Merge pull request #1564 from google/release-2.9.0

Set Conscrypt version to 2.9.0 for the next release.

Merge pull request #1553 from google/google3-export

Export from Google3

Set Conscrypt version to 2.7.0, for the next release. (#1539)

PiperOrigin-RevId: 973877843

Co-authored-by: Miguel Aranda <miguelaranda@google.com>

Project import generated by Copybara. (#1534)

PiperOrigin-RevId: 968538795

Use BoringSSL branch 0.20260813.0 in CI workflow, instead of main.

Co-authored-by: Miguel Aranda <miguelaranda@google.com>

Use an Ubuntu 20.04 container to build Concrypt on GitHub CI, and mak…

…e Make allocateHeapBuffer non-abstract.. (#1527, #1526)

* Use an Ubuntu 20.04 container to build Concrypt on GitHub CI.

* Fix some warning.

* Remove file.

* Pin download and upload artifact to hash.

* Pin more things.

* Pin last two.

* Fix failing test.

This test fails because BoringSSL remove a named curve.

* Add read permissions.

* Make allocateHeapBuffer non-abstract.

This should fix
#1526.

* Upgrade checkout to v7.

Use an Ubuntu 20.04 container to build Concrypt on GitHub CI, and mak…

…e Make allocateHeapBuffer non-abstract.. (#1527, #1526)

* Use an Ubuntu 20.04 container to build Concrypt on GitHub CI.

* Fix some warning.

* Remove file.

* Pin download and upload artifact to hash.

* Pin more things.

* Pin last two.

* Fix failing test.

This test fails because BoringSSL remove a named curve.

* Add read permissions.

* Make allocateHeapBuffer non-abstract.

This should fix
#1526.

* Upgrade checkout to v7.

Project import generated by Copybara. (#1523)

PiperOrigin-RevId: 946867859

Co-authored-by: Miguel Aranda <miguelaranda@google.com>

Project import generated by Copybara. (#1521)

PiperOrigin-RevId: 944437907

Co-authored-by: Miguel Aranda <miguelaranda@google.com>

Project import generated by Copybara. (#1514)

PiperOrigin-RevId: 936001388

Co-authored-by: Miguel Aranda <miguelaranda@google.com>

Project import generated by Copybara. (#1513)

PiperOrigin-RevId: 933117874

The JCE API allows to use PQC algorithms using SSLParameters.setNamedGroups, see:
https://docs.oracle.com/en/java/javase/25/docs/api/java.base/javax/net/ssl/SSLParameters.html
But this was only added in Java 20, so it is not available for older Java versions. And for Android, it is only available since Android API level 37:
https://developer.android.com/reference/javax/net/ssl/SSLParameters.

Other versions of Java and Android can't use this. We add a function Conscrypt.setNamedGroups that allows to do that.

Co-authored-by: Miguel Aranda <miguelaranda@google.com>