From c5d470108ba938e6ad5053ba50a406241360eb6a Mon Sep 17 00:00:00 2001 From: William Woodruff Date: Wed, 27 Nov 2024 16:15:19 -0500 Subject: [PATCH 1/3] pyproject: constrain cryptography < 44 Signed-off-by: William Woodruff --- pyproject.toml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pyproject.toml b/pyproject.toml index a56da6337..bd824f9ef 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -26,7 +26,7 @@ classifiers = [ "Topic :: Security :: Cryptography", ] dependencies = [ - "cryptography >= 42", + "cryptography >= 42, < 44", "id >= 1.1.0", "importlib_resources ~= 5.7; python_version < '3.11'", "pyasn1 ~= 0.6", From 276ed3d9bf8a9bd1d955eebcbf2fb6875e4591e8 Mon Sep 17 00:00:00 2001 From: William Woodruff Date: Wed, 27 Nov 2024 16:25:41 -0500 Subject: [PATCH 2/3] CHANGELOG: prep 3.5.2 Signed-off-by: William Woodruff --- CHANGELOG.md | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index fb8a97064..4e25f7310 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -8,6 +8,12 @@ All versions prior to 0.9.0 are untracked. ## [Unreleased] +## [3.5.2] + +### Fixed + +* Pinned `cryptography` dependency strictly to prevent future breakage + ## [3.5.1] ### Fixed @@ -539,7 +545,8 @@ This is a corrective release for [2.1.1]. -[Unreleased]: https://github.com/sigstore/sigstore-python/compare/v3.5.1...HEAD +[Unreleased]: https://github.com/sigstore/sigstore-python/compare/v3.5.2...HEAD +[3.5.2]: https://github.com/sigstore/sigstore-python/compare/v3.5.1...v3.5.2 [3.5.1]: https://github.com/sigstore/sigstore-python/compare/v3.5.0...v3.5.1 [3.5.0]: https://github.com/sigstore/sigstore-python/compare/v3.4.0...v3.5.0 [3.4.0]: https://github.com/sigstore/sigstore-python/compare/v3.3.0...v3.4.0 From 87ff7f160d86a6eecf22160e7826a4de614ded49 Mon Sep 17 00:00:00 2001 From: William Woodruff Date: Wed, 27 Nov 2024 16:32:51 -0500 Subject: [PATCH 3/3] prep 3.5.3 Signed-off-by: William Woodruff --- CHANGELOG.md | 9 ++++++++- sigstore/__init__.py | 2 +- 2 files changed, 9 insertions(+), 2 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 4e25f7310..8f8e2c725 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -8,6 +8,12 @@ All versions prior to 0.9.0 are untracked. ## [Unreleased] +## [3.5.3] + +### Fixed + +* Corrective release for [3.5.2] + ## [3.5.2] ### Fixed @@ -545,7 +551,8 @@ This is a corrective release for [2.1.1]. -[Unreleased]: https://github.com/sigstore/sigstore-python/compare/v3.5.2...HEAD +[Unreleased]: https://github.com/sigstore/sigstore-python/compare/v3.5.3...HEAD +[3.5.3]: https://github.com/sigstore/sigstore-python/compare/v3.5.2...v3.5.3 [3.5.2]: https://github.com/sigstore/sigstore-python/compare/v3.5.1...v3.5.2 [3.5.1]: https://github.com/sigstore/sigstore-python/compare/v3.5.0...v3.5.1 [3.5.0]: https://github.com/sigstore/sigstore-python/compare/v3.4.0...v3.5.0 diff --git a/sigstore/__init__.py b/sigstore/__init__.py index ccbb18c2a..bb6923c83 100644 --- a/sigstore/__init__.py +++ b/sigstore/__init__.py @@ -25,4 +25,4 @@ * `sigstore.sign`: creation of Sigstore signatures """ -__version__ = "3.5.1" +__version__ = "3.5.3" pFad - Phonifier reborn

Pfad - The Proxy pFad of © 2024 Garber Painting. All rights reserved.

Note: This service is not intended for secure transactions such as banking, social media, email, or purchasing. Use at your own risk. We assume no liability whatsoever for broken pages.

Alternative Proxies:

Alternative Proxy

pFad Proxy

pFad v3 Proxy

pFad v4 Proxy