dnsdist: use new object in `addExtendedDNSError`

Signed-off-by: Ensar Sarajčić <dev@ensarsarajcic.com>

dnsdist: move `clearExisting` from EDNSError flag to a separate object

Signed-off-by: Ensar Sarajčić <dev@ensarsarajcic.com>

dnsdist: make `clear_existing_entries` optional in `SetExtendedDNSError`

Signed-off-by: Ensar Sarajčić <dev@ensarsarajcic.com>

dnsdist: add tests for multiple EDE options support

Signed-off-by: Ensar Sarajčić <dev@ensarsarajcic.com>

dnsdist: add Lua FFI version of add extended DNS error

Signed-off-by: Ensar Sarajčić <dev@ensarsarajcic.com>

dnsdist: store clear flag in EDNS EDE

This allows more control over which ENDS EDE entries will be kept (e.g.
clear on first one, to delete existing data and then add additional
codes on top of that).

Signed-off-by: Ensar Sarajčić <dev@ensarsarajcic.com>

dnsdist: add `clearExistingEntries` to `SetExtendedDNSError`

Signed-off-by: Ensar Sarajčić <dev@ensarsarajcic.com>

dnsdist: reorder `AddExtendedDNSError` in actions definitions

Signed-off-by: Ensar Sarajčić <dev@ensarsarajcic.com>

dnsdist: add a way to add multiple EDE codes to a packet

Signed-off-by: Ensar Sarajčić <dev@ensarsarajcic.com>

Merge pull request #16676 from PowerDNS/dependabot/pip/docs/urllib3-2.6.0

build(deps): bump urllib3 from 2.5.0 to 2.6.0 in /docs

Merge pull request #16636 from miodvallat/autotertiary

auth: perform axfr immediately when creating an autosecondary domain

Merge pull request #16348 from miodvallat/disordername

auth rfc2136: more code cleanup

Merge pull request #16301 from miodvallat/ixfratu

auth: always send a response for {A,I}XFR requests

build(deps): bump urllib3 from 2.5.0 to 2.6.0 in /docs

Bumps [urllib3](https://github.com/urllib3/urllib3) from 2.5.0 to 2.6.0.
- [Release notes](https://github.com/urllib3/urllib3/releases)
- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)
- [Commits](https://github.com/urllib3/urllib3/compare/2.5.0...2.6.0)

---
updated-dependencies:
- dependency-name: urllib3
  dependency-version: 2.6.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

Merge pull request #16675 from romeroalx/tests-auth-py-dnspython-2.8.0

regression-tests.auth-py: upgrade dnspython to a more recent version

regression-tests.auth-py: upgrade dnspython to a more recent version

Merge pull request #16441 from rgacogne/sort-by-pr-number-in-changelog-from-pr

changelog-from-pr: Sort PRs based on their ID

Merge pull request #16671 from rgacogne/auth-meson-install

auth: Actually install binaries when building with meson

auth: Fix generating dist with autotools

Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>

auth: Install example configuration files when building with meson

Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>

auth: Install systemd unit files when building with meson

Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>

auth: Properly install schema files and upgrades

Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>

auth: Install dynamic modules when building with `meson`

Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>

Merge pull request #16669 from esensar/fix/geoip-mmdb-open-error

auth: fix geoip_mmdb backend MMDB_open error handling

Merge pull request #16672 from ukleinek/trippple-listen

rec/doc: Fix stray 'listen:' tokens in code example

rec/doc: Fix stray 'listen:' tokens in code example

Signed-off-by: Uwe Kleine-König <uwe@kleine-koenig.org>

auth: Actually install binaries when building with meson

Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>

auth: fix geoip_mmdb backend MMDB_open error handling

According to [MMDB_open docs], errors from `MMDB_open` should be
compared to `MMDB_SUCCESS` (which is 0). All other errors are > 0, which
means that existing check never detects errors, causing further queries
to fail with error:
```
The MaxMind DB file is in a format this library can't handle
(unknown record size or binary format version)
```

[MMDB_open docs]: https://maxmind.github.io/libmaxminddb/#mmdb_open

Signed-off-by: Ensar Sarajčić <dev@ensarsarajcic.com>

Merge pull request #16653 from simmonyau/sdig-missing-libcurl-dep

Meson: Add missing libcurl dep for sdig

Merge pull request #16656 from PowerDNS/dependabot/pip/meson/requests-2.32.4

build(deps): bump requests from 2.32.3 to 2.32.4 in /meson

Merge pull request #16663 from milzi234/chore/docs_lse_version_selector

Version selector for PDNS Lightning Stream Enterprise in docs

Merge pull request #16660 from rgacogne/dnsdist-fix-selectors-actions-order-documentation

dnsdist: Ensure selectors and actions are properly ordered in the documentation

fixes typo in version selector call

adds a separate version selector for PDNS Lightning Stream Enterprise to the documentation site

dnsdist: Ensure selectors and actions are properly ordered in the documentation

Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>

dnsdist: Fix ordering of actions in the action definitions

Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>

Merge pull request #16659 from xabinapal/issue-16074

Add fail-close backupselector mode for Lua healthcheck functions

Merge pull request #16658 from omoerbeek/rec-docs-source-address-note

rec: better describe which source addresses are accepted

test(auth): rename empty backupselector test record

Signed-off-by: Xabier Napal <xabier.napal@dvzr.io>

Merge pull request #16657 from miodvallat/luastice

auth: more robustness in createReverse*

test(auth): add empty backupselector test case

Signed-off-by: Xabier Napal <xabier.napal@dvzr.io>

docs: add new backupselector option in lua functions

Signed-off-by: Xabier Napal <xabier.napal@dvzr.io>

feat(auth): add empty selector for ifportup and ifurlup functions

Signed-off-by: Xabier Napal <xabier.napal@dvzr.io>

rec: better describe which source addresses are accepted

Signed-off-by: Otto Moerbeek <otto.moerbeek@open-xchange.com>

Merge pull request #16642 from miodvallat/lmdbettercheck

auth lmdb: winter paranoia

Add more createReverse/createReverse6 error tests.

Signed-off-by: Miod Vallat <miod.vallat@powerdns.com>

Add missing exception guard to lua createReverse.

While there, amend the exception messages in createReverse and createReverse6
to be a bit more precise and identify which function produced them.

Signed-off-by: Miod Vallat <miod.vallat@powerdns.com>

build(deps): bump requests from 2.32.3 to 2.32.4 in /meson

Bumps [requests](https://github.com/psf/requests) from 2.32.3 to 2.32.4.
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](https://github.com/psf/requests/compare/v2.32.3...v2.32.4)

---
updated-dependencies:
- dependency-name: requests
  dependency-version: 2.32.4
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

Merge pull request #16640 from PowerDNS/dependabot/pip/builder-support/urllib3-2.6.0

build(deps): bump urllib3 from 2.5.0 to 2.6.0 in /builder-support

Meson: Add missing libcurl dep for sdig

Fix error seen when linking sdig without lua records.

Signed-off-by: Simmon Yau <syau@fastly.com>

Merge pull request #16644 from rgacogne/rust-audit-branches

ci: Run the daily Rust dependencies audit for all stable branches

Merge pull request #16652 from rgacogne/auth-doc-api-replace-is-not-new

auth: `EXTEND` and `PRUNE` are new in 4.9.12 and 5.0.2, not `REPLACE`

auth: `EXTEND` and `PRUNE` are new in 4.9.12 and 5.0.2, not `REPLACE`

Spotted by `rdz` on IRC.

Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>

Merge pull request #16651 from omoerbeek/rec-cookie-dump-pretty

rec: Print irrelevent entries in cookie dump more nicely

rec: Print irrelevent entries in cookie dump more nicely

Signed-off-by: Otto Moerbeek <otto.moerbeek@open-xchange.com>

Merge pull request #16646 from omoerbeek/rec-prep-5.4.0-alpha1

Prep for rec-5.4.0-alpha1

Merge pull request #16639 from miodvallat/entropocene

auth: remove configurable random generator leftovers

Prep for rec-5.4.0-alpha1

Signed-off-by: Otto Moerbeek <otto.moerbeek@open-xchange.com>

Merge pull request #16643 from rgacogne/ddist-update-rust-libs

dnsdist: Update our Rust dependencies

Merge pull request #16569 from miodvallat/unsort

pdnsutil: make "zone list" record sorting optional

ci: Run the daily Rust dependencies audit for all stable branches

Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>

dnsdist: Update our Rust dependencies

Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>

build(deps): bump urllib3 from 2.5.0 to 2.6.0 in /builder-support

Bumps [urllib3](https://github.com/urllib3/urllib3) from 2.5.0 to 2.6.0.
- [Release notes](https://github.com/urllib3/urllib3/releases)
- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)
- [Commits](https://github.com/urllib3/urllib3/compare/2.5.0...2.6.0)

---
updated-dependencies:
- dependency-name: urllib3
  dependency-version: 2.6.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

Merge pull request #16641 from PowerDNS/dependabot/pip/regression-tests.recursor-dnssec/urllib3-2.6.0

build(deps): bump urllib3 from 2.5.0 to 2.6.0 in /regression-tests.recursor-dnssec

Make sure never to try and access LMDBResourceRecords beyond their actual size.

Signed-off-by: Miod Vallat <miod.vallat@powerdns.com>

Give the list flavour of deserializeFromBuffer() a different name.

Signed-off-by: Miod Vallat <miod.vallat@powerdns.com>

Minor code cleanups:

- remove unused bits from getUnfreshSecondaryInfo().
- use similar logic for the two code paths which need to fetch SOA numbers.

Signed-off-by: Miod Vallat <miod.vallat@powerdns.com>

Merge pull request #16627 from omoerbeek/rec-rust-nicer-errs

rec: format rust IOErrors in a nicer way instead of using the default formatter

No need to do a downcast dance and include fix for https://github.com/dtolnay/cxx/issues/1684

Signed-off-by: Otto Moerbeek <otto.moerbeek@open-xchange.com>

Allow (but warn) entropy-source and rng settings until 5.2.

Signed-off-by: Miod Vallat <miod.vallat@powerdns.com>

build(deps): bump urllib3 in /regression-tests.recursor-dnssec

Bumps [urllib3](https://github.com/urllib3/urllib3) from 2.5.0 to 2.6.0.
- [Release notes](https://github.com/urllib3/urllib3/releases)
- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)
- [Commits](https://github.com/urllib3/urllib3/compare/2.5.0...2.6.0)

---
updated-dependencies:
- dependency-name: urllib3
  dependency-version: 2.6.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

Merge pull request #16637 from romeroalx/ci-build-test-dnsdist-deb11-noarm

gh actions - build-and-test-all skip build dnsdist arm64 on debian 11

Remove KISS rng configuration leftovers.

Signed-off-by: Miod Vallat <miod.vallat@powerdns.com>

Merge pull request #16638 from miodvallat/undercover

auth: i like to std::move it std::move it

Remove use of rng and entropy-source parameters.

Document them as having been removed.

Fixes: #16554
Signed-off-by: Miod Vallat <miod.vallat@powerdns.com>

Address Coverity reported unnecessary object copies.

Signed-off-by: Miod Vallat <miod.vallat@powerdns.com>

build-and-test-all.yml: skip swagger-syntax-check on debian 11

build-and-test-all.yml: skip build dnsdist arm64 on debian 11

When creating a domain as part of autosecondary, schedule a fetch immediately.

Fixes #16418

Signed-off-by: Miod Vallat <miod.vallat@powerdns.com>

Remove non-applicable comment.

Signed-off-by: Miod Vallat <miod.vallat@powerdns.com>

Merge pull request #16632 from miodvallat/rectify_docs

auth: minor docs tweaks

Merge pull request #16628 from miodvallat/numbers

auth: changelog and secpoll update for 4.9.12 and 5.0.2

Merge pull request #16631 from romeroalx/manual-install-libh2o

tasks.py: add option to install libh2o manually

Changelog and secpoll update for 4.9.12 and 5.0.2.

Signed-off-by: Miod Vallat <miod.vallat@powerdns.com>

Do not mention rectify will fail on non-DNSSEC zones.

Signed-off-by: Miod Vallat <miod.vallat@powerdns.com>

Replace master/slave with primary/secondary when applicable.

Signed-off-by: Miod Vallat <miod.vallat@powerdns.com>

tasks.py: add option to install libh2o manually

Merge pull request #16620 from Habbie/prune-extend-versions

auth: note that PRUNE/EXTEND are new in 4.9.12/5.0.2

rec: format rust IOErrors in a nicer way instead of using the default formatter

Signed-off-by: Otto Moerbeek <otto.moerbeek@open-xchange.com>

Merge pull request #16568 from miodvallat/path_less_travelled

auth: yet another boring autoconf regression

Merge pull request #16609 from PowerDNS/dependabot/pip/regression-tests.ixfrdist/urllib3-2.6.0

build(deps): bump urllib3 from 2.5.0 to 2.6.0 in /regression-tests.ixfrdist

Merge pull request #16623 from rgacogne/daily-rust-only-when-scheduled

Only run the daily Rust audit when `SCHEDULED_MISC_DAILIES` is set

Merge pull request #16624 from omoerbeek/rec-rust-ruttls-pemfile

rec: move away from rustls-pemfile including update of Rust dependencies

build(deps): bump urllib3 in /regression-tests.ixfrdist

Bumps [urllib3](https://github.com/urllib3/urllib3) from 2.5.0 to 2.6.0.
- [Release notes](https://github.com/urllib3/urllib3/releases)
- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)
- [Commits](https://github.com/urllib3/urllib3/compare/2.5.0...2.6.0)

---
updated-dependencies:
- dependency-name: urllib3
  dependency-version: 2.6.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

Merge pull request #16607 from PowerDNS/dependabot/pip/pdns/dnsdistdist/docs/urllib3-2.6.0

build(deps): bump urllib3 from 2.5.0 to 2.6.0 in /pdns/dnsdistdist/docs

Merge pull request #16608 from PowerDNS/dependabot/pip/regression-tests.dnsdist/urllib3-2.6.0

build(deps): bump urllib3 from 2.5.0 to 2.6.0 in /regression-tests.dnsdist

Merge pull request #16610 from PowerDNS/dependabot/pip/regression-tests.api/urllib3-2.6.0

build(deps): bump urllib3 from 2.5.0 to 2.6.0 in /regression-tests.api

Merge pull request #16611 from PowerDNS/dependabot/pip/pdns/recursordist/docs/urllib3-2.6.0

build(deps): bump urllib3 from 2.5.0 to 2.6.0 in /pdns/recursordist/docs

Merge pull request #16612 from PowerDNS/dependabot/pip/meson/urllib3-2.6.0

build(deps): bump urllib3 from 2.5.0 to 2.6.0 in /meson

rec: move away from rustls-pemfile

Fixes #16606

Signed-off-by: Otto Moerbeek <otto.moerbeek@open-xchange.com>