4413 Commits

Author SHA1 Message Date
Ville Vesilehto
dd029c931f chore: bump coredns/caddy dependency to latest (#7567)
To fix Corefile related import cycle issue. Update docs.

Signed-off-by: Ville Vesilehto <ville@vesilehto.fi>
2025-09-20 16:33:00 -07:00
Ville Vesilehto
6ec327836b fix: prevent SIGTERM/reload deadlock (#7562) 2025-09-19 04:01:53 -07:00
Ville Vesilehto
5532ba8484 fix(plugin): prevent panic when ListenHosts is empty (#7565) 2025-09-19 03:59:37 -07:00
Ville Vesilehto
051d8d6f05 fix(plugin): normalize panics on invalid origins (#7563)
Previously OriginsFromArgsOrServerBlock accessed the output of
NormalizeExact() by index 0, which could panic when normalization
returned an empty slice on error. This happens with malformed input
surfaced by fuzzing, for example "unix://<non‑UTF8>".

This change hardens normalization in the server block path.
If normalization yields no entries, the original value is preserved.
The function still returns a newly copied slice.

This preserves legacy semantics for valid inputs while eliminating
the crash on malformed ones. Added tests to validate.

Signed-off-by: Ville Vesilehto <ville@vesilehto.fi>
2025-09-18 19:15:40 -07:00
Ville Vesilehto
0440e54bcf fix(dnstap): add bounds for plugin args (#7557)
Validate dnstap writebuffer (MiB) and queue (x10k) args. Reject
non-integers and out-of-range values with clear errors. Updated
plugin documentation and tests.

Signed-off-by: Ville Vesilehto <ville@vesilehto.fi>
2025-09-18 19:14:51 -07:00
Ville Vesilehto
3c950b8552 fix(forward): deflake TestFailover (#7558)
In CI, the first two upstream attempts can stall on UDP and each
consume the default 2s read timeout. Possibly exhausting most of
the 5s forward deadline before the healthy third upstream is tried.
Lower the read timeout to make retries faster.

Signed-off-by: Ville Vesilehto <ville@vesilehto.fi>
2025-09-15 14:28:26 -07:00
dependabot[bot]
55b4e9f9cd build(deps): bump github.com/aws/aws-sdk-go-v2/config (#7552)
Bumps [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) from 1.31.6 to 1.31.8.
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/config/v1.31.6...config/v1.31.8)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2/config
  dependency-version: 1.31.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-09-15 14:27:45 -07:00
dependabot[bot]
e574453e42 build(deps): bump google.golang.org/protobuf from 1.36.8 to 1.36.9 (#7545)
Bumps google.golang.org/protobuf from 1.36.8 to 1.36.9.

---
updated-dependencies:
- dependency-name: google.golang.org/protobuf
  dependency-version: 1.36.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-09-15 11:30:54 -07:00
dependabot[bot]
09e2d9578e build(deps): bump github.com/aws/aws-sdk-go-v2/credentials (#7554)
Bumps [github.com/aws/aws-sdk-go-v2/credentials](https://github.com/aws/aws-sdk-go-v2) from 1.18.10 to 1.18.12.
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/config/v1.18.10...config/v1.18.12)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2/credentials
  dependency-version: 1.18.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-09-15 11:30:35 -07:00
dependabot[bot]
d95caaf094 build(deps): bump github.com/aws/aws-sdk-go-v2/feature/ec2/imds (#7546)
Bumps [github.com/aws/aws-sdk-go-v2/feature/ec2/imds](https://github.com/aws/aws-sdk-go-v2) from 1.18.6 to 1.18.7.
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/config/v1.18.7/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/config/v1.18.6...config/v1.18.7)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2/feature/ec2/imds
  dependency-version: 1.18.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-09-15 11:11:40 -07:00
dependabot[bot]
71c45af445 build(deps): bump github.com/aws/aws-sdk-go-v2/service/secretsmanager (#7547)
Bumps [github.com/aws/aws-sdk-go-v2/service/secretsmanager](https://github.com/aws/aws-sdk-go-v2) from 1.39.2 to 1.39.4.
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/amp/v1.39.2...service/amp/v1.39.4)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2/service/secretsmanager
  dependency-version: 1.39.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-09-15 11:11:19 -07:00
dependabot[bot]
e3b1a562ea build(deps): bump google.golang.org/grpc from 1.75.0 to 1.75.1 (#7550)
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.75.0 to 1.75.1.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.75.0...v1.75.1)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-version: 1.75.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-09-15 11:10:49 -07:00
dependabot[bot]
f786bea3df build(deps): bump the k8s-io group with 3 updates (#7555)
Bumps the k8s-io group with 3 updates: [k8s.io/api](https://github.com/kubernetes/api), [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery) and [k8s.io/client-go](https://github.com/kubernetes/client-go).


Updates `k8s.io/api` from 0.34.0 to 0.34.1
- [Commits](https://github.com/kubernetes/api/compare/v0.34.0...v0.34.1)

Updates `k8s.io/apimachinery` from 0.34.0 to 0.34.1
- [Commits](https://github.com/kubernetes/apimachinery/compare/v0.34.0...v0.34.1)

Updates `k8s.io/client-go` from 0.34.0 to 0.34.1
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](https://github.com/kubernetes/client-go/compare/v0.34.0...v0.34.1)

---
updated-dependencies:
- dependency-name: k8s.io/api
  dependency-version: 0.34.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: k8s-io
- dependency-name: k8s.io/apimachinery
  dependency-version: 0.34.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: k8s-io
- dependency-name: k8s.io/client-go
  dependency-version: 0.34.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: k8s-io
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-09-15 10:21:56 -07:00
dependabot[bot]
bf0a29c532 build(deps): bump github.com/aws/aws-sdk-go-v2/service/route53 (#7544)
Bumps [github.com/aws/aws-sdk-go-v2/service/route53](https://github.com/aws/aws-sdk-go-v2) from 1.58.0 to 1.58.2.
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/s3/v1.58.0...service/s3/v1.58.2)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2/service/route53
  dependency-version: 1.58.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-09-15 10:17:46 -07:00
Ville Vesilehto
a30954ea71 test(view): improve test coverage (#7543)
Cover edge cases in config parser. Add rudimentary View/Filter
tests. Improves test coverage from 44% to 82%.

Signed-off-by: Ville Vesilehto <ville@vesilehto.fi>
2025-09-15 10:17:35 -07:00
Ville Vesilehto
c916cf4259 fix(plugin): nilness findings (#7556)
Enable nilness linter in govet.

Plugin-by-plugin rationale:

- plugin/transfer: reuse error instead of shadowing it inside the for
  loop by declaring "ret" outside of the loop
- plugin/view: remove redundant err check
- plugin/dnstap: avoid possible nil dereference in error reporting
  path in setup test
- plugin/forward: prevent nil deference or empty-slice dereference on
  error paths in setup test

Signed-off-by: Ville Vesilehto <ville@vesilehto.fi>
2025-09-15 10:17:06 -07:00
dependabot[bot]
4073862045 build(deps): bump google.golang.org/api from 0.248.0 to 0.249.0 (#7551)
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.248.0 to 0.249.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.248.0...v0.249.0)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-version: 0.249.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-09-15 10:16:35 -07:00
dependabot[bot]
3bdd8de46f build(deps): bump golang.org/x/crypto from 0.41.0 to 0.42.0 (#7553) 2025-09-15 17:37:12 +03:00
dependabot[bot]
4dd6c6b5f5 build(deps): bump github/codeql-action from 3.30.1 to 3.30.3 (#7549) 2025-09-15 17:30:24 +03:00
Ville Vesilehto
ba7d5ff55a test(metrics): improve test coverage (#7538)
Add more unit tests for metrics plugin, around registration
deduplication, zone management, restart/shutdown behavior and
context helpers.

Increases test coverage from 54.8% to 76.1%.

Signed-off-by: Ville Vesilehto <ville@vesilehto.fi>
2025-09-13 15:15:25 -07:00
Ville Vesilehto
a72a14d88b test(presubmit): prevent panic in TestImportOrdering on split import (#7540)
Fix a panic in presubmit test when import statements are split into
>3 logical blocks (e.g., std, coredns, then third party in multiple
blocks). The computed block index could exceed the fixed array
bounds.

Signed-off-by: Ville Vesilehto <ville@vesilehto.fi>
2025-09-13 15:14:59 -07:00
Ville Vesilehto
c149567dbe fix: lint issues from plugin/forward and plugin/pkg/dnstest (#7539)
To fix CI pipeline issues on master.

Signed-off-by: Ville Vesilehto <ville@vesilehto.fi>
2025-09-13 15:14:10 -07:00
Fitz_dev
9683de0feb fix: No failover to next upstream when receiving SERVFAIL or REFUSED response codes(#7457) (#7458) 2025-09-12 14:45:01 -07:00
Ville Vesilehto
155f451957 test(grpc): add fuzzer (#7513) 2025-09-12 14:43:56 -07:00
Ville Vesilehto
8817d8f2f9 fix(grpc): enforce DNS message size limits (#7490)
Add DNS wire size validation for requests/replies. Limit gRPC
recv/send via default call options, accounting necessary
framing/protobuf overhead. An error is returned for oversized
messages. Add test.

Signed-off-by: Ville Vesilehto <ville@vesilehto.fi>
2025-09-12 08:21:33 +03:00
Ville Vesilehto
39abf5aeba chore(lint): modernize Go (#7536)
Use modern Go constructs through the modernize analyzer from the
golang.org/x/tools package.

Signed-off-by: Ville Vesilehto <ville@vesilehto.fi>
2025-09-10 13:08:27 -07:00
Ville Vesilehto
afdd41a266 chore: bump Go version to 1.25.1 (#7535)
Signed-off-by: Ville Vesilehto <ville@vesilehto.fi>
2025-09-10 13:07:57 -07:00
Yong Tang
a6673745e4 Update prometheus version (#7533)
This PR updates prometheus version as PR #7522 failed

Signed-off-by: Yong Tang <yong.tang.github@outlook.com>
2025-09-09 23:08:29 -07:00
Ilya Kulakov
c90e70339c dnsserver.Server: Export timeout values (#7497)
Plugins need access to timeout values that are actually used by
TCP dns.Server

Signed-off-by: Ilya Kulakov <kulakov.ilya@gmail.com>
2025-09-09 19:06:44 -07:00
Ville Vesilehto
d2e0e6a459 chore(docs): remove extra whitespace from readmes (#7532) 2025-09-09 14:30:27 -07:00
dependabot[bot]
f32329577f build(deps): bump github/codeql-action from 3.30.0 to 3.30.1 (#7528) v1.12.4 2025-09-08 06:47:41 -07:00
dependabot[bot]
3fc046f976 build(deps): bump codecov/codecov-action from 5.5.0 to 5.5.1 (#7525) 2025-09-08 06:47:19 -07:00
dependabot[bot]
1b35ba1f03 build(deps): bump softprops/action-gh-release from 2.3.2 to 2.3.3 (#7527) 2025-09-08 06:47:03 -07:00
dependabot[bot]
8f76d6ffa8 build(deps): bump actions/stale from 9.1.0 to 10.0.0 (#7526) 2025-09-08 06:46:52 -07:00
dependabot[bot]
ddc1878bbd build(deps): bump actions/setup-go from 5.5.0 to 6.0.0 (#7524) 2025-09-08 06:46:41 -07:00
dependabot[bot]
f74bf9c0ac build(deps): bump aquasecurity/trivy-action from 0.33.0 to 0.33.1 (#7523) 2025-09-08 06:46:30 -07:00
dependabot[bot]
cbc32d2389 build(deps): bump github.com/aws/aws-sdk-go-v2/service/route53 (#7521) 2025-09-08 06:46:06 -07:00
dependabot[bot]
51d59e539d build(deps): bump golang.org/x/sys from 0.35.0 to 0.36.0 (#7520) 2025-09-08 06:45:54 -07:00
dependabot[bot]
a62ef5dd0d build(deps): bump github.com/DataDog/dd-trace-go/v2 from 2.2.2 to 2.2.3 (#7519) 2025-09-08 06:45:22 -07:00
Yong Tang
96819edef2 Update note and versioon for 1.12.4 release (#7518) 2025-09-08 06:44:56 -07:00
Ville Vesilehto
0dd76bd9b1 fix(transfer): goroutine leak on axfr err (#7516) 2025-09-05 13:13:11 -07:00
Ville Vesilehto
8c2cfb01e3 plugin/etcd: fix import order for ttl test (#7515) 2025-09-05 11:45:30 -07:00
Archy
0d24fc4a5d Add note about chronological order of adopters (#7498) 2025-09-05 11:44:17 -07:00
Ville Vesilehto
e1768a5d27 Merge commit from fork
Instead of casting lease ID to uint32, fix the TTL() function
to use etcd time-to-live API for determining TTL. Add configurable
min-lease-ttl and max-lease-ttl options to prevent extreme TTL
values. By default, lease records now go through bounds checking
with 30s to 1d as the min/max.

Added unit tests for validation and docs.

Signed-off-by: Ville Vesilehto <ville@vesilehto.fi>
2025-09-04 17:14:27 -07:00
Ville Vesilehto
066e51675c fix(grpc): check proxy list length in policies (#7512) 2025-09-03 16:24:44 -07:00
Ville Vesilehto
abef207695 fix(https): propagate HTTP request context (#7491) 2025-09-02 14:33:16 -07:00
dependabot[bot]
3f868e5edd build(deps): bump github.com/aws/aws-sdk-go-v2/config (#7501) 2025-09-02 14:32:11 -07:00
dependabot[bot]
83a546e7b4 build(deps): bump github.com/aws/aws-sdk-go-v2/service/secretsmanager (#7502) 2025-09-02 14:31:59 -07:00
Ville Vesilehto
1ea6a7f682 fix(plugin): guard nil lookups across plugins (#7494) 2025-09-02 13:46:47 -07:00
dependabot[bot]
254e95ea69 build(deps): bump the k8s-io group with 2 updates (#7503) 2025-09-02 13:46:10 -07:00