• Faster DNS name validation by @djc in https://github.com/rustls/pki-types/pull/112
• server_name: tweak branch order for performance by @djc in https://github.com/rustls/pki-types/pull/113

New feature: add a constructor for FipsStatus::Certified.

• ci: sync cargo-check-external-types nightly by @cpu in https://github.com/rustls/pki-types/pull/109
• 1.15.0: ensure FipsStatus::Certified is usable by @ctz in https://github.com/rustls/pki-types/pull/110

Full Changelog: https://github.com/rustls/pki-types/compare/v/1.14.1...v/1.15.0

Parsing PEM will now error for PEM sections larger than 256 MB in size, to avoid running out of memory during parsing. The limit was chosen based on historical data from large certificate revocation lists from the web PKI.

• Remove mention of rustls-pemfile from docs by @ranile in https://github.com/rustls/pki-types/pull/103
• Update ECH reference to RFC9849 by @ctz in https://github.com/rustls/pki-types/pull/104
• pem: error for sections that are too large by @djc in https://github.com/rustls/pki-types/pull/106
• Update ECH reference to RFC 9849 by @ctz in https://github.com/rustls/pki-types/pull/107
• Adjust PEM size limit to account for huge CRLs by @ctz in https://github.com/rustls/pki-types/pull/108

• Add FipsStatus enum by @djc in https://github.com/rustls/pki-types/pull/102

Fuse PEM iterators as soon as an IO error is seen. This ensures errors are returned when decoding multiple PEM items from an std::io::Read which permanently returns errors. This includes use of pem_file_iter() and pem_reader_iter() against directories. Fixes #98.

• pem: fuse ReadIter on I/O errors by @djc in https://github.com/rustls/pki-types/pull/100
• Prepare 1.13.3 by @ctz in https://github.com/rustls/pki-types/pull/101

Full Changelog: https://github.com/rustls/pki-types/compare/v/1.13.2...v/1.13.3

• Add algorithm id for ECDSA with secp256k1 curve by @mkmks in https://github.com/rustls/pki-types/pull/96

• Exclude test keys from published package by @weiznich in https://github.com/rustls/pki-types/pull/92
• Fix docs.rs build by @djc in https://github.com/rustls/pki-types/pull/94

• Add From<DnsName<'a>> for ServerName<'a> by @stormshield-gt in https://github.com/rustls/pki-types/pull/82
• Mark all possible functions const by @ctz in https://github.com/rustls/pki-types/pull/81
• pem: avoid some allocations by @djc in https://github.com/rustls/pki-types/pull/83
• ci: take updated nightly for cargo-check-external-types by @cpu in https://github.com/rustls/pki-types/pull/85
• add ed448 support by @stevefan1999-personal in https://github.com/rustls/pki-types/pull/87
• Add From<[u8; 4]> for Ipv4Addr by @xyzzyz in https://github.com/rustls/pki-types/pull/90
• 1.13.0: impl Hash for a bunch of types by @ctz in https://github.com/rustls/pki-types/pull/91

• Implement Zeroize for private key types
• Add algorithm identifiers for ML-DSA signing algorithms

• Add support for the zeroize crate by @jarhodes314 in https://github.com/rustls/pki-types/pull/71
• rustfmt: style_edition 2024 by @ctz in https://github.com/rustls/pki-types/pull/74
• Add cargo deny check in CI by @djc in https://github.com/rustls/pki-types/pull/76
• Add AlgorithmIdentifiers for ML-DSA variants by @djc in https://github.com/rustls/pki-types/pull/78
• Check external types in public API by @ctz in https://github.com/rustls/pki-types/pull/80
• Prepare 1.12.0 release by @djc in https://github.com/rustls/pki-types/pull/79

• feat: add const try_from_str constructor to DnsName type. by @DSharifi in https://github.com/rustls/pki-types/pull/69
• Move AlgorithmIdentifier values to here from rustls-webpki by @ctz in https://github.com/rustls/pki-types/pull/67

• @DSharifi made their first contribution in https://github.com/rustls/pki-types/pull/69

Full Changelog: https://github.com/rustls/pki-types/compare/v/1.10.1...v/1.11.0