v5.2.0

What's Changed

• OPENSSL_SMALL: imply MY_ASSEMBLER_IS_TOO_OLD_FOR_512AVX on x86_64 by @justsmth in #3319
• Documented and added feature stability tests for EVP_AEAD implementations that support concurrency through EVP_AEAD_CTX_seal/gather functions by @torben-hansen in #3325
• Fix libgit2, xtrabackup, grpc tests and add OSSL3 peer cert APIs by @WillChilds-Klein in #3331
• Null-guard EVP_AEAD_CTX_cleanup for fork+shm safety by @WillChilds-Klein in #3336
• Add Symbol Versioning Support by @skmcgrail in #3096
• Symbol versioning follow-ups: register peer cert APIs, fix dist_pkg_tests matrix by @WillChilds-Klein in #3338
• Update security review workflow by @nhatnghiho in #3333
• Add ML-KEM decapsulate CASTs to break-kat tooling by @WillChilds-Klein in #3342
• Pin required libssh2 integration to a release; track main separately by @WillChilds-Klein in #3343
• ci: harden GitHub Actions workflows against script injection by @justsmth in #3323
• openssl/target.h: Allow building for the e2k architecture by @arrowd in #3314
• Bump github.com/cloudflare/circl from 1.6.3 to 1.6.4 in /util/vecgen in the gomod-vecgen group by @dependabot[bot] in #3327
• Bump github.com/google/go-cmp from 0.6.0 to 0.7.0 in /tests/ci/x509/limbo-report in the gomod-limbo-report group by @dependabot[bot] in #3328
• Add CTS mode, krb5 integration test by @WillChilds-Klein in #3308
• Gate s2n-bignum _alt variants under OPENSSL_SMALL by @justsmth in #3320
• Fix SSL_OP_IGNORE_UNEXPECTED_EOF being ignored over sockets by @prasden in #3341
• Prepare v5.2.0 by @WillChilds-Klein in #3348

New Contributors

• @arrowd made their first contribution in #3314

Full Changelog: v5.1.0...v5.2.0