Bump sigstore-python to fix error and prep 0.0.19 (#75)

Author: facutuesca

CHANGELOG.md

@@ -7,6 +7,10 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.0.19]
+
+This is a corrective release for [0.0.18].
+
 ## [0.0.18]
 
 ### Added
@@ -201,7 +205,8 @@ This is a corrective release for [0.0.14].
 
 - Initial implementation
 
-[Unreleased]: https://github.com/trailofbits/pypi-attestation-models/compare/v0.0.18...HEAD
+[Unreleased]: https://github.com/trailofbits/pypi-attestation-models/compare/v0.0.19...HEAD
+[0.0.19]: https://github.com/trailofbits/pypi-attestation-models/compare/v0.0.18...v0.0.19
 [0.0.18]: https://github.com/trailofbits/pypi-attestation-models/compare/v0.0.17...v0.0.18
 [0.0.17]: https://github.com/trailofbits/pypi-attestation-models/compare/v0.0.16...v0.0.17
 [0.0.16]: https://github.com/trailofbits/pypi-attestation-models/compare/v0.0.15...v0.0.16

pyproject.toml

@@ -14,7 +14,7 @@ dependencies = [
     "packaging",
     "pyasn1 ~= 0.6",
     "pydantic >= 2.10.0",
-    "sigstore~=3.4",
+    "sigstore >= 3.5.3, < 3.6",
     "sigstore-protobuf-specs",
 ]
 requires-python = ">=3.9"

src/pypi_attestations/__init__.py

@@ -1,6 +1,6 @@
 """The `pypi-attestations` APIs."""
 
-__version__ = "0.0.18"
+__version__ = "0.0.19"
 
 from ._impl import (
     Attestation,