Mirrors/coredns
1
0
Fork 0
mirror of https://github.com/coredns/coredns.git synced 2026-08-20 23:08:28 -04:00
Code Issues Packages Projects Releases Wiki Activity
4,950 Commits 14 Branches 85 Tags
989bf4a9fd9af1a6d017ba5caee8d1bb3b48b999
Commit Graph

4950 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Baltasar Blanco
989bf4a9fd plugin/file: resolve each additional section target only once (#8286) 
* plugin/file: resolve each additional section target only once

additionalProcessing walked the answer and appended each target's address records without keeping track of the targets it had already resolved. An answer holding several records that point at one target, two MX records differing only in preference for instance, therefore repeated that target's A, AAAA and RRSIGs once per record. SRV, SVCB and HTTPS take the same path and behaved the same way. plugin/backend_lookup.go already skips targets it has seen; the file plugin never did.

Targets are compared in canonical form because SRV targets are not lowercased on insert, so one target can reach additional processing spelled two ways while the zone's tree still matches it case-insensitively. The map is allocated on first use, as additionalProcessing runs for every answer and most carry no target at all.

Fixes #6626

Signed-off-by: baltasarblanco <baltablanco9008@gmail.com>

* plugin/file: move additional section tests to lookup_test.go

The cases exercise additionalProcessing, which lives in lookup.go, so they belong with the rest of the lookup tests. No test logic is changed.

Addresses review feedback.

Signed-off-by: baltasarblanco <baltablanco9008@gmail.com>

---------

Signed-off-by: baltasarblanco <baltablanco9008@gmail.com>
 2026-07-24 15:10:04 -07:00
llucas
73d1eacf87 plugin/forward: Add http(2) host/authority header and TO server resolution (#8233) 2026-07-22 19:07:09 -07:00
liucongran
56f7c09311 fix(rewrite): preserve original request during rewrites (#8235) 2026-07-22 19:06:29 -07:00
houyuwushang
55949d626b core/dnsserver: normalize server block zones (#8320) 2026-07-22 19:04:15 -07:00
dependabot[bot]
1cf446a2b5 build(deps): bump github.com/aws/aws-sdk-go-v2/service/route53 (#8334) 2026-07-22 15:22:37 -07:00
dependabot[bot]
b707b548ba build(deps): bump sigs.k8s.io/mcs-api from 0.5.1 to 0.5.2 (#8331) 2026-07-22 15:21:15 -07:00
dependabot[bot]
d27043faee build(deps): bump github.com/prometheus/common from 0.69.0 to 0.70.0 (#8328) 2026-07-22 15:20:55 -07:00
dependabot[bot]
f9dde873ea build(deps): bump google.golang.org/api from 0.287.1 to 0.288.0 (#8330) 
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.287.1 to 0.288.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.287.1...v0.288.0)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-version: 0.288.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-07-22 22:08:42 +03:00
dependabot[bot]
6407da1d3a build(deps): bump github.com/pires/go-proxyproto from 0.14.0 to 0.15.0 (#8325) 
Bumps [github.com/pires/go-proxyproto](https://github.com/pires/go-proxyproto) from 0.14.0 to 0.15.0.
- [Release notes](https://github.com/pires/go-proxyproto/releases)
- [Commits](https://github.com/pires/go-proxyproto/compare/v0.14.0...v0.15.0)

---
updated-dependencies:
- dependency-name: github.com/pires/go-proxyproto
  dependency-version: 0.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-07-22 20:20:19 +03:00
dependabot[bot]
908c417901 build(deps): bump github.com/aws/aws-sdk-go-v2/config (#8324) 
Bumps [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) from 1.32.28 to 1.32.30.
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/config/v1.32.28...config/v1.32.30)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2/config
  dependency-version: 1.32.30
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-07-22 20:12:38 +03:00
dependabot[bot]
0a5a142f25 build(deps): bump google.golang.org/grpc from 1.82.0 to 1.82.1 (#8336) 
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.82.0 to 1.82.1.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.82.0...v1.82.1)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-version: 1.82.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-07-22 20:10:13 +03:00
dependabot[bot]
e2cfeeaecc build(deps): bump github.com/aws/aws-sdk-go-v2/credentials (#8326) 
Bumps [github.com/aws/aws-sdk-go-v2/credentials](https://github.com/aws/aws-sdk-go-v2) from 1.19.27 to 1.19.29.
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/credentials/v1.19.27...credentials/v1.19.29)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2/credentials
  dependency-version: 1.19.29
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-07-22 19:02:11 +03:00
dependabot[bot]
899eac64d5 build(deps): bump github.com/aws/aws-sdk-go-v2/service/secretsmanager (#8327) 2026-07-22 17:07:59 +03:00
dependabot[bot]
5055bba5f5 build(deps): bump softprops/action-gh-release from 3.0.1 to 3.0.2 (#8332) 2026-07-22 17:07:18 +03:00
dependabot[bot]
658fef8ffb build(deps): bump actions/stale from 10.3.0 to 10.4.0 (#8333) 2026-07-22 17:06:56 +03:00
dependabot[bot]
db7dac269b build(deps): bump actions/setup-go from 6.5.0 to 7.0.0 (#8323) 2026-07-22 17:06:31 +03:00
dependabot[bot]
243191c774 build(deps): bump golang.org/x/net from 0.56.0 to 0.57.0 (#8329) 2026-07-22 17:06:07 +03:00
Yong Tang
e0a8eb8a46 Add max conn limit to https3 (#8187) 
* Add max conn limit to https3

This PR adds max conn limit to https3, similiar to https

Signed-off-by: Yong Tang <yong.tang.github@outlook.com>

* Add Test to cover change

Signed-off-by: Yong Tang <yong.tang.github@outlook.com>

* Address review feedback

Signed-off-by: Yong Tang <yong.tang.github@outlook.com>

* Update README and setup

Signed-off-by: Yong Tang <yong.tang.github@outlook.com>

* Update plugin/https3/README.md

Co-authored-by: Ville Vesilehto <ville@vesilehto.fi>
Signed-off-by: Yong Tang <yong.tang.github@outlook.com>

---------

Signed-off-by: Yong Tang <yong.tang.github@outlook.com>
Co-authored-by: Ville Vesilehto <ville@vesilehto.fi>
 2026-07-21 15:52:31 -07:00
Yong Tang
989a188d13 plugin/forward: Fix UDP forwarding so a malformed upstream datagram wont block valid ones later (#8287) 
* plugin/plugin: Fix UDP forwarding so a malformed upstream datagram wont block valid ones later

This PR fixes UDP forwarding so a malformed upstream datagram
does not prevent CoreDNS from accepting a subsequent valid response
before the existing read deadline.

Signed-off-by: Yong Tang <yong.tang.github@outlook.com>

* Address review and add additonal tests

Signed-off-by: Yong Tang <yong.tang.github@outlook.com>

* Cover branch

Signed-off-by: Yong Tang <yong.tang.github@outlook.com>

---------

Signed-off-by: Yong Tang <yong.tang.github@outlook.com>
 2026-07-21 15:21:25 -07:00
maximilize
d1a6ab0eb9 plugin/auto: fix inverted arguments in duplicate-origin warning (#8317) 
The warning added in #8216 passed the skipped file where the kept file
belongs and vice versa, so it logged "using <skipped> instead of <kept>"
— the reverse of what Walk actually does. Swap the arguments (and use
cleanPath for both) so the message names the file that is being used.
Strengthen TestWalkWarnsForDuplicateOrigin to assert the direction; it
only checked that both names appeared, so the inversion passed before.

Signed-off-by: maximilize <3752128+maximilize@users.noreply.github.com>
 2026-07-21 12:55:47 +03:00
Ville Vesilehto
0410236577 test(file): stabilize mtime reload (#8318) 
Make mtime reload tests tolerate slow scheduling and coarse filesystem
timestamp resolution. This keeps immediate rewrites observable and
avoids checking zone contents before the reload completes.

Signed-off-by: Ville Vesilehto <ville@vesilehto.fi>
 2026-07-20 14:54:13 -07:00
houyuwushang
98bdb44f4d plugin/hosts: make unsupported type fallthrough opt-in (#8282) 2026-07-19 19:59:12 -07:00
Yong Tang
201d86a098 core: Add connection-level concurrency limiting to DNS-over-QUIC (#8213) 
* core: Add connection-level concurrency limiting to DNS-over-QUIC

This PR adds max connections to prevent unbounded connection goroutine growth
for DoQ

Signed-off-by: Yong Tang <yong.tang.github@outlook.com>

* Add test to cover change

Signed-off-by: Yong Tang <yong.tang.github@outlook.com>

---------

Signed-off-by: Yong Tang <yong.tang.github@outlook.com>
 2026-07-19 03:52:42 -07:00
Ville Vesilehto
077774e0cd ci: run plugin tests on Windows (#8314) 
Plugin package tests previously ran only on Linux, so Windows-
specific failures were never caught. Run them in CI and make the
affected tests portable across platforms.

Signed-off-by: Ville Vesilehto <ville@vesilehto.fi>
 2026-07-19 03:52:23 -07:00
Yong Tang
96ec17d5c6 plugin/forward: Fix incorrect retry of local DNS message serialization failures (#8313) 
This PR fixes the forward plugin incorrectly retrying deterministic
local DNS message serialization failures as if they were upstream transport errors.

Signed-off-by: Yong Tang <yong.tang.github@outlook.com>
 2026-07-19 03:48:00 -07:00
Ville Vesilehto
57f73b4a43 Merge commit from fork 
Ensure DoH, DoH3, DoQ, and DNS-over-gRPC continue to reject RFC 2136
UPDATE requests before dispatch. This guards the common request
acceptance policy across every affected transport.

Signed-off-by: Ville Vesilehto <ville@vesilehto.fi>
 2026-07-18 20:36:05 -07:00
Ville Vesilehto
c1fe47bc3a test(tls): make keylog path test portable (#8311) 
Directory permission checks can be bypassed by privileged users and may
behave differently on filesystems with nonstandard permission semantics.

Make the bad-path case deterministic so TLS keylog tests remain portable
across supported environments.

Signed-off-by: Ville Vesilehto <ville@vesilehto.fi>
 2026-07-18 20:11:48 -07:00
Ncesam
e1f4d0cb90 plugin/rewrite: normalize exact cname rewrite targets and preserve all records (#8285) 
Signed-off-by: ncesam <rybushkin09@bk.ru>
 2026-07-15 18:06:03 -07:00
Ncesam
99b683aa41 plugin/transfer: collect all notify errors instead of shadowing (#8283) 
* plugin/transfer: collect all notify errors instead of shadowing

Signed-off-by: ncesam <rybushkin09@bk.ru>

* plugin/transfer: add regression test for notify multiple failures

Signed-off-by: ncesam <rybushkin09@bk.ru>

---------

Signed-off-by: ncesam <rybushkin09@bk.ru>
 2026-07-15 18:05:01 -07:00
Ville Vesilehto
530b0a5ff2 Merge commit from fork 
DoH, DoQ, and DNS-over-gRPC unpack messages without the acceptance
checks used by UDP and TCP. An unauthenticated request with a large
QDCOUNT can therefore force excessive allocations while names are
decoded and exhaust server memory.

Enforce the same request policy across all server transports.

Signed-off-by: Ville Vesilehto <ville@vesilehto.fi>
 2026-07-15 17:54:46 -07:00
dependabot[bot]
d5e54040ff build(deps): bump the go-etcd-io group with 2 updates (#8292) 
Bumps the go-etcd-io group with 2 updates: [go.etcd.io/etcd/api/v3](https://github.com/etcd-io/etcd) and [go.etcd.io/etcd/client/v3](https://github.com/etcd-io/etcd).


Updates `go.etcd.io/etcd/api/v3` from 3.6.12 to 3.6.13
- [Release notes](https://github.com/etcd-io/etcd/releases)
- [Commits](https://github.com/etcd-io/etcd/compare/v3.6.12...v3.6.13)

Updates `go.etcd.io/etcd/client/v3` from 3.6.12 to 3.6.13
- [Release notes](https://github.com/etcd-io/etcd/releases)
- [Commits](https://github.com/etcd-io/etcd/compare/v3.6.12...v3.6.13)

---
updated-dependencies:
- dependency-name: go.etcd.io/etcd/api/v3
  dependency-version: 3.6.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-etcd-io
- dependency-name: go.etcd.io/etcd/client/v3
  dependency-version: 3.6.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-etcd-io
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-07-15 23:03:41 +03:00
dependabot[bot]
a1aef3a70f build(deps): bump github.com/aws/aws-sdk-go-v2/config (#8294) 
Bumps [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) from 1.32.26 to 1.32.28.
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/config/v1.32.26...config/v1.32.28)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2/config
  dependency-version: 1.32.28
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-07-15 23:02:51 +03:00
dependabot[bot]
04280acbf4 build(deps): bump github.com/aws/aws-sdk-go-v2/credentials (#8299) 2026-07-15 12:15:08 -07:00
dependabot[bot]
8fe5801bf1 build(deps): bump google.golang.org/api from 0.280.0 to 0.287.1 (#8295) 
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.280.0 to 0.287.1.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.280.0...v0.287.1)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-version: 0.287.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-07-15 07:30:23 -07:00
dependabot[bot]
621eb4d05b build(deps): bump github.com/aws/aws-sdk-go-v2/service/secretsmanager (#8301) 
Bumps [github.com/aws/aws-sdk-go-v2/service/secretsmanager](https://github.com/aws/aws-sdk-go-v2) from 1.42.4 to 1.43.0.
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/amp/v1.42.4...service/s3/v1.43.0)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2/service/secretsmanager
  dependency-version: 1.43.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-07-15 07:29:59 -07:00
dependabot[bot]
751e0c25e7 build(deps): bump github.com/aws/aws-sdk-go-v2/feature/ec2/imds (#8303) 
Bumps [github.com/aws/aws-sdk-go-v2/feature/ec2/imds](https://github.com/aws/aws-sdk-go-v2) from 1.18.29 to 1.18.30.
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/config/v1.18.29...config/v1.18.30)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2/feature/ec2/imds
  dependency-version: 1.18.30
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-07-15 07:29:35 -07:00
dependabot[bot]
92f677c89c build(deps): bump github.com/pires/go-proxyproto from 0.13.0 to 0.14.0 (#8304) 
Bumps [github.com/pires/go-proxyproto](https://github.com/pires/go-proxyproto) from 0.13.0 to 0.14.0.
- [Release notes](https://github.com/pires/go-proxyproto/releases)
- [Commits](https://github.com/pires/go-proxyproto/compare/v0.13.0...v0.14.0)

---
updated-dependencies:
- dependency-name: github.com/pires/go-proxyproto
  dependency-version: 0.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-07-15 07:29:03 -07:00
dependabot[bot]
ccc7745f2e build(deps): bump sigs.k8s.io/mcs-api from 0.5.0 to 0.5.1 (#8308) 
Bumps [sigs.k8s.io/mcs-api](https://github.com/kubernetes-sigs/mcs-api) from 0.5.0 to 0.5.1.
- [Release notes](https://github.com/kubernetes-sigs/mcs-api/releases)
- [Changelog](https://github.com/kubernetes-sigs/mcs-api/blob/master/RELEASE.md)
- [Commits](https://github.com/kubernetes-sigs/mcs-api/compare/v0.5.0...v0.5.1)

---
updated-dependencies:
- dependency-name: sigs.k8s.io/mcs-api
  dependency-version: 0.5.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-07-15 07:28:39 -07:00
dependabot[bot]
f76b78c8a9 build(deps): bump github.com/aws/aws-sdk-go-v2 from 1.42.0 to 1.42.1 (#8305) 
Bumps [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) from 1.42.0 to 1.42.1.
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/v1.42.0...v1.42.1)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2
  dependency-version: 1.42.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-07-15 17:02:55 +03:00
dependabot[bot]
9d831348f9 build(deps): bump astral-sh/setup-uv from 8.2.0 to 8.3.2 (#8297) 
Bumps [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) from 8.2.0 to 8.3.2.
- [Release notes](https://github.com/astral-sh/setup-uv/releases)
- [Commits](fac544c07d...11f9893b08)

---
updated-dependencies:
- dependency-name: astral-sh/setup-uv
  dependency-version: 8.3.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-07-15 17:02:41 +03:00
dependabot[bot]
36e802a6df build(deps): bump docker/login-action from 4.2.0 to 4.4.0 (#8298) 
Bumps [docker/login-action](https://github.com/docker/login-action) from 4.2.0 to 4.4.0.
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](650006c6eb...af1e73f918)

---
updated-dependencies:
- dependency-name: docker/login-action
  dependency-version: 4.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-07-15 17:02:25 +03:00
dependabot[bot]
c6191e2bf1 build(deps): bump github.com/aws/aws-sdk-go-v2/service/route53 (#8307) 
Bumps [github.com/aws/aws-sdk-go-v2/service/route53](https://github.com/aws/aws-sdk-go-v2) from 1.63.4 to 1.64.0.
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/ecs/v1.63.4...service/s3/v1.64.0)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2/service/route53
  dependency-version: 1.64.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-07-15 17:01:38 +03:00
dependabot[bot]
2bff8bb74e build(deps): bump github/codeql-action/upload-sarif (#8296) 
Bumps [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) from 4.36.2 to 4.37.0.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](8aad20d150...99df26d4f1)

---
updated-dependencies:
- dependency-name: github/codeql-action/upload-sarif
  dependency-version: 4.37.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-07-15 16:54:25 +03:00
dependabot[bot]
f4e55c166e build(deps): bump github/codeql-action/analyze from 4.36.2 to 4.37.0 (#8300) 
Bumps [github/codeql-action/analyze](https://github.com/github/codeql-action) from 4.36.2 to 4.37.0.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](8aad20d150...99df26d4f1)

---
updated-dependencies:
- dependency-name: github/codeql-action/analyze
  dependency-version: 4.37.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-07-15 16:54:01 +03:00
dependabot[bot]
035b553840 build(deps): bump github/codeql-action/autobuild from 4.36.2 to 4.37.0 (#8293) 
Bumps [github/codeql-action/autobuild](https://github.com/github/codeql-action) from 4.36.2 to 4.37.0.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](8aad20d150...99df26d4f1)

---
updated-dependencies:
- dependency-name: github/codeql-action/autobuild
  dependency-version: 4.37.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-07-15 16:53:38 +03:00
dependabot[bot]
6829a7308f build(deps): bump github/codeql-action/init from 4.36.2 to 4.37.0 (#8302) 
Bumps [github/codeql-action/init](https://github.com/github/codeql-action) from 4.36.2 to 4.37.0.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](8aad20d150...99df26d4f1)

---
updated-dependencies:
- dependency-name: github/codeql-action/init
  dependency-version: 4.37.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-07-15 16:52:58 +03:00
Yong Tang
18a58b9e89 plugin/acl: Fix autopath from bypassing acl checks (#8290) 
This fix prevents CoreDNS `autopath` from bypassing `acl` checks
when it rewrites an allowed query into a name within an ACL-protected zone.

Signed-off-by: Yong Tang <yong.tang.github@outlook.com>
 2026-07-14 22:36:06 -07:00
Yong Tang
1ba14119d0 plugin/acl: Fix blocked clients from receiving cached DNS answers (#8289) 
This PR fixes plugin ordering so ACL checks run before cache lookups,
preventing blocked clients from receiving cached DNS answers populated by allowed clients

Signed-off-by: Yong Tang <yong.tang.github@outlook.com>
 2026-07-14 22:26:49 -07:00
houyuwushang
7cd99da013 plugin/secondary: reset catalog members on ID change (#8281) 
Signed-off-by: houyuwushang <liuluoqianqiu@outlook.com>
 2026-07-14 18:51:12 -07:00
Yong Tang
5131b8f944 plugin/proxyproto: Apply an explicitly configured default policy evenwhen no allow list is present. (#8278) 
* plugin/proxyproto: Apply an explicitly configured default policy even when no allow list is present.

This PR fix the issue where explicitly configured default reject policy
is ignoreed when no allo list is present

Signed-off-by: Yong Tang <yong.tang.github@outlook.com>

* golint fix

Signed-off-by: Yong Tang <yong.tang.github@outlook.com>

---------

Signed-off-by: Yong Tang <yong.tang.github@outlook.com>
 2026-07-13 17:34:30 -07:00