- update to 4.8.1
* Avoid unbounded recursion when retrieving DS records from some
misconfigured domains. (bsc#1207342, CVE-2023-22617)

- update to 4.8.0 with these major changes:
* Structured Logging has been implemented for almost all
subsystems.
* Optional Serve Stale functionality has been implemented,
providing resilience against connectivity problems towards
authoritative servers.
* Optional Record Locking has been implemented, providing an extra
layer of protection against spoofing attempts at the price of
reduced cache efficiency.
* Internal tables used to track information about authoritative
servers are now shared instead of per-thread, resulting in
better performance and lower memory usage.
* EDNS padding of outgoing DoT queries has been implemented,
providing better privacy protection.
* Metrics have been added about the protobuf and dnstap logging
subsystems and the rcodes received from authoritative
servers.

- update to 4.7.4
* Fix compilation of the event ports multiplexer. #12046, PR#12231
* Correct skip record condition in processRecords. #12198, PR#12230
* Also consider recursive forward in the “forwarded DS should not end up in negCache code.” #12189, #12199, PR#12227
* Timout handling for IXFRs as a client. #12125, PR#12190
* Detect invalid bytes in makeBytesFromHex(). #12066, PR#12173
* Log invalid RPZ content when obtained via IXFR. #12081, PR#12171
* When an expired NSEC3 entry is seen, move it to the front of the expiry queue. #12038, PR#12168