https-dns-proxy: update to 2026.03.18

[Copilot]

Multiple critical bugs in the upstream binary cause errors and instability, most visibly when using Quad9 (strict HTTP/2, aggressive connection teardown). Update to latest upstream commit which includes all fixes.

Fixes included in 2026.03.18:

• NULL pointer dereference in https_resp_cb (response arrives after request freed)
• Remove deprecated CURLPIPE_HTTP1 — fixes HTTP/2 pipelining with strict providers
• TCP client limit defaulting to 0 (unlimited) instead of 20
• curl signal handling conflict with libev causing crashes
• Memory leaks, integer overflow, use-after-free in TCP path
• Bootstrap DNS not bound to -S source address as documented

No init.d changes needed — no new CLI options introduced.

Note: PKG_MIRROR_HASH was computed locally; CI may report the correct hash if it differs.

---

📦 Package Details

Maintainer: @stangri

Description:
Updates https-dns-proxy from 2025.12.29 to 2026.03.18, picking up 16 upstream commits that fix critical stability, security, and resource-management bugs in the DoH proxy binary.

---

🧪 Run Testing Details

• OpenWrt Version:
• OpenWrt Target/Subtarget:
• OpenWrt Device:

---

✅ Formalities

• I have reviewed the CONTRIBUTING.md file for detailed contributing guidelines.

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

• docs.openwrt.melmac.ca
  • Triggering command: /home/REDACTED/work/_temp/ghcca-node/node/bin/node /home/REDACTED/work/_temp/ghcca-node/node/bin/node --enable-source-maps /home/REDACTED/work/_temp/copilot-developer-action-main/dist/index.js (dns block)
• downloads.openwrt.org
  • Triggering command: /usr/bin/curl curl -sI REDACTED (dns block)
  • Triggering command: /usr/bin/curl curl -s --max-time 5 REDACTED -o /tmp/openwrt_current.tar.zst (dns block)
• https://api.github.com/repos/aarond10/https_dns_proxy/commits
  • Triggering command: /home/REDACTED/work/_temp/ghcca-node/node/bin/node /home/REDACTED/work/_temp/ghcca-node/node/bin/node --enable-source-maps /home/REDACTED/work/_temp/copilot-developer-action-main/dist/index.js (http block)
• https://api.github.com/repos/aarond10/https_dns_proxy/git/commits/67ecae05c0b9a5020b32782f9ff7ac8c887dda8a
  • Triggering command: /usr/bin/curl curl -s --max-time 5 REDACTED (http block)
• https://api.github.com/repos/aarond10/https_dns_proxy/tarball/801881210ba8215dc9cd577222d8c10372423360
  • Triggering command: /usr/bin/curl curl -sL REDACTED -o /tmp/dl_test/tarball.tar.gz (http block)
• https://api.github.com/repos/friendly-bits/geoip-shell-openwrt/git/commits/db8bbf4ce04094843beea1b1aa4fbceb0d35688d
  • Triggering command: /usr/bin/curl curl -sL REDACTED bash 831e�� URI y (http block)

If you need me to access, download, or install something from one of these locations, you can either:

• Configure Actions setup steps to set up my environment, which run before the firewall is enabled
• Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)