10.2.0

CHANGES:

• dns: add support for extended DNS error (RFC 8914) (#374 @hannesm)
• dns-resolver: instead of querying a single (ip, query), query up to three
  (#375 @reynir @hannesm)
• dns-cache: fix metrics (#377 #379 @hannesm @reynir)
• dns-cache: support RFC 8020, if there's a NXDomain, nothing is underneath
  (#390 @hannesm)
• dns-trie: canonicalize domain name before insertion, reducing allocations
  (#388 @reynir)
• dns-server: make number of tries in cache (for IXFR) configurable
  (#387 @reynir)
• dns-resolver: add metrics (#376 #378 @hannesm @reynir)
• dns-resolver: allow update to the primary, and the TLS state (#383 @reynir)
• dns-resolver: heuristics to detect blocked domains (#380 @reynir)
• dns-resolver: report extended DNS error when blocking
  (#385 #384 @reynir @hannesm)
• dns-resolver: implement opportunistic TLS (#389 @hannesm)
• dns-resolver: support query name minimisation (RFC 9156) (#391 @hannesm)
• dns-resolver: features via flags (#392 @hannesm)

10.1.0

CHANGES:

• dns-mirage-resolver: adapt API to prepare for DoH (#373 @dinosaure @PizieDust
  @reynir @hannesm)
• resolver: support DNSSEC
  • #372 @reynir @hannesm
  • #361 @reynir @hannesm
• dns: support SVCB and HTTPS resource records (RFC 9460, #359 @nickbetteridge)
• dns-cli: avoid deprecated cmdliner values (#367 @hannesm, fixes #366),
  add app/resolver (#366)
• resolver: add further tests, fix the loop of a cyclic NS (#368 @hannesm)

10.0.0

CHANGES:

• dns-certify: use a pair instead of two separate arguments for the dns-key
  (#357 @hannesm)
• add KSK 2024 (#358 @hannesm)
• update to mirage-crypto 1.2.0 API changes (#362 @hannesm)
• use dune variants, avoid functors (#363 @hannesm)

9.1.0

CHANGES:

• Dns.Dnskey: provide to_string and name_key_to_string (@hannesm, @dinosaure,
  #356 - fixes #355)
• BREAKING: Dns.Dnskey remove pp_name_key (unused, irritating, #356)
• BREAKING Dns_certify_mirage.retrieve_certificate use separate dns_key_name
  and dns_key arguments, avoid string decoding in that function (#356)

9.0.1

CHANGES:

• dns-client-miou: use String.get_uint16_be instead of String.get_int16_be
  (#354 @dinosaure)

9.0.0

CHANGES:

• Remove Cstruct.t and use string/bytes (@hannesm, @dinosaure, @palainp, #351)
• Add a Miou implementation of ocaml-dns (@dinosaure, @hannesm, #352)

8.0.0

CHANGES:

• dns-client (lwt, mirage): depend on happy-eyeballs-{lwt,mirage} instead of
  duplicating the code. This requires happy-eyeballs 1.1.0, and now the same
  Happy_eyeballs_{lwt,mirage}.t is used for DNS (connecting to the nameserver)
  and for the application (connecting to a remote host)
  (@dinosaure @hannesm #346)
• server: improve API documentation (@hannesm
  1a80bd4
  000ae02)
• server: add a packet_callback to handle_packet and handle_buf
  (@RyanGibb #349)
• server: expose update_data (@RyanGibb #350)
• resolver: b root name server IP change (@hannesm #348)
• secondary server [mirage]: avoid infinite loop in connect (avoids SYN floods)
  (@hannesm @reynir #347)
• resolver, dns_zone: use consistently Log instead of Logs (@palainp #342)

7.0.3

CHANGES:

• dns-client-lwt, dns-client-mirage: adapt to happy-eyeballs 0.6 changes,
  also avoid unnecessary recursion (#340 @hannesm, @reynir)

7.0.2

CHANGES:

• dns-server: for secondary servers use the right zone transfers and keys, fixed
  in #339 by @hannesm
• dns: add support for null record (arbitrary binary data) (#338 @RyanGibb)

7.0.1

CHANGES:

• dns-server.zone: fix parsing of zone files that contain tokens such as
  N S E W -<number> <number>m DS CAA TYPE<number>.
  There was an inconsistency in the Dns_zone_parser.keyword_or_number rule.
  Test cases have been added, a comment has been added to the
  Dns_zone_lexer.kw_or_cs function. Discovered while updating the primary NS
  with an entry of "e.ns", fixed in #336 @hannesm
  Broken since the early days of this development