v1.53.0

@m271828

What's Changed

Add build with hardened flag by @m271828 in #2396
Openssl tool output ordered by options provided by @justsmth in #2452
[SCRUTINICE] Remove redundant condition check by @nhatnghiho in #2450
Support relro in delocator by @torben-hansen in #2455
Explicitly don't allow buffers aliasing in ctr-drbg implementation by @torben-hansen in #2458
Remove unused Windows afunix.h by @justsmth in #2461
Revert "Rework memory BIOs and implement BIO_seek (2nd try) (#2433)" by @justsmth in #2466
Use max_cert_list for TLSv1.3 NewSessionTicket by @skmcgrail in #2453
ML-KEM memory safety by @m271828 in #2263
Simplify Compiler CI jobs by @justsmth in #2430
Improve support for multilib-style distros in our test scripts by @justsmth in #2467
Fix Ruby mainline and nginx CI by @samuel40791765 in #2460
Add hardened build back in by @m271828 in #2474
Fix OCSP integration test failures by @samuel40791765 in #2480
Fix some theoretical missing earlyclobber markers in inline assembly by @torben-hansen in #2477
Simplify sshkdf and kbkdf by @torben-hansen in #2478
Run 3p module tests on python 3.13, add patch for 3.14 by @WillChilds-Klein in #2476
[UPSTREAM] Fix BIO_eof for BIO pairs by @justsmth in #2440
Fix service indicator in HKDF, more paranoid zeroization, and simplify logic by @torben-hansen in #2482
Prepare v1.53.0 by @justsmth in #2471

Full Changelog: v1.52.1...v1.53.0