v0.7.17
Fixes DNS-derived HTTP authority matching for registry and CDN responses that return usable IPv4 addresses outside the primary answer list.
conn.matchHttp(...) can now match authorities resolved through accepted DNS responses where a queried hostname follows a CNAME chain and the corresponding A record is supplied in the DNS additional section. The authority remains trusted DNS metadata; Sandbox still does not infer match authority from HTTP Host headers.
This release also adds e2e coverage for registry.npmjs.org-style multi-answer DNS responses and CNAME/additional-section address responses.