[devolutionsbot]

🤖 New release

• picky: 7.0.0-rc.28 -> 7.0.0-rc.29
• picky-test-data: 0.1.1 -> 0.1.2
• picky-krb: 0.13.0 -> 0.13.1

Changelog

picky

[7.0.0-rc.29] - 2026-10-26

Bug Fixes

• Honor the EKU scope of CTL NotBefore restrictions during Authenticode validation, avoiding rejection when the restriction excludes code signing (#574) (aa834a9024)
• Return a malformed-data error instead of panicking when a CTL NotBefore EKU attribute contains an empty SET (#574) (aa834a9024)

Build

• Allow stable BLAKE2 0.11 when building with the putty feature (#583) (c95d724db4)

picky-test-data

[0.1.2] - 2026-10-26

Bug Fixes

• Expose the Authenticode signature fixture as PSDIAG_SIGNATURE (#534) (76881c4ee7)
• Add SSH_PRIVATE_KEY_EC_P256_LEADING_ZERO and SSH_PRIVATE_KEY_ED25519_LEADING_ZERO fixtures (#557) (122303e05e)
• Add PUTTY_KEY_EC_P256_LEADING_ZERO, PUTTY_KEY_ED25519_LEADING_ZERO and PUTTY_KEY_ED25519_V2_SHORT_SECRET fixtures (#557) (122303e05e)

Documentation

• Make test-data source URLs clickable in the API documentation (a50971d365)

Changed

• Bump minimal rustc version to 1.85.

picky-krb

[0.13.1] - 2026-10-26

Features

• Add KrbCred, KrbCredInner, KrbCredInfo, EncKrbCredPart and EncKrbCredPartInner for RFC 4120 credential forwarding (ec10d41fbe)
• Expose the KRB_CRED_MSG_TYPE, ENC_KRB_CRED_PART_TYPE and KRB_CRED_ENC_PART constants (ec10d41fbe)
• Add TsRemoteGuardCreds and TsRemoteGuardPackageCred for MS-CSSP Remote Guard credentials (ec10d41fbe)
• [breaking] Make pkinit::AuthPack generic over its client public value; use DhAuthPack or AuthPack<DhReqInfo> for the previous DH representation (#581) (6ea8a21df2)
• Add pkinit::EcAuthPack for ECDH parameters using SubjectPublicKeyInfo (#581) (6ea8a21df2)

Documentation

• Fix links to Checksum::checksum, ApplicationTag and RFC 3962 (452923848c)

---

This PR was generated with release-plz.