Description of changes:

• Bump urllib3 from 2.6.0 to 2.6.3 in /tests/ci by @dependabot[bot] in Bump urllib3 from 2.6.0 to 2.6.3 in /tests/ci #2932
• Add weekly automated check for outdated third-party test vectors by @sgmenda in Add weekly automated check for outdated third-party test vectors #2933
• Enable Hybrid PQ KeyShares by default by @alexw91 in Enable Hybrid PQ KeyShares by default #2531
• Remove AVX conditional from cmake script by @torben-hansen in Remove AVX conditional from cmake script #2958
• openssl-ca command implementation for self-sign certificates by @skmcgrail in openssl-ca command implementation for self-sign certificates #2937
• Initial Framework for Using Doxygen to Document Public Header Files by @m271828 in Initial Framework for Using Doxygen to Document Public Header Files #2908
• Move md4 out of FIPS module by @torben-hansen in Move md4 out of FIPS module #2956
• Fix image-build-windows workflow to only push on workflow_call and workflow_dispatch by @skmcgrail in Fix image-build-windows workflow to only push on workflow_call and workflow_dispatch #2961
• Remove FIPS counter framework and other tidying up by @torben-hansen in Remove FIPS counter framework and other tidying up #2947
• Model Device Farm CI Resources in CDK by @skmcgrail in Model Device Farm CI Resources in CDK #2965
• Adds a new randomness generation API by @torben-hansen in Adds a new randomness generation API #2963
• Migrate Android Testing to GitHub Actions by @skmcgrail in Migrate Android Testing to GitHub Actions #2969
• Ensure pkcs7 checks ASN1_TYPE->type by @skmcgrail in Ensure pkcs7 checks ASN1_TYPE->type #2968
• Fix checkout logic for android-omnibus by @skmcgrail in Fix checkout logic for android-omnibus #2970
• Add missing env vars to check-vectors workflow step by @sgmenda in Add missing env vars to check-vectors workflow step #2962
• Shorten Windows Build Directory Path by @skmcgrail in Shorten Windows Build Directory Path #2974
• Bump mysql cluster version by @WillChilds-Klein in Bump mysql cluster version #2967
• Integrate Wycheproof ML-DSA test vectors by @sgmenda in Integrate Wycheproof ML-DSA test vectors #2973
• Simplify FIPS conditional in top-level build script by @torben-hansen in Simplify FIPS conditional in top-level build script #2976
• Fix aws-lc-rs CI job by @justsmth in Fix aws-lc-rs CI job #2966
• Add method to get type of ML-DSA instance configured under EVP PKEY by @torben-hansen in Add method to get type of ML-DSA instance configured under EVP PKEY #2980
• Nmap build needs liblinear by @justsmth in Nmap build needs liblinear #2985
• Disable SLP vectorizer for FIPS shared library builds on GCC 14+ by @geedo0 in Disable SLP vectorizer for FIPS shared library builds on GCC 14+ #2977
• Update Wycheproof ECDSA test vectors and fix workflow typo by @sgmenda in Update Wycheproof ECDSA test vectors and fix workflow typo #2972
• Address some CMake findings by @skmcgrail in Address some CMake findings #2979
• Bump bytes from 1.7.1 to 1.11.1 in /tests/ci/lambda by @dependabot[bot] in Bump bytes from 1.7.1 to 1.11.1 in /tests/ci/lambda #2983
• Support GCC 4.8 for aarch64 by @justsmth in Support GCC 4.8 for aarch64 #2964
• Free potential memory before assigning new pointer by @torben-hansen in Free potential memory before assigning new pointer #2989
• Add PyOpenSSL integration test by @WillChilds-Klein in Add PyOpenSSL integration test #2992
• Ensure index argument is not negative in ASN1_BIT_STRING_set_bit by @torben-hansen in Ensure index argument is not negative in ASN1_BIT_STRING_set_bit #2987
• Ensure no overflow in signed output length in do_buf by @torben-hansen in Ensure no overflow in signed output length in do_buf #2988
• Remove redundant CPython 3.9 integration test by @WillChilds-Klein in Remove redundant CPython 3.9 integration test #2996
• Ensure public key is set before verifying through ML-DSA verify by @torben-hansen in Ensure public key is set before verifying through ML-DSA verify #2990
• Correct CCM nids in object definition by @torben-hansen in Correct CCM nids in object definition #2991
• Address Reported Bug Findings by @skmcgrail in Address Reported Bug Findings #3000
• Fix CI: gcc-4.8 by @justsmth in Fix CI: gcc-4.8 #3011
• Fix Windows CI: use cd /d in run_windows_tests.bat to handle cross-drive paths by @justsmth in Fix Windows CI: use cd /d in run_windows_tests.bat to handle cross-drive paths #3012
• Fix OPENSSL_memchr per C23 by @justsmth in Fix OPENSSL_memchr per C23 #3008
• Fix argument order in hmac_copy by @justsmth in Fix argument order in hmac_copy #3014
• Miscellaneous CI improvements by @skmcgrail in Miscellaneous CI improvements #2978
• Fix CI: mariadb by @justsmth in Fix CI: mariadb #3015
• Update Ubuntu 24:04 image compiler verification by @skmcgrail in Update Ubuntu 24:04 image compiler verification #3017
• Support WASM/Emscripten by @justsmth in Support WASM/Emscripten #2959
• Generate Rust Bindings by @justsmth in Generate Rust Bindings #2999

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license and the ISC license.