knot-dns: 3.0.7 -> 3.0.8

[vcunat]

https://gitlab.nic.cz/knot/knot-dns/-/tags/v3.0.8

Things done

• Tested using sandboxing (nix.useSandbox on NixOS, or option sandbox in nix.conf on non-NixOS linux)
• Built on platform(s)
  • NixOS
  • macOS
  • other Linux distributions
• Tested via one or more NixOS test(s) if existing and applicable for the change (look inside nixos/tests)
• Tested compilation of all pkgs that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review wip"
• Tested execution of all binary files (usually in ./result/bin/)
• 21.11 Release Notes (or backporting 21.05 Relase notes)
  • (Package updates) Added a release notes entry if the change is major or breaking
  • (Module updates) Added a release notes entry if the change is significant
  • (Module addition) Added a release notes entry if adding a new NixOS module
• Fits CONTRIBUTING.md.

[vcunat]

Let's check darwin, too:
@ofborg build knot-resolver

[vcunat]

BTW, in 3.0.6 -> 3.0.7 a few tests regressed on aarch64-darwin. Upstream knows about it, but it's hard to debug without a direct access to such a machine.

[vcunat]

This version primarily fixes one bug in KSK rollover when the old key is removed early if automatic KSK submission is enabled and DNSKEY TTL is lower than the corresponding DS TTL in the parent zone. Affected versions are 3.0.6 and 3.0.7.

[github-actions]

Successfully created backport PR #130372 for release-21.05.