Auth 5.1 release details.

Signed-off-by: Miod Vallat <miod.vallat@powerdns.com>

diff --git a/.github/actions/spell-check/expect.txt b/.github/actions/spell-check/expect.txt
index 6e13a9c818bccabbb9f90c44706274815ca7fcfd..4bcd60430361002d448b7c01f336243753b52308 100644 (file)
--- a/.github/actions/spell-check/expect.txt
+++ b/.github/actions/spell-check/expect.txt
@@ -807,6 +807,7 @@ metaprogramming
 metricnames
 metricscarbon
 Meulen
+Micay
 Michiel
 Miek
 Miell

diff --git a/docs/changelog/5.1.rst b/docs/changelog/5.1.rst
index c5f19aa905bd630e19ca80c644cf24f9a77e6bc2..5c22c33cb5dbc492300e893ffb27b057c731334b 100644 (file)
--- a/docs/changelog/5.1.rst
+++ b/docs/changelog/5.1.rst
@@ -1,6 +1,128 @@
 Changelogs for 5.1.x
 ====================
 
+.. changelog::
+  :version: 5.1.0
+  :released: 3rd of June 2026
+
+  This is release 5.1.0 of the Authoritative Server.
+  It provides many small new features and improvements, as well as bug fixes.
+
+  Please review the :doc:`Upgrade Notes <../upgrading>` before upgrading from versions < 5.0.x.
+
+  .. change::
+    :tags: Improvements
+    :pullreq: 16389
+    :tickets: 16369
+
+    Lua health checks: more responsiveness
+
+  .. change::
+    :tags: New Features
+    :pullreq: 17131
+
+    make Lua records immutable by default
+
+  .. change::
+    :tags: Improvements
+    :pullreq: 17239
+    :tickets: 12789
+
+    only apply backupSelector to the first non-empty group (Daniel Micay)
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 17240, 17455
+
+    harden xfr*BitInt writers
+
+  .. change::
+    :tags: Bug Fixes, Internals
+    :pullreq: 17284
+
+    use less inefficient code in web server
+
+  .. change::
+    :tags: New Features
+    :pullreq: 17297
+
+    Implement a cors flag to set allowed origin in webserver
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 17304
+    :tickets: 16816
+
+    lmdb: yet another NSEC bug
+
+  .. change::
+    :tags: Bug Fixes, Internals
+    :pullreq: 17320
+
+    smarter memory need computation
+
+  .. change::
+    :tags: Improvements, Internals
+    :pullreq: 17355
+
+    skip zone cache refresh logic if disabled
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 17363
+
+    Clarify the documentation regarding lmdb-shards-map-size (Håkan Lindqvist)
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 17365
+    :tickets: 17364
+
+    let pdnsutil work with lua backend
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 17367
+
+    Correctly display APL DNS records with IPv4 addresses ending in .0
+
+  .. change::
+    :tags: Bug Fixes, API
+    :pullreq: 17373
+    :tickets: 17368
+
+    once again, relax JSON normalization code for record contents
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 17384
+
+    Ednscookies: Fix timestamp validity check
+
+  .. change::
+    :tags: Bug Fixes, Internals
+    :pullreq: 17389
+
+    stricter string-to-int conversions
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 17442
+
+    Auth: fixes for SA 2026-06
+
+  .. change::
+    :tags: Bug Fixes, Internals
+    :pullreq: 17447
+
+    lmdb: do not serialize records over 64K in length
+
+  .. change::
+    :tags: Bug Fixes, Internals
+    :pullreq: 17459
+
+    stricter proxy protocol size limit enforcement
+
 .. changelog::
   :version: 5.1.0-beta1
   :released: 29th of April 2026

diff --git a/docs/secpoll.zone b/docs/secpoll.zone
index f483fcdb40cb73998cdc5515f10dab42f1f09443..e222a3d5d1b1592489dafc6886804548e481415e 100644 (file)
--- a/docs/secpoll.zone
+++ b/docs/secpoll.zone
@@ -1,4 +1,4 @@
-@       86400   IN  SOA pdns-public-ns1.powerdns.com. peter\.van\.dijk.powerdns.com. 2026060301 10800 3600 604800 10800
+@       86400   IN  SOA pdns-public-ns1.powerdns.com. peter\.van\.dijk.powerdns.com. 2026060351 10800 3600 604800 10800
 @       3600    IN  NS  pdns-public-ns1.powerdns.com.
 @       3600    IN  NS  pdns-public-ns2.powerdns.com.
 
@@ -154,6 +154,7 @@ auth-5.0.4.security-status                              60 IN TXT "3 Upgrade now
 auth-5.0.5.security-status                              60 IN TXT "1 OK"
 auth-5.1.0-alpha1.security-status                       60 IN TXT "3 Superseded pre-release (known vulnerabilities)"
 auth-5.1.0-beta1.security-status                        60 IN TXT "3 Unsupported pre-release (known vulnerabilities)"
+auth-5.1.0.security-status                              60 IN TXT "1 OK"
 
 ; Auth Debian
 auth-3.4.1-2.debian.security-status                     60 IN TXT "3 Upgrade now, see https://docs.powerdns.com/authoritative/appendices/EOL.html"