Commits · eaf5570dc7f379a752a295d2b48a7494c7383d0a · Railgun / Coredns

This project is mirrored from https://github.com/coredns/coredns.git. The repository failed to update Aug 24, 2022.
Repository mirroring has been paused due to too many failed attempts, and can be resumed by a project maintainer.
Last successful update Aug 22, 2022.

07 Mar, 2022 5 commits

build(deps): bump actions/setup-go from 2.2.0 to 3 (#5239) · eaf5570d

dependabot[bot] authored Mar 07, 2022

Bumps [actions/setup-go](https://github.com/actions/setup-go) from 2.2.0 to 3.
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](https://github.com/actions/setup-go/compare/bfdd3570ce990073878bf10f6b2d79082de49492...f6164bd8c8acb4a71fb2791a8b6c4024ff038dab)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-type: direct:production
  update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

eaf5570d

build(deps): bump ossf/scorecard-action from 1.0.2 to 1.0.4 (#5235) · acc5ffcf

dependabot[bot] authored Mar 07, 2022

Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 1.0.2 to 1.0.4.
- [Release notes](https://github.com/ossf/scorecard-action/releases)
- [Commits](https://github.com/ossf/scorecard-action/compare/c8416b0b2bf627c349ca92fc8e3de51a64b005cf...c1aec4ac820532bab364f02a81873c555a0ba3a1)

---
updated-dependencies:
- dependency-name: ossf/scorecard-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

acc5ffcf

build(deps): bump github.com/Azure/azure-sdk-for-go (#5234) · 5d9d3a79

dependabot[bot] authored Mar 07, 2022

Bumps [github.com/Azure/azure-sdk-for-go](https://github.com/Azure/azure-sdk-for-go) from 62.0.0+incompatible to 62.1.0+incompatible.
- [Release notes](https://github.com/Azure/azure-sdk-for-go/releases)
- [Changelog](https://github.com/Azure/azure-sdk-for-go/blob/main/CHANGELOG.md)
- [Commits](https://github.com/Azure/azure-sdk-for-go/compare/v62.0.0...v62.1.0)

---
updated-dependencies:
- dependency-name: github.com/Azure/azure-sdk-for-go
  dependency-type: direct:production
  update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

5d9d3a79

build(deps): bump github.com/aws/aws-sdk-go from 1.43.7 to 1.43.12 (#5233) · 86bde559

dependabot[bot] authored Mar 07, 2022

Bumps [github.com/aws/aws-sdk-go](https://github.com/aws/aws-sdk-go) from 1.43.7 to 1.43.12.
- [Release notes](https://github.com/aws/aws-sdk-go/releases)
- [Changelog](https://github.com/aws/aws-sdk-go/blob/main/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-go/compare/v1.43.7...v1.43.12)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go
  dependency-type: direct:production
  update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

86bde559

build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.36.0 to 1.36.2 (#5232) · cff5b9e2

dependabot[bot] authored Mar 07, 2022

Bumps [gopkg.in/DataDog/dd-trace-go.v1](https://github.com/DataDog/dd-trace-go) from 1.36.0 to 1.36.2.
- [Release notes](https://github.com/DataDog/dd-trace-go/releases)
- [Commits](https://github.com/DataDog/dd-trace-go/compare/v1.36.0...v1.36.2)

---
updated-dependencies:
- dependency-name: gopkg.in/DataDog/dd-trace-go.v1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

cff5b9e2

05 Mar, 2022 1 commit

Add limit to ioutil.ReadAll for request body (#5224) · ad41112a

Yong Tang authored Mar 04, 2022

This PR adds limit to ioutil.ReadAll for DoH request body
so that it will not be subject to large requests.
Signed-off-by: Yong Tang <yong.tang.github@outlook.com>

ad41112a

04 Mar, 2022 1 commit
- use tickers instead of time.After to avoid memory leak (#5220) · 96781416
  Chris O'Haver authored Mar 04, 2022
```
Signed-off-by: Chris O'Haver <cohaver@infoblox.com>
```
  96781416
02 Mar, 2022 4 commits

Add additional permissions (#5217) · d40d2242

Yong Tang authored Mar 02, 2022

* Add additional permissions
Signed-off-by: Yong Tang <yong.tang.github@outlook.com>

* Fix yamllint warning
Signed-off-by: Yong Tang <yong.tang.github@outlook.com>

d40d2242

Updated workflow permissions. (#5216) · f5acb9d1
nathannaveen authored Mar 02, 2022

f5acb9d1

[plugin/rewrite] Refactor to satisfy security scan (#5214) · a1429e14

Yong Tang authored Mar 01, 2022

this PR re-arrange the logic to avoid a false positive DAST scan.
Signed-off-by: Yong Tang <yong.tang.github@outlook.com>

a1429e14

Fix pinning of github actions (#5213) · 6c26446b

Yong Tang authored Mar 01, 2022

It is recommended to pin github actions with hash so that an action
is not posing an unknown security risk (as the actions itself is not
written by us).
Signed-off-by: Yong Tang <yong.tang.github@outlook.com>

6c26446b

01 Mar, 2022 1 commit

Add OSSF Security Scoreboard Scan (#5208) · 402c08fe

Yong Tang authored Feb 28, 2022

* Add OSSF Security Scoreboard Scan

This PR adds OSSF's Security Scoreboard Scan, to help tighten CoreDNS's security practice.

OSSF Scoreboard is recommended by GitHub. The result will show up in project's "Code Scanning Alerts" (together with existing CodeQL scan we already have).
Signed-off-by: Yong Tang <yong.tang.github@outlook.com>

402c08fe

28 Feb, 2022 4 commits

build(deps): bump github.com/Azure/azure-sdk-for-go (#5212) · ef654ba6

dependabot[bot] authored Feb 28, 2022

Bumps [github.com/Azure/azure-sdk-for-go](https://github.com/Azure/azure-sdk-for-go) from 61.6.0+incompatible to 62.0.0+incompatible.
- [Release notes](https://github.com/Azure/azure-sdk-for-go/releases)
- [Changelog](https://github.com/Azure/azure-sdk-for-go/blob/main/CHANGELOG.md)
- [Commits](https://github.com/Azure/azure-sdk-for-go/compare/v61.6.0...v62.0.0)

---
updated-dependencies:
- dependency-name: github.com/Azure/azure-sdk-for-go
  dependency-type: direct:production
  update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

ef654ba6

build(deps): bump github.com/aws/aws-sdk-go from 1.43.2 to 1.43.7 (#5211) · 6712764d

dependabot[bot] authored Feb 28, 2022

Bumps [github.com/aws/aws-sdk-go](https://github.com/aws/aws-sdk-go) from 1.43.2 to 1.43.7.
- [Release notes](https://github.com/aws/aws-sdk-go/releases)
- [Changelog](https://github.com/aws/aws-sdk-go/blob/main/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-go/compare/v1.43.2...v1.43.7)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go
  dependency-type: direct:production
  update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

6712764d

build(deps): bump google.golang.org/api from 0.69.0 to 0.70.0 (#5210) · be38f2ca

dependabot[bot] authored Feb 28, 2022

Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.69.0 to 0.70.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.69.0...v0.70.0)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

be38f2ca

build(deps): bump k8s.io/client-go from 0.23.3 to 0.23.4 (#5209) · 978c9246

dependabot[bot] authored Feb 28, 2022

Bumps [k8s.io/client-go](https://github.com/kubernetes/client-go) from 0.23.3 to 0.23.4.
- [Release notes](https://github.com/kubernetes/client-go/releases)
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](https://github.com/kubernetes/client-go/compare/v0.23.3...v0.23.4)

---
updated-dependencies:
- dependency-name: k8s.io/client-go
  dependency-type: direct:production
  update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

978c9246

26 Feb, 2022 1 commit
- briefly doc env vars and import substitution (#5207) · 5166d9dd
  Chris O'Haver authored Feb 25, 2022
```
Signed-off-by: Chris O'Haver <cohaver@infoblox.com>
```
  5166d9dd
22 Feb, 2022 5 commits

plugin/etcd+kubernetes: Persist truncated state to client if CNAME lookup... · 66dc74ca

Chris O'Haver authored Feb 22, 2022

plugin/etcd+kubernetes: Persist truncated state to client if CNAME lookup response is truncated (#4715)

Persist the TC bit to client response for truncated CNAME lookups.
Signed-off-by: Chris O'Haver <cohaver@infoblox.com>

66dc74ca

Avoid expose arch-specific docker image tags (#5201) · d3a118e1

Yong Tang authored Feb 22, 2022

This PR tries to address the issue in 5199
where there were confusion on which image tag to use.
Because the image-specific `coredns/coredns-{arch}:version` is not usable
for all arch other than arm64, confusion happens.

This PR, for all arch-specific docker images:
1. Use `coredns/coredns:{arch}-version` (not `coredns/coredns-{arch}:version`)
so that all images remain within the same docker repo (not multiple repos).
2. Push the arch-specific image `coredns/coredns:{arch}-version` to dockerhub.
3. Create manifest-specific `coredns/coredns:version` and `coredns/coredns:latest` from arch-specific images.
4. Push `coredns/coredns:version` and `coredns/coredns:latest` to dockerhub
5. Delete arch-specific image tags `coredns/coredns:{arch}-version` from dockerhub.

This will make arch-specific image tags invisible, but the `coredns/coredns:version` and `coredns/coredns:latest`
will work as expected.
Signed-off-by: Yong Tang <yong.tang.github@outlook.com>

d3a118e1

kubernetes: log server start delay and api connection failures (#5044) · 74d4e9bb
Chris O'Haver authored Feb 22, 2022
```
Signed-off-by: Chris O'Haver <cohaver@infoblox.com>
```
74d4e9bb
Replace deprecated NewDeltaFIFO with NewDeltaFIFOWithOptions (#5200) · b1d5d7c5
Yong Tang authored Feb 22, 2022
```
Replace deprecated  `cache.NewDeltaFIFO`
Signed-off-by: Yong Tang <yong.tang.github@outlook.com>
```
b1d5d7c5
auto remove trailing whitespaces · a2262052
coredns[bot] authored Feb 22, 2022
```
Signed-off-by: coredns[bot] <bot@bot.coredns.io>
```
a2262052

21 Feb, 2022 5 commits

build(deps): bump github.com/aws/aws-sdk-go from 1.42.52 to 1.43.2 (#5198) · 8502892b

dependabot[bot] authored Feb 21, 2022

Bumps [github.com/aws/aws-sdk-go](https://github.com/aws/aws-sdk-go) from 1.42.52 to 1.43.2.
- [Release notes](https://github.com/aws/aws-sdk-go/releases)
- [Changelog](https://github.com/aws/aws-sdk-go/blob/main/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-go/compare/v1.42.52...v1.43.2)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go
  dependency-type: direct:production
  update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

8502892b

build(deps): bump github.com/Azure/azure-sdk-for-go (#5195) · 49f88ba2

dependabot[bot] authored Feb 21, 2022

Bumps [github.com/Azure/azure-sdk-for-go](https://github.com/Azure/azure-sdk-for-go) from 61.5.0+incompatible to 61.6.0+incompatible.
- [Release notes](https://github.com/Azure/azure-sdk-for-go/releases)
- [Changelog](https://github.com/Azure/azure-sdk-for-go/blob/main/CHANGELOG.md)
- [Commits](https://github.com/Azure/azure-sdk-for-go/compare/v61.5.0...v61.6.0)

---
updated-dependencies:
- dependency-name: github.com/Azure/azure-sdk-for-go
  dependency-type: direct:production
  update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

49f88ba2

build(deps): bump k8s.io/api from 0.23.3 to 0.23.4 (#5194) · 9a5cb3f5

dependabot[bot] authored Feb 21, 2022

Bumps [k8s.io/api](https://github.com/kubernetes/api) from 0.23.3 to 0.23.4.
- [Release notes](https://github.com/kubernetes/api/releases)
- [Commits](https://github.com/kubernetes/api/compare/v0.23.3...v0.23.4)

---
updated-dependencies:
- dependency-name: k8s.io/api
  dependency-type: direct:production
  update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

9a5cb3f5

build(deps): bump google.golang.org/api from 0.68.0 to 0.69.0 (#5197) · d0449826

dependabot[bot] authored Feb 21, 2022

Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.68.0 to 0.69.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.68.0...v0.69.0)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

d0449826

build(deps): bump k8s.io/apimachinery from 0.23.3 to 0.23.4 (#5196) · 703ca846
dependabot[bot] authored Feb 21, 2022

703ca846

18 Feb, 2022 6 commits

Update to use the latest protobuf package to build pb (#5193) · 2f020dcb

Yong Tang authored Feb 17, 2022

* Update to use the latest protobuf package to build pb

The pb package was generated some time ago with old version
of https://github.com/golang/protobuf which was deprecated
and in favor of google.golang.org/protobuf (see
deprecation notice in https://pkg.go.dev/github.com/golang/protobuf)

This PR updates the generation of pb package with
v1.27.1 of google.golang.org/protobuf.
Signed-off-by: Yong Tang <yong.tang.github@outlook.com>

* Exclude pb from import test
Signed-off-by: Yong Tang <yong.tang.github@outlook.com>

2f020dcb

Harden tls on all places (#5184) · c0c72e58

Yong Tang authored Feb 17, 2022

PR 2938 hardens tls though there are other places that uses TLS
as well and setTLSDefaults are not invoked in other paths.

This PR hardens tls on all places.
Signed-off-by: Yong Tang <yong.tang.github@outlook.com>

c0c72e58

dont panic when from-zone cannot be normalized (#5170) · f8a02aaf
Chris O'Haver authored Feb 17, 2022
```
Signed-off-by: Chris O'Haver <cohaver@infoblox.com>
```
f8a02aaf

Add Reviewdog to suggestion gofmt and whitespace changes in pull request (#5155) · 5bb89473

Yong Tang authored Feb 17, 2022

use reviewdog to automatically suggest whitespace corrections in PRs
so that code will be clean before committing into master branch.
Signed-off-by: Yong Tang <yong.tang.github@outlook.com>

5bb89473

Add retry logic before download asset from github (#5181) · 35e20700

Yong Tang authored Feb 17, 2022

The docker release fails when released binaries are not available for download immediately after the release is created.
This PR adds retry logic (up to 10 min).
Signed-off-by: Yong Tang <yong.tang.github@outlook.com>

35e20700

plugin/file: add TXT RR test case (#5079) · 86a59022
xuweiwei authored Feb 18, 2022
```
Signed-off-by: xuweiwei <xuweiwei_yewu@cmss.chinamobile.com>
```
86a59022

17 Feb, 2022 1 commit
- Add metric counting DNS-over-HTTPS responses (#5130) · c121aaab
  Rudolf Schönecker authored Feb 17, 2022
```
Signed-off-by: Rudolf Schonecker <rudolf.schonecker@jamf.com>
```
  c121aaab
15 Feb, 2022 6 commits

plugin/secondary: Fix startup transfer failure wrong zone logged (#5085) · e5626a77
Chris O'Haver authored Feb 14, 2022
```
* avoid race
Signed-off-by: Chris O'Haver <cohaver@infoblox.com>
```
e5626a77
add zones label to cache metrics (#5124) · 80195c39
Elijah Andrews authored Feb 14, 2022
```
* add zones to cache metrics
Signed-off-by: Elijah Andrews <elijahcandrews@gmail.com>
```
80195c39

build(deps): bump google.golang.org/api from 0.67.0 to 0.68.0 (#5186) · d97dbbef

dependabot[bot] authored Feb 14, 2022

Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.67.0 to 0.68.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.67.0...v0.68.0)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

d97dbbef

build(deps): bump github.com/Azure/azure-sdk-for-go (#5187) · 749a38e1

dependabot[bot] authored Feb 14, 2022

Bumps [github.com/Azure/azure-sdk-for-go](https://github.com/Azure/azure-sdk-for-go) from 61.4.0+incompatible to 61.5.0+incompatible.
- [Release notes](https://github.com/Azure/azure-sdk-for-go/releases)
- [Changelog](https://github.com/Azure/azure-sdk-for-go/blob/main/CHANGELOG.md)
- [Commits](https://github.com/Azure/azure-sdk-for-go/compare/v61.4.0...v61.5.0)

---
updated-dependencies:
- dependency-name: github.com/Azure/azure-sdk-for-go
  dependency-type: direct:production
  update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

749a38e1

build(deps): bump github.com/aws/aws-sdk-go from 1.42.47 to 1.42.52 (#5188) · 717d1424

dependabot[bot] authored Feb 14, 2022

Bumps [github.com/aws/aws-sdk-go](https://github.com/aws/aws-sdk-go) from 1.42.47 to 1.42.52.
- [Release notes](https://github.com/aws/aws-sdk-go/releases)
- [Changelog](https://github.com/aws/aws-sdk-go/blob/main/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-go/compare/v1.42.47...v1.42.52)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go
  dependency-type: direct:production
  update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

717d1424

Fix security scans by cleaning up file path (#5185) · c6709d93

Yong Tang authored Feb 14, 2022

While performing security scans there were several
issue raised as G304 (CWE-22): Potential file inclusion via variable.
As some files path are taken from user input, it is possible the
filepath passed by user may have unintended effect if not properly formed.
This fix add Clean to remove the security warning and address some
potential issue.
Signed-off-by: Yong Tang <yong.tang.github@outlook.com>

c6709d93