2269](https://redirect.github.com/hickory-dns/hickory-dns/pull/2269) - just: warn when the index is dirty and DNS_TEST_SUBJECT=hickory by [@japaric](https://redirect.github.com/japaric) in [https://github.com/hickory-dns/hickory-dns/pull/2267](https://redirect.github.com/hickory-dns/hickory-dns/pull/2267) - Recursor::resolve: reject queries with relative domain names by [@japaric](https://redirect.github.com/japaric) in [https://github.com/hickory-dns/hickory-dns/pull/2246](https://redirect.github.com/hickory-dns/hickory-dns/pull/2246) - add a trust anchor file parser by [@japaric](https://redirect.github.com/japaric) in [https://github.com/hickory-dns/hickory-dns/pull/2257](https://redirect.github.com/hickory-dns/hickory-dns/pull/2257) - dns-test: use non-deprecated algorithm (RSASHA256) by [@japaric](https://redirect.github.com/japaric) in [https://github.com/hickory-dns/hickory-dns/pull/2258](https://redirect.github.com/hickory-dns/hickory-dns/pull/2258) - dns-test: make unit tests use the checked out version of this repo by [@japaric](https://redirect.github.com/japaric) in [https://github.com/hickory-dns/hickory-dns/pull/2268](https://redirect.github.com/hickory-dns/hickory-dns/pull/2268) - Assert status for every NSEC3 test by [@pvdrz](https://redirect.github.com/pvdrz) in [https://github.com/hickory-dns/hickory-dns/pull/2254](https://redirect.github.com/hickory-dns/hickory-dns/pull/2254) - improved server binary, added config validation and control over protocols by [@sabify](https://redirect.github.com/sabify) in [https://github.com/hickory-dns/hickory-dns/pull/2247](https://redirect.github.com/hickory-dns/hickory-dns/pull/2247) - Fix typo by [@casonadams](https://redirect.github.com/casonadams) in [https://github.com/hickory-dns/hickory-dns/pull/2272](https://redirect.github.com/hickory-dns/hickory-dns/pull/2272) - add DNSSEC validation to the recursive resolver by [@japaric](https://redirect.github.com/japaric) in [https://github.com/hickory-dns/hickory-dns/pull/2253](https://redirect.github.com/hickory-dns/hickory-dns/pull/2253) - test caching of DNSSEC validation and of DNSSEC records by [@japaric](https://redirect.github.com/japaric) in [https://github.com/hickory-dns/hickory-dns/pull/2244](https://redirect.github.com/hickory-dns/hickory-dns/pull/2244) - Add test to check cache hit with DO bit by [@justahero](https://redirect.github.com/justahero) in [https://github.com/hickory-dns/hickory-dns/pull/2280](https://redirect.github.com/hickory-dns/hickory-dns/pull/2280) - Refactor `start` method in Resolver by [@justahero](https://redirect.github.com/justahero) in [https://github.com/hickory-dns/hickory-dns/pull/2281](https://redirect.github.com/hickory-dns/hickory-dns/pull/2281) - answer with SERVFAIL when DNSSEC validation fails by [@japaric](https://redirect.github.com/japaric) in [https://github.com/hickory-dns/hickory-dns/pull/2286](https://redirect.github.com/hickory-dns/hickory-dns/pull/2286) - DnssecDnsHandle: do not recurse infinitely when query `DS .` fails by [@japaric](https://redirect.github.com/japaric) in [https://github.com/hickory-dns/hickory-dns/pull/2271](https://redirect.github.com/hickory-dns/hickory-dns/pull/2271) - recursor: put tokio::test behind cfg attribute by [@japaric](https://redirect.github.com/japaric) in [https://github.com/hickory-dns/hickory-dns/pull/2291](https://redirect.github.com/hickory-dns/hickory-dns/pull/2291) - test that DO=1 does not change the outcome of DNSSEC validation by [@japaric](https://redirect.github.com/japaric) in [https://github.com/hickory-dns/hickory-dns/pull/2287](https://redirect.github.com/hickory-dns/hickory-dns/pull/2287) - test caching of chain of trust link by [@japaric](https://redirect.github.com/japaric) in [https://github.com/hickory-dns/hickory-dns/pull/2289](https://redirect.github.com/hickory-dns/hickory-dns/pull/2289) - Test invalid signature timestamps in DNSSEC validation by [@justahero](https://redirect.github.com/justahero) in [https://github.com/hickory-dns/hickory-dns/pull/2298](https://redirect.github.com/hickory-dns/hickory-dns/pull/2298) - DnssecDnsHandle: also update the RRSIG's proof by [@japaric](https://redirect.github.com/japaric) in [https://github.com/hickory-dns/hickory-dns/pull/2293](https://redirect.github.com/hickory-dns/hickory-dns/pull/2293) - validating recursor: return answer from cache by [@japaric](https://redirect.github.com/japaric) in [https://github.com/hickory-dns/hickory-dns/pull/2297](https://redirect.github.com/hickory-dns/hickory-dns/pull/2297) - test that answer section is empty on failed DNSSEC validation by [@japaric](https://redirect.github.com/japaric) in [https://github.com/hickory-dns/hickory-dns/pull/2302](https://redirect.github.com/hickory-dns/hickory-dns/pull/2302) - Adjust timestamps to pass unbound validation result by [@justahero](https://redirect.github.com/justahero) in [https://github.com/hickory-dns/hickory-dns/pull/2303](https://redirect.github.com/hickory-dns/hickory-dns/pull/2303) - Add method to capture expected number of packets by [@justahero](https://redirect.github.com/justahero) in [https://github.com/hickory-dns/hickory-dns/pull/2278](https://redirect.github.com/hickory-dns/hickory-dns/pull/2278) - server: empty the answer section when DNSSEC validation fails by [@japaric](https://redirect.github.com/japaric) in [https://github.com/hickory-dns/hickory-dns/pull/2304](https://redirect.github.com/hickory-dns/hickory-dns/pull/2304) - recursor: fix DNSSEC validation of `NS somedomain.com.` by [@japaric](https://redirect.github.com/japaric) in [https://github.com/hickory-dns/hickory-dns/pull/2300](https://redirect.github.com/hickory-dns/hickory-dns/pull/2300) - dns-test: cache `target` directory across `docker build` invocations by [@japaric](https://redirect.github.com/japaric) in [https://github.com/hickory-dns/hickory-dns/pull/2305](https://redirect.github.com/hickory-dns/hickory-dns/pull/2305) - Update bytes to 1.6.1 by [@marcus0x62](https://redirect.github.com/marcus0x62) in [https://github.com/hickory-dns/hickory-dns/pull/2310](https://redirect.github.com/hickory-dns/hickory-dns/pull/2310) - Add support for PTR query by [@mokeyish](https://redirect.github.com/mokeyish) in [https://github.com/hickory-dns/hickory-dns/pull/2308](https://redirect.github.com/hickory-dns/hickory-dns/pull/2308) - add regression test for [#2306](https://redirect.github.com/hickory-dns/hickory-dns/issues/2306) by [@japaric](https://redirect.github.com/japaric) in [https://github.com/hickory-dns/hickory-dns/pull/2309](https://redirect.github.com/hickory-dns/hickory-dns/pull/2309) - avoid moving self in read_hosts_conf（reading from multiple files） by [@mokeyish](https://redirect.github.com/mokeyish) in [https://github.com/hickory-dns/hickory-dns/pull/2314](https://redirect.github.com/hickory-dns/hickory-dns/pull/2314) - Adjust TTL of RRSIG + RR during validation by [@justahero](https://redirect.github.com/justahero) in [https://github.com/hickory-dns/hickory-dns/pull/2311](https://redirect.github.com/hickory-dns/hickory-dns/pull/2311) - Update OpenSSL to fix security issue by [@justahero](https://redirect.github.com/justahero) in [https://github.com/hickory-dns/hickory-dns/pull/2316](https://redirect.github.com/hickory-dns/hickory-dns/pull/2316) - Bump MSRV to 1.70 by [@djc](https://redirect.github.com/djc) in [https://github.com/hickory-dns/hickory-dns/pull/2322](https://redirect.github.com/hickory-dns/hickory-dns/pull/2322) - Allow to modify a RRSIG record before signing by [@justahero](https://redirect.github.com/justahero) in [https://github.com/hickory-dns/hickory-dns/pull/2315](https://redirect.github.com/hickory-dns/hickory-dns/pull/2315) - justfile: use --locked to stick with Cargo.lock dependencies by [@djc](https://redirect.github.com/djc) in [https://github.com/hickory-dns/hickory-dns/pull/2323](https://redirect.github.com/hickory-dns/hickory-dns/pull/2323) - Add information on cargo ws plugin by [@justahero](https://redirect.github.com/justahero) in [https://github.com/hickory-dns/hickory-dns/pull/2319](https://redirect.github.com/hickory-dns/hickory-dns/pull/2319) - Upgrade to rustls 0.23, quinn 0.11, etc by [@djc](https://redirect.github.com/djc) in [https://github.com/hickory-dns/hickory-dns/pull/2217](https://redirect.github.com/hickory-dns/hickory-dns/pull/2217) - leave query/opt in truncated msg by [@leshow](https://redirect.github.com/leshow) in [https://github.com/hickory-dns/hickory-dns/pull/2307](https://redirect.github.com/hickory-dns/hickory-dns/pull/2307) - Fix warnings from Clippy 1.80 by [@djc](https://redirect.github.com/djc) in [https://github.com/hickory-dns/hickory-dns/pull/2324](https://redirect.github.com/hickory-dns/hickory-dns/pull/2324) - Make sure Lookup futures are Sync by [@djc](https://redirect.github.com/djc) in [https://github.com/hickory-dns/hickory-dns/pull/2326](https://redirect.github.com/hickory-dns/hickory-dns/pull/2326) - resolver: Make QuicSocketBinder as public as RuntimeProvider by [@mokeyish](https://redirect.github.com/mokeyish) in [https://github.com/hickory-dns/hickory-dns/pull/2328](https://redirect.github.com/hickory-dns/hickory-dns/pull/2328) - Return error when no nameservers in resolv.conf by [@dav1do](https://redirect.github.com/dav1do) in [https://github.com/hickory-dns/hickory-dns/pull/2327](https://redirect.github.com/hickory-dns/hickory-dns/pull/2327) - Improve recursor logic by eliminating redundant NS requests and adding recursor support for NS referrals. by [@marcus0x62](https://redirect.github.com/marcus0x62) in [https://github.com/hickory-dns/hickory-dns/pull/2325](https://redirect.github.com/hickory-dns/hickory-dns/pull/2325) - Use SerialNumber type for signature timestamps by [@justahero](https://redirect.github.com/justahero) in [https://github.com/hickory-dns/hickory-dns/pull/2318](https://redirect.github.com/hickory-dns/hickory-dns/pull/2318) - Fix SOA referrals by [@marcus0x62](https://redirect.github.com/marcus0x62) in [https://github.com/hickory-dns/hickory-dns/pull/2331](https://redirect.github.com/hickory-dns/hickory-dns/pull/2331) - recursor: take is_subzone() arguments as \&Name by [@djc](https://redirect.github.com/djc) in [https://github.com/hickory-dns/hickory-dns/pull/2334](https://redirect.github.com/hickory-dns/hickory-dns/pull/2334) - Simplify TBS construction API by [@djc](https://redirect.github.com/djc) in [https://github.com/hickory-dns/hickory-dns/pull/2335](https://redirect.github.com/hickory-dns/hickory-dns/pull/2335) - only retry I/O errors over TCP by [@lrouquette](https://redirect.github.com/lrouquette) in [https://github.com/hickory-dns/hickory-dns/pull/2336](https://redirect.github.com/hickory-dns/hickory-dns/pull/2336) - Suppress implicit features from optional dependencies by [@djc](https://redirect.github.com/djc) in [https://github.com/hickory-dns/hickory-dns/pull/2337](https://redirect.github.com/hickory-dns/hickory-dns/pull/2337) - update changelog and bump version for 0.25.0-alpha.2 by [@bluejekyll](https://redirect.github.com/bluejekyll) in [https://github.com/hickory-dns/hickory-dns/pull/2343](https://redirect.github.com/hickory-dns/hickory-dns/pull/2343) - util: add a newline between records in resolve report by [@bluejekyll](https://redirect.github.com/bluejekyll) in [https://github.com/hickory-dns/hickory-dns/pull/2347](https://redirect.github.com/hickory-dns/hickory-dns/pull/2347) - proto: make time dependency optional by [@djc](https://redirect.github.com/djc) in [https://github.com/hickory-dns/hickory-dns/pull/2349](https://redirect.github.com/hickory-dns/hickory-dns/pull/2349) - Manifest cleanup by [@djc](https://redirect.github.com/djc) in [https://github.com/hickory-dns/hickory-dns/pull/2351](https://redirect.github.com/hickory-dns/hickory-dns/pull/2351) - Add marcus0x62 as a code owner by [@djc](https://redirect.github.com/djc) in [https://github.com/hickory-dns/hickory-dns/pull/2350](https://redirect.github.com/hickory-dns/hickory-dns/pull/2350) - fix the bad label compression from original query by [@bluejekyll](https://redirect.github.com/bluejekyll) in [https://github.com/hickory-dns/hickory-dns/pull/2352](https://redirect.github.com/hickory-dns/hickory-dns/pull/2352) - Remove mentions of Makefile.toml in CONTRIBUTING.md by [@divergentdave](https://redirect.github.com/divergentdave) in [https://github.com/hickory-dns/hickory-dns/pull/2356](https://redirect.github.com/hickory-dns/hickory-dns/pull/2356) - Fix extra length prefix in unknown SVCB parameter by [@divergentdave](https://redirect.github.com/divergentdave) in [https://github.com/hickory-dns/hickory-dns/pull/2354](https://redirect.github.com/hickory-dns/hickory-dns/pull/2354) - Fix copied comment by [@divergentdave](https://redirect.github.com/divergentdave) in [https://github.com/hickory-dns/hickory-dns/pull/2355](https://redirect.github.com/hickory-dns/hickory-dns/pull/2355) - Explicitly limit H2 support to rustls by [@djc](https://redirect.github.com/djc) in [https://github.com/hickory-dns/hickory-dns/pull/2366](https://redirect.github.com/hickory-dns/hickory-dns/pull/2366) - Fix panic in NSEC3 hash function by [@marcus0x62](https://redirect.github.com/marcus0x62) in [https://github.com/hickory-dns/hickory-dns/pull/2368](https://redirect.github.com/hickory-dns/hickory-dns/pull/2368) - Make AsyncResolver take hosts file into account by [@hch12907](https://redirect.github.com/hch12907) in [https://github.com/hickory-dns/hickory-dns/pull/2149](https://redirect.github.com/hickory-dns/hickory-dns/pull/2149) - Update dependencies by [@djc](https://redirect.github.com/djc) in [https://github.com/hickory-dns/hickory-dns/pull/2374](https://redirect.github.com/hickory-dns/hickory-dns/pull/2374) - Fix warning in Dockerfile by [@divergentdave](https://redirect.github.com/divergentdave) in [https://github.com/hickory-dns/hickory-dns/pull/2370](https://redirect.github.com/hickory-dns/hickory-dns/pull/2370) - Fix stdout handling during hickory startup by [@justahero](https://redirect.github.com/justahero) in [https://github.com/hickory-dns/hickory-dns/pull/2361](https://redirect.github.com/hickory-dns/hickory-dns/pull/2361) - Increase validation log level by [@justahero](https://redirect.github.com/justahero) in [https://github.com/hickory-dns/hickory-dns/pull/2360](https://redirect.github.com/hickory-dns/hickory-dns/pull/2360) - Revert "Fix stdout handling during hickory startup" by [@japaric](https://redirect.github.com/japaric) in [https://github.com/hickory-dns/hickory-dns/pull/2376](https://redirect.github.com/hickory-dns/hickory-dns/pull/2376) - ci: trigger workflows for merge queue branches by [@djc](https://redirect.github.com/djc) in [https://github.com/hickory-dns/hickory-dns/pull/2378](https://redirect.github.com/hickory-dns/hickory-dns/pull/2378) - Fix CAA parameter value validation by [@divergentdave](https://redirect.github.com/divergentdave) in [https://github.com/hickory-dns/hickory-dns/pull/2373](https://redirect.github.com/hickory-dns/hickory-dns/pull/2373) - Trivariant LookupControlFlow type to allow authorities to decline to respond to a query by [@marcus0x62](https://redirect.github.com/marcus0x62) in [https://github.com/hickory-dns/hickory-dns/pull/2160](https://redirect.github.com/hickory-dns/hickory-dns/pull/2160) - Conformance test cleanup by [@divergentdave](https://redirect.github.com/divergentdave) in [https://github.com/hickory-dns/hickory-dns/pull/2371](https://redirect.github.com/hickory-dns/hickory-dns/pull/2371) - use a "test" TLD in conformance tests by [@japaric](https://redirect.github.com/japaric) in [https://github.com/hickory-dns/hickory-dns/pull/2359](https://redirect.github.com/hickory-dns/hickory-dns/pull/2359) - Strict parsing of configuration files by [@divergentdave](https://redirect.github.com/divergentdave) in [https://github.com/hickory-dns/hickory-dns/pull/2375](https://redirect.github.com/hickory-dns/hickory-dns/pull/2375) - Use container names, not IDs, in "explore" example by [@divergentdave](https://redirect.github.com/divergentdave) in [https://github.com/hickory-dns/hickory-dns/pull/2372](https://redirect.github.com/hickory-dns/hickory-dns/pull/2372) - trust_anchor::Parser: accept records without TTL field by [@japaric](https://redirect.github.com/japaric) in [https://github.com/hickory-dns/hickory-dns/pull/2384](https://redirect.github.com/hickory-dns/hickory-dns/pull/2384) - dns-test: add helper to pause and inspect a unit test's containers by [@japaric](https://redirect.github.com/japaric) in [https://github.com/hickory-dns/hickory-dns/pull/2362](https://redirect.github.com/hickory-dns/hickory-dns/pull/2362) - dns-test: write logs to file by [@japaric](https://redirect.github.com/japaric) in [https://github.com/hickory-dns/hickory-dns/pull/2377](https://redirect.github.com/hickory-dns/hickory-dns/pull/2377) - Change domain name used in 'explore' example by [@divergentdave](https://redirect.github.com/divergentdave) in [https://github.com/hickory-dns/hickory-dns/pull/2386](https://redirect.github.com/hickory-dns/hickory-dns/pull/2386) - Fix Issue [#2306](https://redirect.github.com/hickory-dns/hickory-dns/issues/2306) / infinite recursion in ns_pool_for_zone by [@marcus0x62](https://redirect.github.com/marcus0x62) in [https://github.com/hickory-dns/hickory-dns/pull/2332](https://redirect.github.com/hickory-dns/hickory-dns/pull/2332) - dns-test: bump unbound to 1.21.0 by [@japaric](https://redirect.github.com/japaric) in [https://github.com/hickory-dns/hickory-dns/pull/2387](https://redirect.github.com/hickory-dns/hickory-dns/pull/2387) - \[RFC] (temporarily) add tests that rely on public DNS infrastructure by [@japaric](https://redirect.github.com/japaric) in [https://github.com/hickory-dns/hickory-dns/pull/2385](https://redirect.github.com/hickory-dns/hickory-dns/pull/2385) - DNSSEC validation fixes by [@japaric](https://redirect.github.com/japaric) in [https://github.com/hickory-dns/hickory-dns/pull/2392](https://redirect.github.com/hickory-dns/hickory-dns/pull/2392) - proto: simplify verify_dnskey_rrset() by [@djc](https://redirect.github.com/djc) in [https://github.com/hickory-dns/hickory-dns/pull/2397](https://redirect.github.com/hickory-dns/hickory-dns/pull/2397) - proto: simplify verify_dnskey_rrset() some more by [@djc](https://redirect.github.com/djc) in [https://github.com/hickory-dns/hickory-dns/pull/2398](https://redirect.github.com/hickory-dns/hickory-dns/pull/2398) - proto: replace Borrow<Name> impl for LowerName with Deref by [@djc](https://redirect.github.com/djc) in [https://github.com/hickory-dns/hickory-dns/pull/2394](https://redirect.github.com/hickory-dns/hickory-dns/pull/2394) - Add support for CNAME records to dns-test by [@marcus0x62](https://redirect.github.com/marcus0x62) in [https://github.com/hickory-dns/hickory-dns/pull/2338](https://redirect.github.com/hickory-dns/hickory-dns/pull/2338) - Add "do not query" configuration to recursor by [@divergentdave](https://redirect.github.com/divergentdave) in [https://github.com/hickory-dns/hickory-dns/pull/2369](https://redirect.github.com/hickory-dns/hickory-dns/pull/2369) - conformance: test resolver with query about unsigned zone by [@japaric](https://redirect.github.com/japaric) in [https://github.com/hickory-dns/hickory-dns/pull/2380](https://redirect.github.com/hickory-dns/hickory-dns/pull/2380) - dns-test: parse multiple EDE codes by [@japaric](https://redirect.github.com/japaric) in [https://github.com/hickory-dns/hickory-dns/pull/2381](https://redirect.github.com/hickory-dns/hickory-dns/pull/2381) - CI: fix conformance tests by [@japaric](https://redirect.github.com/japaric) in [https://github.com/hickory-dns/hickory-dns/pull/2405](https://redirect.github.com/hickory-dns/hickory-dns/pull/2405) - Forwarder: fix NXDOMAIN status code and allow it to forward SOA records by [@hch12907](https://redirect.github.com/hch12907) in [https://github.com/hickory-dns/hickory-dns/pull/2379](https://redirect.github.com/hickory-dns/hickory-dns/pull/2379) - dnssec: validate DS records by [@japaric](https://redirect.github.com/japaric) in [https://github.com/hickory-dns/hickory-dns/pull/2396](https://redirect.github.com/hickory-dns/hickory-dns/pull/2396) - build(deps): bump rustls-native-certs from 0.7.2 to 0.7.3 by [@dependabot](https://redirect.github.com/dependabot) in [https://github.com/hickory-dns/hickory-dns/pull/2407](https://redirect.github.com/hickory-dns/hickory-dns/pull/2407) - ensure DNSKEY is validated with a KSK by [@japaric](https://redirect.github.com/japaric) in [https://github.com/hickory-dns/hickory-dns/pull/2399](https://redirect.github.com/hickory-dns/hickory-dns/pull/2399) - Add method and test cases to randomize ASCII alpha case in Name labels by [@marcus0x62](https://redirect.github.com/marcus0x62) in [https://github.com/hickory-dns/hickory-dns/pull/2403](https://redirect.github.com/hickory-dns/hickory-dns/pull/2403) - conformance/dns: add bad referral scenarios by [@japaric](https://redirect.github.com/japaric) in [https://github.com/hickory-dns/hickory-dns/pull/2410](https://redirect.github.com/hickory-dns/hickory-dns/pull/2410) - conformance: test against deprecated algorithms by [@japaric](https://redirect.github.com/japaric) in [https://github.com/hickory-dns/hickory-dns/pull/2413](https://redirect.github.com/hickory-dns/hickory-dns/pull/2413) - Add NSEC3 support to `hickory-server` by [@pvdrz](https://redirect.github.com/pvdrz) in [https://github.com/hickory-dns/hickory-dns/pull/2391](https://redirect.github.com/hickory-dns/hickory-dns/pull/2391) - Fix semantic merge conflict by [@divergentdave](https://redirect.github.com/divergentdave) in [https://github.com/hickory-dns/hickory-dns/pull/2414](https://redirect.github.com/hickory-dns/hickory-dns/pull/2414) - Use u32 internally when randomizing case of labels by [@divergentdave](https://redirect.github.com/divergentdave) in [https://github.com/hickory-dns/hickory-dns/pull/2416](https://redirect.github.com/hickory-dns/hickory-dns/pull/2416) - Store invalid CAA property value as Value::Unknown by [@divergentdave](https://redirect.github.com/divergentdave) in [https://github.com/hickory-dns/hickory-dns/pull/2418](https://redirect.github.com/hickory-dns/hickory-dns/pull/2418) - Encode and decode CAA issuer name as ASCII only by [@divergentdave](https://redirect.github.com/divergentdave) in [https://github.com/hickory-dns/hickory-dns/pull/2419](https://redirect.github.com/hickory-dns/hickory-dns/pull/2419) - Ignore escaped dots when determining FQDN status by [@divergentdave](https://redirect.github.com/divergentdave) in [https://github.com/hickory-dns/hickory-dns/pull/2420](https://redirect.github.com/hickory-dns/hickory-dns/pull/2420) - conformance: DS of child's ZSK in parent zone by [@japaric](https://redirect.github.com/japaric) in [https://github.com/hickory-dns/hickory-dns/pull/2409](https://redirect.github.com/hickory-dns/hickory-dns/pull/2409) - fix key tag calculation in dns-test and semantic merge conflict in conformance test by [@japaric](https://redirect.github.com/japaric) in [https://github.com/hickory-dns/hickory-dns/pull/2427](https://redirect.github.com/hickory-dns/hickory-dns/pull/2427) - conformance: use `push_label` API and update variable names by [@japaric](https://redirect.github.com/japaric) in [https://github.com/hickory-dns/hickory-dns/pull/2408](https://redirect.github.com/hickory-dns/hickory-dns/pull/2408) - Fix corruption of signature expiration in flaky test by [@divergentdave](https://redirect.github.com/divergentdave) in [https://github.com/hickory-dns/hickory-dns/pull/2426](https://redirect.github.com/hickory-dns/hickory-dns/pull/2426) - Update semver-compatible dependencies by [@djc](https://redirect.github.com/djc) in [https://github.com/hickory-dns/hickory-dns/pull/2442](https://redirect.github.com/hickory-dns/hickory-dns/pull/2442) - Clean up server features by [@djc](https://redirect.github.com/djc) in [https://github.com/hickory-dns/hickory-dns/pull/2441](https://redirect.github.com/hickory-dns/hickory-dns/pull/2441) - Clean other target directories in `just clean` by [@divergentdave](https://redirect.github.com/divergentdave) in [https://github.com/hickory-dns/hickory-dns/pull/2446](https://redirect.github.com/hickory-dns/hickory-dns/pull/2446) - Stop using pseudo-TTYs with Docker by [@divergentdave](https://redirect.github.com/divergentdave) in [https://github.com/hickory-dns/hickory-dns/pull/2439](https://redirect.github.com/hickory-dns/hickory-dns/pull/2439) - dnssec: report Insecure outcome as NOERROR+AD=0 by [@japaric](https://redirect.github.com/japaric) in [https://github.com/hickory-dns/hickory-dns/pull/2438](https://redirect.github.com/hickory-dns/hickory-dns/pull/2438) - CAA: Preserve reserved flags by [@divergentdave](https://redirect.github.com/divergentdave) in [https://github.com/hickory-dns/hickory-dns/pull/2434](https://redirect.github.com/hickory-dns/hickory-dns/pull/2434) - NSEC3 validation by [@listochkin](https://redirect.github.com/listochkin) in [https://github.com/hickory-dns/hickory-dns/pull/2313](https://redirect.github.com/hickory-dns/hickory-dns/pull/2313) - Fix dns-over-openssl compilation and CI coverage by [@divergentdave](https://redirect.github.com/divergentdave) in [https://github.com/hickory-dns/hickory-dns/pull/2449](https://redirect.github.com/hickory-dns/hickory-dns/pull/2449) - Unify integration tests by [@divergentdave](https://redirect.github.com/divergentdave) in [https://github.com/hickory-dns/hickory-dns/pull/2448](https://redirect.github.com/hickory-dns/hickory-dns/pull/2448) - treat zone as Insecure if all DNSKEY algorithms are unsupported by [@japaric](https://redirect.github.com/japaric) in [https://github.com/hickory-dns/hickory-dns/pull/2443](https://redirect.github.com/hickory-dns/hickory-dns/pull/2443) - Minor recursor tweaks by [@djc](https://redirect.github.com/djc) in [https://github.com/hickory-dns/hickory-dns/pull/2450](https://redirect.github.com/hickory-dns/hickory-dns/pull/2450) - Set up tracing subscriber in various tests by [@divergentdave](https://redirect.github.com/divergentdave) in [https://github.com/hickory-dns/hickory-dns/pull/2453](https://redirect.github.com/hickory-dns/hickory-dns/pull/2453) - CNAME resolution support for the recursor. by [@marcus0x62](https://redirect.github.com/marcus0x62) in [https://github.com/hickory-dns/hickory-dns/pull/2339](https://redirect.github.com/hickory-dns/hickory-dns/pull/2339) - Extract tracing-subscriber setup to new crate by [@divergentdave](https://redirect.github.com/divergentdave) in [https://github.com/hickory-dns/hickory-dns/pull/2454](https://redirect.github.com/hickory-dns/hickory-dns/pull/2454) - implement rfc4398 CERT record type by [@zsdsys](https://redirect.github.com/zsdsys) in [https://github.com/hickory-dns/hickory-dns/pull/2417](https://redirect.github.com/hickory-dns/hickory-dns/pull/2417) - SignSettings: rm use_dnssec field by [@japaric](https://redirect.github.com/japaric) in [https://github.com/hickory-dns/hickory-dns/pull/2451](https://redirect.github.com/hickory-dns/hickory-dns/pull/2451) - build(deps): bump enum-as-inner from 0.6.0 to 0.6.1 by [@dependabot](https://redirect.github.com/dependabot) in [https://github.com/hickory-dns/hickory-dns/pull/2460](https://redirect.github.com/hickory-dns/hickory-dns/pull/2460) - Update semver-compatible dependencies by [@djc](https://redirect.github.com/djc) in [https://github.com/hickory-dns/hickory-dns/pull/2463](https://redirect.github.com/hickory-dns/hickory-dns/pull/2463) - Kill quad9 tests by [@djc](https://redirect.github.com/djc) in [https://github.com/hickory-dns/hickory-dns/pull/2467](https://redirect.github.com/hickory-dns/hickory-dns/pull/2467) - Move RuntimeProvider into proto by [@djc](https://redirect.github.com/djc) in [https://github.com/hickory-dns/hickory-dns/pull/2464](https://redirect.github.com/hickory-dns/hickory-dns/pull/2464) - Catalog cleanup in preparation for the chained authority. by [@marcus0x62](https://redirect.github.com/marcus0x62) in [https://github.com/hickory-dns/hickory-dns/pull/2461](https://redirect.github.com/hickory-dns/hickory-dns/pull/2461) - add hickory-server to the info and debug log line configs by [@bluejekyll](https://redirect.github.com/bluejekyll) in [https://github.com/hickory-dns/hickory-dns/pull/2469](https://redirect.github.com/hickory-dns/hickory-dns/pull/2469) - server: avoid wrapping Arc in Box by [@djc](https://redirect.github.com/djc) in [https://github.com/hickory-dns/hickory-dns/pull/2471](https://redirect.github.com/hickory-dns/hickory-dns/pull/2471) - conformance: unsigned leaf zone; other zones use NSEC by [@japaric](https://redirect.github.com/japaric) in [https://github.com/hickory-dns/hickory-dns/pull/2436](https://redirect.github.com/hickory-dns/hickory-dns/pull/2436) - Regenerate test certificates by [@divergentdave](https://redirect.github.com/divergentdave) in [https://github.com/hickory-dns/hickory-dns/pull/2475](https://redirect.github.com/hickory-dns/hickory-dns/pull/2475) - proto: use RuntimeProvider to connect TCP by [@djc](https://redirect.github.com/djc) in [https://github.com/hickory-dns/hickory-dns/pull/2472](https://redirect.github.com/hickory-dns/hickory-dns/pull/2472) - proto: change RecordSet::new() to take owned Name by [@djc](https://redirect.github.com/djc) in [https://github.com/hickory-dns/hickory-dns/pull/2473](https://redirect.github.com/hickory-dns/hickory-dns/pull/2473) - fix compilation failed by [@hingbong](https://redirect.github.com/hingbong) in [https://github.com/hickory-dns/hickory-dns/pull/2476](https://redirect.github.com/hickory-dns/hickory-dns/pull/2476) - Allow changing URI paths for DNS-over-HTTPS by [@hch12907](https://redirect.github.com/hch12907) in [https://github.com/hickory-dns/hickory-dns/pull/2470](https://redirect.github.com/hickory-dns/hickory-dns/pull/2470) - conformance: add NSEC & NSEC3 tests by [@japaric](https://redirect.github.com/japaric) in [https://github.com/hickory-dns/hickory-dns/pull/2437](https://redirect.github.com/hickory-dns/hickory-dns/pull/2437) - Chained authority implementation by [@marcus0x62](https://redirect.github.com/marcus0x62) in [https://github.com/hickory-dns/hickory-dns/pull/2161](https://redirect.github.com/hickory-dns/hickory-dns/pull/2161) - Remove unneeded vecs in ForwardNSData and wrap in an Arc by [@marcus0x62](https://redirect.github.com/marcus0x62) in [https://github.com/hickory-dns/hickory-dns/pull/2482](https://redirect.github.com/hickory-dns/hickory-dns/pull/2482) - Config tweaks by [@djc](https://redirect.github.com/djc) in [https://github.com/hickory-dns/hickory-dns/pull/2480](https://redirect.github.com/hickory-dns/hickory-dns/pull/2480) - Fix two issues with the config integration test by [@marcus0x62](https://redirect.github.com/marcus0x62) in [https://github.com/hickory-dns/hickory-dns/pull/2484](https://redirect.github.com/hickory-dns/hickory-dns/pull/2484) - Listen on IPv6 by default by [@marcus0x62](https://redirect.github.com/marcus0x62) in [https://github.com/hickory-dns/hickory-dns/pull/2478](https://redirect.github.com/hickory-dns/hickory-dns/pull/2478) - build(deps): bump once_cell from 1.19.0 to 1.20.1 by [@dependabot](https://redirect.github.com/dependabot) in [https://github.com/hickory-dns/hickory-dns/pull/2483](https://redirect.github.com/hickory-dns/hickory-dns/pull/2483) - Remove workaround in clippy justfile target by [@divergentdave](https://redirect.github.com/divergentdave) in [https://github.com/hickory-dns/hickory-dns/pull/2485](https://redirect.github.com/hickory-dns/hickory-dns/pull/2485) - Move StoreConfig to bin crate by [@djc](https://redirect.github.com/djc) in [https://github.com/hickory-dns/hickory-dns/pull/2486](https://redirect.github.com/hickory-dns/hickory-dns/pull/2486) - Update windows.rs to use crate::proto::xfer::Protocol by [@zsdsys](https://redirect.github.com/zsdsys) in [https://github.com/hickory-dns/hickory-dns/pull/2488](https://redirect.github.com/hickory-dns/hickory-dns/pull/2488) - Add resolver/recursor configuration to avoid udp ports by [@divergentdave](https://redirect.github.com/divergentdave) in [https://github.com/hickory-dns/hickory-dns/pull/2487](https://redirect.github.com/hickory-dns/hickory-dns/pull/2487) - Disable client_tests::test_nsec3\_query_name_is_soa_name by [@marcus0x62](https://redirect.github.com/marcus0x62) in [https://github.com/hickory-dns/hickory-dns/pull/2492](https://redirect.github.com/hickory-dns/hickory-dns/pull/2492) - Take advantage of match ergonomics by [@djc](https://redirect.github.com/djc) in [https://github.com/hickory-dns/hickory-dns/pull/2490](https://redirect.github.com/hickory-dns/hickory-dns/pull/2490) - Blocklist authority by [@marcus0x62](https://redirect.github.com/marcus0x62) in [https://github.com/hickory-dns/hickory-dns/pull/2162](https://redirect.github.com/hickory-dns/hickory-dns/pull/2162) - Update deps (futures-util and once_cell) by [@marcus0x62](https://redirect.github.com/marcus0x62) in [https://github.com/hickory-dns/hickory-dns/pull/2496](https://redirect.github.com/hickory-dns/hickory-dns/pull/2496) - Use custom serde visitor to fix store error messages by [@marcus0x62](https://redirect.github.com/marcus0x62) in [https://github.com/hickory-dns/hickory-dns/pull/2495](https://redirect.github.com/hickory-dns/hickory-dns/pull/2495) - Update semver-compatible dependencies by [@djc](https://redirect.github.com/djc) in [https://github.com/hickory-dns/hickory-dns/pull/2497](https://redirect.github.com/hickory-dns/hickory-dns/pull/2497) - Docs: resolver no longer returns background future by [@divergentdave](https://redirect.github.com/divergentdave) in [https://github.com/hickory-dns/hickory-dns/pull/2504](https://redirect.github.com/hickory-dns/hickory-dns/pull/2504) - proto: leverage simpler PEM reading API by [@djc](https://redirect.github.com/djc) in [https://github.com/hickory-dns/hickory-dns/pull/2505](https://redirect.github.com/hickory-dns/hickory-dns/pull/2505) - Update the NSEC/NSEC3 Truth Table to correctly log responses with NSEC and NSEC3 records by [@marcus0x62](https://redirect.github.com/marcus0x62) in [https://github.com/hickory-dns/hickory-dns/pull/2506](https://redirect.github.com/hickory-dns/hickory-dns/pull/2506) - Switch to using doc_auto_cfg by [@djc](https://redirect.github.com/djc) in [https://github.com/hickory-dns/hickory-dns/pull/2507](https://redirect.github.com/hickory-dns/hickory-dns/pull/2507) - State that `hickory-server` supports NSEC3 by [@pvdrz](https://redirect.github.com/pvdrz) in [https://github.com/hickory-dns/hickory-dns/pull/2512](https://redirect.github.com/hickory-dns/hickory-dns/pull/2512) - Resolver cleanups by [@divergentdave](https://redirect.github.com/divergentdave) in [https://github.com/hickory-dns/hickory-dns/pull/2513](https://redirect.github.com/hickory-dns/hickory-dns/pull/2513) - Propagate NX domain and no record found errors by [@marcus0x62](https://redirect.github.com/marcus0x62) in [https://github.com/hickory-dns/hickory-dns/pull/2502](https://redirect.github.com/hickory-dns/hickory-dns/pull/2502) - Replace TryParseIp trait wi </details> --- ### Configuration 📅 **Schedule**: Branch creation - "on the first day of the month" in timezone America/Los_Angeles, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). GitOrigin-RevId: b94dbd9bc161f34b19a1e095f0729e6c809462f8

1 parent aac499e commit e329abbCopy full SHA for e329abb

1 file changed

+2

-2

lines changed

Cargo.lock

1 file changed

+2

-2

lines changed

`‎Cargo.lock`

Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

Comments

(0)