Skip to content

DNSControl

v4.42.0 Breaking

This release includes 1 breaking change for platform teams planning a safe upgrade.

✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

dns dnscontrol go iac

Summary

AI summary

Broad release touches Provider-specific changes, CI/CD, macOS and Linux, and @TomOnTime.

Full changelog

Greetings DNS fans!

Release summary:

  • NEW PROVIDER: DNSControl now supports websupport.sk (WEBSUPPORT)! Thanks and welcome to @mtmn who joins the project as its maintainer. We look forward to great things!
  • AZURE_DNS is more reliable when Azure gets slow.
  • dnscontrol init now supports DNSIMPLE and INWX! (List of remaining providers). If your provider is on this list, please volunteer to confirm we got it right.
  • HEDNS is much faster now when running integration tests. Thanks, @rblenkinsopp!
  • BUGFIX: Avoid panic in ToRR when A/AAAA target is an invalid IP (#4376)
  • @cafferata updated docs to reflect Homebrew 6.x's trust model! (#4365)
  • And many other improvements.

Thanks to all contributors involved in this release! This is a community project and we couldn't do it without all of your contributions!

Sincerely,
--Tom Limoncelli

Monthly video call!

Everyone is invited to the Monthly DNSControl Community Video Conference Call on the 2nd Tuesday of each month. Join whether you are a new user with questions or an experienced developer that wants to discuss DNSControl internals... or anything in between! Meeting details on
GitHub Discussions.

Changelog

Major features:

  • 931cb380fdb202c4ff657b55d84ee092baf89a7d: NEW PROVIDER: WebSupport (websupport.sk) DNS provider (#4380) (@mtmn)

Provider-specific changes:

  • 182888eb476308067d22c0a02f8867577b0f4fbf: AZURE_DNS: Retry pending-operation conflicts (#4369) (@vatsalyagoel)
  • 290207235fdd3b463a91f16db80533acfbf86b58: DNSIMPLE: Update to new NS1 & NS3 nameservers (#4350) (@onlyhavecans)
  • f073df43d56177f1887dc220783d5104fda12ea3: DNSIMPLE: support init command (#4282) (@TomOnTime)
  • 855a01e98734e12ac3e8f4e8f50c8785e140690c: DOH: Fix duplicate nameservers appearing in list. (#4366) (@jfexyz)
  • 8bacbb3fbea424479b807a0e3a87390e75a3def2: HEDNS: Further improve authentication performance (#4359) (@rblenkinsopp)
  • 0e948166f45d0139f97d6111d5209a9db4d52f43: HEDNS: Performance improvements (#4348) (@rblenkinsopp)
  • 5de73de9a45e5e0d132ff806749054b529a906ef: INWX: support init command (#4293) (@TomOnTime)
  • 50ca16e664c0ba6cadecd277bc2b9c0210ebf8dc: PORKBUN: Fix duplicate nameservers in list. (#4367) (@jfexyz)
  • e37f0d032fb574e39e233adcafb9191213e92c65: RWTH: Add Support for Domains with DNSSEC Disabled and Migrate to diff2 (#4180) (@psuet)

Documentation:

  • e525b9106e0dff87913a97647bd6d307395d1574: DOCS: Homebrew install requires brew trust since Homebrew 5.1.15 (#4365) (@cafferata)

CI/CD:

  • 9390084032efbf48feeaa00cc71669f4fbe314df: Build(deps): Bump joi from 17.13.3 to 17.13.4 (#4377) (@dependabot[bot])
  • 5eaf231fba92e7716d9b2eef945c215fedf79fb7: CICD: Don't perform provider operations in skipped test groups (#4349) (@rblenkinsopp)

Dependencies:

  • 0c75178d5c42b4c877e4e5fa946cf451065467b9: CHORE: Update dependencies (#4360) (@TomOnTime)
  • affc9361831b79cd281af5a1adf7f3bbd49e0315: CHORE: Update dependencies (#4382) (@TomOnTime)

Other changes and improvements:

  • 36de03689f6c8e1ed36d017cac22504c97510b71: BUGFIX: Avoid panic in ToRR when A/AAAA target is an invalid IP (#4376) (@SAY-5)
  • 451b8ff37a771c6ee434ccd462e3b1487899eb87: TYPES: Allow RecordModifier to accept arrays (#4347) (@tresni)

Deprecation warnings

[!WARNING]

  • REV() will switch from RFC2317 to RFC4183 in v5.0. This is a breaking change. Warnings are output if your configuration is affected. No date has been announced for v5.0. See https://docs.dnscontrol.org/language-reference/top-level-functions/revcompat
  • NAMEDOTCOM, OPENSRS and SOFTLAYER need maintainers! These providers have no maintainer. Maintainers respond to PRs and fix bugs in a timely manner, and try to stay on top of protocol changes.

Install

macOS and Linux

Install with Homebrew (recommended)
brew trust --formula dnscontrol/tap/dnscontrol
brew install DNSControl/tap/dnscontrol
Using with Docker

You can use the Docker image from Docker hub or GitHub Container Registry.

docker run --rm -it -v "$(pwd):/dns" ghcr.io/dnscontrol/dnscontrol preview

Anywhere else

Alternatively, you can install the latest binary (or the apt/rpm/deb/archlinux package) from this page.

Or, if you have Go installed, you can install the latest version of DNSControl with the following command:

go install github.com/DNSControl/dnscontrol/v4@main

Update

Update to the latest version depends on how you choose to install dnscontrol on your machine.

Update with Homebrew

brew upgrade DNSControl/tap/dnscontrol

Alternatively, you can grab the latest binary (or the apt/rpm/deb package) from this page.

Breaking Changes

  • REV() will switch from RFC2317 to RFC4183 in v5.0 (scheduled breaking change)

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track DNSControl

Get notified when new releases ship.

Sign up free

About DNSControl

Infrastructure as code for DNS!

All releases →

Related context

Earlier breaking changes

  • v4.41.0 REV() will switch from RFC2317 to RFC4183 in v5.0 (breaking change)
  • v4.40.0 REV() will switch from RFC2317 to RFC4183 in upcoming v5.0 (breaking change)
  • v4.39.0 REV() will switch from RFC2317 to RFC4183 in v5.0, a breaking change.
  • v4.38.0 `dnscontrol get-zones` drops older syntax support, changing behavior
  • v4.38.0 REV() will switch from RFC2317 to RFC4183 in v5.0, a breaking change for affected configurations

Beta — feedback welcome: [email protected]