Parsing PEM will now error for PEM sections larger than 256 MB in size, to avoid running out of memory during parsing. The limit was chosen based on historical data from large certificate revocation lists from the web PKI.

• Remove mention of rustls-pemfile from docs by @ranile in https://github.com/rustls/pki-types/pull/103
• Update ECH reference to RFC9849 by @ctz in https://github.com/rustls/pki-types/pull/104
• pem: error for sections that are too large by @djc in https://github.com/rustls/pki-types/pull/106
• Update ECH reference to RFC 9849 by @ctz in https://github.com/rustls/pki-types/pull/107
• Adjust PEM size limit to account for huge CRLs by @ctz in https://github.com/rustls/pki-types/pull/108

• Add FipsStatus enum by @djc in https://github.com/rustls/pki-types/pull/102

Fuse PEM iterators as soon as an IO error is seen. This ensures errors are returned when decoding multiple PEM items from an std::io::Read which permanently returns errors. This includes use of pem_file_iter() and pem_reader_iter() against directories. Fixes #98.

• pem: fuse ReadIter on I/O errors by @djc in https://github.com/rustls/pki-types/pull/100
• Prepare 1.13.3 by @ctz in https://github.com/rustls/pki-types/pull/101

Full Changelog: https://github.com/rustls/pki-types/compare/v/1.13.2...v/1.13.3

• Add algorithm id for ECDSA with secp256k1 curve by @mkmks in https://github.com/rustls/pki-types/pull/96

• Exclude test keys from published package by @weiznich in https://github.com/rustls/pki-types/pull/92
• Fix docs.rs build by @djc in https://github.com/rustls/pki-types/pull/94

• Add From<DnsName<'a>> for ServerName<'a> by @stormshield-gt in https://github.com/rustls/pki-types/pull/82
• Mark all possible functions const by @ctz in https://github.com/rustls/pki-types/pull/81
• pem: avoid some allocations by @djc in https://github.com/rustls/pki-types/pull/83
• ci: take updated nightly for cargo-check-external-types by @cpu in https://github.com/rustls/pki-types/pull/85
• add ed448 support by @stevefan1999-personal in https://github.com/rustls/pki-types/pull/87
• Add From<[u8; 4]> for Ipv4Addr by @xyzzyz in https://github.com/rustls/pki-types/pull/90
• 1.13.0: impl Hash for a bunch of types by @ctz in https://github.com/rustls/pki-types/pull/91

• Implement Zeroize for private key types
• Add algorithm identifiers for ML-DSA signing algorithms

• Add support for the zeroize crate by @jarhodes314 in https://github.com/rustls/pki-types/pull/71
• rustfmt: style_edition 2024 by @ctz in https://github.com/rustls/pki-types/pull/74
• Add cargo deny check in CI by @djc in https://github.com/rustls/pki-types/pull/76
• Add AlgorithmIdentifiers for ML-DSA variants by @djc in https://github.com/rustls/pki-types/pull/78
• Check external types in public API by @ctz in https://github.com/rustls/pki-types/pull/80
• Prepare 1.12.0 release by @djc in https://github.com/rustls/pki-types/pull/79

• feat: add const try_from_str constructor to DnsName type. by @DSharifi in https://github.com/rustls/pki-types/pull/69
• Move AlgorithmIdentifier values to here from rustls-webpki by @ctz in https://github.com/rustls/pki-types/pull/67

• @DSharifi made their first contribution in https://github.com/rustls/pki-types/pull/69

Full Changelog: https://github.com/rustls/pki-types/compare/v/1.10.1...v/1.11.0

Fixed an issue where we failed to read PEM objects from slices without trailing newline. This failed in the PEM decoder introduced in rustls-pki-types 1.9.0 whereas it worked in rustls-pemfile 2.12.0. We now include a test to make sure this case doesn't regress again.

• fix misc. clippy findings by @cpu in https://github.com/rustls/pki-types/pull/65
• Fix reading PEM from slices without trailing newline by @djc in https://github.com/rustls/pki-types/pull/66

In 1.9.0 we forgot to implement std::error::Error for the new pem::Error type. Add it.

• Implement std::error::Error for pem::Error by @djc in https://github.com/rustls/pki-types/pull/63