v5.3.0

What's Changed

• aead: require &mut self for seal/open and add TLS AEAD variants by @janrueth in #514
• Add native HKDF bindings by @punkeel in #525
• RTG-5132 Bump BoringSSL by @bwesterb in #524
• CI: exclude non-BoringSSL symbols, fix outdated Node.js warnings, clean up Windows and Go setup by @Lekensteyn in #529
• Add X509Ref::check_host_with_flags (fixes #530) by @nox in #531
• Back-compat shims for v4 by @kornelski in #532
• Add action-aware certificate selection callbacks by @nox in #533

New Contributors

• @punkeel made their first contribution in #525

Full Changelog: v5.2.0...v5.3.0