Bump dnsjava:dnsjava from 2.1.9 to 3.6.4

[dependabot]

Bumps dnsjava:dnsjava from 2.1.9 to 3.6.4.

Release notes

Sourced from dnsjava:dnsjava's releases.

v3.6.4

• Fix Zone-class serialization (#391)
• Avoid Double DNS Lookup for Names with Labels >= ndots (#388)
• Prevent NPE when calling Message#getTSIG() on DNS request with bad header (#384)
• Unwrap an exception in the legacy callback-based async interface (#383)
• Prevent ConcurrentModificationException in NIO clients (#379, @​bhaveshthakker)
• Handle null in all setSearchPath overloads equally (#157)
• Reduce warning level of invalid hosts file entries (#371)
• Remove a lock on the hot-path in the hosts file parser (#371)
• DoH Resolver makes use of the Multi-Release jar and tests are executed for Java 8 and 11+ implementations (#385)
• Fix DoH Resolver initial request delay (#385)

Full Changelog: dnsjava/dnsjava@v3.6.3...v3.6.4

v3.6.3

• Support custom hosts file size (@​flaming-archer, #349)
• Fix origin handling in zone loaded from file or stream (#346)
• Prevent TCP port leak when closing IO (#351)
• Fix confusing parameter name in CNAMERecord (@​chkal, #354)
• Optionally disable ShutdownHook in NioClient (@​SvenssonWeb, #359)
• TSIG algorithm names from RFC 8945
• Message.toWire can exceed MAXLENGTH (#355)
• TCP query might fail if the shared buffer is full (#357)
• Dynamic updates silently truncates records (#356)
• Fix DoH initial request using recommended nanoTime calculation (@​LinZong, #345)

v3.6.2

• Add new IANA Trust Anchor (@​technolord, #337)
• Fix Zone handling with signed SOA (@​frankarinnet, #335)

v3.6.1

• Properly fix LookupSession doesn't cache CNAMEs (#316)
• Move JEP-418 SPI to Java 18 to support EOL workflows (#329)

v3.6.0

• Fix CVE-2024-25638 (GHSA-cfxw-4h78-h7fw) Lookup and LookupSession do not sanitize input properly, allowing to smuggle additional responses, even with DNSSEC. I would like to thank Thomas Bellebaum from Fraunhofer AISEC (@​bellebaum) and Martin Schanzenbach (@​schanzen) for reporting and assisting me with this issue.
• Fix CVE-2023-50387 (GHSA-crjg-w57m-rqqf) Denial-of-Service Algorithmic Complexity Attacks (KeyTrap)
• Fix CVE-2023-50868 (GHSA-mmwx-rj87-vfgr) NSEC3 closest encloser proof can exhaust CPU resources (KeyTrap)
• Fix running all DNSSEC on the specified executor
• Add new DNSSEC algorithm constants for SM2SM3 and ECC-GOST12
• Add A/AAAA record constructor with IP address byte array
• Validate DS record digest lengths (#250)
• Fix NPE in SimpleResolver on invalid responses (#277)
• Add support for JEP 418: Internet-Address Resolution SPI (#290)
• Full JPMS support (#246)
• Pluggable I/O for SimpleResolver (@​chrisruffalo, #253)

... (truncated)

Changelog

Sourced from dnsjava:dnsjava's changelog.

01/18/2026

• 3.6.4 released
• Fix Zone-class serialization (#391)
• Avoid Double DNS Lookup for Names with Labels >= ndots (#388)
• Prevent NPE when calling Message#getTSIG() on DNS request with bad header (#384)
• Unwrap an exception in the legacy callback-based async interface (#383)
• Prevent ConcurrentModificationException in NIO clients (#379, @​bhaveshthakker)
• Handle null in all setSearchPath overloads equally (#157)
• Reduce warning level of invalid hosts file entries (#371)
• Remove a lock on the hot-path in the hosts file parser (#371)
• DoH Resolver makes use of the Multi-Release jar and tests are executed for Java 8 and 11+ implementations (#385)
• Fix DoH Resolver initial request delay (#385)

01/26/2025

• 3.6.3 released
• Support custom hosts file size (@​flaming-archer, #349)
• Fix origin handling in zone loaded from file or stream (#346)
• Prevent TCP port leak when closing IO (#351)
• Fix confusing parameter name in CNAMERecord (@​chkal, #354)
• Optionally disable ShutdownHook in NioClient (@​SvenssonWeb, #359)
• TSIG algorithm names from RFC 8945
• Message.toWire can exceed MAXLENGTH (#355)
• TCP query might fail if the shared buffer is full (#357)
• Dynamic updates silently truncates records (#356)
• Fix DoH initial request using recommended nanoTime calculation (@​LinZong, #345)

09/21/2024

• 3.6.2 released
• Add new IANA Trust Anchor (@​technolord, #337)
• Fix Zone handling with signed SOA (@​frankarinnet, #335)

07/28/2024

• 3.6.1 released
• Properly fix LookupSession doesn't cache CNAMEs (#316)
• Move JEP-418 SPI to Java 18 to support EOL workflows (#329)

07/21/2024

• 3.6.0 released
• Fix CVE-2024-25638 (GHSA-cfxw-4h78-h7fw) Lookup and LookupSession do not sanitize input properly, allowing to smuggle additional responses, even with DNSSEC. I would like to thank Thomas Bellebaum from Fraunhofer AISEC (@​bellebaum) and Martin Schanzenbach (@​schanzen) for reporting and assisting me with this issue.
• Fix CVE-2023-50387 (GHSA-crjg-w57m-rqqf) Denial-of-Service Algorithmic Complexity Attacks (KeyTrap)

... (truncated)

Commits

• 71fc443 Release v3.6.4
• 7b7c929 Downgrade/Upgrade spotless for various Java versions
• 6f65a36 Replace defunct Maven Central badge
• f660842 Update dependencies, support Java 25 builds
• 34ba40e Prevent NPE during shutdown when the hook is already released
• 865240c Fix and validate Zone serialization via Java objects
• 6a0a1d7 Prevent identical queries for names exceeding ndots
• 4b84d92 Migrate ossrh to central publisher portal
• 5ac65c2 Remove deprecated Maven flags
• 793cd22 Improve log message
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)