Say the vendored hickory leaves out .cargo_vcs_info.json #197

Merged
jcoffey-dev merged 1 commits from docs/hickory-vendored-note into main 2026-10-12 15:49:07 +00:00
+2 -2
View File
@@ -20,8 +20,8 @@ UDP answer.
None. Each directory is `cargo package --no-verify` of that commit (the
manifest normalized, so it builds outside hickory's workspace), without
`Cargo.lock` and `Cargo.toml.orig`. `.cargo_vcs_info.json` records the
commit.
`Cargo.lock`, `Cargo.toml.orig` and `.cargo_vcs_info.json` (the
repository ignores dotfiles; the commit is recorded above).
Both answers hickory 0.26.3 called bogus in production (an insecure
delegation below an unsigned zone, and a signed CNAME to a name without the