pasteley
388cbc5187
plugin/kubernetes: rate limits to api server ( #7771 )
...
Signed-off-by: pasteley <ceasebeing@gmail.com >
2025-12-15 20:06:16 -08:00
dependabot[bot]
0b420cd49f
build(deps): bump the k8s-io group with 3 updates ( #7759 )
...
Bumps the k8s-io group with 3 updates: [k8s.io/api](https://github.com/kubernetes/api ), [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery ) and [k8s.io/client-go](https://github.com/kubernetes/client-go ).
Updates `k8s.io/api` from 0.34.2 to 0.34.3
- [Commits](https://github.com/kubernetes/api/compare/v0.34.2...v0.34.3 )
Updates `k8s.io/apimachinery` from 0.34.2 to 0.34.3
- [Commits](https://github.com/kubernetes/apimachinery/compare/v0.34.2...v0.34.3 )
Updates `k8s.io/client-go` from 0.34.2 to 0.34.3
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md )
- [Commits](https://github.com/kubernetes/client-go/compare/v0.34.2...v0.34.3 )
---
updated-dependencies:
- dependency-name: k8s.io/api
dependency-version: 0.34.3
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: k8s-io
- dependency-name: k8s.io/apimachinery
dependency-version: 0.34.3
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: k8s-io
- dependency-name: k8s.io/client-go
dependency-version: 0.34.3
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: k8s-io
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-15 20:04:30 -08:00
dependabot[bot]
40ec642e5c
build(deps): bump github.com/aws/aws-sdk-go-v2/config ( #7762 )
...
Bumps [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2 ) from 1.32.3 to 1.32.5.
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases )
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json )
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/v1.32.3...v1.32.5 )
---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2/config
dependency-version: 1.32.5
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-15 20:04:14 -08:00
dependabot[bot]
38b67b170e
build(deps): bump github.com/aws/aws-sdk-go-v2/service/route53 ( #7764 )
...
Bumps [github.com/aws/aws-sdk-go-v2/service/route53](https://github.com/aws/aws-sdk-go-v2 ) from 1.61.1 to 1.62.0.
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases )
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json )
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/s3/v1.61.1...service/s3/v1.62.0 )
---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2/service/route53
dependency-version: 1.62.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-15 20:04:05 -08:00
Ville Vesilehto
4fd014a1e1
fix(test): prevent data race in TestReadme ( #7769 )
...
Replace "reload 2s" with "quic" in quicReloadCorefile to avoid
spawning a background goroutine that reads dnsserver.Port while
TestReadme modifies it. The test TestQUICReloadDoesNotPanic still
verifies the QUIC reload panic fix via explicit inst.Restart() call.
Signed-off-by: Ville Vesilehto <ville@vesilehto.fi >
2025-12-15 19:31:19 -08:00
Ville Vesilehto
05efeb0a7e
fix(test): prevent race condition in dial test ( #7770 )
...
The test "TestDial_TransportStoppedDuringRetWait" replaced
tr.dial and tr.ret with test-controlled channels, then called
tr.Start(). Since connManager reads from t.dial, both the test
and connManager were racing to read from the same channel.
Remove tr.Start() since the test manually simulates connManager
behavior.
Also changed some test log formatting to align with other tests.
Signed-off-by: Ville Vesilehto <ville@vesilehto.fi >
2025-12-15 19:30:56 -08:00
dependabot[bot]
b47d0cc762
build(deps): bump google.golang.org/protobuf from 1.36.10 to 1.36.11 ( #7765 )
...
Bumps google.golang.org/protobuf from 1.36.10 to 1.36.11.
---
updated-dependencies:
- dependency-name: google.golang.org/protobuf
dependency-version: 1.36.11
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-15 19:30:36 -08:00
dependabot[bot]
97547aafd6
build(deps): bump github.com/aws/aws-sdk-go-v2/service/secretsmanager ( #7763 )
...
Bumps [github.com/aws/aws-sdk-go-v2/service/secretsmanager](https://github.com/aws/aws-sdk-go-v2 ) from 1.40.4 to 1.41.0.
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases )
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json )
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/amp/v1.40.4...v1.41.0 )
---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2/service/secretsmanager
dependency-version: 1.41.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-15 19:30:26 -08:00
dependabot[bot]
e489d71447
build(deps): bump github.com/aws/aws-sdk-go-v2/credentials ( #7760 )
...
Bumps [github.com/aws/aws-sdk-go-v2/credentials](https://github.com/aws/aws-sdk-go-v2 ) from 1.19.4 to 1.19.5.
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases )
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json )
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/m2/v1.19.4...service/m2/v1.19.5 )
---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2/credentials
dependency-version: 1.19.5
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-15 19:30:16 -08:00
dependabot[bot]
3b21a93dd3
build(deps): bump github.com/miekg/dns from 1.1.68 to 1.1.69 ( #7766 )
...
Bumps [github.com/miekg/dns](https://github.com/miekg/dns ) from 1.1.68 to 1.1.69.
- [Commits](https://github.com/miekg/dns/compare/v1.1.68...v1.1.69 )
---
updated-dependencies:
- dependency-name: github.com/miekg/dns
dependency-version: 1.1.69
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-15 21:42:43 +02:00
dependabot[bot]
f3d2560983
build(deps): bump github.com/DataDog/dd-trace-go/v2 from 2.4.0 to 2.4.1 ( #7768 )
...
Bumps [github.com/DataDog/dd-trace-go/v2](https://github.com/DataDog/dd-trace-go ) from 2.4.0 to 2.4.1.
- [Release notes](https://github.com/DataDog/dd-trace-go/releases )
- [Commits](https://github.com/DataDog/dd-trace-go/compare/v2.4.0...v2.4.1 )
---
updated-dependencies:
- dependency-name: github.com/DataDog/dd-trace-go/v2
dependency-version: 2.4.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-15 20:24:13 +02:00
dependabot[bot]
4829508af4
build(deps): bump github.com/quic-go/quic-go from 0.57.0 to 0.57.1 ( #7767 )
...
Bumps [github.com/quic-go/quic-go](https://github.com/quic-go/quic-go ) from 0.57.0 to 0.57.1.
- [Release notes](https://github.com/quic-go/quic-go/releases )
- [Commits](https://github.com/quic-go/quic-go/compare/v0.57.0...v0.57.1 )
---
updated-dependencies:
- dependency-name: github.com/quic-go/quic-go
dependency-version: 0.57.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-15 17:34:18 +02:00
dependabot[bot]
f6eae7dccd
build(deps): bump actions/upload-artifact from 5.0.0 to 6.0.0 ( #7757 )
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 5.0.0 to 6.0.0.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](330a01c490...b7c566a772support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-15 17:33:05 +02:00
dependabot[bot]
54ca8c6b38
build(deps): bump golang.org/x/crypto from 0.45.0 to 0.46.0 ( #7761 )
...
Bumps [golang.org/x/crypto](https://github.com/golang/crypto ) from 0.45.0 to 0.46.0.
- [Commits](https://github.com/golang/crypto/compare/v0.45.0...v0.46.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/crypto
dependency-version: 0.46.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-15 17:32:51 +02:00
dependabot[bot]
0fe09cec27
build(deps): bump github/codeql-action from 4.31.7 to 4.31.8 ( #7758 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 4.31.7 to 4.31.8.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](cf1bb45a27...1b168cd394support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-15 17:16:39 +02:00
rusttech
1fd4ba2e5f
fix: fix slice init length ( #6901 )
...
Signed-off-by: rusttech <gopher@before.tech >
2025-12-09 18:17:07 -08:00
cangming
cad961f75f
plugin/errors: add show_first option to consolidate ( #7702 ) ( #7703 )
...
Add optional show_first flag to consolidate directive that logs
the first error immediately and then consolidates subsequent errors.
When show_first is enabled:
- The first matching error is logged immediately with full details
(rcode, domain, type, error message) using the configured log level
- Subsequent matching errors are consolidated during the period
- At period end:
- If only one error occurred, no summary is printed (already logged)
- If multiple errors occurred, summary shows the total count
Syntax:
consolidate DURATION REGEXP [LEVEL] [show_first]
Example with 3 errors:
[WARNING] 2 example.org. A: read udp 10.0.0.1:53->8.8.8.8:53: i/o timeout
[WARNING] 3 errors like '^read udp .* i/o timeout$' occurred in last 30s
Example with 1 error:
[WARNING] 2 example.org. A: read udp 10.0.0.1:53->8.8.8.8:53: i/o timeout
Implementation details:
- Add showFirst bool to pattern struct
- Rename inc() to consolidateError(), return false for showFirst case
- Use function pointer in ServeDNS to unify log calls with proper level
- Simplify logPattern() with single condition (cnt > 1 || !showFirst)
- Refactor parseLogLevel() to parseOptionalParams() with map-based dispatch
- Validate parameter order: log level must come before show_first
- Update README.md with show_first documentation and examples
- Add comprehensive test cases for show_first functionality
Signed-off-by: cangming <cangming@cangming.app >
2025-12-09 18:15:49 -08:00
Yong Tang
0233f3e7c6
Add deprecation notice for geoip plugin's behavior of 0 ( #7740 )
...
This PR add a deprecation noticed for geoip plugin's upcoming
behavior change of 0. Please see PR #7732 for details.
Signed-off-by: Yong Tang <yong.tang.github@outlook.com >
2025-12-09 13:44:03 +02:00
dependabot[bot]
56aa6dcd3d
build(deps): bump github.com/aws/aws-sdk-go-v2/service/secretsmanager ( #7752 )
2025-12-08 17:30:06 -08:00
dependabot[bot]
258088c100
build(deps): bump github.com/aws/aws-sdk-go-v2/credentials ( #7749 )
2025-12-08 14:42:58 -08:00
dependabot[bot]
f663db25a7
build(deps): bump github.com/aws/aws-sdk-go-v2/config ( #7754 )
2025-12-08 12:54:01 -08:00
Eric Case
8f48704abe
plugin/geoip: Upgrade to geoip2-golang v2 ( #7732 )
...
Signed-off-by: Eric Case <eric.case@gmail.com >
2025-12-08 20:19:47 +00:00
dependabot[bot]
2a96ac10fd
build(deps): bump github.com/aws/aws-sdk-go-v2/service/route53 ( #7750 )
2025-12-08 10:06:14 -08:00
dependabot[bot]
18e5b24867
build(deps): bump google.golang.org/api from 0.256.0 to 0.257.0 ( #7751 )
2025-12-08 10:05:59 -08:00
dependabot[bot]
01c4d36502
build(deps): bump actions/checkout from 6.0.0 to 6.0.1 ( #7741 )
2025-12-08 07:43:14 -08:00
dependabot[bot]
8dad281ef5
build(deps): bump github.com/quic-go/quic-go from 0.57.0 to 0.57.1 ( #7748 )
2025-12-08 07:42:52 -08:00
dependabot[bot]
9a217cd31f
build(deps): bump golang.org/x/sys from 0.38.0 to 0.39.0 ( #7747 )
2025-12-08 07:42:42 -08:00
dependabot[bot]
381bda5b06
build(deps): bump github.com/aws/aws-sdk-go-v2/feature/ec2/imds ( #7746 )
2025-12-08 07:42:30 -08:00
dependabot[bot]
7b752b7d59
build(deps): bump softprops/action-gh-release from 2.4.2 to 2.5.0 ( #7742 )
2025-12-08 15:18:26 +02:00
dependabot[bot]
3864521733
build(deps): bump github/codeql-action from 4.31.5 to 4.31.7 ( #7743 )
2025-12-08 15:18:03 +02:00
dependabot[bot]
5e3115e415
build(deps): bump actions/stale from 10.1.0 to 10.1.1 ( #7744 )
2025-12-08 15:17:41 +02:00
dependabot[bot]
2d869c878b
build(deps): bump golangci/golangci-lint-action from 9.1.0 to 9.2.0 ( #7745 )
2025-12-08 15:17:26 +02:00
Yong Tang
38937cae56
Update release version to 1.13.2 ( #7739 )
2025-12-07 19:16:23 -08:00
Ville Vesilehto
e5cd796648
fix(auto): limit regex length ( #7737 )
...
A very large regex for the auto plugin in the Corefile could cause
CoreDNS to OOM. This change adds an artificial limit of 10k characters
for the regex pattern. Fixes OSS-Fuzz finding #466745384 .
Signed-off-by: Ville Vesilehto <ville@vesilehto.fi >
2025-12-07 17:04:55 -08:00
Ville Vesilehto
3c8b846213
chore: bump Go version to 1.25.5 ( #7736 )
2025-12-03 17:13:12 -08:00
Tomas Boros
b472d3dbdb
plugin/geoip - Support for ISO 3166-2 subdivisions. ( #7728 )
...
Metadata `geoip/subdivisions/code` now available if geoip plugin is used.
Signed-off-by: Tomas Boros <tomas.boros92@gmail.com >
2025-12-02 12:39:13 +00:00
Ville Vesilehto
c2894d47d6
feat(forward): add max connect attempts knob ( #7722 )
2025-12-01 18:06:52 -08:00
Ville Vesilehto
5cb2c5dbf5
chore(lint): enable reflecttypefor in modernize ( #7729 )
2025-11-30 21:30:49 -08:00
Eric Case
54dd258d57
plugin/geoip: Add ASN schema support ( #7730 )
...
Adds the ability to query ASN .mmdb databases, in addition to the existing City db functionality.
Signed-off-by: Eric Case <eric.case@gmail.com >
2025-11-30 16:36:33 +00:00
Andrey Smirnov
604e1675cf
fix: kubernetes plugin logging ( #7727 )
...
The plugin dropped the actual error message from the log, so the log
becomes completely useless.
Before:
```
[ERROR] plugin/kubernetes: error Failed to watch
```
After:
```
[ERROR] plugin/kubernetes: Failed to watch: failed to list *v1.Namespace: Get "https://10.96.0.1:443/api/v1/namespaces?limit=500&resourceVersion=0 ": tls: failed to parse certificate from server: x509: SAN dNSName is malformed
```
Signed-off-by: Andrey Smirnov <andrey.smirnov@siderolabs.com >
2025-11-27 19:46:04 +02:00
Olli Janatuinen
bdc03ed540
plugin/nomad: Support service filtering ( #7724 )
...
Signed-off-by: Olli Janatuinen <olli.janatuinen@gmail.com >
2025-11-25 21:05:14 +02:00
dependabot[bot]
3362885b56
build(deps): bump github.com/aws/aws-sdk-go-v2/config ( #7714 )
...
Bumps [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2 ) from 1.31.20 to 1.32.1.
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases )
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json )
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/config/v1.31.20...v1.32.1 )
---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2/config
dependency-version: 1.32.1
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-11-24 22:31:57 +02:00
cangming
0ef4b55d8d
plugin/pkg/uniq: fix data race with sync.RWMutex ( #7707 )
...
Add RWMutex to protect concurrent map access in Set, Unset, and ForEach methods.
Change New() to return *U pointer type for proper synchronization.
Signed-off-by: Cangming H <cangmingh@gmail.com >
2025-11-24 22:14:21 +02:00
dependabot[bot]
4f4f403567
build(deps): bump github.com/aws/aws-sdk-go-v2/service/secretsmanager ( #7715 )
...
Bumps [github.com/aws/aws-sdk-go-v2/service/secretsmanager](https://github.com/aws/aws-sdk-go-v2 ) from 1.39.13 to 1.40.1.
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases )
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json )
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/sfn/v1.39.13...service/s3/v1.40.1 )
---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2/service/secretsmanager
dependency-version: 1.40.1
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-11-24 21:56:51 +02:00
dependabot[bot]
62bbe06138
build(deps): bump github.com/aws/aws-sdk-go-v2/credentials ( #7719 )
2025-11-24 10:48:51 -08:00
dependabot[bot]
6818b93f25
build(deps): bump github.com/aws/aws-sdk-go-v2/feature/ec2/imds ( #7716 )
2025-11-24 09:52:18 -08:00
dependabot[bot]
25b43fd1ea
build(deps): bump github.com/prometheus/common from 0.67.2 to 0.67.4 ( #7718 )
2025-11-24 09:15:45 -08:00
Ville Vesilehto
fe7335e634
perf(proxy): avoid unnecessary alloc in Yield ( #7708 )
2025-11-24 08:20:30 -08:00
dependabot[bot]
63eb9f70e5
build(deps): bump github.com/quic-go/quic-go from 0.56.0 to 0.57.0 ( #7717 )
2025-11-24 08:17:52 -08:00
dependabot[bot]
bc51a6e1ac
build(deps): bump google.golang.org/grpc from 1.76.0 to 1.77.0 ( #7720 )
2025-11-24 08:17:39 -08:00
