0.25.0 represents a large release for the Hickory DNS project. Over 14 months since 0.24.0, we've added two new maintainers, divergentdave and marcus0x62, and have addressed many limitations. A team from Ferrous Systems shored up our support for DNSSEC, and we addressed a number of findings from our first security audit.

Breaking changes

This is not an exhaustive list of changes, but here are some of the most impactful breaking changes in this release:

• Configuration for the Hickory DNS server crate has been reworked substantially to be more robust and secure. Most of the code related to the server binary has been moved out of the hickory-server library and into the hickory-dns binary crate.
• Support for TLS using native-tls or OpenSSL has been removed. We now only provide first-party support for rustls (0.23, for DNS over TLS, HTTP/2, QUIC and HTTP/3). We support ring or aws-lc-rs for cryptographic operations both for DNSSEC and TLS. The dns-over-rustls,dns-over-native-tls, dns-over-openssl, dns-over-https-rustls, dns-over-https, dns-over-quic and dns-over-h3 features have been removed in favor of a set of {tls,https,quic,h3}-{aws-lc-rs,ring} features across our library crates.
• The synchronous API in the resolver and client crates, which previously provided a thin partial wrapper over the asynchronous API, has been removed. Downstream users will have to migrate to the asynchronous API.
• Support for the async-std runtime has been removed following the deprecation of the async-std crate by upstream (see their README). The async-std-resolver crate will no longer be updated.
• The DNSSEC API was reworked to extend coverage to the recursor, add support for NSEC3, and make the API more ergonomic and harder to misuse.
• Moved the RuntimeProvider API into the proto crate and use it consistently across the project.
• Name values are now rooted by default in many places, and more consistently maintain their fqdn status.
• Error types are now exposed directly in the crate roots.
• Top-level TLS configuration in the resolver crate has moved to the ResolverOpts type. Specific NameServerConfigs should implicitly set up the ALPN protocol appropriate for the DNS protocol.
• The ResolverOptions fields authentic_data and shuffle_dns_servers were removed. The former field didn't do anything; and should be covered by new DNSSEC API. shuffle_dns_servers functionality has been subsumed into the server_ordering_strategy field.
• The use of rustls-native-certs via the native-certs feature was replaced with rustls-platform-verifier.
• The tokio-runtime feature was renamed to tokio.
• The serde-config feature was renamed to serde.
• Serializations (and what the new release can deserialize) has changed; data serialized by 0.24 may not deserialize correctly on 0.25, and vice versa.

Please don't hesitate to file an issue or ask on our Discord server if you have issues upgrading.

Detailed changes since alpha.5

• update logo to better for Github by @bluejekyll in https://github.com/hickory-dns/hickory-dns/pull/2063
• add blog post to release notes for Hickory by @bluejekyll in https://github.com/hickory-dns/hickory-dns/pull/2064
• update h3 and h3-quinn by @zh-jq in https://github.com/hickory-dns/hickory-dns/pull/2077
• update to use ring 0.17 by @zh-jq in https://github.com/hickory-dns/hickory-dns/pull/2076
• Bump rustix from 0.37.23 to 0.37.26 by @dependabot in https://github.com/hickory-dns/hickory-dns/pull/2078
• Marcbrevoort cyberhive patch 1 by @bluejekyll in https://github.com/hickory-dns/hickory-dns/pull/2088
• Fix initial vec capacity in NameServerConfigGroup::from_ips_clear by @silverlyra in https://github.com/hickory-dns/hickory-dns/pull/2092
• Add getters for resolver config and options by @hoxxep in https://github.com/hickory-dns/hickory-dns/pull/2093
• Remove generic Error from DnsHandle by @bluejekyll in https://github.com/hickory-dns/hickory-dns/pull/2094
• update test certs for 2023 by @bluejekyll in https://github.com/hickory-dns/hickory-dns/pull/2100
• Support getting and setting the EDNS Z flags by @mattias-p in https://github.com/hickory-dns/hickory-dns/pull/2111
• get(0) to first() and zerocopy package updates to fix clippy and cargo audit errors. by @marcus0x62 in https://github.com/hickory-dns/hickory-dns/pull/2121
• Increase source port entropy in UDP client by @marcus0x62 in https://github.com/hickory-dns/hickory-dns/pull/2116
• Validate response query section by @marcus0x62 in https://github.com/hickory-dns/hickory-dns/pull/2118
• Gate tests on required features by @alexanderkjall in https://github.com/hickory-dns/hickory-dns/pull/2114
• Recursor: make nameserver and record cache sizes configurable by @marcus0x62 in https://github.com/hickory-dns/hickory-dns/pull/2117
• when comparing IP addresses for UDP, only check IP and Port by @bluejekyll in https://github.com/hickory-dns/hickory-dns/pull/2124
• Bailiwick checking for the recursor by @marcus0x62 in https://github.com/hickory-dns/hickory-dns/pull/2119
• Fixup lookup docs by @bluejekyll in https://github.com/hickory-dns/hickory-dns/pull/2123
• Bump actions/cache from 3 to 4 by @dependabot in https://github.com/hickory-dns/hickory-dns/pull/2129
• Update dependencies by @djc in https://github.com/hickory-dns/hickory-dns/pull/2112
• Fix a typo in crate description by @wiktor-k in https://github.com/hickory-dns/hickory-dns/pull/2132
• Only DNSKEY zone keys are allowed to match DS RR by @justahero in https://github.com/hickory-dns/hickory-dns/pull/2131
• Use cargo environment variables for path to executable. by @sjbronner in https://github.com/hickory-dns/hickory-dns/pull/2130