Tink C++ 2.9.0

To get started, see the setup guide.

The complete list of changes since 2.8.0 can be found here.

API and parameter additions

• Added ML-DSA and SLH-DSA support to KeysetDeriver.
• Added SlhDsaPrivateKey::CreateFromSeed method to expand a private seed
  into an SLH-DSA key pair.
• Added APIs to parse PEM strings into public/private signing keys.
• Added support for MLDSA44-Ed25519-SHA512 and MLDSA44-ECDSA-P256-SHA256
  to the Composite ML-DSA library.
• Added APIs for pre-hash signing (Prehash and SignPrehash), and introduced support for External Mu ML-DSA via these APIs.

API changes

• Deprecated tink/signature/signature_pem_keyset_reader.h; users should use
  tink/pem/signature_key_parser.h instead.
• We plan to remove primitive_set from the public API. We can no longer
  support users who define custom primitives (and hence took as input a
  primitive_set). We apologize for this, but believe that only very few
  users will be affected. Please file an issue if you need help supporting
  your use case.

Bug fixes

• Fixed a memory safety bug in JWT key creation. See
  #24 for details. Credits go to
  @Daquisu.

Dependencies

• Upgraded boringssl to 0.20260803.0.