Release v0.3.0

What's Changed

• chore: Render compare benches by @tikhop in #27
• chore(deps): bump marocchino/sticky-pull-request-comment from 2 to 3 by @dependabot[bot] in #28
• chore(deps): bump taiki-e/cache-cargo-install-action from 2 to 3 by @dependabot[bot] in #29
• chore(deps): bump the dependencies group across 1 directory with 2 updates by @dependabot[bot] in #31
• feat: EKU policy by @tikhop in #32
• chore: Update examples by @tikhop in #33
• chore: Improve fuzzing by @tikhop in #35
• chore: Prepare for release 0.3.0 by @tikhop in #36

Full Changelog: v0.2.0...v0.3.0

Release v0.2.0

What's Changed

• feat: Add Validator::validate(leaf, intermediates), a diagnostic-free entry point.
• refactor: Make diagnostic_callback optional by @tikhop in #24
• chore: Benches by @tikhop in #25

Full Changelog: v0.1.0...v0.2.0

Release v0.1.0

Added

• RFC 5280 chain validation: signature, validity, key usage, basic
  constraints, name constraints, policy constraints.
• Server-identity policy (ServerIdentityPolicy) for TLS-style hostname
  verification.
• Policy composition primitives: AllOfPolicies, AnyPolicy,
  OneOfPolicies.
• Pluggable crypto backends: aws_lc (aws-lc-rs), ring, and
  rust_crypto (RustCrypto crates), selected via Cargo feature flags.
• Backend-independent certificate types and chain-building primitives,
  re-exporting x509-parser.
• x509-validator-testkit: certificate-building test helpers (dev-only).
• Benchmark suite (x509-validator-bench): compare (cross-backend/parser
  benchmarks via divan) and measure (regression tracking via criterion),
  including a real-world Apple receipt-signing chain fixture.

Full Changelog: https://github.com/namecare/x509-validator/commits/v0.1.0