Changelog

Features

• 7dd039c: feat(resolver): add blocky_client_response_total metric (#2222) (@jvandenbroek)
• 769d908: feat(resolver): add refused block type (#2239) (@ChrisJr404)
• 45a242f: feat: add MIPS64 architecture builds (#2253) (@0xERR0R)

Bug fixes

• 4cf62ce: fix(cmd): healthcheck follows ports.dns from the config (#2221) (@maximilize)
• a42d656: fix(dnssec): don't return DNSSEC records to clients with the DO bit clear (#2203) (@kevinpark1217)
• a0cee0a: fix(querylog): exclude sqlite on Solaris and illumos (#2242) (@drscream)
• 802869a: fix(resolver): Return SOA record with custom DNS NOERROR response (#2244) (@bb4242)
• 190d512: fix(resolver): count down cached authority and additional TTLs (#2197) (@maximilize)
• 2e5d478: fix(resolver): reply to NOTFQDN queries with a well-formed NXDOMAIN (#2250) (@0xERR0R)
• dcdd952: fix(resolver): restore fallbackUpstream for rewritten queries (#2223) (@maximilize)
• c46ed64: fix(resolver): retry DoH queries that fail on a stale pooled connection (#2251) (@0xERR0R)
• 344de86: fix(resolver): scope allowlist-only mode to the whole client (#2249) (@0xERR0R)
• e2b40db: fix(resolver): send the original name to the next resolver for rewritten queries (#2232) (@0xERR0R)
• ff2aae4: fix(server): always answer an EDNS0 query with an OPT record (#2240) (@jackboykin)
• db8d889: fix(server): compress responses larger than 512 bytes (#2213) (@0xERR0R)
• 78d5367: fix: don't pass EDNS0 DNS Cookies through (#2252) (@0xERR0R)

Build and dependencies

• 5e7e844: build(deps): bump actions/setup-python from 6 to 7 (#2182) (@dependabot[bot])
• 29d187e: build(deps): bump actions/stale from 10 to 11 (#2196) (@dependabot[bot])
• 938b839: build(deps): bump docker/login-action from 4 to 4.5.2 (#2199) (@dependabot[bot])
• 554a41e: build(deps): bump docker/login-action from 4.5.2 to 4.6.0 (#2206) (@dependabot[bot])
• 04dd5e2: build(deps): bump github.com/go-chi/chi/v5 from 5.3.1 to 5.3.2 (#2234) (@dependabot[bot])
• 870b30e: build(deps): bump github.com/miekg/dns from 1.1.72 to 1.1.73 (#2235) (@dependabot[bot])
• a9870d6: build(deps): bump github.com/moby/go-archive from 0.2.0 to 0.3.0 (#2229) (@dependabot[bot])
• cd984d5: build(deps): bump github.com/oapi-codegen/runtime from 1.6.0 to 1.7.0 (#2230) (@dependabot[bot])
• 54bf28f: build(deps): bump github.com/onsi/ginkgo/v2 from 2.32.0 to 2.32.1 (#2220) (@dependabot[bot])
• d3b0f1c: build(deps): bump github.com/onsi/gomega from 1.42.1 to 1.43.0 (#2246) (@dependabot[bot])
• e33ab87: build(deps): bump github.com/quic-go/quic-go from 0.61.0 to 0.62.0 (#2248) (@dependabot[bot])
• 253b912: build(deps): bump github.com/santhosh-tekuri/jsonschema/v6 from 6.0.2 to 6.0.3 (#2210) (@dependabot[bot])
• 4a3c190: build(deps): bump github.com/sirupsen/logrus from 1.10.0 to 1.10.2 (#2245) (@dependabot[bot])
• c5eb533: build(deps): bump github.com/sirupsen/logrus from 1.9.4 to 1.10.0 (#2225) (@dependabot[bot])
• 027badd: build(deps): bump github.com/stretchr/testify from 1.11.1 to 1.12.0 (#2227) (@dependabot[bot])
• 6eb8f46: build(deps): bump github.com/stretchr/testify from 1.12.0 to 1.12.1 (#2231) (@dependabot[bot])
• 137b999: build(deps): bump github.com/testcontainers/testcontainers-go/modules/mariadb from 0.43.0 to 0.44.0 (#2216) (@dependabot[bot])
• b8e545a: build(deps): bump github.com/testcontainers/testcontainers-go/modules/postgres from 0.43.0 to 0.44.0 (#2217) (@dependabot[bot])
• c4d22fa: build(deps): bump github.com/testcontainers/testcontainers-go/modules/redis from 0.43.0 to 0.44.0 (#2214) (@dependabot[bot])
• 5e1a27b: build(deps): bump github/codeql-action from 4 to 4.37.3 (#2200) (@dependabot[bot])
• cce71d8: build(deps): bump github/codeql-action from 4.37.3 to 4.37.4 (#2205) (@dependabot[bot])
• b27f887: build(deps): bump github/codeql-action from 4.37.4 to 4.37.5 (#2209) (@dependabot[bot])
• f7ec303: build(deps): bump github/codeql-action from 4.37.5 to 4.37.6 (#2211) (@dependabot[bot])
• 74f10f6: build(deps): bump github/codeql-action from 4.37.6 to 4.37.7 (#2226) (@dependabot[bot])
• f896001: build(deps): bump github/codeql-action from 4.37.7 to 4.37.9 (#2247) (@dependabot[bot])
• 631a55d: build(deps): bump golang.org/x/net from 0.57.0 to 0.58.0 (#2224) (@dependabot[bot])
• 685d92b: build(deps): bump google.golang.org/protobuf from 1.36.11 to 1.36.12 (#2219) (@dependabot[bot])
• 1b3caf3: build(deps): bump gorm.io/driver/postgres from 1.6.0 to 1.6.1 (#2204) (@dependabot[bot])
• 50368a9: build(deps): bump gorm.io/driver/postgres from 1.6.1 to 1.6.2 (#2208) (@dependabot[bot])

Misc

• 77b0fe7: perf(resolver): avoid per-query label map allocations in metrics resolver (#2233) (@0xERR0R)

❤️ Support Blocky

Blocky is free and open source, developed in my spare time — no telemetry, no ads, no hidden
filtering. If it's useful to you, please consider supporting its continued development:

GitHub Sponsors ·
thanks.dev ·
Liberapay ·
Ko-fi ·
PayPal

Thank you to everyone supporting Blocky! 🙏

Changelog

Bug fixes

• 91a8f44: fix(bootstrap): fall back to other resolved addresses when a dial fails (#2190) (@maximilize)
• 0a20671: fix(cache): set DO bit on prefetch reloads to keep DNSSEC-signed entry valid (#2158) (@logingood)
• d55cd4f: fix(docker): pre-create writable /app/cache and /logs owned by UID 100 (#2172) (@0xERR0R)
• dc958ef: fix(lists): skip a lone "/" blocklist line instead of panicking (#2156) (@maximilize)
• 1d450af: fix(resolver): match custom DNS PTR queries case insensitively (#2191) (@maximilize)
• 472bac9: fix(stats): attribute filtered and non-FQDN queries to the client name (#2167) (@0xERR0R)
• c07bd55: fix(stats): count only true blocks (BLOCKED) as blocked (#2161) (@maximilize)
• 8435342: fix(stats): give DNS rebinding protection its own REBIND response type (#2166) (@0xERR0R)

Build and dependencies

• c163c75: build(deps): bump actions/setup-go from 6 to 7 (#2168) (@dependabot[bot])
• 958760d: build(deps): bump github.com/breml/rootcerts from 0.3.6 to 0.3.7 (#2181) (@dependabot[bot])
• d94652f: build(deps): bump github.com/go-chi/chi/v5 from 5.3.0 to 5.3.1 (#2157) (@dependabot[bot])
• d784ac5: build(deps): bump github.com/jedib0t/go-pretty/v6 from 6.8.1 to 6.8.2 (#2154) (@dependabot[bot])
• 23575a4: build(deps): bump github.com/jedib0t/go-pretty/v6 from 6.8.2 to 6.8.3 (#2183) (@dependabot[bot])
• b1f8a72: build(deps): bump github.com/oapi-codegen/runtime from 1.4.2 to 1.5.0 (#2164) (@dependabot[bot])
• 4fda662: build(deps): bump github.com/oapi-codegen/runtime from 1.5.0 to 1.6.0 (#2170) (@dependabot[bot])
• 7c8aeb4: build(deps): bump github.com/pires/go-proxyproto from 0.12.0 to 0.13.0 (#2153) (@dependabot[bot])
• 77c115b: build(deps): bump github.com/pires/go-proxyproto from 0.13.0 to 0.14.0 (#2155) (@dependabot[bot])
• 6154af2: build(deps): bump github.com/pires/go-proxyproto from 0.14.0 to 0.15.0 (#2162) (@dependabot[bot])
• bd9e3ae: build(deps): bump github.com/prometheus/client_golang from 1.23.2 to 1.24.0 (#2185) (@dependabot[bot])
• 6fd79dd: build(deps): bump github.com/prometheus/client_golang from 1.24.0 to 1.24.1 (#2193) (@dependabot[bot])
• 82777ca: build(deps): bump github.com/quic-go/quic-go from 0.60.0 to 0.61.0 (#2192) (@dependabot[bot])
• 59f0b0f: build(deps): bump golang.org/x/net from 0.56.0 to 0.57.0 (#2159) (@dependabot[bot])
• 288ff55: build(deps): bump oapi-codegen to 2.7.1 and kin-openapi to 0.144.0 (#2195) (@0xERR0R)

Misc

• 541860d: ci: automate sponsor list in README (#2173) (@0xERR0R)
• 493142d: ci: build sponsor avatar URLs from the login to avoid HTML escaping (#2177) (@0xERR0R)
• d9e2827: ci: fail the sponsors job instead of silently wiping the sponsor list (#2175) (@0xERR0R)

❤️ Support Blocky

Blocky is free and open source, developed in my spare time — no telemetry, no ads, no hidden
filtering. If it's useful to you, please consider supporting its continued development:

GitHub Sponsors ·
thanks.dev ·
Liberapay ·
Ko-fi ·
PayPal

Thank you to everyone supporting Blocky! 🙏

Changelog

Features

• 552eda5: feat(cli): add 'blocky stats' command (#2138) (@0xERR0R)
• e9deb53: feat(queryLog): add dnstap as a query log destination (#2144) (@rtmongold)

Bug fixes

• a191ad2: fix(dnssec): propagate Indeterminate (not Bogus) for unreachable chain of trust (#2120) (#2139) (@0xERR0R)
• 4b524e8: fix(ecs): apply useAsClient above cache and client-name lookup (#2140) (#2141) (@0xERR0R)

Build and dependencies

• afea452: build(deps): bump github.com/breml/rootcerts from 0.3.5 to 0.3.6 (#2133) (@dependabot[bot])
• 247a3c1: build(deps): bump github.com/jedib0t/go-pretty/v6 from 6.6.7 to 6.8.1 (#2145) (@dependabot[bot])
• 2aa728d: build(deps): bump github.com/oapi-codegen/runtime from 1.4.1 to 1.4.2 (#2134) (@dependabot[bot])
• 3f3f7d9: build(deps): bump github.com/onsi/ginkgo/v2 from 2.31.0 to 2.32.0 (#2135) (@dependabot[bot])
• 2d0e6f2: build(deps): bump github.com/onsi/gomega from 1.42.0 to 1.42.1 (#2137) (@dependabot[bot])
• 61d9a98: build(deps): bump github.com/testcontainers/testcontainers-go/modules/mariadb from 0.42.0 to 0.43.0 (#2131) (@dependabot[bot])
• cf865a6: build(deps): bump github.com/testcontainers/testcontainers-go/modules/postgres from 0.42.0 to 0.43.0 (#2130) (@dependabot[bot])
• e3c30dc: build(deps): bump github.com/testcontainers/testcontainers-go/modules/redis from 0.42.0 to 0.43.0 (#2129) (@dependabot[bot])
• a58f1c8: build(deps): bump google.golang.org/protobuf from 1.36.10 to 1.36.11 (#2148) (@dependabot[bot])
• 6df83cd: build(deps): bump gorm.io/gorm from 1.31.1 to 1.31.2 (#2147) (@dependabot[bot])

Misc

• 6da7ce1: perf(blocking): Tier 2 — lock-free grouped cache, cheapest-first lookup, client-name indexing (#2146) (@0xERR0R)
• 302ca65: perf(log): cut per-request logger allocations on the resolver hot path (#2142) (@0xERR0R)
• 223df0c: perf(queryLog): skip per-request LogEntry build when off or ignored (#2149) (@0xERR0R)
• b73422e: perf(resolver): allocation-free resolver selection in ParallelBestResolver (#2150) (@0xERR0R)

❤️ Support Blocky

Blocky is free and open source, developed in my spare time — no telemetry, no ads, no hidden
filtering. If it's useful to you, please consider supporting its continued development:

GitHub Sponsors ·
thanks.dev ·
Liberapay ·
Ko-fi ·
PayPal

Thank you to everyone supporting Blocky! 🙏

Changelog

Bug fixes

• d3a1fe5: fix(dnssec): don't cache transient Indeterminate validation results (#2120) (#2127) (@0xERR0R)
• fc353a0: fix(dnssec): only validate public-upstream answers (#2126) (#2128) (@0xERR0R)
• 53cfbda: fix(querylog): add loong64 to unsupported list (#2123) (@rtmongold)

Build and dependencies

• cad2480: build(deps): bump actions/checkout from 6 to 7 (#2124) (@dependabot[bot])
• 6ff7db7: build(deps): bump github.com/moby/moby/api from 1.54.2 to 1.55.0 (#2125) (@dependabot[bot])

❤️ Support Blocky

Blocky is free and open source, developed in my spare time — no telemetry, no ads, no hidden
filtering. If it's useful to you, please consider supporting its continued development:

GitHub Sponsors ·
thanks.dev ·
Liberapay ·
Ko-fi ·
PayPal

Thank you to everyone supporting Blocky! 🙏

Changelog

Features

• c851293: feat(blocking): log the matched rule in the block reason (#2091) (@0xERR0R)
• 87be127: feat(cache): Shard the result cache to remove the single-lock read ceiling (#2097) (@0xERR0R)
• 7c6da15: feat(config): structurally merge config folder files (#1827) (#2112) (@0xERR0R)
• e7958e0: feat(lists): opt-in on-disk download cache with conditional revalidation (#2087) (@0xERR0R)
• b82199b: feat(querylog): ignore domains (exact/wildcard/regex) in query log (#2084) (@0xERR0R)
• bee2d8b: feat(resolver): UDP-first plain-DNS upstream and EDNS0 buffer floor (#2100) (@0xERR0R)
• 0b70e5c: feat(resolver): add DNS rebinding protection (#2111) (@0xERR0R)
• 1b8e08a: feat(resolver): pool DoT connections and enable TLS session resumption (#2098) (@0xERR0R)
• 4018d9e: feat: in-memory statistics subsystem with /api/stats REST endpoint (#2093) (@0xERR0R)
• 7abca44: feat: support PROXY protocol on proxied DoT/DoH listeners (#2094) (@kastakhov)

Bug fixes

• 2496d12: fix(dnssec): close DNSSEC validation bypass & cache-scope pollution (GHSA-x845-2f78-7v36) (#2119) (@0xERR0R)
• 06555e0: fix(metrics): bound reason label cardinality for blocked responses (#2114) (@0xERR0R)
• e0ea9b3: fix(resolver): eliminate recursive RLock deadlock in blocking group resolution (#2106) (@0xERR0R)
• 80f742e: fix(server): answer browser CORS preflights for custom headers and Private Network Access (#2109) (@0xERR0R)
• 9702c8f: fix(stats): populate allow/denylist counts in /api/stats at startup (#2113) (@0xERR0R)

Build and dependencies

• 821e378: build(deps): bump codecov/codecov-action from 6 to 7 (#2089) (@dependabot[bot])
• d63f84b: build(deps): bump github.com/0xERR0R/expiration-cache from 0.1.0 to 0.2.0 (#2095) (@dependabot[bot])
• 81f2b2a: build(deps): bump github.com/onsi/ginkgo/v2 from 2.29.0 to 2.30.0 (#2108) (@dependabot[bot])
• 9c5abdf: build(deps): bump github.com/onsi/ginkgo/v2 from 2.30.0 to 2.31.0 (#2116) (@dependabot[bot])
• 6c0ec5f: build(deps): bump github.com/onsi/gomega from 1.41.0 to 1.42.0 (#2115) (@dependabot[bot])
• 4beb9fe: build(deps): bump github.com/quic-go/quic-go from 0.59.1 to 0.60.0 (#2090) (@dependabot[bot])
• 8fe2202: build(deps): bump golang.org/x/net from 0.55.0 to 0.56.0 (#2101) (@dependabot[bot])
• 52fa6a4: build(deps): bump golang.org/x/sys from 0.45.0 to 0.46.0 (#2096) (@dependabot[bot])

Misc

• 1c9f717: ci(e2e): speed up e2e job via Ginkgo proc oversubscription (#2085) (@0xERR0R)
• 8d49922: ci: cross-compile multi-arch docker image instead of QEMU emulation (#2081) (@0xERR0R)
• 355a9a1: docs(grafana): redesign Grafana dashboard and update integration guide (#2110) (@0xERR0R)
• c791e80: perf(e2e): probe blocky healthcheck at 250ms during start period (#2086) (@0xERR0R)
• a0fb375: perf(lists): speed up blocklist loading (cache build + parsing) (#2083) (@0xERR0R)
• 316b073: perf(resolver): pre-classify client groups to cut per-query allocations (#2103) (@0xERR0R)
• d502806: perf(server): let Truncate decide response compression (#2102) (@0xERR0R)
• 8b32512: test(e2e): de-flake PROXY protocol and upstream init.strategy specs (#2099) (@0xERR0R)

❤️ Support Blocky

Blocky is free and open source, developed in my spare time — no telemetry, no ads, no hidden
filtering. If it's useful to you, please consider supporting its continued development:

GitHub Sponsors ·
thanks.dev ·
Liberapay ·
Ko-fi ·
PayPal

Thank you to everyone supporting Blocky! 🙏

Changelog

Features

• 132c42f: feat(config): validate and log ports.dohPath (#2072) (@0xERR0R)
• e43b5e5: feat(querylog): add SQLite query log target (#2080) (@0xERR0R)
• 5d806b6: feat(server): opt-in IP_FREEBIND for DNS listeners (#2078) (@0xERR0R)
• f18e52b: feat: capability-aware image that runs under drop:ALL (#2071) (@0xERR0R)
• bf19d6d: feat: config JSON schema generation and schema-driven validation (#2066) (@0xERR0R)
• 99ae703: feat: filter ipv6hint in HTTPS/SVCB RR when AAAA is filtered (#2070) (@0xERR0R)
• c44017a: feat: load sensitive config values from files (#2077) (@0xERR0R)
• e6b41db: feat: per-client DNS rate limiting (#2063) (@0xERR0R)
• f457ec9: feat: read bootstrap nameservers from a resolv.conf file (resolvFile) (#2068) (@0xERR0R)
• fdcf351: feat: resolve client names from hosts file and custom DNS (#1964) (#2069) (@0xERR0R)

Bug fixes

• 93cc238: fix(caching): sync prefetched entries to Redis (#2079) (@0xERR0R)
• 69b0663: fix(config): handle DNS stamp port on hostname field and bootstrap IPs (#2065) (@0xERR0R)
• 31f8df3: fix(querylog): build SQLite target only on modernc-supported platforms (#2082) (@0xERR0R)

Build and dependencies

• a5cdeb2: build(deps): bump github.com/go-chi/chi/v5 from 5.2.5 to 5.3.0 (#2074) (@dependabot[bot])
• 5a25f67: build(deps): bump github.com/mattn/go-colorable from 0.1.14 to 0.1.15 (#2075) (@dependabot[bot])
• 1da222a: build(deps): bump github.com/oapi-codegen/runtime from 1.4.0 to 1.4.1 (#2064) (@dependabot[bot])
• 6ff1d13: build(deps): bump golang.org/x/net from 0.54.0 to 0.55.0 (#2067) (@dependabot[bot])
• 63f8d9a: build: upgrade Go to 1.26.2 and golangci-lint to v2.12.2 (#2062) (@0xERR0R)

Misc

• e2de6ae: docs(redis): document unix socket support and add e2e test (#2076) (@0xERR0R)

❤️ Support Blocky

Blocky is free and open source, developed in my spare time — no telemetry, no ads, no hidden
filtering. If it's useful to you, please consider supporting its continued development:

GitHub Sponsors ·
thanks.dev ·
Liberapay ·
Ko-fi ·
PayPal

Thank you to everyone supporting Blocky! 🙏

Changelog

Features

• 0de3fac: feat(sudn): handle resolver.arpa zone per RFC 9462 (DDR) (#2059) (@0xERR0R)
• c32863d: feat: add DNS-over-QUIC (DoQ) upstream support (RFC 9250) (#2013) (@elsbrock)
• 22b0bdd: feat: add schedule-based blocking for deny/allowlist groups (#2037) (@alessandrocuzzocrea)
• 842dda9: feat: serve DoH over HTTP/3 (DoH3, RFC 9114) (#2060) (@0xERR0R)
• c95cfba: feat: validate allow/denylist references in ClientGroupsBlock (#2016) (@JenswBE)

Bug fixes

• 10d6446: fix(api): keep /api/query response unobfuscated when log.privacy is on (#2058) (@0xERR0R)
• fb28513: fix: enhance DNS bootstrapping by utilizing IPs from DNS stamps (#1995) (@0xERR0R)
• 2ffe18a: fix: use RFC 4034 canonical DNS name ordering for NSEC coverage check (#2017) (@0xERR0R)

Build and dependencies

• a8015c8: build(deps): bump codecov/codecov-action from 5 to 6 (#2029) (@dependabot[bot])
• 89aee54: build(deps): bump crazy-max/ghaction-docker-meta from 5 to 6 (#2005) (@dependabot[bot])
• 98f41c4: build(deps): bump dependabot/fetch-metadata from 2 to 3 (#2031) (@dependabot[bot])
• 83434c5: build(deps): bump docker/build-push-action from 6 to 7 (#2004) (@dependabot[bot])
• 0c9e176: build(deps): bump docker/login-action from 3 to 4 (#2003) (@dependabot[bot])
• 67dabab: build(deps): bump docker/setup-buildx-action from 3 to 4 (#2006) (@dependabot[bot])
• def8e95: build(deps): bump docker/setup-qemu-action from 3 to 4 (#2002) (@dependabot[bot])
• 733f21c: build(deps): bump github.com/alicebob/miniredis/v2 from 2.37.0 to 2.38.0 (#2055) (@dependabot[bot])
• 5130c3e: build(deps): bump github.com/breml/rootcerts from 0.3.4 to 0.3.5 (#2040) (@dependabot[bot])
• 08e53d7: build(deps): bump github.com/docker/go-connections from 0.6.0 to 0.7.0 (#2038) (@dependabot[bot])
• 95225f8: build(deps): bump github.com/jackc/pgx/v5 from 5.7.5 to 5.9.0 (#2039) (@dependabot[bot])
• 3274076: build(deps): bump github.com/jackc/pgx/v5 from 5.9.0 to 5.9.2 (#2041) (@dependabot[bot])
• 7a279fc: build(deps): bump github.com/moby/moby/api from 1.54.1 to 1.54.2 (#2050) (@dependabot[bot])
• 1a04f45: build(deps): bump github.com/oapi-codegen/runtime from 1.1.2 to 1.2.0 (#1999) (@dependabot[bot])
• 076c880: build(deps): bump github.com/oapi-codegen/runtime from 1.2.0 to 1.3.0 (#2021) (@dependabot[bot])
• b7fddae: build(deps): bump github.com/oapi-codegen/runtime from 1.3.0 to 1.3.1 (#2028) (@dependabot[bot])
• 9c8f11c: build(deps): bump github.com/oapi-codegen/runtime from 1.3.1 to 1.4.0 (#2030) (@dependabot[bot])
• 62a7e4c: build(deps): bump github.com/onsi/ginkgo/v2 from 2.28.1 to 2.28.2 (#2042) (@dependabot[bot])
• 56dfb1d: build(deps): bump github.com/onsi/ginkgo/v2 from 2.28.2 to 2.28.3 (#2044) (@dependabot[bot])
• adb9457: build(deps): bump github.com/onsi/ginkgo/v2 from 2.28.3 to 2.29.0 (#2057) (@dependabot[bot])
• 5d6da86: build(deps): bump github.com/onsi/gomega from 1.39.1 to 1.40.0 (#2043) (@dependabot[bot])
• 6ac0c33: build(deps): bump github.com/onsi/gomega from 1.40.0 to 1.41.0 (#2056) (@dependabot[bot])
• 14047f2: build(deps): bump github.com/quic-go/quic-go from 0.59.0 to 0.59.1 (#2054) (@dependabot[bot])
• 670daf3: build(deps): bump github.com/testcontainers/testcontainers-go/modules/mariadb from 0.40.0 to 0.41.0 (#2011) (@dependabot[bot])
• ecd41d6: build(deps): bump github.com/testcontainers/testcontainers-go/modules/postgres from 0.40.0 to 0.41.0 (#2012) (@dependabot[bot])
• 5c9df81: build(deps): bump github.com/testcontainers/testcontainers-go/modules/redis from 0.40.0 to 0.41.0 (#2009) (@dependabot[bot])
• 0f1b3f3: build(deps): bump go.opentelemetry.io/otel/sdk from 1.35.0 to 1.40.0 (#2001) (@dependabot[bot])
• 6a06aa4: build(deps): bump go.opentelemetry.io/otel/sdk from 1.39.0 to 1.43.0 (#2047) (@dependabot[bot])
• 394a585: build(deps): bump golang.org/x/net from 0.51.0 to 0.52.0 (#2014) (@dependabot[bot])
• f7718ae: build(deps): bump golang.org/x/net from 0.52.0 to 0.53.0 (#2036) (@dependabot[bot])
• 2ea2b65: build(deps): bump golang.org/x/net from 0.53.0 to 0.54.0 (#2053) (@dependabot[bot])
• 2d36b56: build(deps): bump google.golang.org/grpc from 1.73.0 to 1.79.3 (#2020) (@dependabot[bot])
• bdcd239: build(deps): bump testcontainers-go to v0.42.0 (#2046) (@0xERR0R)
• cb2ae25: build: update golangci-lint (#2008) (@0xERR0R)
• fa8250c: build: update goreleaser action (#2024) (@0xERR0R)

Misc

• 1c43054: perf(blocking): keep time.Parse off the schedule hot path (#2049) (@0xERR0R)
• b4a1d54: refactor(e2e): extend e2e tests (#2023) (@0xERR0R)
• 667044b: refactor: redis write through cache (#2025) (@0xERR0R)
• 835e018: refactor: small quick improvements (#2019) (@0xERR0R)
• 94e9212: test(e2e): smoke-test schedule-based blocking (#2048) (@0xERR0R)

Changelog

Features

• 0c35f21: feat: add RFC 7239 Forwarded header support for client IP parsing (#1941) (@0xERR0R)
• 011e3eb: feat: implement DNS64 support (#1933) (@0xERR0R)
• e199445: feat: improve IP parsing from X-Forwarded-For header (#1940) (@0xERR0R)

Bug fixes

• 257fe07: fix: Incorrect rate data shown on Grafana dashboards (#1948) (@mattdy)
• 1a4d22d: fix: db automigration with timescaledb (#1975) (@manofthepeace)
• 9874212: fix: use context based versions of net.Listen and net.Dial (#1952) (@sonjek)

Build and dependencies

• fe67404: build(deps): bump actions/checkout from 5 to 6 (#1943) (@dependabot[bot])
• 4752061: build(deps): bump actions/download-artifact from 6 to 7 (#1961) (@dependabot[bot])
• d459311: build(deps): bump actions/download-artifact from 7 to 8 (#2000) (@dependabot[bot])
• fa1614b: build(deps): bump actions/upload-artifact from 5 to 6 (#1960) (@dependabot[bot])
• 11b6f92: build(deps): bump actions/upload-artifact from 6 to 7 (#1998) (@dependabot[bot])
• e83805c: build(deps): bump filippo.io/edwards25519 from 1.1.0 to 1.1.1 (#1992) (@dependabot[bot])
• 4f62ec8: build(deps): bump github.com/alicebob/miniredis/v2 from 2.35.0 to 2.36.0 (#1976) (@dependabot[bot])
• 16644c5: build(deps): bump github.com/alicebob/miniredis/v2 from 2.36.0 to 2.36.1 (#1978) (@dependabot[bot])
• 36ae188: build(deps): bump github.com/alicebob/miniredis/v2 from 2.36.1 to 2.37.0 (#1996) (@dependabot[bot])
• 4733c6b: build(deps): bump github.com/breml/rootcerts from 0.3.3 to 0.3.4 (#1987) (@dependabot[bot])
• e4f7462: build(deps): bump github.com/go-chi/chi/v5 from 5.2.3 to 5.2.4 (#1972) (@dependabot[bot])
• f9dd4d2: build(deps): bump github.com/go-chi/chi/v5 from 5.2.4 to 5.2.5 (#1985) (@dependabot[bot])
• e66a29d: build(deps): bump github.com/miekg/dns from 1.1.68 to 1.1.69 (#1959) (@dependabot[bot])
• 8e69355: build(deps): bump github.com/miekg/dns from 1.1.69 to 1.1.70 (#1968) (@dependabot[bot])
• 5e8b555: build(deps): bump github.com/miekg/dns from 1.1.70 to 1.1.72 (#1977) (@dependabot[bot])
• ef5dc97: build(deps): bump github.com/onsi/ginkgo/v2 from 2.27.2 to 2.27.3 (#1956) (@dependabot[bot])
• 670542b: build(deps): bump github.com/onsi/ginkgo/v2 from 2.27.3 to 2.27.4 (#1966) (@dependabot[bot])
• e062742: build(deps): bump github.com/onsi/ginkgo/v2 from 2.27.4 to 2.27.5 (#1970) (@dependabot[bot])
• 4926d16: build(deps): bump github.com/onsi/ginkgo/v2 from 2.27.5 to 2.28.1 (#1981) (@dependabot[bot])
• ca0da10: build(deps): bump github.com/onsi/gomega from 1.38.2 to 1.38.3 (#1955) (@dependabot[bot])
• 567a738: build(deps): bump github.com/onsi/gomega from 1.38.3 to 1.39.0 (#1967) (@dependabot[bot])
• c3aab87: build(deps): bump github.com/onsi/gomega from 1.39.0 to 1.39.1 (#1982) (@dependabot[bot])
• ef79a67: build(deps): bump github.com/sirupsen/logrus from 1.9.3 to 1.9.4 (#1974) (@dependabot[bot])
• 6775759: build(deps): bump github.com/spf13/cobra from 1.10.1 to 1.10.2 (#1953) (@dependabot[bot])
• 71c39fc: build(deps): bump golang.org/x/crypto from 0.44.0 to 0.45.0 (#1939) (@dependabot[bot])
• be31648: build(deps): bump golang.org/x/net from 0.47.0 to 0.48.0 (#1957) (@dependabot[bot])
• a574078: build(deps): bump golang.org/x/net from 0.48.0 to 0.49.0 (#1971) (@dependabot[bot])
• 6f3f295: build(deps): bump golang.org/x/net from 0.49.0 to 0.50.0 (#1988) (@dependabot[bot])
• 6a75afb: build(deps): bump golang.org/x/net from 0.50.0 to 0.51.0 (#1997) (@dependabot[bot])

Misc

• 439e99b: Add Blocky Visor to web UIs section in installation.md (#1993) (@jchheilmann)
• ced469f: refactor: centralize DNS response creation logic with helper functions (#1942) (@0xERR0R)
• 3075c38: refactor: clean up obsolete Go syntax (#1951) (@sonjek)
• 9fe42a8: refactor: simplify code for improved readability and maintainability (#1945) (@0xERR0R)
• 6581668: refactor: use mockery for mocks (#1944) (@0xERR0R)
• 55ab95e: test(metrics): Prometheus metrics (#1868) (@zeilenschubser)

Changelog

Features

• 26ac90c: feat: add MIPS architecture builds (#1929) (@0xERR0R)

Bug fixes

• 605a361: fix: handle DNSSEC validation for large RSA exponents and improve DNSKEY matching (#1935) (@0xERR0R)

Misc

• b776ae5: refactor: remove duplicated code patterns in resolver and cmd packages (#1932) (@Copilot)

Changelog

Bug fixes

• 5657ce8: fix: resolve DNSSEC validation issue for CNAMEs in unsigned zones (#1930) (@0xERR0R)

Build and dependencies

• f4b6b75: build: Update regex for bug fixes in goreleaser config (@0xERR0R)

Misc

• 0a3c724: refactor: remove unused code (#1928) (@0xERR0R)