What's Changed
- Limit push-triggered CI to main and fips-* branches by @geedo0 in #3478
- Add ML-KEM support to HPKE (draft-ietf-hpke-pq-05) by @jakemas in #3277
- ci: fix failing librelp integration by @prasden in #3480
- ci: record integration failure metadata by @prasden in #3482
- Implement SHA-256 through the AWS-LC provider by @geedo0 in #3433
- Document the AWS-LC provider by @geedo0 in #3434
- Use OpenSSL-compatible long names for ML-DSA OIDs by @justsmth in #3481
- Gate ruby master rubygems ML-DSA tests on key loading, not generation by @justsmth in #3479
- Register -tls1_2 and -tls1_3 flags in bssl client by @WillChilds-Klein in #3492
- Add legacy SSL function codes for OpenSSL compatibility by @justsmth in #3491
- Fix tpm2-tss integration build without SM4 by @justsmth in #3507
- Export OpenSSL-compatible ECPKParameters buffer APIs by @justsmth in #3493
- ci: handle expired Bullseye repository in legacy GCC jobs by @justsmth in #3508
- Fix BN_CTX leak on allocation failure in
EC_GROUP_new_curve_GFpby @justsmth in #3506 - Fix EVP signing-context control collision by @justsmth in #3458
- Add OpenSSL-compatible EVP_CTRL_CCM_* aliases by @justsmth in #3490
- Cache the CMake-from-source image layers in CMake compatibility CI by @justsmth in #3510
- Add ERR_num_errors and ERR_pop_to_count by @WillChilds-Klein in #3501
- ci: fix mariadb integration by @prasden in #3518
- ci: fix librelp integration test by @prasden in #3517
- ci: fix OpenSSH integration by @prasden in #3519
- ci: enable shared libraries for clang-tidy provider build by @prasden in #3520
- Remove duplicate Python CRT integration work by @justsmth in #3525
- Thin the compiler-tests config axis by @justsmth in #3515
- Stop building the test suite in the ABI diff image by @justsmth in #3512
- Run the macOS jobs on a single OS version by @justsmth in #3513
- Replace the error-queue trim helpers with a suppression scope by @WillChilds-Klein in #3529
- Bump the pip-ci group across 1 directory with 3 updates by @dependabot[bot] in #3399
- Fail the ABI check when abidiff cannot run by @justsmth in #3511
- Avoid duplicate formal-verification runs on PR branches by @justsmth in #3526
- Parallelise the serial Windows builds in Windows Alternative Compilers by @justsmth in #3516
- Report unexpected EOF as
SSL_ERROR_SSLfor OpenSSL 3.x parity by @prasden in #3484 - Prepare v5.9.0 by @justsmth in #3523
Full Changelog: v5.8.0...v5.9.0