auth-4.7.0-rc1: secpoll&changelog

diff --git a/.github/actions/spell-check/expect.txt b/.github/actions/spell-check/expect.txt
index a5285d570a56a57670563b4ddc94465d02453950..98f0e13a484de11dbf1d185d430d930efe4d581d 100644 (file)
--- a/.github/actions/spell-check/expect.txt
+++ b/.github/actions/spell-check/expect.txt
@@ -819,6 +819,7 @@ keyname
 keypair
 keypairgen
 keyroll
+keyroller
 keysearch
 keysize
 keytab

diff --git a/docs/changelog/4.7.rst b/docs/changelog/4.7.rst
index 3d12eae59fda9dfa9b6697a2f4e762ef27b3c42b..117aeb54b3a13ec632a568dc9bf3658c68353db7 100644 (file)
--- a/docs/changelog/4.7.rst
+++ b/docs/changelog/4.7.rst
@@ -1,6 +1,67 @@
 Changelogs for 4.7.x
 ====================
 
+.. changelog::
+  :version: 4.7.0-rc1
+  :released: 3rd of October 2022
+
+  This is the first release candidate for Authoritative Server 4.7.0.
+
+  4.7.0 brings support for :doc:`Catalog Zones <../catalog>`, developed by Kees Monshouwer.
+  As part of that development, the freshness checks in the Primary code were reworked, reducing them from doing potentially thousands of SQL queries (if you have thousands of domains) to only a few.
+  Installations with lots of domains will benefit greatly from this, even without using catalog zones.
+
+  4.7.0 also brings back GSS-TSIG support, previously removed for quality reasons, now reworked with many stability improvements.
+
+  Other things of note:
+
+  * LUA records, when queried over TCP, can now re-use a Lua state, giving a serious performance boost.
+  * lmdbbackend databases now get a UUID assigned, making it easy for external software to spot if a database was completely replaced
+  * lmdbbackend databases now optionally use random IDs for objects
+  * a new LUA function called ``ifurlextup``, and improvements in other LUA record functions
+  * autoprimary management in ``pdnsutil`` and the HTTP API
+  * in beta, a key roller daemon, currently not packaged
+
+  Please make sure to read the :doc:`upgrade notes <../upgrading>` before upgrading.
+
+  Besides that, various other smaller features and improvements have landed - please browse the list below.
+
+  .. change::
+    :tags: 
+    :pullreq: 12043
+
+    AXFR server: abort on chunk with TC set
+
+  .. change::
+    :tags: 
+    :pullreq: 12042
+
+    add keyroller
+
+  .. change::
+    :tags: 
+    :pullreq: 12040
+
+    pdnsutil edit-zone, detect capitalization changes in LUA, TXT and SPF records (Kees Monshouwer)
+
+  .. change::
+    :tags: 
+    :pullreq: 12030
+
+    axfr-retriever: abort on chunk with TC set
+
+  .. change::
+    :tags: 
+    :pullreq: 12029
+
+    clang14 has reached MacOS
+
+  .. change::
+    :tags: 
+    :pullreq: 11972
+
+    docker: upgrade to bullseye
+
 .. changelog::
   :version: 4.7.0-beta2
   :released: 13th of September 2022

diff --git a/docs/secpoll.zone b/docs/secpoll.zone
index 5b8de6354cca797d28db00f6b3cc025705a2d24d..77bb267c37925fdeff6a81d54c6c05b38d0d791b 100644 (file)
--- a/docs/secpoll.zone
+++ b/docs/secpoll.zone
@@ -1,4 +1,4 @@
-@       86400   IN  SOA pdns-public-ns1.powerdns.com. peter\.van\.dijk.powerdns.com. 2022092301 10800 3600 604800 10800
+@       86400   IN  SOA pdns-public-ns1.powerdns.com. peter\.van\.dijk.powerdns.com. 2022100301 10800 3600 604800 10800
 @       3600    IN  NS  pdns-public-ns1.powerdns.com.
 @       3600    IN  NS  pdns-public-ns2.powerdns.com.
 
@@ -109,7 +109,8 @@ auth-4.6.1.security-status                              60 IN TXT "1 OK"
 auth-4.6.2.security-status                              60 IN TXT "1 OK"
 auth-4.6.3.security-status                              60 IN TXT "1 OK"
 auth-4.7.0-alpha1.security-status                       60 IN TXT "3 Unsupported pre-release (known vulnerabilities)"
-auth-4.7.0-beta2.security-status                        60 IN TXT "1 Unsupported pre-release"
+auth-4.7.0-beta2.security-status                        60 IN TXT "3 Unsupported pre-release"
+auth-4.7.0-rc1.security-status                          60 IN TXT "1 Unsupported pre-release"
 
 ; Auth Debian
 auth-3.4.1-2.debian.security-status                     60 IN TXT "3 Upgrade now, see https://doc.powerdns.com/3/security/powerdns-advisory-2015-01/ and https://doc.powerdns.com/3/security/powerdns-advisory-2015-02/ and https://doc.powerdns.com/3/security/powerdns-advisory-2016-02/ and https://doc.powerdns.com/3/security/powerdns-advisory-2016-03/ and https://doc.powerdns.com/3/security/powerdns-advisory-2016-04/ and https://doc.powerdns.com/3/security/powerdns-advisory-2016-05/"