From: Miod Vallat <miod.vallat@powerdns.com>
Date: Wed, 10 Dec 2025 09:17:36 +0000 (+0100)
Subject: Changelog and secpoll update for 4.9.12 and 5.0.2.
X-Git-Tag: rec-5.4.0-alpha1~4^2
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=a2047ad68a5006d7ed8e3a65e4742910c973669d;p=thirdparty%2Fpdns.git

Changelog and secpoll update for 4.9.12 and 5.0.2.

Signed-off-by: Miod Vallat <miod.vallat@powerdns.com>
---

diff --git a/.github/actions/spell-check/expect.txt b/.github/actions/spell-check/expect.txt
index f296cba138..deeab53d29 100644
--- a/.github/actions/spell-check/expect.txt
+++ b/.github/actions/spell-check/expect.txt
@@ -428,6 +428,7 @@ Exx
 ezdns
 Faerch
 failedservers
+famfo
 farsightsec
 fcontext
 fedoraproject
diff --git a/docs/changelog/4.9.rst b/docs/changelog/4.9.rst
index eeb0336851..670c15cce1 100644
--- a/docs/changelog/4.9.rst
+++ b/docs/changelog/4.9.rst
@@ -1,6 +1,57 @@
 Changelogs for 4.9.x
 ====================
 
+.. changelog::
+  :version: 4.9.12
+  :released: 11th of December 2025
+
+  This is release 4.9.12 of the Authoritative Server.
+  It contains bug fixes and a minor feature.
+
+  Please review the :doc:`Upgrade Notes <../upgrading>` before upgrading from versions < 4.9.x.
+
+  .. change::
+    :tags: New Features
+    :pullreq: 16600
+    :tickets: 16589
+
+    allow finer-grained rrset changes through the API
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 16604
+    :tickets: 16538
+
+    m4/pdns_check_libcrypto: fix ecdsa/eddsa includedir (famfo)
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 16567
+    :tickets: 16564
+
+    add missing catch block for STL exceptions in createForward
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 16550
+    :tickets: 15716
+
+    auth backend transaction fixes in error cases
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 16534
+    :tickets: 16059
+
+    REST API: bring back 404 errors
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 16535
+    :tickets: 16287
+
+    Prevent a potential race condition in cache cleaning
+
 .. changelog::
   :version: 4.9.11
   :released: 15th of October 2025
diff --git a/docs/changelog/5.0.rst b/docs/changelog/5.0.rst
index 7be9dc5b41..d7ff3ee7ff 100644
--- a/docs/changelog/5.0.rst
+++ b/docs/changelog/5.0.rst
@@ -1,6 +1,64 @@
 Changelogs for 5.0.x
 ====================
 
+.. changelog::
+  :version: 5.0.2
+  :released: 11th of December 2025
+
+  This is release 5.0.2 of the Authoritative Server.
+  It contains bug fixes and a minor feature.
+
+  Please review the :doc:`Upgrade Notes <../upgrading>` before upgrading from versions < 5.0.x.
+
+  .. change::
+    :tags: New Features
+    :pullreq: 16599
+    :tickets: 16589
+
+    allow finer-grained rrset changes through the API
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 16603
+    :tickets: 16538
+
+    m4/pdns_check_libcrypto: fix ecdsa/eddsa includedir (famfo)
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 16566
+    :tickets: 16564
+
+    add missing catch block for STL exceptions in createForward
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 16532
+    :tickets: 16059
+
+    REST API: bring back 404 errors
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 16512
+    :tickets: 15894, 16499
+
+    Give backends the ability to perform extra actions during zone rectify
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 16486
+    :tickets: 16401
+
+    meson build: restore original binary names
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 16466
+    :tickets: 16398
+
+    sdist: copy files as files, not as new dirs
+
 .. changelog::
   :version: 5.0.1
   :released: 30th of October 2025
@@ -9,6 +67,8 @@ Changelogs for 5.0.x
   It contains minor bugfixes and improvements over the 5.0.0
   release, and one new feature for LMDB users.
 
+  Please review the :doc:`Upgrade Notes <../upgrading>` before upgrading from versions < 5.0.x.
+
   .. change::
     :tags: Bug Fixes
     :pullreq: 16360
diff --git a/docs/secpoll.zone b/docs/secpoll.zone
index 6d24bcc235..7b90c1d8b4 100644
--- a/docs/secpoll.zone
+++ b/docs/secpoll.zone
@@ -1,4 +1,4 @@
-@       86400   IN  SOA pdns-public-ns1.powerdns.com. peter\.van\.dijk.powerdns.com. 2025120801 10800 3600 604800 10800
+@       86400   IN  SOA pdns-public-ns1.powerdns.com. peter\.van\.dijk.powerdns.com. 2025121101 10800 3600 604800 10800
 @       3600    IN  NS  pdns-public-ns1.powerdns.com.
 @       3600    IN  NS  pdns-public-ns2.powerdns.com.
 
@@ -140,10 +140,12 @@ auth-4.9.8.security-status                              60 IN TXT "1 OK"
 auth-4.9.9.security-status                              60 IN TXT "1 OK"
 auth-4.9.10.security-status                             60 IN TXT "1 OK (never formally released)"
 auth-4.9.11.security-status                             60 IN TXT "1 OK"
+auth-4.9.12.security-status                             60 IN TXT "1 OK"
 auth-5.0.0-alpha1.security-status                       60 IN TXT "2 Unsupported pre-release (no known vulnerabilities)"
 auth-5.0.0-beta1.security-status                        60 IN TXT "2 Unsupported pre-release (no known vulnerabilities)"
 auth-5.0.0.security-status                              60 IN TXT "1 OK"
 auth-5.0.1.security-status                              60 IN TXT "1 OK"
+auth-5.0.2.security-status                              60 IN TXT "1 OK"
 
 ; Auth Debian
 auth-3.4.1-2.debian.security-status                     60 IN TXT "3 Upgrade now, see https://docs.powerdns.com/authoritative/appendices/EOL.html"