Release 4.2 (#1670)

* CHANGELOG: Update with changes since 4.1

Signed-off-by: Jussi Kukkonen <jkukkonen@google.com>

* Bump version to 4.2.0

Signed-off-by: Jussi Kukkonen <jkukkonen@google.com>

---------

Signed-off-by: Jussi Kukkonen <jkukkonen@google.com>

Author: jku

CHANGELOG.md

@@ -8,6 +8,8 @@ All versions prior to 0.9.0 are untracked.
 
 ## [Unreleased]
 
+## [4.2.0]
+
 ### Fixed
 
 * Add state validation to OIDC flow to prevent Cross-site request forgery
@@ -16,11 +18,23 @@ All versions prior to 0.9.0 are untracked.
 * verification now ensures that artifact digest documented in bundle and the real digest match
   (this is a bundle consistency check: bundle signature was always verified over real digest)
   ([#1652](https://github.com/sigstore/sigstore-python/pull/1652))
+* Fix issue with Signed Certificate Timestamp parsing where extensions
+  were not allowed by sigstore-python
+  ([1657](https://github.com/sigstore/sigstore-python/pull/1657), [1659](https://github.com/sigstore/sigstore-python/pull/1659))
+
+### Changed
+
+* Update supported public key algorithms
+  ([#1604](https://github.com/sigstore/sigstore-python/pull/1604))
+* trust: Update embedded TUF root
+  ([#1589](https://github.com/sigstore/sigstore-python/pull/1589))
 
 ### Removed
 
 * Removed support for Python 3.9 as it is end-of-life
   ([#1645](https://github.com/sigstore/sigstore-python/pull/1645))
+* Removed unused nonce in Oauth flow
+  ([#1649](https://github.com/sigstore/sigstore-python/pull/1649))
 
 
 ## [4.1.0]
@@ -750,7 +764,9 @@ This is a corrective release for [2.1.1].
 
 
 <!--Release URLs -->
-[Unreleased]: https://github.com/sigstore/sigstore-python/compare/v4.0.0...HEAD
+[Unreleased]: https://github.com/sigstore/sigstore-python/compare/v4.2.0...HEAD
+[4.2.0]: https://github.com/sigstore/sigstore-python/compare/v4.1.0...v4.2.0
+[4.1.0]: https://github.com/sigstore/sigstore-python/compare/v4.0.0...v4.1.0
 [4.0.0]: https://github.com/sigstore/sigstore-python/compare/v3.6.5...v4.0.0
 [3.6.5]: https://github.com/sigstore/sigstore-python/compare/v3.6.4...v3.6.5
 [3.6.4]: https://github.com/sigstore/sigstore-python/compare/v3.6.3...v3.6.4

sigstore/__init__.py

@@ -25,4 +25,4 @@
 * `sigstore.sign`: creation of Sigstore signatures
 """
 
-__version__ = "4.1.0"
+__version__ = "4.2.0"