recursive-resolver/pyproject.toml at main · sylvinus/recursive-resolver · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
[build-system]
# >=1.27 is the floor for final PEP 639 support: earlier Hatchling either
# rejects `license-files` or emits metadata below 2.4, and scripts/release.sh
# asserts on `License-Expression` and the bundled licence files in the built
# wheel's METADATA.
requires = ["hatchling>=1.27"]
build-backend = "hatchling.build"

[project]
name = "recursive-resolver"
version = "0.2.0"
description = "Pure-Python iterative DNS resolver: resolves from the root servers with DNSSEC validation"
readme = "README.md"
license = "MIT"
license-files = ["LICENSE", "THIRD-PARTY.md"]
requires-python = ">=3.10"
authors = [
    { name = "Sylvain Zimmer", email = "sylvain@sylvainzimmer.com" },
]
keywords = ["dns", "resolver", "recursive", "nameserver", "iterative", "root-servers", "dnssec", "dkim"]
classifiers = [
    "Development Status :: 4 - Beta",
    "Intended Audience :: Developers",
    "Intended Audience :: System Administrators",
    # No "License ::" classifier: PEP 639 deprecates them in favour of the
    # `license = "MIT"` expression above, which PyPI reads instead.
    "Programming Language :: Python :: 3",
    "Programming Language :: Python :: 3 :: Only",
    "Programming Language :: Python :: 3.10",
    "Programming Language :: Python :: 3.11",
    "Programming Language :: Python :: 3.12",
    "Programming Language :: Python :: 3.13",
    "Programming Language :: Python :: 3.14",
    "Topic :: Internet :: Name Service (DNS)",
    "Topic :: System :: Networking",
    "Topic :: Security",
    "Typing :: Typed",
]
dependencies = [
    # >=2.6.1 is a security floor: 2.6.0 and earlier are affected by
    # CVE-2023-29483 (TuDoor), and 2.6.0 additionally regressed truncation
    # handling, which breaks UDP->TCP failover. 2.7.0 is the first release
    # with the EDNS and DNSSEC behaviour this package relies on; 2.8.0 (Sep 2025)
    # is the current release and there are no advisories after 2.6.1.
    # The dnssec extra pulls in `cryptography` (DNSSEC validation) and the
    # idna extra pulls in `idna` (IDNA 2008; without it, internationalised
    # names fall back to IDNA 2003 and resolve to different domains).
    "dnspython[dnssec,idna]>=2.8.0",
]

[project.optional-dependencies]
# Kept as an explicit extra so `pip install recursive-resolver[dnssec]` works
# for anyone pinning the base dnspython without extras.
dnssec = ["cryptography>=42"]

[project.urls]
Homepage = "https://github.com/sylvinus/recursive-resolver"
Repository = "https://github.com/sylvinus/recursive-resolver"
Issues = "https://github.com/sylvinus/recursive-resolver/issues"
Changelog = "https://github.com/sylvinus/recursive-resolver/blob/main/CHANGELOG.md"

[project.scripts]
recursive-resolver = "recursive_resolver.cli:main"

[dependency-groups]
dev = [
    "pytest>=8.0",
    "pytest-cov>=5.0",
    "ruff>=0.4",
    "mypy>=1.10",
]

[tool.hatch.build.targets.wheel]
packages = ["src/recursive_resolver"]

[tool.hatch.build.targets.sdist]
include = [
    "/src",
    "/tests",
    "/scripts",
    "/README.md",
    "/LICENSE",
    "/CHANGELOG.md",
    "/SECURITY.md",
    "/CONTRIBUTING.md",
    "/THIRD-PARTY.md",
    "/Makefile",
]

[tool.pytest.ini_options]
testpaths = ["tests"]
# The shared helpers live in tests/conftest.py and tests/signed_zone.py and are
# imported by name from the test modules. There is deliberately no
# tests/__init__.py: with one, pytest would import the suite as `tests.test_x`,
# put only the repo root on sys.path, and load conftest twice under two names.
# This entry states the requirement rather than relying on rootdir insertion.
pythonpath = ["tests"]
addopts = "--strict-markers --strict-config -ra"
markers = [
    "integration: marks tests that require network access (deselect with '-m \"not integration\"')",
]
filterwarnings = ["error"]

[tool.coverage.run]
source = ["recursive_resolver"]
branch = true

[tool.coverage.report]
# The suite covers every statement and every branch, including the error paths
# a hostile zone drives. Regressions in that are treated as build failures.
fail_under = 100
show_missing = true
exclude_also = [
    "if TYPE_CHECKING:",
    "raise NotImplementedError",
]

[tool.ruff]
target-version = "py310"
line-length = 120

[tool.ruff.lint]
select = ["E", "F", "W", "I", "N", "UP", "B", "SIM"]

[tool.mypy]
python_version = "3.10"
warn_return_any = true
warn_unused_configs = true
disallow_untyped_defs = true