sendmail 8.18.0.Alpha2 is available for testing.
It has full DANE support when OpenSSL 1.1 or 3.x are used.

To check: the output of
sendmail -bt -d0.3 </dev/null
must include
HAVE_SSL_CTX_dane_enable

Please monitor sendmail to find problems, e.g.,
- verify=DANE_FAIL: those cases need to be investigated:
  is there a problem with the code or a problem with the server?
- log entries of the form:
  "TLSA=%s, type=%d-%d-%d:%02x, status=unsupported",
  "ERROR: ssl_dane_enable() INCONSISTENY: %d usable TLSA RRs found but \"supported\" flag is set (%d)\n",
  indicate a problem and need to be checked too!
- this is "harder" to detect: missing verify=TRUSTED
  when DANE should have been used.
  It could be checked for servers which are known to have valid TLSA RRs
  (maybe using a LOCAL_TLS_RCPT ruleset?)

.