chore(deps): update dependency coredns/coredns to v1.14.2 #4495

renovate-bot · 2026-03-06T22:15:53Z

renovate-bot commented

2026-03-06 22:15:53 +00:00

This PR contains the following updates:

Package	Update	Change
coredns/coredns	patch	`v1.14.1` → `v1.14.2`

Release Notes

coredns/coredns (coredns/coredns)

`v1.14.2`

Compare Source

This release adds the new proxyproto plugin to support Proxy Protocol and preserve
client IPs behind load balancers. It also includes enhancements such as improved DNS
logging metadata and stronger randomness for loop detection (CVE-2026-26018), along
with several bug fixes including TLS+IPv6 forwarding, improved CNAME handling and
rewriting, allowing jitter disabling, prevention of an ACL bypass (CVE-2026-26017),
and a Kubernetes plugin crash fix. In addition, the release updates the build to
Go 1.26.1, which include security fixes addressing CVE-2026-27137, CVE-2026-27138, CVE-2026-27139,
CVE-2026-25679, and CVE-2026-27142.

Brought to You By

Adphi
Henrik Gerdes
hide
Kelly Kane
Shiv Tyagi
vflaux
Ville Vesilehto
yangsenzk
Yong Tang
YOUNEVSKY

Noteworthy Changes

core: Reorder rewrite before acl to prevent bypass (#7882)
plugin/file: Return SOA and NS records when queried for a record CNAMEd to origin (#7808)
plugin/forward: Fix parsing error when handling TLS+IPv6 address (#7848)
plugin/log: Add metadata for response Type and Class to Log (#7806)
plugin/loop: Use crypto/rand for query name generation (#7881)
plugin/kubernetes: Fix panic on empty ListenHosts (#7857)
plugin/proxyproto: Add proxy protocol support (#7738)
plugin/reload: Allow disabling jitter with 0s (#7896)
plugin/rewrite: Fix cname target rewrite for CNAME chains (#7853)

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [coredns/coredns](https://github.com/coredns/coredns) | patch | `v1.14.1` → `v1.14.2` | --- ### Release Notes <details> <summary>coredns/coredns (coredns/coredns)</summary> ### [`v1.14.2`](https://github.com/coredns/coredns/releases/tag/v1.14.2) [Compare Source](https://github.com/coredns/coredns/compare/v1.14.1...v1.14.2) This release adds the new proxyproto plugin to support Proxy Protocol and preserve client IPs behind load balancers. It also includes enhancements such as improved DNS logging metadata and stronger randomness for loop detection (CVE-2026-26018), along with several bug fixes including TLS+IPv6 forwarding, improved CNAME handling and rewriting, allowing jitter disabling, prevention of an ACL bypass (CVE-2026-26017), and a Kubernetes plugin crash fix. In addition, the release updates the build to Go 1.26.1, which include security fixes addressing CVE-2026-27137, CVE-2026-27138, CVE-2026-27139, CVE-2026-25679, and CVE-2026-27142. #### Brought to You By Adphi Henrik Gerdes hide Kelly Kane Shiv Tyagi vflaux Ville Vesilehto yangsenzk Yong Tang YOUNEVSKY #### Noteworthy Changes - core: Reorder rewrite before acl to prevent bypass ([#7882](https://github.com/coredns/coredns/pull/7882)) - plugin/file: Return SOA and NS records when queried for a record CNAMEd to origin ([#7808](https://github.com/coredns/coredns/pull/7808)) - plugin/forward: Fix parsing error when handling TLS+IPv6 address ([#7848](https://github.com/coredns/coredns/pull/7848)) - plugin/log: Add metadata for response Type and Class to Log ([#7806](https://github.com/coredns/coredns/pull/7806)) - plugin/loop: Use crypto/rand for query name generation ([#7881](https://github.com/coredns/coredns/pull/7881)) - plugin/kubernetes: Fix panic on empty ListenHosts ([#7857](https://github.com/coredns/coredns/pull/7857)) - plugin/proxyproto: Add proxy protocol support ([#7738](https://github.com/coredns/coredns/pull/7738)) - plugin/reload: Allow disabling jitter with 0s ([#7896](https://github.com/coredns/coredns/pull/7896)) - plugin/rewrite: Fix cname target rewrite for CNAME chains ([#7853](https://github.com/coredns/coredns/pull/7853)) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).

renovate-bot added the automerge image labels 2026-03-06 22:15:53 +00:00

renovate-bot added 1 commit 2026-03-06 22:15:53 +00:00

chore(deps): update dependency coredns/coredns to v1.14.2

renovate/stability-days Updates have not met minimum release age requirement

Details

render-manifests-merge / render-manifests-merge (pull_request) Has been skipped

Details

render-manifests-automerge / render-manifests-automerge (pull_request) Successful in 45s

Details

lint-test-helm / lint-helm (pull_request) Successful in 1m7s

Details

7b8b9772ab

renovate-bot scheduled this pull request to auto merge when all checks succeed 2026-03-06 22:15:59 +00:00

renovate-bot merged commit 22f127d83b into main

2026-03-06 22:16:04 +00:00

renovate-bot referenced this issue from a commit

2026-03-06 22:16:06 +00:00

chore(deps): update dependency coredns/coredns to v1.14.2 (#4495)

renovate-bot deleted branch renovate/unified-corednscoredns

2026-03-06 22:16:09 +00:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: alexlebens/infrastructure#4495