Prep for rec 5.2.10, 5.3.7, 5.4.2

Signed-off-by: Otto Moerbeek <otto.moerbeek@open-xchange.com>

diff --git a/.github/actions/spell-check/expect.txt b/.github/actions/spell-check/expect.txt
index f8d619687ad885be7ab6e307edb1912388688a72..6e13a9c818bccabbb9f90c44706274815ca7fcfd 100644 (file)
--- a/.github/actions/spell-check/expect.txt
+++ b/.github/actions/spell-check/expect.txt
@@ -1549,6 +1549,7 @@ webbased
 webdocs
 webhandler
 webpassword
+webpki
 webservice
 Webspider
 Wegener

diff --git a/docs/secpoll.zone b/docs/secpoll.zone
index c05867ed476a1aeb35ba62723fb78b8602a69ab4..f483fcdb40cb73998cdc5515f10dab42f1f09443 100644 (file)
--- a/docs/secpoll.zone
+++ b/docs/secpoll.zone
@@ -1,4 +1,4 @@
-@       86400   IN  SOA pdns-public-ns1.powerdns.com. peter\.van\.dijk.powerdns.com. 2026060201 10800 3600 604800 10800
+@       86400   IN  SOA pdns-public-ns1.powerdns.com. peter\.van\.dijk.powerdns.com. 2026060301 10800 3600 604800 10800
 @       3600    IN  NS  pdns-public-ns1.powerdns.com.
 @       3600    IN  NS  pdns-public-ns2.powerdns.com.
 
@@ -447,6 +447,7 @@ recursor-5.2.6.security-status                          60 IN TXT "3 Upgrade now
 recursor-5.2.7.security-status                          60 IN TXT "3 Upgrade now, see https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2026-01.html"
 recursor-5.2.8.security-status                          60 IN TXT "3 Upgrade now, see https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2026-03.html"
 recursor-5.2.9.security-status                          60 IN TXT "1 OK"
+recursor-5.2.10.security-status                         60 IN TXT "1 OK"
 
 recursor-5.3.0-alpha1.security-status                   60 IN TXT "3 Superseded pre-release (known vulnerabilities)"
 recursor-5.3.0-alpha2.security-status                   60 IN TXT "3 Superseded pre-release (known vulnerabilities)"
@@ -459,11 +460,13 @@ recursor-5.3.3.security-status                          60 IN TXT "3 Upgrade now
 recursor-5.3.4.security-status                          60 IN TXT "3 Upgrade now, see https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2026-01.html"
 recursor-5.3.5.security-status                          60 IN TXT "3 Upgrade now, see https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2026-03.html"
 recursor-5.3.6.security-status                          60 IN TXT "1 OK"
+recursor-5.3.7.security-status                          60 IN TXT "1 OK"
 recursor-5.4.0-alpha1.security-status                   60 IN TXT "3 Superseded pre-release (known vulnerabilities)"
 recursor-5.4.0-beta1.security-status                    60 IN TXT "3 Superseded pre-release (known vulnerabilities)"
 recursor-5.4.0-rc1.security-status                      60 IN TXT "3 Superseded pre-release (known vulnerabilities)"
 recursor-5.4.0.security-status                          60 IN TXT "3 Upgrade now, see https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2026-03.html"
 recursor-5.4.1.security-status                          60 IN TXT "1 OK"
+recursor-5.4.2.security-status                          60 IN TXT "1 OK"
 
 ; Recursor Debian
 recursor-3.6.2-2.debian.security-status                 60 IN TXT "3 Upgrade now, see https://docs.powerdns.com/recursor/appendices/EOL.html"

diff --git a/pdns/recursordist/docs/changelog/5.2.rst b/pdns/recursordist/docs/changelog/5.2.rst
index 7456e377b69c3a1e10fd710e90b8a56bae842a35..54756495fe684367081915c3af92b3d1f2ed7c9e 100644 (file)
--- a/pdns/recursordist/docs/changelog/5.2.rst
+++ b/pdns/recursordist/docs/changelog/5.2.rst
@@ -3,6 +3,31 @@ Changelogs for 5.2.X
 
 Before upgrading, it is advised to read the :doc:`../upgrade`.
 
+.. changelog::
+  :version: 5.2.10
+  :released: 3rd of June 2026
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 17488
+    :tickets: 17396
+
+    snmp-agent: Fix a memory leak.
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 17318
+    :tickets: 17252
+
+    Increase entry count in unit test so we hit the 8192 byte limit on 32 bit systems too.
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 17303
+    :tickets: 16993
+
+    Fix serialization of cached authority record.
+
 .. changelog::
   :version: 5.2.9
   :released: 22th of April 2026

diff --git a/pdns/recursordist/docs/changelog/5.3.rst b/pdns/recursordist/docs/changelog/5.3.rst
index 91aa91bb33c2edd16d6674d233782647c859d317..cf5aa021d05a4eb514ef8b9ab0c69ce723c108c5 100644 (file)
--- a/pdns/recursordist/docs/changelog/5.3.rst
+++ b/pdns/recursordist/docs/changelog/5.3.rst
@@ -3,6 +3,31 @@ Changelogs for 5.3.X
 
 Before upgrading, it is advised to read the :doc:`../upgrade`.
 
+.. changelog::
+  :version: 5.3.7
+  :released: 3rd of June 2026
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 17487
+    :tickets: 17396
+
+    snmp-agent: Fix a memory leak.
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 17317
+    :tickets: 17252
+
+    Increase entry count in unit test so we hit the 8192 byte limit on 32 bit systems too.
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 17302
+    :tickets: 16993
+
+    Fix serialization of cached authority record.
+
 .. changelog::
   :version: 5.3.6
   :released: 22th of April 2026

diff --git a/pdns/recursordist/docs/changelog/5.4.rst b/pdns/recursordist/docs/changelog/5.4.rst
index 95a58c018aa2c93d52bf33736fb3c693f9c0f26f..74876f7e75ad93770168dfe760835a3570dc5765 100644 (file)
--- a/pdns/recursordist/docs/changelog/5.4.rst
+++ b/pdns/recursordist/docs/changelog/5.4.rst
@@ -3,6 +3,73 @@ Changelogs for 5.4.X
 
 Before upgrading, it is advised to read the :doc:`../upgrade`.
 
+.. changelog::
+  :version: 5.4.2
+  :released: 3rd of June 2026
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 17301
+    :tickets: 16993
+
+    Fix serialization of cached authority records.
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 17312
+    :tickets: 17005
+
+    Continue processing response Policies if a discarded policy is hit.
+
+  .. change::
+    :tags: Improvements
+    :pullreq: 17313
+    :tickets: 16936
+
+    Drop QR=0 responses from auths.
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 17314
+    :tickets: 17161
+
+    Skip ZONEMD records in RPZs.
+
+  .. change::
+    :tags: Improvements
+    :pullreq: 17315
+    :tickets: 17240
+
+    Widen types passed to xfr*BitInt to reject too large values.
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 17316
+    :tickets: 17252
+
+    Increase entry count in unit test so we hit the 8192 byte limit on 32 bit systems too.
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 17319
+    :tickets: 17238
+
+    build(deps): bump rustls-webpki from 0.103.10 to 0.103.13.
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 17486
+    :tickets: 17396
+
+    snmp-agent: Fix a memory leak.
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 17489
+    :tickets: 17398
+
+    Minor libssl fixes.
+
 .. changelog::
   :version: 5.4.1
   :released: 22th of April 2026