Release: v1.3.43

Weekly release for April 27 2023

What's Changed

• docs: add compliance notes for RFC 6125 by @camshaft in #3915
• test: add retry logic for well-known endpoints by @camshaft in #3918
• chore(bindings): release 0.0.29 by @camshaft in #3919
• test: Bump nix devShell python to 3.10 by @dougch in #3914
• Attempts to fix flakiness in session_ticket_test by @maddeleine in #3913
• Create new PQ TLS Policies with minimum of TLSv1.2 by @alexw91 in #3927
• doc: Flesh out steps in nix readme. by @dougch in #3923
• Add note about server_name spec requirements by @lrstewart in #3930
• ci: Update AWSLC test dependency to v1.8.0 by @goatgoose in #3938
• Adds FAQ doc by @maddeleine in #3920
• Remove unnecessary flush by @lrstewart in #3940
• update security policy and rust binding documentation by @jmayclin in #3906
• ci: Add github stale action by @goatgoose in #3929
• Add test to verify TLS1.2 downgrade by @aditishri18 in #3939
• Reinstate Kyber KEM check by @WillChilds-Klein in #3905
• Don't send close_notify after an alert by @lrstewart in #3942
• Update IO section of Usage Guide by @lrstewart in #3917
• Add basic half-close TLS1.3 behavior by @lrstewart in #3932
• bindings: add verify_host_callback to the connection by @toidiu in #3925
• ci: Add AWSLC-FIPS 2022 to CI by @goatgoose in #3943
• add 32 bit cross-compile toolchain by @jmayclin in #3924
• ci: Disable automatically closing stale PRs by @goatgoose in #3946
• Fix expected negotiated version in client auth downgrade test by @goatgoose in #3951

Full Changelog: v1.3.42...v1.3.43