From 7dfe42db83f014be0439a9e2728dc52583fee4d3 Mon Sep 17 00:00:00 2001
From: "klutchell-flowzone[bot]"
 <189901932+klutchell-flowzone[bot]@users.noreply.github.com>
Date: Mon, 10 Aug 2026 09:35:56 +0000
Subject: [PATCH] Bump Unbound to 1.26.0

See https://github.com/NLnetLabs/unbound/releases/tag/release-1.26.0
---
 Dockerfile                                      |  6 +++---
 rootfs_overlay/etc/unbound/unbound.conf.example | 11 ++++++++++-
 2 files changed, 13 insertions(+), 4 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index 37496f2..2451264 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -64,9 +64,9 @@ FROM build-base AS unbound
 
 WORKDIR /src
 
-ARG UNBOUND_VERSION=1.25.2
-# https://nlnetlabs.nl/downloads/unbound/unbound-1.25.2.tar.gz.sha256
-ARG UNBOUND_SHA256="0d92275c703d5f5f8baba3dab22117dd8c29b495588a5c229768ed6581566600"
+ARG UNBOUND_VERSION=1.26.0
+# https://nlnetlabs.nl/downloads/unbound/unbound-1.26.0.tar.gz.sha256
+ARG UNBOUND_SHA256="77458a7156e275c0b7b17fabcb357cb12445d95cfcb26fb9bb7d5ecba45e0b63"
 
 ADD https://nlnetlabs.nl/downloads/unbound/unbound-${UNBOUND_VERSION}.tar.gz unbound.tar.gz
 
diff --git a/rootfs_overlay/etc/unbound/unbound.conf.example b/rootfs_overlay/etc/unbound/unbound.conf.example
index 5d4536a..ad93314 100644
--- a/rootfs_overlay/etc/unbound/unbound.conf.example
+++ b/rootfs_overlay/etc/unbound/unbound.conf.example
@@ -1,7 +1,7 @@
 #
 # Example configuration file.
 #
-# See unbound.conf(5) man page, version 1.25.2.
+# See unbound.conf(5) man page, version 1.26.0.
 #
 # this is a comment.
 
@@ -899,6 +899,10 @@ server:
 	#   that name
 	# o block_a resolves all records normally but returns
 	#   NODATA for A queries and ignores local data for that name
+	# o block_aaaa similarly to block_a, resolves all records normally but
+	#   returns NODATA for AAAA queries and ignores local data for that name
+	# o block_a_wdata like block_a but uses local data if present.
+	# o block_aaaa_wdata like block_aaaa but uses local data if present.
 	# o always_null returns 0.0.0.0 or ::0 for any name in the zone.
 	# o noview breaks out of that view towards global local-zones.
 	#
@@ -1287,6 +1291,9 @@ remote-control:
 #	zonemd-check: no
 #	zonemd-reject-absence: no
 #	zonefile: "example.org.zone"
+#	max-transfer-size: 0
+#	max-transfer-time: 0
+
 
 # Views
 # Create named views. Name must be unique.
@@ -1453,3 +1460,5 @@ remote-control:
 #     rpz-signal-nxdomain-ra: no
 #     for-downstream: no
 #     tags: "example"
+#     max-transfer-size: 0
+#     max-transfer-time: 0