From c0fa9db0e1ada9dcbc2a41ac2ffbc7871f73bdd1 Mon Sep 17 00:00:00 2001 From: Jussi Kukkonen Date: Mon, 11 Aug 2025 18:57:55 +0300 Subject: [PATCH 1/2] pyproject: Allow cryptography 45 * We pin the major version to prevent breakage: This is especially useful for sigstore-python the cli app * Pinning is a little painful for the users of sigstore-python the library... I think a reasonable compromise is to start updating cryptography pinning in point releases when it seems safe to do so. Signed-off-by: Jussi Kukkonen --- pyproject.toml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pyproject.toml b/pyproject.toml index 2aff8e55c..682d7e2eb 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -26,7 +26,7 @@ classifiers = [ "Topic :: Security :: Cryptography", ] dependencies = [ - "cryptography >= 42, < 45", + "cryptography >= 42, < 46", "id >= 1.1.0", "importlib_resources ~= 5.7; python_version < '3.11'", "pyasn1 ~= 0.6", From d320c9f64ee991e85ce96f3374fbac03c2b59eb9 Mon Sep 17 00:00:00 2001 From: Jussi Kukkonen Date: Mon, 11 Aug 2025 19:05:44 +0300 Subject: [PATCH 2/2] release prep for 3.6.5 Signed-off-by: Jussi Kukkonen --- CHANGELOG.md | 8 ++++++++ sigstore/__init__.py | 2 +- 2 files changed, 9 insertions(+), 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index ff953acaf..b810cfbc1 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -8,11 +8,19 @@ All versions prior to 0.9.0 are untracked. ## [Unreleased] +## [3.6.5] + ### Fixed * Fixed verified time handling so that additional timestamps cannot break otherwise valid signature bundles ([#1492](https://github.com/sigstore/sigstore-python/pull/1492)) +### Changed + +* Added cryptography 45 to list of compatible cryptography releases + ([#1498](https://github.com/sigstore/sigstore-python/pull/1498)) + + ## [3.6.4] ### Fixed diff --git a/sigstore/__init__.py b/sigstore/__init__.py index 20f4db392..28842ca0b 100644 --- a/sigstore/__init__.py +++ b/sigstore/__init__.py @@ -25,4 +25,4 @@ * `sigstore.sign`: creation of Sigstore signatures """ -__version__ = "3.6.4" +__version__ = "3.6.5"