]> git.ipfire.org Git - thirdparty/dnspython.git/log
thirdparty/dnspython.git
19 months agoSet the minimum version of idna to 3.7. 2.6
Bob Halley [Wed, 17 Apr 2024 13:18:37 +0000 (06:18 -0700)] 
Set the minimum version of idna to 3.7.

Earlier versions have a potential DoS issue.

21 months agoClose QUIC sync and trio sockets when done.
Bob Halley [Thu, 7 Mar 2024 13:15:34 +0000 (05:15 -0800)] 
Close QUIC sync and trio sockets when done.

(cherry picked from commit 11b09df714b9d159a47cc9fe9e3934ac32646f9a)

21 months agoupdate CI v2.6.1
Bob Halley [Sun, 18 Feb 2024 18:35:12 +0000 (10:35 -0800)] 
update CI

21 months agoThe Tudoor fix should not eat valid Truncated exceptions [#1053] (#1054)
Bob Halley [Sun, 18 Feb 2024 18:27:43 +0000 (10:27 -0800)] 
The Tudoor fix should not eat valid Truncated exceptions [#1053] (#1054)

* The Tudoor fix should not eat valid Truncated exceptions [##1053]

* Make logic more readable

(cherry picked from commit 2ab3d1628c9ae0545e225522b3b445c3478dc6ad)

21 months ago2.6.1 version prep
Bob Halley [Sun, 18 Feb 2024 17:59:21 +0000 (09:59 -0800)] 
2.6.1 version prep

21 months agoFurther improve CVE fix coverage to 100% for sync and async. v2.6.0
Bob Halley [Fri, 16 Feb 2024 16:46:24 +0000 (08:46 -0800)] 
Further improve CVE fix coverage to 100% for sync and async.

(cherry picked from commit a1a998938b7370dae41784f8bc0a841dc2addba9)

21 months agotest IgnoreErrors
Bob Halley [Fri, 16 Feb 2024 15:14:49 +0000 (07:14 -0800)] 
test IgnoreErrors

(cherry picked from commit ac6763f1018458835201b38cae848e4d261f3e5c)

21 months agoFor the Tudoor fix, we also need the UDP nameserver to ignore_unexpected.
Bob Halley [Fri, 16 Feb 2024 13:47:35 +0000 (05:47 -0800)] 
For the Tudoor fix, we also need the UDP nameserver to ignore_unexpected.

(cherry picked from commit 5a441b9854425c4e23abb8f91973361fe8401e33)

21 months ago2.6.0 versioning
Bob Halley [Fri, 16 Feb 2024 00:46:34 +0000 (16:46 -0800)] 
2.6.0 versioning

21 months agoRequire cryptography >=41 instead of 42.
Bob Halley [Thu, 15 Feb 2024 16:20:11 +0000 (08:20 -0800)] 
Require cryptography >=41 instead of 42.

22 months agoCreate CODE_OF_CONDUCT.md v2.6.0rc1
Bob Halley [Fri, 9 Feb 2024 22:14:29 +0000 (14:14 -0800)] 
Create CODE_OF_CONDUCT.md

(cherry picked from commit 35834c6888f8b2ea738f808c5eeefa78a2f81728)

22 months agogithub contributing and pull request template
Bob Halley [Fri, 9 Feb 2024 22:12:59 +0000 (14:12 -0800)] 
github contributing and pull request template

(cherry picked from commit 7401efab4d6c2db93886ca92b4479ce90d749a51)

22 months agoThe DoHNameserver now supports using GET instead of POST
Bob Halley [Fri, 9 Feb 2024 21:54:37 +0000 (13:54 -0800)] 
The DoHNameserver now supports using GET instead of POST
if desired, and passes source and source_port to the
underlying query methods.

(cherry picked from commit b9eea8ec7c18c516032460882d2a7feba0f6aac9)

22 months ago2.6.0 prep
Bob Halley [Fri, 9 Feb 2024 21:46:33 +0000 (13:46 -0800)] 
2.6.0 prep

22 months ago2.6.0 prep
Bob Halley [Fri, 9 Feb 2024 21:43:24 +0000 (13:43 -0800)] 
2.6.0 prep

22 months agominor (but pervasive!) black 2024 stable style changes
Bob Halley [Fri, 9 Feb 2024 21:38:24 +0000 (13:38 -0800)] 
minor (but pervasive!) black 2024 stable style changes

22 months agolint
Bob Halley [Fri, 9 Feb 2024 21:36:44 +0000 (13:36 -0800)] 
lint

22 months agoupdate for 2.6.0
Bob Halley [Fri, 9 Feb 2024 21:27:52 +0000 (13:27 -0800)] 
update for 2.6.0

22 months agoAddress DoS via the Tudoor mechanism (CVE-2023-29483) (#1044)
Bob Halley [Fri, 9 Feb 2024 19:22:52 +0000 (11:22 -0800)] 
Address DoS via the Tudoor mechanism (CVE-2023-29483) (#1044)

22 months agoupdate for 2.6.0
Bob Halley [Fri, 9 Feb 2024 19:15:03 +0000 (11:15 -0800)] 
update for 2.6.0

22 months agodns.dnssecalgs.base is safe to import without cryptography,
Bob Halley [Fri, 9 Feb 2024 13:09:31 +0000 (05:09 -0800)] 
dns.dnssecalgs.base is safe to import without cryptography,
and should be imported!  [#1043]

22 months agoInclude the text description of an EDE. (#1042)
Brian Wellington [Fri, 9 Feb 2024 02:02:39 +0000 (18:02 -0800)] 
Include the text description of an EDE. (#1042)

* Include the text description of an EDE.

For known EDEs, add the description of the code in the output.

* Update test.

22 months agoTest for recent-enough versions of optional packages. (#1041)
Bob Halley [Fri, 9 Feb 2024 02:01:41 +0000 (18:01 -0800)] 
Test for recent-enough versions of optional packages. (#1041)

22 months agoAdd EDNS NSID option.
Bob Halley [Wed, 7 Feb 2024 00:08:01 +0000 (16:08 -0800)] 
Add EDNS NSID option.

22 months agoadd accidentally omitted license field to [project]
Bob Halley [Tue, 6 Feb 2024 15:56:58 +0000 (07:56 -0800)] 
add accidentally omitted license field to [project]

22 months agoThe EDNS Option base class should have a NotImplemented to_text().
Bob Halley [Sun, 4 Feb 2024 21:41:09 +0000 (13:41 -0800)] 
The EDNS Option base class should have a NotImplemented to_text().

22 months agoupdate ruff config to non-deprecated syntax
Bob Halley [Fri, 2 Feb 2024 20:58:18 +0000 (12:58 -0800)] 
update ruff config to non-deprecated syntax

22 months agoswitch to codecov-action@v4 take 2
Bob Halley [Thu, 1 Feb 2024 20:43:16 +0000 (12:43 -0800)] 
switch to codecov-action@v4 take 2

22 months agoswitch to codecov-action@v4
Bob Halley [Thu, 1 Feb 2024 20:42:22 +0000 (12:42 -0800)] 
switch to codecov-action@v4

22 months agoIn tests, work around musl libc and docker issues.
Bob Halley [Sat, 27 Jan 2024 20:38:03 +0000 (12:38 -0800)] 
In tests, work around musl libc and docker issues.

Specifically: musl libc's getaddrinfo behavior always returns
a canonical name.

Docker's resolver proxy doesn't do dangling CNAMEs correctly
and also answers NXDOMAIN in some cases where it should say
no error, no data.

22 months agoFix elliptic curve test deprecation warning from cryptography 42.
Bob Halley [Sat, 27 Jan 2024 13:45:35 +0000 (05:45 -0800)] 
Fix elliptic curve test deprecation warning from cryptography 42.

We were passing a curve class as the curve parameter in
testSignatureECDSAP256SHA256 and testSignatureECDSAP384SHA384,
not an instance of the curve class.  The official API has
always been to pass an instance, but it tolerated passing a class.
Starting with Cryptogrphy 42, passing a class is deprecated.

22 months agoupdate requirements
Bob Halley [Fri, 26 Jan 2024 01:14:15 +0000 (17:14 -0800)] 
update requirements

22 months agoactions cleanup
Bob Halley [Mon, 15 Jan 2024 21:21:07 +0000 (13:21 -0800)] 
actions cleanup

22 months agoBump readthedocs-sphinx-search from 0.3.1 to 0.3.2 (#1033)
dependabot[bot] [Mon, 15 Jan 2024 20:54:43 +0000 (12:54 -0800)] 
Bump readthedocs-sphinx-search from 0.3.1 to 0.3.2 (#1033)

Bumps [readthedocs-sphinx-search](https://github.com/readthedocs/readthedocs-sphinx-search) from 0.3.1 to 0.3.2.
- [Changelog](https://github.com/readthedocs/readthedocs-sphinx-search/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/readthedocs/readthedocs-sphinx-search/commits/0.3.2)

---
updated-dependencies:
- dependency-name: readthedocs-sphinx-search
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
23 months agobump hatchling minimum version for official 3.12 support
Bob Halley [Fri, 12 Jan 2024 22:26:44 +0000 (14:26 -0800)] 
bump hatchling minimum version for official 3.12 support

23 months agoupdate SECURITY.md supported status
Bob Halley [Sat, 6 Jan 2024 17:18:38 +0000 (09:18 -0800)] 
update SECURITY.md supported status

23 months agoincrement development version
Bob Halley [Sat, 6 Jan 2024 16:24:34 +0000 (08:24 -0800)] 
increment development version

23 months agoGSS-TSIG doco updates
Bob Halley [Sat, 6 Jan 2024 16:09:53 +0000 (08:09 -0800)] 
GSS-TSIG doco updates

23 months agoformatting lint
Bob Halley [Thu, 28 Dec 2023 19:19:37 +0000 (11:19 -0800)] 
formatting lint

23 months agolint
Bob Halley [Thu, 28 Dec 2023 19:12:40 +0000 (11:12 -0800)] 
lint

23 months agoupdate whatsnew for 2.5.0
Bob Halley [Tue, 26 Dec 2023 19:13:39 +0000 (11:13 -0800)] 
update whatsnew for 2.5.0

23 months agoUniform TLS verify argument support. (#1027)
Bob Halley [Thu, 28 Dec 2023 18:47:44 +0000 (10:47 -0800)] 
Uniform TLS verify argument support. (#1027)

* Uniform TLS verify argument support.

* async TLS should get verify too

23 months agoPad if needed when making a response. (#1026)
Bob Halley [Tue, 26 Dec 2023 19:12:39 +0000 (11:12 -0800)] 
Pad if needed when making a response. (#1026)

23 months agouse self._section_enum in a few places we missed
Bob Halley [Sun, 24 Dec 2023 17:04:24 +0000 (09:04 -0800)] 
use self._section_enum in a few places we missed

23 months agoAdd Message.section_count(). (#1024)
Brian Wellington [Wed, 20 Dec 2023 22:59:32 +0000 (14:59 -0800)] 
Add Message.section_count(). (#1024)

Adds a method to return a count of the number of records in each
section.

23 months agoAdd prefer_truncation to Message.to_wire(). (#1023)
Brian Wellington [Wed, 20 Dec 2023 22:09:34 +0000 (14:09 -0800)] 
Add prefer_truncation to Message.to_wire(). (#1023)

If a caller passes prefer_truncation=True, the message will be truncated
if it would otherwise exceed the maximum length.  If the truncation
occurs before the additional section, the TC bit will be set.

This behavior matches what a name server would do when generating a
response.

23 months agoAdd next_name() method to NSEC3 [#1022].
Bob Halley [Sun, 17 Dec 2023 01:51:01 +0000 (17:51 -0800)] 
Add next_name() method to NSEC3 [#1022].

2 years agoFix NSEC3 next field documentation [#1022].
Bob Halley [Fri, 15 Dec 2023 15:49:12 +0000 (07:49 -0800)] 
Fix NSEC3 next field documentation [#1022].

2 years agoEnsure asyncio datagram sockets on windows have had a bind() before
Bob Halley [Fri, 15 Dec 2023 02:04:39 +0000 (18:04 -0800)] 
Ensure asyncio datagram sockets on windows have had a bind() before
recvfrom().

The fix for [#637] erroneously concluded that that windows asyncio
needed connected datagram sockets, but subsequent further
investation showed that the actual problem was that windows wants
an unconnected datagram socket to be bound before recvfrom is called.
Linux autobinds in this case to the wildcard address and port, so
that's why we didn't see any problems there.  We now ensure that
the source is bound.

2 years agoBump github/codeql-action from 2 to 3 (#1021)
dependabot[bot] [Wed, 13 Dec 2023 16:25:04 +0000 (08:25 -0800)] 
Bump github/codeql-action from 2 to 3 (#1021)

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2 to 3.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/v2...v3)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2 years agoremove ALPN debugging prints
Bob Halley [Thu, 7 Dec 2023 18:07:07 +0000 (10:07 -0800)] 
remove ALPN debugging prints

2 years agoNotImplementError -> NotImplementedError
Brian Wellington [Thu, 7 Dec 2023 18:02:00 +0000 (10:02 -0800)] 
NotImplementError -> NotImplementedError

2 years agoFix setting source for sync/trio quic queries.
Brian Wellington [Thu, 7 Dec 2023 17:59:08 +0000 (09:59 -0800)] 
Fix setting source for sync/trio quic queries.

The sync code called connect() before bind(), which meant that any
attempt to specify a source resulted in an exception.  This switches the
order.

The trio code called a nonexistent method in the wrong place, so didn't
work at all.  This fixes the call and puts it in the right place.

The asyncio code worked, so no changes were needed.

2 years agoBump actions/setup-python from 4 to 5 (#1020)
dependabot[bot] [Wed, 6 Dec 2023 16:20:38 +0000 (08:20 -0800)] 
Bump actions/setup-python from 4 to 5 (#1020)

Bumps [actions/setup-python](https://github.com/actions/setup-python) from 4 to 5.
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](https://github.com/actions/setup-python/compare/v4...v5)

---
updated-dependencies:
- dependency-name: actions/setup-python
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2 years agoUpdate RFC doco with HTTPS/SVCB RFC
Bob Halley [Mon, 4 Dec 2023 16:52:43 +0000 (08:52 -0800)] 
Update RFC doco with HTTPS/SVCB RFC

2 years agoAllow Zones with different map types. (#1015)
Bob Halley [Wed, 29 Nov 2023 13:30:03 +0000 (05:30 -0800)] 
Allow Zones with different map types. (#1015)

* Allow Zones with different map types.

* Backwards compatibility for python 3.8.

2 years agoFix the ignored bootstrap_address for DoHNameserver in async query (#1018)
URenko [Wed, 29 Nov 2023 13:29:17 +0000 (13:29 +0000)] 
Fix the ignored bootstrap_address for DoHNameserver in async query (#1018)

2 years agoupdate sphinx and sphinx_rtd_theme
Bob Halley [Tue, 28 Nov 2023 19:17:09 +0000 (11:17 -0800)] 
update sphinx and sphinx_rtd_theme

2 years agofix doco typo in to_wire()
Bob Halley [Tue, 28 Nov 2023 19:16:26 +0000 (11:16 -0800)] 
fix doco typo in to_wire()

2 years agoAdd RFC 8499 to the RFC list.
Bob Halley [Mon, 27 Nov 2023 22:41:31 +0000 (14:41 -0800)] 
Add RFC 8499 to the RFC list.

2 years agoThe documentation for txn delete methods erroneously said a class was needed.
Bob Halley [Fri, 24 Nov 2023 23:39:44 +0000 (15:39 -0800)] 
The documentation for txn delete methods erroneously said a class was needed.

2 years agoFix coverage breakage by hatch branch merge.
Bob Halley [Fri, 24 Nov 2023 23:39:05 +0000 (15:39 -0800)] 
Fix coverage breakage by hatch branch merge.

2 years agoHatch support and general build cleanups. (#1014)
Bob Halley [Thu, 23 Nov 2023 00:50:47 +0000 (16:50 -0800)] 
Hatch support and general build cleanups. (#1014)

* Hatch support and general build cleanups.

2 years agoCanonicalize IPV4 and IPv6 address text form in rdata. (#1013)
Bob Halley [Thu, 16 Nov 2023 00:47:52 +0000 (16:47 -0800)] 
Canonicalize IPV4 and IPv6 address text form in rdata. (#1013)

2 years agomove example to the right place
Bob Halley [Mon, 6 Nov 2023 14:04:36 +0000 (06:04 -0800)] 
move example to the right place

2 years agoadd example how to send NOTIFY message (#1007)
Petr Špaček [Mon, 6 Nov 2023 13:13:52 +0000 (14:13 +0100)] 
add example how to send NOTIFY message (#1007)

2 years agoFix a type issue with dns.zone.from_file() that mypy misses but
Bob Halley [Mon, 6 Nov 2023 13:10:04 +0000 (05:10 -0800)] 
Fix a type issue with dns.zone.from_file() that mypy misses but
Cython notices.  [#998]

2 years agoAdd support for RFC 4471 predecessor() and successor() methods. (#1002)
Bob Halley [Sat, 4 Nov 2023 23:22:34 +0000 (16:22 -0700)] 
Add support for RFC 4471 predecessor() and successor() methods. (#1002)

2 years agoUpdate trio requirement from >=0.14,<0.23 to >=0.14,<0.24 (#1003)
dependabot[bot] [Fri, 3 Nov 2023 19:30:23 +0000 (12:30 -0700)] 
Update trio requirement from >=0.14,<0.23 to >=0.14,<0.24 (#1003)

Updates the requirements on [trio](https://github.com/python-trio/trio) to permit the latest version.
- [Release notes](https://github.com/python-trio/trio/releases)
- [Commits](https://github.com/python-trio/trio/compare/v0.14.0...v0.23.0)

---
updated-dependencies:
- dependency-name: trio
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2 years agoAdd prepend_length to Message.to_wire(). (#1001)
Brian Wellington [Fri, 3 Nov 2023 15:12:37 +0000 (08:12 -0700)] 
Add prepend_length to Message.to_wire(). (#1001)

If a caller passes prepend_length=True, the wire format will include the
2 byte encoded message length before the message itself.  This is useful
for callers planning to send the message over TCP, DoT, and DoQ.

2 years agoWhen scanning interfaces with WMI, include networks without a domain. (#999)
noopbug [Wed, 1 Nov 2023 21:20:29 +0000 (16:20 -0500)] 
When scanning interfaces with WMI, include networks without a domain. (#999)

* When scanning interfaces with WMI, include networks without a domain.

* Ignore networks found via wmi that have no nameservers

---------

Co-authored-by: Me <me@shiranpuri.com>
2 years agoAdd QUIC TLS session ticket support.
Bob Halley [Sat, 28 Oct 2023 16:08:00 +0000 (09:08 -0700)] 
Add QUIC TLS session ticket support.

2 years agoFix a race condition in trio quic shutdown.
Bob Halley [Fri, 27 Oct 2023 15:55:10 +0000 (08:55 -0700)] 
Fix a race condition in trio quic shutdown.

It was possible to have a "lost wakeup" situation where we had stuff to
send but the trio worker was blocked indefinitely in the receive.

There is no test for this as the race is very race-y and I can't reproduce it
reliably in the test suite, though I was able to do reliable replication a different
way when debugging.

I also reordered event processing to happen after timer handling but before sending
in the trio and sync quic code.  The async code already worked this way due to its
different struture and needed no changes.

2 years agoThe asyncio quic code did not close politely in clean exit cases.
Bob Halley [Fri, 27 Oct 2023 02:23:27 +0000 (19:23 -0700)] 
The asyncio quic code did not close politely in clean exit cases.

2 years agoThe "address" passed to QUIC receive_datagram() should be a low-level tuple.
Bob Halley [Fri, 27 Oct 2023 01:41:36 +0000 (18:41 -0700)] 
The "address" passed to QUIC receive_datagram() should be a low-level tuple.

Previously we sent just the address part, i.e. lltuple[0], but the
aioquic code intends for the value to be the whole tuple.  This did
not break anything for dnspython as we were consistently wrong and
aioquic is flexible enough with its notion of NetworkAddress for our
purposes that dnspython's mistake had no effect.

2 years agoFix two QUIC issues:
Bob Halley [Sun, 22 Oct 2023 14:12:41 +0000 (07:12 -0700)] 
Fix two QUIC issues:

  1) We treated stream reset like connection terminated, which
     is just wrong.  We should send EOF to the stream but leave
     the connection alone.

  2) When we got an unexpected EOF on a stream, we raised the
     exception in the wrong place, killing the QUIC connection
     but leaving the stream blocked.  Now we deliver the exception
     to the stream and don't kill the connection.

2 years agoCheck that a relative name plus the zone's origin is not too long. (#997)
Bob Halley [Sat, 21 Oct 2023 13:38:54 +0000 (06:38 -0700)] 
Check that a relative name plus the zone's origin is not too long. (#997)

Previously it was possible to add very long relative names to a
relative zone which could never be rendered due to being too long for
wire format.  Now we check this as part of _validate_name().

This code also removes duplicated name validation code from Zone and
Version, consolidating it into one helper function.

Finally, we fix a few comments in get methods that have cut-and-paste
typos from the find variant indicating they can raise KeyError when
they cannot.

2 years agoadd example reading TCP-like stream of wire formats from a file (#995)
Petr Špaček [Fri, 13 Oct 2023 12:08:02 +0000 (14:08 +0200)] 
add example reading TCP-like stream of wire formats from a file (#995)

2 years agogive up on codecov v4 action
Bob Halley [Tue, 10 Oct 2023 19:01:56 +0000 (12:01 -0700)] 
give up on codecov v4 action

2 years agoFix enum inversion.
Brian Wellington [Tue, 10 Oct 2023 18:29:27 +0000 (11:29 -0700)] 
Fix enum inversion.

A change in Python 3.11's enum module caused IntEnum inversion to only
invert the bits associated with the (inferred) range of the flag,
meaning that ~dns.flags.DO only inverted 16 bits.  This meant that
calling want_dnssec(False) on a message would unconditionally set the
EDNS version field to 0.

2 years agoupdate pylint
Bob Halley [Sat, 7 Oct 2023 18:35:56 +0000 (11:35 -0700)] 
update pylint

2 years agoBump codecov/codecov-action from 3 to 4 (#990)
dependabot[bot] [Fri, 29 Sep 2023 16:17:14 +0000 (09:17 -0700)] 
Bump codecov/codecov-action from 3 to 4 (#990)

Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 3 to 4.
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codecov/codecov-action/compare/v3...v4)

---
updated-dependencies:
- dependency-name: codecov/codecov-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2 years agoTest latest 3.12 release and add classifiers (#989)
Hugo van Kemenade [Wed, 13 Sep 2023 01:48:42 +0000 (19:48 -0600)] 
Test latest 3.12 release and add classifiers (#989)

* Test latest 3.12 release

* Update classifiers

2 years agoBump actions/checkout from 3 to 4 (#988)
dependabot[bot] [Mon, 4 Sep 2023 16:26:56 +0000 (09:26 -0700)] 
Bump actions/checkout from 3 to 4 (#988)

Bumps [actions/checkout](https://github.com/actions/checkout) from 3 to 4.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v3...v4)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2 years agotry to fix broken docs
Bob Halley [Tue, 29 Aug 2023 21:11:10 +0000 (14:11 -0700)] 
try to fix broken docs

2 years agodrop cryptography limit (#984)
Jakob Schlyter [Thu, 24 Aug 2023 21:47:33 +0000 (23:47 +0200)] 
drop cryptography limit (#984)

2 years agobuild on 3.12.0rc1 (#979)
Jakob Schlyter [Fri, 11 Aug 2023 01:00:57 +0000 (03:00 +0200)] 
build on 3.12.0rc1 (#979)

2 years agoAdd helpers to reduce seeking boilerplate when rendering. (#980)
Bob Halley [Fri, 11 Aug 2023 00:32:36 +0000 (17:32 -0700)] 
Add helpers to reduce seeking boilerplate when rendering. (#980)

2 years agoadd 2.4.2 changes to whatsnew
Bob Halley [Wed, 9 Aug 2023 13:55:41 +0000 (06:55 -0700)] 
add 2.4.2 changes to whatsnew

2 years agoEnsure async https() requests are bounded in total time
Bob Halley [Tue, 8 Aug 2023 01:16:42 +0000 (18:16 -0700)] 
Ensure async https() requests are bounded in total time
according to the timeout [#978].

Unfortunately we do not currently have a good way to
make this guarantee for sync https() calls.

2 years agotest inception, expiration, and lifetime when signing
Bob Halley [Sun, 6 Aug 2023 17:46:22 +0000 (10:46 -0700)] 
test inception, expiration, and lifetime when signing

2 years agoDNSSEC rrsig_expiration calculation (#977)
Shaft Inc [Sun, 6 Aug 2023 17:33:32 +0000 (19:33 +0200)] 
DNSSEC rrsig_expiration calculation (#977)

The 'rrsig_expiration' calculation did not take into account inception date when using 'lifetime' in the '_sign()' function

2 years agoFix unintended "wait forever" behavior with zero timeouts [#976].
Bob Halley [Sat, 5 Aug 2023 20:35:29 +0000 (13:35 -0700)] 
Fix unintended "wait forever" behavior with zero timeouts [#976].

In a few places we did "if timeout:" or "if expiration:" when we
really meant "if timeout is not None:".  This meant that in the zero
timeout case we fell into the "wait forever" path instead of
immediately timing out.  In the case of UDP queries, we'd be waiting
on recvfrom() and if a packet was lost, then the code would never wake
up.

2 years agoUse HTTP2 when possible in https() [#973].
Bob Halley [Sat, 5 Aug 2023 16:42:44 +0000 (09:42 -0700)] 
Use HTTP2 when possible in https() [#973].

This fixes a regression in 2.4.x where we would only
use HTTP/1.1.

2 years agorevert dependabot sphinx change as it is too recent for RTD
Bob Halley [Tue, 25 Jul 2023 19:05:35 +0000 (12:05 -0700)] 
revert dependabot sphinx change as it is too recent for RTD

2 years agoBump sphinx from 4.3.2 to 7.1.0 (#967)
dependabot[bot] [Tue, 25 Jul 2023 18:58:13 +0000 (11:58 -0700)] 
Bump sphinx from 4.3.2 to 7.1.0 (#967)

Bumps [sphinx](https://github.com/sphinx-doc/sphinx) from 4.3.2 to 7.1.0.
- [Release notes](https://github.com/sphinx-doc/sphinx/releases)
- [Changelog](https://github.com/sphinx-doc/sphinx/blob/master/CHANGES)
- [Commits](https://github.com/sphinx-doc/sphinx/compare/v4.3.2...v7.1.0)

---
updated-dependencies:
- dependency-name: sphinx
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2 years agoprepare 2.4.1 whatsnew
Bob Halley [Tue, 25 Jul 2023 14:05:56 +0000 (07:05 -0700)] 
prepare 2.4.1 whatsnew

2 years agoEnsure candidate DNSKEYs have protocol 3 and the ZONE flag set [#966].
Bob Halley [Tue, 25 Jul 2023 14:04:35 +0000 (07:04 -0700)] 
Ensure candidate DNSKEYs have protocol 3 and the ZONE flag set [#966].

2 years agoUpdate wheel requirement from ^0.40.0 to ^0.41.0 (#965)
dependabot[bot] [Mon, 24 Jul 2023 18:17:44 +0000 (11:17 -0700)] 
Update wheel requirement from ^0.40.0 to ^0.41.0 (#965)

Updates the requirements on [wheel](https://github.com/pypa/wheel) to permit the latest version.
- [Changelog](https://github.com/pypa/wheel/blob/main/docs/news.rst)
- [Commits](https://github.com/pypa/wheel/compare/0.40.0...0.41.0)

---
updated-dependencies:
- dependency-name: wheel
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2 years agoDependency cleanups [#963].
Bob Halley [Thu, 20 Jul 2023 20:31:35 +0000 (13:31 -0700)] 
Dependency cleanups [#963].