s2n 1.5.13

[BrewTestBot]

Created by brew bump

---

Created with brew bump-formula-pr.

release notes

Weekly release for February 22 2025
Release Summary

Add bindings for the External PSK functionality.
Adds 20250211, a TLS 1.3-exclusive security policy intended for RFC 9151 migration.
A breaking change was made to the renegotiation callback interface. This only affects Rust customers using the unstable-renegotiate

feature.
Adds an option to prevent s2n-tls from overriding the libcrypto RAND engine.
Adds async support to s2n_cert_validation_callback.
Reduced connection memory usage by an estimated 4 to 5 percent.
A successful cert validation callback should return only S2N_SUCCESS. Previously, both 0 and any positive return value were considered successful.

What's Changed

test: add minimal openssl-3.0-fips test by @lrstewart in test: add minimal openssl-3.0-fips test aws/s2n-tls#5081
feat(bindings): add external psk apis by @jmayclin in feat(bindings): add external psk apis aws/s2n-tls#5061
Fixed formatting for debugging statements by @johubertj in Fixed formatting for debugging statements aws/s2n-tls#5094
chore: ktls buildspec by @dougch in chore: ktls buildspec aws/s2n-tls#5083
chore: bindings release 0.3.11 by @goatgoose in chore: bindings release 0.3.11 aws/s2n-tls#5098
fix(integrationv2): Skip unsupported client auth tests by @goatgoose in fix(integrationv2): Skip unsupported client auth tests aws/s2n-tls#5096
build(deps): bump aws-actions/configure-aws-credentials from 4.0.2 to 4.1.0 in /.github/workflows in the all-gha-updates group across 1 directory by @dependabot in build(deps): bump aws-actions/configure-aws-credentials from 4.0.2 to 4.1.0 in /.github/workflows in the all-gha-updates group across 1 directory aws/s2n-tls#5107
refactor: remove s2n_hmac_is_available by @lrstewart in refactor: remove s2n_hmac_is_available aws/s2n-tls#5104
refactor: remove unused evp support for md5+sha1 by @lrstewart in refactor: remove unused evp support for md5+sha1 aws/s2n-tls#5106
fix: allow b64 decoding using libcrypto for sidechannel resistance by @jmayclin in fix: allow b64 decoding using libcrypto for sidechannel resistance aws/s2n-tls#5103
fix: don't enable custom random for openssl fips by @jmayclin in fix: don't enable custom random for openssl fips aws/s2n-tls#5093
ci: add default provider to openssl-3.0-fips by @lrstewart in ci: add default provider to openssl-3.0-fips aws/s2n-tls#5114
Revert "refactor: remove unused evp support for md5+sha1 (#5106)" by @lrstewart in Revert "refactor: remove unused evp support for md5+sha1 (#5106)" aws/s2n-tls#5118
Add new security policy (20250211) by @Mark-Simulacrum in Add new security policy (20250211) aws/s2n-tls#5111
refactor: move "s2n_libcrypto_is" methods into s2n_libcrypto.h by @lrstewart in refactor: move "s2n_libcrypto_is" methods into s2n_libcrypto.h aws/s2n-tls#5117
bindings: unpin openssl crate from a specific patch version by @boquan-fang in bindings: unpin openssl crate from a specific patch version aws/s2n-tls#5120
chore: fix a typo in API comments by @boquan-fang in chore: fix a typo in API comments aws/s2n-tls#5123
build(deps): update rand requirement by @boquan-fang in build(deps): update rand requirement aws/s2n-tls#5125
fix(bindings): make Context borrow immutable by @jmayclin in fix(bindings): make Context borrow immutable aws/s2n-tls#5071
feat: Option to disable RAND engine override by @goatgoose in feat: Option to disable RAND engine override aws/s2n-tls#5108
refactor: use EVP_MD_fetch() if available by @lrstewart in refactor: use EVP_MD_fetch() if available aws/s2n-tls#5116
chore: binding release 0.3.12 by @boquan-fang in chore: binding release 0.3.12 aws/s2n-tls#5128
fix(bindings): remove mutation behind Arc by @jmayclin in fix(bindings): remove mutation behind Arc aws/s2n-tls#5124
chore: remove unused well-known-endpoints.py by @jmayclin in chore: remove unused well-known-endpoints.py aws/s2n-tls#5127
feat: add async cert validation support by @CarolYeh910 in feat: add async cert validation support aws/s2n-tls#5110
ci: add check for third-party-src in disable rand override buildspec by @boquan-fang in ci: add check for third-party-src in disable rand override buildspec aws/s2n-tls#5137
refactor: always use EVP hashing by @lrstewart in refactor: always use EVP hashing aws/s2n-tls#5121
fix: update callback return value by @CarolYeh910 in fix: update callback return value aws/s2n-tls#5136
ci: always set values for command line defines by @lrstewart in ci: always set values for command line defines aws/s2n-tls#5126

Full Changelog: aws/s2n-tls@v1.5.12...v1.5.13

[github-actions]

🤖 An automated task has requested bottles to be published to this PR.