## [v0.10.0] - 2026-05-18

### Added

- Validate zones signed with Ed25519 and Ed448 (RFC 8080)
- Validate SVCB (TYPE 64) and HTTPS (TYPE 65) records per RFC 9460, including all nine IANA-registered SvcParam keys.
- CAA tag-value validation and RFC 8657 contact tags.
- Support the optional $INCLUDE <domain-name> argument: overrides $ORIGIN for the included file only.

### Fixed

- ksk-exists policy now recognizes Combined Signing Key (CSK) configurations
- do not flag a typemap mismatch when an owner name shares its label with an NSEC3 chain owner
- Suppress cascading errors when DS/CDS/DLV references an unrecognized or policy-disabled algorithm.
- Accept RRSIG inception/expiration timestamps past 2038-01-19 03:14:07 UTC and compute them in UTC per RFC 4034.
- Signature count in -s summary no longer inflated when multiple DNSKEYs share a key tag.
- PTR records report "PTR domain name" in error messages instead of the misleading "name server domain name".
- Zone names containing unescaped commas, raw 8-bit bytes, or quoted-string (`"..."`) form now parse, matching BIND and ldns.
- RRSIG validity checks (-t) accept post-2038 epochs on 32-bit hosts
