v0.30.1

- Node: Explicitly specify minimum macOS version to build for
- CI: Only run the slow tests on the private repo

v0.29.1

Node: Explicitly specify minimum macOS version to build for

v0.30.0

- Update multi-recipient sealed sender "outbound" format to version 0x23,
  which uses a 17-byte ServiceId field instead of a 16-byte UUID.

- Adopt ServiceIds throughout zkgroup:
  - Many operations now use the Aci and Pni types instead of plain UUID.
  - UuidCiphertext now encodes ACIs and PNIs distinctly; operations on
    UuidCiphertext now take and return 'ServiceId'. Clients will have
    to choose whether to accept non-ACIs for particular ciphertexts.
  - AuthCredentialWithPni now has two alternate encodings: the existing
    "PniAsAci", and the compatible-with-UuidCiphertext-changes
    "PniAsServiceId" to use going forward.

v0.29.0

- Username links API refinements
- Use our own mirror to reproducibly build for Android and Server
- Use Debian Bullseye (base of Ubuntu 20.04) for Docker prebuilds
- Convenience APIs to ProtocolAddress for using ServiceIds

v0.28.1

- Java: Add missing hashCode override for ServiceId

v0.28.0

- Added username link API.
- Added the ServiceId, Aci, and Pni types.

v0.27.0

Exposes Kyber KEM and PQXDH, originally added in v0.24.0, to iOS and Node.

v0.26.0

- pin: Move SVR2 pin hashing out of Svr2Client, and take a string
  where possible
- Java: Fix exception specifications for KEM*Key types
- Java: Include a ProtocolAddress in NoSessionException
- Updated Rust toolchain and Cargo dependencies

v0.25.0

- Mark svr2 apis ready for use in production clients
- Update boring for a newer version of BoringSSL

v0.24.0

- protocol: Add Kyber KEM and implement PQXDH protocol
- Implement incremental MAC
- Add MP4 format sanitizer