Prepare mellon release 0.17.0

NEWS

@@ -1,3 +1,29 @@
+Version 0.17.0
+---------------------------------------------------------------------------
+
+Enhancements:
+
+ * New option MellonSendExpectHeader (default On) which allows to disable
+   sending the Expect header in the HTTP-Artifact binding to improve
+   performance when the remote party does not support this header.
+
+ * Set SameSite attribute to None on on the cookietest cookie.
+
+ * Bump default generated keysize to 3072 bits in mellon_create_metadata.
+
+Bug fixes:
+
+ * Validate if the assertion ID has not been used earlier before creating
+   a new session.
+
+ * Release session cache after calling invalidate endpoint.
+
+ * In MellonCond directives, fix a bug that setting the NC option would
+   also activate substring match and that REG would activate REF.
+
+ * Fix MellonCond substring match to actually match the substring on
+   the attribute value.
+
 Version 0.16.0
 ---------------------------------------------------------------------------
 

configure.ac

@@ -1,4 +1,4 @@
-AC_INIT([mod_auth_mellon],[0.16.0],[https://github.com/latchset/mod_auth_mellon/issues])
+AC_INIT([mod_auth_mellon],[0.17.0],[https://github.com/latchset/mod_auth_mellon/issues])
 AC_CONFIG_HEADERS([config.h])
 
 # We require support for C99.