### Added/Changed - MLA2 is now the default; it is **incompatible** with MLA1. MLA1 enters **low maintenance mode** - New archive format, enabling improved cryptographic and performance characteristics - Cryptographic layer reworked to **protect against truncation attacks** - Redesigned APIs and CLI for improved **simplicity, safety, and semver compatibility** - Support for **authenticated truncated archive reading** - Support for **seeking inside archive entries** - Create archive from **stdin** input - **Mark-of-the-Web (MotW)** propagation support - Introduced `mlar-upgrader`: a tool to **upgrade MLA1 archives to MLA2 format** ### Fixed

### Added/Changed - MLA2 is now the default; it is **incompatible** with MLA1. MLA1 enters **low maintenance mode** - Hybrid traditional/post-quantum encryption using **X25519 + ML-KEM1024** - Archive signing using hybrid traditional/post-quantum signatures - Switched to **Rust 2024 edition** - Key commitment support for AES-GCM - New archive format, enabling improved cryptographic and performance characteristics - Cryptographic layer reworked to **protect against truncation attacks** - Redesigned APIs and CLI for improved **simplicity, safety, and semver compatibility** - Support for **authenticated truncated archive reading** - Support for **seeking inside archive entries** - Comprehensive documentation overhaul - Published the **MLA Book**, a comprehensive guide and reference for MLA usage and concepts - Introduced `mlar-upgrader`: a tool to **upgrade MLA1 archives to MLA2 format** - Bumped dependencies as part of pre-alpha maintenance: `brotli`, `clap`, `rand`, and others via Dependabot (April 2025) - GitHub Actions workflows updated to **use pinned versions** for increased CI/CD security - Minor documentation corrections and CI improvements merged ahead of alpha release ### Fixed - Minor doc and CI fixes improving build stability

### Added/Changed - Code cleaning - Bump dependencies - Benchmarking: reduce the number of test case per test, add new scenarios - Explicitely ask for `zeroize` and `static_secrets` feature in `x25519-dalek` ### Fixed - FailSafe Reader: drastically improve performance - Fix a Brotli-decompressor regression ([following a minor update](https://github.com/ANSSI-FR/MLA/pull/163)) and add corresponding tests