Commit f2fdf2b9a9 for bind

commit f2fdf2b9a947ce66423046a131b6d654a91dece7
Author: Ondřej Surý <ondrej@isc.org>
Date:   Tue Nov 10 12:02:00 2026 +0100

    Skip RRSIG in the wildcard type-mismatch test

    The test draws a random non-meta query type and expects a NODATA
    response. RRSIG falls into that range and is now answered with
    FORMERR, so the test failed whenever hypothesis happened to pick it.

    Assisted-by: Claude:claude-fable-5-2

diff --git a/bin/tests/system/wildcard/tests_wildcard.py b/bin/tests/system/wildcard/tests_wildcard.py
index e994bc4609..0d2e34c3f0 100644
--- a/bin/tests/system/wildcard/tests_wildcard.py
+++ b/bin/tests/system/wildcard/tests_wildcard.py
@@ -82,6 +82,9 @@ def test_wildcard_rdtype_mismatch(
     """
     assume(rdtype != WILDCARD_RDTYPE)

+    # Standalone RRSIG queries are rejected with FORMERR.
+    assume(rdtype != dns.rdatatype.RRSIG)
+
     # NS and SOA are present in the zone and DS gets answered from parent.
     assume(
         not (