Upgrade 2.1.18

.ci/ci-build.sh

@@ -66,6 +66,13 @@ ln dnscrypt-proxy freebsd-arm/
 ln ../LICENSE example-dnscrypt-proxy.toml localhost.pem example-*.txt freebsd-arm/
 tar czpvf dnscrypt-proxy-freebsd_arm-${PACKAGE_VERSION:-dev}.tar.gz freebsd-arm
 
+go clean
+env GOOS=freebsd GOARCH=arm64 go build -mod vendor -ldflags="-s -w"
+mkdir freebsd-arm64
+ln dnscrypt-proxy freebsd-arm64/
+ln ../LICENSE example-dnscrypt-proxy.toml localhost.pem example-*.txt freebsd-arm64/
+tar czpvf dnscrypt-proxy-freebsd_arm64-${PACKAGE_VERSION:-dev}.tar.gz freebsd-arm64
+
 go clean
 env GOOS=dragonfly GOARCH=amd64 go build -mod vendor -ldflags="-s -w"
 mkdir dragonflybsd-amd64
@@ -157,6 +164,13 @@ ln dnscrypt-proxy linux-riscv64/
 ln ../LICENSE example-dnscrypt-proxy.toml localhost.pem example-*.txt linux-riscv64/
 tar czpvf dnscrypt-proxy-linux_riscv64-${PACKAGE_VERSION:-dev}.tar.gz linux-riscv64
 
+go clean
+env CGO_ENABLED=0 GOOS=linux GOARCH=loong64 go build -mod vendor -ldflags="-s -w"
+mkdir linux-loong64
+ln dnscrypt-proxy linux-loong64/
+ln ../LICENSE example-dnscrypt-proxy.toml localhost.pem example-*.txt linux-loong64/
+tar czpvf dnscrypt-proxy-linux_loong64-${PACKAGE_VERSION:-dev}.tar.gz linux-loong64
+
 go clean
 env GOOS=darwin GOARCH=amd64 go build -mod vendor -ldflags="-s -w"
 mkdir macos-x86_64

.ci/ci-test.sh

@@ -13,7 +13,7 @@ t() {
 }
 
 fail() (
-    echo "*** Test #${TEST_COUNT} FAILED ***" >&2
+    echo "*** Test #${TEST_COUNT} FAILED, line: $1 ***" >&2
 )
 
 section() {
@@ -26,20 +26,20 @@ t || (
     cd ../dnscrypt-proxy
     go test -mod vendor
     go build -mod vendor -race
-) || fail
+) || fail $LINENO
 
 section
 sed -e "s/127.0.0.1:53/127.0.0.1:${DNS_PORT}/g" -e "s/# server_names =.*/server_names = ['scaleway-fr']/" ../dnscrypt-proxy/example-dnscrypt-proxy.toml >test-dnscrypt-proxy.toml
 ../dnscrypt-proxy/dnscrypt-proxy -loglevel 3 -config test-dnscrypt-proxy.toml -pidfile /tmp/dnscrypt-proxy.pidfile &
 sleep 5
 
 t ||
-    dig -p${DNS_PORT} . @127.0.0.1 | grep -Fq 'root-servers.net.' || fail
-t || dig -p${DNS_PORT} +dnssec . @127.0.0.1 | grep -Fq 'root-servers.net.' || fail
-t || dig -p${DNS_PORT} +dnssec . @127.0.0.1 | grep -Fq 'flags: do;' || fail
-t || dig -p${DNS_PORT} +short one.one.one.one @127.0.0.1 | grep -Fq '1.1.1.1' || fail
-t || dig -p${DNS_PORT} +dnssec dnscrypt.info @127.0.0.1 | grep -Fq 'flags: qr rd ra ad' || fail
-t || dig -p${DNS_PORT} +dnssec dnscrypt.info @127.0.0.1 | grep -Fq 'flags: do;' || fail
+    dig -p${DNS_PORT} . @127.0.0.1 | grep -Fq 'root-servers.net.' || fail $LINENO
+t || dig -p${DNS_PORT} +dnssec . @127.0.0.1 | grep -Fq 'root-servers.net.' || fail $LINENO
+t || dig -p${DNS_PORT} +dnssec . @127.0.0.1 | grep -Fq 'flags: do;' || fail $LINENO
+t || dig -p${DNS_PORT} +short one.one.one.one @127.0.0.1 | grep -Fq '1.1.1.1' || fail $LINENO
+t || dig -p${DNS_PORT} +dnssec dnscrypt.info @127.0.0.1 | grep -Fq 'flags: qr rd ra ad' || fail $LINENO
+t || dig -p${DNS_PORT} +dnssec dnscrypt.info @127.0.0.1 | grep -Fq 'flags: do;' || fail $LINENO
 
 kill $(cat /tmp/dnscrypt-proxy.pidfile)
 sleep 5
@@ -49,102 +49,102 @@ section
 sleep 5
 
 section
-t || dig -p${DNS_PORT} A microsoft.com @127.0.0.1 | grep -Fq "NOERROR" || fail
-t || dig -p${DNS_PORT} A MICROSOFT.COM @127.0.0.1 | grep -Fq "NOERROR" || fail
+t || dig -p${DNS_PORT} A microsoft.com @127.0.0.1 | grep -Fq "NOERROR" || fail $LINENO
+t || dig -p${DNS_PORT} A MICROSOFT.COM @127.0.0.1 | grep -Fq "NOERROR" || fail $LINENO
 
 section
-t || dig -p${DNS_PORT} AAAA ipv6.google.com @127.0.0.1 | grep -Fq 'locally blocked' || fail
+t || dig -p${DNS_PORT} AAAA ipv6.google.com @127.0.0.1 | grep -Fq 'locally blocked' || fail $LINENO
 
 section
-t || dig -p${DNS_PORT} invalid. @127.0.0.1 | grep -Fq NXDOMAIN || fail
-t || dig -p${DNS_PORT} +dnssec invalid. @127.0.0.1 | grep -Fq 'flags: do;' || fail
-t || dig -p${DNS_PORT} PTR 168.192.in-addr.arpa @127.0.0.1 | grep -Fq 'NXDOMAIN' || fail
-t || dig -p${DNS_PORT} +dnssec PTR 168.192.in-addr.arpa @127.0.0.1 | grep -Fq 'flags: do;' || fail
+t || dig -p${DNS_PORT} invalid. @127.0.0.1 | grep -Fq NXDOMAIN || fail $LINENO
+t || dig -p${DNS_PORT} +dnssec invalid. @127.0.0.1 | grep -Fq 'flags: do;' || fail $LINENO
+t || dig -p${DNS_PORT} PTR 168.192.in-addr.arpa @127.0.0.1 | grep -Fq 'NXDOMAIN' || fail $LINENO
+t || dig -p${DNS_PORT} +dnssec PTR 168.192.in-addr.arpa @127.0.0.1 | grep -Fq 'flags: do;' || fail $LINENO
 
 section
-t || dig -p${DNS_PORT} +dnssec darpa.mil @127.0.0.1 2>&1 | grep -Fvq 'RRSIG' || fail
-t || dig -p${DNS_PORT} +dnssec www.darpa.mil @127.0.0.1 2>&1 | grep -Fvq 'RRSIG' || fail
-t || dig -p${DNS_PORT} A download.windowsupdate.com @127.0.0.1 | grep -Fq "NOERROR" || fail
+t || dig -p${DNS_PORT} +dnssec darpa.mil @127.0.0.1 2>&1 | grep -Fvq 'RRSIG' || fail $LINENO
+t || dig -p${DNS_PORT} +dnssec www.darpa.mil @127.0.0.1 2>&1 | grep -Fvq 'RRSIG' || fail $LINENO
+t || dig -p${DNS_PORT} A download.windowsupdate.com @127.0.0.1 | grep -Fq "NOERROR" || fail $LINENO
 
 section
-t || dig -p${DNS_PORT} +short cloakedunregistered.com @127.0.0.1 | grep -Eq '1.1.1.1|1.0.0.1' || fail
-t || dig -p${DNS_PORT} +short MX cloakedunregistered.com @127.0.0.1 | grep -Fq 'locally blocked' || fail
-t || dig -p${DNS_PORT} +short MX example.com @127.0.0.1 | grep -Fvq 'locally blocked' || fail
-t || dig -p${DNS_PORT} NS cloakedunregistered.com @127.0.0.1 | grep -Fiq 'gtld-servers.net' || fail
-t || dig -p${DNS_PORT} +short www.cloakedunregistered2.com @127.0.0.1 | grep -Eq '1.1.1.1|1.0.0.1' || fail
-t || dig -p${DNS_PORT} +short www.dnscrypt-test @127.0.0.1 | grep -Fq '192.168.100.100' || fail
-t || dig -p${DNS_PORT} a.www.dnscrypt-test @127.0.0.1 | grep -Fq 'NXDOMAIN' || fail
-t || dig -p${DNS_PORT} +short ptr 101.100.168.192.in-addr.arpa. @127.0.0.1 | grep -Eq 'www.dnscrypt-test.com' || fail
-t || dig -p${DNS_PORT} +short ptr 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.d.f.ip6.arpa. @127.0.0.1 | grep -Eq 'ipv6.dnscrypt-test.com' || fail
+t || dig -p${DNS_PORT} +short cloakedunregistered.com @127.0.0.1 | grep -Eq '1.1.1.1|1.0.0.1' || fail $LINENO
+t || dig -p${DNS_PORT} +short MX cloakedunregistered.com @127.0.0.1 | grep -Fq 'locally blocked' || fail $LINENO
+t || dig -p${DNS_PORT} +short MX example.com @127.0.0.1 | grep -Fvq 'locally blocked' || fail $LINENO
+t || dig -p${DNS_PORT} NS cloakedunregistered.com @127.0.0.1 | grep -Fiq 'gtld-servers.net' || fail $LINENO
+t || dig -p${DNS_PORT} +short www.cloakedunregistered2.com @127.0.0.1 | grep -Eq '1.1.1.1|1.0.0.1' || fail $LINENO
+t || dig -p${DNS_PORT} +short www.dnscrypt-test @127.0.0.1 | grep -Fq '192.168.100.100' || fail $LINENO
+t || dig -p${DNS_PORT} a.www.dnscrypt-test @127.0.0.1 | grep -Fq 'NXDOMAIN' || fail $LINENO
+t || dig -p${DNS_PORT} +short ptr 101.100.168.192.in-addr.arpa. @127.0.0.1 | grep -Eq 'www.dnscrypt-test.com' || fail $LINENO
+t || dig -p${DNS_PORT} +short ptr 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.d.f.ip6.arpa. @127.0.0.1 | grep -Eq 'ipv6.dnscrypt-test.com' || fail $LINENO
 
 section
-t || dig -p${DNS_PORT} telemetry.example @127.0.0.1 | grep -Fq 'locally blocked' || fail
+t || dig -p${DNS_PORT} telemetry.example @127.0.0.1 | grep -Fq 'locally blocked' || fail $LINENO
 
 section
-t || dig -p${DNS_PORT} dns.google @127.0.0.1 | grep -Fq 'locally blocked' || fail
+t || dig -p${DNS_PORT} dns.google @127.0.0.1 | grep -Fq 'locally blocked' || fail $LINENO
 
 section
-t || dig -p${DNS_PORT} tracker.xdebian.org @127.0.0.1 | grep -Fq 'locally blocked' || fail
-t || dig -p${DNS_PORT} tracker.debian.org @127.0.0.1 | grep -Fqv 'locally blocked' || fail
+t || dig -p${DNS_PORT} tracker.xdebian.org @127.0.0.1 | grep -Fq 'locally blocked' || fail $LINENO
+t || dig -p${DNS_PORT} tracker.debian.org @127.0.0.1 | grep -Fqv 'locally blocked' || fail $LINENO
 
 section
-t || curl --insecure -siL https://127.0.0.1:${HTTP_PORT}/ | grep -Fq 'HTTP/2 404' || fail
-t || curl --insecure -sL https://127.0.0.1:${HTTP_PORT}/dns-query | grep -Fq 'dnscrypt-proxy local DoH server' || fail
+t || curl --insecure -siL https://127.0.0.1:${HTTP_PORT}/ | grep -Fq 'HTTP/2 404' || fail $LINENO
+t || curl --insecure -sL https://127.0.0.1:${HTTP_PORT}/dns-query | grep -Fq 'dnscrypt-proxy local DoH server' || fail $LINENO
 t ||
     echo yv4BAAABAAAAAAABAAACAAEAACkQAAAAgAAAAA== | base64 -d |
     curl -H'Content-Type: application/dns-message' -H'Accept: application/dns-message' --data-binary @- -D - --insecure https://127.0.0.1:${HTTP_PORT}/dns-query 2>/dev/null |
-        grep -Fq application/dns-message || fail
+        grep -Fq application/dns-message || fail $LINENO
 
 kill $(cat /tmp/dnscrypt-proxy.pidfile)
 
 sleep 5
 
 section
-t || grep -Fq 'telemetry.example' blocked-names.log || fail
-t || grep -Fq 'telemetry.*' blocked-names.log || fail
-t || grep -Fq 'tracker.xdebian.org' blocked-names.log || fail
-t || grep -Fq 'tracker.*' blocked-names.log || fail
+t || grep -Fq 'telemetry.example' blocked-names.log || fail $LINENO
+t || grep -Fq 'telemetry.*' blocked-names.log || fail $LINENO
+t || grep -Fq 'tracker.xdebian.org' blocked-names.log || fail $LINENO
+t || grep -Fq 'tracker.*' blocked-names.log || fail $LINENO
 
 section
-t || grep -Fq 'dns.google' blocked-ips.log || fail
-t || grep -Fq '8.8.8.8' blocked-ips.log || fail
+t || grep -Fq 'dns.google' blocked-ips.log || fail $LINENO
+t || grep -Fq '8.8.8.8' blocked-ips.log || fail $LINENO
 
 section
-t || grep -Fq 'a.www.dnscrypt-test' nx.log || fail
+t || grep -Fq 'a.www.dnscrypt-test' nx.log || fail $LINENO
 
 section
-t || grep -Fq 'a.www.dnscrypt-test' nx.log || fail
+t || grep -Fq 'a.www.dnscrypt-test' nx.log || fail $LINENO
 
 section
-t || grep -Eq 'microsoft.com.*PASS.*[^-]$' query.log || fail
-t || grep -Eq 'microsoft.com.*PASS.*-$' query.log || fail
-t || grep -Eq 'ipv6.google.com.*SYNTH' query.log || fail
-t || grep -Eq 'invalid.*SYNTH' query.log || fail
-t || grep -Eq '168.192.in-addr.arpa.*SYNTH' query.log || fail
-t || grep -Eq 'darpa.mil.*FORWARD' query.log || fail
-t || grep -Eq 'www.darpa.mil.*FORWARD' query.log || fail
-t || grep -Eq 'download.windowsupdate.com.*FORWARD' query.log || fail
-t || grep -Eq 'cloakedunregistered.com.*CLOAK' query.log || fail
-t || grep -Eq 'www.cloakedunregistered2.com.*CLOAK' query.log || fail
-t || grep -Eq 'www.dnscrypt-test.*CLOAK' query.log || fail
-t || grep -Eq 'a.www.dnscrypt-test.*NXDOMAIN' query.log || fail
-t || grep -Eq 'telemetry.example.*REJECT' query.log || fail
-t || grep -Eq 'dns.google.*REJECT' query.log || fail
-t || grep -Eq 'tracker.xdebian.org.*REJECT' query.log || fail
-t || grep -Eq 'tracker.debian.org.*PASS' query.log || fail
-t || grep -Eq '[.].*NS.*PASS' query.log || fail
+t || grep -Eq 'microsoft.com.*PASS.*ms.[a-zA-Z]' query.log || fail $LINENO
+t || grep -Eq 'microsoft.com.*PASS.*ms.-.' query.log || fail $LINENO
+t || grep -Eq 'ipv6.google.com.*SYNTH' query.log || fail $LINENO
+t || grep -Eq 'invalid.*SYNTH' query.log || fail $LINENO
+t || grep -Eq '168.192.in-addr.arpa.*SYNTH' query.log || fail $LINENO
+t || grep -Eq 'darpa.mil.*FORWARD' query.log || fail $LINENO
+t || grep -Eq 'www.darpa.mil.*FORWARD' query.log || fail $LINENO
+t || grep -Eq 'download.windowsupdate.com.*FORWARD' query.log || fail $LINENO
+t || grep -Eq 'cloakedunregistered.com.*CLOAK' query.log || fail $LINENO
+t || grep -Eq 'www.cloakedunregistered2.com.*CLOAK' query.log || fail $LINENO
+t || grep -Eq 'www.dnscrypt-test.*CLOAK' query.log || fail $LINENO
+t || grep -Eq 'a.www.dnscrypt-test.*NXDOMAIN' query.log || fail $LINENO
+t || grep -Eq 'telemetry.example.*REJECT' query.log || fail $LINENO
+t || grep -Eq 'dns.google.*REJECT' query.log || fail $LINENO
+t || grep -Eq 'tracker.xdebian.org.*REJECT' query.log || fail $LINENO
+t || grep -Eq 'tracker.debian.org.*PASS' query.log || fail $LINENO
+t || grep -Eq '[.].*NS.*PASS' query.log || fail $LINENO
 
 section
-t || grep -Fq 'tracker.debian.org' allowed-names.log || fail
-t || grep -Fq '*.tracker.debian' allowed-names.log || fail
+t || grep -Fq 'tracker.debian.org' allowed-names.log || fail $LINENO
+t || grep -Fq '*.tracker.debian' allowed-names.log || fail $LINENO
 
 section
 ../dnscrypt-proxy/dnscrypt-proxy -loglevel 3 -config test3-dnscrypt-proxy.toml -pidfile /tmp/dnscrypt-proxy.pidfile &
 sleep 5
 
 section
-t || dig -p${DNS_PORT} A microsoft.com @127.0.0.1 | grep -Fq "NOERROR" || fail
-t || dig -p${DNS_PORT} A MICROSOFT.COM @127.0.0.1 | grep -Fq "NOERROR" || fail
+t || dig -p${DNS_PORT} A microsoft.com @127.0.0.1 | grep -Fq "NOERROR" || fail $LINENO
+t || dig -p${DNS_PORT} A MICROSOFT.COM @127.0.0.1 | grep -Fq "NOERROR" || fail $LINENO
 
 kill $(cat /tmp/dnscrypt-proxy.pidfile)
 sleep 5
@@ -154,8 +154,8 @@ section
 sleep 5
 
 section
-t || dig -p${DNS_PORT} A microsoft.com @127.0.0.1 | grep -Fq "NOERROR" || fail
-t || dig -p${DNS_PORT} A cloudflare.com @127.0.0.1 | grep -Fq "NOERROR" || fail
+t || dig -p${DNS_PORT} A microsoft.com @127.0.0.1 | grep -Fq "NOERROR" || fail $LINENO
+t || dig -p${DNS_PORT} A cloudflare.com @127.0.0.1 | grep -Fq "NOERROR" || fail $LINENO
 
 kill $(cat /tmp/odoh-proxied.pidfile)
 sleep 5

.github/ISSUE_TEMPLATE/bugs.md

@@ -1,65 +1,57 @@
 ---
-name: "\U0001F41E Issues"
-about: Bug reports
+name: "Bug Report"
+about: Report a bug you've encountered
 title: ''
 labels: ''
 assignees: ''
 
 ---
 
-THE TRACKER IS DEDICATED TO KEEPING TRACK OF *BUGS*,
-preferably after they have been already discussed and confirmed to be reproducible.
+Thanks for taking the time to report a bug! Before filing, please note:
 
-FOR ASSISTANCE, PLEASE CLOSE THIS FORM AND USE THE DISCUSSIONS SECTION INSTEAD:
-https://github.com/DNSCrypt/dnscrypt-proxy/discussions/categories/q-a
+**Need help or have a question?** The issue tracker is for confirmed, reproducible bugs only. For installation help, configuration help, troubleshooting, or general questions, please read the [documentation](https://dnscrypt.info/doc) first. If you still need assistance, use our [Q&A Discussions](https://github.com/DNSCrypt/dnscrypt-proxy/discussions/categories/q-a) instead - you'll likely get a faster response there.
 
-~~~
+---
 
-Reported bugs must reproducible in the context described in the "Context" section.
+### Before submitting
 
-Installation and configuration issues are not bugs, but individual assistance request.
+Please make sure:
 
-Context: the LATEST version of `dnscrypt-proxy` (precompiled binaries downloaded from this repository) is correctly installed and configured on your system, but something doesn't seem to produce the expected result.
+- You've read the [documentation](https://dnscrypt.info/doc) and this is not answered there already
+- You're running the **latest version** of `dnscrypt-proxy` (precompiled binaries from this repository)
+- The software is correctly installed and configured
+- You can reliably reproduce the issue
 
-If the bug is not trivial to reproduce on any platform, please include ALL the steps required to reliably duplicate it, on a vanilla, generic install of macOS, Windows, OpenBSD or Ubuntu Linux system, in their most current version.
+If the bug requires specific steps to reproduce, please include detailed instructions that would work on a fresh install of macOS, Windows, OpenBSD, or Ubuntu Linux.
 
-If you don't have any clear understanding of the issue or can't enumerate the steps to reproduce it, open a discussion instead:
-https://github.com/DNSCrypt/dnscrypt-proxy/discussions
+Not sure if it's a bug? Start a [discussion](https://github.com/DNSCrypt/dnscrypt-proxy/discussions) first - we're happy to help figure it out.
 
+---
 
-## Output of the following commands:
+## Diagnostic output
 
-./dnscrypt-proxy -version
+Please run these commands and paste the output:
 
+```
+./dnscrypt-proxy -version
 ./dnscrypt-proxy -check
-
 ./dnscrypt-proxy -resolve example.com
+```
 
-
+- [ ] I read the documentation and this is not answered there
 - [ ] Initially raised as discussion #...
 
+## What's happening?
 
+## When does this occur?
 
-## *What* is affected by this bug?
-
-
-
-## *When* does this occur?
-
-
-
-## *Where* does it happen?
-
-
-
-## *How* do we replicate the issue?
-<!-- Please list all the steps required to reliably replicate it, starting from a newly installed operating system -->
-
-
+## Where does it happen?
 
-## Expected behavior (i.e. solution)
+## How do we replicate the issue?
 
+<!-- Starting from a fresh OS install, what steps trigger this bug? -->
 
+## Expected behavior
 
-## Other Comments
+## Additional context
 

.github/ISSUE_TEMPLATE/suggestions.md

@@ -1,22 +1,41 @@
 ---
-name: "🙋🏽 Planned changes"
-about: List of planned changes
+name: "Feature Request"
+about: Suggest an idea or improvement
 title: ''
 labels: ''
 assignees: ''
 
 ---
 
-The starting point should be a discussion.
+Got an idea for improving dnscrypt-proxy? We'd love to hear it!
 
-https://github.com/DNSCrypt/dnscrypt-proxy/discussions/
+Please read the [documentation](https://dnscrypt.info/doc) first in case the behavior already exists or is already documented.
 
-Suggestions may be raised as an "Ideas" discussion.
+### Start with a discussion
 
-We can then determine if the discussion needs to be escalated into a "planned change" or not.
+The best way to propose a new feature is to start in [Discussions](https://github.com/DNSCrypt/dnscrypt-proxy/discussions/) under the "Ideas" category. This lets us:
 
-This will help us ensure that the issue tracker properly reflects ongoing or needed work on the project.
+- Talk through the idea together
+- Get feedback from other users
+- Figure out the best approach
+
+Once we've discussed and agreed on a direction, we can convert it into a tracked issue here.
+
+This helps keep the issue tracker focused on work that's ready to be done.
 
 ---
 
 - [ ] Initially raised as discussion #...
+
+## Summary
+
+<!-- Brief description of your idea -->
+
+## Why would this be useful?
+
+<!-- What problem does it solve? Who would benefit? -->
+
+## Possible implementation
+
+<!-- Optional: any thoughts on how this could work? -->
+

.github/workflows/autocloser.yml

@@ -1,12 +1,16 @@
 name: Autocloser
 on: [issues]
+
+permissions:
+  issues: write
+
 jobs:
   autoclose:
     runs-on: ubuntu-latest
     steps:
-    - name: Autoclose issues that did not follow issue template
-      uses: roots/issue-closer@v1.2
-      with:
-        repo-token: ${{ secrets.GITHUB_TOKEN }}
-        issue-close-message: "This issue was automatically closed because it did not follow the issue template. We use the issue tracker exclusively for bug reports and feature additions that have been previously discussed. However, this issue appears to be a support request. Please use the discussion forums for support requests."
-        issue-pattern: ".*(do we replicate the issue|Expected behavior|raised as discussion|# Impact).*"
+      - name: Autoclose issues that did not follow issue template
+        uses: roots/issue-closer@fec85f2a845cd6cf33eda6e6a4c93026e71f86d1 # v1.2
+        with:
+          repo-token: ${{ secrets.GITHUB_TOKEN }}
+          issue-close-message: "This issue was automatically closed because it did not follow the issue template. We use the issue tracker exclusively for bug reports and feature additions that have been previously discussed. However, this issue appears to be a support request. Please use the discussion forums for support requests."
+          issue-pattern: ".*(do we replicate the issue|Expected behavior|raised as discussion|# Impact).*"