From: Miod Vallat <miod.vallat@powerdns.com>
Date: Wed, 3 Jun 2026 07:15:22 +0000 (+0200)
Subject: Auth 5.1 release details.
X-Git-Url: http://git.ipfire.org/gitweb/index.cgi?a=commitdiff_plain;h=5cfd50ad5cc9a40070ff586bf963105784e611bc;p=thirdparty%2Fpdns.git

Auth 5.1 release details.

Signed-off-by: Miod Vallat <miod.vallat@powerdns.com>
---

diff --git a/.github/actions/spell-check/expect.txt b/.github/actions/spell-check/expect.txt
index 6e13a9c818..4bcd604303 100644
--- a/.github/actions/spell-check/expect.txt
+++ b/.github/actions/spell-check/expect.txt
@@ -807,6 +807,7 @@ metaprogramming
 metricnames
 metricscarbon
 Meulen
+Micay
 Michiel
 Miek
 Miell
diff --git a/docs/changelog/5.1.rst b/docs/changelog/5.1.rst
index c5f19aa905..5c22c33cb5 100644
--- a/docs/changelog/5.1.rst
+++ b/docs/changelog/5.1.rst
@@ -1,6 +1,128 @@
 Changelogs for 5.1.x
 ====================
 
+.. changelog::
+  :version: 5.1.0
+  :released: 3rd of June 2026
+
+  This is release 5.1.0 of the Authoritative Server.
+  It provides many small new features and improvements, as well as bug fixes.
+
+  Please review the :doc:`Upgrade Notes <../upgrading>` before upgrading from versions < 5.0.x.
+
+  .. change::
+    :tags: Improvements
+    :pullreq: 16389
+    :tickets: 16369
+
+    Lua health checks: more responsiveness
+
+  .. change::
+    :tags: New Features
+    :pullreq: 17131
+
+    make Lua records immutable by default
+
+  .. change::
+    :tags: Improvements
+    :pullreq: 17239
+    :tickets: 12789
+
+    only apply backupSelector to the first non-empty group (Daniel Micay)
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 17240, 17455
+
+    harden xfr*BitInt writers
+
+  .. change::
+    :tags: Bug Fixes, Internals
+    :pullreq: 17284
+
+    use less inefficient code in web server
+
+  .. change::
+    :tags: New Features
+    :pullreq: 17297
+
+    Implement a cors flag to set allowed origin in webserver
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 17304
+    :tickets: 16816
+
+    lmdb: yet another NSEC bug
+
+  .. change::
+    :tags: Bug Fixes, Internals
+    :pullreq: 17320
+
+    smarter memory need computation
+
+  .. change::
+    :tags: Improvements, Internals
+    :pullreq: 17355
+
+    skip zone cache refresh logic if disabled
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 17363
+
+    Clarify the documentation regarding lmdb-shards-map-size (HÃ¥kan Lindqvist)
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 17365
+    :tickets: 17364
+
+    let pdnsutil work with lua backend
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 17367
+
+    Correctly display APL DNS records with IPv4 addresses ending in .0
+
+  .. change::
+    :tags: Bug Fixes, API
+    :pullreq: 17373
+    :tickets: 17368
+
+    once again, relax JSON normalization code for record contents
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 17384
+
+    Ednscookies: Fix timestamp validity check
+
+  .. change::
+    :tags: Bug Fixes, Internals
+    :pullreq: 17389
+
+    stricter string-to-int conversions
+
+  .. change::
+    :tags: Bug Fixes
+    :pullreq: 17442
+
+    Auth: fixes for SA 2026-06
+
+  .. change::
+    :tags: Bug Fixes, Internals
+    :pullreq: 17447
+
+    lmdb: do not serialize records over 64K in length
+
+  .. change::
+    :tags: Bug Fixes, Internals
+    :pullreq: 17459
+
+    stricter proxy protocol size limit enforcement
+
 .. changelog::
   :version: 5.1.0-beta1
   :released: 29th of April 2026
diff --git a/docs/secpoll.zone b/docs/secpoll.zone
index f483fcdb40..e222a3d5d1 100644
--- a/docs/secpoll.zone
+++ b/docs/secpoll.zone
@@ -1,4 +1,4 @@
-@       86400   IN  SOA pdns-public-ns1.powerdns.com. peter\.van\.dijk.powerdns.com. 2026060301 10800 3600 604800 10800
+@       86400   IN  SOA pdns-public-ns1.powerdns.com. peter\.van\.dijk.powerdns.com. 2026060351 10800 3600 604800 10800
 @       3600    IN  NS  pdns-public-ns1.powerdns.com.
 @       3600    IN  NS  pdns-public-ns2.powerdns.com.
 
@@ -154,6 +154,7 @@ auth-5.0.4.security-status                              60 IN TXT "3 Upgrade now
 auth-5.0.5.security-status                              60 IN TXT "1 OK"
 auth-5.1.0-alpha1.security-status                       60 IN TXT "3 Superseded pre-release (known vulnerabilities)"
 auth-5.1.0-beta1.security-status                        60 IN TXT "3 Unsupported pre-release (known vulnerabilities)"
+auth-5.1.0.security-status                              60 IN TXT "1 OK"
 
 ; Auth Debian
 auth-3.4.1-2.debian.security-status                     60 IN TXT "3 Upgrade now, see https://docs.powerdns.com/authoritative/appendices/EOL.html"