chore(deps): update dependency aws/aws-lc to v1.60.0

[openvpn-inc-ci]

This PR contains the following updates:

Package	Update	Change
aws/aws-lc	minor	v1.55.0 -> v1.60.0

---

Release Notes

aws/aws-lc (aws/aws-lc)

v1.60.0

Compare Source

What's Changed

• Anchor CodeBuild account-id patterns by @​justsmth in #​2641
• Implement read/write timeouts for BIO datagram by @​smittals2 in #​2610
• Migrate from CodeBuild account actor filter to pull request comment filter based on GitHub permissions by @​andrewhop in #​2644
• Fix macOS FIPS build w/ clang-20 by @​justsmth in #​2645
• Implement ragdoll by @​torben-hansen in #​2615
• Prepare for v1.60.0 release by @​andrewhop in #​2649
• Add expandedKey ASN.1 encoding for KEM keys by @​prasden in #​2624

Full Changelog: aws/aws-lc@v1.59.0...v1.60.0

v1.59.0

Compare Source

What's Changed

• Support other field for PKCS7 by @​samuel40791765 in #​2603
• Add CFI directives to armv8-mont by @​andrewhop in #​2584
• Add back RC4_options from decrepit by @​samuel40791765 in #​2618
• allow prasden ci by @​prasden in #​2621
• Apache httpd integration test by @​justsmth in #​2614
• Fix clang-21 compile error by @​justsmth in #​2623
• Fix MariaDB integration test by @​justsmth in #​2625
• ML-KEM: Re-import mlkem-native by @​hanno-becker in #​2630
• Fix Bind9 CI test by @​nhatnghiho in #​2629
• ML-KEM: import and enable x86_64 backend from mlkem-native by @​dkostic in #​2631
• Add CMake Configure pre-push checker by @​skmcgrail in #​2596
• Add CFI directives in md5-armv8.pl by @​andrewhop in #​2627
• X509_REQ_verify for MLDSA44 and MLDSA87 by @​justsmth in #​2636
• Remove BIT_INTERLEAVE support by @​manastasova in #​2628
• ML-KEM: Fix mlkem-native importer.sh by @​hanno-becker in #​2635
• Prepare release v1.59.0 by @​justsmth in #​2643

New Contributors

• @​prasden made their first contribution in #​2621

Full Changelog: aws/aws-lc@v1.58.1...v1.59.0

v1.58.1

Compare Source

What's Changed

• Move check-linkage.sh to util by @​justsmth in #​2608
• Add support for EVP_PKEY_param_check by @​samuel40791765 in #​2611
• Prepare release v1.58.1 by @​justsmth in #​2609

Full Changelog: aws/aws-lc@v1.58.0...v1.58.1

v1.58.0

Compare Source

What's Changed

• Add EVP_PKEY_check and EVP_PKEY_public_check by @​smittals2 in #​2565
• Rewrite 4-fold batched SHAKE to be amenable to batched Keccak-F1600 assembly by @​hanno-becker in #​2598
• Fix Win64 unwind info alignment by @​kkent030315 in #​2559
• Migrate MSVC tests to CodeBuild by @​nhatnghiho in #​2583
• Add optimized + verified hybrid AArch64 assembly for batched SHA3/SHAKE by @​hanno-becker in #​2600
• target.h: more clearly check for ppc64 endianness by @​pkubaj in #​2604
• Impl SSL_client_hello_get1_extensions_present and friends by @​justsmth in #​2561
• Implement SSL_set_verify_result by @​nhatnghiho in #​2576
• ML-DSA constant-time hardening for caddq, poly_chknorm, decompose by @​dkostic in #​2602
• Prepare release v1.58.0 by @​justsmth in #​2607

New Contributors

• @​kkent030315 made their first contribution in #​2559

Full Changelog: aws/aws-lc@v1.57.1...v1.58.0

v1.57.1

Compare Source

What's Changed

• Resolve issue with conflicting pkg-config variables which would cause the reported version in the pkg-config files to be reported incorrectly, when in fact is should report as 1.1.1. by @​skmcgrail in #​2601

Full Changelog: aws/aws-lc@v1.57.0...v1.57.1

v1.57.0

Compare Source

Preparation for Adopting SONAME and ABI Versioning

This release includes an experimental feature to prepare our library for adaptation of SONAME and ABI versioning. -DENABLE_PRE_SONAME_BUILD=0 can be used to enable a SONAME build of AWS-LC. We are working on formalizing and put in place mechanisms for ensuring ABI version bumps happen as necessary. Until that time the ABI version will not be bumped until we are ready to officially start tracking such changes. We will then consider changing the default build to use the SONAME variant of the building and not require ENABLE_PRE_SONAME_BUILD to be disabled explicitly. We will announce in a separate release when we intend formally begin management of the recorded ABI version. Until such time the ABI version built when using the SONAME build variant will remain 0.

What's Changed

• Update bind9 CI test to use meson by @​nhatnghiho in #​2562
• Bump MySQL version tag to 9.4.0 by @​samuel40791765 in #​2571
• Renable NSym CI by @​pennyannn in #​2570
• Offer P521 for signature_algorithms in client Hello by @​WillChilds-Klein in #​2572
• ML-KEM: Import AArch64 backend from mlkem-native by @​hanno-becker in #​2498
• Update Windows Docker images by @​nhatnghiho in #​2579
• Add back X509_STORE_get_verify_cb and X509_STORE_set_lookup_crls_cb by @​skmcgrail in #​2581
• Explicitly test that input length is as expected for ed25519ph by @​torben-hansen in #​2585
• Fix Libwebsocket Build by @​smittals2 in #​2568
• Return NULL when a NULL or empty string is passed to NETSCAPE_SPKI_b64_decode. by @​nebeid in #​2580
• Reimplement SSL_clear_num_renegotiations by @​samuel40791765 in #​2586
• ABI monitoring GitHub workflow improvements by @​skmcgrail in #​2574
• Migrate Openssl-tool parameter parsing by @​justsmth in #​2501
• Add HMAC SHA3 benchmarks by @​andrewhop in #​2513
• Bump tokio from 1.39.3 to 1.43.1 in /tests/ci/lambda by @​dependabot[bot] in #​2552
• Add production stage to CI pipeline by @​nhatnghiho in #​2483
• Re-import s2n-bignum after merge of ML-KEM/Keccak functionality by @​hanno-becker in #​2595
• Integrate formally verified AArch64 Keccak-x1 assembly from s2n-bignum/mlkem-native by @​hanno-becker in #​2539
• (Experimental) Add SONAME Support to AWS-LC by @​skmcgrail in #​2546
• Add a couple more no-ops for legacy builds by @​samuel40791765 in #​2590
• Fix nixfmt CI failure by @​justsmth in #​2588
• Prepare v1.57.0 release by @​andrewhop in #​2593

New Contributors

• @​dependabot[bot] made their first contribution in #​2552

Full Changelog: aws/aws-lc@v1.56.0...v1.57.0

v1.56.0

Compare Source

What's Changed

• Export BIO_f_md for consumers by @​samuel40791765 in #​2515
• Remove obsolete python main patch by @​WillChilds-Klein in #​2522
• Remove redundant conditions by @​torben-hansen in #​2523
• ci: Add GitHub user ID 1595806 to CI allowlist by @​kingstjo in #​2530
• fix: Update Clang version from 18 to 19 in Windows workflow by @​kingstjo in #​2529
• Implement pkcs8 cli by @​kingstjo in #​2342
• Export BF_cfb64_encrypt by @​samuel40791765 in #​2525
• cpu_ppc64le.c: fix build on FreeBSD by @​pkubaj in #​2520
• Add prikhap to allow list for CI by @​samuel40791765 in #​2533
• Add pkey command to CLI tool by @​smittals2 in #​2519
• Improve OpenSSL compatibility by @​justsmth in #​2540
• Fix PKCS12 Error Code by @​smittals2 in #​2538
• Use SP 800-56Arev3 Section 5.6.2.1.4.b instead of ECDSA PCT method by @​torben-hansen in #​2536
• Fix python main diff after upstream PR 135402 merge by @​WillChilds-Klein in #​2542
• Minimize the nginx patch even further by @​samuel40791765 in #​2537
• Add LC contributors to allowlist by @​nhatnghiho in #​2547
• Align -help return codes in tool-openssl CLI to match Openssl by @​smittals2 in #​2543
• Dynamically link AWS-LC in cpython integration tests by @​WillChilds-Klein in #​2545
• Add missing x509 CI to list of tests by @​nhatnghiho in #​2548
• CI for mingw64 and ucrt64 w/ msys2 by @​justsmth in #​2502
• docs: Add FIPS documentation to BUILDING.md and README.md by @​dougch in #​2387
• Prepare Docker images for upcoming CI changes by @​nhatnghiho in #​2475
• Implement SSL_CTX_set_client_hello_cb for ClientHello callback by @​justsmth in #​2490
• tool-openssl: Fix warning 'strnlen' specified bound 4096 exceeds source size 128 by @​skmcgrail in #​2556
• Pull in SSL_get_negotiated_group and TLSEXT_nid_unknown from upstream by @​samuel40791765 in #​2558
• Document non-support of TLS 1.3 PHA by @​justsmth in #​2560
• Remove nsym-related CI by @​justsmth in #​2566
• Implement SSL_set_verify_result by @​nhatnghiho in #​2526
• Revert "Implement SSL_set_verify_result (#​2526)" by @​nhatnghiho in #​2569
• Prepare AWS-LC v1.56.0 by @​samuel40791765 in #​2563

Full Changelog: aws/aws-lc@v1.55.0...v1.56.0

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.