• CI improvements by @kornelski in https://github.com/cloudflare/boring/pull/490
• unsafe_op_in_unsafe_fn by @kornelski in https://github.com/cloudflare/boring/pull/493
• ci: add Semgrep OSS scanning workflow by @hrushikeshdeshpande in https://github.com/cloudflare/boring/pull/501
• Expose DTLS version constants in SslVersion by @vynious in https://github.com/cloudflare/boring/pull/503
• Let crates detect boring-sys version by @kornelski in https://github.com/cloudflare/boring/pull/506
• Bump BoringSSL to latest and update patches by @cjpatton in https://github.com/cloudflare/boring/pull/499
• boring-sys: Bump BoringSSL to e2a57cfb4 by @cjpatton in https://github.com/cloudflare/boring/pull/509
• Fix dangling pointer in X509StoreContextRef::set_verify_param by @TheJokr in https://github.com/cloudflare/boring/pull/508
• Pingora's patch disabling cert version validation for extensions by @kornelski in https://github.com/cloudflare/boring/pull/495
• Expose TLS signature algorithm and per-connection sigalg preferences by @lukevalenta in https://github.com/cloudflare/boring/pull/513
• MLDSA for Pingora by @kornelski in https://github.com/cloudflare/boring/pull/497
• ci,mac: bew trust messense/macos-cross-toolchains by @bwesterb in https://github.com/cloudflare/boring/pull/516
• ML-DSA: add private->public and public key marshalling by @bwesterb in https://github.com/cloudflare/boring/pull/515
• Avoid panicking methods by @kornelski in https://github.com/cloudflare/boring/pull/483
• boring-sys: add tvOS target support by @gengjiawen in https://github.com/cloudflare/boring/pull/519

• @vynious made their first contribution in https://github.com/cloudflare/boring/pull/503
• @lukevalenta made their first contribution in https://github.com/cloudflare/boring/pull/513
• @gengjiawen made their first contribution in https://github.com/cloudflare/boring/pull/519

Full Changelog: https://github.com/cloudflare/boring/compare/v5.1.0...v5.1.1

• CI improvements by @kornelski in https://github.com/cloudflare/boring/pull/490
• unsafe_op_in_unsafe_fn by @kornelski in https://github.com/cloudflare/boring/pull/493
• ci: add Semgrep OSS scanning workflow by @hrushikeshdeshpande in https://github.com/cloudflare/boring/pull/501
• Expose DTLS version constants in SslVersion by @vynious in https://github.com/cloudflare/boring/pull/503
• Let crates detect boring-sys version by @kornelski in https://github.com/cloudflare/boring/pull/506
• Bump BoringSSL to latest and update patches by @cjpatton in https://github.com/cloudflare/boring/pull/499
• boring-sys: Bump BoringSSL to e2a57cfb4 by @cjpatton in https://github.com/cloudflare/boring/pull/509
• Fix dangling pointer in X509StoreContextRef::set_verify_param by @TheJokr in https://github.com/cloudflare/boring/pull/508
• Pingora's patch disabling cert version validation for extensions by @kornelski in https://github.com/cloudflare/boring/pull/495
• Expose TLS signature algorithm and per-connection sigalg preferences by @lukevalenta in https://github.com/cloudflare/boring/pull/513
• MLDSA for Pingora by @kornelski in https://github.com/cloudflare/boring/pull/497
• ci,mac: bew trust messense/macos-cross-toolchains by @bwesterb in https://github.com/cloudflare/boring/pull/516
• ML-DSA: add private->public and public key marshalling by @bwesterb in https://github.com/cloudflare/boring/pull/515
• Avoid panicking methods by @kornelski in https://github.com/cloudflare/boring/pull/483
• boring-sys: add tvOS target support by @gengjiawen in https://github.com/cloudflare/boring/pull/519
• Add relax-rsa-key-usage feature to restore historical RSA keyUsage by @johnhurt in https://github.com/cloudflare/boring/pull/512

• @vynious made their first contribution in https://github.com/cloudflare/boring/pull/503
• @lukevalenta made their first contribution in https://github.com/cloudflare/boring/pull/513
• @gengjiawen made their first contribution in https://github.com/cloudflare/boring/pull/519

Full Changelog: https://github.com/cloudflare/boring/compare/v5.1.0...v5.2.0

• Added used_hello_retry_request function by @icrutche in https://github.com/cloudflare/boring/pull/481
• Export pre-built libraries for packaging by @kornelski in https://github.com/cloudflare/boring/pull/485
• Add TLS 1.2 PRF module and bindings by @janrueth in https://github.com/cloudflare/boring/pull/487
• Add generic PKey private key generation API by @janrueth in https://github.com/cloudflare/boring/pull/488
• Add EVP_AEAD-based detached AEAD module by @janrueth in https://github.com/cloudflare/boring/pull/486

• @icrutche made their first contribution in https://github.com/cloudflare/boring/pull/481
• @janrueth made their first contribution in https://github.com/cloudflare/boring/pull/487

Full Changelog: https://github.com/cloudflare/boring/compare/v5.0.2...v5.1.0

• boring-sys: Support static MSVC runtime by @jrose-signal in https://github.com/cloudflare/boring/pull/475
• Sync methods with rust-openssl by @kornelski in https://github.com/cloudflare/boring/pull/477
• Don't add build/ to non-FIPS pre-built path + v4 compat alias by @kornelski in https://github.com/cloudflare/boring/pull/474

For major changes in v5 see: https://github.com/cloudflare/boring/releases/tag/v5.0.0

Full Changelog: https://github.com/cloudflare/boring/compare/v5.0.1...v5.0.2

• Improved building with older versions of upstream BoringSSL C headers https://github.com/cloudflare/boring/pull/469
• Added mlkem and credential Cargo features for new BoringSSL APIs.

See v5.0.0 for major changes.

Upgrade to 4.21.1 first and fix any deprecation warnings.

• FIPS only needs the fips Cargo feature, and the rest is customized via env vars (like BORING_BSSL_FIPS_PATH): https://github.com/cloudflare/boring/pull/383
• Removed the "kx-*" features https://github.com/cloudflare/boring/pull/393
• Post-quantum is enabled by default (X25519MLKEM768 and P256Kyber768Draft00) and the "pq-experimental" Cargo feature flag is not used any more.

• Updated BoringSSL to a newer version with updated patches by @nox in https://github.com/cloudflare/boring/pull/419
• Removed SslCurve API. Identifying curves by name is more reliable across different builds of BoringSSL. Use SslRef::curve_name() instead https://github.com/cloudflare/boring/pull/390 https://github.com/cloudflare/boring/pull/396
• Removed deprecated X509CheckFlags https://github.com/cloudflare/boring/pull/425
• X509Store is now cheaply cloneable, but immutable. SslContextBuilder.cert_store_mut() can't be used after .set_cert_store(). If you need .cert_store_mut(), either don't overwrite the default store, or use .set_cert_store_builder() https://github.com/cloudflare/boring/pull/426
• X509StoreBuilder::add_cert takes a reference.
• Hyper version upgraded from v0 to v1
• set_ex_data() will always Drop previous values https://github.com/cloudflare/boring/pull/424
• Removed blanket Eq from FFI types
• BIO_set_retry_write on WouldBlock @ihciah in https://github.com/cloudflare/boring/pull/118

• Added ML-KEM-768 and ML-KEM-1024 support https://github.com/cloudflare/boring/pull/455 https://github.com/cloudflare/boring/pull/456 https://github.com/cloudflare/boring/pull/462
• Added init-update-finalize API for HMAC https://github.com/cloudflare/boring/pull/459
• set_strict_cipher_list by @abernardeau-wallix in https://github.com/cloudflare/boring/pull/416
• Added set_ticket_key_callback by @toidiu in https://github.com/cloudflare/boring/pull/330
• SslCipherRef::protocol_id by @nox in https://github.com/cloudflare/boring/pull/409

Full Changelog: https://github.com/cloudflare/boring/compare/v4.20.0...v5.0.0

• Added ML-KEM-768 and ML-KEM-1024 support https://github.com/cloudflare/boring/pull/455 https://github.com/cloudflare/boring/pull/456 https://github.com/cloudflare/boring/pull/462
• Added init-update-finalize API for HMAC https://github.com/cloudflare/boring/pull/459
• Re-added pq-experimental (no-op) Cargo feature flag to allow crates support both boring v4 and v5 https://github.com/cloudflare/boring/pull/461
• OpenBSD build fix https://github.com/cloudflare/boring/pull/454
• See previous release notes for major v5 changes: https://github.com/cloudflare/boring/releases/tag/v5.0.0-alpha.1

Full Changelog: https://github.com/cloudflare/boring/compare/v5.0.0-alpha.1...v5.0.0-alpha.3

• Deprecated APIs that were removed in v5.
• Fixed docs.rs build

Deprecated APIs that were removed in v5.

Upgrade to 4.21.0 first and fix any deprecation warnings.

• FIPS only needs the fips Cargo feature, and the rest is customized via env vars (like BORING_BSSL_FIPS_PATH): https://github.com/cloudflare/boring/pull/383
• Removed the "kx-*" features https://github.com/cloudflare/boring/pull/393
• Removed "pq-experimental". Post-quantum is enabled by default (X25519MLKEM768 and P256Kyber768Draft00).

• Updated BoringSSL to a newer version with updated patches by @nox in https://github.com/cloudflare/boring/pull/419
• Removed SslCurve API https://github.com/cloudflare/boring/pull/390
• Removed deprecated X509CheckFlags https://github.com/cloudflare/boring/pull/425
• X509Store is immutable, but cloneable https://github.com/cloudflare/boring/pull/426
• Minimum Hyper version upgraded from v0
• Added SslRef::curve_name() by @ghedo in https://github.com/cloudflare/boring/pull/396
• Added set_ticket_key_callback (SSL_CTX_set_tlsext_ticket_key_cb) by @toidiu in https://github.com/cloudflare/boring/pull/330
• SslCipherRef::protocol_id by @nox in https://github.com/cloudflare/boring/pull/409
• set_strict_cipher_list by @abernardeau-wallix in https://github.com/cloudflare/boring/pull/416
• set_ex_data() will always Drop previous values https://github.com/cloudflare/boring/pull/424
• Removed blanket Eq from FFI types
• BIO_set_retry_write on WouldBlock @ihciah in https://github.com/cloudflare/boring/pull/118

Full Changelog: https://github.com/cloudflare/boring/compare/v4.19.0...v5.0.0-alpha.1

• Add a more reliable Error::library_reason()
• Fix string data conversion in ErrorStack::put()
• CStr vs UTF-8 improvements in https://github.com/cloudflare/boring/pull/371
• Fix swapped host/target args and support TARGET_CC and CC_{target} in https://github.com/cloudflare/boring/pull/375

Full Changelog: https://github.com/cloudflare/boring/compare/v4.19.0...v4.20.0