auth: changelog&secpoll for auth-4.4.0-beta1

diff --git a/docs/changelog/4.4.rst b/docs/changelog/4.4.rst
index e8414d71f5fe11af12465b72721f0e1500088a0c..a3acdb86b5a69d0100abae9f51521610e065cf34 100644 (file)
--- a/docs/changelog/4.4.rst
+++ b/docs/changelog/4.4.rst
@@ -1,6 +1,118 @@
 Changelogs for 4.4.x
 ====================
 
+.. changelog::
+  :version: 4.4.0-beta1
+  :released: 23rd of November 2020
+
+  This is version 4.4.0-beta1 of the Authoritative Server.
+
+  This release drops GSS/TSIG support, please see :doc:`PowerDNS Security Advisory 2020-06 <../security-advisories/powerdns-advisory-2020-06>`.
+
+  Version 4.4.0 brings a bunch of exciting changes:
+
+  * the LMDB backend now supports long record content, making it production ready for everybody
+  * the SVCB and HTTPS record types are supported, with limited additional processing
+  * transaction handling in the 2136 handler and the HTTP API was again improved a lot, avoiding various spurious issues users may have noticed if they do a lot of changes
+  * a new setting (:ref:`setting-consistent-backends`) offers a roughly 30% speedup, subject to conditions
+  * we finally emit Prometheus metrics!
+
+  We want to specifically thank Robin Geuze, Kees Monshouwer, Mischan Toosarani-Hausberger, Chris Hofstaedtler, and Kevin Fleming for their contributions to this release.
+  We are also grateful to all other reporters of bugs, issues, feature requests, and submitters of smaller fixes and features.
+
+  Please make sure to read the :doc:`upgrade notes <../upgrading>` before upgrading.
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 9735
+
+    pdnsutil check-zone: DNAME fixes
+
+  .. change::
+    :tags: Improvements
+    :pullreq: 9704
+
+    nxdomain performance (Kees Monshouwer)
+
+  .. change::
+    :tags: Improvements
+    :pullreq: 9731
+
+    logging: put quotes around some IPs to make messages easier to read
+
+  .. change::
+    :tags: New Features
+    :pullreq: 9713
+
+    allow ip ranges as trusted-notification-proxy
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 8707
+
+    lmdb: fill di.serial (this fixes the 'serial=0' API bug)
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 9714
+
+    disable mysql automatic charset detection (see :doc:`upgrade notes <../upgrading>`)
+
+  .. change::
+    :tags: Improvements
+    :pullreq: 9712
+
+    Use Python 3 in build system (Kevin Fleming)
+
+  .. change::
+    :tags: New Features
+    :pullreq: 8911
+
+    Add '/api/docs' endpoint to Auth server (Kevin Fleming)
+
+  .. change::
+    :tags: Improvements
+    :pullreq: 9688
+
+    adjust AXFR, IXFR events loglevels (Kees Monshouwer)
+
+  .. change::
+    :tags: New Features
+    :pullreq: 8608
+
+    geoipbackend: accept custom lookup mapping (criteo-forks)
+
+  .. change::
+    :tags: Improvements
+    :pullreq: 9692
+
+    pdnsutil zone key improvements (Chris Hofstaedtler)
+
+  .. change::
+    :tags: New Features
+    :pullreq: 9693
+
+    make it possible to replace now supported TYPExx records (Kees Monshouwer)
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 9174
+
+    tinydnsbackend: Ignore duplicate SOA in getAllDomains()
+
+  .. change::
+    :tags: Improvements
+    :pullreq: 9685
+    :issues: 9675
+
+    add some missing counters. Fixes #9675
+
+  .. change::
+    :tags: New Features
+    :pullreq: 9239
+
+    Add pdns_control command to the the list of XFR domains in queue
+
 .. changelog::
   :version: 4.4.0-alpha3
   :released: 5th of November 2020

diff --git a/docs/secpoll.zone b/docs/secpoll.zone
index c90b11f8496c288dc38f7168ea806223521b5b39..07932af2408f31d5a4ab248f1cac3fb6382878d0 100644 (file)
--- a/docs/secpoll.zone
+++ b/docs/secpoll.zone
@@ -1,4 +1,4 @@
-@       86400   IN  SOA pdns-public-ns1.powerdns.com. pieter\.lexis.powerdns.com. 2020110501 10800 3600 604800 10800
+@       86400   IN  SOA pdns-public-ns1.powerdns.com. pieter\.lexis.powerdns.com. 2020112301 10800 3600 604800 10800
 @       3600    IN  NS  pdns-public-ns1.powerdns.com.
 @       3600    IN  NS  pdns-public-ns2.powerdns.com.
 
@@ -72,7 +72,8 @@ auth-4.3.0.security-status                              60 IN TXT "3 Upgrade now
 auth-4.3.1.security-status                              60 IN TXT "1 OK"
 auth-4.4.0-alpha1.security-status                       60 IN TXT "2 Unsupported pre-release (no known vulnerabilities)"
 auth-4.4.0-alpha2.security-status                       60 IN TXT "2 Unsupported pre-release (no known vulnerabilities)"
-auth-4.4.0-alpha3.security-status                       60 IN TXT "1 OK"
+auth-4.4.0-alpha3.security-status                       60 IN TXT "2 Unsupported pre-release (no known vulnerabilities)"
+auth-4.4.0-beta1.security-status                        60 IN TXT "1 OK"
 
 ; Auth Debian
 auth-3.4.1-2.debian.security-status                     60 IN TXT "3 Upgrade now, see https://doc.powerdns.com/3/security/powerdns-advisory-2015-01/ and https://doc.powerdns.com/3/security/powerdns-advisory-2015-02/ and https://doc.powerdns.com/3/security/powerdns-advisory-2016-02/ and https://doc.powerdns.com/3/security/powerdns-advisory-2016-03/ and https://doc.powerdns.com/3/security/powerdns-advisory-2016-04/ and https://doc.powerdns.com/3/security/powerdns-advisory-2016-05/"