build(deps): update sigstore requirement from ~=3.1.0 to >=3.1,<3.3 in the python group

pyproject.toml

@@ -17,7 +17,7 @@ dependencies = [
     "cryptography",
     "packaging",
     "pydantic",
-    "sigstore~=3.1.0",
+    "sigstore~=3.2",
     "sigstore-protobuf-specs",
 ]
 requires-python = ">=3.11"

src/pypi_attestations/_impl.py

@@ -255,7 +255,7 @@ def from_bundle(cls, sigstore_bundle: Bundle) -> Attestation:
             verification_material=VerificationMaterial(
                 certificate=base64.b64encode(certificate),
                 transparency_entries=[
-                    TransparencyLogEntry(sigstore_bundle.log_entry._to_dict_rekor())  # noqa: SLF001
+                    sigstore_bundle.log_entry._to_rekor().to_dict()  # noqa: SLF001
                 ],
             ),
             envelope=Envelope(

test/test_cli.py

@@ -8,17 +8,18 @@
 import tempfile
 from pathlib import Path
 
-import pypi_attestations._cli
 import pytest
 import sigstore.oidc
+from sigstore.oidc import IdentityError
+
+import pypi_attestations._cli
 from pypi_attestations._cli import (
     _logger,
     _validate_files,
     get_identity_token,
     main,
 )
 from pypi_attestations._impl import Attestation
-from sigstore.oidc import IdentityError
 
 ONLINE_TESTS = "CI" in os.environ or "TEST_INTERACTIVE" in os.environ
 online = pytest.mark.skipif(not ONLINE_TESTS, reason="online tests not enabled")

test/test_impl.py

@@ -7,7 +7,6 @@
 from typing import Any
 
 import pretend
-import pypi_attestations._impl as impl
 import pytest
 import sigstore
 from pydantic import TypeAdapter, ValidationError
@@ -17,6 +16,8 @@
 from sigstore.sign import SigningContext
 from sigstore.verify import Verifier, policy
 
+import pypi_attestations._impl as impl
+
 ONLINE_TESTS = "CI" in os.environ or "TEST_INTERACTIVE" in os.environ
 
 online = pytest.mark.skipif(not ONLINE_TESTS, reason="online tests not enabled")