What's Changed
- fix(cli): centralize terminal colors by @w3lld1 in #326
- chore(deps): bump base64 from 0.22.1 to 0.23.0 by @dependabot[bot] in #334
- chore(deps): bump the minor-and-patch group with 13 updates by @dependabot[bot] in #333
- chore(deps): bump actions/cache from 4 to 6 by @dependabot[bot] in #332
- chore(deps): bump actions/checkout from 6 to 7 by @dependabot[bot] in #331
- chore(deps): bump rust from 1.96-alpine to 1.97-alpine in the minor-and-patch group by @dependabot[bot] in #330
- fix(blocklist): replace dead hagezi default, reject non-2xx by @razvandimescu in #337
- fix(dnssec): only send AD to clients that asked for it by @razvandimescu in #340
- docs(dnssec): cite the section that carries the AD-on-replies rule by @razvandimescu in #342
- feat(blocking): report per-source health instead of dropping failures by @razvandimescu in #339
- fix(forward): send DO=1 upstream so cached wires always carry RRSIGs by @razvandimescu in #329
- feat(blocking): keep a last-known-good copy of every remote list by @razvandimescu in #338
- feat: refuse ANY queries with a minimal HINFO (RFC 8482) by @razvandimescu in #343
- fix(blocking): regressions from the #336 hardening by @razvandimescu in #344
- refactor(blocking): trim what later PRs made redundant by @razvandimescu in #345
- feat(cli): add effective config commands by @Guflly in #346
- fix(forward): TC=1 escape hatch and DO-bit walker hardening by @razvandimescu in #347
- fix(cli): follow-ups to #346 — sudo in the restart hint, README pointer by @razvandimescu in #350
- fix(ctx): truncate UDP replies to the client's advertised payload size by @razvandimescu in #352
- fix(forward): harden the TC=1 retry from #347 by @razvandimescu in #351
- test(fuzz): cover maximize_payload and the client UDP budget by @razvandimescu in #353
- fix(recursive): reject out-of-bailiwick referrals (RFC 5452) by @razvandimescu in #354
- fix(recursive): bailiwick-filter glue and DS records by @razvandimescu in #355
- fix(recursive): reject bogon nameserver addresses by @razvandimescu in #356
- fix(recursive): bound per-resolution query budget + NS fan-out width by @razvandimescu in #357
- fix(recursive): randomize TXIDs and validate UDP replies (RFC 5452) by @razvandimescu in #358
- fix(forward): validate the question on plain-UDP replies (RFC 5452) by @razvandimescu in #359
- feat(dashboard): translatable UI via per-language JSON locales by @razvandimescu in #360
New Contributors
Full Changelog: v0.22.0...v0.23.0