Update Rust crate domain to 0.12.0

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
domain (source)	dependencies	minor	0.11.1 → 0.12.0

---

Release Notes

nlnetlabs/domain (domain)

v0.12.0

Compare Source

Released 2026-04-23.

Breaking changes

• Added new LimitExceeded variant to MessageBuilder's PushError.
  (#​349)
• Changed the Resolver and SearchNames traits of the stub resolver to
  use lifetimes for associated types. This makes it easier to keep the stub
  resolver behind an arc or other smart pointer. (#​596)

New

• Added rdata::dnssec::Timestamp::to_system_time to help sorting timestamps.
  (#​548)
• Added support for the TLSA, OPENPGPKEY, SSHFP, and IPSECKEY
  record types and added presentation format support for the SVCB/HTTPS
  record types. (#​569)
• Added support for the CAA record type. (#​434 by @​weilence)
• Added FreezeBuilder to the message compressors. (#​601 by
  @​rossmacarthur)
• Added support for the RP record type. (#​620)
• Added a position counter to the zonefile parser, available via
  Zonefile::current_offset. (#​642)

Improvements

• Excluded moka dependency from the resolv feature, reducing the number
  of dependencies and compile time significantly. (#​575 by @​WhyNotHugo)
• Made various methods in RelativeName into const fns. (#​576 by
  @​WhyNotHugo)

Bug fixes

• When parsing a Bind-style public key file, allow an optional TTL field.
  (#​593)
• XfrMiddlewareService should always support at least one concurrent XFR.
  (#​599)
• Fixed generating an ED448 keypair. (#​608)

Unstable features

• unstable-crypto-sign
  • Added support for RSA/SHA-512 to openssl signer. (#​550)
  • generate now takes &GenerateParams. This breaks existing uses of
    generate (#​608)
• unstable-server-transport
  • Return an error response when a Service returns a ServiceError.
    (#​390)
  • Implemented std::error::Error for ServiceError. (#​570 by
    @​rossmacarthur)
  • Be more lenient when timing out connections while they are in a
    transaction. (#​399)
  • Removed defaults for type arguments to prevent intermediate types that
    impl the trait from not allowing the defaults to be overridden.
    (#​484)
  • Added commonly required bounds to the Service trait rather than
    leaving them to the impl. (#​484)
  • Removed unnecessary ?Sized bound on impl Service for U where U: Deref.
    (#​484)
• unstable-sign
  • keyset improvements (#​551)
    • Store the algorithm and key tag of a key to be able to reject duplicate
      key tags and accidental algorithm rolls.
    • Store whether a key is considered available for a key roll. Rolls with
      new keys that are not available are rejected.
    • Added two alternative key rolls for KSK and ZSK key rolls.
    • Added an algorithm roll.
    • Added more operations on UnixTime.
    • Added more actions
    • Allow loading public keys only. (#​594)
    • Added support for decoupled keys. (#​594)
  • RecordsIter::new has been replaced with RecordsIter::new_from_owned.
    There is a new RecordsIter::new_from_refs that takes a &[&Record]].
    This breaks existing uses of `RecordsIter? and related types. (#​614)
• unstable-xfr
  • Various fixes and improvements. (#​507)

Other changes

• Dependency upgrades:
  • hashbrown to 0.17, (#​633)
  • heapless to 0.9, (#​634)
  • octseq to 0.6, (#​634)
  • rand to 0.10. (#​631)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.