Merge upstream v0.16.26

Conversation 0 Commits 3 Files Changed 250

+77343 -263

3 Commits

Author	SHA1	Message	Date
jcoffey-dev	8a4f1febe5	Check the hickory upgrade test by its outcome ci / fork-checks (pull_request) Skipped Details ci / build (pull_request) Skipped Details github/ci (branch) GitHub Actions Details ci / github (pull_request) Successful in 26m6s Details The vendored hickory proves the delegation below google.com insecure itself, so validated_lookup no longer takes the recheck path for aspmx.l.google.com and the test's `validated.insecure` assertion failed. Assert what matters instead: the answer comes out insecure, by either path. Through Hetzner's resolver, hickory alone also accepts the signed-CNAME TLSA denial now; the recheck stays as a fallback.	2026-10-12 07:39:24 -07:00
jcoffey-dev	a6d8f11f8f	Merge upstream v0.16.26	2026-10-12 07:22:52 -07:00
jcoffey-dev	1fd32c51a0	Import upstream v0.16.26, stripped Upstream commit: 18f4e9505027d790fd7e9fdad7f922be6719101d Enterprise-only files removed or emptied: 63 Enterprise-only snippets removed: 118 in 50 files Dangling module declarations removed: 5 Edits turning enterprise off: 25 Third-party code: 14 files, 0 not in THIRD-PARTY.md Renamed identifiers: 67 in 19 files Verification: clean The same Enterprise footprint as v0.16.25. The build check is clean apart from the expected errors in the rebuilt-feature tests. Adds sd_notify readiness, an x86-64-v2 baseline for glibc x86_64 builds with a startup CPU check, and hickory from upstream's patched branch. Fixes RocksDB blob GC rewriting every blob on compaction, a milter stall with SMFIP_NOHDRS, OIDC's email-claim fallback, Mailbox/set moves and case-only renames, EmailSubmission onSuccess* naming an existing submission, and VacationResponse/set enabling an empty script.	2026-10-12 07:20:53 -07:00

Author

SHA1

Message

Date

jcoffey-dev

8a4f1febe5

Check the hickory upgrade test by its outcome

ci / fork-checks (pull_request) Skipped

Details

ci / build (pull_request) Skipped

Details

github/ci (branch) GitHub Actions

Details

ci / github (pull_request) Successful in 26m6s

Details

The vendored hickory proves the delegation below google.com insecure
itself, so validated_lookup no longer takes the recheck path for
aspmx.l.google.com and the test's `validated.insecure` assertion failed.
Assert what matters instead: the answer comes out insecure, by either
path. Through Hetzner's resolver, hickory alone also accepts the
signed-CNAME TLSA denial now; the recheck stays as a fallback.

2026-10-12 07:39:24 -07:00

jcoffey-dev

a6d8f11f8f

Merge upstream v0.16.26

2026-10-12 07:22:52 -07:00

jcoffey-dev

1fd32c51a0

Import upstream v0.16.26, stripped

Upstream commit: 18f4e9505027d790fd7e9fdad7f922be6719101d
Enterprise-only files removed or emptied: 63
Enterprise-only snippets removed: 118 in 50 files
Dangling module declarations removed: 5
Edits turning enterprise off: 25
Third-party code: 14 files, 0 not in THIRD-PARTY.md
Renamed identifiers: 67 in 19 files
Verification: clean

The same Enterprise footprint as v0.16.25. The build check is clean
apart from the expected errors in the rebuilt-feature tests. Adds
sd_notify readiness, an x86-64-v2 baseline for glibc x86_64 builds
with a startup CPU check, and hickory from upstream's patched branch.
Fixes RocksDB blob GC rewriting every blob on compaction, a milter
stall with SMFIP_NOHDRS, OIDC's email-claim fallback, Mailbox/set
moves and case-only renames, EmailSubmission onSuccess* naming an
existing submission, and VacationResponse/set enabling an empty script.

2026-10-12 07:20:53 -07:00

Merge upstream v0.16.26 #196