v1.4.17

What's Changed

• chore: cleanup duplicate duvet citations by @WesleyRosenblum in #4587
• ci: fix cppcheck errors by @lrstewart in #4589
• compliance: update generate_report.sh to point to compliance directory by @WesleyRosenblum in #4588
• feature: new compatibility-focused security policy preferring ECDSA by @lrstewart in #4579
• ci(nix): Fix integ pq test in a devShell by @dougch in #4576
• chore: update s2n_stuffer_printf CBMC harness by @tautschnig in #4531
• fix: error rather than empty cipher suites by @lrstewart in #4597
• refactor(binding): more accurate naming for const str helper by @jmayclin in #4601
• Fix: update default cert chain for unit tests by @jouho in #4582
• fix(s2n_session_ticket_test): correct clock mocking by @jmayclin in #4602
• chore(bindings): fix shebang in generate.sh by @zh-jq-b in #4603
• testing(bindings): add new test helper by @jmayclin in #4596
• test: add pcap testing crate by @lrstewart in #4604
• s2n-tls rust binding: expose selected application protocol by @zh-jq-b in #4599
• chore: use CBMC version 5.95.1 by @tautschnig in #4586
• example(bindings): add async ConfigResolver by @jmayclin in #4477
• ci: shallow clone musl repo by @jmayclin in #4611
• docs: Add back suggested FIPS + TLS1.3 policy by @lrstewart in #4605
• docs: add timeout note to blinding delay docs by @lrstewart in #4621
• test(bindings/s2n-tls): refactor testing::s2n-tls tests by @jmayclin in #4613
• Perform 2-RTT Handshake to upgrade to PQ when possible by @alexw91 in #4526
• chore: make cbmc proof build more strict by adding -Werror flag by @jouho in #4606
• bug: Fixing bash error by @maddeleine in #4624

New Contributors

• @zh-jq-b made their first contribution in #4603

Full Changelog: v1.4.16...v1.4.17