diff --git a/CHANGELOG.md b/CHANGELOG.md index 244aa73b..ac0487c8 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -10,20 +10,24 @@ All versions prior to 0.9.0 are untracked. ### Added -* API: The DSSE `Envelope` class now performs automatic validation +* API: The DSSE `Envelope` class now performs automatic validation ([#1211](https://github.com/sigstore/sigstore-python/pull/1211)) -* API: Added `signature` property to `Envelope` class for accessing raw +* API: Added `signature` property to `Envelope` class for accessing raw signature bytes ([#1211](https://github.com/sigstore/sigstore-python/pull/1211)) -* Signed timestamps embedded in bundles are now automatically verified +* Signed timestamps embedded in bundles are now automatically verified against Timestamp Authorities provided within the Trusted Root ([#1206] (https://github.com/sigstore/sigstore-python/pull/1206)) +* Bundles are now generated with signed timestamps when signing if the + Trusted Root contains one or more Timestamp Authorities + ([#1216](https://github.com/sigstore/sigstore-python/pull/1216)) + ### Fixed * Fixed a CLI parsing bug introduced in 3.5.1 where a warning about - verifying legacy bundles was never shown + verifying legacy bundles was never shown ([#1198](https://github.com/sigstore/sigstore-python/pull/1198)) ## [3.5.1]