feat(dnsdist): remove h2o support

chore(dnsdist): reformat dnsdist-settings-definitions.yml

chore(dnsdist): reformat test_OCSP.py

chore(dnsdist): reformat test_TLSSessionResumption.py

chore(dnsdist): reformat test_Async.py

Merge pull request #16721 from rgacogne/ddist-do-not-keep-stale-data-for-empty-pools

dnsdist: Do not keep stale cache entries around for empty pools

Merge pull request #16720 from rgacogne/ddist-fix-remote-addr-ring-buffers

dnsdist: Fix wrong address being inserted in the rings for responses

Merge pull request #16711 from pieterlexis/chore-add-resinfo

chore(dnsrecords): Add RESINFO DNS Record (RFC 9606)

Merge pull request #16574 from jsoref/add-problem-matcher

Improve GitHub error highlighting

Add problem matcher

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

Refactor normalize branch name

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

Refactor pip build dependencies

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

Refactor caching

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

Improve error reporting for curl->sha256sum

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

Merge pull request #16719 from omoerbeek/rec-prep-5.3.4

rec: Prep for rec-5.3.4

Fix spell check of SBOMs

Co-authored-by: Miod Vallat <miod.vallat@powerdns.com>
Signed-off-by: Otto Moerbeek <otto.moerbeek@open-xchange.com>

dnsdist: Do not keep stale cache entries around for empty pools

Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>

dnsdist: Test dynamic blocks for clients using the proxy protocol

Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>

dnsdist: Test dynamic blocks for DoH clients with X-Forwarded-For, including cache hits

Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>

dnsdist: Test dynamic blocks for DoQ/DoH3 clients, including cache hits

Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>

dnsdist: Fix exception handling for DoQ/DoH3 tests

Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>

dnsdist: Allow listening on a different addr for DoQ/DoH3 tests

Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>

rec: Prep for rec-5.3.4

Signed-off-by: Otto Moerbeek <otto.moerbeek@open-xchange.com>

dnsdist: Insert the proper remote address (proxy protocol, HTTP headers) in the rings

Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>

dnsdist: Fix wrong address being inserted in the rings for responses

Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>

Merge pull request #16668 from rgacogne/ddist-health-check-latency-bucket

dnsdist: Add an histogram of health-check latencies for backends

dnsdist: Check for duplicated prometheus line/keys

Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>

dnsdist: Refactor prometheus output for histograms

Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>

chore(dnsrecords): Add RESINFO DNS Record (RFC 9606)

Merge pull request #16705 from PowerDNS/dependabot/pip/meson/urllib3-2.6.3

build(deps): bump urllib3 from 2.6.0 to 2.6.3 in /meson

Merge pull request #16706 from PowerDNS/dependabot/pip/regression-tests.recursor-dnssec/urllib3-2.6.3

build(deps): bump urllib3 from 2.6.0 to 2.6.3 in /regression-tests.recursor-dnssec

Merge pull request #16703 from rgacogne/calidns-pdns-exception

calidns: Also handle `PDNSException`s in `main`

build(deps): bump urllib3 in /regression-tests.recursor-dnssec

Bumps [urllib3](https://github.com/urllib3/urllib3) from 2.6.0 to 2.6.3.
- [Release notes](https://github.com/urllib3/urllib3/releases)
- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)
- [Commits](https://github.com/urllib3/urllib3/compare/2.6.0...2.6.3)

---
updated-dependencies:
- dependency-name: urllib3
  dependency-version: 2.6.3
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

build(deps): bump urllib3 from 2.6.0 to 2.6.3 in /meson

Bumps [urllib3](https://github.com/urllib3/urllib3) from 2.6.0 to 2.6.3.
- [Release notes](https://github.com/urllib3/urllib3/releases)
- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)
- [Commits](https://github.com/urllib3/urllib3/compare/2.6.0...2.6.3)

---
updated-dependencies:
- dependency-name: urllib3
  dependency-version: 2.6.3
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

calidns: Also handle `PDNSException`s in `main`

Reported by Coverity as CID 1644004: Uncaught exception.

Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>

Merge pull request #16349 from pieterlexis/dnsdist-micro-benchmarks

dnsdist: Add code for microbenchmarks

Merge pull request #16687 from rgacogne/rust-sbom

SBOM: Add transitive dependencies for Rust-based libraries

chore(benchmarks): port misc.hh benchmarks from speedtest to catch2

feat(dnsdist): add OT span benchmarks

tests(dnsdist): Add Ring insertion benchmarks

chore(dnsdist): reformat benchmark files

tests(dnsdist): Add initial RCodeAction benchmark

tests(dnsdist): don't use intermediate static library for benchmarks

tests(dnsdist): Add a benchmark for dnsparser

tests(dnsdist): Add micro benchmarking

Merge pull request #16662 from omoerbeek/rec-tsan-trixie

rec: add acquire/release in broadcast pipes to fix TSAN issues seen on trixie

Merge pull request #16701 from jsoref/codeql-imprecise-assert

Use `assertIn`

builder-support: Fix double spaces in Quiche and CycloneDX helpers

Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>

Merge pull request #16700 from rgacogne/ddist-coverity-20260106

dnsdist: Fix small issues reported by Coverity

Use assertIn

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

Merge pull request #16655 from omoerbeek/rec-suse-boost66

rec: make code boost 1.66 compatible again

dnsdist: Prevent surprise exceptions raised in a dtor

Reported by Coverity.

Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>

dnsdist: Fix small performance issues reported by Coverity

Mostly copying objects that could be moved, plus a few cases of
mistakenly copying objects while looping over them.

Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>

Merge pull request #16622 from rgacogne/luawrapper-std-variant

LuaWrapper: Add support for `std::variant`

Merge pull request #16696 from omoerbeek/janitor-contrib-spurious-message

contrib: fix spurious "openTelemetry decoding not available" warning

Merge pull request #16695 from omoerbeek/janitor-zap-tcounters-spelling

Janitor work: fix `tcounters` is ignored by check-spelling because another more general variant is also in expect. (ignored-expect-variant)

Merge pull request #16661 from rgacogne/ddist-escape-spoof-raw-yaml

dnsdist: Handle escaped values in YAML SpoofRaw parameters

Merge pull request #16674 from rgacogne/ddist-fix-ip-only-certificate

dnsdist: Fix handling of IP-only TLS certificates

Merge pull request #15301 from rgacogne/calidns-proxy-protocol

calidns: Initial proxy protocol support

contrib: fix spurious "openTelemetry decoding not available" warning

Signed-off-by: Otto Moerbeek <otto.moerbeek@open-xchange.com>

Janitor work: fix `tcounters` is ignored by check-spelling because another more general variant is also in expect. (ignored-expect-variant)

Signed-off-by: Otto Moerbeek <otto.moerbeek@open-xchange.com>

Merge pull request #16597 from jsoref/peek-a-boo

Allow peeking at cache using an env var

Process miod's review comments

Signed-off-by: Otto Moerbeek <otto.moerbeek@open-xchange.com>

Merge pull request #16694 from omoerbeek/rec-docs-mem

rec: State more clearly that memory usage may vary on usage and config

Move common sanitizer preprocessor handling to separate file

Signed-off-by: Otto Moerbeek <otto.moerbeek@open-xchange.com>

Zap debug line and undo unrelated change

Signed-off-by: Otto Moerbeek <otto.moerbeek@open-xchange.com>

rec: State more clearly that memory usage may vary on usage and config

Signed-off-by: Otto Moerbeek <otto.moerbeek@open-xchange.com>

Merge pull request #16576 from pieterlexis/dnsdist-ot-send-raii

dnsdist: OpenTelemetry additions

Merge pull request #16678 from miodvallat/cold_turkey

auth: deaden dead code

Merge pull request #16690 from esensar/fix/set-extended-dns-errors-missing-docs

dnsdist: update docs for `DNSQuestion::setExtendedDNSError`

dnsdist: update docs for `DNSQuestion::setExtendedDNSError`

PR #16680 introduced new parameter for `setExtendedDNSError` - `clearExistingEntries`.
Docs were added for actions, but not for the lua function, which was
changed together with the actions.

Related: https://github.com/PowerDNS/pdns/pull/16680
Signed-off-by: Ensar Sarajčić <dev@ensarsarajcic.com>

SBOM: Install a pinned version of `cargo-cyclonedx`

Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>

Merge pull request #16680 from esensar/feature/add-extended-dns-errors

dnsdist: add a way to add multiple EDE codes to a packet

dnsdist: use new object in `addExtendedDNSError`

Signed-off-by: Ensar Sarajčić <dev@ensarsarajcic.com>

dnsdist: move `clearExisting` from EDNSError flag to a separate object

Signed-off-by: Ensar Sarajčić <dev@ensarsarajcic.com>

dnsdist: make `clear_existing_entries` optional in `SetExtendedDNSError`

Signed-off-by: Ensar Sarajčić <dev@ensarsarajcic.com>

SBOM: Generate Rust dependencies for the recursor

Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>

SBOM: Handle duplicate entries

Both Quiche and dnsdist-rust-lib use cc, for example, potentially
with different versions.
Actually it turns out that some dependencies (Quiche) can pull in two
different versions of the same library, probably because of transitive
depdendencies.

Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>

SBOM: More gracefully handle incomplete components from external SBOMs

Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>

SBOM: Static libs are Rust-based

Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>

install_quiche: Only run `cargo cyclonedx` when present

Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>

SBOM: Add transitive dependencies for Rust-based libraries

Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>

dnsdist: add tests for multiple EDE options support

Signed-off-by: Ensar Sarajčić <dev@ensarsarajcic.com>

dnsdist: add Lua FFI version of add extended DNS error

Signed-off-by: Ensar Sarajčić <dev@ensarsarajcic.com>

dnsdist: store clear flag in EDNS EDE

This allows more control over which ENDS EDE entries will be kept (e.g.
clear on first one, to delete existing data and then add additional
codes on top of that).

Signed-off-by: Ensar Sarajčić <dev@ensarsarajcic.com>

dnsdist: add `clearExistingEntries` to `SetExtendedDNSError`

Signed-off-by: Ensar Sarajčić <dev@ensarsarajcic.com>

dnsdist: reorder `AddExtendedDNSError` in actions definitions

Signed-off-by: Ensar Sarajčić <dev@ensarsarajcic.com>

Merge pull request #16677 from romeroalx/fix-auth-build-systemd

Fix builder-support/dockerfiles/Dockerfile.authoritative: remove copy of removed folder auth/systemd

dnsdist: add a way to add multiple EDE codes to a packet

Signed-off-by: Ensar Sarajčić <dev@ensarsarajcic.com>

Remove dead code.

Signed-off-by: Miod Vallat <miod.vallat@powerdns.com>

builder-support/dockerfiles/Dockerfile.authoritative: remove copy of renamed folder auth/systemd

Merge pull request #16676 from PowerDNS/dependabot/pip/docs/urllib3-2.6.0

build(deps): bump urllib3 from 2.5.0 to 2.6.0 in /docs

Merge pull request #16636 from miodvallat/autotertiary

auth: perform axfr immediately when creating an autosecondary domain

Merge pull request #16348 from miodvallat/disordername

auth rfc2136: more code cleanup

Merge pull request #16301 from miodvallat/ixfratu

auth: always send a response for {A,I}XFR requests

build(deps): bump urllib3 from 2.5.0 to 2.6.0 in /docs

Bumps [urllib3](https://github.com/urllib3/urllib3) from 2.5.0 to 2.6.0.
- [Release notes](https://github.com/urllib3/urllib3/releases)
- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)
- [Commits](https://github.com/urllib3/urllib3/compare/2.5.0...2.6.0)

---
updated-dependencies:
- dependency-name: urllib3
  dependency-version: 2.6.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

Merge pull request #16675 from romeroalx/tests-auth-py-dnspython-2.8.0

regression-tests.auth-py: upgrade dnspython to a more recent version

regression-tests.auth-py: upgrade dnspython to a more recent version

clang-tidy: Reduce the complexity of the main function

Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>

calidns: Initial proxy protocol support

Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>