CHANGELOG: List all API changes WRT trust config

jku · jku · commit 1d45514381cf · 2025-05-13T16:20:11.000+03:00
* Also fix some typos in other changelog entries and remove "API"
  from the rekor trailing slash change (it's not actually a
  sigstore-python API change)

Signed-off-by: Jussi Kukkonen &lt;jkukkonen@google.com&gt;
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -13,19 +13,34 @@ All versions prior to 0.9.0 are untracked.
 * TSA: Changed the Timestamp Authority requests to explicitly use sha256 for message digests.
   [#1373](https://github.com/sigstore/sigstore-python/pull/1373)
 
-* Fixed the certificate calidity period check for Timestamp Authorities (TSA).
-  Certificates need not have and end date, while still requiring a start date.
+* Fixed the certificate validity period check for Timestamp Authorities (TSA).
+  Certificates need not have an end date, while still requiring a start date.
   [#1368](https://github.com/sigstore/sigstore-python/pull/1368)
 
-* API: Make Rekor APIs compatible with Rekor v2 by removing trailing slashes
+* Made Rekor client more compatible with Rekor v2 by removing trailing slashes
   from endpoints ([#1366](https://github.com/sigstore/sigstore-python/pull/1366))
 
 ### Changed
 
+* API:
+  * ClientTrustConfig now provides methods `production()`, `staging()`and `from_tuf()`
+    to get access to current client configuration (trusted keys & certificates,
+    URLs and their validity periods). [#1363](https://github.com/sigstore/sigstore-python/pull/1363)
 * `--trust-config` now requires a file with SigningConfig v0.2, and is able to fully
   configure the used Sigstore instance [#1358]/(https://github.com/sigstore/sigstore-python/pull/1358)
-* By default (when `--trust-config` is not used) signing configuration now comes from
-  the TUF repository just like the trust root
+* By default (when `--trust-config` is not used) the whole trust configuration now
+  comes from the TUF repository [#1363](https://github.com/sigstore/sigstore-python/pull/1363)
+
+### Removed
+ * API:
+  * `Issuer.production()` and `Issuer.staging()` have been removed: Use
+    `Issuer()` instead with relevant URL. The current public good production and
+    staging URLs are available via the `ClientTrustConfig` object.
+    [#1363](https://github.com/sigstore/sigstore-python/pull/1363)
+  * `Signingcontext.production()` and `Signingcontext.staging()` have been removed:
+    Use `Signingcontext.from_trust_config()` instead.
+    [#1363](https://github.com/sigstore/sigstore-python/pull/1363)
+
 
 ## [3.6.2]
 
