From cd99a67c2d9ab6553c3f683d06f7e3a610bf515f Mon Sep 17 00:00:00 2001
From: Otto Moerbeek <otto.moerbeek@open-xchange.com>
Date: Fri, 8 Oct 2021 11:33:23 +0200
Subject: [PATCH] Prep for rec-4.5.6

---
 docs/secpoll.zone                        |  3 +-
 pdns/recursordist/docs/changelog/4.5.rst | 67 ++++++++++++++++++++++++
 2 files changed, 69 insertions(+), 1 deletion(-)

diff --git a/docs/secpoll.zone b/docs/secpoll.zone
index 9e928b6db3..a59e0f9ad8 100644
--- a/docs/secpoll.zone
+++ b/docs/secpoll.zone
@@ -1,4 +1,4 @@
-@       86400   IN  SOA pdns-public-ns1.powerdns.com. pieter\.lexis.powerdns.com. 2021100801 10800 3600 604800 10800
+@       86400   IN  SOA pdns-public-ns1.powerdns.com. pieter\.lexis.powerdns.com. 2021101101 10800 3600 604800 10800
 @       3600    IN  NS  pdns-public-ns1.powerdns.com.
 @       3600    IN  NS  pdns-public-ns2.powerdns.com.
 
@@ -274,6 +274,7 @@ recursor-4.5.2.security-status                          60 IN TXT "1 OK"
 recursor-4.5.3.security-status                          60 IN TXT "2 Unsupported pre-release"
 recursor-4.5.4.security-status                          60 IN TXT "1 OK"
 recursor-4.5.5.security-status                          60 IN TXT "1 OK"
+recursor-4.5.6.security-status                          60 IN TXT "1 OK"
 recursor-4.6.0-alpha1.security-status                   60 IN TXT "1 OK"
 
 ; Recursor Debian
diff --git a/pdns/recursordist/docs/changelog/4.5.rst b/pdns/recursordist/docs/changelog/4.5.rst
index f674fa78d1..c448c60a90 100644
--- a/pdns/recursordist/docs/changelog/4.5.rst
+++ b/pdns/recursordist/docs/changelog/4.5.rst
@@ -1,6 +1,73 @@
 Changelogs for 4.5.X
 ====================
 
+.. changelog::
+  :version: 4.5.6
+  :released: 11th of October 2021
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 10806
+    :tickets: 10565
+
+    Do not use DNSKEYs found below an apex for validation.
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 10807
+    :tickets: 10622
+
+    Detect a loop when the denial of the DS comes from the child zone.
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 10809
+    :tickets: 10632
+
+    Match ordering of PacketID using the Birthday vs non-Birthday comparator used to detect spoofing attempts.
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 10811
+    :tickets: 10633
+
+    Pass the Lua context to follow up queries (follow CNAME, dns64).
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 10813
+    :tickets: 10718
+
+    Only the DNAME records are authoritative in DNAME answers.
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 10803
+    :tickets: 10768
+
+    Use the correct RPZ policy name for statistics when loading via XFR.
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 10717
+    :tickets: 10701
+
+    Fix the aggressive cache returning duplicated NSEC3 records.
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 10655
+    :tickets: 10643
+
+    NS from the cache could be a forwarder, take that into account for throttling decision.
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 10629
+    :tickets: 10627
+
+    Check in more places if the policy has been updated before using or modifying it.
+
 .. changelog::
   :version: 4.5.5
   :released: 30th of July 2021
-- 
2.47.2