blocky

v0.31.0 Feature

This release adds 5 notable features for engineering teams evaluating rollout.

Published 1mo Privacy & Ad-blocking

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

ad-blocker adblock adblocker dns dns-over-https go

+3 more

parental-control pihole self-hosted

Affected surfaces

auth rbac

Summary

AI summary

Broad release touches @0xERR0R, Build and dependencies, Bug fixes, and deps.

Changes in this release

Type	Severity	Summary	CVE
Feature
Feature	Low	Adds SQLite query log target. Adds SQLite query log target. Source: llm_adapter@2026-06-04 Confidence: high	—
Feature	Low	Opt‑in IP_FREEBIND for DNS listeners. Opt‑in IP_FREEBIND for DNS listeners. Source: llm_adapter@2026-06-04 Confidence: high	—
Feature	Low	Introduces capability‑aware image running under drop:ALL. Introduces capability‑aware image running under drop:ALL. Source: llm_adapter@2026-06-04 Confidence: high	—
Feature	Low	Generates JSON schema for config and enables schema‑driven validation. Generates JSON schema for config and enables schema‑driven validation. Source: llm_adapter@2026-06-04 Confidence: high	—
Feature	Low	Filters ipv6hint in HTTPS/SVCB RR when AAAA is filtered. Filters ipv6hint in HTTPS/SVCB RR when AAAA is filtered. Source: llm_adapter@2026-06-04 Confidence: high	—
Feature	Low	Loads sensitive config values from files. Loads sensitive config values from files. Source: llm_adapter@2026-06-04 Confidence: high	—
Feature	Low	Implements per‑client DNS rate limiting. Implements per‑client DNS rate limiting. Source: llm_adapter@2026-06-04 Confidence: high	—
Feature	Low	Reads bootstrap nameservers from a resolv.conf file (resolvFile). Reads bootstrap nameservers from a resolv.conf file (resolvFile). Source: llm_adapter@2026-06-04 Confidence: high	—
Feature	Low	Resolves client names from hosts file and custom DNS. Resolves client names from hosts file and custom DNS. Source: llm_adapter@2026-06-04 Confidence: high	—
Feature	Low	Validate and log ports.dohPath in config. Validate and log ports.dohPath in config. Source: granite4.1:30b@2026-06-04-audit Confidence: low	—
Dependency
Dependency	Low	Bump github.com/go-chi/chi/v5 from 5.2.5 to 5.3.0. Bump github.com/go-chi/chi/v5 from 5.2.5 to 5.3.0. Source: granite4.1:30b@2026-06-04-audit Confidence: low	—
Dependency	Low	Bump github.com/mattn/go-colorable from 0.1.14 to 0.1.15. Bump github.com/mattn/go-colorable from 0.1.14 to 0.1.15. Source: granite4.1:30b@2026-06-04-audit Confidence: low	—
Dependency	Low	Bump github.com/oapi-codegen/runtime from 1.4.0 to 1.4.1. Bump github.com/oapi-codegen/runtime from 1.4.0 to 1.4.1. Source: granite4.1:30b@2026-06-04-audit Confidence: low	—
Dependency	Low	Bump golang.org/x/net from 0.54.0 to 0.55.0. Bump golang.org/x/net from 0.54.0 to 0.55.0. Source: granite4.1:30b@2026-06-04-audit Confidence: low	—
Bugfix
Bugfix	Medium	Syncs prefetched cache entries to Redis. Syncs prefetched cache entries to Redis. Source: llm_adapter@2026-06-04 Confidence: high	—
Bugfix	Medium	Handle DNS stamp port on hostname field and bootstrap IPs in config. Handle DNS stamp port on hostname field and bootstrap IPs in config. Source: granite4.1:30b@2026-06-04-audit Confidence: low	—
Bugfix	Low	Build SQLite query log target only on modernc-supported platforms. Build SQLite query log target only on modernc-supported platforms. Source: granite4.1:30b@2026-06-04-audit Confidence: low	—
Refactor	Low	Upgrade Go to 1.26.2 and golangci-lint to v2.12.2. Upgrade Go to 1.26.2 and golangci-lint to v2.12.2. Source: granite4.1:30b@2026-06-04-audit Confidence: low	—

Full changelog

Changelog

Features

132c42f25d1b3a5c7e98736961b506c5c96ef362: feat(config): validate and log ports.dohPath (#2072) (@0xERR0R)
e43b5e598fadc744f173d95b4ed8edf918f8e13b: feat(querylog): add SQLite query log target (#2080) (@0xERR0R)
5d806b6a4190624d45e0a2e395ed790856ea1508: feat(server): opt-in IP_FREEBIND for DNS listeners (#2078) (@0xERR0R)
f18e52bf21f341cf70a540d7f25132c912b8dfb6: feat: capability-aware image that runs under drop:ALL (#2071) (@0xERR0R)
bf19d6d5f7c59b57a4d63f59257dfb8851d445c3: feat: config JSON schema generation and schema-driven validation (#2066) (@0xERR0R)
99ae703b4cd5e7b9a073f076498d035487a98b97: feat: filter ipv6hint in HTTPS/SVCB RR when AAAA is filtered (#2070) (@0xERR0R)
c44017aa70085acd386f697f18a531ce50b470ac: feat: load sensitive config values from files (#2077) (@0xERR0R)
e6b41db553d14666a6a873344f8078fe9ed76b66: feat: per-client DNS rate limiting (#2063) (@0xERR0R)
f457ec90d56382ea60afd1fc903997f48dab0cf7: feat: read bootstrap nameservers from a resolv.conf file (resolvFile) (#2068) (@0xERR0R)
fdcf351addec5cce2087c8f6d4e859568a3a7579: feat: resolve client names from hosts file and custom DNS (#1964) (#2069) (@0xERR0R)

Bug fixes

93cc238af0661f76ea77bd0f789ab39317164e54: fix(caching): sync prefetched entries to Redis (#2079) (@0xERR0R)
69b06638a7dc93f403a11796901d707c46e5ebd4: fix(config): handle DNS stamp port on hostname field and bootstrap IPs (#2065) (@0xERR0R)
31f8df3a8af7dc7eee04caccf8c526568b1936a5: fix(querylog): build SQLite target only on modernc-supported platforms (#2082) (@0xERR0R)

Build and dependencies

a5cdeb2d07c0c46f7c4783a1f8b448199cdfe66f: build(deps): bump github.com/go-chi/chi/v5 from 5.2.5 to 5.3.0 (#2074) (@dependabot[bot])
5a25f67c7f09e8340557d1cc7ed5ce3020f79698: build(deps): bump github.com/mattn/go-colorable from 0.1.14 to 0.1.15 (#2075) (@dependabot[bot])
1da222a79c0d2ebd6e801d0fd14809f6ffc665fa: build(deps): bump github.com/oapi-codegen/runtime from 1.4.0 to 1.4.1 (#2064) (@dependabot[bot])
6ff1d13eeb74eb90639741052d7a85ffe9691380: build(deps): bump golang.org/x/net from 0.54.0 to 0.55.0 (#2067) (@dependabot[bot])
63f8d9a91e8935de54181ff42c861f62dd9e80b9: build: upgrade Go to 1.26.2 and golangci-lint to v2.12.2 (#2062) (@0xERR0R)

Misc

e2de6aecd01771985c27eacdc90e35045510c8f0: docs(redis): document unix socket support and add e2e test (#2076) (@0xERR0R)

❤️ Support Blocky

Blocky is free and open source, developed in my spare time — no telemetry, no ads, no hidden
filtering. If it's useful to you, please consider supporting its continued development:

GitHub Sponsors ·
thanks.dev ·
Liberapay ·
Ko-fi ·
PayPal

Thank you to everyone supporting Blocky! 🙏

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track blocky

Get notified when new releases ship.

About blocky

Fast and lightweight DNS proxy as ad-blocker for local network with many features

All releases →