CVS commit: pkgsrc/net/knot

["Ryo ONODERA" <ryoon%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   ryoon
Date:           Mon Feb  2 12:56:22 UTC 2026

Modified Files:
        pkgsrc/net/knot: Makefile distinfo

Log Message:
net/knot: Updateto 3.5.3

Changelog:
Knot DNS 3.5.3 (2026-01-16)
===========================

Features:
---------
 - knotd: added statistics counter for failed zone update (see 'zone-update-error')
 - knotd: new D-Bus signal for zones not updated (see 'server.dbus-event')
 - knotc: optional parameter for delayed old KSK removal upon submission (see 'zone-ksk-submitted')
 - libs: added support for the RESINFO record type

Improvements:
-------------
 - knotd: zone inclusion deletes the whole subtree of glues and junk from the parent
 - knotd: supported unsigned input ZONEMD validation if enabled DNSSEC signing and ZONEMD generate
 - knotd: DNSSEC signing not required for key restore
 - knotd: increased defaults for 'database.timer-db-max-size' and 'database.kasp-db-max-size'
 - knotd: database connection pool is purged if reconfigured
 - knotd: removed shutdown delay if connected to a database
 - knotd: optimized memory trimming frequency for many zones
 - knotd: primary server sends NOTIFY after answering started, not sooner
 - redis: GnuTLS is not required to build the module alone !1809
 - libs: improved detection of PKCS #11 support !1830
 - libs: upgraded embedded libngtcp2 to 1.19.0
 - samples: added JSON support to probe_dump (Thanks to Benedikt Heine)
 - doc: extended and updated table of compatible PKCS #11 devices

Bugfixes:
---------
 - knotd: DS push not replanned if reconfigured during DS submission
 - knotd: missing check for empty zone when flushing
 - knotd: missing catalog update clear if error
 - knotd: failed to parse database address without port specification
 - knotd: incorrect thread synchronization when dumping timers
 - knotd: server crashes when outbound QUIC connection is closed unexpectedly
 - knotd: zone not reloaded from database if not updated incrementally
 - knotd: UNIX socket path containing a single colon considered an IPv6 address
 - keymgr: program crashes when importing a malformed key
 - kdig: missing address context deinitialization when iterating over addresses
 - kdig: missing AA flag on NOTIFY query

Knot DNS 3.5.2 (2025-11-28)
===========================

Features:
---------
 - knotd: configurable zone timer storage mode (see 'database.timer-db-sync')
 - libknot: added support for the DSYNC record type
 - redis: new module command for printing zone information (see 'KNOT.ZONE.INFO')

Improvements:
-------------
 - knotd: queries to a catalog zone are now allowed also for ACL rules with action 'query'
 - knotd: denied query to a catalog zone is responded to with NOTAUTH instead of REFUSED
 - knotd: existing PID file is reused if it matches current PID !1819
 - knotd: zone purge has its own zone event
 - knotd: optimized zone timer storage
 - knotd: optimized ACL evaluation
 - keymgr: added more algorithms to keystore-test and keystore-bench
 - mod-dnstap: added detection for protoc
 - libs: upgraded embedded libngtcp2 to 1.18.0
 - redis: added support for zone data replication
 - redis: extended logging
 - doc: various improvements

Bugfixes:
---------
 - knotd: failed to receive zone with ZONEMD if enabled DNSSEC signing and ZONEMD generate
 - knotd: refresh with pinned master not rescheduled when tolerance period expired
 - knotd: failed to build with older libhiredis without TLS support
 - knotd: misleading error message when attempting to sign empty zone
 - mod-rrl: failed to compile if target architecture was specified
 - libknot: failed to dump RRSet if the initial output buffer was too small
 - libdnssec: missing digest.h in dnssec.h
 - redis: defective communication with sentinel
 - redis: failed zone load was not rescheduled
 - redis: several memory leaks

Knot DNS 3.5.1 (2025-10-16)
===========================

Features:
---------
 - knotc: new command for setting zone SOA serial (see 'zone-serial-set')

Improvements:
-------------
 - knotd: zone database listen configuration now accepts a hostname value
 - knotd: support for specifying multiple zone databases (see 'zone-db-listen')
 - knotd: added serial parameter to D-Bus event 'external_verify'
 - libs: upgraded embedded libngtcp2 to 1.16.0
 - configure: new option for specifying Redis module destination (see '--with-redisdir')
 - configure: Redis support is fully optional (see '--enable-redis') (Thanks to Nicolas Parlant)
 - deb,rpm: renamed inappropriate package 'redis-knot' to 'redis-module-knot'

Bugfixes:
---------
 - knotd: failed to build on PowerPC and MIPS
 - knotd: missing some checks for file operations
 - knotd: zones added via knotc conf-set include not loaded until restart
 - knotd: zone-diff after zone-begin prints misleading SOA removal
 - knotd: failed to load from other PEM keystores if PKCS #11 keystore is configured
 - knotd: failed to restore PKCS #11 keystore #960
 - knotc: failed to compile on GNU Hurd
 - keymgr: missing deprecation warning for 'local-serial' command
 - configure: linked with libhiredis even when configured with --disable-redis
 - deb,rpm: incorrect destination for Redis module (see 'Database zone backend')


To generate a diff of this commit:
cvs rdiff -u -r1.95 -r1.96 pkgsrc/net/knot/Makefile
cvs rdiff -u -r1.51 -r1.52 pkgsrc/net/knot/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/net/knot/Makefile
diff -u pkgsrc/net/knot/Makefile:1.95 pkgsrc/net/knot/Makefile:1.96
--- pkgsrc/net/knot/Makefile:1.95       Wed Jan  7 08:48:20 2026
+++ pkgsrc/net/knot/Makefile    Mon Feb  2 12:56:21 2026
@@ -1,9 +1,8 @@
-# $NetBSD: Makefile,v 1.95 2026/01/07 08:48:20 wiz Exp $
+# $NetBSD: Makefile,v 1.96 2026/02/02 12:56:21 ryoon Exp $
 
-DISTNAME=      knot-3.5.0
-PKGREVISION=   1
+DISTNAME=      knot-3.5.3
 CATEGORIES=    net
-MASTER_SITES=  https://secure.nic.cz/files/knot-dns/
+MASTER_SITES=  https://knot-dns.nic.cz/release/
 EXTRACT_SUFX=  .tar.xz
 
 MAINTAINER=    pkgsrc-users%NetBSD.org@localhost

Index: pkgsrc/net/knot/distinfo
diff -u pkgsrc/net/knot/distinfo:1.51 pkgsrc/net/knot/distinfo:1.52
--- pkgsrc/net/knot/distinfo:1.51       Mon Sep 29 15:24:14 2025
+++ pkgsrc/net/knot/distinfo    Mon Feb  2 12:56:21 2026
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.51 2025/09/29 15:24:14 ryoon Exp $
+$NetBSD: distinfo,v 1.52 2026/02/02 12:56:21 ryoon Exp $
 
-BLAKE2s (knot-3.5.0.tar.xz) = bf3acdc743b4131da45eb039d6b829a422aba40396a4fc116be97cccb9fa812f
-SHA512 (knot-3.5.0.tar.xz) = 740c8f2d92921e68de3e2e62b7c714bad7ca41884e59236df02e5935889cc4f2102d8693dda2b700e1bfafda71d8760ec4337cc80d42c493d37eef5d0516d1ad
-Size (knot-3.5.0.tar.xz) = 1716348 bytes
+BLAKE2s (knot-3.5.3.tar.xz) = 64193e63c6f849a83d694b7d4f35980c8c6b7dd0de5544b48fdc3e2928b2384c
+SHA512 (knot-3.5.3.tar.xz) = 7064a18ce10fa9488176592baddfda32b55f6ca2470dce4083c82aca8fae95f568cb9ddd2bb9f55466eeffbb04ea616e67014f44b94f2fb2b8f98f8a419271a3
+Size (knot-3.5.3.tar.xz) = 1757736 bytes
 SHA1 (patch-samples_Makefile.in) = 499b8742dbd948e489b01d512bc7a8d8e4fe2e7b