all: sync with master

Author: EugeneOne1

CHANGELOG.md

@@ -9,18 +9,60 @@ The format is based on [*Keep a Changelog*](https://keepachangelog.com/en/1.0.0/
 <!--
 ## [v0.108.0] – TBA
 
-## [v0.107.71] - 2025-12-17 (APPROX.)
+## [v0.107.72] - 2025-12-22 (APPROX.)
 
-See also the [v0.107.71 GitHub milestone][ms-v0.107.71].
+See also the [v0.107.72 GitHub milestone][ms-v0.107.72].
 
-[ms-v0.107.71]: https://github.com/AdguardTeam/AdGuardHome/milestone/106?closed=1
+[ms-v0.107.72]: https://github.com/AdguardTeam/AdGuardHome/milestone/107?closed=1
 
 NOTE: Add new changes BELOW THIS COMMENT.
 -->
 <!--
 NOTE: Add new changes ABOVE THIS COMMENT.
 -->
 
+## [v0.107.71] - 2025-12-08
+
+See also the [v0.107.71 GitHub milestone][ms-v0.107.71].
+
+### Changed
+
+- Stale records in optimistic DNS cache now have an upper age limit controlled by `dns.cache_optimistic_max_age`.  The default value is 12 hours.
+
+- TTL for stale answers from optimistic DNS cache is now controlled by `dns.cache_optimistic_answer_ttl`.  The default value is 30 seconds.
+
+#### Configuration changes
+
+In this release, the schema version has changed from 31 to 32.
+
+- Added a new string fields `dns.cache_optimistic_answer_ttl` and `dns.cache_optimistic_max_age`.
+
+    ```yaml
+    # BEFORE:
+    'dns':
+      'cache_enabled': true
+      'cache_optimistic': true
+      # …
+
+    # AFTER:
+    'dns':
+      'cache_enabled': true
+      'cache_optimistic': true
+      'cache_optimistic_answer_ttl': '30s'
+      'cache_optimistic_max_age': '12h'
+      # …
+      ```
+
+    To roll back this change, set the `schema_version` back to `31`.
+
+## Fixed
+
+- Optimistic DNS cache not working ([#8148]).
+
+[#8148]: https://github.com/AdguardTeam/AdGuardHome/issues/8148
+
+[ms-v0.107.71]: https://github.com/AdguardTeam/AdGuardHome/milestone/106?closed=1
+
 ## [v0.107.70] - 2025-12-03
 
 See also the [v0.107.70 GitHub milestone][ms-v0.107.70].
@@ -36,6 +78,7 @@ See also the [v0.107.70 GitHub milestone][ms-v0.107.70].
 ### Changed
 
 - Stale records in optimistic DNS cache now have an upper age limit of 12 hours.
+
 - New blocked services UI.
 
 ### Fixed
@@ -60,6 +103,7 @@ See also the [v0.107.69 GitHub milestone][ms-v0.107.69].
 ### Fixed
 
 - DHCP settings could not be saved ([#8075]).
+
 - DNS Rewrite edit modal did not populate with the correct values ([#8072]).
 
 ### Removed
@@ -82,6 +126,7 @@ See also the [v0.107.68 GitHub milestone][ms-v0.107.68].
 ### Added
 
 - New DNS rewrite settings endpoints `GET /control/rewrite/settings` and `PUT /control/rewrite/settings/update` ([#1765]).  See `openapi/openapi.yaml` for details.
+
 - New fields `"groups"` and `"group_id"` added to the HTTP API (`GET /control/blocked_services/all`).  See `openapi/openapi.yaml` for the full description.
 
 ### Changed
@@ -93,6 +138,7 @@ See also the [v0.107.68 GitHub milestone][ms-v0.107.68].
 In this release, the schema version has changed from 30 to 31.
 
 - Added a new boolean field `filtering.rewrites_enabled` to globally enable/disable DNS rewrites.
+
 - Added a new boolean field `enabled` for each entry in `filtering.rewrites` to toggle individual rewrites.
 
     ```yaml
@@ -127,6 +173,7 @@ See also the [v0.107.67 GitHub milestone][ms-v0.107.67].
 ### Added
 
 - The *HaGeZi's DNS Rebind Protection* filter for protecting against DNS rebinding attacks ([#102]).
+
 - Support for configuring the suggested default HTTP port for the installation wizard via the `ADGUARD_HOME_DEFAULT_WEB_PORT` environment variable (useful for vendors).
 
 ### Changed
@@ -136,6 +183,7 @@ See also the [v0.107.67 GitHub milestone][ms-v0.107.67].
 ### Fixed
 
 - Excessive configuration file overwrites when visiting the Web UI and a non-empty `language` is set.
+
 - Lowered the severity of log messages for failed deletion of old filter files ([#7964]).
 
 [#102]:  https://github.com/AdguardTeam/AdGuardHome/issues/102
@@ -154,12 +202,15 @@ See also the [v0.107.66 GitHub milestone][ms-v0.107.66].
 ### Changed
 
 - Our snap package now uses the `core24` image as its base.
+
 - Outgoing HTTP requests now use the `User-Agent` header `AdGuardHome/v0.107.66` (where `v0.107.66` is the current version) instead of `Go-http-client/1.1` ([#7979]).
 
 ### Fixed
 
 - Authentication errors in the Web UI when AdGuard Home is behind a proxy that sets Basic Auth headers ([#7987]).
+
 - The HTTP API `GET /control/profile` endpoint failing when no users were configured ([#7985]).
+
 - Missing warning on the *Encryption Settings* page when using a certificate without an IP address.
 
 [#7979]: https://github.com/AdguardTeam/AdGuardHome/issues/7979
@@ -3371,11 +3422,12 @@ See also the [v0.104.2 GitHub milestone][ms-v0.104.2].
 [ms-v0.104.2]: https://github.com/AdguardTeam/AdGuardHome/milestone/28?closed=1
 
 <!--
-[Unreleased]: https://github.com/AdguardTeam/AdGuardHome/compare/v0.107.71...HEAD
-[v0.107.71]:  https://github.com/AdguardTeam/AdGuardHome/compare/v0.107.70...v0.107.71
+[Unreleased]: https://github.com/AdguardTeam/AdGuardHome/compare/v0.107.72...HEAD
+[v0.107.72]:  https://github.com/AdguardTeam/AdGuardHome/compare/v0.107.71...v0.107.72
 -->
 
-[Unreleased]: https://github.com/AdguardTeam/AdGuardHome/compare/v0.107.70...HEAD
+[Unreleased]: https://github.com/AdguardTeam/AdGuardHome/compare/v0.107.71...HEAD
+[v0.107.71]:  https://github.com/AdguardTeam/AdGuardHome/compare/v0.107.70...v0.107.71
 [v0.107.70]:  https://github.com/AdguardTeam/AdGuardHome/compare/v0.107.69...v0.107.70
 [v0.107.69]:  https://github.com/AdguardTeam/AdGuardHome/compare/v0.107.68...v0.107.69
 [v0.107.68]:  https://github.com/AdguardTeam/AdGuardHome/compare/v0.107.67...v0.107.68

client/src/__locales/de.json

@@ -664,7 +664,7 @@
     "cache_enabled_desc": "DNS-Antworten lokal speichern.",
     "cache_size": "Größe des Cache",
     "cache_size_validation": "Die Cachegröße muss größer als Null sein, wenn diese Option aktiviert ist.",
-    "cache_size_desc": "Größe des DNS-Caches (in Bytes)",
+    "cache_size_desc": "Größe des DNS-Caches (in Bytes).",
     "cache_ttl_min_override": "TTL-Minimalwert überschreiben",
     "cache_ttl_max_override": "TTL-Höchstwert überschreiben",
     "enter_cache_size": "Größe des Cache (Bytes) eingeben",

client/src/__locales/ko.json

@@ -664,7 +664,7 @@
     "cache_enabled_desc": "DNS 응답을 로컬에 저장합니다.",
     "cache_size": "캐시 크기",
     "cache_size_validation": "활성화된 경우 캐시 크기는 0보다 커야 합니다.",
-    "cache_size_desc": "DNS 캐시 크기 (바이트).",
+    "cache_size_desc": "DNS 캐시 크기 (바이트)",
     "cache_ttl_min_override": "최소 TTL (초) 무시",
     "cache_ttl_max_override": "최대 TTL (초) 무시",
     "enter_cache_size": "캐시 크기를 입력하세요",

client/src/__locales/uk.json

@@ -664,7 +664,7 @@
     "cache_enabled_desc": "Зберігати відповіді DNS локально.",
     "cache_size": "Розмір кешу",
     "cache_size_validation": "Розмір кешу має бути більшим за нуль, коли цю функцію увімкнуто.",
-    "cache_size_desc": "Розмір кешу DNS (в байтах).",
+    "cache_size_desc": "Розмір кешу DNS (у байтах).",
     "cache_ttl_min_override": "Змінити мінімальний TTL",
     "cache_ttl_max_override": "Змінити максимальний TTL",
     "enter_cache_size": "Введіть розмір кешу (байт)",

client/src/__locales/zh-cn.json

@@ -664,7 +664,7 @@
     "cache_enabled_desc": "在本地存储 DNS 响应。",
     "cache_size": "缓存大小",
     "cache_size_validation": "启用时，缓存大小必须大于 0。",
-    "cache_size_desc": "DNS 缓存大小（单位：字节）。",
+    "cache_size_desc": "DNS 缓存大小（单位：字节）",
     "cache_ttl_min_override": "覆盖最小 TTL 值",
     "cache_ttl_max_override": "覆盖最大 TTL 值",
     "enter_cache_size": "输入缓存大小（字节）",

client/src/__locales/zh-tw.json

@@ -664,7 +664,7 @@
     "cache_enabled_desc": "在本機儲存 DNS 回應。",
     "cache_size": "快取大小",
     "cache_size_validation": "啟用時，快取大小必須大於 0。",
-    "cache_size_desc": "DNS 快取大小（以位元組）。",
+    "cache_size_desc": "DNS 快取大小（以位元組）",
     "cache_ttl_min_override": "覆寫最小的存活時間（TTL）",
     "cache_ttl_max_override": "覆寫最大的存活時間（TTL）",
     "enter_cache_size": "輸入快取大小（位元組）",

go.mod

@@ -3,8 +3,8 @@ module github.com/AdguardTeam/AdGuardHome
 go 1.25.5
 
 require (
-	github.com/AdguardTeam/dnsproxy v0.78.1
-	github.com/AdguardTeam/golibs v0.35.2
+	github.com/AdguardTeam/dnsproxy v0.78.2
+	github.com/AdguardTeam/golibs v0.35.3
 	github.com/AdguardTeam/urlfilter v0.22.1
 	github.com/NYTimes/gziphandler v1.1.1
 	github.com/ameshkov/dnscrypt/v2 v2.4.0
@@ -89,13 +89,13 @@ require (
 	golang.org/x/exp/typeparams v0.0.0-20251125195548-87e1e737ad39 // indirect
 	golang.org/x/mod v0.30.0 // indirect
 	golang.org/x/sync v0.18.0 // indirect
-	golang.org/x/telemetry v0.0.0-20251128220624-abf20d0e57ec // indirect
+	golang.org/x/telemetry v0.0.0-20251203150158-8fff8a5912fc // indirect
 	golang.org/x/term v0.37.0 // indirect
 	golang.org/x/text v0.31.0 // indirect
 	golang.org/x/tools v0.39.0 // indirect
 	golang.org/x/vuln v1.1.4 // indirect
 	gonum.org/v1/gonum v0.16.0 // indirect
-	google.golang.org/genai v1.36.0 // indirect
+	google.golang.org/genai v1.37.0 // indirect
 	google.golang.org/genproto/googleapis/rpc v0.0.0-20251202230838-ff82c1b0f217 // indirect
 	google.golang.org/grpc v1.77.0 // indirect
 	google.golang.org/protobuf v1.36.10 // indirect

go.sum

@@ -4,10 +4,10 @@ cloud.google.com/go/auth v0.17.0 h1:74yCm7hCj2rUyyAocqnFzsAYXgJhrG26XCFimrc/Kz4=
 cloud.google.com/go/auth v0.17.0/go.mod h1:6wv/t5/6rOPAX4fJiRjKkJCvswLwdet7G8+UGXt7nCQ=
 cloud.google.com/go/compute/metadata v0.9.0 h1:pDUj4QMoPejqq20dK0Pg2N4yG9zIkYGdBtwLoEkH9Zs=
 cloud.google.com/go/compute/metadata v0.9.0/go.mod h1:E0bWwX5wTnLPedCKqk3pJmVgCBSM6qQI1yTBdEb3C10=
-github.com/AdguardTeam/dnsproxy v0.78.1 h1:+/EZJI5X5qeks+s/Y4kQIMq5mBKaSW/jcYIsi5guqj8=
-github.com/AdguardTeam/dnsproxy v0.78.1/go.mod h1:uoOWRv2/FkZGlstG0r/+zwc1C3ypMgzeaeOCv7MTWWI=
-github.com/AdguardTeam/golibs v0.35.2 h1:GVlx/CiCz5ZXQmyvFrE3JyeGsgubE8f4rJvRshYJVVs=
-github.com/AdguardTeam/golibs v0.35.2/go.mod h1:p/l6tG7QCv+Hi5yVpv1oZInoatRGOWoyD1m+Ume+ZNY=
+github.com/AdguardTeam/dnsproxy v0.78.2 h1:g+ba4vh72hAv9zIE+OPSEnu77utSKxIF6u2jNhYAR7g=
+github.com/AdguardTeam/dnsproxy v0.78.2/go.mod h1:gwr+7Dc0e7QddQLC9JLGjL5NSKcqw0ESsNMRI5Q67Ps=
+github.com/AdguardTeam/golibs v0.35.3 h1:DI0ffHyL3tFZ2UBEji3Aah7IvFwM5nY5yZoGvs1bnPY=
+github.com/AdguardTeam/golibs v0.35.3/go.mod h1:9Y0yqUpwDNyHxCv4AaI42x5+qxYc7k5DWAfxtFOTn8o=
 github.com/AdguardTeam/urlfilter v0.22.1 h1:nC2x0MSNwmTsXMTPfs1Gv6GZXKmK7prlzgjCdnE4fR8=
 github.com/AdguardTeam/urlfilter v0.22.1/go.mod h1:+wUx7GApNWvFPALjNd5fTLix4PFvQF5Gprx6JDYwxfE=
 github.com/BurntSushi/toml v1.5.0 h1:W5quZX/G/csjUnuI8SUYlsHs9M38FC7znL0lIO+DvMg=
@@ -229,8 +229,8 @@ golang.org/x/sys v0.0.0-20210927094055-39ccf1dd6fa6/go.mod h1:oPkhp1MJrh7nUepCBc
 golang.org/x/sys v0.0.0-20220209214540-3681064d5158/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.38.0 h1:3yZWxaJjBmCWXqhN1qh02AkOnCQ1poK6oF+a7xWL6Gc=
 golang.org/x/sys v0.38.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
-golang.org/x/telemetry v0.0.0-20251128220624-abf20d0e57ec h1:dRVkWZl6bUOp+oxnOe4BuyhWSIPmt29N4ooHarm7Ic8=
-golang.org/x/telemetry v0.0.0-20251128220624-abf20d0e57ec/go.mod h1:hKdjCMrbv9skySur+Nek8Hd0uJ0GuxJIoIX2payrIdQ=
+golang.org/x/telemetry v0.0.0-20251203150158-8fff8a5912fc h1:bH6xUXay0AIFMElXG2rQ4uiE+7ncwtiOdPfYK1NK2XA=
+golang.org/x/telemetry v0.0.0-20251203150158-8fff8a5912fc/go.mod h1:hKdjCMrbv9skySur+Nek8Hd0uJ0GuxJIoIX2payrIdQ=
 golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
 golang.org/x/term v0.37.0 h1:8EGAD0qCmHYZg6J17DvsMy9/wJ7/D/4pV/wfnld5lTU=
 golang.org/x/term v0.37.0/go.mod h1:5pB4lxRNYYVZuTLmy8oR2BH8dflOR+IbTYFD8fi3254=
@@ -254,8 +254,8 @@ golang.org/x/xerrors v0.0.0-20191011141410-1b5146add898/go.mod h1:I/5z698sn9Ka8T
 golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
 gonum.org/v1/gonum v0.16.0 h1:5+ul4Swaf3ESvrOnidPp4GZbzf0mxVQpDCYUQE7OJfk=
 gonum.org/v1/gonum v0.16.0/go.mod h1:fef3am4MQ93R2HHpKnLk4/Tbh/s0+wqD5nfa6Pnwy4E=
-google.golang.org/genai v1.36.0 h1:sJCIjqTAmwrtAIaemtTiKkg2TO1RxnYEusTmEQ3nGxM=
-google.golang.org/genai v1.36.0/go.mod h1:A3kkl0nyBjyFlNjgxIwKq70julKbIxpSxqKO5gw/gmk=
+google.golang.org/genai v1.37.0 h1:dgp71k1wQ+/+APdZrN3LFgAGnVnr5IdTF1Oj0Dg+BQc=
+google.golang.org/genai v1.37.0/go.mod h1:A3kkl0nyBjyFlNjgxIwKq70julKbIxpSxqKO5gw/gmk=
 google.golang.org/genproto/googleapis/rpc v0.0.0-20251202230838-ff82c1b0f217 h1:gRkg/vSppuSQoDjxyiGfN4Upv/h/DQmIR10ZU8dh4Ww=
 google.golang.org/genproto/googleapis/rpc v0.0.0-20251202230838-ff82c1b0f217/go.mod h1:7i2o+ce6H/6BluujYR+kqX3GKH+dChPTQU19wjRPiGk=
 google.golang.org/grpc v1.77.0 h1:wVVY6/8cGA6vvffn+wWK5ToddbgdU3d8MNENr4evgXM=

internal/configmigrate/configmigrate.go

@@ -2,4 +2,4 @@
 package configmigrate
 
 // LastSchemaVersion is the most recent schema version.
-const LastSchemaVersion uint = 31
+const LastSchemaVersion uint = 32

internal/configmigrate/migrator.go

@@ -142,6 +142,7 @@ func (m *Migrator) upgradeConfigSchema(
 		28: m.migrateTo29,
 		29: m.migrateTo30,
 		30: m.migrateTo31,
+		31: m.migrateTo32,
 	}
 
 	for i, migrate := range upgrades[current:target] {