Prep for rec-5.3.0-alpha2

Signed-off-by: Otto Moerbeek <otto.moerbeek@open-xchange.com>

diff --git a/.github/actions/spell-check/expect.txt b/.github/actions/spell-check/expect.txt
index 8b0d0ea06f19ebee572869ae4cd11323ae1462a0..2825aeceda17d83059844e33a3458bcf3f9f0e27 100644 (file)
--- a/.github/actions/spell-check/expect.txt
+++ b/.github/actions/spell-check/expect.txt
@@ -391,6 +391,7 @@ eglot
 Eif
 Ekkelenkamp
 eldoc
+elenril
 elgoog
 elisp
 elpa
@@ -1166,6 +1167,7 @@ rizsotto
 rkey
 rmem
 rname
+rockylinux
 rocommunity
 Roel
 rolltype

diff --git a/docs/secpoll.zone b/docs/secpoll.zone
index 67f1b320bacafe8e39546b206bfe083c74a23850..4687f0b588e59a282455f2b1c56de6493e77cc94 100644 (file)
--- a/docs/secpoll.zone
+++ b/docs/secpoll.zone
@@ -1,4 +1,4 @@
-@       86400   IN  SOA pdns-public-ns1.powerdns.com. peter\.van\.dijk.powerdns.com. 2025070801 10800 3600 604800 10800
+@       86400   IN  SOA pdns-public-ns1.powerdns.com. peter\.van\.dijk.powerdns.com. 2025070901 10800 3600 604800 10800
 @       3600    IN  NS  pdns-public-ns1.powerdns.com.
 @       3600    IN  NS  pdns-public-ns2.powerdns.com.
 
@@ -414,7 +414,8 @@ recursor-5.2.0-rc1.security-status                      60 IN TXT "3 Superseded
 recursor-5.2.0.security-status                          60 IN TXT "3 Upgrade now, see https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2025-01.html"
 recursor-5.2.1.security-status                          60 IN TXT "1 OK"
 recursor-5.2.2.security-status                          60 IN TXT "1 OK"
-recursor-5.3.0-alpha1.security-status                   60 IN TXT "1 OK"
+recursor-5.3.0-alpha1.security-status                   60 IN TXT "2 Superseded pre-release"
+recursor-5.3.0-alpha2.security-status                   60 IN TXT "1 OK"
 
 ; Recursor Debian
 recursor-3.6.2-2.debian.security-status                 60 IN TXT "3 Upgrade now, see https://docs.powerdns.com/recursor/appendices/EOL.html"

diff --git a/pdns/recursordist/docs/changelog/5.3.rst b/pdns/recursordist/docs/changelog/5.3.rst
index 630c4c488e5c360c4e1f784b54450554fbc41f2f..7ecb74c45085b9d6b19c18f70fa280090a204577 100644 (file)
--- a/pdns/recursordist/docs/changelog/5.3.rst
+++ b/pdns/recursordist/docs/changelog/5.3.rst
@@ -3,6 +3,59 @@ Changelogs for 5.3.X
 
 Before upgrading, it is advised to read the :doc:`../upgrade`.
 
+.. changelog::
+  :version: 5.3.0-alpha2
+  :released: 9th of July 2025
+
+  .. change::
+    :tags: Improvements
+    :pullreq: 15759
+
+    Allow forcing TCP from preoutquery() (elenril).
+
+  .. change::
+    :tags: Improvements
+    :pullreq: 15639
+
+    Add el-10 target, based on rockylinux:10 for now.
+
+  .. change::
+    :tags: Improvements
+    :pullreq: 15788
+
+    Clang-tidy: replace lock_guard with scoped_lock (Rosen Penev)
+
+  .. change::
+    :tags: Improvements
+    :pullreq: 15782
+
+    Only download pub suffix list if pubsuffix.cc is not available.
+
+  .. change::
+    :tags: Improvements
+    :pullreq: 15766, 15756
+
+    Fix Coverity issues and add release() to FDWrapper.
+
+  .. change::
+    :tags: Improvements
+    :pullreq: 15758
+
+    Start to listen on ::1 by default, but don't consider it an error if that fails.
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 15752
+
+    Don't let rust code and handler use thread pipes simultaneously.
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 15746
+    :tickets: 15723
+
+    Fix sysconfdir in debian packages built by meson.
+
 .. changelog::
   :version: 5.3.0-alpha1
   :released: 25th of June 2025

diff --git a/pdns/recursordist/docs/lua-scripting/hooks.rst b/pdns/recursordist/docs/lua-scripting/hooks.rst
index aee61f23849dad626f9829e50503a657b3aa1d35..d307a0290d01c75dce305fceed7806cdf08c20ae 100644 (file)
--- a/pdns/recursordist/docs/lua-scripting/hooks.rst
+++ b/pdns/recursordist/docs/lua-scripting/hooks.rst
@@ -185,7 +185,7 @@ Interception Functions
 
   .. versionchanged:: 5.3.0
 
-    `isTcp` can be set to force TCP or UDP
+    :attr:`dq.isTCP <DNSQuestion.isTcp>` can be set to force TCP or UDP
 
   This hook is not called in response to a client packet, but fires when the Recursor wants to talk to an authoritative server.
 
@@ -203,8 +203,8 @@ Interception Functions
   - :attr:`dq.qtype <DNSQuestion.qtype>`
   - :attr:`dq.isTcp <DNSQuestion.isTcp>` since version 5.3.0 this attribute may be changed by the hook to force the use of UDP or TCP
 
-  Note that except for `dq.localaddr`, which identifies the client that triggered this outgoing query, all other attributes apply to
-  the *outgoing* query that will be sent by the Recursor.
+  Note that except for :attr:`dq.localaddr <DNSQuestion.localaddr>`, which identifies the client that triggered this outgoing query, all other attributes apply to
+  the *outgoing* query that will be sent by the :program:`Recursor`.
 
   Do not rely on other attributes having a value and do not call any method of the :class:`dq <DNSQuestion>` object apart from the record set manipulation methods.
 

diff --git a/pdns/recursordist/docs/upgrade.rst b/pdns/recursordist/docs/upgrade.rst
index 09111ab90d6df8f6725aaa541f6f909de50ef69f..38994da038682cbbe06e9b6060674c8567ffe7c1 100644 (file)
--- a/pdns/recursordist/docs/upgrade.rst
+++ b/pdns/recursordist/docs/upgrade.rst
@@ -12,6 +12,8 @@ Changed behaviour
 
 Reloading ACLs using ``rec_control reload-acls`` now also reloads the proxy-protocol related settings.
 
+The :program:`Recursor` now listens on ``::1`` in addition to ``127.0.0.1`` by default.
+
 New Settings
 ^^^^^^^^^^^^
 The embedded webserver implementation used to process REST calls and display the status page has been rewritten in Rust.