Let pdnsutil advise refreshing the zone cache upon zone creation.

Signed-off-by: Miod Vallat <miod.vallat@powerdns.com>

Slightly smarter DNSSEC cache purge logic.

Signed-off-by: Miod Vallat <miod.vallat@powerdns.com>

build(deps): bump urllib3 from 2.5.0 to 2.6.0 in /docs

Bumps [urllib3](https://github.com/urllib3/urllib3) from 2.5.0 to 2.6.0.
- [Release notes](https://github.com/urllib3/urllib3/releases)
- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)
- [Commits](https://github.com/urllib3/urllib3/compare/2.5.0...2.6.0)

---
updated-dependencies:
- dependency-name: urllib3
  dependency-version: 2.6.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

Merge pull request #16675 from romeroalx/tests-auth-py-dnspython-2.8.0

regression-tests.auth-py: upgrade dnspython to a more recent version

regression-tests.auth-py: upgrade dnspython to a more recent version

clang-tidy: Reduce the complexity of the main function

Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>

calidns: Initial proxy protocol support

Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>

Merge pull request #16441 from rgacogne/sort-by-pr-number-in-changelog-from-pr

changelog-from-pr: Sort PRs based on their ID

Merge pull request #16671 from rgacogne/auth-meson-install

auth: Actually install binaries when building with meson

auth: Fix generating dist with autotools

Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>

auth: Install example configuration files when building with meson

Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>

auth: Install systemd unit files when building with meson

Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>

auth: Properly install schema files and upgrades

Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>

auth: Install dynamic modules when building with `meson`

Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>

dnsdist: Clean up the type mess around latency metrics

Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>

dnsdist: Unify histogram updates

Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>

dnsdist: Add missing configuration file for the IP-only tests

Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>

dnsdist: Add regression tests for IP-only TLS certificates

Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>

dnsdist: Fix handling of IP-only TLS certificates

To properly handle SNI with OpenSSL, we have to keep track of the TLS
names supported by the different certificates associated to a frontend.
Since IP-only names are not involved in SNI negotiations, we are currently
skipping them when creating the TLS SNI map. Unfortunately this causes
an issue when we have a single certificate that only contains IPs,
the default context not being properly set.
This commit ensures the default context is properly set in that case.

Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>

Merge pull request #16669 from esensar/fix/geoip-mmdb-open-error

auth: fix geoip_mmdb backend MMDB_open error handling

Merge pull request #16672 from ukleinek/trippple-listen

rec/doc: Fix stray 'listen:' tokens in code example

rec/doc: Fix stray 'listen:' tokens in code example

Signed-off-by: Uwe Kleine-König <uwe@kleine-koenig.org>

auth: Actually install binaries when building with meson

Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>

auth: fix geoip_mmdb backend MMDB_open error handling

According to [MMDB_open docs], errors from `MMDB_open` should be
compared to `MMDB_SUCCESS` (which is 0). All other errors are > 0, which
means that existing check never detects errors, causing further queries
to fail with error:
```
The MaxMind DB file is in a format this library can't handle
(unknown record size or binary format version)
```

[MMDB_open docs]: https://maxmind.github.io/libmaxminddb/#mmdb_open

Signed-off-by: Ensar Sarajčić <dev@ensarsarajcic.com>

Merge pull request #16653 from simmonyau/sdig-missing-libcurl-dep

Meson: Add missing libcurl dep for sdig

Merge pull request #16656 from PowerDNS/dependabot/pip/meson/requests-2.32.4

build(deps): bump requests from 2.32.3 to 2.32.4 in /meson

dnsdist: Add an histogram of health-check latencies for backends

Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>

Merge pull request #16663 from milzi234/chore/docs_lse_version_selector

Version selector for PDNS Lightning Stream Enterprise in docs

Merge pull request #16660 from rgacogne/dnsdist-fix-selectors-actions-order-documentation

dnsdist: Ensure selectors and actions are properly ordered in the documentation

fixes typo in version selector call

Do away with std::optional for Routing tag

Signed-off-by: Otto Moerbeek <otto.moerbeek@open-xchange.com>

adds a separate version selector for PDNS Lightning Stream Enterprise to the documentation site

wip for acquire/release in broadcast pipes

Signed-off-by: Otto Moerbeek <otto.moerbeek@open-xchange.com>

dnsdist: Ensure selectors and actions are properly ordered in the documentation

Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>

dnsdist: Fix ordering of actions in the action definitions

Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>

Merge pull request #16659 from xabinapal/issue-16074

Add fail-close backupselector mode for Lua healthcheck functions

Merge pull request #16658 from omoerbeek/rec-docs-source-address-note

rec: better describe which source addresses are accepted

test(auth): rename empty backupselector test record

Signed-off-by: Xabier Napal <xabier.napal@dvzr.io>

Merge pull request #16657 from miodvallat/luastice

auth: more robustness in createReverse*

test(auth): add empty backupselector test case

Signed-off-by: Xabier Napal <xabier.napal@dvzr.io>

docs: add new backupselector option in lua functions

Signed-off-by: Xabier Napal <xabier.napal@dvzr.io>

feat(auth): add empty selector for ifportup and ifurlup functions

Signed-off-by: Xabier Napal <xabier.napal@dvzr.io>

rec: better describe which source addresses are accepted

Signed-off-by: Otto Moerbeek <otto.moerbeek@open-xchange.com>

Merge pull request #16642 from miodvallat/lmdbettercheck

auth lmdb: winter paranoia

Add more createReverse/createReverse6 error tests.

Signed-off-by: Miod Vallat <miod.vallat@powerdns.com>

Add missing exception guard to lua createReverse.

While there, amend the exception messages in createReverse and createReverse6
to be a bit more precise and identify which function produced them.

Signed-off-by: Miod Vallat <miod.vallat@powerdns.com>

dnsdist: Handle escaped values in YAML SpoofRaw parameters

Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>

build(deps): bump requests from 2.32.3 to 2.32.4 in /meson

Bumps [requests](https://github.com/psf/requests) from 2.32.3 to 2.32.4.
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](https://github.com/psf/requests/compare/v2.32.3...v2.32.4)

---
updated-dependencies:
- dependency-name: requests
  dependency-version: 2.32.4
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

Merge pull request #16640 from PowerDNS/dependabot/pip/builder-support/urllib3-2.6.0

build(deps): bump urllib3 from 2.5.0 to 2.6.0 in /builder-support

Avoid a few unused vars reported by g++-15

Signed-off-by: Otto Moerbeek <otto.moerbeek@open-xchange.com>

Don't include filesystem if not needed, it might not be available

Signed-off-by: Otto Moerbeek <otto.moerbeek@open-xchange.com>

Avoid a shadowing case reported by g++-15

Signed-off-by: Otto Moerbeek <otto.moerbeek@open-xchange.com>

Avoid cases of "sorry, unimplemented: non-trivial designated initializers not supported"
reported by g++-15 (missing initializer)

Signed-off-by: Otto Moerbeek <otto.moerbeek@open-xchange.com>

Avoid a few cases of shadowing reported by g++-15

Signed-off-by: Otto Moerbeek <otto.moerbeek@open-xchange.com>

wip

Signed-off-by: Otto Moerbeek <otto.moerbeek@open-xchange.com>

Meson: Add missing libcurl dep for sdig

Fix error seen when linking sdig without lua records.

Signed-off-by: Simmon Yau <syau@fastly.com>

Merge pull request #16644 from rgacogne/rust-audit-branches

ci: Run the daily Rust dependencies audit for all stable branches

Merge pull request #16652 from rgacogne/auth-doc-api-replace-is-not-new

auth: `EXTEND` and `PRUNE` are new in 4.9.12 and 5.0.2, not `REPLACE`

auth: `EXTEND` and `PRUNE` are new in 4.9.12 and 5.0.2, not `REPLACE`

Spotted by `rdz` on IRC.

Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>

Merge pull request #16651 from omoerbeek/rec-cookie-dump-pretty

rec: Print irrelevent entries in cookie dump more nicely

rec: Print irrelevent entries in cookie dump more nicely

Signed-off-by: Otto Moerbeek <otto.moerbeek@open-xchange.com>

Merge pull request #16646 from omoerbeek/rec-prep-5.4.0-alpha1

Prep for rec-5.4.0-alpha1

Merge pull request #16639 from miodvallat/entropocene

auth: remove configurable random generator leftovers

Prep for rec-5.4.0-alpha1

Signed-off-by: Otto Moerbeek <otto.moerbeek@open-xchange.com>

Merge pull request #16643 from rgacogne/ddist-update-rust-libs

dnsdist: Update our Rust dependencies

Merge pull request #16569 from miodvallat/unsort

pdnsutil: make "zone list" record sorting optional

ci: Run the daily Rust dependencies audit for all stable branches

Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>

dnsdist: Update our Rust dependencies

Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>

build(deps): bump urllib3 from 2.5.0 to 2.6.0 in /builder-support

Bumps [urllib3](https://github.com/urllib3/urllib3) from 2.5.0 to 2.6.0.
- [Release notes](https://github.com/urllib3/urllib3/releases)
- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)
- [Commits](https://github.com/urllib3/urllib3/compare/2.5.0...2.6.0)

---
updated-dependencies:
- dependency-name: urllib3
  dependency-version: 2.6.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

Merge pull request #16641 from PowerDNS/dependabot/pip/regression-tests.recursor-dnssec/urllib3-2.6.0

build(deps): bump urllib3 from 2.5.0 to 2.6.0 in /regression-tests.recursor-dnssec

Make sure never to try and access LMDBResourceRecords beyond their actual size.

Signed-off-by: Miod Vallat <miod.vallat@powerdns.com>

Give the list flavour of deserializeFromBuffer() a different name.

Signed-off-by: Miod Vallat <miod.vallat@powerdns.com>

Minor code cleanups:

- remove unused bits from getUnfreshSecondaryInfo().
- use similar logic for the two code paths which need to fetch SOA numbers.

Signed-off-by: Miod Vallat <miod.vallat@powerdns.com>

Merge pull request #16627 from omoerbeek/rec-rust-nicer-errs

rec: format rust IOErrors in a nicer way instead of using the default formatter

No need to do a downcast dance and include fix for https://github.com/dtolnay/cxx/issues/1684

Signed-off-by: Otto Moerbeek <otto.moerbeek@open-xchange.com>

Allow (but warn) entropy-source and rng settings until 5.2.

Signed-off-by: Miod Vallat <miod.vallat@powerdns.com>

chore(dnsdist): get rid of optionals in SetTraceAction

These values are always set to defaults in the `SetTraceActionConfiguration`.
This also packs the class members more memory efficient.

feat(dnsdist): Allow stripping TRACEPARENT EDNS option in SetTraceAction

fix(dnsdist): reuse buffer for protobuf messages

fix(dnsdist): hide the TraceAction class on non-PB builds

fix(dnsdist): don't do work when no PB needs to be sent

fix(dnsdist): Ensure SetTraceAction compiles in non-PB builds

chore(tests): update dnsdist regressiontests packages

feat(dnsdist): Add more TCP related traces

feat(dnsdist): Use the stack-based approach for Tracing

feat(opentelemetry): Add infrastructure to support a stack-based tracking of spanids

fix(dnsdist): Add type of Rule to each Rule trace

feat(dnsdist): Allow passing RemoteLoggers to SetTrace action

chore(dnsdist): Send delayed protobuf through RAII

chore(dnsdist): Add regular protobuf delayed response action test

build(deps): bump urllib3 in /regression-tests.recursor-dnssec

Bumps [urllib3](https://github.com/urllib3/urllib3) from 2.5.0 to 2.6.0.
- [Release notes](https://github.com/urllib3/urllib3/releases)
- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)
- [Commits](https://github.com/urllib3/urllib3/compare/2.5.0...2.6.0)

---
updated-dependencies:
- dependency-name: urllib3
  dependency-version: 2.6.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

Merge pull request #16637 from romeroalx/ci-build-test-dnsdist-deb11-noarm

gh actions - build-and-test-all skip build dnsdist arm64 on debian 11

Remove KISS rng configuration leftovers.

Signed-off-by: Miod Vallat <miod.vallat@powerdns.com>

Merge pull request #16638 from miodvallat/undercover

auth: i like to std::move it std::move it

Remove use of rng and entropy-source parameters.

Document them as having been removed.

Fixes: #16554
Signed-off-by: Miod Vallat <miod.vallat@powerdns.com>

Address Coverity reported unnecessary object copies.

Signed-off-by: Miod Vallat <miod.vallat@powerdns.com>

build-and-test-all.yml: skip swagger-syntax-check on debian 11

build-and-test-all.yml: skip build dnsdist arm64 on debian 11

When creating a domain as part of autosecondary, schedule a fetch immediately.

Fixes #16418

Signed-off-by: Miod Vallat <miod.vallat@powerdns.com>

Remove non-applicable comment.

Signed-off-by: Miod Vallat <miod.vallat@powerdns.com>