Merge pull request #16652 from rgacogne/auth-doc-api-replace-is-not-new

auth: `EXTEND` and `PRUNE` are new in 4.9.12 and 5.0.2, not `REPLACE`

auth: `EXTEND` and `PRUNE` are new in 4.9.12 and 5.0.2, not `REPLACE`

Spotted by `rdz` on IRC.

Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>

Merge pull request #16651 from omoerbeek/rec-cookie-dump-pretty

rec: Print irrelevent entries in cookie dump more nicely

rec: Print irrelevent entries in cookie dump more nicely

Signed-off-by: Otto Moerbeek <otto.moerbeek@open-xchange.com>

Merge pull request #16646 from omoerbeek/rec-prep-5.4.0-alpha1

Prep for rec-5.4.0-alpha1

Merge pull request #16639 from miodvallat/entropocene

auth: remove configurable random generator leftovers

Prep for rec-5.4.0-alpha1

Signed-off-by: Otto Moerbeek <otto.moerbeek@open-xchange.com>

Merge pull request #16643 from rgacogne/ddist-update-rust-libs

dnsdist: Update our Rust dependencies

Merge pull request #16569 from miodvallat/unsort

pdnsutil: make "zone list" record sorting optional

ci: Run the daily Rust dependencies audit for all stable branches

Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>

dnsdist: Update our Rust dependencies

Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>

build(deps): bump urllib3 from 2.5.0 to 2.6.0 in /builder-support

Bumps [urllib3](https://github.com/urllib3/urllib3) from 2.5.0 to 2.6.0.
- [Release notes](https://github.com/urllib3/urllib3/releases)
- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)
- [Commits](https://github.com/urllib3/urllib3/compare/2.5.0...2.6.0)

---
updated-dependencies:
- dependency-name: urllib3
  dependency-version: 2.6.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

Merge pull request #16641 from PowerDNS/dependabot/pip/regression-tests.recursor-dnssec/urllib3-2.6.0

build(deps): bump urllib3 from 2.5.0 to 2.6.0 in /regression-tests.recursor-dnssec

Make sure never to try and access LMDBResourceRecords beyond their actual size.

Signed-off-by: Miod Vallat <miod.vallat@powerdns.com>

Give the list flavour of deserializeFromBuffer() a different name.

Signed-off-by: Miod Vallat <miod.vallat@powerdns.com>

Minor code cleanups:

- remove unused bits from getUnfreshSecondaryInfo().
- use similar logic for the two code paths which need to fetch SOA numbers.

Signed-off-by: Miod Vallat <miod.vallat@powerdns.com>

Merge pull request #16627 from omoerbeek/rec-rust-nicer-errs

rec: format rust IOErrors in a nicer way instead of using the default formatter

No need to do a downcast dance and include fix for https://github.com/dtolnay/cxx/issues/1684

Signed-off-by: Otto Moerbeek <otto.moerbeek@open-xchange.com>

Allow (but warn) entropy-source and rng settings until 5.2.

Signed-off-by: Miod Vallat <miod.vallat@powerdns.com>

chore(dnsdist): get rid of optionals in SetTraceAction

These values are always set to defaults in the `SetTraceActionConfiguration`.
This also packs the class members more memory efficient.

feat(dnsdist): Allow stripping TRACEPARENT EDNS option in SetTraceAction

fix(dnsdist): reuse buffer for protobuf messages

fix(dnsdist): hide the TraceAction class on non-PB builds

fix(dnsdist): don't do work when no PB needs to be sent

fix(dnsdist): Ensure SetTraceAction compiles in non-PB builds

chore(tests): update dnsdist regressiontests packages

feat(dnsdist): Add more TCP related traces

feat(dnsdist): Use the stack-based approach for Tracing

feat(opentelemetry): Add infrastructure to support a stack-based tracking of spanids

fix(dnsdist): Add type of Rule to each Rule trace

feat(dnsdist): Allow passing RemoteLoggers to SetTrace action

chore(dnsdist): Send delayed protobuf through RAII

chore(dnsdist): Add regular protobuf delayed response action test

build(deps): bump urllib3 in /regression-tests.recursor-dnssec

Bumps [urllib3](https://github.com/urllib3/urllib3) from 2.5.0 to 2.6.0.
- [Release notes](https://github.com/urllib3/urllib3/releases)
- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)
- [Commits](https://github.com/urllib3/urllib3/compare/2.5.0...2.6.0)

---
updated-dependencies:
- dependency-name: urllib3
  dependency-version: 2.6.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

Merge pull request #16637 from romeroalx/ci-build-test-dnsdist-deb11-noarm

gh actions - build-and-test-all skip build dnsdist arm64 on debian 11

Remove KISS rng configuration leftovers.

Signed-off-by: Miod Vallat <miod.vallat@powerdns.com>

Merge pull request #16638 from miodvallat/undercover

auth: i like to std::move it std::move it

Remove use of rng and entropy-source parameters.

Document them as having been removed.

Fixes: #16554
Signed-off-by: Miod Vallat <miod.vallat@powerdns.com>

Address Coverity reported unnecessary object copies.

Signed-off-by: Miod Vallat <miod.vallat@powerdns.com>

build-and-test-all.yml: skip swagger-syntax-check on debian 11

build-and-test-all.yml: skip build dnsdist arm64 on debian 11

When creating a domain as part of autosecondary, schedule a fetch immediately.

Fixes #16418

Signed-off-by: Miod Vallat <miod.vallat@powerdns.com>

Remove non-applicable comment.

Signed-off-by: Miod Vallat <miod.vallat@powerdns.com>

Merge pull request #16632 from miodvallat/rectify_docs

auth: minor docs tweaks

Merge pull request #16628 from miodvallat/numbers

auth: changelog and secpoll update for 4.9.12 and 5.0.2

LuaWrapper: Fix C++11 compatibility

Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>

Merge pull request #16631 from romeroalx/manual-install-libh2o

tasks.py: add option to install libh2o manually

Changelog and secpoll update for 4.9.12 and 5.0.2.

Signed-off-by: Miod Vallat <miod.vallat@powerdns.com>

Do not mention rectify will fail on non-DNSSEC zones.

Signed-off-by: Miod Vallat <miod.vallat@powerdns.com>

Replace master/slave with primary/secondary when applicable.

Signed-off-by: Miod Vallat <miod.vallat@powerdns.com>

tasks.py: add option to install libh2o manually

Merge pull request #16620 from Habbie/prune-extend-versions

auth: note that PRUNE/EXTEND are new in 4.9.12/5.0.2

rec: format rust IOErrors in a nicer way instead of using the default formatter

Signed-off-by: Otto Moerbeek <otto.moerbeek@open-xchange.com>

Merge pull request #16568 from miodvallat/path_less_travelled

auth: yet another boring autoconf regression

Merge pull request #16609 from PowerDNS/dependabot/pip/regression-tests.ixfrdist/urllib3-2.6.0

build(deps): bump urllib3 from 2.5.0 to 2.6.0 in /regression-tests.ixfrdist

Merge pull request #16623 from rgacogne/daily-rust-only-when-scheduled

Only run the daily Rust audit when `SCHEDULED_MISC_DAILIES` is set

Merge pull request #16624 from omoerbeek/rec-rust-ruttls-pemfile

rec: move away from rustls-pemfile including update of Rust dependencies

build(deps): bump urllib3 in /regression-tests.ixfrdist

Bumps [urllib3](https://github.com/urllib3/urllib3) from 2.5.0 to 2.6.0.
- [Release notes](https://github.com/urllib3/urllib3/releases)
- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)
- [Commits](https://github.com/urllib3/urllib3/compare/2.5.0...2.6.0)

---
updated-dependencies:
- dependency-name: urllib3
  dependency-version: 2.6.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

Merge pull request #16607 from PowerDNS/dependabot/pip/pdns/dnsdistdist/docs/urllib3-2.6.0

build(deps): bump urllib3 from 2.5.0 to 2.6.0 in /pdns/dnsdistdist/docs

Merge pull request #16608 from PowerDNS/dependabot/pip/regression-tests.dnsdist/urllib3-2.6.0

build(deps): bump urllib3 from 2.5.0 to 2.6.0 in /regression-tests.dnsdist

Merge pull request #16610 from PowerDNS/dependabot/pip/regression-tests.api/urllib3-2.6.0

build(deps): bump urllib3 from 2.5.0 to 2.6.0 in /regression-tests.api

Merge pull request #16611 from PowerDNS/dependabot/pip/pdns/recursordist/docs/urllib3-2.6.0

build(deps): bump urllib3 from 2.5.0 to 2.6.0 in /pdns/recursordist/docs

Merge pull request #16612 from PowerDNS/dependabot/pip/meson/urllib3-2.6.0

build(deps): bump urllib3 from 2.5.0 to 2.6.0 in /meson

test-luawrapper: Remove empty line

Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>

rec: move away from rustls-pemfile

Fixes #16606

Signed-off-by: Otto Moerbeek <otto.moerbeek@open-xchange.com>

test-luawrapper: More complicated variant tests

Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>

luawrapper: We also need to decay the type while reading it back

Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>

Only run the daily Rust audit when `SCHEDULED_MISC_DAILIES` is set

Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>

LuaWrapper: Add support for `std::variant`

Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>

Merge pull request #16602 from miodvallat/misorder

auth: proactive test fix

Merge pull request #16619 from omoerbeek/rec-prep-20251208

rec: Prep for 20251208 security releases

auth: note that PRUNE/EXTEND are new in 4.9.12/5.0.2

Signed-off-by: Peter van Dijk <peter.van.dijk@powerdns.com>

Merge pull request #16615 from omoerbeek/rec-tcp-notify

rec: Do proper validation of TCP notifies

Merge pull request #16614 from omoerbeek/anyauthrecord

rec: ensure authRecords is empty, as handleHit checks that

rec: Prep for 20251208 security releases

Signed-off-by: Otto Moerbeek <otto.moerbeek@open-xchange.com>

Correct comment

Signed-off-by: Otto Moerbeek <otto.moerbeek@open-xchange.com>

Add tests for disallowed notifies

Signed-off-by: Otto Moerbeek <otto.moerbeek@open-xchange.com>

rec: do proper validation of TCP notifies

Signed-off-by: Otto Moerbeek <otto.moerbeek@open-xchange.com>

Check size of returned vector in test

Signed-off-by: Otto Moerbeek <otto.moerbeek@open-xchange.com>

rec: Handle more cases where the authority records might not be empty

Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>

If we iterator the loop multiple times for ANY requests, authRecords might not be empty

Signed-off-by: Otto Moerbeek <otto.moerbeek@open-xchange.com>

build(deps): bump urllib3 from 2.5.0 to 2.6.0 in /meson

Bumps [urllib3](https://github.com/urllib3/urllib3) from 2.5.0 to 2.6.0.
- [Release notes](https://github.com/urllib3/urllib3/releases)
- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)
- [Commits](https://github.com/urllib3/urllib3/compare/2.5.0...2.6.0)

---
updated-dependencies:
- dependency-name: urllib3
  dependency-version: 2.6.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

build(deps): bump urllib3 from 2.5.0 to 2.6.0 in /pdns/recursordist/docs

Bumps [urllib3](https://github.com/urllib3/urllib3) from 2.5.0 to 2.6.0.
- [Release notes](https://github.com/urllib3/urllib3/releases)
- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)
- [Commits](https://github.com/urllib3/urllib3/compare/2.5.0...2.6.0)

---
updated-dependencies:
- dependency-name: urllib3
  dependency-version: 2.6.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

build(deps): bump urllib3 from 2.5.0 to 2.6.0 in /regression-tests.api

Bumps [urllib3](https://github.com/urllib3/urllib3) from 2.5.0 to 2.6.0.
- [Release notes](https://github.com/urllib3/urllib3/releases)
- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)
- [Commits](https://github.com/urllib3/urllib3/compare/2.5.0...2.6.0)

---
updated-dependencies:
- dependency-name: urllib3
  dependency-version: 2.6.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

build(deps): bump urllib3 in /regression-tests.dnsdist

Bumps [urllib3](https://github.com/urllib3/urllib3) from 2.5.0 to 2.6.0.
- [Release notes](https://github.com/urllib3/urllib3/releases)
- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)
- [Commits](https://github.com/urllib3/urllib3/compare/2.5.0...2.6.0)

---
updated-dependencies:
- dependency-name: urllib3
  dependency-version: 2.6.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

build(deps): bump urllib3 from 2.5.0 to 2.6.0 in /pdns/dnsdistdist/docs

Bumps [urllib3](https://github.com/urllib3/urllib3) from 2.5.0 to 2.6.0.
- [Release notes](https://github.com/urllib3/urllib3/releases)
- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)
- [Commits](https://github.com/urllib3/urllib3/compare/2.5.0...2.6.0)

---
updated-dependencies:
- dependency-name: urllib3
  dependency-version: 2.6.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

Merge pull request #16601 from rgacogne/fewer-boost-optional

Remove some `boost::optional` leftovers

Fix test to not depend upon the order of the returned records.

Signed-off-by: Miod Vallat <miod.vallat@powerdns.com>

Remove some `boost::optional` leftovers

Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>

Merge pull request #16589 from miodvallat/gramophone

auth: allow finer-grained rrset changes through the API

No more reasons to reject more than one EXTEND or PRUNE anymore.

Signed-off-by: Miod Vallat <miod.vallat@powerdns.com>

Merge pull request #16521 from rgacogne/ddist-xsk-unit-tests

dnsdist: Cleanup of the `AF_XDP`/`XSK` code

dnsdist: Consistenly use `getL4HeaderOffset()` in our XSK code

Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>

Merge pull request #16590 from rgacogne/ddist-coverity-20251204

dnsdist: Fix missed optimizations reported by Coverity in config

Allow PRUNE/EXTEND to coexist with DELETE/REPLACE.

This causes us to maintain a local cache of the rrsets being modified by
both sets of operations, so that we keep a consistent view of them during
the backend transaction, regardless of what the backend might be able to
return.

Signed-off-by: Miod Vallat <miod.vallat@powerdns.com>

Remove long dead code

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

Remove unused variable

This matches the pattern from the examples:
https://github.com/shutterstock/rickshaw/blob/0e0671e6fdd843b6b0ea881600804fc57667925d/examples/scaled.html#L83-L89

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

Spelling fixes from review

Co-authored-by: Josh Soref <2119212+jsoref@users.noreply.github.com>
Signed-off-by: Miod Vallat <miod.vallat@powerdns.com>

Logic buglet found during review.

Signed-off-by: Miod Vallat <miod.vallat@powerdns.com>

Merge pull request #16596 from jsoref/codeql-remove-unused-imports

Remove unused imports