v4.5.1

Changed

• Removed the pyasn1 dependency and raised the minimum cryptography version
  from 42 to 47.
  (#1866)
• Certificate chain verification now uses cryptography, removing the
  pyOpenSSL dependency.
  (#1867)
• Switched the build backend from flit_core to uv_build.
  (#1892)

Fixed

• Parsing a malformed in-toto statement now includes the underlying validation
  error, instead of discarding it. StatementBuilder.build() already did this;
  Statement(contents=...) did not, so a rejected digest algorithm, a missing
  field and a bad _type were indistinguishable.
  (#1846)
• Verifier now raises VerificationError when the trusted root contains no
  transparency log instances, instead of leaking a raw IndexError
  (#1880)