Log message:
ldns: updated to 1.9.2

1.9.2   2026-06-10
* Fix to set VERSION_INFO to create .so.3 instead of .so.11 which will
  be reserved for a future 1.10.0 release

1.9.1   2026-06-10
* Bugfix: Insufficient verification that responses belong to a
  query (CVE-2026-10846). Thanks Pablo Ruiz from 'codecome.ai'

Log message:
ldns drill: updated to 1.9.0

1.9.0

* Make ldns_calc_keytag() available for CDNSKEY RR
  Thanks tgreenx and pnax
* Make ldns_key_rr2ds() available for CDNSKEY RR
  Thanks tgreenx
* Make ldns_rr_compare_{ds,ds_dnskey}() available for
  CDS and CDNSKEY RRs. Thanks tgreenx
* Make drill trace use IPv6 when used with -6
  Thanks Paul Radford
* Unquoted "value" rdata for CAA records fail to validate.
  Follows the long string unquoted syntax from RFC8659, section 4.1.1.
* ldns-read-zone -u fails if a type is the only type in a
  window and the type modulo 256 is equal to zero.
* Intermittent build failure with multi-job
  builds (make -j).
* Add ldns-verify-zone -s option. It checks all signature results,
  instead of passing by when one RRSIG validates. That prints output
  for spurious RRSIGs, the failures for them.
* Fix RR types NSAP-PTR, GPOS and RESINFO to print unquoted strings.
* Fix memory leak when trying to read zones that have equal RRs.
  the ldns_dnssec_*_add_rr() functions now return LDNS_STATUS_EQUAL_RR
  when an already existing RR is tried to be added. This is a API
  change, hence this also bumps the version to 1.9.0
* ensure returning pkt with LDNS_STATUS_OK. Thanks grobian.
* Fix RR Type AMTRELAY type nogateway, to print relay '.',
  and memory leaks in parsing it.
* DSYNC is no longer a draft RR type and compiled by default
* RFC 9824 support: Compact Denial of Existence in DNSSEC
* The HHIT and BRID draft RR types
* If RNG is already seeded, return early.
  Thanks crrodriguez
* Improve error messages. Thanks jschauma
* Use SWIG_AppendOutput to support swig 4.3
  Thanks pemensik
* Homogenize paths for source files during compilation
  Thanks duthils
* ldns-walk fails after update from 1.8.3 to 1.8.4
  Thanks jschauma
* Allow compiled tests to link to ldns statically via
  environment variable. Thanks FGasper and pemensik
* Optionally exclude ZONEMD RRs in ldns-compare-zone
  Thanks gjherbiet
* A WALLET RR breaks TXT signing. Thanks bortzmeyer
* ldns-verify-zone hangs with missing NSEC3 RRs.
  Thanks Roy Arends

Log message:
ldns drill: updated to 1.8.4

1.8.4   2024-07-19
* Fix building documentation in build directory.
  Thanks Michael Tokarev
* Updated the configure script for split openssl directories.
* Fix for windows compile; asctime_r compat, search for inet_ntop
  in ws2_32, avoid double decl of inet_ntop, check for symlink call,
  include config.h in edns.c, have socket compare use correct
  signedness, add -u repo option to makewin.sh, fix quoting in
  makewin.sh and check return value of bind and connect in net.c
  for failure instead of a socket type. And fix to install .exe files.
* Fix to compile with OpenSSL 3.2. Update acx_nlnetlabs.m4 to 48.
* Fix to compile DLLs, and pick out of the lib64 dir, and include
  libssp-0.dll and ldns-config.
* bugfix: Resolver uses nameserver commented out in
  /etc/resolv.conf. Thanks grembo.
* Added RESINFO rrtype.
* Added WALLET rrtype.
* Fix coverity cited problems. Thanks Enji Cooper.
* Several Python SWIG issues. Thanks Florian Weimer.
* const ldns_rdf * typemap fixes to support swig-4.2.0
  Thanks William S Fulton
* keys.c: fix build with libressl >= 3.8.1
  Thanks Fabrice Fontaine
* Portable executable progs don't underlink to libldns
  Thanks Ørjan Malde
* Update declaration for function with no argument
  Thanks Ed Maste
* fix the build in FreeBSD's base system
  Thanks Pierre Pronchery and Dag-Erling Smørgrav
* improve 'next-label' algorithm in ldns-walk
  Thanks Jelte Jansen
* Add functions to extract RFC 8914 extended errors
  Thanks Roland van Rijswijk-Deij
* Expand CI: Cygwin, BSDs, musl libc, 32-bit, and big-endian
  Thanks Felipe Gasper
* 16-unit-tests-edns: Fix leak & warnings
  Thanks Felipe Gasper
* Added NXNAME rrtype.
* Openssl no engine improved support

Log message:
Don't hard-code SYSCONFDIR.

The default for LDNS_TRUST_ANCHOR_FILE is dubious, since we could use
the unbound from -base, and we don't depend on net/unbound either.
It can be overridden on the command line, though.

Log message:
net/ldns: put version# in version.mk, for use by net/drill as well.

Re-sort PLIST.  No change in installed bits, so no PKGREVISION bump.

Log message:
*: bump for openssl 3

Log message:
net/ldns: fix PLIST.

Log message:
Update net/ldns to version 1.8.3.

Pkgsrc changes:
 * Only checksum changes.

Upstream changes:
1.8.3   2022-08-15
        * bugfix #183: Assertion failure with OPT record without rdata.
          This caused packet creation with only a DO bit (for DNSSEC OK)
          to crash. Thanks Anand Buddhdev and others for reporting this
          so quickly.
        * Fix for syntax error in pyldns

1.8.2   2022-08-12
        * bugfix #147: Allow for tabs in whitespace before quoted rdata
          fields. Thanks Felipe Gasper
        * bugfix #149: Add some missing [out] annotations to doxygen
          parameters. Thanks aldot.
        * Fix build error on Solaris 10 with inet_ntop redeclaration error.
        * Fix -U flag with ldns-signzone. Thanks Ulrich and Jonathan
        * Enable compile of SVCB and HTTPS support by default.
        * bugfix #179: Free line memory even if zone file parsing fails
          Thanks Claudius Zingerli
        * bugfix #166: Grow buffer when writing chars and fixed size
          strings when converting to presentation format, preventing
          potential assersion errors.
        * bugfix #46: Print network errors when secure tracing.
          Thanks reedjc
        * EDNS0 Option handling and conversion into presentation format.
        * bugfix #145: ldns-verify-zone should not call occluded records
          glue. Thanks Habbie

1.8.1   2021-12-03
        * bugfix #146: ldns-1.7.1 had soname 3.0, so ldns-1.8.x soname
          needs to larger. Thanks Leah Neukirchen & Felipe Gasper
        * Undo PR#123 fix ldns.pc installation when building out-of-source
          Thanks Axel Xu