Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: sigstore/sigstore-python
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: v3.6.5
Choose a base ref
...
head repository: sigstore/sigstore-python
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: v3.6.6
Choose a head ref
  • 2 commits
  • 4 files changed
  • 1 contributor

Commits on Oct 7, 2025

  1. [series/3.6.x] Better error when verifying rekorv2 entries (#1565)

    * Improve error message for rekor v2 bundles
    
    Currently the error is technically correct but confusing
    "VerificationError: not enough sources of verified time"
    
    Replace that with:
    
        ERROR    The provided bundle contains a transparency log entry that is incompatible with
                 this version of sigstore-python. Please upgrade your verifying client.
    
                 Additional context:
    
                 Expected log entry version 0.0.1, got 0.0.2
    
                 For detailed error information, run sigstore with the `--verbose` flag.
    
    Signed-off-by: Jussi Kukkonen <jkukkonen@google.com>
    
    * Update Changelog, bump version
    
    Signed-off-by: Jussi Kukkonen <jkukkonen@google.com>
    
    ---------
    
    Signed-off-by: Jussi Kukkonen <jkukkonen@google.com>
    jku authored Oct 7, 2025
    Configuration menu
    Copy the full SHA
    e1f762d View commit details
    Browse the repository at this point in the history

Commits on Oct 8, 2025

  1. Bump cryptography maximum version (#1566)

    * cryptography 46 has been used in main for a while
    * pinning cryptography in libraries is annoying so if we're doing a
      3.6.x release, bumping maybe makes sense
    
    Signed-off-by: Jussi Kukkonen <jkukkonen@google.com>
    jku authored Oct 8, 2025
    Configuration menu
    Copy the full SHA
    2a5e4e4 View commit details
    Browse the repository at this point in the history
Loading