Bumps [github.com/aws/aws-sdk-go](https://github.com/aws/aws-sdk-go) from 1.26.2 to 1.26.7.
- [Release notes](https://github.com/aws/aws-sdk-go/releases)
- [Changelog](https://github.com/aws/aws-sdk-go/blob/master/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-go/compare/v1.26.2...v1.26.7)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Bumps [google.golang.org/api](https://github.com/google/google-api-go-client) from 0.14.0 to 0.15.0.
- [Release notes](https://github.com/google/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/master/CHANGES.md)
- [Commits](https://github.com/google/google-api-go-client/compare/v0.14.0...v0.15.0)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Bumps [github.com/miekg/dns](https://github.com/miekg/dns) from 1.1.25 to 1.1.26.
- [Release notes](https://github.com/miekg/dns/releases)
- [Changelog](https://github.com/miekg/dns/blob/master/Makefile.release)
- [Commits](https://github.com/miekg/dns/compare/v1.1.25...v1.1.26)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Bumps [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) from 1.2.1 to 1.3.0.
- [Release notes](https://github.com/prometheus/client_golang/releases)
- [Changelog](https://github.com/prometheus/client_golang/blob/master/CHANGELOG.md)
- [Commits](https://github.com/prometheus/client_golang/compare/v1.2.1...v1.3.0)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Signed-off-by: ykhr53 <ykhr53@yokohei.com>

made these to the coredns.io repo as well, but this is canonical.
Signed-off-by: Miek Gieben <miek@miek.nl>

The Kubernetes DNS specification schema version was
updated to 1.1.0 in order to support IPv6
Signed-off-by: Antonio Ojea <antonio.ojea.garcia@gmail.com>

Signed-off-by: zouyee <zounengren@cmss.chinamobile.com>

Bumps [github.com/Azure/go-autorest/autorest/azure/auth](https://github.com/Azure/go-autorest) from 0.4.1 to 0.4.2.
- [Release notes](https://github.com/Azure/go-autorest/releases)
- [Changelog](https://github.com/Azure/go-autorest/blob/master/CHANGELOG.md)
- [Commits](https://github.com/Azure/go-autorest/compare/autorest/azure/auth/v0.4.1...autorest/azure/auth/v0.4.2)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Bumps [github.com/aws/aws-sdk-go](https://github.com/aws/aws-sdk-go) from 1.25.48 to 1.26.2.
- [Release notes](https://github.com/aws/aws-sdk-go/releases)
- [Changelog](https://github.com/aws/aws-sdk-go/blob/master/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-go/compare/v1.25.48...v1.26.2)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Signed-off-by: zouyee <zounengren@cmss.chinamobile.com>

Automatically submitted.

Loose the colon from the commands to release a new coredns version.
Signed-off-by: Miek Gieben <miek@miek.nl>

Signed-off-by: ykhr53 <yukihira.lab@gmail.com>

* Add release note for v1.6.6
Signed-off-by: Yong Tang <yong.tang.github@outlook.com>

* Update release note to cover review comments
Signed-off-by: Yong Tang <yong.tang.github@outlook.com>

Signed-off-by: Yong Tang <yong.tang.github@outlook.com>

Signed-off-by: Yong Tang <yong.tang.github@outlook.com>

For release tracking 3519
Signed-off-by: Yong Tang <yong.tang.github@outlook.com>

Bumps [github.com/Azure/go-autorest/autorest](https://github.com/Azure/go-autorest) from 0.9.2 to 0.9.3.
- [Release notes](https://github.com/Azure/go-autorest/releases)
- [Changelog](https://github.com/Azure/go-autorest/blob/master/CHANGELOG.md)
- [Commits](https://github.com/Azure/go-autorest/compare/autorest/v0.9.2...autorest/v0.9.3)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Bumps [github.com/Azure/go-autorest/autorest/azure/auth](https://github.com/Azure/go-autorest) from 0.4.0 to 0.4.1.
- [Release notes](https://github.com/Azure/go-autorest/releases)
- [Changelog](https://github.com/Azure/go-autorest/blob/master/CHANGELOG.md)
- [Commits](https://github.com/Azure/go-autorest/compare/tracing/v0.4.0...autorest/azure/auth/v0.4.1)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Bumps [github.com/aws/aws-sdk-go](https://github.com/aws/aws-sdk-go) from 1.25.43 to 1.25.48.
- [Release notes](https://github.com/aws/aws-sdk-go/releases)
- [Changelog](https://github.com/aws/aws-sdk-go/blob/master/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-go/compare/v1.25.43...v1.25.48)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

This PR updates go.tidy.yml, and use pseudo name
`coredns-auto-go-mod-tidy[bot]`, so that the commit
is not associated with real user. Otherwise
the commit history could be confusing.

This is similar to what `dependabot[bot]` is doing
for commits generated by bots.
Signed-off-by: Yong Tang <yong.tang.github@outlook.com>

Signed-off-by: Yong Tang <yong.tang.github@outlook.com>

Setup GitHub Workflow for auto `go tidy`, when
- 'go.mod'
- 'go.sum'
- '.github/workflows/go.tidy.yml'
has been touched.
Signed-off-by: Yong Tang <yong.tang.github@outlook.com>

This PR removes trailing whitespace as otherwise `make check` fails

This PR fixes 3513
Signed-off-by: Yong Tang <yong.tang.github@outlook.com>

This PR updates GitHub template for `CODE-OF-CONDUCT.md => `.github/CODE_OF_CONDUCT.md`,
to take advantage of GitHub feature in:

https://help.github.com/en/github/building-a-strong-community/adding-a-code-of-conduct-to-your-project

This PR also moves `SECURITY.md` to `.github/SECURITY.md` and alias it for consistency.
Signed-off-by: Yong Tang <yong.tang.github@outlook.com>

An ISSUE_TEMPLATE directory was added, meaning the ISSUE_TEMPLATE.md is
now obsolete. Remove stale.yml because not used. Symlink CONTRIBUTING.md
the other way around to get GitHub recognize it.
Signed-off-by: Miek Gieben <miek@miek.nl>

This takes over #3476 because that is a good change but lacks the DCO
and the author seems unresponsive.

Reformat the file a bit more while we're at it.

Closes: #3476
Signed-off-by: Miek Gieben <miek@miek.nl>

Don't sign data we are not authoritative for. This adds an AuthWalk
which skips names we should not authoritative for. Adds a few tests to
check this is the case. Generates zones have been compared to
dnssec-signzone.

A number of changes have been made:

* don't add DS records to the apex
* NSEC TTL is the SOA's minttl value (copying bind9)
* Various cleanups
* signer struct was cleaned up: doesn't need ttl, nor expiration or
  inception.
* plugin/sign: remove apex stuff from names()
  This is never used because we will always have other types in the
  apex, because we *ADD* them ourselves, before we sign (DNSKEY, CDS and
  CDNSKEY).
Signed-off-by: Miek Gieben <miek@miek.nl>
Co-Authored-By: Chris O'Haver <cohaver@infoblox.com>