v2.10.3

What's Changed

• ci: use zizmor and remediate findings by @inahga in #548
• chore: update workflows by @ldez in #547
• build(deps): bump golang.org/x/net from 0.40.0 to 0.55.0 by @dependabot[bot] in #549
• Fix locking in CompleteOrder error path by @notroj in #553
• Fix deadlock from recursive RLock in Order() by @notroj in #555
• Use RFC 7093 SHA-512 truncated SKIs by @pzduniak in #551
• Normalize the serial in NewCertID so ARI replaces lookups match by @shyney7 in #556
• Allow ML-DSA roots and end-entities by @alebastr in #565
• go-jose: bump to v4.1.8 by @jsha in #568
• Allow ML-DSA account keys by @alebastr in #570
• Use latest stable Go to build release artifacts by @alebastr in #572

New Contributors

• @notroj made their first contribution in #553
• @pzduniak made their first contribution in #551
• @shyney7 made their first contribution in #556

Full Changelog: v2.10.1...v2.10.3