Weekly release for Nov 17, 2025

Release Summary:

• Adds pure ML-KEM-1024 support: s2n_pure_mlkem_1024 KEM group is now negotiable.

What's Changed

• test: add memory profiler test by @jmayclin in #5329
• docs: comments for blob, stuffer methods by @jmayclin in #5326
• refactor: remove unused s2n_socket_set_read_size method by @lrstewart in #5594
• chore: Rust bindings release 0.3.29 by @maddeleine in #5595
• feat(integration): enable CodeBuild and Nix for rust integration tests by @kaukabrizvi in #5578
• fix: update action user name by @jmayclin in #5600
• docs: update pull request template by @jmayclin in #5591
• fix: update memory usage test assertions by @jmayclin in #5592
• Revert "feat: basic security policy builder interface (#5493)" by @lrstewart in #5599
• docs: add dev docs on handshake and io by @lrstewart in #5596
• ci: PR conventional commit lint GHA by @dougch in #5603
• fix(ci): add build to the validate-pr-title CI job by @CarolYeh910 in #5610
• build(deps): bump the all-gha-updates group across 1 directory with 2 updates by @dependabot[bot] in #5605
• test(integration): add dynamic record sizing test by @kaukabrizvi in #5608
• ci: update cmake version by @CarolYeh910 in #5612
• ci: exclude validate-pr-title from merge queue by @CarolYeh910 in #5613
• feat: add pure ML-KEM support by @CarolYeh910 in #5586
• fix(ci): check Amazon copyright statement by @CarolYeh910 in #5611
• ci: move the integnix job to us-west-2 by @dougch in #5604
• fix: replace uint8_t in for loops by @CarolYeh910 in #5619
• refactor(harness): Extend handshake logic to support TLS 1.2 by @kaukabrizvi in #5614
• test: require both MLKem and MLDsa capabilities for pure MLKEM tests by @kaukabrizvi in #5621
• ci: add rust integration test to codebuild start script by @kaukabrizvi in #5623
• docs: Adds note about serialization error case by @maddeleine in #5617
• fix: enable -Wcast-qual flag for libcrypto=awslc by @boquan-fang in #4735

Full Changelog: v1.6.0...v1.6.1