gh-action-sigstore-python is now compatible with Rekor v2
transparency log (but produced signature bundles still contain Rekor v1 entries by default).
Changed
- The action now uses sigstore-python 4.1. All other dependencies are also updated
(#220)
Fixed
- Fixed incompatibility with Python 3.14 by upgrading dependencies
(#225)
Added
rekor-versionargument was added to control the Rekor transparency log
version when signing. The default version in the gh-action-sigstore-python
3.x series will remain 1 (except when usingstaging: true).
(#228)