Commits · 45b0a11294c59bfd806a57807aaa2a185f761cd5 · Railgun / Coredns

This project is mirrored from https://github.com/coredns/coredns.git. The repository failed to update Aug 24, 2022.
Repository mirroring has been paused due to too many failed attempts, and can be resumed by a project maintainer.
Last successful update Aug 22, 2022.

27 May, 2022 1 commit

Update version and release note to 1.9.3 (#5411) · 45b0a112

Yong Tang authored May 27, 2022

* Update version and release note to 1.9.3

This PR update version and release note to prepare for 1.9.3.
Main reason is to address CVE-2022-27191 and CVE-2022-28948
Signed-off-by: Yong Tang <yong.tang.github@outlook.com>

* Update notes/coredns-1.9.3.md
Co-authored-by: Chris O'Haver <cohaver@infoblox.com>
Signed-off-by: Yong Tang <yong.tang.github@outlook.com>

* Update notes/coredns-1.9.3.md
Co-authored-by: Chris O'Haver <cohaver@infoblox.com>
Signed-off-by: Yong Tang <yong.tang.github@outlook.com>
Co-authored-by: Chris O'Haver <cohaver@infoblox.com>

45b0a112

26 May, 2022 5 commits

Update gopkg.in/yaml.v3 to v3.0.0 to fix security issues (#5408) · bd4675b9

Yong Tang authored May 26, 2022

As the dependabot cannot update the go-yaml automatically,
this PR updates gopkg.in/yaml.v3 to v3.0.0 to fix CVE-2022-28948
(See https://github.com/go-yaml/yaml/issues/666)
Signed-off-by: Yong Tang <yong.tang.github@outlook.com>

bd4675b9

build(deps): bump github.com/aws/aws-sdk-go from 1.44.19 to 1.44.22 (#5406) · d44ba63c

dependabot[bot] authored May 25, 2022

Bumps [github.com/aws/aws-sdk-go](https://github.com/aws/aws-sdk-go) from 1.44.19 to 1.44.22.
- [Release notes](https://github.com/aws/aws-sdk-go/releases)
- [Changelog](https://github.com/aws/aws-sdk-go/blob/main/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-go/compare/v1.44.19...v1.44.22)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go
  dependency-type: direct:production
  update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

d44ba63c

build(deps): bump github.com/Azure/azure-sdk-for-go (#5404) · 83fda6eb

dependabot[bot] authored May 25, 2022

Bumps [github.com/Azure/azure-sdk-for-go](https://github.com/Azure/azure-sdk-for-go) from 64.1.0+incompatible to 65.0.0+incompatible.
- [Release notes](https://github.com/Azure/azure-sdk-for-go/releases)
- [Changelog](https://github.com/Azure/azure-sdk-for-go/blob/main/CHANGELOG.md)
- [Commits](https://github.com/Azure/azure-sdk-for-go/compare/v64.1.0...v65.0.0)

---
updated-dependencies:
- dependency-name: github.com/Azure/azure-sdk-for-go
  dependency-type: direct:production
  update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

83fda6eb

build(deps): bump google.golang.org/api from 0.80.0 to 0.81.0 (#5405) · 40179567

dependabot[bot] authored May 25, 2022

Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.80.0 to 0.81.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.80.0...v0.81.0)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

40179567

Update golang.org/x/crypto to the latest version (#5407) · 2c05834f

Yong Tang authored May 25, 2022

It looks like dependabot couldn't update golang.org/x/crypto
automatically to fix the  CVE-2022-27191:

https://github.com/coredns/coredns/discussions/5403#discussion-4099726

This PR manually fix the dependency.
Signed-off-by: Yong Tang <yong.tang.github@outlook.com>

2c05834f

24 May, 2022 1 commit
- recover from panic log including stacktrace to help finding the origin (#5392) · 91bcbc2e
  Radim Hatlapatka authored May 24, 2022
  
  91bcbc2e
23 May, 2022 6 commits

build(deps): bump github.com/prometheus/client_golang (#5399) · b7e4f05f

dependabot[bot] authored May 23, 2022

Bumps [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) from 1.12.1 to 1.12.2.
- [Release notes](https://github.com/prometheus/client_golang/releases)
- [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md)
- [Commits](https://github.com/prometheus/client_golang/compare/v1.12.1...v1.12.2)

---
updated-dependencies:
- dependency-name: github.com/prometheus/client_golang
  dependency-type: direct:production
  update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

b7e4f05f

build(deps): bump google.golang.org/api from 0.79.0 to 0.80.0 (#5398) · cf4f531e

dependabot[bot] authored May 23, 2022

Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.79.0 to 0.80.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.79.0...v0.80.0)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

cf4f531e

build(deps): bump github.com/aws/aws-sdk-go from 1.44.14 to 1.44.19 (#5400) · 1101e2b4

dependabot[bot] authored May 23, 2022

Bumps [github.com/aws/aws-sdk-go](https://github.com/aws/aws-sdk-go) from 1.44.14 to 1.44.19.
- [Release notes](https://github.com/aws/aws-sdk-go/releases)
- [Changelog](https://github.com/aws/aws-sdk-go/blob/main/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-go/compare/v1.44.14...v1.44.19)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go
  dependency-type: direct:production
  update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

1101e2b4

build(deps): bump actions/dependency-review-action from 1.0.0 to 1.0.1 (#5396) · 3a02f268
dependabot[bot] authored May 23, 2022

3a02f268
build(deps): bump github/codeql-action from 2.1.10 to 2.1.11 (#5395) · f2b7003d
dependabot[bot] authored May 23, 2022

f2b7003d
build(deps): bump actions/upload-artifact from 3.0.0 to 3.1.0 (#5397) · 90d4a39c
dependabot[bot] authored May 23, 2022

90d4a39c

20 May, 2022 1 commit

Fixing issue #5376 by adding a check to parse out Zone info (#5387) · 71f68a33

Tintin authored May 20, 2022

* Fixing #5376 by adding a check to parse out Zone information
Signed-off-by: Tintin <samrath.sodi@gmail.com>

* using IndexByte instead of strings.Split()
Signed-off-by: Tintin <samrath.sodi@gmail.com>

* using plugin logger for logging parsing failure
Signed-off-by: Tintin <samrath.sodi@gmail.com>

* using var keywork instead of short declaration operator
Signed-off-by: Tintin <samrath.sodi@gmail.com>

* reordering imports
Signed-off-by: Tintin <samrath.sodi@gmail.com>

71f68a33

19 May, 2022 1 commit
- Correct timeout description (#5388) · d594d613
  RetoHaslerMGB authored May 19, 2022
  
  d594d613
17 May, 2022 2 commits

auto remove trailing whitespaces · 68316f4e
coredns[bot] authored May 17, 2022
```
Signed-off-by: coredns[bot] <bot@bot.coredns.io>
```
68316f4e

chore(deps): Included dependency review (#5378) · c1d6386a

Naveen authored May 16, 2022

> Dependency Review GitHub Action in your repository to enforce dependency
> reviews on your pull requests.
> The action scans for vulnerable versions of dependencies introduced by package version
> changes in pull requests,
> and warns you about the associated security vulnerabilities.
> This gives you better visibility of what's changing in a pull request,
> and helps prevent vulnerabilities being added to your repository.

https://docs.github.com/en/code-security/supply-chain-security/understanding-your-software-supply-chain/about-dependency-review#dependency-review-enforcementSigned-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>

c1d6386a

16 May, 2022 7 commits

build(deps): bump google.golang.org/grpc from 1.46.0 to 1.46.2 (#5381) · 2d1ca9dc

dependabot[bot] authored May 16, 2022

Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.46.0 to 1.46.2.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.46.0...v1.46.2)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-type: direct:production
  update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

2d1ca9dc

build(deps): bump github/codeql-action from 2.1.9 to 2.1.10 (#5385) · 8200bed5

dependabot[bot] authored May 16, 2022

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.1.9 to 2.1.10.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/7502d6e991ca767d2db617bfd823a1ed925a0d59...2f58583a1b24a7d3c7034f6bf9fa506d23b1183b)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

8200bed5

build(deps): bump actions/setup-go from 3.0.0 to 3.1.0 (#5384) · 368b276f

dependabot[bot] authored May 16, 2022

Bumps [actions/setup-go](https://github.com/actions/setup-go) from 3.0.0 to 3.1.0.
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](https://github.com/actions/setup-go/compare/f6164bd8c8acb4a71fb2791a8b6c4024ff038dab...fcdc43634adb5f7ae75a9d7a9b9361790f7293e2)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-type: direct:production
  update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

368b276f

build(deps): bump github.com/Azure/azure-sdk-for-go (#5383) · 376ebf37

dependabot[bot] authored May 16, 2022

Bumps [github.com/Azure/azure-sdk-for-go](https://github.com/Azure/azure-sdk-for-go) from 63.4.0+incompatible to 64.1.0+incompatible.
- [Release notes](https://github.com/Azure/azure-sdk-for-go/releases)
- [Changelog](https://github.com/Azure/azure-sdk-for-go/blob/main/CHANGELOG.md)
- [Commits](https://github.com/Azure/azure-sdk-for-go/compare/v63.4.0...v64.1.0)

---
updated-dependencies:
- dependency-name: github.com/Azure/azure-sdk-for-go
  dependency-type: direct:production
  update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

376ebf37

build(deps): bump github.com/aws/aws-sdk-go from 1.44.9 to 1.44.14 (#5382) · b3098ab5

dependabot[bot] authored May 16, 2022

Bumps [github.com/aws/aws-sdk-go](https://github.com/aws/aws-sdk-go) from 1.44.9 to 1.44.14.
- [Release notes](https://github.com/aws/aws-sdk-go/releases)
- [Changelog](https://github.com/aws/aws-sdk-go/blob/main/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-go/compare/v1.44.9...v1.44.14)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go
  dependency-type: direct:production
  update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

b3098ab5

build(deps): bump github.com/miekg/dns from 1.1.48 to 1.1.49 (#5380) · f02af7e4

dependabot[bot] authored May 16, 2022

Bumps [github.com/miekg/dns](https://github.com/miekg/dns) from 1.1.48 to 1.1.49.
- [Release notes](https://github.com/miekg/dns/releases)
- [Changelog](https://github.com/miekg/dns/blob/master/Makefile.release)
- [Commits](https://github.com/miekg/dns/compare/v1.1.48...v1.1.49)

---
updated-dependencies:
- dependency-name: github.com/miekg/dns
  dependency-type: direct:production
  update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

f02af7e4

build(deps): bump google.golang.org/api from 0.78.0 to 0.79.0 (#5379) · 91363901

dependabot[bot] authored May 16, 2022

Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.78.0 to 0.79.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.78.0...v0.79.0)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

91363901

14 May, 2022 1 commit
- fix and document zone-match regex-no-match case (#5180) · 4d1d9adb
  Chris O'Haver authored May 13, 2022
```
Signed-off-by: Chris O'Haver <cohaver@infoblox.com>
```
  4d1d9adb
13 May, 2022 1 commit

plugin/dnstap: support FQDN TCP endpoint (#5377) · dbb8a123

lobshunter authored May 13, 2022

* plugin/dnstap: support FQDN TCP endpoint
Signed-off-by: lob <pengyu@pingcap.com>

* plugin/dnstap: remove unused variable
Signed-off-by: lob <pengyu@pingcap.com>

dbb8a123

10 May, 2022 2 commits
- Update version to 1.9.2 and add release note. (#5374) · 092c1444
  Yong Tang authored May 10, 2022
  
  092c1444
- [plugin/route53] Cleanup AWS config/credentials setup. (#5370) · 2895b067
  dilyevsky authored May 09, 2022
```
Signed-off-by: Dmitry Ilyevsky <ilyevsky@gmail.com>
```
  2895b067
09 May, 2022 2 commits

build(deps): bump google.golang.org/api from 0.77.0 to 0.78.0 (#5371) · be009ed6

dependabot[bot] authored May 09, 2022

Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.77.0 to 0.78.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.77.0...v0.78.0)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

be009ed6

build(deps): bump github.com/aws/aws-sdk-go from 1.44.4 to 1.44.9 (#5372) · 165655c7

dependabot[bot] authored May 09, 2022

Bumps [github.com/aws/aws-sdk-go](https://github.com/aws/aws-sdk-go) from 1.44.4 to 1.44.9.
- [Release notes](https://github.com/aws/aws-sdk-go/releases)
- [Changelog](https://github.com/aws/aws-sdk-go/blob/main/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-go/compare/v1.44.4...v1.44.9)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go
  dependency-type: direct:production
  update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

165655c7

07 May, 2022 1 commit

Don't add OPT RR to non-EDNS0 queries (#5368) · a5b97494

Patrick W. Healy authored May 06, 2022

* Don't add OPT RR to non-EDNS0 queries
Signed-off-by: Patrick W. Healy <phealy@phealy.com>
Signed-off-by: Patrick W. Healy <patrick.healy@microsoft.com>

* Update plugin/bufsize/README.md
Co-authored-by: Chris O'Haver <cohaver@infoblox.com>
Signed-off-by: Patrick W. Healy <patrick.healy@microsoft.com>
Co-authored-by: Chris O'Haver <cohaver@infoblox.com>

a5b97494

05 May, 2022 1 commit
- Bump Kubernetes to 1.24 (#5364) · 7a7b0a2b
  Lorenz Brun authored May 04, 2022
```
Signed-off-by: Lorenz Brun <lorenz@monogon.tech>
```
  7a7b0a2b
03 May, 2022 3 commits

fix k8s start up timeout ticker (#5361) · c02cd522
Chris O'Haver authored May 03, 2022
```
Signed-off-by: Chris O'Haver <cohaver@infoblox.com>
```
c02cd522

geoip: read source IP from EDNS0 subnet if provided (#5183) · 4ae29a44

Balazs Nagy authored May 02, 2022

* geoip: read source IP from EDNS0 subnet if provided

This patch implements EDNS backend processing (similar in powerdns: https://doc.powerdns.com/authoritative/settings.html#setting-edns-subnet-processing). This feature comes very handy to test whether your geo config is working properly.
Signed-off-by: Balazs Nagy <julsevern@gmail.com>

4ae29a44

plugin/cache: Add refresh mode setting to serve_stale (#5131) · 66f2ac75

Antoine Tollenaere authored May 02, 2022

This PR adds an optional REFRESH_MODE parameter on the serve_stale configuration directive of the
cache plugin, which verifies that the upstream is still unavailable before returning stale entries.
Signed-off-by: Antoine Tollenaere <atollena@gmail.com>

66f2ac75

02 May, 2022 5 commits

build(deps): bump google.golang.org/api from 0.75.0 to 0.77.0 (#5358) · c3572fdb

dependabot[bot] authored May 02, 2022

Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.75.0 to 0.77.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.75.0...v0.77.0)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

c3572fdb

build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.38.0 to 1.38.1 (#5357) · cd41366e

dependabot[bot] authored May 02, 2022

Bumps [gopkg.in/DataDog/dd-trace-go.v1](https://github.com/DataDog/dd-trace-go) from 1.38.0 to 1.38.1.
- [Release notes](https://github.com/DataDog/dd-trace-go/releases)
- [Commits](https://github.com/DataDog/dd-trace-go/compare/v1.38.0...v1.38.1)

---
updated-dependencies:
- dependency-name: gopkg.in/DataDog/dd-trace-go.v1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

cd41366e

build(deps): bump github.com/aws/aws-sdk-go from 1.43.45 to 1.44.4 (#5359) · 2ba757fd

dependabot[bot] authored May 02, 2022

Bumps [github.com/aws/aws-sdk-go](https://github.com/aws/aws-sdk-go) from 1.43.45 to 1.44.4.
- [Release notes](https://github.com/aws/aws-sdk-go/releases)
- [Changelog](https://github.com/aws/aws-sdk-go/blob/main/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-go/compare/v1.43.45...v1.44.4)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go
  dependency-type: direct:production
  update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

2ba757fd

build(deps): bump github/codeql-action from 2.1.8 to 2.1.9 (#5360) · 90016788

dependabot[bot] authored May 02, 2022

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.1.8 to 2.1.9.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/1ed1437484560351c5be56cf73a48a279d116b78...7502d6e991ca767d2db617bfd823a1ed925a0d59)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

90016788

add Trail of Bits to list of 3rd party security auditors (#5356) · f04d8b93
Chris O'Haver authored May 01, 2022
```
Signed-off-by: Chris O'Haver <cohaver@infoblox.com>
```
f04d8b93