v0.1.7

Fix EDNS0 causing false NXDOMAIN, fix resolve/tunnel on valid setups, and fix 12 scanner bugs

Highlights

• resolve/tunnel fix: NS queries replaced with random subdomain TXT queries — matches what dnstt-client actually does. Fixes setups where NS lookup returns empty but tunnel works fine (#1)
• EDNS0 fix: Broadened retry logic — any non-success Rcode triggers EDNS0-stripped retry (not just FORMERR)
• --edns flag: EDNS payload check is now opt-in (--edns), no longer automatic in pipeline
• Input dedup: Duplicate IPs/URLs are automatically removed
• Inline comments: Lines like 1.1.1.1 # Cloudflare are now supported

Bug fixes (12)

• EDNS0 retry chain: UDP+EDNS → UDP−EDNS → TCP+EDNS → TCP−EDNS
• NXDomain check uses raw UDP (no EDNS0 interference)
• E2E port pool uses buffered channel to prevent deadlock
• Slipstream e2e passes cert path correctly
• DoH tunnel check fixed (same TXT query approach)
• Workers flag wired to root command
• Chain runner respects context cancellation
• Multiple scan step fixes for edge cases

Full Changelog: v0.1.5...v0.1.7