8479eaf musig: always clear out secret key in `secp256k1_musig_nonce_gen_counter` (Sebastian Falbesoner)
3cca645 ci: Bump GCC snapshot major version to 17 (Hennadii Stepanov)
285cb78 ci: Replace `ilammy/msvc-dev-cmd` with manual MSVC setup (Hennadii Stepanov)

Pull request description:

  This PR has been created by a GitHub Actions workflow without human involvement.

  [bitcoin-core/secp256k1#1846]: ci: Replace `ilammy/msvc-dev-cmd` with manual MSVC setup
  [bitcoin-core/secp256k1#1848]: ci: Bump GCC snapshot major version to 17
  [bitcoin-core/secp256k1#1849]: musig: always clear out secret key in `secp256k1_musig_nonce_gen_counter`

  Tips:
   * Use `git show --remerge-diff <pr-branch>` to show the conflict resolution in the merge commit.
   * Use `git read-tree --reset -u <pr-branch>` to replay these resolutions during the conflict resolution stage when recreating the PR branch locally.
     Be aware that this may discard your index as well as the uncommitted changes and untracked files in your worktree.

ACKs for top commit:
  mllwchrry:
    ACK b11340b. This sync PR can be merged as-is.
  DarkWindman:
    ACK b11340b

Tree-SHA512: 4b311e9bfa21f00b4780202c08af9d00380f5b3df40704641764d706cfc3408615b6206c7c82ca915b56c27a354bdf24680674269a28eefe7d4e93adc06cbaa5

dedde955a3 silentpayments: skip slow benchmarks for low iters count (<= 2)
7a23e59029 docs: update README
beac8c5a26 ci: enable silentpayments module
68f0487f95 tests: add sha256 tag test
03cf0944b9 tests: add constant time tests
e0793436a8 tests: add BIP-352 test vectors
36c98b6fd8 silentpayments: optimize scanning by using batch inversion
d3cfdf82bd silentpayments: add benchmarks for scanning
d937bc02e6 silentpayments: add examples/silentpayments.c
94fedf8a3b silentpayments: respect per-group recipients protocol limit (K_max=2323)
47b4817405 silentpayments: receiving
54b1678182 silentpayments: recipient label support
651748df81 silentpayments: sending
7bfae739e3 build: add skeleton for new silentpayments (BIP352) module
b11340b3ce Merge bitcoin-core/secp256k1#1849: musig: always clear out secret key in `secp256k1_musig_nonce_gen_counter`
8479eafa57 musig: always clear out secret key in `secp256k1_musig_nonce_gen_counter`
c1a9e4fe64 Merge bitcoin-core/secp256k1#1848: ci: Bump GCC snapshot major version to 17
3cca6451a2 ci: Bump GCC snapshot major version to 17
ea174fe045 Merge bitcoin-core/secp256k1#1846: ci: Replace `ilammy/msvc-dev-cmd` with manual MSVC setup
285cb788e9 ci: Replace `ilammy/msvc-dev-cmd` with manual MSVC setup

git-subtree-dir: src/secp256k1
git-subtree-split: dedde955a391dd726c806aa69eb2c67333207d49

dedde955a3 silentpayments: skip slow benchmarks for low iters count (<= 2)
7a23e59029 docs: update README
beac8c5a26 ci: enable silentpayments module
68f0487f95 tests: add sha256 tag test
03cf0944b9 tests: add constant time tests
e0793436a8 tests: add BIP-352 test vectors
36c98b6fd8 silentpayments: optimize scanning by using batch inversion
d3cfdf82bd silentpayments: add benchmarks for scanning
d937bc02e6 silentpayments: add examples/silentpayments.c
94fedf8a3b silentpayments: respect per-group recipients protocol limit (K_max=2323)
47b4817405 silentpayments: receiving
54b1678182 silentpayments: recipient label support
651748df81 silentpayments: sending
7bfae739e3 build: add skeleton for new silentpayments (BIP352) module
b11340b3ce Merge bitcoin-core/secp256k1#1849: musig: always clear out secret key in `secp256k1_musig_nonce_gen_counter`
8479eafa57 musig: always clear out secret key in `secp256k1_musig_nonce_gen_counter`
c1a9e4fe64 Merge bitcoin-core/secp256k1#1848: ci: Bump GCC snapshot major version to 17
3cca6451a2 ci: Bump GCC snapshot major version to 17
ea174fe045 Merge bitcoin-core/secp256k1#1846: ci: Replace `ilammy/msvc-dev-cmd` with manual MSVC setup
285cb788e9 ci: Replace `ilammy/msvc-dev-cmd` with manual MSVC setup

git-subtree-dir: src/secp256k1
git-subtree-split: dedde955a391dd726c806aa69eb2c67333207d49

33e22255c5 silentpayments: skip slow benchmarks for low iters count (<= 2)
d015afa1dc docs: update README
e95ab02c50 ci: enable silentpayments module
85c7a6a1f3 tests: add sha256 tag test
8b53fb2dab tests: add constant time tests
5383a9e14a tests: add BIP-352 test vectors
394e8930ad silentpayments: optimize scanning by using batch inversion
434a29f3b9 silentpayments: add benchmarks for scanning
46f2288999 silentpayments: add examples/silentpayments.c
45e8049761 silentpayments: respect per-group recipients protocol limit (K_max=2323)
2fc950165d silentpayments: receiving
c7a64d0cd8 silentpayments: recipient label support
be56a66992 silentpayments: sending
7bfae739e3 build: add skeleton for new silentpayments (BIP352) module
b11340b3ce Merge bitcoin-core/secp256k1#1849: musig: always clear out secret key in `secp256k1_musig_nonce_gen_counter`
8479eafa57 musig: always clear out secret key in `secp256k1_musig_nonce_gen_counter`
c1a9e4fe64 Merge bitcoin-core/secp256k1#1848: ci: Bump GCC snapshot major version to 17
3cca6451a2 ci: Bump GCC snapshot major version to 17
ea174fe045 Merge bitcoin-core/secp256k1#1846: ci: Replace `ilammy/msvc-dev-cmd` with manual MSVC setup
285cb788e9 ci: Replace `ilammy/msvc-dev-cmd` with manual MSVC setup

git-subtree-dir: src/secp256k1
git-subtree-split: 33e22255c5d7644654f289f57f889a68e82a0d13

14be7f2abe silentpayments: skip slow benchmarks for low iters count (<= 2)
ea46d6502e docs: update README
8587aeb029 ci: enable silentpayments module
1375d38a32 tests: add sha256 tag test
eb3748dab1 tests: add constant time tests
e1674f389a tests: add BIP-352 test vectors
9163035ab7 silentpayments: optimize scanning by using batch inversion
dc36ff6ec3 silentpayments: add benchmarks for scanning
b7f09f3eb5 silentpayments: add examples/silentpayments.c
460565c662 silentpayments: respect per-group recipients protocol limit (K_max=2323)
72658fc85e silentpayments: receiving
c7a64d0cd8 silentpayments: recipient label support
be56a66992 silentpayments: sending
7bfae739e3 build: add skeleton for new silentpayments (BIP352) module
b11340b3ce Merge bitcoin-core/secp256k1#1849: musig: always clear out secret key in `secp256k1_musig_nonce_gen_counter`
8479eafa57 musig: always clear out secret key in `secp256k1_musig_nonce_gen_counter`
c1a9e4fe64 Merge bitcoin-core/secp256k1#1848: ci: Bump GCC snapshot major version to 17
3cca6451a2 ci: Bump GCC snapshot major version to 17
ea174fe045 Merge bitcoin-core/secp256k1#1846: ci: Replace `ilammy/msvc-dev-cmd` with manual MSVC setup
285cb788e9 ci: Replace `ilammy/msvc-dev-cmd` with manual MSVC setup

git-subtree-dir: src/secp256k1
git-subtree-split: 14be7f2abe4797c1a58249cb901cc6f02972cb4d

4663ba1fb9 silentpayments: skip slow benchmarks for low iters count (<= 2)
3c0f066a2d docs: update README
c72a603466 ci: enable silentpayments module
547ca13a90 tests: add sha256 tag test
aa3a528a59 tests: add constant time tests
74f6ad2bd5 tests: add BIP-352 test vectors
505cf1efa8 silentpayments: optimize scanning by using batch inversion
fa221c4298 silentpayments: add benchmarks for scanning
4a2adde414 silentpayments: add examples/silentpayments.c
367809b4eb silentpayments: respect per-group recipients protocol limit (K_max=2323)
7324715dd6 silentpayments: receiving
7e5d4aa7a6 silentpayments: recipient label support
fbc5ff8fa5 silentpayments: sending
7bfae739e3 build: add skeleton for new silentpayments (BIP352) module
b11340b3ce Merge bitcoin-core/secp256k1#1849: musig: always clear out secret key in `secp256k1_musig_nonce_gen_counter`
8479eafa57 musig: always clear out secret key in `secp256k1_musig_nonce_gen_counter`
c1a9e4fe64 Merge bitcoin-core/secp256k1#1848: ci: Bump GCC snapshot major version to 17
3cca6451a2 ci: Bump GCC snapshot major version to 17
ea174fe045 Merge bitcoin-core/secp256k1#1846: ci: Replace `ilammy/msvc-dev-cmd` with manual MSVC setup
285cb788e9 ci: Replace `ilammy/msvc-dev-cmd` with manual MSVC setup

git-subtree-dir: src/secp256k1
git-subtree-split: 4663ba1fb918d4ec9b940e013a1cd2595ef785c3

c02e14c413 silentpayments: skip slow benchmarks for low iters count (<= 2)
498d9a9a0a docs: update README
e6836582ae ci: enable silentpayments module
4c9db0b1d2 tests: add sha256 tag test
e992c31a8a tests: add constant time tests
435cb9d3c3 tests: add BIP-352 test vectors
b2c7c97e0a silentpayments: optimize scanning by using batch inversion
61af171277 silentpayments: add benchmarks for scanning
a3591fc516 silentpayments: add examples/silentpayments.c
f0bc2b8ea4 silentpayments: respect per-group recipients protocol limit (K_max=2323)
09cb88250c silentpayments: receiving
f4b8da9e66 silentpayments: recipient label support
a360c392a0 silentpayments: sending
ff8e6f0938 build: add skeleton for new silentpayments (BIP352) module
8363a2d8d1 Merge bitcoin-core/secp256k1#1854: tests: compare full MuSig aggregate nonce
af1fdd1215 tests: compare full MuSig aggregate nonce
b11340b3ce Merge bitcoin-core/secp256k1#1849: musig: always clear out secret key in `secp256k1_musig_nonce_gen_counter`
8479eafa57 musig: always clear out secret key in `secp256k1_musig_nonce_gen_counter`
c1a9e4fe64 Merge bitcoin-core/secp256k1#1848: ci: Bump GCC snapshot major version to 17
3cca6451a2 ci: Bump GCC snapshot major version to 17
ea174fe045 Merge bitcoin-core/secp256k1#1846: ci: Replace `ilammy/msvc-dev-cmd` with manual MSVC setup
285cb788e9 ci: Replace `ilammy/msvc-dev-cmd` with manual MSVC setup

git-subtree-dir: src/secp256k1
git-subtree-split: c02e14c4136b0eeaa00b21c09ae729618c190a1f

a8f297a642 silentpayments: skip slow benchmarks for low iters count (<= 2)
66aee2af17 docs: update README
6b33ad2d81 ci: enable silentpayments module
7d3d103aca tests: add sha256 tag test
55264b49fc tests: add constant time tests
b8b81b073c tests: add BIP-352 test vectors
995babd0d4 silentpayments: optimize scanning by using batch inversion
0a0bb53264 silentpayments: add benchmarks for scanning
46b2c577eb silentpayments: add examples/silentpayments.c
96e3a28a1b silentpayments: respect per-group recipients protocol limit (K_max=2323)
40e015ae8c silentpayments: receiving
f4b8da9e66 silentpayments: recipient label support
a360c392a0 silentpayments: sending
ff8e6f0938 build: add skeleton for new silentpayments (BIP352) module
8363a2d8d1 Merge bitcoin-core/secp256k1#1854: tests: compare full MuSig aggregate nonce
af1fdd1215 tests: compare full MuSig aggregate nonce
b11340b3ce Merge bitcoin-core/secp256k1#1849: musig: always clear out secret key in `secp256k1_musig_nonce_gen_counter`
8479eafa57 musig: always clear out secret key in `secp256k1_musig_nonce_gen_counter`
c1a9e4fe64 Merge bitcoin-core/secp256k1#1848: ci: Bump GCC snapshot major version to 17
3cca6451a2 ci: Bump GCC snapshot major version to 17
ea174fe045 Merge bitcoin-core/secp256k1#1846: ci: Replace `ilammy/msvc-dev-cmd` with manual MSVC setup
285cb788e9 ci: Replace `ilammy/msvc-dev-cmd` with manual MSVC setup

git-subtree-dir: src/secp256k1
git-subtree-split: a8f297a642651835a0086e85790ab9e6a0b6ca82

0f4a7e6bf Merge bitcoin-core/secp256k1#1855: bench: add internal benchmark for `secp256k1_fe_normalize_var`
13db747f2 Merge bitcoin-core/secp256k1#1861: refactor: introduce `_ecmult_gen_ge` helper (preventing accidental gej leaks)
9e017e506 refactor: rename `_ecmult_gen` -> `_ecmult_gen_gej` for consistency
a3296d5e2 refactor: introduce `_ecmult_gen_ge` helper (preventing accidental gej leaks)
c63062380 Merge bitcoin-core/secp256k1#1852: Add exhaustive test for ECDH module
240578eef bench: add internal benchmark for `secp256k1_fe_normalize_var`
5698e66c6 Add exhaustive test for ECDH module
a39093de1 Merge bitcoin-core/secp256k1#1851: doc: correct API docs for ECDSA signing out-params (s/array/signature object/)
8363a2d8d Merge bitcoin-core/secp256k1#1854: tests: compare full MuSig aggregate nonce
af1fdd121 tests: compare full MuSig aggregate nonce
40a0d874a doc: correct API docs for ECDSA signing out-params (s/array/signature object/)
b11340b3c Merge bitcoin-core/secp256k1#1849: musig: always clear out secret key in `secp256k1_musig_nonce_gen_counter`
8479eafa5 musig: always clear out secret key in `secp256k1_musig_nonce_gen_counter`
c1a9e4fe6 Merge bitcoin-core/secp256k1#1848: ci: Bump GCC snapshot major version to 17
3cca6451a ci: Bump GCC snapshot major version to 17
ea174fe04 Merge bitcoin-core/secp256k1#1846: ci: Replace `ilammy/msvc-dev-cmd` with manual MSVC setup
285cb788e ci: Replace `ilammy/msvc-dev-cmd` with manual MSVC setup
7262adb4b Merge bitcoin-core/secp256k1#1841: gha: Bump deprecated GHA workflow dependencies
c5cd9d6d9 gha: Bump deprecated GHA workflow dependencies
95b702de3 Merge bitcoin-core/secp256k1#1839: ecdsa: VERIFY_CHECK result of _fe_set_b32_limit
634215f3f Merge bitcoin-core/secp256k1#1837: tests: Fix function pointer initialization C89 error in ellswift tests
43fca0ff5 ecdsa: VERIFY_CHECK result of _fe_set_b32_limit
b84635ed3 tests: Fix C89 function pointer initialization in ellswift tests
ffc25a273 Merge bitcoin-core/secp256k1#1834: ecmult: Document and test ng=NULL in ecmult
3a403639d eckey: Call ecmult with NULL instead of zero scalar
7e68c0c88 ecmult: Document and test ng=NULL in ecmult
1aafe1513 Merge bitcoin-core/secp256k1#1777: Make SHA256 compression runtime pluggable
b9cb1cbfd Merge bitcoin-core/secp256k1#1824: util: introduce and use `ARRAY_SIZE` macro
4d92a083b sha256: speed up writes using multi-block compression
0753f8b90 Add API to override SHA256 compression at runtime
fdb6a91a5 Introduce hash context to support pluggable SHA256 compression
c0a2aba08 Merge bitcoin-core/secp256k1#1811: bench: Update help functions in bench and bench_internal
10f546a2c Merge bitcoin-core/secp256k1#1832: testrand: Remove testrand_finish
8d0eda07e testrand: Remove testrand_finish
95e681584 Merge bitcoin-core/secp256k1#1825: hash: remove redundant `secp256k1_sha256_initialize` in tagged hash midstate functions
f48b1bfa5 hash: add midstate initializer and use it for tagged hashes
3019186a6 Merge bitcoin-core/secp256k1#1829: ci: Fix leftover use of old ECMULTGENPRECISION
79e9f2523 ci: Fix leftover use of old ECMULTGENPRECISION
dfe042feb Merge bitcoin-core/secp256k1#1828: Revert "ci, docker: Fix LLVM repository signature failure"
76e92cfee Revert "ci, docker: Fix LLVM repository signature failure"
ac561601b Merge bitcoin-core/secp256k1#1760: cmake: Add dynamic test discovery to improve parallelism
c7a7f732b Merge bitcoin-core/secp256k1#1821: ellswift: fix overflow flag handling in secp256k1_ellswift_xdh
921b9711e util: introduce and use `ARRAY_SIZE` macro
b99a94c38 Add tests for bad scalar inputs in ellswift XDH
307b49f1b ellswift: fix overflow flag handling in secp256k1_ellswift_xdh
322d0a435 Merge bitcoin-core/secp256k1#1823: ci: Load Docker image by ID from builder step
ed02466d3 ci: Load Docker image by ID from builder step
c49c9be50 bench: Update help functions in bench and bench_internal
1d146ac3e Merge bitcoin-core/secp256k1#1819: tests: Improve secp256k1_scalar_check_overflow tests (Issue #1812)
f47bbc07f test: add unit tests for secp256k1_scalar_check_overflow
d071aa56d Merge bitcoin-core/secp256k1#1815: refactor: remove unnecessary `malloc` result casts
99ab4a105 Merge bitcoin-core/secp256k1#1817: ci: Disable Docker build summary generation
c5da3bde9 Merge bitcoin-core/secp256k1#1818: ci: Enforce base-10 evaluation
97de5120c Merge bitcoin-core/secp256k1#1804: test: show both CMake and Autotools usage for ctime_tests
4fb7ccf5d ci: Enforce base-10 evaluation
3ae72e786 ci: Disable Docker build summary generation
97b3c4784 refactor: remove unnecessary `malloc` result casts
57315a698 Merge bitcoin-core/secp256k1#1813: Remove trailing spaces and introduce `-Wtrailing-whitespace=any` compiler flag
86cae58d2 build: Add `-Wleading-whitespace=spaces` compiler flag
fb229e760 build: Add `-Wtrailing-whitespace=any` compiler flag
13e3bee50 refactor: Remove trailing whitespace
453949ab2 Merge bitcoin-core/secp256k1#1816: ci: Rotate Docker cache keys
cd49c57e4 Merge bitcoin-core/secp256k1#1814: release process: mention the `[Unreleased]` link clearly
2ccff6eb7 ci: Add weekly schedule
2f18567d2 ci: Rotate Docker cache keys every 4 weeks
0ffb1749a ci, docker: Fix LLVM repository signature failure
0267b6551 release process: mention the `[Unreleased]` link clearly
1605b02f7 Merge bitcoin-core/secp256k1#1775: Add CMake build directory patterns to `.gitignore`
14e56970c Merge bitcoin-core/secp256k1#1794: ecmult: Use size_t for array indices
c7a52400d Merge bitcoin-core/secp256k1#1809: release cleanup: bump version after 0.7.1
ae7eb729c release cleanup: bump version after 0.7.1
1a53f4961 Merge bitcoin-core/secp256k1#1808: Prepare for 0.7.1
20a209f11 release: prepare for 0.7.1
c4b6a81a6 changelog: update in preparation for the v0.7.1 release
ebb35882d Merge bitcoin-core/secp256k1#1796: bench: fail early if user inputs invalid value for SECP256K1_BENCH_ITERS
c09215f7a bench: fail early if user inputs invalid value for SECP256K1_BENCH_ITERS
1bc74a22f test: show both Autotools and CMake usage for ctime_tests
471e3a130 Merge bitcoin-core/secp256k1#1800: sage: verify Eisenstein integer connection for GLV constants
8354618e0 cmake: Set `LABELS` property for tests
29f26ec3c cmake: Integrate DiscoverTests and normalize test names
29ac4d849 sage: verify Eisenstein integer connection for GLV constants
f95b263f2 cmake: Add DiscoverTests module
4ac651144 cmake, refactor: Deduplicate test-related code
4721e077b Merge bitcoin-core/secp256k1#1793: doc/bench: added help text for SECP256K1_BENCH_ITERS env var for bench_ecmult
bd5ced1fe doc/bench: added help text for SECP256K1_BENCH_ITERS env var for bench_ecmult
47eb70959 ecmult: Use size_t for array indices in _odd_multiplies_table
bb1d199de ecmult: Use size_t for array indices into tables
2d9137ce9 Merge bitcoin-core/secp256k1#1764: group: Avoid using infinity field directly in other modules
f9a944ff2 Merge bitcoin-core/secp256k1#1790: doc: include arg -DSECP256K1_USE_EXTERNAL_DEFAULT_CALLBACKS=ON for cmake
0406cfc4d doc: include arg -DUSE_EXTERNAL_DEFAULT_CALLBACKS=1 for cmake
8d445730e Merge bitcoin-core/secp256k1#1783: Add VERIFY_CHECKs and documentation that flags must be 0 or 1
aa2a39c1a Merge bitcoin-core/secp256k1#1778: doc/bench: Added cmake build options to bench error messages
540fec8ae Merge bitcoin-core/secp256k1#1788: test: split monolithic ellswift test into independent cases
d822b2902 test: split monolithic ellswift test into independent cases
ae00c552d Add VERIFY_CHECKs that flags are 0 or 1
5c7518334 Merge bitcoin-core/secp256k1#1784: refactor: remove ret from secp256k1_ec_pubkey_serialize
be5e4f02f Merge bitcoin-core/secp256k1#1779: Add ARG_CHECKs to ensure "array of pointers" elements are non-NULL
3daab83a6 refactor: remove ret from secp256k1_ec_pubkey_serialize
8bcda186d test: Add non-NULL checks for "pointer of array" API functions
5a08c1bcd Add ARG_CHECKs to ensure "array of pointers" elements are non-NULL
3b5b03f30 doc/bench: Added cmake build options to bench error messages
e7f7083b5 Merge bitcoin-core/secp256k1#1774: refactor: split up internal pubkey serialization function into compressed/uncompressed variants
748c0fdd6 Add CMake build directory patterns to `.gitignore`
7eb86bdb0 autotools: Rename `build-aux` to `autotools-aux`
b6c2a3cd7 Merge bitcoin-core/secp256k1#1761: ecmult_multi: reduce strauss memory usage by 30%
f5e815f43 remove secp256k1_eckey_pubkey_serialize function
0d3659c54 use new `_eckey_pubkey_serialize{33,65}` functions in modules (ellswift,musig)
adb76f82e use new `_eckey_pubkey_serialize{33,65}` functions in public API
fc7458ca3 introduce `secp256k1_eckey_pubkey_serialize{33,65}` functions
c8206b1ce Merge bitcoin-core/secp256k1#1771: ci: Use Python virtual environment in "x86_64-macos-native" job
f252da7e6 ci: Use Python virtual environment in "x86_64-macos-native" job
115b135fe Merge bitcoin-core/secp256k1#1763: bench: Use `ALIGNMENT` macro instead of hardcoded value
2f73e5281 group: Avoid using infinity field directly in other modules
153eea20c bench: Use `ALIGNMENT` macro instead of hardcoded value
26166c4f5 ecmult_multi: reduce strauss memory usage by 30%
7a2fff85e Merge bitcoin-core/secp256k1#1758: ci: Drop workaround for Valgrind older than 3.20.0
43e7b115f Merge bitcoin-core/secp256k1#1759: ci: Switch to macOS 15 Sequoia Intel-based image
8bc50b72f ci: Switch to macOS 15 Sequoia Intel-based image
c09519f0e ci: Drop workaround for Valgrind older than 3.20.0
d543c0d91 Merge bitcoin-core/secp256k1#1734: Introduce (mini) unit test framework
f44c1ebd9 Merge bitcoin-core/secp256k1#1719: ci: DRY workflow using anchors
a44a33938 Merge bitcoin-core/secp256k1#1750: ci: Use clang-snapshot in "MSan" job
15d014804 ci: Drop default for `inputs.command` in `run-in-docker-action`
1decc49a1 ci: Use YAML anchor and aliases for repeated "CI script" steps
dff1bc107 ci, refactor: Generalize use of `matrix.configuration.env_vars`
4b644da19 ci: Use YAML anchor and aliases for repeated "Print logs" steps
a889cd93d ci: Bump `actions/checkout` version
574c2f308 ci: Use YAML anchor and aliases for repeated "Checkout" steps
53585f93b ci: Use clang-snapshot in "MSan" job
6894c964f Fix Clang 21+ `-Wuninitialized-const-pointer` warning when using MSan
2b7337f63 Merge bitcoin-core/secp256k1#1756: ci: Fix image caching and apply other improvements
f163c3589 ci: Set `DEBIAN_FRONTEND=noninteractive`
70ae177ca ci: Bump `docker/build-push-action` version
b2a95a420 ci: Drop `tags` input for `docker/build-push-action`
122014edb ci: Add `scope` parameter to `cache-{to,from}` options
2f4546ce5 test: add --log option to display tests execution
95b9953ea test: Add option to display all available tests
953f7b008 test: support running specific tests/modules targets
0302c1a3d test: add --help for command-line options
9ec3bfe22 test: adapt modules to the new test infrastructure
48789dafc test: introduce (mini) unit test framework
baa265429 Merge bitcoin-core/secp256k1#1727: docs: Clarify that callback can be called more than once
4d90585fe docs: Improve API docs of _context_set_illegal_callback
895f53d1c docs: Clarify that callback can be called more than once
de6af6ae3 Merge bitcoin-core/secp256k1#1748: bench: improve context creation in ECDH benchmark
581788515 Merge bitcoin-core/secp256k1#1749: build: Fix warnings in x86_64 assembly check
ab560078a build: Fix warnings in x86_64 assembly check
10dab907e Merge bitcoin-core/secp256k1#1741: doc: clarify API doc of `secp256k1_ecdsa_recover` return value
dfe284ed2 bench: improve context creation in ECDH benchmark
7321bdf27 doc: clarify API doc of `secp256k1_ecdsa_recover` return value
b47565430 Merge bitcoin-core/secp256k1#1745: test: introduce group order byte-array constant for deduplication
9cce70386 refactor: move 'gettime_i64()' to tests_common.h
0c91c5604 test: introduce group order byte-array constant for deduplication
88be4e8d8 Merge bitcoin-core/secp256k1#1735: musig: Invalidate secnonce in secp256k1_musig_partial_sign
399b582a5 Split memclear into two versions

git-subtree-dir: src/secp256k1
git-subtree-split: 0f4a7e6bf9d971addb2b851df7cd2777fc62b212

bd0287d650 Merge bitcoin-core/secp256k1#1859: field: force-inline 5x52 mul and sqr
fdcf2d41e2 Merge bitcoin-core/secp256k1#1865: test: enable -Wunused-function in test suite (Fix #1831)
b2d2bd362d Merge bitcoin-core/secp256k1#1860: cmake: Emulate Libtool's behavior on NetBSD and OpenBSD
87bec430bf Merge bitcoin-core/secp256k1#1867: test: musig: fix dead "aggnonce encodes two points at infinity" check
71fcd8410e field: force-inline 5x52 mul and sqr
a77dacad9a test: enable -Wunused-function in test suite (Fix #1831)
aea86bc350 Merge bitcoin-core/secp256k1#1864: test: refactor: simplify tests by using `_ecmult_gen_ge` helper, add test
2ee79e77e6 test: add unit test for `_ecmult_gen_ge`
d7125e517d test: musig: fix dead "aggnonce encodes two points at infinity" check
1eab757207 cmake: Fix shared library versioning on OpenBSD
a401c5145a cmake: Fix shared library versioning on NetBSD
8a0f4002c7 cmake, refactor: Improve documenting in `SetLibtoolAbiVersion` module
acf2084aa7 cmake, refactor: Introduce `SetLibtoolAbiVersion` module
0f4a7e6bf9 Merge bitcoin-core/secp256k1#1855: bench: add internal benchmark for `secp256k1_fe_normalize_var`
ca68daf8e1 test: refactor: simplify tests by using `_ecmult_gen_ge` helper
13db747f2b Merge bitcoin-core/secp256k1#1861: refactor: introduce `_ecmult_gen_ge` helper (preventing accidental gej leaks)
9e017e5062 refactor: rename `_ecmult_gen` -> `_ecmult_gen_gej` for consistency
a3296d5e23 refactor: introduce `_ecmult_gen_ge` helper (preventing accidental gej leaks)
c63062380f Merge bitcoin-core/secp256k1#1852: Add exhaustive test for ECDH module
240578eef5 bench: add internal benchmark for `secp256k1_fe_normalize_var`
5698e66c64 Add exhaustive test for ECDH module
a39093de15 Merge bitcoin-core/secp256k1#1851: doc: correct API docs for ECDSA signing out-params (s/array/signature object/)
8363a2d8d1 Merge bitcoin-core/secp256k1#1854: tests: compare full MuSig aggregate nonce
af1fdd1215 tests: compare full MuSig aggregate nonce
40a0d874a6 doc: correct API docs for ECDSA signing out-params (s/array/signature object/)
b11340b3ce Merge bitcoin-core/secp256k1#1849: musig: always clear out secret key in `secp256k1_musig_nonce_gen_counter`
8479eafa57 musig: always clear out secret key in `secp256k1_musig_nonce_gen_counter`
c1a9e4fe64 Merge bitcoin-core/secp256k1#1848: ci: Bump GCC snapshot major version to 17
3cca6451a2 ci: Bump GCC snapshot major version to 17
ea174fe045 Merge bitcoin-core/secp256k1#1846: ci: Replace `ilammy/msvc-dev-cmd` with manual MSVC setup
285cb788e9 ci: Replace `ilammy/msvc-dev-cmd` with manual MSVC setup

git-subtree-dir: src/secp256k1
git-subtree-split: bd0287d650c24dc41e0362675a9f6a49ee952def

1f3f0a4 Squashed 'src/secp256k1/' changes from 7262adb4b4..bd0287d650 (fanquake)

Pull request description:

  Includes:
  * bitcoin-core/secp256k1#1846
  * bitcoin-core/secp256k1#1848
  * bitcoin-core/secp256k1#1849
  * bitcoin-core/secp256k1#1851
  * bitcoin-core/secp256k1#1852
  * bitcoin-core/secp256k1#1854
  * bitcoin-core/secp256k1#1855
  * bitcoin-core/secp256k1#1859
  * bitcoin-core/secp256k1#1860
  * bitcoin-core/secp256k1#1861
  * bitcoin-core/secp256k1#1864
  * bitcoin-core/secp256k1#1865
  * bitcoin-core/secp256k1#1867

  The most interesting change to call out / that reviewers might want to test probably being bitcoin-core/secp256k1#1859.

ACKs for top commit:
  theStack:
    ACK 9caae50
  hebasto:
    ACK 9caae50.
  sedited:
    ACK 9caae50
  andrewtoth:
    ACK 9caae50

Tree-SHA512: 187e76d7f7ed603d81b7c355abfb184f37658fdb5109a2c78f72c615cdf862dfc9c3e2ff4556eb047d59348ba1a7030ca38342682c56dbfdb51610d2cc1de405

1f3f0a4 Squashed 'src/secp256k1/' changes from 7262adb4b4..bd0287d650 (fanquake)

Pull request description:

  Includes:
  * bitcoin-core/secp256k1#1846
  * bitcoin-core/secp256k1#1848
  * bitcoin-core/secp256k1#1849
  * bitcoin-core/secp256k1#1851
  * bitcoin-core/secp256k1#1852
  * bitcoin-core/secp256k1#1854
  * bitcoin-core/secp256k1#1855
  * bitcoin-core/secp256k1#1859
  * bitcoin-core/secp256k1#1860
  * bitcoin-core/secp256k1#1861
  * bitcoin-core/secp256k1#1864
  * bitcoin-core/secp256k1#1865
  * bitcoin-core/secp256k1#1867

  The most interesting change to call out / that reviewers might want to test probably being bitcoin-core/secp256k1#1859.

ACKs for top commit:
  theStack:
    ACK eaad00f
  hebasto:
    ACK eaad00f.
  sedited:
    ACK eaad00f
  andrewtoth:
    ACK eaad00f

Tree-SHA512: 187e76d7f7ed603d81b7c355abfb184f37658fdb5109a2c78f72c615cdf862dfc9c3e2ff4556eb047d59348ba1a7030ca38342682c56dbfdb51610d2cc1de405