CVS commit: pkgsrc/net/knot

["Ryo ONODERA" <ryoon%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   ryoon
Date:           Mon Sep 29 15:24:14 UTC 2025

Modified Files:
        pkgsrc/net/knot: Makefile distinfo

Log Message:
net/knot: Update to 3.5.0

* Update LICENSE to gnu-gpl-v2.

Changelog:
Version 3.5.0
Features:

      + knotd: database zone backend using Redis/Valkey (see 'Database zone
        backend')
      + knotd: support for multiple control sockets (see 'control.listen')
      + knotd: external zone validation (see 'External validation')
      + knotd: authorization based on certificate hostname validation (see 'DNS
        over QUIC')
      + knotd: multiple keystores can be specified per policy (see 'DNSSEC
        multiple keystores')
      + knotd: specified resource record types can be omitted when loading (see
        'zone.zonefile-skip')
      + knotd: configurable delay before zone change processing (see
        'zone.update-delay')
      + knotd: subzone flattening (see 'zone.include-from')

Improvements:

      + knotd: optimized dynamic zone addition/removal for many zones
      + knotd: optimized catalog updates for many zones
      + knotd: replaced a poor atomic fallback with a spin-lock-protected
        version
      + knotd: support for independent SOA serial series on the secondary side
      + knotd: self-signed certificate contains SAN instead of CN
      + knotd: removed RCU synchronization lock between unrelated zones'
        updates
      + knotd: zone-reload/reload fails if there is a module configuration
        error
      + knotd: control interfaces are started before zones loading
      + knotd: session ticket pool is purged on server reload if changed
        credentials
      + knotc: status returns 'Loading' if the server is not yet answering
      + knotc: extended tab completion for details, filters, and paths
      + kzonecheck: zone origin auto-detection uses SOA owner from the checked
        zone file
      + libknot: XDP drops packets with too many or inappropriate extended IPv6
        headers
      + libknot: extended XDP checks for correct packets
      + libknot: semantically malformed resource records are dumped in generic
        format
      + libs: upgraded embedded libngtcp2 to 1.15.0
      + knot-exporter: less confusing option parsing and documentation
      + doc: various improvements

Bugfixes:

      + knotd: if multiple primaries send NOTIFY concurrently, only the last
        remote is queried
      + knotd: failed to build on macOS with POSIX semaphores
      + knotd: early zone free due to RCU-delayed update cleanup
      + knotd: server crashes if "" value overrides template master value
      + knot-exporter: label collisions caused by duplicate metrics (Thanks to
        Guillaume Cornet)

Packaging:

      + deb,rpm: keymgr extracted to a separate package knot-keymgr
      + deb,rpm: new package redis-knot with a Knot module for Redis/Valkey
      + docker: upgraded to Debian trixie-slim

Compatibility:

      + license: project relicensed to GPL-2.0-or-later
      + knotd: new default value of 'policy.nsec3-salt-length' is 0
      + knot-exporter: renamed some metrics, labes, or units (see 'Migration')


To generate a diff of this commit:
cvs rdiff -u -r1.93 -r1.94 pkgsrc/net/knot/Makefile
cvs rdiff -u -r1.50 -r1.51 pkgsrc/net/knot/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/net/knot/Makefile
diff -u pkgsrc/net/knot/Makefile:1.93 pkgsrc/net/knot/Makefile:1.94
--- pkgsrc/net/knot/Makefile:1.93       Thu Apr 17 21:51:57 2025
+++ pkgsrc/net/knot/Makefile    Mon Sep 29 15:24:14 2025
@@ -1,7 +1,6 @@
-# $NetBSD: Makefile,v 1.93 2025/04/17 21:51:57 wiz Exp $
+# $NetBSD: Makefile,v 1.94 2025/09/29 15:24:14 ryoon Exp $
 
-DISTNAME=      knot-3.4.2
-PKGREVISION=   5
+DISTNAME=      knot-3.5.0
 CATEGORIES=    net
 MASTER_SITES=  https://secure.nic.cz/files/knot-dns/
 EXTRACT_SUFX=  .tar.xz
@@ -9,7 +8,7 @@ EXTRACT_SUFX=   .tar.xz
 MAINTAINER=    pkgsrc-users%NetBSD.org@localhost
 HOMEPAGE=      https://www.knot-dns.cz/
 COMMENT=       Knot (auth) DNS server
-LICENSE=       gnu-gpl-v3
+LICENSE=       gnu-gpl-v2
 
 FORCE_C_STD=   c11
 

Index: pkgsrc/net/knot/distinfo
diff -u pkgsrc/net/knot/distinfo:1.50 pkgsrc/net/knot/distinfo:1.51
--- pkgsrc/net/knot/distinfo:1.50       Thu Oct 31 13:33:47 2024
+++ pkgsrc/net/knot/distinfo    Mon Sep 29 15:24:14 2025
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.50 2024/10/31 13:33:47 ryoon Exp $
+$NetBSD: distinfo,v 1.51 2025/09/29 15:24:14 ryoon Exp $
 
-BLAKE2s (knot-3.4.2.tar.xz) = 73721990aed46d6668529052f33d767a33c2503fa18760ce7c89ea28d879b8c4
-SHA512 (knot-3.4.2.tar.xz) = d5353fdd51224e20a8009aea7df6fe7503a726756c82041b770d8e90cae00b38ede7ecb2f31178ccb9f472a98b86f90208d4627fa4aaaf3c0383272b451e3015
-Size (knot-3.4.2.tar.xz) = 1632976 bytes
+BLAKE2s (knot-3.5.0.tar.xz) = bf3acdc743b4131da45eb039d6b829a422aba40396a4fc116be97cccb9fa812f
+SHA512 (knot-3.5.0.tar.xz) = 740c8f2d92921e68de3e2e62b7c714bad7ca41884e59236df02e5935889cc4f2102d8693dda2b700e1bfafda71d8760ec4337cc80d42c493d37eef5d0516d1ad
+Size (knot-3.5.0.tar.xz) = 1716348 bytes
 SHA1 (patch-samples_Makefile.in) = 499b8742dbd948e489b01d512bc7a8d8e4fe2e7b