Security fixes
GHSA-47hw-gvq5-r2gm - client-side Handler callbacks reachable with invalid channel IDs
A mirror of GHSA-m65r-rprj-r5rg for the client side - Handler per-channel callbacks are called even when the server supplies an invalid (never opened) channel ID. Depending on what the handler does this can lead to a vulnerability.
GHSA-p8qx-h547-fjw9 - MAC-requiring block cipher can be negotiated without MAC and panic
Two peers disagreeing on supported MACs can end up negotiating none MAC for a cipher that requires one, which leads to the session task panicking.