v0.73.0

- Support for starting sessions with pre-quantum X3DH has been removed from Swift, Java, and TypeScript. PQXDH will be required going forward.

- Bridge registration service client to Swift.

- Net/Java: Some CompletableFutures are now cancellable!

v0.72.1

- Fixes a regression introduced in v0.68.1 where incoming PreKey
  messages would fail to decrypt if the local device had archived the
  corresponding session. (This fix was also backported as v0.71.1.)

- Bridge registration service client to Swift.

v0.71.1

- Fixes a regression introduced in v0.68.1 where incoming PreKey
  messages would fail to decrypt if the local device had archived the
  corresponding session.

v0.72.0

- Swift: `sealedSenderEncrypt(message:for:from:sessionStore:identityStore:context:)` and `sealedSenderDecrypt(message:from:trustRoot:timestamp:sessionStore:identityStore:preKeyStore:signedPreKeyStore:context:)` have been removed. The former was a simple wrapper around `sealedSenderEncrypt(_:for:identityStore:context:)` for 1:1 messages that didn't expose all the features of UnidentifiedSenderMessageContent, and the latter was never updated to support PQXDH messages. The Signal iOS app does not use either function. If you were using `sealedSenderDecrypt`, switch to `UnidentifiedSenderMessageContent.init(message:identityStore:context:)`, and make sure to validate the resulting sender certificate and check for a self-send yourself before attempting to decrypt the inner message.

- The iOS minimum deployment target has been bumped to iOS 15.

- Unnecessary prefixes have been removed from file paths in log output.

- CDSI: fix handling of rate-limit-exceeded error to correctly parse the server-requested delay.

- Update incremental mac reading to support streaming videos.

v0.71.0

- A pre-key message sender's identity is stored after the message is decrypted.

- Java, Node, Swift: changed IdentityKeyStore.saveIdentity to return an enum.

- Java: Expose account registration via the registration service client.

- Node: RegistrationService.registerAccount takes account password as a string.

- net

  - Connections to Signal services (and to Cloudflare's DNS-over-HTTPS server) will now require TLS v1.3, which they would already have been using.

  - Futures returned by ChatConnection.send() will now return more specific errors on failure.

- New SVR2 enclaves for staging and production.

- keytrans

  - Bridge to Node.

  - Support multiple auditors.

v0.70.1

- Support new CDSI enclave in production.

- Java: remove some test-only functions from the public API.

- Rust: bump rand crate to v0.9.0

v0.70.0

- Resuming an existing registration session now requires the phone number with for which the session was created.

- Make the registration service client available in Java.

- Enable registering an account via the Node registration service client.

- Java, Node, Swift: remove items marked as deprecated. This includes functions related to CDSI, HKDF, message backup validation, media sanitization, incremental MACs, and usernames.

- Android: Build with NDK 28, the latest stable.

- backups: Validate NotificationProfile::id

v0.69.1

- Node (GSE): Implement toToken() and encryptUserId() for
  CallLinkSecretParams

- The Net class (Network in Java) now stores a string-map of "remote
  config" information, intended for the same sort of server-provided
  configuration that the apps already have.

- Build for Android with 16KB page support, which makes the library
  usable on some newer Android devices that were previously not
  supported.

- Add in new CDSI enclave ID, now supporting Kyber HFS Noise channels.

- Swift: Allow initializing UnidentifiedSenderMessageContent from its
  serialized form. (Contributed by @saman3d!)

v0.69.0

- Net: Remove the fallback connect code paths for CDSI. This is a breaking change.

- backups: Validate ChatFolder::id

- Node: GroupIdentifier now has a custom toString() (to its base64 representation)

- Net: onConnectionInterrupted will now pass along ConnectedElsewhere and ConnectionInvalidated as disconnection reasons, when applicable.

v0.68.1

- Swift: GroupIdentifier is now CustomStringConvertible (to its hex bytes)

- Swift: `[UInt8]` and `Data` both now have a `toHex()` method backed by the Rust `hex` crate.

- backups: Release notes can now be included in a chat folder.

- net: Fix a bug where DNS-over-HTTPs lookups wouldn't attempt to make IPv4 and IPv6 connections
  to the nameserver in parallel.