0.25.0 (stable)

• add PKCS#11 3.0 support [#458, #461, #462, #463, #464, #467, #469, #470, #475, #485, #486]
• add support for profile objects [#479]
• add ability to adjust module and config paths at run-time via system environmental exports [#442]
• make terminal output nicer [#509, #510]
• p11-kit: add command to print merged configuration [#446, #489]
• p11-kit: add commands to list, add and delete profiles of a token [#500, #503, #506]
• trust: add command to check format of .p11-kit files [#476, #483]
• virtual: fix libffi type signatures for PKCS#11 3.0 functions [#492]
• server: fix umask setting when --group is specified [#478]
• server: check SHELL only when neither --sh nor --csh is specified [#438]
• rpc: use space string in C_InitToken [#514]
• rpc: fix two off-by-one errors identified by asan [#456]
• modules: make logging message more translatable [#436]
• pkcs11.h: support CRYPTOKI_GNU for IBM vendor mechanisms [#421]
• pkcs11.h: add IBM specific mechanism and attributes [#415]
• pkcs11.h: add ChaCha20/Salsa20 and Poly1305 mechanisms [#487]
• pkcs11.h: add AES-GCM mechanism parameters for message-based encryption [#481]
• po: update translations from Transifex [#439]
• bug and build fixes [#412, #414, #417, #418, #420, #426, #427, #428, #448, #451, #459, #496, #505, #511, #512, #513, #516, #517, #524, #521]
• test fixes [#424, #441, #444, #443, #460, #472, #474, #465, #473, #487, #499, #519, #525, #526]