Build(deps): Bump dnsjava:dnsjava from 2.1.9 to 3.6.5

[dependabot]

Bumps dnsjava:dnsjava from 2.1.9 to 3.6.5.

Release notes

Sourced from dnsjava:dnsjava's releases.

v3.6.5

• Handle canceled keys in UDP client (#129)
• Handle interrupts on NIO selector thread (#396, #397)
• Fix config option key names in README (@​lostnet, #399)
• Handle invalid/uninitialized file times in hosts file (#400)
• Add getXxxAsByteArray() getters and overload with escape boolean (@​MMauro94, #404, #405)

Note: The tag for this release is v3.6.5-1, because the v3.6.5 tag accidentally pointed to a local branch and cannot be changed anymore because of the immutable releases. The Maven artifacts from the Actions run are correct.

Full Changelog: dnsjava/dnsjava@v3.6.4...v3.6.5-1

v3.6.4

• Fix Zone-class serialization (#391)
• Avoid Double DNS Lookup for Names with Labels >= ndots (#388)
• Prevent NPE when calling Message#getTSIG() on DNS request with bad header (#384)
• Unwrap an exception in the legacy callback-based async interface (#383)
• Prevent ConcurrentModificationException in NIO clients (#379, @​bhaveshthakker)
• Handle null in all setSearchPath overloads equally (#157)
• Reduce warning level of invalid hosts file entries (#371)
• Remove a lock on the hot-path in the hosts file parser (#371)
• DoH Resolver makes use of the Multi-Release jar and tests are executed for Java 8 and 11+ implementations (#385)
• Fix DoH Resolver initial request delay (#385)

Full Changelog: dnsjava/dnsjava@v3.6.3...v3.6.4

v3.6.3

• Support custom hosts file size (@​flaming-archer, #349)
• Fix origin handling in zone loaded from file or stream (#346)
• Prevent TCP port leak when closing IO (#351)
• Fix confusing parameter name in CNAMERecord (@​chkal, #354)
• Optionally disable ShutdownHook in NioClient (@​SvenssonWeb, #359)
• TSIG algorithm names from RFC 8945
• Message.toWire can exceed MAXLENGTH (#355)
• TCP query might fail if the shared buffer is full (#357)
• Dynamic updates silently truncates records (#356)
• Fix DoH initial request using recommended nanoTime calculation (@​LinZong, #345)

v3.6.2

• Add new IANA Trust Anchor (@​technolord, #337)
• Fix Zone handling with signed SOA (@​frankarinnet, #335)

v3.6.1

• Properly fix LookupSession doesn't cache CNAMEs (#316)
• Move JEP-418 SPI to Java 18 to support EOL workflows (#329)

v3.6.0

• Fix CVE-2024-25638 (GHSA-cfxw-4h78-h7fw) Lookup and LookupSession do not sanitize input properly, allowing to smuggle additional responses, even with DNSSEC. I would like to thank Thomas Bellebaum from Fraunhofer AISEC (@​bellebaum) and Martin Schanzenbach (@​schanzen) for reporting and assisting me with this issue.
• Fix CVE-2023-50387 (GHSA-crjg-w57m-rqqf) Denial-of-Service Algorithmic Complexity Attacks (KeyTrap)

... (truncated)

Changelog

Sourced from dnsjava:dnsjava's changelog.

05/23/2026

• 3.6.5 released
• Handle canceled keys in UDP client (#129)
• Handle interrupts on NIO selector thread (#396, #397)
• Fix config option key names in README (@​lostnet, #399)
• Handle invalid/uninitialized file times in hosts file (#400)
• Add getXxxAsByteArray() getters and overload with escape boolean (@​MMauro94, #404, #405)

01/18/2026

• 3.6.4 released
• Fix Zone-class serialization (#391)
• Avoid Double DNS Lookup for Names with Labels >= ndots (#388)
• Prevent NPE when calling Message#getTSIG() on DNS request with bad header (#384)
• Unwrap an exception in the legacy callback-based async interface (#383)
• Prevent ConcurrentModificationException in NIO clients (#379, @​bhaveshthakker)
• Handle null in all setSearchPath overloads equally (#157)
• Reduce warning level of invalid hosts file entries (#371)
• Remove a lock on the hot-path in the hosts file parser (#371)
• DoH Resolver makes use of the Multi-Release jar and tests are executed for Java 8 and 11+ implementations (#385)
• Fix DoH Resolver initial request delay (#385)

01/26/2025

• 3.6.3 released
• Support custom hosts file size (@​flaming-archer, #349)
• Fix origin handling in zone loaded from file or stream (#346)
• Prevent TCP port leak when closing IO (#351)
• Fix confusing parameter name in CNAMERecord (@​chkal, #354)
• Optionally disable ShutdownHook in NioClient (@​SvenssonWeb, #359)
• TSIG algorithm names from RFC 8945
• Message.toWire can exceed MAXLENGTH (#355)
• TCP query might fail if the shared buffer is full (#357)
• Dynamic updates silently truncates records (#356)
• Fix DoH initial request using recommended nanoTime calculation (@​LinZong, #345)

09/21/2024

• 3.6.2 released
• Add new IANA Trust Anchor (@​technolord, #337)
• Fix Zone handling with signed SOA (@​frankarinnet, #335)

07/28/2024

• 3.6.1 released
• Properly fix LookupSession doesn't cache CNAMEs (#316)
• Move JEP-418 SPI to Java 18 to support EOL workflows (#329)

07/21/2024

... (truncated)

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[Copilot]

Copilot wasn't able to review any files in this pull request.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.