https://help.github.com/en/articles/adding-a-security-policy-to-your-repository
https://help.github.com/en/articles/about-maintainer-security-advisoriesSigned-off-by: Chris Aniszczyk <caniszczyk@gmail.com>

Signed-off-by: hwdef <hwdef97@gmail.com>

* Fuzz: fix forward build
Signed-off-by: Miek Gieben <miek@miek.nl>

* Flag not released yet, wget quiet
Signed-off-by: Miek Gieben <miek@miek.nl>

Bumps [github.com/coreos/etcd](https://github.com/coreos/etcd) from 3.3.13+incompatible to 3.3.15+incompatible.
- [Release notes](https://github.com/coreos/etcd/releases)
- [Changelog](https://github.com/etcd-io/etcd/blob/master/CHANGELOG-3.4.md)
- [Commits](https://github.com/coreos/etcd/compare/v3.3.13...v3.3.15)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Bumps [github.com/aws/aws-sdk-go](https://github.com/aws/aws-sdk-go) from 1.23.3 to 1.23.8.
- [Release notes](https://github.com/aws/aws-sdk-go/releases)
- [Changelog](https://github.com/aws/aws-sdk-go/blob/master/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-go/compare/v1.23.3...v1.23.8)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

This reloader didn't close the openened file handle. Add a close. Can't
use `defer` because this is in a endless loop.
Signed-off-by: Miek Gieben <miek@miek.nl>

Bumps [google.golang.org/api](https://github.com/google/google-api-go-client) from 0.8.0 to 0.9.0.
- [Release notes](https://github.com/google/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/master/CHANGES.md)
- [Commits](https://github.com/google/google-api-go-client/compare/v0.8.0...v0.9.0)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Upgrade to new version and add if-not-exists to the cmdline
Signed-off-by: Miek Gieben <miek@miek.nl>

* plugin/file: respond correctly to IXFR message

Respond with a sing SOA record to an IXFR request if the SOA serials
match.

The added test fails on the current code with:

~~~
=== RUN   TestIxfrResponse
--- FAIL: TestIxfrResponse (0.00s)
    secondary_test.go:122: Expected answer section with single RR
FAIL
exit status 1
~~~

And obviously passes with the new code. This should cut down on the
weird number of zone transfers that I was seeing. At some point IXFR
support might be cool.

Fixes: #3176
Signed-off-by: Miek Gieben <miek@miek.nl>

* reuse code
Signed-off-by: Miek Gieben <miek@miek.nl>

* Sligtht tweaks
Signed-off-by: Miek Gieben <miek@miek.nl>

This can't be used in its current form; revert the entire PR.

Revert "fuzzing: allow setup function to be called (#3175)"

This reverts commit 62451fd3.

* plugin/forward: add fuzzing

Add fuzz.go for forward
Signed-off-by: Miek Gieben <miek@miek.nl>

* Make it compile
Signed-off-by: Miek Gieben <miek@miek.nl>

* fuzz: use gofuzz build tag instead of fuzz

Since go-fuzz does not support Go modules yet, vendor dependencies.
Signed-off-by: Muhammad Falak R Wani <falakreyaz@gmail.com>

* fuzz: avoid vendoring code for go-fuzz
Signed-off-by: Muhammad Falak R Wani <falakreyaz@gmail.com>

TCPServer was only used in secondary_test.go and even there it wasn't
needed. Remove the file.
Signed-off-by: Miek Gieben <miek@miek.nl>

Went over the list at https://goreportcard.com/report/github.com/coredns/coredns
and removed/fix some code to make it slightly happier.
Signed-off-by: Miek Gieben <miek@miek.nl>

This allows to fuzzing of more interesting targets that require setup.
Signed-off-by: Miek Gieben <miek@miek.nl>

* fix external ns records

* use k8s service name for ns record

* update test, add func comment

* expand nsAddrs() test cases

* support local ipv6 ip

* use less confusing pod ip in test

Signed-off-by: Sakura <longfei.shang@daocloud.io>

Signed-off-by: Sakura <longfei.shang@daocloud.io>

Automatically submitted.

Signed-off-by: Guangming Wang <guangming.wang@daocloud.io>

* spelling fixes

* its/it's

Signed-off-by: Sakura <longfei.shang@daocloud.io>

This reverts commit f888c5f7.

```
replace github.com/miekg/dns v1.1.3 => github.com/miekg/dns v1.1.16
```

so that we only end up with one version of github.com/miekg/dns
(caddy still use 1.1.3)
Signed-off-by: Yong Tang <yong.tang.github@outlook.com>

Bumps [github.com/miekg/dns](https://github.com/miekg/dns) from 1.1.15 to 1.1.16.
- [Release notes](https://github.com/miekg/dns/releases)
- [Changelog](https://github.com/miekg/dns/blob/master/Makefile.release)
- [Commits](https://github.com/miekg/dns/compare/v1.1.15...v1.1.16)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Bumps [github.com/aws/aws-sdk-go](https://github.com/aws/aws-sdk-go) from 1.22.3 to 1.23.3.
- [Release notes](https://github.com/aws/aws-sdk-go/releases)
- [Changelog](https://github.com/aws/aws-sdk-go/blob/master/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-go/compare/v1.22.3...v1.23.3)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Bumps [github.com/Azure/go-autorest/autorest/azure/auth](https://github.com/Azure/go-autorest) from 0.1.0 to 0.3.0.
- [Release notes](https://github.com/Azure/go-autorest/releases)
- [Changelog](https://github.com/Azure/go-autorest/blob/master/CHANGELOG.md)
- [Commits](https://github.com/Azure/go-autorest/compare/logger/v0.1.0...tracing/v0.3.0)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.22.0 to 1.23.0.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.22.0...v1.23.0)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Bumps [google.golang.org/api](https://github.com/google/google-api-go-client) from 0.7.0 to 0.8.0.
- [Release notes](https://github.com/google/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/master/CHANGES.md)
- [Commits](https://github.com/google/google-api-go-client/compare/v0.7.0...v0.8.0)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Bumps [github.com/Azure/go-autorest/autorest](https://github.com/Azure/go-autorest) from 0.8.0 to 0.9.0.
- [Release notes](https://github.com/Azure/go-autorest/releases)
- [Changelog](https://github.com/Azure/go-autorest/blob/master/CHANGELOG.md)
- [Commits](https://github.com/Azure/go-autorest/compare/autorest/v0.8.0...autorest/v0.9.0)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>

Bumps [github.com/caddyserver/caddy](https://github.com/caddyserver/caddy) from 1.0.1 to 1.0.3.
- [Release notes](https://github.com/caddyserver/caddy/releases)
- [Commits](https://github.com/caddyserver/caddy/compare/v1.0.1...v1.0.3)
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>