Changelog

Bug fixes

• d3a1fe5: fix(dnssec): don't cache transient Indeterminate validation results (#2120) (#2127) (@0xERR0R)
• fc353a0: fix(dnssec): only validate public-upstream answers (#2126) (#2128) (@0xERR0R)
• 53cfbda: fix(querylog): add loong64 to unsupported list (#2123) (@rtmongold)

Build and dependencies

• cad2480: build(deps): bump actions/checkout from 6 to 7 (#2124) (@dependabot[bot])
• 6ff7db7: build(deps): bump github.com/moby/moby/api from 1.54.2 to 1.55.0 (#2125) (@dependabot[bot])

❤️ Support Blocky

Blocky is free and open source, developed in my spare time — no telemetry, no ads, no hidden
filtering. If it's useful to you, please consider supporting its continued development:

GitHub Sponsors ·
thanks.dev ·
Liberapay ·
Ko-fi ·
PayPal

Thank you to everyone supporting Blocky! 🙏

Changelog

Features

• c851293: feat(blocking): log the matched rule in the block reason (#2091) (@0xERR0R)
• 87be127: feat(cache): Shard the result cache to remove the single-lock read ceiling (#2097) (@0xERR0R)
• 7c6da15: feat(config): structurally merge config folder files (#1827) (#2112) (@0xERR0R)
• e7958e0: feat(lists): opt-in on-disk download cache with conditional revalidation (#2087) (@0xERR0R)
• b82199b: feat(querylog): ignore domains (exact/wildcard/regex) in query log (#2084) (@0xERR0R)
• bee2d8b: feat(resolver): UDP-first plain-DNS upstream and EDNS0 buffer floor (#2100) (@0xERR0R)
• 0b70e5c: feat(resolver): add DNS rebinding protection (#2111) (@0xERR0R)
• 1b8e08a: feat(resolver): pool DoT connections and enable TLS session resumption (#2098) (@0xERR0R)
• 4018d9e: feat: in-memory statistics subsystem with /api/stats REST endpoint (#2093) (@0xERR0R)
• 7abca44: feat: support PROXY protocol on proxied DoT/DoH listeners (#2094) (@kastakhov)

Bug fixes

• 2496d12: fix(dnssec): close DNSSEC validation bypass & cache-scope pollution (GHSA-x845-2f78-7v36) (#2119) (@0xERR0R)
• 06555e0: fix(metrics): bound reason label cardinality for blocked responses (#2114) (@0xERR0R)
• e0ea9b3: fix(resolver): eliminate recursive RLock deadlock in blocking group resolution (#2106) (@0xERR0R)
• 80f742e: fix(server): answer browser CORS preflights for custom headers and Private Network Access (#2109) (@0xERR0R)
• 9702c8f: fix(stats): populate allow/denylist counts in /api/stats at startup (#2113) (@0xERR0R)

Build and dependencies

• 821e378: build(deps): bump codecov/codecov-action from 6 to 7 (#2089) (@dependabot[bot])
• d63f84b: build(deps): bump github.com/0xERR0R/expiration-cache from 0.1.0 to 0.2.0 (#2095) (@dependabot[bot])
• 81f2b2a: build(deps): bump github.com/onsi/ginkgo/v2 from 2.29.0 to 2.30.0 (#2108) (@dependabot[bot])
• 9c5abdf: build(deps): bump github.com/onsi/ginkgo/v2 from 2.30.0 to 2.31.0 (#2116) (@dependabot[bot])
• 6c0ec5f: build(deps): bump github.com/onsi/gomega from 1.41.0 to 1.42.0 (#2115) (@dependabot[bot])
• 4beb9fe: build(deps): bump github.com/quic-go/quic-go from 0.59.1 to 0.60.0 (#2090) (@dependabot[bot])
• 8fe2202: build(deps): bump golang.org/x/net from 0.55.0 to 0.56.0 (#2101) (@dependabot[bot])
• 52fa6a4: build(deps): bump golang.org/x/sys from 0.45.0 to 0.46.0 (#2096) (@dependabot[bot])

Misc

• 1c9f717: ci(e2e): speed up e2e job via Ginkgo proc oversubscription (#2085) (@0xERR0R)
• 8d49922: ci: cross-compile multi-arch docker image instead of QEMU emulation (#2081) (@0xERR0R)
• 355a9a1: docs(grafana): redesign Grafana dashboard and update integration guide (#2110) (@0xERR0R)
• c791e80: perf(e2e): probe blocky healthcheck at 250ms during start period (#2086) (@0xERR0R)
• a0fb375: perf(lists): speed up blocklist loading (cache build + parsing) (#2083) (@0xERR0R)
• 316b073: perf(resolver): pre-classify client groups to cut per-query allocations (#2103) (@0xERR0R)
• d502806: perf(server): let Truncate decide response compression (#2102) (@0xERR0R)
• 8b32512: test(e2e): de-flake PROXY protocol and upstream init.strategy specs (#2099) (@0xERR0R)

❤️ Support Blocky

Blocky is free and open source, developed in my spare time — no telemetry, no ads, no hidden
filtering. If it's useful to you, please consider supporting its continued development:

GitHub Sponsors ·
thanks.dev ·
Liberapay ·
Ko-fi ·
PayPal

Thank you to everyone supporting Blocky! 🙏

Changelog

Features

• 132c42f: feat(config): validate and log ports.dohPath (#2072) (@0xERR0R)
• e43b5e5: feat(querylog): add SQLite query log target (#2080) (@0xERR0R)
• 5d806b6: feat(server): opt-in IP_FREEBIND for DNS listeners (#2078) (@0xERR0R)
• f18e52b: feat: capability-aware image that runs under drop:ALL (#2071) (@0xERR0R)
• bf19d6d: feat: config JSON schema generation and schema-driven validation (#2066) (@0xERR0R)
• 99ae703: feat: filter ipv6hint in HTTPS/SVCB RR when AAAA is filtered (#2070) (@0xERR0R)
• c44017a: feat: load sensitive config values from files (#2077) (@0xERR0R)
• e6b41db: feat: per-client DNS rate limiting (#2063) (@0xERR0R)
• f457ec9: feat: read bootstrap nameservers from a resolv.conf file (resolvFile) (#2068) (@0xERR0R)
• fdcf351: feat: resolve client names from hosts file and custom DNS (#1964) (#2069) (@0xERR0R)

Bug fixes

• 93cc238: fix(caching): sync prefetched entries to Redis (#2079) (@0xERR0R)
• 69b0663: fix(config): handle DNS stamp port on hostname field and bootstrap IPs (#2065) (@0xERR0R)
• 31f8df3: fix(querylog): build SQLite target only on modernc-supported platforms (#2082) (@0xERR0R)

Build and dependencies

• a5cdeb2: build(deps): bump github.com/go-chi/chi/v5 from 5.2.5 to 5.3.0 (#2074) (@dependabot[bot])
• 5a25f67: build(deps): bump github.com/mattn/go-colorable from 0.1.14 to 0.1.15 (#2075) (@dependabot[bot])
• 1da222a: build(deps): bump github.com/oapi-codegen/runtime from 1.4.0 to 1.4.1 (#2064) (@dependabot[bot])
• 6ff1d13: build(deps): bump golang.org/x/net from 0.54.0 to 0.55.0 (#2067) (@dependabot[bot])
• 63f8d9a: build: upgrade Go to 1.26.2 and golangci-lint to v2.12.2 (#2062) (@0xERR0R)

Misc

• e2de6ae: docs(redis): document unix socket support and add e2e test (#2076) (@0xERR0R)

❤️ Support Blocky

Blocky is free and open source, developed in my spare time — no telemetry, no ads, no hidden
filtering. If it's useful to you, please consider supporting its continued development:

GitHub Sponsors ·
thanks.dev ·
Liberapay ·
Ko-fi ·
PayPal

Thank you to everyone supporting Blocky! 🙏

Changelog

Features

• 0de3fac: feat(sudn): handle resolver.arpa zone per RFC 9462 (DDR) (#2059) (@0xERR0R)
• c32863d: feat: add DNS-over-QUIC (DoQ) upstream support (RFC 9250) (#2013) (@elsbrock)
• 22b0bdd: feat: add schedule-based blocking for deny/allowlist groups (#2037) (@alessandrocuzzocrea)
• 842dda9: feat: serve DoH over HTTP/3 (DoH3, RFC 9114) (#2060) (@0xERR0R)
• c95cfba: feat: validate allow/denylist references in ClientGroupsBlock (#2016) (@JenswBE)

Bug fixes

• 10d6446: fix(api): keep /api/query response unobfuscated when log.privacy is on (#2058) (@0xERR0R)
• fb28513: fix: enhance DNS bootstrapping by utilizing IPs from DNS stamps (#1995) (@0xERR0R)
• 2ffe18a: fix: use RFC 4034 canonical DNS name ordering for NSEC coverage check (#2017) (@0xERR0R)

Build and dependencies

• a8015c8: build(deps): bump codecov/codecov-action from 5 to 6 (#2029) (@dependabot[bot])
• 89aee54: build(deps): bump crazy-max/ghaction-docker-meta from 5 to 6 (#2005) (@dependabot[bot])
• 98f41c4: build(deps): bump dependabot/fetch-metadata from 2 to 3 (#2031) (@dependabot[bot])
• 83434c5: build(deps): bump docker/build-push-action from 6 to 7 (#2004) (@dependabot[bot])
• 0c9e176: build(deps): bump docker/login-action from 3 to 4 (#2003) (@dependabot[bot])
• 67dabab: build(deps): bump docker/setup-buildx-action from 3 to 4 (#2006) (@dependabot[bot])
• def8e95: build(deps): bump docker/setup-qemu-action from 3 to 4 (#2002) (@dependabot[bot])
• 733f21c: build(deps): bump github.com/alicebob/miniredis/v2 from 2.37.0 to 2.38.0 (#2055) (@dependabot[bot])
• 5130c3e: build(deps): bump github.com/breml/rootcerts from 0.3.4 to 0.3.5 (#2040) (@dependabot[bot])
• 08e53d7: build(deps): bump github.com/docker/go-connections from 0.6.0 to 0.7.0 (#2038) (@dependabot[bot])
• 95225f8: build(deps): bump github.com/jackc/pgx/v5 from 5.7.5 to 5.9.0 (#2039) (@dependabot[bot])
• 3274076: build(deps): bump github.com/jackc/pgx/v5 from 5.9.0 to 5.9.2 (#2041) (@dependabot[bot])
• 7a279fc: build(deps): bump github.com/moby/moby/api from 1.54.1 to 1.54.2 (#2050) (@dependabot[bot])
• 1a04f45: build(deps): bump github.com/oapi-codegen/runtime from 1.1.2 to 1.2.0 (#1999) (@dependabot[bot])
• 076c880: build(deps): bump github.com/oapi-codegen/runtime from 1.2.0 to 1.3.0 (#2021) (@dependabot[bot])
• b7fddae: build(deps): bump github.com/oapi-codegen/runtime from 1.3.0 to 1.3.1 (#2028) (@dependabot[bot])
• 9c8f11c: build(deps): bump github.com/oapi-codegen/runtime from 1.3.1 to 1.4.0 (#2030) (@dependabot[bot])
• 62a7e4c: build(deps): bump github.com/onsi/ginkgo/v2 from 2.28.1 to 2.28.2 (#2042) (@dependabot[bot])
• 56dfb1d: build(deps): bump github.com/onsi/ginkgo/v2 from 2.28.2 to 2.28.3 (#2044) (@dependabot[bot])
• adb9457: build(deps): bump github.com/onsi/ginkgo/v2 from 2.28.3 to 2.29.0 (#2057) (@dependabot[bot])
• 5d6da86: build(deps): bump github.com/onsi/gomega from 1.39.1 to 1.40.0 (#2043) (@dependabot[bot])
• 6ac0c33: build(deps): bump github.com/onsi/gomega from 1.40.0 to 1.41.0 (#2056) (@dependabot[bot])
• 14047f2: build(deps): bump github.com/quic-go/quic-go from 0.59.0 to 0.59.1 (#2054) (@dependabot[bot])
• 670daf3: build(deps): bump github.com/testcontainers/testcontainers-go/modules/mariadb from 0.40.0 to 0.41.0 (#2011) (@dependabot[bot])
• ecd41d6: build(deps): bump github.com/testcontainers/testcontainers-go/modules/postgres from 0.40.0 to 0.41.0 (#2012) (@dependabot[bot])
• 5c9df81: build(deps): bump github.com/testcontainers/testcontainers-go/modules/redis from 0.40.0 to 0.41.0 (#2009) (@dependabot[bot])
• 0f1b3f3: build(deps): bump go.opentelemetry.io/otel/sdk from 1.35.0 to 1.40.0 (#2001) (@dependabot[bot])
• 6a06aa4: build(deps): bump go.opentelemetry.io/otel/sdk from 1.39.0 to 1.43.0 (#2047) (@dependabot[bot])
• 394a585: build(deps): bump golang.org/x/net from 0.51.0 to 0.52.0 (#2014) (@dependabot[bot])
• f7718ae: build(deps): bump golang.org/x/net from 0.52.0 to 0.53.0 (#2036) (@dependabot[bot])
• 2ea2b65: build(deps): bump golang.org/x/net from 0.53.0 to 0.54.0 (#2053) (@dependabot[bot])
• 2d36b56: build(deps): bump google.golang.org/grpc from 1.73.0 to 1.79.3 (#2020) (@dependabot[bot])
• bdcd239: build(deps): bump testcontainers-go to v0.42.0 (#2046) (@0xERR0R)
• cb2ae25: build: update golangci-lint (#2008) (@0xERR0R)
• fa8250c: build: update goreleaser action (#2024) (@0xERR0R)

Misc

• 1c43054: perf(blocking): keep time.Parse off the schedule hot path (#2049) (@0xERR0R)
• b4a1d54: refactor(e2e): extend e2e tests (#2023) (@0xERR0R)
• 667044b: refactor: redis write through cache (#2025) (@0xERR0R)
• 835e018: refactor: small quick improvements (#2019) (@0xERR0R)
• 94e9212: test(e2e): smoke-test schedule-based blocking (#2048) (@0xERR0R)

Changelog

Features

• 0c35f21: feat: add RFC 7239 Forwarded header support for client IP parsing (#1941) (@0xERR0R)
• 011e3eb: feat: implement DNS64 support (#1933) (@0xERR0R)
• e199445: feat: improve IP parsing from X-Forwarded-For header (#1940) (@0xERR0R)

Bug fixes

• 257fe07: fix: Incorrect rate data shown on Grafana dashboards (#1948) (@mattdy)
• 1a4d22d: fix: db automigration with timescaledb (#1975) (@manofthepeace)
• 9874212: fix: use context based versions of net.Listen and net.Dial (#1952) (@sonjek)

Build and dependencies

• fe67404: build(deps): bump actions/checkout from 5 to 6 (#1943) (@dependabot[bot])
• 4752061: build(deps): bump actions/download-artifact from 6 to 7 (#1961) (@dependabot[bot])
• d459311: build(deps): bump actions/download-artifact from 7 to 8 (#2000) (@dependabot[bot])
• fa1614b: build(deps): bump actions/upload-artifact from 5 to 6 (#1960) (@dependabot[bot])
• 11b6f92: build(deps): bump actions/upload-artifact from 6 to 7 (#1998) (@dependabot[bot])
• e83805c: build(deps): bump filippo.io/edwards25519 from 1.1.0 to 1.1.1 (#1992) (@dependabot[bot])
• 4f62ec8: build(deps): bump github.com/alicebob/miniredis/v2 from 2.35.0 to 2.36.0 (#1976) (@dependabot[bot])
• 16644c5: build(deps): bump github.com/alicebob/miniredis/v2 from 2.36.0 to 2.36.1 (#1978) (@dependabot[bot])
• 36ae188: build(deps): bump github.com/alicebob/miniredis/v2 from 2.36.1 to 2.37.0 (#1996) (@dependabot[bot])
• 4733c6b: build(deps): bump github.com/breml/rootcerts from 0.3.3 to 0.3.4 (#1987) (@dependabot[bot])
• e4f7462: build(deps): bump github.com/go-chi/chi/v5 from 5.2.3 to 5.2.4 (#1972) (@dependabot[bot])
• f9dd4d2: build(deps): bump github.com/go-chi/chi/v5 from 5.2.4 to 5.2.5 (#1985) (@dependabot[bot])
• e66a29d: build(deps): bump github.com/miekg/dns from 1.1.68 to 1.1.69 (#1959) (@dependabot[bot])
• 8e69355: build(deps): bump github.com/miekg/dns from 1.1.69 to 1.1.70 (#1968) (@dependabot[bot])
• 5e8b555: build(deps): bump github.com/miekg/dns from 1.1.70 to 1.1.72 (#1977) (@dependabot[bot])
• ef5dc97: build(deps): bump github.com/onsi/ginkgo/v2 from 2.27.2 to 2.27.3 (#1956) (@dependabot[bot])
• 670542b: build(deps): bump github.com/onsi/ginkgo/v2 from 2.27.3 to 2.27.4 (#1966) (@dependabot[bot])
• e062742: build(deps): bump github.com/onsi/ginkgo/v2 from 2.27.4 to 2.27.5 (#1970) (@dependabot[bot])
• 4926d16: build(deps): bump github.com/onsi/ginkgo/v2 from 2.27.5 to 2.28.1 (#1981) (@dependabot[bot])
• ca0da10: build(deps): bump github.com/onsi/gomega from 1.38.2 to 1.38.3 (#1955) (@dependabot[bot])
• 567a738: build(deps): bump github.com/onsi/gomega from 1.38.3 to 1.39.0 (#1967) (@dependabot[bot])
• c3aab87: build(deps): bump github.com/onsi/gomega from 1.39.0 to 1.39.1 (#1982) (@dependabot[bot])
• ef79a67: build(deps): bump github.com/sirupsen/logrus from 1.9.3 to 1.9.4 (#1974) (@dependabot[bot])
• 6775759: build(deps): bump github.com/spf13/cobra from 1.10.1 to 1.10.2 (#1953) (@dependabot[bot])
• 71c39fc: build(deps): bump golang.org/x/crypto from 0.44.0 to 0.45.0 (#1939) (@dependabot[bot])
• be31648: build(deps): bump golang.org/x/net from 0.47.0 to 0.48.0 (#1957) (@dependabot[bot])
• a574078: build(deps): bump golang.org/x/net from 0.48.0 to 0.49.0 (#1971) (@dependabot[bot])
• 6f3f295: build(deps): bump golang.org/x/net from 0.49.0 to 0.50.0 (#1988) (@dependabot[bot])
• 6a75afb: build(deps): bump golang.org/x/net from 0.50.0 to 0.51.0 (#1997) (@dependabot[bot])

Misc

• 439e99b: Add Blocky Visor to web UIs section in installation.md (#1993) (@JCHHeilmann)
• ced469f: refactor: centralize DNS response creation logic with helper functions (#1942) (@0xERR0R)
• 3075c38: refactor: clean up obsolete Go syntax (#1951) (@sonjek)
• 9fe42a8: refactor: simplify code for improved readability and maintainability (#1945) (@0xERR0R)
• 6581668: refactor: use mockery for mocks (#1944) (@0xERR0R)
• 55ab95e: test(metrics): Prometheus metrics (#1868) (@zeilenschubser)

Changelog

Features

• 26ac90c: feat: add MIPS architecture builds (#1929) (@0xERR0R)

Bug fixes

• 605a361: fix: handle DNSSEC validation for large RSA exponents and improve DNSKEY matching (#1935) (@0xERR0R)

Misc

• b776ae5: refactor: remove duplicated code patterns in resolver and cmd packages (#1932) (@Copilot)

Changelog

Bug fixes

• 5657ce8: fix: resolve DNSSEC validation issue for CNAMEs in unsigned zones (#1930) (@0xERR0R)

Build and dependencies

• f4b6b75: build: Update regex for bug fixes in goreleaser config (@0xERR0R)

Misc

• 0a3c724: refactor: remove unused code (#1928) (@0xERR0R)

Changelog

Features

• 77578da: feat: add DNSSEC validation (#1914) (@0xERR0R)
• b29eab4: feat: add SOA records to NXDOMAIN responses for RFC 2308 compliance (#1895) (@0xERR0R)
• d0681ae: feat: enhance error messages with more context (#1894) (@0xERR0R)
• ac8ca7d: feat: respect NO_COLOR environment variable (#1911) (@aanderse)
• 629b4f0: feat: support DNS Stamp upstream format (#1922) (@0xERR0R)

Bugfixes

• 8aad53e: fix: TCP response truncation (#1904) (@TimQuelch)
• 9d4a58c: fix: allow list group initialization with partial source failures (#1889) (@0xERR0R)
• 0993a17: fix: ensure HTTP response bodies are drained before closing for connection reuse (#1924) (@0xERR0R)
• 1a98cda: fix: ensure conditional upstreams initialize independently of default upstreams (#1890) (@0xERR0R)
• 0804760: fix: resolve panic when CNAME points to external domain (#1867) (#1884) (@0xERR0R)

Build and dependencies

• 0cd5be8: build(deps): bump actions/download-artifact from 5 to 6 (#1907) (@dependabot[bot])
• 5db30c4: build(deps): bump actions/upload-artifact from 4 to 5 (#1908) (@dependabot[bot])
• fc7ebe3: build(deps): bump amannn/action-semantic-pull-request from 5 to 6 (#1897) (@dependabot[bot])
• 6a4d411: build(deps): bump github.com/avast/retry-go/v4 from 4.6.1 to 4.7.0 (#1888) (@dependabot[bot])
• 9e293c0: build(deps): bump github.com/breml/rootcerts from 0.3.1 to 0.3.2 (#1886) (@dependabot[bot])
• e81bf41: build(deps): bump github.com/breml/rootcerts from 0.3.2 to 0.3.3 (#1912) (@dependabot[bot])
• 073c8bf: build(deps): bump github.com/docker/docker from 28.5.1+incompatible to 28.5.2+incompatible (#1915) (@dependabot[bot])
• 2dac748: build(deps): bump github.com/onsi/ginkgo/v2 from 2.26.0 to 2.27.1 (#1906) (@dependabot[bot])
• 8f534e6: build(deps): bump github.com/onsi/ginkgo/v2 from 2.27.1 to 2.27.2 (#1909) (@dependabot[bot])
• 7fa1c78: build(deps): bump github.com/testcontainers/testcontainers-go from 0.39.0 to 0.40.0 (#1916) (@dependabot[bot])
• 5b147cc: build(deps): bump github.com/testcontainers/testcontainers-go/modules/mariadb from 0.39.0 to 0.40.0 (#1918) (@dependabot[bot])
• 80aeaa9: build(deps): bump github.com/testcontainers/testcontainers-go/modules/postgres from 0.39.0 to 0.40.0 (#1917) (@dependabot[bot])
• 1cdaf72: build(deps): bump github.com/testcontainers/testcontainers-go/modules/redis from 0.39.0 to 0.40.0 (#1919) (@dependabot[bot])
• 7663b7d: build(deps): bump golang.org/x/net from 0.46.0 to 0.47.0 (#1925) (@dependabot[bot])
• 8a212de: build(deps): bump gorm.io/gorm from 1.31.0 to 1.31.1 (#1913) (@dependabot[bot])
• 157f91f: build(release): Add changelog groups for features and fixes (@0xERR0R)
• d3e8b3b: build: add pr title validation workflow (#1893) (@0xERR0R)
• 44074e4: build: cache Go dependencies in Docker builds (#1899) (@0xERR0R)
• 21a65de: build: enable dependabot automerge (#1891) (@0xERR0R)
• 8bf91c4: build: remove unused tools (#1900) (@0xERR0R)
• 4656429: build: simplify build (#1892) (@0xERR0R)
• ab77fd5: build: update tool dependencies (#1898) (@0xERR0R)
• 824ca3e: build: use Docker for mkdocs-material documentation server (@0xERR0R)

Changelog

• e99f1bd: build(deps): bump actions/checkout from 4 to 5 (#1836) (@dependabot[bot])
• 8ef51ee: build(deps): bump actions/download-artifact from 4 to 5 (#1830) (@dependabot[bot])
• 92ee006: build(deps): bump actions/setup-go from 5 to 6 (#1857) (@dependabot[bot])
• 26aaf7b: build(deps): bump actions/setup-python from 5 to 6 (#1859) (@dependabot[bot])
• b249c5c: build(deps): bump actions/stale from 9 to 10 (#1858) (@dependabot[bot])
• 6e69dbf: build(deps): bump github.com/alicebob/miniredis/v2 from 2.34.0 to 2.35.0 (#1789) (@dependabot[bot])
• 2575a36: build(deps): bump github.com/breml/rootcerts from 0.2.21 to 0.2.22 (#1795) (@dependabot[bot])
• 4958089: build(deps): bump github.com/breml/rootcerts from 0.2.22 to 0.3.0 (#1800) (@dependabot[bot])
• ac5d872: build(deps): bump github.com/breml/rootcerts from 0.3.0 to 0.3.1 (#1815) (@dependabot[bot])
• cd79244: build(deps): bump github.com/docker/docker (#1785) (@dependabot[bot])
• ad473dd: build(deps): bump github.com/docker/docker (#1801) (@dependabot[bot])
• 375614e: build(deps): bump github.com/docker/docker (#1805) (@dependabot[bot])
• c5ed579: build(deps): bump github.com/docker/docker (#1807) (@dependabot[bot])
• b088ba0: build(deps): bump github.com/docker/docker (#1821) (@dependabot[bot])
• 604e0ca: build(deps): bump github.com/docker/docker (#1853) (@dependabot[bot])
• c0284bb: build(deps): bump github.com/docker/docker (#1877) (@dependabot[bot])
• 6da2742: build(deps): bump github.com/docker/docker (#1883) (@dependabot[bot])
• 984a07e: build(deps): bump github.com/docker/go-connections from 0.5.0 to 0.6.0 (#1832) (@dependabot[bot])
• 7c8fe37: build(deps): bump github.com/go-chi/chi/v5 from 5.2.1 to 5.2.2 (#1799) (@dependabot[bot])
• 59d24ef: build(deps): bump github.com/go-chi/chi/v5 from 5.2.2 to 5.2.3 (#1848) (@dependabot[bot])
• 62610f6: build(deps): bump github.com/go-chi/cors from 1.2.1 to 1.2.2 (#1804) (@dependabot[bot])
• 9a1b6a6: build(deps): bump github.com/miekg/dns from 1.1.67 to 1.1.68 (#1824) (@dependabot[bot])
• 45141a7: build(deps): bump github.com/oapi-codegen/runtime from 1.1.1 to 1.1.2 (#1810) (@dependabot[bot])
• 859e729: build(deps): bump github.com/onsi/ginkgo/v2 from 2.23.4 to 2.25.0 (#1839) (@dependabot[bot])
• c003d21: build(deps): bump github.com/onsi/ginkgo/v2 from 2.25.0 to 2.25.1 (#1840) (@dependabot[bot])
• 3dda82e: build(deps): bump github.com/onsi/ginkgo/v2 from 2.25.1 to 2.25.2 (#1850) (@dependabot[bot])
• 1bbfe6a: build(deps): bump github.com/onsi/ginkgo/v2 from 2.25.2 to 2.25.3 (#1856) (@dependabot[bot])
• 1df69da: build(deps): bump github.com/onsi/ginkgo/v2 from 2.25.3 to 2.26.0 (#1878) (@dependabot[bot])
• 3015bc3: build(deps): bump github.com/onsi/gomega from 1.37.0 to 1.38.0 (#1816) (@dependabot[bot])
• 7a4a4e3: build(deps): bump github.com/onsi/gomega from 1.38.0 to 1.38.1 (#1842) (@dependabot[bot])
• ed6a3c0: build(deps): bump github.com/onsi/gomega from 1.38.1 to 1.38.2 (#1844) (@dependabot[bot])
• 3bbca25: build(deps): bump github.com/prometheus/client_golang (#1822) (@dependabot[bot])
• 8683a96: build(deps): bump github.com/prometheus/client_golang (#1860) (@dependabot[bot])
• 523db8b: build(deps): bump github.com/ramr/go-reaper from 0.2.3 to 0.3.0 (#1802) (@dependabot[bot])
• 0ca5ca1: build(deps): bump github.com/ramr/go-reaper from 0.3.0 to 0.3.1 (#1818) (@dependabot[bot])
• c941708: build(deps): bump github.com/spf13/cobra from 1.9.1 to 1.10.1 (#1851) (@dependabot[bot])
• 572efd5: build(deps): bump github.com/stretchr/testify from 1.10.0 to 1.11.0 (#1841) (@dependabot[bot])
• 6849ac7: build(deps): bump github.com/stretchr/testify from 1.11.0 to 1.11.1 (#1847) (@dependabot[bot])
• 6be7ee6: build(deps): bump github.com/testcontainers/testcontainers-go (#1811) (@dependabot[bot])
• 0bd3895: build(deps): bump github.com/testcontainers/testcontainers-go/modules/mariadb (#1812) (@dependabot[bot])
• a5a686c: build(deps): bump github.com/testcontainers/testcontainers-go/modules/mariadb (#1872) (@dependabot[bot])
• b705d43: build(deps): bump github.com/testcontainers/testcontainers-go/modules/postgres (#1813) (@dependabot[bot])
• 283641b: build(deps): bump github.com/testcontainers/testcontainers-go/modules/postgres (#1873) (@dependabot[bot])
• 9dc25c7: build(deps): bump github.com/testcontainers/testcontainers-go/modules/redis (#1809) (@dependabot[bot])
• 0e11a7c: build(deps): bump github.com/testcontainers/testcontainers-go/modules/redis (#1871) (@dependabot[bot])
• 07d25bd: build(deps): bump github/codeql-action from 3 to 4 (#1881) (@dependabot[bot])
• 52f6f74: build(deps): bump golang.org/x/net from 0.40.0 to 0.41.0 (#1790) (@dependabot[bot])
• 85b3ebd: build(deps): bump golang.org/x/net from 0.41.0 to 0.42.0 (#1808) (@dependabot[bot])
• 4fffb35: build(deps): bump golang.org/x/net from 0.42.0 to 0.43.0 (#1833) (@dependabot[bot])
• 8b4c3ff: build(deps): bump golang.org/x/net from 0.43.0 to 0.44.0 (#1862) (@dependabot[bot])
• 7cc8a26: build(deps): bump golang.org/x/net from 0.44.0 to 0.45.0 (#1880) (@dependabot[bot])
• 75f7750: build(deps): bump golang.org/x/net from 0.45.0 to 0.46.0 (#1882) (@dependabot[bot])
• 21401ec: build(deps): bump gorm.io/driver/mysql from 1.5.7 to 1.6.0 (#1787) (@dependabot[bot])
• fdb706a: build(deps): bump gorm.io/driver/postgres from 1.5.11 to 1.6.0 (#1783) (@dependabot[bot])
• cb4d5e8: build(deps): bump gorm.io/driver/sqlite from 1.5.7 to 1.6.0 (#1788) (@dependabot[bot])
• 68f76a6: build(deps): bump gorm.io/gorm from 1.25.12 to 1.26.1 (#1775) (@dependabot[bot])
• 4bed325: build(deps): bump gorm.io/gorm from 1.26.1 to 1.30.0 (#1782) (@dependabot[bot])
• ed025f3: build(deps): bump gorm.io/gorm from 1.30.0 to 1.30.1 (#1817) (@dependabot[bot])
• bb27697: build(deps): bump gorm.io/gorm from 1.30.1 to 1.30.2 (#1849) (@dependabot[bot])
• 7376e4e: build(deps): bump gorm.io/gorm from 1.30.2 to 1.30.3 (#1854) (@dependabot[bot])
• 023e1dd: build(deps): bump gorm.io/gorm from 1.30.3 to 1.30.5 (#1861) (@dependabot[bot])
• 771f9ea: build(deps): bump gorm.io/gorm from 1.30.5 to 1.31.0 (#1866) (@dependabot[bot])
• 353b4e5: build: add additional linters (@0xERR0R)
• 95bc394: build: update golang version (@0xERR0R)
• 9ec43b5: build: upgrade golangci-lint (@0xERR0R)
• fa1a95e: build: use optional external Goproxy (@0xERR0R)
• 098f17b: feat(config): support YAML arrays for ports (@ThinkChaos)
• a2cfb0b: feat: add robots.txt (#1864) (@0xERR0R)
• 9f4db47: feat: make DoH query path configurable (#1843) (@0xERR0R)
• 73f6f74: feat: skip Adblock identifier header and comments (#1876) (@metalinspired)
• d34eb4c: fix(parsers): improve hosts entry normalization for ABP-style and Unicode domains (@metalinspired)
• 639257b: fix: disable go-reaper pid check (#1779) (@0xERR0R)
• 262cd2e: fix: prevent DoS in DOH endpoits (#1826) (@0xERR0R)
• 371e39b: refactor: move cache to external dependency (#1814) (@0xERR0R)

Fixes multi-arch images for arm64/arm7 (#1776)