All pull requests

Pull requests

• add timeout to rekor v2, and regression test case

  #1944·EltonChang1 opened Oct 16, 2026·

  ·
  1

• build(deps): bump astral-sh/setup-uv from 10.2.0 to 10.3.0 in the actions group

  dependenciesgithub_actions
  #1943·dependabot[bot] opened Oct 16, 2026Bot·

  ·

• build(deps): bump the minor-and-patch group with 8 updates

  dependenciespython:uv
  #1942·dependabot[bot] opened Oct 15, 2026Bot·

  ·
  1

• build(deps): bump cairosvg from 2.9.0 to 2.9.1

  dependenciespython:uv
  #1940·dependabot[bot] opened Oct 15, 2026Bot·

  ·

• build(deps): bump actions/upload-artifact from 7.0.1 to 7.0.2 in /.github/actions/upload-coverage in the actions group across 1 directory

  dependenciesgithub_actions
  #1937·dependabot[bot] opened Oct 14, 2026Bot·

  ·

• Add bounded request timeouts to Fulcio client

  #1917·ECD5A opened Sep 24, 2026·

  ·
  1

• Improve old version testing

  #1888·jku opened Sep 1, 2026Member·

  ·

• build(deps-dev): bump ruff from 0.15.22 to 0.16.0

  dependenciespython:uv
  #1854·dependabot[bot] opened Jul 30, 2026Bot·

  ·
  8

• verify: match email identities case-insensitively

  #1795·arpitjain099 opened Jun 2, 2026Contributor·

  ·
  1

  5

• chore: improve sigstore-python maintenance path

  #1788·otjdiepluong opened May 25, 2026·

  ·
  1

• fix(sct): return cert_is_ca result in _cert_is_ca

  #1716·xovishnukosuri opened Mar 14, 2026·

  ·

• fix(models): remove dead try/except in ClientTrustConfig.from_tuf

  #1715·xovishnukosuri opened Mar 14, 2026·

  ·
  1

• fix(sign): use stub ASCII value in CSR subject to handle non-ASCII identities

  #1714·xovishnukosuri opened Mar 14, 2026·

  ·
  1

  1

• Remove requests dependency in favor of urllib3

  #1653·woodruffw opened Jan 12, 2026Member·

  ·
  2

  6