5.0.0 release notes and secpoll update

Signed-off-by: Miod Vallat <miod.vallat@powerdns.com>

diff --git a/.github/actions/spell-check/expect.txt b/.github/actions/spell-check/expect.txt
index 23a12fc9f125206348acab7cf8c04f3215932b60..c0500b58f17b8e6b1db03b0a6f8fcf01120ad929 100644 (file)
--- a/.github/actions/spell-check/expect.txt
+++ b/.github/actions/spell-check/expect.txt
@@ -246,6 +246,7 @@ cvstrac
 CXXFLAGS
 cxxsettings
 cxxsupport
+Cybertinus
 daemonized
 daemonizing
 daemontools

diff --git a/docs/appendices/EOL.rst b/docs/appendices/EOL.rst
index 19177e5033d2bc09480701a4ab2501cad3219ee9..2d1d42919489831f4127ec9390a09a4d0ccd990d 100644 (file)
--- a/docs/appendices/EOL.rst
+++ b/docs/appendices/EOL.rst
@@ -7,13 +7,13 @@ The two releases before that get critical updates only.
 Older releases are marked end of life and receive no updates at all.
 Pre-releases do not receive immediate security updates.
 
-The currently supported release train of PowerDNS Authoritative Server is 4.9.
+The currently supported release train of PowerDNS Authoritative Server is 5.0.
 
-PowerDNS Authoritative Server 4.8 will only receive critical updates; it will be end of life after PowerDNS Authoritative Server 5.1 is released.
+PowerDNS Authoritative Server 4.9 will only receive critical updates; it will be end of life after PowerDNS Authoritative Server 5.2 is released.
 
-PowerDNS Authoritative Server 4.7 will only receive critical updates; it will be end of life after PowerDNS Authoritative Server 5.0 is released.
+PowerDNS Authoritative Server 4.8 will only receive critical updates; it will be end of life after PowerDNS Authoritative Server 5.1 is released.
 
-PowerDNS Authoritative Server 4.0 through 4.6, 3.x, and 2.x are End of Life.
+PowerDNS Authoritative Server 4.0 through 4.7, 3.x, and 2.x are End of Life.
 
 Note: Users with a commercial agreement with PowerDNS.COM BV or Open-Xchange
 can receive extended support for releases which are End Of Life. If you are
@@ -26,18 +26,22 @@ such a user, these EOL statements do not apply to you.
      - Release date
      - Critical-Only updates
      - End of Life
+   * - 5.0
+     - 22nd of August 2025
+     - ~ March 2026
+     - ~ March 2027
    * - 4.9
      - 15th of March 2024
-     - ~ March 2025
-     - ~ March 2026
+     - 22nd of August 2025
+     - ~ September 2026
    * - 4.8
      - 1st of June 2023
      - 15th of March 2024
-     - ~ September 2025
+     - ~ March 2026
    * - 4.7
      - 20th of October 2022
      - 1st of June 2023
-     - ~ March 2025
+     - EOL August 2025
    * - 4.6
      - January 2022
      - October 2022
@@ -70,7 +74,7 @@ PowerDNS Authoritative Server 3.x
 The PowerDNS Authoritative Server 3.x releases are no longer supported, and
 will not receive any further updates, not even for security purposes.
 
-All users are urged to upgrade to the latest version.  To upgrade from 3.x to 4.x,
+All users are urged to upgrade to the latest version.  To upgrade from 3.x or 4.x to 5.x,
 :doc:`follow these instructions <../upgrading>`
 
 If you need help with upgrading, we provide `migration
@@ -105,12 +109,12 @@ case for a long time, but with this statement we make it formal.
 
 To upgrade to 3.x, please consult the `instructions on how to upgrade
 the database <https://doc.powerdns.com/3/authoritative/upgrading/#29x-to-30>`__.
-To upgrade from 3.x to 4.x, :doc:`follow these instructions <../upgrading>`.
+To upgrade from 3.x or 4.x to 5.x, :doc:`follow these instructions <../upgrading>`.
 If you need help with upgrading, we provide `migration
 services <https://www.powerdns.com/support-services-consulting.html>`__
 to our supported users. If you are currently running 2.9.22 and need
 help to tide you over, we can also provide that as part of a `support
 agreement <https://www.powerdns.com/support-services-consulting.html>`__.
 
-But we urge everyone to move on to PowerDNS Authoritative Server 4.x - it is a faster, more standards conforming and more powerful
+But we urge everyone to move on to PowerDNS Authoritative Server 5.x - it is a faster, more standards conforming and more powerful
 nameserver!

diff --git a/docs/changelog/5.0.rst b/docs/changelog/5.0.rst
index f62421e96a78677f2e8ee02dd8f8d43367299358..b4d230c9bded69bb09d0423e2041ff91e4c7f459 100644 (file)
--- a/docs/changelog/5.0.rst
+++ b/docs/changelog/5.0.rst
@@ -1,6 +1,33 @@
 Changelogs for 5.0.x
 ====================
 
+.. changelog::
+  :version: 5.0.0
+  :released: 22nd of August 2025
+
+  This is release 5.0.0 of the Authoritative Server.
+  It contains minor bugfixes and improvements over the 5.0.0-beta1
+  release.
+
+  .. change::
+    :tags: New Features
+    :pullreq: 15948
+    :tickets: 15941
+
+    Auth: random edns cookies
+
+  .. change::
+    :tags: Improvements
+    :pullreq: 14927
+
+    Update pdnsutil.bash_completion.d (Cybertinus)
+
+  .. change::
+    :tags: Improvements
+    :pullreq: 15603
+
+    SVCB: allow parsing keys in generic format without value (Chris Hofstaedtler)
+
 .. changelog::
   :version: 5.0.0-beta1
   :released: 24th of July 2025

diff --git a/docs/secpoll.zone b/docs/secpoll.zone
index 9f2d26ac9eaa6f55ec9882b6a060b52668fa0a07..ca72759cbc02851aa382d08a6b6b9414939a4488 100644 (file)
--- a/docs/secpoll.zone
+++ b/docs/secpoll.zone
@@ -1,4 +1,4 @@
-@       86400   IN  SOA pdns-public-ns1.powerdns.com. peter\.van\.dijk.powerdns.com. 2025082101 10800 3600 604800 10800
+@       86400   IN  SOA pdns-public-ns1.powerdns.com. peter\.van\.dijk.powerdns.com. 2025082201 10800 3600 604800 10800
 @       3600    IN  NS  pdns-public-ns1.powerdns.com.
 @       3600    IN  NS  pdns-public-ns2.powerdns.com.
 
@@ -99,25 +99,25 @@ auth-4.5.0.security-status                              60 IN TXT "3 Upgrade now
 auth-4.5.1.security-status                              60 IN TXT "3 Upgrade now, see https://doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2022-01.html"
 auth-4.5.2.security-status                              60 IN TXT "3 Upgrade now, see https://doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2022-01.html"
 auth-4.5.3.security-status                              60 IN TXT "3 Upgrade now, see https://doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2022-01.html"
-auth-4.5.4.security-status                              60 IN TXT "1 OK"
-auth-4.5.5.security-status                              60 IN TXT "1 OK"
+auth-4.5.4.security-status                              60 IN TXT "3 Unsupported release (EOL)"
+auth-4.5.5.security-status                              60 IN TXT "3 Unsupported release (EOL)"
 auth-4.6.0-alpha1.security-status                       60 IN TXT "3 Unsupported pre-release (known vulnerabilities)"
 auth-4.6.0-beta1.security-status                        60 IN TXT "3 Unsupported pre-release (known vulnerabilities)"
 auth-4.6.0-rc1.security-status                          60 IN TXT "3 Unsupported pre-release (known vulnerabilities)"
 auth-4.6.0.security-status                              60 IN TXT "3 Upgrade now, see https://doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2022-01.html"
-auth-4.6.1.security-status                              60 IN TXT "1 OK"
-auth-4.6.2.security-status                              60 IN TXT "1 OK"
-auth-4.6.3.security-status                              60 IN TXT "1 OK"
-auth-4.6.4.security-status                              60 IN TXT "1 OK"
+auth-4.6.1.security-status                              60 IN TXT "3 Unsupported release (EOL)"
+auth-4.6.2.security-status                              60 IN TXT "3 Unsupported release (EOL)"
+auth-4.6.3.security-status                              60 IN TXT "3 Unsupported release (EOL)"
+auth-4.6.4.security-status                              60 IN TXT "3 Unsupported release (EOL)"
 auth-4.7.0-alpha1.security-status                       60 IN TXT "3 Unsupported pre-release (known vulnerabilities)"
 auth-4.7.0-beta2.security-status                        60 IN TXT "3 Unsupported pre-release"
 auth-4.7.0-rc1.security-status                          60 IN TXT "3 Unsupported pre-release"
-auth-4.7.0.security-status                              60 IN TXT "1 OK"
-auth-4.7.1.security-status                              60 IN TXT "1 OK"
-auth-4.7.2.security-status                              60 IN TXT "1 OK"
-auth-4.7.3.security-status                              60 IN TXT "1 OK"
-auth-4.7.4.security-status                              60 IN TXT "1 OK"
-auth-4.7.5.security-status                              60 IN TXT "1 OK"
+auth-4.7.0.security-status                              60 IN TXT "3 Unsupported release (EOL)"
+auth-4.7.1.security-status                              60 IN TXT "3 Unsupported release (EOL)"
+auth-4.7.2.security-status                              60 IN TXT "3 Unsupported release (EOL)"
+auth-4.7.3.security-status                              60 IN TXT "3 Unsupported release (EOL)"
+auth-4.7.4.security-status                              60 IN TXT "3 Unsupported release (EOL)"
+auth-4.7.5.security-status                              60 IN TXT "3 Unsupported release (EOL)"
 auth-4.8.0-alpha1.security-status                       60 IN TXT "2 Unsupported pre-release (no known vulnerabilities)"
 auth-4.8.0-beta1.security-status                        60 IN TXT "2 Unsupported pre-release (no known vulnerabilities)"
 auth-4.8.0.security-status                              60 IN TXT "1 OK"
@@ -137,8 +137,9 @@ auth-4.9.5.security-status                              60 IN TXT "1 OK"
 auth-4.9.6.security-status                              60 IN TXT "1 OK (never formally released)"
 auth-4.9.7.security-status                              60 IN TXT "1 OK"
 auth-4.9.8.security-status                              60 IN TXT "1 OK"
-auth-5.0.0-alpha1.security-status                       60 IN TXT "1 Unsupported pre-release (no known vulnerabilities)"
-auth-5.0.0-beta1.security-status                        60 IN TXT "1 Unsupported pre-release (no known vulnerabilities)"
+auth-5.0.0-alpha1.security-status                       60 IN TXT "2 Unsupported pre-release (no known vulnerabilities)"
+auth-5.0.0-beta1.security-status                        60 IN TXT "2 Unsupported pre-release (no known vulnerabilities)"
+auth-5.0.0.security-status                              60 IN TXT "1 OK"
 
 ; Auth Debian
 auth-3.4.1-2.debian.security-status                     60 IN TXT "3 Upgrade now, see https://docs.powerdns.com/authoritative/appendices/EOL.html"

diff --git a/docs/upgrading.rst b/docs/upgrading.rst
index bfb4b28fdf6ceb638284eceb741392d870467e91..c256744f85db07411403047c652c9eaa1697cdda 100644 (file)
--- a/docs/upgrading.rst
+++ b/docs/upgrading.rst
@@ -8,8 +8,8 @@ Please upgrade to the PowerDNS Authoritative Server 4.0.0 from 3.4.2+.
 See the `3.X <https://doc.powerdns.com/3/authoritative/upgrading/>`__
 upgrade notes if your version is older than 3.4.2.
 
-4.9.0 to 5.0.0/master
----------------------
+4.9.0 to 5.0.0
+--------------
 
 LMDB backend, views
 ^^^^^^^^^^^^^^^^^^^