Weekly release for August 25 2025
Release Summary

Add a copy of the rfc9151 policy (20250429) which pins all of the policy parts to the current version.
Adds new TLSv1.3-enabled security policies for CloudFront's outbound ("upstream") connections to origin servers. We also add similar policies with PQ enabled.

What's Changed

chore: bindings release 0.3.24 by @johubertj in chore: bindings release 0.3.24 aws/s2n-tls#5455
chore: apply clippy fixes by @johubertj in chore: apply clippy fixes aws/s2n-tls#5459
Add fixed version of the rfc9151 policy by @Mark-Simulacrum in Add fixed version of the rfc9151 policy aws/s2n-tls#5277
test(integration): add record padding test by @jmayclin in test(integration): add record padding test aws/s2n-tls#5451
refactor(stuffer): Rename s2n_stuffer_has_pem_encapsulated_block by @alice-aws in refactor(stuffer): Rename s2n_stuffer_has_pem_encapsulated_block aws/s2n-tls#5465
ci: don't include tls/extensions in SAW build by @lrstewart in ci: don't include tls/extensions in SAW build aws/s2n-tls#5466
ci: fix wikipedia network test + better error message by @lrstewart in ci: fix wikipedia network test + better error message aws/s2n-tls#5470
refactor: setup replacement default policies by @lrstewart in refactor: setup replacement default policies aws/s2n-tls#5464
Add TLSv1.3 (classical + PQ) policies for CloudFront Upstream by @WillChilds-Klein in Add TLSv1.3 (classical + PQ) policies for CloudFront Upstream aws/s2n-tls#5460

New Contributors

@alice-aws made their first contribution in refactor(stuffer): Rename s2n_stuffer_has_pem_encapsulated_block aws/s2n-tls#5465

Full Changelog: aws/s2n-tls@v1.5.24...v1.5.25

View the full release notes at https://github.com/aws/s2n-tls/releases/tag/v1.5.25.