What DNSControl/dnscontrol shipped
Written by FoxPlug from the repository's own releases; not affiliated with Dnscontrol. Paste your own repository in the box below and FoxPlug writes the same weekly update for your product. This page is an automatic summary of the releases, pull requests and commits in github.com/DNSControl/dnscontrol; Dnscontrol did not write it and does not use or endorse FoxPlug. Every line links to the change it describes.
Get a weekly update like this for your product, free
Week of October 5, 2026
What shipped
- Released v5.4.0, which adds CloudPress DNS support and an experimental D() syntax for declaring registrars and providers. Release
- Added a CloudPress DNS provider, verified end to end against a live CloudPress account. Pull request #4390
- Added direct REGISTRAR and SERVICE syntax so credentials can be selected in domain declarations without NewRegistrar or NewDnsProvider. Pull request #4976
- Added a SKIP_AUDIT modifier so a provider's RecordAuditor can no longer block changes when the provider's API accepts the records. Pull request #4971
- Made the BUNNYDNS provider safe to run concurrently by adding synchronization around its map of account zones. Pull request #4980
- Fixed BUNNYDNS GetNameservers to return the zone's nameservers and ignore apex NS records. Pull request #4970
- Marked the DNSOVERHTTPS provider as verified for concurrency. Pull request #4981
- Reduced serially checking and serially gathering messages when all providers are concurrent, with --full overriding. Pull request #4979
- Fixed the HUAWEICLOUD provider to allow CNAME records to co-exist with GeoDNS lines. Pull request #4987
- Added SupportedTypes and exhaustive provider validation, reported as a list instead of per-type registration. Pull request #4967
Why it matters
This week brings a new release with a new provider and an experimental syntax that changes how domains declare registrars and providers. Provider work also moved toward concurrency and a redesigned type and registration model, which affects how providers are validated and registered. Fixes landed for BUNNYDNS nameservers and HUAWEICLOUD CNAME handling with GeoDNS.
Changelog entry
- Release v5.4.0: new CloudPress provider and experimental D() syntax. Release
- Add the CloudPress DNS provider. Pull request #4390
- Add direct REGISTRAR and SERVICE syntax in domain declarations. Pull request #4976
- Add the SKIP_AUDIT modifier to bypass provider record audit failures. Pull request #4971
- Make BUNNYDNS safe to run concurrently. Pull request #4980
- Fix BUNNYDNS GetNameservers and ignore apex NS records. Pull request #4970
- Mark DNSOVERHTTPS as verified for concurrency. Pull request #4981
- Reduce serially checking and gathering messages when all providers are concurrent. Pull request #4979
- Fix HUAWEICLOUD CNAME co-existence with GeoDNS. Pull request #4987
- Add SupportedTypes and exhaustive provider validation. Pull request #4967
- Adopt SupportedTypes across providers. Pull request #4968
- Update dependencies. Pull request #4973
V5.4.0 is out: CloudPress DNS support, plus an experimental D() syntax for registrar and provider declarations. Also this week: direct REGISTRAR/SERVICE syntax, a SKIP_AUDIT modifier, BUNNYDNS concurrency and nameserver fixes, and DNSOVERHTTPS marked concurrent.
V5.4.0 is released, adding CloudPress DNS as a provider and an experimental D() syntax for registrar and provider declarations. Also shipped: direct REGISTRAR and SERVICE syntax for selecting credentials in domain declarations, a SKIP_AUDIT modifier for records a provider accepts but its auditor rejects, and BUNNYDNS fixes for concurrent runs and for returning a zone's nameservers. DNSOVERHTTPS is now marked verified for concurrency, and serially checking messages are reduced when all providers run concurrently. Provider validation also gained a SupportedTypes list.
Week of September 28, 2026
What shipped
- V5.3.0 released with a new syntax for provider configuration alongside the existing syntax. Release
- New PROVIDER(), REGISTRAR(), and DNS_SERVICE() syntax added as an alternative to the D() function for defining providers in dnsconfig.js. Pull request #4955
- Infoblox NIOS DNS provider added, supporting A, AAAA, CAA, CNAME, MX, PTR, SRV, and TXT records. Pull request #4846
- BunnyDNS provider now supports managing health monitoring features via dnsconfig.js. Pull request #4951
- BunnyDNS provider gains GeoDNS metadata support for smart records configuration. Pull request #4941
- Fixed crash in dnscontrol check when IMPORT_TRANSFORM references a non-existent domain. Pull request #4969
- Record field normalization expanded to handle all targethost and hex-encoded fields consistently. Pull request #4944
- FortiGate provider init now uses yes/no prompts for TLS and HTTP debug settings instead of free text. Pull request #4878
- RealTimeRegister provider now properly quotes TXT records. Pull request #4945
- README provider table is now autogenerated to stay current. Pull request #4948
Why it matters
This week brings v5.3.0 with a cleaner provider configuration syntax that addresses long-standing user confusion, plus two major provider additions (Infoblox NIOS and expanded BunnyDNS features) and important bug fixes including a crash prevention in config validation. The autogenerated README table ensures provider compatibility information stays accurate going forward.
Changelog entry
- V5.3.0 released Release
- New PROVIDER(), REGISTRAR(), and DNS_SERVICE() syntax for provider configuration Pull request #4955
- NEW PROVIDER: Infoblox NIOS DNS with A, AAAA, CAA, CNAME, MX, PTR, SRV, TXT support Pull request #4846
- BunnyDNS: health monitoring feature management support Pull request #4951
- BunnyDNS: GeoDNS/smart records metadata support Pull request #4941
- Fix: prevent crash when IMPORT_TRANSFORM references non-existent domain Pull request #4969
- Normalize all targethost and hex-encoded record fields for consistent comparison Pull request #4944
- FortiGate: init now uses yes/no prompts for
insecure_tlsanddebug_httpPull request #4878 - RealTimeRegister: proper TXT record quoting Pull request #4945
- README provider table now autogenerated Pull request #4948
- Refactor: reduce unused metadata parameters in provider initialization Pull request #4959
- Dependencies updated Pull request #4957
V5.3.0 shipped with new PROVIDER/REGISTRAR/DNS_SERVICE syntax, Infoblox NIOS provider support, and crash fixes. Both old and new syntax are supported.
DNSControl v5.3.0 is out! This release introduces cleaner provider configuration syntax (PROVIDER/REGISTRAR/DNS_SERVICE) alongside the existing D() function, adds support for Infoblox NIOS DNS management, expands BunnyDNS with health monitoring and GeoDNS features, and fixes several bugs including a crash in config validation. The provider compatibility table in the README is now autogenerated for accuracy.
Week of September 21, 2026
What shipped
- DNSControl v5.2.0 released with contributions from the community. Release
- Mittwald mStudio added as a new DNS provider using the official Go client. Pull request #4933
- Spaceship added as both a registrar and DNS provider. Pull request #4921
- OpenProvider added as a new DNS service provider supporting A, AAAA, CAA, CNAME, MX, SPF, SRV, TLSA, and TXT records. Pull request #4891
- M365_BUILDER rewritten in Go with updated records to match Microsoft's current requirements. Pull request #4936
- AZURE_PRIVATE_DNS provider now supports the same authentication methods as AZURE_DNS including OIDC. Pull request #4929
- OpenProvider provider improved with retry logic and exponential backoff for transient API failures. Pull request #4937
- CNAME target values are now lowercased during normalization. Pull request #4940
- Fixed a JSON injection security vulnerability in get-zone --format js output. Pull request #4928
- Integration tests now run on scheduled CI runs instead of being skipped. Pull request #4935
Why it matters
This release adds three new providers (Mittwald, Spaceship, and OpenProvider) expanding DNS management options. Existing Azure and M365 providers received significant improvements with better authentication support and updated configurations. Security and reliability fixes address a JSON injection vulnerability and transient API failures.
Changelog entry
- NEW PROVIDER: Mittwald mStudio DNS provider Pull request #4933
- NEW PROVIDER: Spaceship registrar and DNS provider Pull request #4921
- NEW PROVIDER: OpenProvider DNS service provider with support for A, AAAA, CAA, CNAME, MX, SPF, SRV, TLSA, TXT records Pull request #4891
- AZURE_PRIVATE_DNS: Added OIDC support and same authentication methods as AZURE_DNS Pull request #4929
- M365_BUILDER: Rewritten in Go with updated records to Microsoft's current requirements Pull request #4936
- OPENPROVIDER: Added retry logic with exponential backoff for transient API failures Pull request #4937
- Fixed: CNAME target rdata now lowercased in normalization Pull request #4940
- Fixed: JSON injection vulnerability in get-zone --format js Pull request #4928
- Fixed: Integration tests now run on scheduled CI runs Pull request #4935
- Improved: Test length adjusted per provider Pull request #4939
- Improved: Providers can declare record identity for duplicate checks Pull request #4883
- Documentation: Rewrote golden file documentation Pull request #4912
- Documentation: Fixed table of contents links to resolve on GitBook Pull request #4932
DNSControl v5.2.0 is out! New providers: Mittwald, Spaceship, OpenProvider. Improved Azure and M365 support. Security and reliability fixes. Thanks to all contributors!
DNSControl v5.2.0 released! This version adds three new DNS providers—Mittwald mStudio, Spaceship, and OpenProvider—while strengthening existing integrations. Azure Private DNS now supports OIDC authentication, and M365_BUILDER has been rewritten in Go with updated record requirements. Security improvements include a JSON injection vulnerability fix. Thanks to our community contributors!
Week of September 14, 2026
What shipped
- V5.1.0 released as the first production-ready release after v5.0.0. Release
- SCALEWAY provider fixed for TXT round-trip handling, SVCB parameters, SSHFP case sensitivity, NS TTL, and PTR support. Pull request #4919
- GCORE provider fixed to parse API names without trailing dots. Pull request #4923
- SVCB keys without values like no-default-alpn now handled correctly. Pull request #4909
- INWX sandbox question in dnscontrol init changed from confusing free text to yes/no prompt. Pull request #4882
- AUTODNS provider fixed to send bare FQDN as MX value instead of full RDATA. Pull request #4880
- AUTODNS provider fixed to clear legacy zone-level main record on update. Pull request #4881
- TENCENTDNS provider now matches package grades case-insensitively. Pull request #4884
- Documentation updated to point new users to dnscontrol init first. Pull request #4910
- Daily integration tests re-enabled. Pull request #4911
Why it matters
V5.1.0 brings multiple provider bug fixes discovered through integration testing, improving reliability for users of SCALEWAY, GCORE, AUTOWNS, TENCENTDNS, and other providers. Documentation improvements ensure new users get correct setup guidance and existing users find accurate reference information.
Changelog entry
- V5.1.0 released Release
- Fix(p/SCALEWAY): correct TXT round-trip, SVCB params, SSHFP case, NS TTL, and PTR support Pull request #4919
- Fix(p/GCORE): parse API names without a trailing dot Pull request #4923
- Fix: SVCB keys that lack a value (no-default-alpn, others) not handled correctly Pull request #4909
- Fix(p/INWX): ask the sandbox setting as a yes/no question in init Pull request #4882
- Fix(p/AUTODNS): send bare FQDN as MX value, not full RDATA Pull request #4880
- Fix(p/AUTODNS): clear the legacy "main" record on zone update Pull request #4881
- Fix(p/TENCENTDNS): match package grades case-insensitively Pull request #4884
- Fix(p/CNR): offer the debug mode levels as a list in init Pull request #4879
- Docs: point new users to dnscontrol init first Pull request #4910
- Ci: Re-enable daily integration tests Pull request #4911
DNSControl v5.1.0 is out. This release fixes five SCALEWAY provider issues, SVCB/HTTPS record handling, MX record bugs in AUTOWNS and TENCENTDNS, plus improved init prompts and docs.
DNSControl v5.1.0 is now available for production use. This release addresses multiple provider bugs discovered through integration testing: SCALEWAY round-trip fixes, SVCB key handling, AUTOWNS MX preference and TENCENTDNS package grade matching. Documentation improvements help new users get started with dnscontrol init, and integration tests are back online.