Hi arch-dev-public, I'm announcing a proposed moderate change to the dnssec-anchors package per the developer manual guidelines. ## Summary Fix for 5+ year old DNSSEC trust anchors and unused makedepends in the dnssec- anchors package. ## Issues Addressed - GitLab Issue: #2 (outdated trust anchors) - Existing Bug: #77100 (unused makedepends, assigned to jelly) ## Proposed Changes - Restore dynamic trust anchor generation in build() function - Filter for KSK records (flag 257) to eliminate DNSSEC warnings - Update package version to 20250523-1 - Remove dependency on static 2019 files ## Testing - Verified DNSSEC validation works correctly - Eliminated knot-resolver warnings - Confirmed proper ad flag behavior with drill/kdig ## Merge Request Available at: https://gitlab.archlinux.org/archlinux/packaging/packages/ dnssec-anchors/-/merge_requests/1 The change preserves the established purpose (providing DNSSEC trust anchors) while updating to current practices and fixing confirmed bugs. Comments and feedback welcome. Thanks, meowmeowbeanz