v5.6.0

What's Changed

• Fix thread-local destructors with MSYS2 clang64 by @justsmth in #3405
• Share Bedrock model settings between autofix and util/backport by @tianyiy-tim in #3395
• ci: remove Graviton5 c9g fleet and job by @nebeid in #3400
• Fix grpc-master-x86_64 integration test by @nhatnghiho in #3346
• Update MySQL CI integration to mysql-cluster-9.7.2 by @WillChilds-Klein in #3409
• BoringSSL: Fix beeu_mod_inverse_vartime on aarch64 by @geedo0 in #3381
• Avoid /usr/bin/env dependency in FIPS compiler wrapper by @justsmth in #3411
• Add brainpoolP224r1, brainpoolP256r1, brainpoolP320r1, brainpoolP384r1, brainpoolP512r1 EC group support by @sfarestam-iproov in #3286
• Document how to build applications against AWS-LC by @WillChilds-Klein in #3386
• Harden CLI input validation and file output by @nhatnghiho in #3347
• Add brainpool EC_group symbols; make public API symbol registration self-service by @justsmth in #3423
• Add CPython 3.15 integration test by @WillChilds-Klein in #3422
• Add memcached integration test by @WillChilds-Klein in #3410
• Add Keccak-256 (Ethereum-style, original 0x01 padding) by @fabrice102 in #3245
• ci: pin security review to the PR head commit by @jakemas in #3425
• Reject GCM IV lengths below 8 in EVP_CTRL_GCM_IV_GEN by @dougch in #3424
• Add Backport Tool Analysis by @tianyiy-tim in #3389
• Enable mtr retries in MariaDB CI integration by @justsmth in #3427
• ci: install Rust in the Linux docker images by @justsmth in #3393
• Fix Windows OPENSSL_SMALL Debug builds with NASM 2.16.01 by @justsmth in #3420
• ci: use preinstalled Rust in pyopenssl integration by @geedo0 in #3430
• ci: re-enable gcc-14 + FIPS build in gcc-14-hardened job by @dougch in #3428
• Add backport apply command by @tianyiy-tim in #3414
• Add AWS-LC provider build and CI infrastructure by @geedo0 in #3419
• Update pull request template by @justsmth in #3436
• Move network-dependent s_client tests into integration_test by @justsmth in #3407
• Add latest compiler coverage to CI by @justsmth in #3406
• Bump the cargo-ci-lambda group in /tests/ci/lambda with 4 updates by @dependabot[bot] in #3390
• Decouple symbol versioning from distribution packaging mode by @justsmth in #3426
• Upgrade JDK to JDK21 for ACCP tests by @geedo0 in #3440
• Fix ML-DSA externalMu JSON tags by @JunMin765677 in #3439
• Pin librelp to a release, wrap SSL_get_shutdown for failing integration test by @prasden in #3431
• Install OpenSSL-compat libcrypto.pc and libssl.pc with the shim by @justsmth in #3370
• ci: stop deployment noise for maintainers by @prasden in #3445
• ci: consolidate android-omnibus deployments on external PRs by @prasden in #3447
• Define BN_FLG_CONSTTIME as zero for source compatibility by @WillChilds-Klein in #3446
• Re-import mlkem-native and mldsa-native; drop custom meta headers by @hanno-becker in #3367
• Prepare 5.6.0 by @justsmth in #3448

New Contributors

• @sfarestam-iproov made their first contribution in #3286
• @JunMin765677 made their first contribution in #3439

Full Changelog: v5.5.0...v5.6.0