Update BADTSIG text.

Note module name is "dns"

Fix other isdigit() instances that are better as isdecimal().

Both raised exceptions, but the latter raises a
dns.exception.SyntaxError in cases where the old code raised
ValueError.

This change also fixes the tokenizer's get_int() method, which
did not work for bases bigger than 10.

Raise BadTTL for non-decimal Unicode digits in dns.ttl.from_text(). (#1279)

from_text() gated its integer parsing on str.isdigit(), then handed the
text to int().  str.isdigit() is True for Unicode "digit" characters whose
category is No (e.g. the superscript "\u00b2" or the Ethiopic "\u1369"),
but int() only accepts decimal digits, so such input escaped the parser's
validation and raised a bare ValueError instead of the documented
dns.ttl.BadTTL.

This was reachable through the public zone-file parser: a resource-record
TTL or a $TTL directive containing such a character crashed
dns.zone.from_text() with a ValueError rather than a clean
dns.exception.SyntaxError.

Switch both isdigit() checks to isdecimal().  For a single character,
int()-acceptance is exactly equivalent to isdecimal(), and isdecimal() is a
strict subset of isdigit(), so every previously valid TTL still parses while
the non-decimal digits are now rejected as BadTTL.

Add a regression test covering the fast (all-digit) path and the BIND-style
units path.

Fix uv globbing.

Source kit builds were not longer including the tests, examples,
and utilities because the glob stopped matching.  Previously we
were using an "absolute" syntax starting with "/" but this doesn't
seem to work now.

Also, added tests/tsigkeys/*.key to the glob so they are included.

Unknown flag fixes.

We now mask out opcode and rcode for (regular) flags,
and the extended rcode and version for EDNS flags.

We now test with unknown flag 0x0040 for flags, as
it is the only actually undefined flag bit.

We now test with unknown flags 0x0003 for EDNS, as
flag 0x2000 is expected to be used in DELEG.

Render unnamed flag bits in to_text() instead of dropping them (#1276)

Closes #1264.

dns.flags.to_text() and dns.flags.edns_to_text() iterated only the named
enum members, so any set bit without a named flag (for example the EDNS
0x2000 bit) was silently dropped from the text representation. Such bits
are now rendered as FLAGn, where n is the bit position, and from_text()
and edns_from_text() parse that form back, so the conversions round-trip.

Adds tests in tests/test_flags.py and a whatsnew entry.

Fixes [#1264].

Co-authored-by: Eugen Goebel <eugen-goebel@users.noreply.github.com>

Open tsig key file (#1271)

* add tsigkeyring.from_file to use key file generate by tsig-keygen

* add tsigkeyring.from_file to use key file generate by tsig-keygen

Tell black we target our least supported version.

simplify Serial hash tests; remove "equality contract" comments

Make dns.serial.Serial hashable (#1277)

Bump actions/checkout from 6 to 7 (#1275)

Bumps [actions/checkout](https://github.com/actions/checkout) from 6 to 7.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v6...v7)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

fix typo

switch from httpx to httpx2

upgrade pypy to 3.11; fixes issue building cryptography wheel for CI

fix encoding bug with new EDNS options; apply black

Add new IANA-allocated options from draft-muks-dns-filtering (#1269)

Add newly allocated EDE INFO-CODEs (#1268)

These are from the "Extended DNS Error Codes" registry in the "Domain
Name System (DNS) Parameters" registry group.

modernize pyproject license format

license classifiers are deprecated now

type lint

fix testInvalidDigestLengthCDS0 for 3.15

Comprehensive conversion of documentation to Python documentation norms. (#1266)

Forgot the HHIT file!

Add HHIT and BRID types (RFC 9886).

Update uv-build requirement from <0.11.0,>=0.9.21 to >=0.9.21,<0.12.0 (#1265)

Updates the requirements on [uv-build](https://github.com/astral-sh/uv) to permit the latest version.
- [Release notes](https://github.com/astral-sh/uv/releases)
- [Changelog](https://github.com/astral-sh/uv/blob/main/CHANGELOG.md)
- [Commits](https://github.com/astral-sh/uv/compare/0.9.21...0.11.0)

---
updated-dependencies:
- dependency-name: uv-build
  dependency-version: 0.11.0
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

latest ty lint

rearrange docpath and alpn inheritance to make typing happy.

svcbbase: add docpath SvcParamKey (#1262)

* svcbbase: add docpath SvcParamKey

* tests: add tests for docpath

* svcbbase: remove debug print

* Allow for empty docpath to be printed without ""

* Remove now unnecessary DoCPathParam construtor

misc black formatting lint

Bump actions/upload-artifact from 6 to 7 (#1260)

Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 6 to 7.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/v6...v7)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bump actions/download-artifact from 7 to 8 (#1259)

Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 7 to 8.
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](https://github.com/actions/download-artifact/compare/v7...v8)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-version: '8'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Provide a "styled text" mechanism to comprehensively control (#1258)

text generation, and to make it easier to enhance in the future.

Styled text includes the ability to output to a (non-standard)
zonefile format which is like the normal format except that
Punycoded names are converted back to Unicode, and (optionally)
TXT-like records may use UTF-8, and if they do the text is rendered
as Unicode.

fix more IDNA tests

more IDNA doco updates

Fix missed things in IDNA default change.

IDNA default improvements

* If idna is available, make IDNA_2008_Practical the default idna_codec.

* Add a way to set the default IDNA codec.

Update uv-build requirement from <0.10.0,>=0.9.21 to >=0.9.21,<0.11.0 (#1256)

Updates the requirements on [uv-build](https://github.com/astral-sh/uv) to permit the latest version.
- [Release notes](https://github.com/astral-sh/uv/releases)
- [Changelog](https://github.com/astral-sh/uv/blob/main/CHANGELOG.md)
- [Commits](https://github.com/astral-sh/uv/compare/0.9.21...0.10.0)

---
updated-dependencies:
- dependency-name: uv-build
  dependency-version: 0.10.0
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

more dev dependency updates

ty 0.0.14 lint

apply black 26.1

Add RFC 9824 CO EDNS flag

remove mypy from pyproject.toml

more mypy removal

ty 0.0.12 lint

Bump sphinx-rtd-theme from 3.0.2 to 3.1.0 (#1253)

Bumps [sphinx-rtd-theme](https://github.com/readthedocs/sphinx_rtd_theme) from 3.0.2 to 3.1.0.
- [Changelog](https://github.com/readthedocs/sphinx_rtd_theme/blob/master/docs/changelog.rst)
- [Commits](https://github.com/readthedocs/sphinx_rtd_theme/compare/3.0.2...3.1.0)

---
updated-dependencies:
- dependency-name: sphinx-rtd-theme
  dependency-version: 3.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

further typing fixes for zone to file

type lint for latest ty and pyright

fix logging formatting

Add DDNS server example (#1246)

Adjust the default values of the DDNS client example to connect to the one from the server example.

Use queue instead of single future in asyncio datagram socket (#1250)

Previously, a single future was used and any package which was received before the future was awaited was silently discarded.

Various small improvements (#1248)

* Use name parameter

This increases clarity and is less error-prone.

* Improve optional error ignore

* Prefix private classes with underscore to avoid confusion

The public interface is the base class in dns._asyncbackend.

* Inherit from asyncio.DatagramProtocol

switch to uv build; update deps

add NXNAME

minor coverage enhancements

remove unneed name tests; more circular import fixes

remove now-unneeded test

break name/wire circular imports; name type tweaks

Convert deprecated typing module types to modern forms.

Bump actions/upload-artifact from 5 to 6 (#1244)

Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 5 to 6.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/v5...v6)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bump actions/download-artifact from 6 to 7 (#1243)

Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 6 to 7.
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](https://github.com/actions/download-artifact/compare/v6...v7)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

remove duplication

more ty fixes

ty requires a venv currently

lint

remove mypy as librt build failure breaks CI on 3.15dev and pypy

initial support for "ty" type checker

conform to abstract set class type for __contains__

improve typing and remove unneeded assignments

use the generic type checker ignore syntax instead of pyright

docs: Add :py:func:`...` annotations (#1238)

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

Bump actions/checkout from 5 to 6 (#1239)

Bumps [actions/checkout](https://github.com/actions/checkout) from 5 to 6.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v5...v6)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Zone transfers should ignore glue that is not a subdomain of the
origin [#1236].

Ideally, we'd actually store this somewhere as in theory it is
needed for pathological cross zone dependencies.  We are
not doing this as in practice such dependencies break a lot of
DNS software, and are usually not viable "in the wild".

Bump actions/upload-artifact from 4 to 5 (#1234)

Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4 to 5.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/v4...v5)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bump actions/download-artifact from 5 to 6 (#1233)

Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 5 to 6.
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](https://github.com/actions/download-artifact/compare/v5...v6)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

re-export immutable

pass args to uv

update test matrix post 3.14 release

add python 3.14 to classifiers

remove old lint configs

ruff is enough for linting

Version updater and uv build support (off by default).

Rename the getaddrinfo parameter "socktype" to "type" [#1231]

The socket type parameter to socket.getaddrinfo used to be called "socktype" in
Python 2, but was renamed to "type" in Python 3.  We applied this change on
the python3 branch almost a decade ago, but it was lost in the "single code base,
only Python 3" update, also quite some time ago.  It is now renamed to "type"
(again) so it matches the Python 3 code it is overriding.

uv helpers

Fix typo in pyproject.toml (#1228)

add ruff to dev deps

ruff lint, add rrsigbase to __all__

Include pyright in dev extra (#1227)

Initial changes to prepare for SIG(0) (#1202)

* # This is a combination of 6 commits.
# This is the 1st commit message:

Initial changes to prepare for SIG(0):
- Add shared RRSIGBase for code shared between RRSIG and SIG
- Add KEY RR
- Add SIG RR

# This is the commit message #2:

Parse flags mnemonics and symbolic protocol names

# This is the commit message #3:

RFC 2535 section 7.1 says "Note that if the type flags field has the NOKEY value, nothing appears after the algorithm octet."

# This is the commit message #4:

Include sphinx only for Python 3.11 or later (#1225)

* Include sphinx only for Python 3.11 or later

* Use python_version
# This is the commit message #5:

Save token before returning it (for exception handling)

# This is the commit message #6:

Replace get/unget with plain unget and last token

* Initial changes to prepare for SIG(0):
- Add shared RRSIGBase for code shared between RRSIG and SIG
- Add KEY RR
- Add SIG RR
- Parse flags mnemonics and symbolic protocol names

* Make pyright happy

Do not test ECDSA deterministic mode if cryptography could not build
a wheel with support for it.  This can happen with pypy on ubuntu-latest.

Extend tokenizer (#1226)

* Extend tokenizer with as_int, as_uint8, as_uint16, as_uint32, as_uint48 and as_string

* Add as_identifier()

Include sphinx only for Python 3.11 or later (#1225)

* Include sphinx only for Python 3.11 or later

* Use python_version

Avoid infinite recursion when unpickling an Answer [#1224]

update SECURITY.md after 2.8.0 release

further update workflows

update workflows

Bump actions/checkout from 4 to 5 (#1222)

Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 5.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v4...v5)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bump actions/setup-python from 5 to 6 (#1221)

Bumps [actions/setup-python](https://github.com/actions/setup-python) from 5 to 6.
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](https://github.com/actions/setup-python/compare/v5...v6)

---
updated-dependencies:
- dependency-name: actions/setup-python
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bump actions/download-artifact from 4 to 5 (#1220)

Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 4 to 5.
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](https://github.com/actions/download-artifact/compare/v4...v5)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

only publish on manual dispatch