Merge pull request #2387 from jku/release-3.0.0

lukpueh · web-flow · commit eff842201e7b · 2023-05-09T11:51:11.000+02:00
Release python-tuf 3.0.0
diff --git a/docs/CHANGELOG.md b/docs/CHANGELOG.md
@@ -1,4 +1,37 @@
 # Changelog
+
+## v3.0.0
+
+The notable change in this release is #2165: The tuf.api.metadata.Key
+class implementation was moved to Securesystemslib with minor API
+changes. These changes require no action in tuf.ngclient users but may
+require small changes in tuf.api.metadata using repository
+implementations that create keys.
+
+As a result of these changes, both signing and verification are now
+fully extensible, see Securesystemslib signer API for details.
+
+tuf.repository remains an unstable module in 3.0.0.
+
+### Added
+* Build: Use pydocstyle to lint docstrings (#2283, #2281)
+* Examples: Add Repository uploader/signer tool example (#2241)
+* Metadata API: Add TargetFile.get_prefixed_paths() (#2166)
+* ngclient: Export TargetFile (#2279)
+* repository: Add strictly typed accessors and context managers (#2311)
+* Release: Use PyPI Trusted Publishing
+  https://docs.pypi.org/trusted-publishers/ (#2371)
+
+### Changed
+* Build: Various minor build and release infrastructure improvements,
+  dependency updates
+* Metadata API: Key class is still part of the API but now comes from
+  Securesystemslib (#2165):
+  * `Key.verify_signature()` method signature has changed
+  * `Key.from_securesystemslib_key()` was removed: Use
+    Securesystemslibs `SSlibKey.from_securesystemslib_key()` instead
+
+
 ## v2.1.0
 ### Added
 * repo: experimental repository module and example (#2193)
diff --git a/tuf/__init__.py b/tuf/__init__.py
@@ -5,4 +5,4 @@
 """
 
 # This value is used in the requests user agent.
-__version__ = "2.1.0"
+__version__ = "3.0.0"
