Immanuel Tikhonov
17142359e0
fix: reject unknown chaos block options ( #8121 )
2026-05-24 05:58:11 -07:00
Ville Vesilehto
d9c6b9b8b4
fix: reject unknown trace and dnstap block options ( #8120 )
2026-05-21 16:06:25 -07:00
Immanuel Tikhonov
1fbc686758
fix: reject unknown ready plugin properties ( #8119 )
...
Signed-off-by: immanuwell <pchpr.00@list.ru >
2026-05-21 22:29:59 +03:00
JUN YANG
3e762bc603
Remove redundant code ( #8072 )
...
Signed-off-by: Yang Jun <yang.jun22@zte.com.cn >
Signed-off-by: 杨军10092085 <yang.jun22@zte.com.cn >
2026-05-21 22:11:29 +03:00
weiguozhang
65d15af3a9
pkg/tls: remove duplicate cipher suites ( #8118 )
...
Signed-off-by: Weiguo Zhang <weiguozhang1990@163.com >
2026-05-20 23:54:11 -07:00
dependabot[bot]
fb74594423
build(deps): bump google.golang.org/grpc from 1.81.0 to 1.81.1 ( #8116 )
2026-05-20 18:08:49 -07:00
dependabot[bot]
fa470b5d67
build(deps): bump google.golang.org/api from 0.278.0 to 0.279.0 ( #8115 )
...
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client ) from 0.278.0 to 0.279.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases )
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md )
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.278.0...v0.279.0 )
---
updated-dependencies:
- dependency-name: google.golang.org/api
dependency-version: 0.279.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-20 17:04:31 -07:00
dependabot[bot]
6d284f0101
build(deps): bump golang.org/x/net from 0.53.0 to 0.54.0 ( #8114 )
...
Bumps [golang.org/x/net](https://github.com/golang/net ) from 0.53.0 to 0.54.0.
- [Commits](https://github.com/golang/net/compare/v0.53.0...v0.54.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/net
dependency-version: 0.54.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-20 17:04:17 -07:00
dependabot[bot]
571bde041d
build(deps): bump golang.org/x/crypto from 0.50.0 to 0.51.0 ( #8113 )
...
Bumps [golang.org/x/crypto](https://github.com/golang/crypto ) from 0.50.0 to 0.51.0.
- [Commits](https://github.com/golang/crypto/compare/v0.50.0...v0.51.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/crypto
dependency-version: 0.51.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-20 17:04:02 -07:00
dependabot[bot]
e323f5e1c8
build(deps): bump github.com/quic-go/quic-go from 0.59.0 to 0.59.1 ( #8112 )
...
Bumps [github.com/quic-go/quic-go](https://github.com/quic-go/quic-go ) from 0.59.0 to 0.59.1.
- [Release notes](https://github.com/quic-go/quic-go/releases )
- [Commits](https://github.com/quic-go/quic-go/compare/v0.59.0...v0.59.1 )
---
updated-dependencies:
- dependency-name: github.com/quic-go/quic-go
dependency-version: 0.59.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-20 22:46:22 +03:00
dependabot[bot]
4a7b286b6e
build(deps): bump actions/dependency-review-action from 4.9.0 to 5.0.0 ( #8111 )
...
Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action ) from 4.9.0 to 5.0.0.
- [Release notes](https://github.com/actions/dependency-review-action/releases )
- [Commits](2031cfc080...a1d282b36bsupport@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-20 22:45:13 +03:00
dependabot[bot]
63736a4b08
build(deps): bump github/codeql-action from 4.35.3 to 4.35.4 ( #8117 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 4.35.3 to 4.35.4.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](e46ed2cbd0...68bde559desupport@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-20 22:44:40 +03:00
James R T
84faec64c3
fix(azure): apply access mode to every zone in the same block ( #8110 )
2026-05-20 08:06:37 -07:00
Ville Vesilehto
f8dffa7fc2
feat(secondary): add fallthrough support ( #8041 )
2026-05-20 00:13:03 -07:00
Umut Polat
b1a7fc8db1
fix(cache): prefer positive cache over SERVFAIL in ncache ( #8003 )
...
When serve_stale is enabled, a cached SERVFAIL in ncache shadows a valid
positive entry in pcache because ncache is always checked first. SERVFAIL
is transient and should not mask a known-good answer.
When the ncache hit is a SERVFAIL, check pcache for a valid entry before
returning the SERVFAIL. NXDOMAIN and NODATA are unaffected and still
follow the existing ncache-first lookup per RFC 2308.
Fixes #7956
Signed-off-by: umut-polat <52835619+umut-polat@users.noreply.github.com >
2026-05-19 20:28:35 -07:00
Endre Szabo
35391dd8a9
plugin/file: trigger reload of zones based on mtime ( #8085 )
...
* Added fs.FileInfo.ModTime() based reload feature
Signed-off-by: Endre Szabo <git@end.re >
* Updated the plugin documentation.
Signed-off-by: Endre Szabo <git@end.re >
---------
Signed-off-by: Endre Szabo <git@end.re >
2026-05-19 19:43:46 -07:00
Endre Szabo
ee7ff82cf5
plugin/dnstap: feature: added incoming connection support ( #8086 )
...
* plugin/dnstap: added incoming connection support feature to dnstap plugin
Signed-off-by: Endre Szabo <git@end.re >
* fixed problems pointed out by ci linter
Signed-off-by: Endre Szabo <git@end.re >
---------
Signed-off-by: Endre Szabo <git@end.re >
2026-05-19 19:23:53 -07:00
Charlie Tonneslan
f4f767fb4e
plugin/file: canonicalize escape form in owner names ( #8109 )
...
The miekg/dns zone parser preserves whichever text form the input
used for an escaped byte. RFC 1035 §5.1 lets the same byte appear
as \DDD (decimal) or \c (literal character), so a zone file
written with has\046dot.campus.edu. is stored under that literal
string. Incoming queries, by contrast, arrive on the wire and are
unpacked by miekg/dns into the canonical form has\.dot.campus.edu.
The two strings don't compare equal in the tree, so the record is
silently unreachable.
Pack-then-unpack the owner name on Insert so the stored key uses
the same canonical form as anything that comes off the wire. Only
runs when the name contains a backslash, so the common case is a
no-op string compare.
Fixes #8012
Signed-off-by: Charlie Tonneslan <cst0520@gmail.com >
2026-05-19 18:08:16 -07:00
dependabot[bot]
6f4be7103a
build(deps): bump github.com/aws/aws-sdk-go-v2/service/secretsmanager ( #8100 )
2026-05-13 22:59:03 -07:00
dependabot[bot]
ca8c14acbd
build(deps): bump the go-etcd-io group across 1 directory with 2 updates ( #8096 )
2026-05-13 21:59:59 -07:00
dependabot[bot]
e20b2233e7
build(deps): bump google.golang.org/grpc from 1.80.0 to 1.81.0 ( #8097 )
2026-05-13 21:59:47 -07:00
dependabot[bot]
c89ddc0376
build(deps): bump github.com/aws/aws-sdk-go-v2/service/route53 ( #8098 )
2026-05-13 21:59:21 -07:00
dependabot[bot]
950dbc1037
build(deps): bump github.com/aws/aws-sdk-go-v2/config ( #8104 )
2026-05-13 21:13:16 -07:00
dependabot[bot]
fe6a76e7a7
build(deps): bump sigs.k8s.io/mcs-api from 0.4.1 to 0.5.0 ( #8106 )
2026-05-13 21:12:57 -07:00
dependabot[bot]
e88dba77d4
build(deps): bump github.com/DataDog/dd-trace-go/v2 from 2.7.3 to 2.8.1 ( #8108 )
2026-05-13 21:12:38 -07:00
dependabot[bot]
f928c8d5f2
build(deps): bump google.golang.org/api from 0.276.0 to 0.278.0 ( #8107 )
2026-05-13 21:11:41 -07:00
dependabot[bot]
da784670f9
build(deps): bump golang.org/x/sys from 0.43.0 to 0.44.0 ( #8105 )
...
Bumps [golang.org/x/sys](https://github.com/golang/sys ) from 0.43.0 to 0.44.0.
- [Commits](https://github.com/golang/sys/compare/v0.43.0...v0.44.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/sys
dependency-version: 0.44.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-13 20:32:04 +03:00
dependabot[bot]
2214a0b72a
build(deps): bump github/codeql-action from 4.35.2 to 4.35.3 ( #8099 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 4.35.2 to 4.35.3.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](95e58e9a2c...e46ed2cbd0support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-13 17:24:54 +03:00
Ville Vesilehto
10e13fa561
chore: bump Go version to 1.26.3 ( #8095 )
2026-05-12 05:37:00 +03:00
dependabot[bot]
097e883c92
build(deps): bump github.com/apparentlymart/go-cidr from 1.1.0 to 1.1.1 ( #8088 )
2026-05-06 17:11:33 -07:00
Syed Azeez
b2cb44b966
feat(cache): add optional verify timeout to serve_stale ( #8070 )
2026-05-06 00:32:28 -07:00
dependabot[bot]
145029c847
build(deps): bump github.com/aws/aws-sdk-go-v2/service/secretsmanager ( #8081 )
2026-04-30 02:17:16 -07:00
dependabot[bot]
6657f44476
build(deps): bump github.com/aws/aws-sdk-go-v2/config ( #8083 )
2026-04-30 00:00:16 -07:00
dependabot[bot]
3e4c96eaa0
build(deps): bump github.com/aws/aws-sdk-go-v2/service/route53 ( #8080 )
2026-04-29 21:23:00 -07:00
dependabot[bot]
822e51d2ec
build(deps): bump github.com/DataDog/dd-trace-go/v2 from 2.7.2 to 2.7.3 ( #8078 )
2026-04-29 21:21:54 -07:00
dependabot[bot]
f3a3a66191
build(deps): bump the k8s-io group with 2 updates ( #8076 )
2026-04-29 21:21:35 -07:00
dependabot[bot]
600d62270c
build(deps): bump astral-sh/setup-uv from 8.0.0 to 8.1.0 ( #8075 )
2026-04-29 21:21:14 -07:00
Ville Vesilehto
99be1c7809
ci(verify-make-gen): limit push trigger to master ( #8069 )
...
Currently triggered on any branch push in the repo.
Signed-off-by: Ville Vesilehto <ville@vesilehto.fi >
2026-04-28 21:02:05 -07:00
dependabot[bot]
a669d74088
build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 ( #8057 )
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 7.0.0 to 7.0.1.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](bbbca2ddaa...043fb46d1asupport@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-22 07:23:43 -07:00
dependabot[bot]
34d13a46b6
build(deps): bump golang.org/x/net from 0.52.0 to 0.53.0 ( #8058 )
...
Bumps [golang.org/x/net](https://github.com/golang/net ) from 0.52.0 to 0.53.0.
- [Commits](https://github.com/golang/net/compare/v0.52.0...v0.53.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/net
dependency-version: 0.53.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-22 07:23:32 -07:00
dependabot[bot]
b5c9080a2e
build(deps): bump github.com/pires/go-proxyproto from 0.11.0 to 0.12.0 ( #8059 )
...
Bumps [github.com/pires/go-proxyproto](https://github.com/pires/go-proxyproto ) from 0.11.0 to 0.12.0.
- [Release notes](https://github.com/pires/go-proxyproto/releases )
- [Commits](https://github.com/pires/go-proxyproto/compare/v0.11.0...v0.12.0 )
---
updated-dependencies:
- dependency-name: github.com/pires/go-proxyproto
dependency-version: 0.12.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-22 07:23:21 -07:00
dependabot[bot]
1fd98b5c79
build(deps): bump google.golang.org/api from 0.275.0 to 0.276.0 ( #8062 )
...
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client ) from 0.275.0 to 0.276.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases )
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md )
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.275.0...v0.276.0 )
---
updated-dependencies:
- dependency-name: google.golang.org/api
dependency-version: 0.276.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-22 07:23:10 -07:00
dependabot[bot]
897b111d95
build(deps): bump github/codeql-action from 4.35.1 to 4.35.2 ( #8063 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 4.35.1 to 4.35.2.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](c10b8064de...95e58e9a2csupport@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-22 07:23:00 -07:00
dependabot[bot]
b04edef83b
build(deps): bump github.com/DataDog/dd-trace-go/v2 from 2.7.1 to 2.7.2 ( #8061 )
...
Bumps [github.com/DataDog/dd-trace-go/v2](https://github.com/DataDog/dd-trace-go ) from 2.7.1 to 2.7.2.
- [Release notes](https://github.com/DataDog/dd-trace-go/releases )
- [Commits](https://github.com/DataDog/dd-trace-go/compare/v2.7.1...v2.7.2 )
---
updated-dependencies:
- dependency-name: github.com/DataDog/dd-trace-go/v2
dependency-version: 2.7.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-22 07:22:48 -07:00
dependabot[bot]
11656f65ff
build(deps): bump k8s.io/apimachinery in the k8s-io group ( #8056 )
...
Bumps the k8s-io group with 1 update: [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery ).
Updates `k8s.io/apimachinery` from 0.35.3 to 0.35.4
- [Commits](https://github.com/kubernetes/apimachinery/compare/v0.35.3...v0.35.4 )
---
updated-dependencies:
- dependency-name: k8s.io/apimachinery
dependency-version: 0.35.4
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: k8s-io
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-22 07:22:38 -07:00
dependabot[bot]
88f147b620
build(deps): bump peter-evans/create-pull-request from 8.1.0 to 8.1.1 ( #8055 )
...
Bumps [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request ) from 8.1.0 to 8.1.1.
- [Release notes](https://github.com/peter-evans/create-pull-request/releases )
- [Commits](c0f553fe54...5f6978faf0support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-22 07:22:26 -07:00
dependabot[bot]
620b7b62e8
build(deps): bump softprops/action-gh-release from 2.6.1 to 3.0.0 ( #8064 )
...
Bumps [softprops/action-gh-release](https://github.com/softprops/action-gh-release ) from 2.6.1 to 3.0.0.
- [Release notes](https://github.com/softprops/action-gh-release/releases )
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md )
- [Commits](153bb8e044...b430933298support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-22 07:22:16 -07:00
dependabot[bot]
df8df84f3e
build(deps): bump golang.org/x/crypto from 0.49.0 to 0.50.0 ( #8060 )
...
Bumps [golang.org/x/crypto](https://github.com/golang/crypto ) from 0.49.0 to 0.50.0.
- [Commits](https://github.com/golang/crypto/compare/v0.49.0...v0.50.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/crypto
dependency-version: 0.50.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-22 07:22:05 -07:00
Yong Tang
17fceec6d9
Update release note for 1.14.3 ( #8053 )
2026-04-22 01:03:54 -07:00
Yong Tang
cf6a78f64d
core: Add full TSIG verification in DoH3 transport ( #8044 )
...
* core: Add full TSIG verification in DoH3 transport
This This PR add full TSIG verification in DoH3 using dns.TsigVerify() - 7943
Signed-off-by: Yong Tang <yong.tang.github@outlook.com >
* Fix
Signed-off-by: Yong Tang <yong.tang.github@outlook.com >
---------
Signed-off-by: Yong Tang <yong.tang.github@outlook.com >
2026-04-21 14:34:21 -07:00
