+5932. [bug] Fix rndc dumpdb -expired and always include expired
+ RRsets, not just for RBTDB_VIRTUAL time window.
+ [GL #3462]
+
5931. [bug] Fix DiG query error handling robustness in NSSEARCH
mode by making sure that udp_ready(), tcp_connected(),
and send_done() callbacks start the next query in chain
``dnssec-policy``. In zones with both the old ``max-zone-ttl``
option and ``dnssec-policy`` configured, the old option will be
ignored, and a warning will be generated. :gl:`#2918`
+
+- Fix `rndc dumpdb -expired` to include expired RRsets, even if the cache
+ cleaning time window has passed. This will now show expired RRsets that are
+ stuck in the cache. :gl:`#3462`