bump hickory-dns and unignore fixed tests

also build hickory-dns with dnssec support and enable security
awareness

.github/workflows/ci.yml

@@ -6,7 +6,7 @@ on:
   merge_group:
 
 env:
-  HICKORY_REV: a3669bd80f3f7b97f0c301c15f1cba6368d97b63
+  HICKORY_REV: 107635c6c5934524894736f1b141198d0fa62fec
   DNS_TEST_VERBOSE_DOCKER_BUILD: 1
 
 jobs:

packages/conformance-tests/src/resolver/dnssec/rfc4035/section_3/section_3_1/section_3_1_4.rs

@@ -7,7 +7,6 @@ use dns_test::{
 };
 
 #[test]
-#[ignore]
 fn on_clients_ds_query_it_queries_the_parent_zone() -> Result<()> {
     let network = Network::new()?;
 

packages/conformance-tests/src/resolver/dnssec/rfc4035/section_3/section_3_2.rs

@@ -9,7 +9,6 @@ use dns_test::{
 };
 
 #[test]
-#[ignore]
 fn do_bit_not_set_in_request() -> Result<()> {
     let network = &Network::new()?;
     let ns = NameServer::new(&dns_test::PEER, FQDN::ROOT, network)?
@@ -79,7 +78,6 @@ fn if_do_bit_not_set_in_request_then_requested_dnssec_record_is_not_stripped() -
 }
 
 #[test]
-#[ignore]
 fn do_bit_set_in_request() -> Result<()> {
     let network = &Network::new()?;
     let ns = NameServer::new(&dns_test::PEER, FQDN::ROOT, network)?

packages/conformance-tests/src/resolver/dnssec/rfc4035/section_4/section_4_1.rs

@@ -5,7 +5,6 @@ use dns_test::tshark::{Capture, Direction};
 use dns_test::{Network, Resolver, Result, FQDN};
 
 #[test]
-#[ignore]
 fn edns_support() -> Result<()> {
     let network = &Network::new()?;
     let ns = NameServer::new(&dns_test::PEER, FQDN::ROOT, network)?.start()?;

packages/dns-test/src/docker/hickory.Dockerfile

@@ -10,6 +10,6 @@ RUN apt-get update && \
 # a clone of the hickory repository. `./src` here refers to that clone; not to
 # any directory inside the `dns-test` repository
 COPY ./src /usr/src/hickory
-RUN cargo install --path /usr/src/hickory/bin --features recursor --debug && \
+RUN cargo install --path /usr/src/hickory/bin --features recursor,dnssec-ring --debug && \
     mkdir /etc/hickory
 env RUST_LOG=debug

packages/dns-test/src/templates/hickory.resolver.toml.jinja

@@ -1,5 +1,5 @@
 [[zones]]
 zone = "."
 zone_type = "Hint"
-stores = { type = "recursor", roots = "/etc/root.hints" }
+stores = { type = "recursor", roots = "/etc/root.hints", security_aware = true }
 enable_dnssec = {{ use_dnssec }}