From 29ee9c803583d9b04504a091f8293e801fe811e5 Mon Sep 17 00:00:00 2001 From: Facundo Tuesca Date: Sun, 26 Jul 2026 23:06:52 +0200 Subject: [PATCH] Prepare 4.5 release Signed-off-by: Facundo Tuesca --- CHANGELOG.md | 9 ++++++++- sigstore/__init__.py | 2 +- 2 files changed, 9 insertions(+), 2 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 669749d19..e6baab377 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -8,8 +8,13 @@ All versions prior to 0.9.0 are untracked. ## [Unreleased] +## [4.5.0] + ### Fixed +* Signing reuses a valid cached certificate before checking whether the OIDC + identity token has expired. + ([#1838](https://github.com/sigstore/sigstore-python/pull/1838)) * A malformed checkpoint in a bundle's inclusion proof now raises `VerificationError` during verification, instead of leaking a raw `ValueError` or `binascii.Error` @@ -812,7 +817,9 @@ This is a corrective release for [2.1.1]. -[Unreleased]: https://github.com/sigstore/sigstore-python/compare/v4.3.0...HEAD +[Unreleased]: https://github.com/sigstore/sigstore-python/compare/v4.5.0...HEAD +[4.5.0]: https://github.com/sigstore/sigstore-python/compare/v4.4.0...v4.5.0 +[4.4.0]: https://github.com/sigstore/sigstore-python/compare/v4.3.0...v4.4.0 [4.3.0]: https://github.com/sigstore/sigstore-python/compare/v4.2.0...v4.3.0 [4.2.0]: https://github.com/sigstore/sigstore-python/compare/v4.1.0...v4.2.0 [4.1.0]: https://github.com/sigstore/sigstore-python/compare/v4.0.0...v4.1.0 diff --git a/sigstore/__init__.py b/sigstore/__init__.py index 501e11dcc..5a3487b59 100644 --- a/sigstore/__init__.py +++ b/sigstore/__init__.py @@ -25,4 +25,4 @@ * `sigstore.sign`: creation of Sigstore signatures """ -__version__ = "4.4.0" +__version__ = "4.5.0"