Weekly release for Nov 17, 2025

Release Summary:

• Adds pure ML-KEM-1024 support: s2n_pure_mlkem_1024 KEM group is now negotiable.

What's Changed

• test: add memory profiler test by @jmayclin in https://github.com/aws/s2n-tls/pull/5329
• docs: comments for blob, stuffer methods by @jmayclin in https://github.com/aws/s2n-tls/pull/5326
• refactor: remove unused s2n_socket_set_read_size method by @lrstewart in https://github.com/aws/s2n-tls/pull/5594
• chore: Rust bindings release 0.3.29 by @maddeleine in https://github.com/aws/s2n-tls/pull/5595
• feat(integration): enable CodeBuild and Nix for rust integration tests by @kaukabrizvi in https://github.com/aws/s2n-tls/pull/5578
• fix: update action user name by @jmayclin in https://github.com/aws/s2n-tls/pull/5600
• docs: update pull request template by @jmayclin in https://github.com/aws/s2n-tls/pull/5591
• fix: update memory usage test assertions by @jmayclin in https://github.com/aws/s2n-tls/pull/5592
• Revert "feat: basic security policy builder interface (#5493)" by @lrstewart in https://github.com/aws/s2n-tls/pull/5599
• docs: add dev docs on handshake and io by @lrstewart in https://github.com/aws/s2n-tls/pull/5596
• ci: PR conventional commit lint GHA by @dougch in https://github.com/aws/s2n-tls/pull/5603
• fix(ci): add build to the validate-pr-title CI job by @CarolYeh910 in https://github.com/aws/s2n-tls/pull/5610
• build(deps): bump the all-gha-updates group across 1 directory with 2 updates by @dependabot[bot] in https://github.com/aws/s2n-tls/pull/5605
• test(integration): add dynamic record sizing test by @kaukabrizvi in https://github.com/aws/s2n-tls/pull/5608
• ci: update cmake version by @CarolYeh910 in https://github.com/aws/s2n-tls/pull/5612
• ci: exclude validate-pr-title from merge queue by @CarolYeh910 in https://github.com/aws/s2n-tls/pull/5613
• feat: add pure ML-KEM support by @CarolYeh910 in https://github.com/aws/s2n-tls/pull/5586
• fix(ci): check Amazon copyright statement by @CarolYeh910 in https://github.com/aws/s2n-tls/pull/5611
• ci: move the integnix job to us-west-2 by @dougch in https://github.com/aws/s2n-tls/pull/5604
• fix: replace uint8_t in for loops by @CarolYeh910 in https://github.com/aws/s2n-tls/pull/5619
• refactor(harness): Extend handshake logic to support TLS 1.2 by @kaukabrizvi in https://github.com/aws/s2n-tls/pull/5614
• test: require both MLKem and MLDsa capabilities for pure MLKEM tests by @kaukabrizvi in https://github.com/aws/s2n-tls/pull/5621
• ci: add rust integration test to codebuild start script by @kaukabrizvi in https://github.com/aws/s2n-tls/pull/5623
• docs: Adds note about serialization error case by @maddeleine in https://github.com/aws/s2n-tls/pull/5617
• fix: enable -Wcast-qual flag for libcrypto=awslc by @boquan-fang in https://github.com/aws/s2n-tls/pull/4735

Full Changelog: https://github.com/aws/s2n-tls/compare/v1.6.0...v1.6.1