v1.7.8

• implement RFC compliant alert and content type handling. Fragmented alerts and unknown content types are now rejected.

• s2n-tls bindings default to a larger 16kB record size, matching OpenSSL and Rustls.

• fix: null evp_cipher_ctx after free in s2n_session_key_alloc() error path by @CarolYeh910 in #6024

• fix(docs): Hide unstable-renegotiate poll_send cfg in rustdoc by @Mark-Simulacrum in #6022

• test: peer_cert_chain behavior with elided CA by @jmayclin in #5914

• fix(psk): return usage error for uninitialized offered PSK by @mmustafasenoglu in #6009

• fix: prevent use-after-free in Connection::set_config when C setter rejects replacement by @CarolYeh910 in #6023

• chore: remove inline policy builder code by @CarolYeh910 in #6025

• chore(bindings): release bump by @jmayclin in #6027

• fix: zero-init hash state and guard async offload wipe against in-flight ops by @CarolYeh910 in #6028

• fix: handshake integrity over content types by @jmayclin in #6017

• test: add behavior tests for Connection::wipe by @jmayclin in #6029

• fix(bindings): default to efficient record size by @jmayclin in #6020

• chore: update http test with new status code by @jmayclin in #6034

• ci: install musl from Linux apt and upgrade octokit action to Node 24 by @CarolYeh910 in #6031

• fix: fail explicitly when server selects unavailable KEM group in key share recv by @CarolYeh910 in #6026

• feat(metrics): flush on drop by @jmayclin in #6032

• fix: Add fail-closed default cases to all switch statements by @alexw91 in #6006

• fix: Zero-initialize all local variable declarations by @alexw91 in #6007

• feat: add s2n_connection_handshake_complete() public API by @FreezB11 in #5906

• fix(connection): Make set_config validator replacement transactional by @alexw91 in #5847

• build(deps): bump cross-platform-actions/action from 1.3.0 to 1.4.0 in /.github/workflows in the all-gha-updates group by @dependabot[bot] in #6035

• test: print assertion backtraces in FAIL_MSG_PRINT by @firedog1234 in #5785

• fix(cbc): Disable padding after key init and check decrypt len by @alexw91 in #6042

• fix(metrics): jitter export timing by @jmayclin in #6046

• chore: bump metrics subscriber for release by @jmayclin in #6050

• @mmustafasenoglu made their first contribution in #6009

• @FreezB11 made their first contribution in #5906

Full Changelog: v1.7.7...v1.7.8