v4.3.0

Added

• Issuer.identity_token accepts an optional redirect_port argument to
  accomodate OIDC providers that require pre-registered redirect URIs
  (#1029)

Fixed

• Fix ~60s keep-alive deadlock in browser-based OIDC authentication
  (#1693)
• Avoid over-using connections when signing many artifacts: Use one connection
  per thread (#1732)

Changed

• With Rekor v2 DSSE signing/verification now uses Hashedrekord log entries. This is based on Rekor v2 spec change: sigstore/architecture-docs#63
  (#1776)
• sigstore is now compatible with cryptography 48 and tuf 7
  (#1773)
• Embedded TUF metadata has been updated
  (#1785)