auth-4.6.x: remove spell checker

Merge pull request #13569 from romeroalx/rel/auth-4.6.x-wc

GH Actions - rel/auth-4.6.x: make `build-and-test-all` and `builder` workflows reusable from other branches

make builder workflow reusable

make build-and-test-all reusable

Switch from deprecated ::set-output

https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/

Merge pull request #13341 from Habbie/backport-13245-to-auth-4.6.x

auth-4.6: smysql: stop explicity setting MYSQL_OPT_RECONNECT to 0

smysql: stop explicity setting MYSQL_OPT_RECONNECT to 0

Setting this option, even to 0, causes spurious warnings to the console
with recent libmysqlclient versions. The upstream bug
( https://bugs.mysql.com/bug.php?id=112089 )
has now been open for a month, so we're implementing a workaround.

0 was the default since at least MySQL 5.7, perhaps longer.

closes #13242

(cherry picked from commit f1cbc20b72ab95531f0a84bab40ac6ea1610241f)

Merge pull request #13338 from Habbie/backport-12562-to-auth-4.6.x

auth-4.6: fix github actions grub issue

Update FIXME comment in build-scripts/gh-actions-setup-inv

Co-authored-by: Remi Gacogne <github@coredump.fr>
(cherry picked from commit 03db3c76cf5b8fdf6df24180e8e5cf64f706e14d)

workaround for grub error raised after apt-get dist-upgrade

(cherry picked from commit 735582e64f176c9fbca3c3fc20c162f6c94ae8cd)

Merge pull request #12629 from romeroalx/update-gh-actions-auth-to-4.6

Backport GH Actions updates from master to auth-4.6.x

Use actions/cache@v3

Use actions/checkout@v3

gh actions: simplified collector job in build-and-test-all.yml

Avoid Microsoft repo for ODBC. Step 1: codeql allow apt downgrades

Avoid Microsoft repo for ODBC. Step 1: allow apt downgrades

removed ldap and geoip-mmdb tests from circleci

gh actions: added ldap and geoip-mmdb tests

GH actions: added auth odbc{sqlitle3, mssql} tests. Removed from CircleCI

codeql workflow: set ubuntu mirror

build-and-test-all: add functionality to quickly switch ubuntu mirrors

Set policy to not start/enable services by default

Restrict permissions for GITHUB_TOKEN in our workflows

Added using https://github.com/step-security/secure-workflows
For more information see:
- https://github.com/ossf/scorecard/blob/d8fefc9b246db3600c777e9d60d441d7c386ce1d/docs/checks.md#token-permissions
- https://github.blog/changelog/2021-04-20-github-actions-control-permissions-for-github_token/

build(deps): bump actions/setup-python from 2 to 4

Bumps [actions/setup-python](https://github.com/actions/setup-python) from 2 to 4.
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](https://github.com/actions/setup-python/compare/v2...v4)

---
updated-dependencies:
- dependency-name: actions/setup-python
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Switch from set-output tot GITHUB_OUTPUT

Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>

build(deps): bump actions/upload-artifact from 1 to 3

Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 1 to 3.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/v1...v3)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

build(deps): bump actions/download-artifact from 2 to 3

Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 2 to 3.
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](https://github.com/actions/download-artifact/compare/v2...v3)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

build(deps): bump actions/checkout from 2.3.4 to 3.1.0

Bumps [actions/checkout](https://github.com/actions/checkout) from 2.3.4 to 3.1.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v2.3.4...v3.1.0)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

build(deps): bump actions/cache from 2 to 3.0.11

Bumps [actions/cache](https://github.com/actions/cache) from 2 to 3.0.11.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/v2...v3.0.11)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Merge pull request #12303 from Habbie/backport-12028-to-auth-4.6.x

auth 4.6: pdnsutil edit-zone, detect capitalization changes in LUA, TXT and SPF records

auth: pdnsutil edit-zone, detect capitalization changes in LUA, TXT and SPF records

(cherry picked from commit 75ab58cdbd1ddb5772e5f37f94e312b233d271ad)

Merge pull request #12295 from Habbie/backport-12132-to-auth-4.6.x

auth 4.6: take into account default urlcheck timeout is 2 seconds for Lua records tests

This test assumes the health check timeout is 1 second, while it is 2 seconds by default.

Adapt tests to take that into account, which resolves the occasional failure as tested locally.

(cherry picked from commit 2abc153929e22c4abad73f1eba9395e00f18febd)

Merge pull request #12286 from Habbie/4.6-lmdb-no-alsonotify

auth-4.6.x: Revert "auth lmdb: implement alsoNotifies"

Revert "auth lmdb: implement alsoNotifies, fixes #12256"

This reverts commit 3fabf69763ad45f40055b8344746cc009968a17e.

Merge pull request #12267 from Habbie/backport-12264-to-auth-4.6.x

auth 4.6 lmdb: implement alsoNotifies

auth lmdb: implement alsoNotifies, fixes #12256

(cherry picked from commit b0e178a7fae71dca241f08b4faa861130a150a76)

Merge pull request #11945 from mind04/auth-4.6.x-bp-11908

auth-4.6.x: initialize zone cache after dropping privileges; Detect invalid bytes in makeBytesFromHex()

auth: Detect invalid bytes in makeBytesFromHex()

Also only allocate the required number of bytes, not twice that.

auth-4.6.x: initialize zone cache after dropping privileges

Merge pull request #12035 from Habbie/backport-11882-to-auth-4.6.x

auth-4.6: Log "NULL" for nullptr-bound properties instead of dereferencing

Merge pull request #12033 from Habbie/backport-11929-to-auth-4.6.x

auth-4.6 LUA records: we only need one IsUpOracle checker thread

Merge pull request #12031 from Habbie/backport-11953-to-auth-4.6.x

auth-4.6: axfr-retriever: abort on chunk with TC set

auth LUA: fix "braces around scalar initializer" warning

inspired by #6188

(cherry picked from commit d27a2d307e4a0dcf0671046910994a2bf3ba945e)

Log "NULL" for nullptr-bound properties instead of dereferencing

Fixes the issue where pdnsutil would segfault when query logging is enabled, and would
leave the db unmodified. Surprisingly, the segfault only happened on FreeBSD.

Fixes #11731

(cherry picked from commit fd4fd2dae2f29f668b7ad0645c112b12854ab834)

auth LUA records: we only need one IsUpOracle checker thread

(cherry picked from commit 37f625b0af0b5e818de97b83dd96709df118ad6b)

axfr-retriever: abort on chunk with TC set

(cherry picked from commit 0923e5df06e10e7afb19dc5ce534b07450792ab1)

Merge pull request #11978 from Habbie/backport-11961-to-auth-4.6.x

auth 4.6.x docker: upgrade to bullseye

docker: upgrade to bullseye

(cherry picked from commit a0d3acff25a92627186ee43bead110aef416f59a)

Merge pull request #11871 from Habbie/backport-11842-to-auth-4.6.x

auth-4.6.x: use getInnerRemote() for the remotes ring

use getInnerRemote() for the remotes ring - backport of #11842

Merge pull request #11778 from Habbie/backport-11395-to-auth-4.6.x

auth-4.6.x deb test: upstream more lenient startup wait

auth deb test: upstream more lenient startup wait

(cherry picked from commit 1b494d46d9b4d8c894443f07ce1d4d13ba2768cb)

Merge pull request #11765 from mind04/pdns-lmdb-deletedomain-bp

auth-4.6.x: fix deleteDomain() in lmdb backend

auth-4.6.x: fix deleteDomain() in lmdb backend

Merge pull request #11756 from Habbie/backport-11641-to-auth-4.6.x

auth-4.6.x: Move to v2 for CodeQL action, v1 will be deprecated dec 2022

Merge pull request #11746 from Habbie/backport-11738-to-auth-4.6.x

auth-4.6.x 2136: match autosplit TXT correctly

Move to v2 for CodeQL action, v1 will be deprecated dec 2022

(cherry picked from commit a0c99342e7aa22e16a75d9e7daa4de69d087bc38)

Merge pull request #11741 from Habbie/backport-11735-to-auth-4.6.x

auth-4.6: dh_builddeb: force gzip compression, thanks Zash!

also update expected_results for the tinydns-data-check test

(cherry picked from commit 98a841f1438e015ae254f44af17cc1dcaa437d1b)

auth 2136: in recently added TXT tests, hide SOA details

(cherry picked from commit 735dcf2cd1d0838368d2231a3c815f4f31b92087)

auth 2136: match autosplit TXT correctly

(cherry picked from commit d040cb869d63d78a34e9efe9f517fa8829fbf6d9)

auth: add a bunch of passing rfc2136 TXT tests

(cherry picked from commit 9fca38077c5538d4a886629fc229f9b0f3150b02)

dh_builddeb: force gzip compression, thanks Zash!

(cherry picked from commit bbfa37c0232b56e2227668717dbb97ce4f01d990)

Merge pull request #11406 from Habbie/4.6.x-lmdb-backports

auth-4.6.x: LMDB backports

Merge pull request #11409 from Habbie/backport-11389-to-auth-4.6.x

auth-4.6.x API: fetch individual rrsets

Merge pull request #11407 from Habbie/backport-11314-to-auth-4.6.x

auth-4.6.x: fix proxy protocol query statistics and add more detailed latency metrics

Merge pull request #11408 from Habbie/backport-11227-to-auth-4.6.x

auth 4.6.x LUA: add ifurlextup function

Merge pull request #11404 from Habbie/backport-11199-to-auth-4.6.x

auth-4.6.x: add Ubuntu jammy target

Merge pull request #11455 from Habbie/auth-4.6.x-xfr

auth 4.6.x IXFR-in: Fix a case where an incomplete read caused by netw…

Merge pull request #11461 from Habbie/backport-11449-to-auth-4.6.x

auth-4.6.x docs: Pin jinja2 to < 3.1.0

docs: Pin jinja2 to < 3.1.0

Jinja2 3.1.0 removed deprecated code that is still used by sphinx
1.8.x, and it looks like our custom sphinx extensions are not working
with more recent versions of sphinx..

See:
- https://github.com/pallets/jinja/issues/1631
- https://github.com/readthedocs/readthedocs.org/issues/9037

and

- https://github.com/PowerDNS/pdns/pull/7712

The exact error is:
```
Extension error:
Could not import extension sphinx.builders.latex (exception: cannot import name 'contextfunction' from 'jinja2' (/dnsdist/pdns/dnsdistdist/.venv/lib/python3.7/site-packages/jinja2/__init__.py))
```

(cherry picked from commit 92ad29702011ac7cbd0d7d118ba612e7e07cedbe)

auth, rec IXFR-in: Fix a case where an incomplete read caused by network error might result in a truncated zone.

As we might break from the loop early, we need to check if the end SOA was seen after the loop.
Also make sure we detect end conditions for both AXFR and IXFR style properly, to avoid processing
data after the end marker.

auth /zones/example.com.?rrset_name=www.example.com.&rrset_type=A

(cherry picked from commit 486210b80662f9d87050283bd6d0e81f0152140b)

ws-auth: small refactor to pass full req to fillZone

(cherry picked from commit de7fd3c605ed09d75efb8e456d7b187d645dbb0e)

auth LUA: add ifurlextup function

(cherry picked from commit 95d0df69a79243d4a510d24afa07e08734ac5200)

auth: fix proxy protocol query statistics

(cherry picked from commit 208abc4cd8d13d683e3703f533140d350304eef1)

auth: add cache and backend latency metrics

(cherry picked from commit 386c5b136c62427e53ab74ed7dbed5a3aea20606)

auth lmdb: default values for KeyDataDB members, thanks ubsan

(cherry picked from commit 9f5f4decf700e0616608e8dff67d29c312de2584, backport of #11306)

auth lmdb: make map size configurable

(cherry picked from commit aded4962afb7232d7ef878b6197eaeb273eef871, backport of #11328)

auth lmdb random-ids: stop generating negative numbers

regression testing now happens with random IDs, except for HTTP API testing

(cherry picked from commit 529fe29fd4064447a3298a02076059cc7ac0596b, backport of #11354)

auth lmdb: add random ID generation feature

(cherry picked from commit a824a629ab13d2d5516221ec47a849755b221e5f, backport of #11309)

auth lmdb: add a UUID to newly created databases

(cherry picked from commit ba731a422ab3eb3c31d85d3683338abadb5a800b, backport of #11241)

test ubuntu jammy build target

(cherry picked from commit e3d50799180eb4499f8dda5263773775301bfa7e)

add ubuntu jammy build target

(cherry picked from commit 6c1e5fd70b4dd4e75b18ff8c75f93c7d22122643)

Merge pull request #11272 from Habbie/backport-11262-to-auth-4.6.x

auth-4.6.x: builder: migrate EL8 builds to oraclelinux, rename centos8 to el8 where possible

builder: add el-7 alias for centos-7

(cherry picked from commit 6bd3c9bb23f5dfc385a66647ab175ec2812d6617)

take centos 8-stream from quay

(cherry picked from commit 2f9edddc0c9c1f8a68e154f6c12e3fd214420563)

builder CI: switch oraclelinux-8 to el-8

cleanup

(cherry picked from commit 1b27721782ad3dc547ed448a257c59829ff0bd94)

builder: archs for oraclelinux-8; el-8 symlinks

(cherry picked from commit dee53cf16161a6c45560475b647de420842532ef)

Merge pull request #11235 from Habbie/backport-11197-to-auth-4.6.x

auth-4.6.x: Stop using the now deprecated and useless std::binary_function

Merge pull request #11233 from Habbie/backport-11196-to-auth-4.6.x

auth-4.6: Fix build with OpenSSL 3.0.0

Stop using the now deprecated and useless std::binary_function

It is no longer needed since the types can now be automatically
deduced, has been deprecated in C++11 and removed in C++17.

(cherry picked from commit 7587bcbea8a9cb3058cb2e6d7f6a2597494b6713)

Fix build with OpenSSL 3.0.0

(cherry picked from commit 8535f66672ec9d1eebf5835d3e53238973a80478)

Merge pull request #11206 from Habbie/backport-11090-to-auth-4.6.x

auth-4.6.x: show QType by name in log message

Merge pull request #11205 from Habbie/backport-11194-to-auth-4.6.x

auth 4.6.x swagger: add a syntax test and fix a few things

Merge pull request #11220 from mind04/pdns-bp-cds

auth-4.6.x: fix multiple CDS records in an AXFR

auth: test CDS multi digest  and removal

auth: test CDS with multiple keys

auth: fix multiple CDS records in an AXFR