Match the Workspace pin so language and stdlib features through 1.27 are allowed. Co-authored-by: Cursor <cursoragent@cursor.com>
Callers get a session API, typed RR builders, and BIND testcontainer proof so CheckDNS can stay off the DNS wire. Co-authored-by: Cursor <cursoragent@cursor.com>
Co-authored-by: Cursor <cursoragent@cursor.com>