What's Changed

SemVer Patch

• Define _WINSOCKAPI_/NOMINMAX/NOCRYPT for CNIOBoringSSL on Windows by @odrobnik in #585
• Enable x25519_MLKEM768 by default by @rafaelcepeda in #582

Other Changes

• Update test helper to use SocketAddressError.UnknownHost by @aryan-25 in #579
• Fix optional certificate verification test case by @aryan-25 in #578
• Migrate macOS build argument overrides to Swift version inputs by @rnro in #581
• Demote ImplementationOnlyDeprecated warning in main CI by @rafaelcepeda in #586

New Contributors

• @odrobnik made their first contribution in #585

Full Changelog: 2.37.0...2.37.1

What's Changed

SemVer Minor

• Drop Swift 6.0 by @rnro in #576

Other Changes

• Update expired certificate in tests by @josephnoir in #575
• Enable Swift 6.3 jobs in CI by @rnro in #574

Full Changelog: 2.36.1...2.37.0

What's Changed

SemVer Patch

• Do not log the caCerts value if PKCS#12 parsing goes haywire by @gwynne in #571
• Set custom private keys via sslContextOverride by @alpearce in #573

Other Changes

• Add explicit read permissions to workflows by @rnro in #566
• switch from main to 0.0.7 for swiftlang workflows by @rnro in #570
• update actions/checkout from v4 to v6 by @rnro in #572

New Contributors

• @alpearce made their first contribution in #573

Full Changelog: 2.36.0...2.36.1

What's Changed

SemVer Minor

• Enable opportunistic TLS verification by @josephnoir in #565

SemVer Patch

• Revert to @_implementationOnly import by @Lukasa in #562

Other Changes

• Update expired apple.com certificates by @aryan-25 in #563
• Use weak let when available by @Lukasa in #564

Full Changelog: 2.35.0...2.36.0

What's Changed

SemVer Minor

• Drop Swift 5.10 by @yigityazicilar in #559

Other Changes

• Use Context.environment in Package.swift instead of importing Foundation by @gwynne in #560
• update README to use sync operations for addHandler by @heckj in #561

New Contributors

• @yigityazicilar made their first contribution in #559

Full Changelog: 2.34.1...2.35.0

What's Changed

SemVer Patch

• Make sslContextCallback overrides replace the existing chain, rather than adding to it by @hamzahrmalik in #557

New Contributors

• @hamzahrmalik made their first contribution in #557

Full Changelog: 2.34.0...2.34.1

What's Changed

SemVer Minor

• Allow the peer's validated certificate chain to be returned in the custom verification handler by @aryan-25 in #553
• Make NIOSSLContext.configuration public. by @gwynne in #556

Other Changes

• Enable release mode builds by @josephnoir in #552
• Updated test certificates in NIOSSLTestHelpers by @aryan-25 in #554
• Remove incorrect documentation by @Lukasa in #555

New Contributors

• @josephnoir made their first contribution in #552
• @aryan-25 made their first contribution in #554
• @gwynne made their first contribution in #556

Full Changelog: 2.33.0...2.34.0

What's Changed

SemVer Minor

• Add mTLSConfiguration option for TLSConfiguration by @Lukasa in #545
• Deprecate NIOSSLCertificate(file:format:) by @glbrntt in #550

SemVer Patch

• Enable -require-explicit-sendable compiler flag by @rafaelcepeda in #549
• Avoid small behaviour change in #550 by @glbrntt in #551

Other Changes

• Add static SDK CI workflow by @rnro in #515
• Remove per-benchmark wiggle room by @glbrntt in #546
• Add documentation of how trust roots settings affect validators by @Lukasa in #548

New Contributors

• @rafaelcepeda made their first contribution in #549

Full Changelog: 2.32.0...2.33.0

What's Changed

SemVer Minor

• Add toDerBytes to SSLPrivateKey by @gjcairo in #540

SemVer Patch

• Make CNIOBoringSSLShims compatible with C++ interop by @egorzhdan in #538
• Fix incorrect callback caching by @Lukasa in #541

New Contributors

• @egorzhdan made their first contribution in #538

Full Changelog: 2.31.0...2.32.0

What's Changed

SemVer Minor

• Expose the peer certificate by @jtdavey in #533
• Add explicit API support for X25519_MLKEM768 hybrid KEM by @Lukasa in #535
• Drop Swift 5.9 by @rnro in #536

New Contributors

• @jtdavey made their first contribution in #533

Full Changelog: 2.30.0...2.31.0