v0.8.37

Install

curl -sSL https://raw.githubusercontent.com/labyrinthdns/labyrinth/main/install.sh | bash

docker pull ghcr.io/labyrinthdns/labyrinth:v0.8.37

Docs: https://labyrinthdns.com/docs

What's Changed

• docs(ci): document uniq-by-line masking in the gofmt gate by @ersinkoc in #5
• chore(deps): resolve Dependabot advisories by @ersinkoc in #6
• chore(deps): add Dependabot config for gomod and both npm trees by @ersinkoc in #7
• chore(deps): bump github.com/quic-go/quic-go from 0.60.0 to 0.63.0 by @dependabot[bot] in #9
• chore(deps): bump golang.org/x/net from 0.57.0 to 0.59.0 by @dependabot[bot] in #8
• chore(deps): bump golang.org/x/sys from 0.48.0 to 0.49.0 by @dependabot[bot] in #11
• chore(deps): coordinated bump of golang.org/x/{net,crypto,text} by @ersinkoc in #22
• chore(toolchain): bump Go to 1.26.9, closing all 15 stdlib advisories by @ersinkoc in #23
• test(dnssec): widen eviction-cost measurement window by @ersinkoc in #24
• ci: add a govulncheck gate to the lint job by @ersinkoc in #25
• docs: update the stated Go version to 1.26.9 by @ersinkoc in #26
• ci(website): validate the website build on pull requests by @ersinkoc in #27
• chore(deps): bump tailwindcss from 4.2.2 to 4.3.3 in /website by @dependabot[bot] in #10
• chore(deps): bump react-router-dom from 7.18.2 to 7.18.4 in /website by @dependabot[bot] in #13
• chore(deps): bump jest-axe from 10.0.0 to 11.0.0 in /web/ui by @dependabot[bot] in #15
• chore(deps): bump @eslint/js from 9.39.5 to 10.0.1 in /website by @dependabot[bot] in #17
• chore(deps): bump react-dom and @types/react-dom in /web/ui by @dependabot[bot] in #18
• chore(deps): bump @types/node from 24.12.0 to 26.6.4 in /website by @dependabot[bot] in #19
• chore(deps): bump vite from 8.1.4 to 8.3.4 in /web/ui by @dependabot[bot] in #20
• chore(deps): bump lucide-react from 1.7.0 to 1.53.0 in /web/ui by @dependabot[bot] in #21
• chore(deps): bump the vitest group across 1 directory with 2 updates by @dependabot[bot] in #14
• fix: DNSSEC CD-bit cache bypass, Bogus SERVFAIL shape, CNAME NODATA synthesis, glueless NS fallback by @diggyen in #30
• docs: document the main branch protection policy by @ersinkoc in #28
• fix(server): revalidate NXDOMAIN/NODATA cached without a DNSSEC status by @diggyen in #32
• chore: release v0.8.37 by @diggyen in #33

New Contributors

• @dependabot[bot] made their first contribution in #9

Full Changelog: v0.8.36...v0.8.37