3.9.5 v1.14.5

Name: hindsight
Author: vectorize-io

medium risk

vectorize-io/hindsightJul 9, 2026 → Jul 10, 20260 days between releases

What's New

Adds DoH/DoH3 support and enhances DNS transport security and operational reliability.

New Features

DoH protocol support
Configurable read timeouts for upstreams
DoH support added to the forward plugin
Enhanced dnstap logging and connection handling
Accept scoped IPv6 addresses in transfer targets

Improvements

Safer DoH/DoH3 request parse errors
Improved dnstap support with connection reconnection fixes
Robustness improvements across file serving, secondary zones, and error processing
Bound DoQ stream read with the server read timeout
Use Go TLS defaults

Bug Fixes

Guard Join against an empty label slice
Classify nxdomain without soa as denial
Fixed several edge cases in DNS response handling

Upgrade Notes

Review forwarding configuration to add DoH support. Ensure server read timeouts are configured for DoQ streams. Be aware that Go TLS defaults are now used.

The Two Releases

3.9.5

Jul 9, 2026· 4 months ago

Minimal release notes: "🔗 [Changelog](https://github.com/prettier/prettier/blob/3.9.5/CHANGELOG.md#395)"

Full release notes

v1.14.5

Jul 10, 2026· 4 months ago

This release prioritizes DNS transport security and operational reliability, introducing safer handling for DoH/DoH3 and enhanced forwarding configuration. It also includes robustness improvements across file serving, secondary zones, and error processing.

Full release notes