What's Changed
- docs(readme): split the quick start into three paths and list what uninstall leaves by @razvandimescu in #425
- ci(docker): build the image from the release binaries by @razvandimescu in #424
- fix(dnssec): bound signature checks and NSEC3 iterations by @razvandimescu in #426
- fix(dnssec): don't mark a response Secure when an RRset has no signature by @razvandimescu in #427
- fix(dnssec): share one upstream query budget across a validation by @razvandimescu in #428
- fix(recursive): charge the query budget per packet sent by @razvandimescu in #429
- fix(proxy): share the TCP/DoT accept loop with the HTTPS listener by @razvandimescu in #421
- fix(forward): normalize forwarding rule suffixes by @razvandimescu in #431
- fix(forward): share the framed exchange between TCP and DoT upstreams by @razvandimescu in #432
- test(forward): bind the TC-retry UDP and TCP stubs together by @razvandimescu in #433
- fix(doh): leave allow_from to the accept loop by @razvandimescu in #434
- fix(recursive): allow deprecated fetch_update until try_update is widespread by @razvandimescu in #435
- fix(deps): follow odoh-rs 1.0.5 to rand_core 0.10 by @razvandimescu in #437
- chore(deps): bump the minor-and-patch group across 1 directory with 11 updates by @dependabot[bot] in #438
- fix(tls): create the CA key owner-only instead of chmod after write by @razvandimescu in #430
- Add russian translation by @sysop200 in #439
- fix(odoh): escalate the config-fetch backoff instead of a fixed 60 s by @razvandimescu in #440
New Contributors
Full Changelog: v0.24.0...v0.24.1