Documentation & secpoll updates for auth-5.1.0-beta1

Signed-off-by: Miod Vallat <miod.vallat@powerdns.com>

diff --git a/docs/changelog/5.1.rst b/docs/changelog/5.1.rst
index aab27a8f60543f8707b11fe549846cf01bb0cdaf..da786f6f34ebdab213e88c86e01f83f379a8da98 100644 (file)
--- a/docs/changelog/5.1.rst
+++ b/docs/changelog/5.1.rst
@@ -1,6 +1,170 @@
 Changelogs for 5.1.x
 ====================
 
+.. changelog::
+  :version: 5.1.0-beta1
+  :released: 27th of April 2026
+
+  This is release 5.1.0-beta1 of the Authoritative Server.
+  It provides many small new features and improvements, as well as bug fixes,
+  including fixes for the PowerDNS Security Advisory 2026-05.
+
+  Please review the :doc:`Upgrade Notes <../upgrading>` before upgrading from versions < 5.0.x.
+
+  .. change::
+    :tags: New Features
+    :pullreq: 16522
+
+    lmdb: full support for comments
+
+  .. change::
+    :tags: New Features
+    :pullreq: 16725
+
+    lmdb: split domains table
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 16734
+    :tickets: 13987, 16702
+
+    Fix a bunch of issues when building with `meson`
+
+  .. change::
+    :tags: Improvements
+    :pullreq: 16783, 17035
+
+    Modernize documentation
+
+  .. change::
+    :tags: Bug Fixes,API
+    :pullreq: 17000
+
+    correctly delete ENT records from the API
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 17004
+
+    minor lmdb fixes (for the 42nd time)
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 17011
+
+    redact more configuration secrets in the /config endpoint
+
+  .. change::
+    :tags: New Features
+    :pullreq: 17014
+    :tickets: 16073
+
+    simple protobuf logging support
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 17048
+
+    Broader exception catching around stoi usage
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 17071
+
+    DNSWriter: Prevent overflow when generating (too) large DNS packets
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 17076
+
+    Handle malformed pointers in dnswriter
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 17077
+
+    Dnsparser: Harden the DNS parser against malformed records
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 17126
+
+    lua: one more bad case of createForward
+
+  .. change::
+    :tags: Improvements
+    :pullreq: 17127
+
+    Complete the transition from Swagger to OpenAPI (Kevin P. Fleming)
+
+  .. change::
+    :tags: Bug Fixes,Tools
+    :pullreq: 17130
+
+    some pdns_control love
+
+  .. change::
+    :tags: Improvements
+    :pullreq: 17134
+
+    only perform secpoll checks when they make sense
+
+  .. change::
+    :tags: Improvements
+    :pullreq: 17148
+
+    add a configurable limit of web server connections
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 17149
+
+    Webserver: correctly split the basic authorization cookie
+
+  .. change::
+    :tags: Bug Fixes,BIND
+    :pullreq: 17152
+
+    fixes to AXFR in Bind backend
+
+  .. change::
+    :tags: Bug Fixes,DNSUpdate
+    :pullreq: 17155
+
+    dnsupdate handling buglet
+
+  .. change::
+    :tags: Bug Fixes,GeoIP
+    :pullreq: 17160
+    :tickets: 17158
+
+    safer lua geoip queries
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 17196
+
+    better handling of yahttp chunk size
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 17198, 17193, 17228
+
+    Auth: fixes for SA 2026-05
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 17200
+
+    Fix two cases of lacking/wrong max size compares
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 17235
+    :tickets: 17077
+
+    Check boundary in getUnquotedText() as we do in getText()
+
 .. changelog::
   :version: 5.1.0-alpha1
   :released: 16th of March 2026

diff --git a/docs/secpoll.zone b/docs/secpoll.zone
index fb9b00c6a13d1f694a9bd84c7eabeb42899fa5e3..4598c4184550babc772646b8a315a4081d2ebe02 100644 (file)
--- a/docs/secpoll.zone
+++ b/docs/secpoll.zone
@@ -1,4 +1,4 @@
-@       86400   IN  SOA pdns-public-ns1.powerdns.com. peter\.van\.dijk.powerdns.com. 2026042301 10800 3600 604800 10800
+@       86400   IN  SOA pdns-public-ns1.powerdns.com. peter\.van\.dijk.powerdns.com. 2026042701 10800 3600 604800 10800
 @       3600    IN  NS  pdns-public-ns1.powerdns.com.
 @       3600    IN  NS  pdns-public-ns2.powerdns.com.
 
@@ -151,6 +151,7 @@ auth-5.0.2.security-status                              60 IN TXT "3 Upgrade now
 auth-5.0.3.security-status                              60 IN TXT "3 Upgrade now, see https://doc.powerdns.com/authoritative/security-advisories/powerdns-advisory-2026-05.html"
 auth-5.0.4.security-status                              60 IN TXT "1 OK"
 auth-5.1.0-alpha1.security-status                       60 IN TXT "1 Unsupported pre-release (known vulnerabilities)"
+auth-5.1.0-beta1.security-status                        60 IN TXT "1 Unsupported pre-release (no known vulnerabilities)"
 
 ; Auth Debian
 auth-3.4.1-2.debian.security-status                     60 IN TXT "3 Upgrade now, see https://docs.powerdns.com/authoritative/appendices/EOL.html"