openssl/.github/workflows/ci.yml, branch dependabot/github_actions/actions/setup-python-7

Dependabot update

2026-07-27T17:33:20Z

CLA: trivial (deps): Bump actions/setup-python Bumps [actions/setup-python](https://github.com/actions/setup-python) from 6 to 7. - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](https://github.com/actions/setup-python/compare/v6...v7) --- updated-dependencies: - dependency-name: actions/setup-python dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot]

Only verify software can build if it is not a documentation only PR.

2026-07-20T09:46:00Z

Resolves: https://github.com/openssl/openssl/issues/29167 Reviewed-by: Tomas Mraz Reviewed-by: Dmitry Belyavskiy MergeDate: Mon Jul 20 09:46:03 2026 (Merged from https://github.com/openssl/openssl/pull/30712)

Integrate mfail functionality to fuzz tests

2026-07-15T16:01:30Z

Run the fuzz corpora under mfail in addition to the normal path, so the existing inputs also exercise malloc-failure handling. The fuzz.pl harness sizes the mfail runs to a time budget and, on a leak, bisects down to the exact file and injection point. Adds a budgeted asan/ubsan CI job to run it. Assisted-by: Claude:claude-opus-4-6 Reviewed-by: Nikola Pajkovsky Reviewed-by: Tomas Mraz MergeDate: Wed Jul 15 16:01:43 2026 (Merged from https://github.com/openssl/openssl/pull/30944)

Add unit testing cmocka based framework

2026-07-09T17:38:28Z

This adds the unit testing framework that extends the build so it can be enabled and tests are built. It is executed as part of the test using a recipe which executes all unit tests. The documentation is added with more info about writing the unit tests. Assisted-by: Claude:claude-opus-4-8 Reviewed-by: Richard Levitte Reviewed-by: Tomas Mraz MergeDate: Thu Jul 9 17:39:14 2026 (Merged from https://github.com/openssl/openssl/pull/30788)

Update CI to validate erroring on non-existent test selection

2026-06-26T16:38:44Z

Assisted-by: Claude:claude-sonnet-4-6 Reviewed-by: Neil Horman Reviewed-by: Bob Beck Reviewed-by: Norbert Pocs Reviewed-by: Eugene Syromiatnikov MergeDate: Fri Jun 26 16:40:25 2026 (Merged from https://github.com/openssl/openssl/pull/31639)

pkcs11-provider: update to latest version

2026-06-15T20:22:31Z

This fixes accidental version update in e2bd9f8c28 which is causing CI failure for pkcs11-provider tests. It needs to add xxd package that is used in the new hkdf test. Fixes: e2bd9f8c28c0 "ml_kem: return an error on catastrophic failure in decap" Reviewed-by: Neil Horman Reviewed-by: Eugene Syromiatnikov Reviewed-by: Milan Broz MergeDate: Mon Jun 15 20:23:25 2026 (Merged from https://github.com/openssl/openssl/pull/31522)

Copyright year updates

2026-03-10T14:37:52Z

Reviewed-by: Tomas Mraz Reviewed-by: Eugene Syromiatnikov MergeDate: Tue Mar 10 14:37:54 2026 Release: yes

require manual build for external ECH tests

2026-02-20T16:40:25Z

Reviewed-by: Tomas Mraz Reviewed-by: Matt Caswell MergeDate: Fri Feb 20 14:16:40 2026 (Merged from https://github.com/openssl/openssl/pull/30059)

Disabling explicit EC curves encoding

2026-01-17T09:31:43Z

In case the parameters don't exactly match the well-known ones Reviewed-by: Paul Dale Reviewed-by: Simo Sorce (Merged from https://github.com/openssl/openssl/pull/29639)

github/workflows: Update checkout@v5 to v6

2026-01-14T09:27:17Z

New version is out. Signed-off-by: Norbert Pocs Reviewed-by: Dmitry Misharov Reviewed-by: Neil Horman Reviewed-by: Nikola Pajkovsky (Merged from https://github.com/openssl/openssl/pull/29566)