Log message:
py-dns: updated to 2.6.1

2.6.1

Dnspython 2.6.1 is now available on PyPI. See What’s New for details. This is a
bug fix release for 2.6.0 where the “TuDoor” fix erroneously suppressed
legitimate Truncated exceptions. This caused the stub resolver to timeout
instead of failing over to TCP when a legitimate truncated response was
received over UDP. This release addresses the potential DoS issue discussed in
the “TuDoor” paper (CVE-2023-29483). The dnspython stub resolver is vulnerable
to a potential DoS if a bad-in-some-way response from the right address and
port forged by an attacker arrives before a legitimate one on the UDP port
dnspython is using for that query.

Log message:
py-dns: updated to 2.6.0

2.6.0

Dnspython 2.6.0 is now available on PyPI. See What’s New for details. This \ 
release addresses the potential DoS issue discussed in the “TuDoor” paper \ 
(CVE-2023-29483). The dnspython stub resolver is vulnerable to a potential DoS \ 
if a bad-in-some-way response from the right address and port forged by an \ 
attacker arrives before a legitimate one on the UDP port dnspython is using for \ 
that query. In this situation, dnspython might switch to querying another \ 
resolver or give up entirely, possibly denying service for that resolution.

Log message:
py-dns: update to 2.5.0.

2.5.0

    Dnspython now uses hatchling for builds.

    Asynchronous destinationless sockets now work on Windows.

    Cython is no longer supported due to various typing issues.

    Dnspython now explicitly canonicalizes IPv4 and IPv6 addresses.
    Previously it was possible for non-canonical IPv6 forms to be
    stored in a AAAA address, which would work correctly but possibly
    cause problmes if the address were used as a key in a dictionary.

    The number of messages in a section can be retrieved with
    section_count().

    Truncation preferences for messages can be specified.

    The length of a message can be automatically prepended when
    rendering.

    dns.message.create_response() automatically adds padding when
    required by RFC 8467.

    The TLS verify parameter is now supported by dns.query.tls(),
    and the DoH and DoT Nameserver subclasses.

    The MutableMapping used to store content in a zone may now be
    specified by a factory when subclassing. Factories may also be
    provided for writable verisons and immutable versions.

    dns.name.Name now has predecessor() and successor() methods
    implementing RFC 4471.

    QUIC has had a number of bug fixes and also now supports session
    tickets for faster session resumption.

    The NSEC3 class now has a next_name() method for retrieving
    the next name as a dns.name.Name.

    Windows WMI interface detection should be more robust.

Log message:
python/wheel.mk: simplify a lot, and switch to 'installer' for installation

This follows the recommended bootstrap method (flit_core, build, installer).

However, installer installs different files than pip, so update PLISTs
for all packages using wheel.mk and bump their PKGREVISIONs.

Log message:
py-dns: updated to 2.4.2

2.4.2

Async queries could wait forever instead of respecting the timeout if the \ 
timeout was 0 and a packet was lost. The timeout is now respected.
Restore HTTP/2 support which was accidentally broken during the https \ 
refactoring done as part of 2.4.0.
When an inception time and lifetime are specified, the signer now sets the \ 
expiration to the inception time plus lifetime, instead of the current time plus \ 
the lifetime.

Log message:
py-dns: updated to 2.4.1

2.4.1
This is a bug fix release, see What’s New for the details.

Log message:
py-dns: update to 2.4.0.

Dnspython 2.4.0 is now available on PyPI. See What’s New! Thank
you to all the contributors to this release. Special thanks to
Jakob Schlyter for writing zone signing code and also refactoring
the DNSSEC code to allow new algorithms to be added more easily.
Dnspython 2.4.0 requires Python 3.8 or later. Also note that this
release drops support for curio and requests (DoH is now done
exclusively with httpx).

Log message:
py-dns: update to 2.3.0.

2.3.0

    Python 3.7 or newer is required.
    Type annotations are now integrated with the source code and
    cover far more of the library.
    The get_soa() method has been added to dns.zone.Zone.
    The minimum TLS version is now 1.2.
    EDNS padding is now supported. Messages with EDNS enabled and
    with a non-zero pad option will be automatically padded
    appropriately when converted to wire format.
    dns.zone.from_text() and dns.zone.from_file() now have an
    allow_directives parameter to allow finer control over how
    directives in zonefiles are processed.
    A preliminary implementation of DNS-over-QUIC has been added,
    and will be available if the aioquic library is present. See
    dns.query.quic(), dns.asyncquery.quic(), and examples/doq.py
    for more info. This API is subject to change in future releases.
    For asynchronous I/O, both asyncio and Trio are supported, but
    Curio is not.
    DNSSEC signing support has been added to the dns.dnssec module,
    along with a number of functions to help generate DS, CDS, and
    CDNSKEY RRsets. Thank you very much Jakob Schlyter!
    Curio asynchronous I/O support is deprecated as of this release
    and will be removed in a future release.
    The resolver object's nameserver field is planned to become a
    property in dnspython 2.4. Writing to this field other than by
    direct assignment is deprecated, and so is depending on the
    mutability and form of the iterable returned when it is read.