pyproject: bump protobuf specs (#943)

* pyproject: bump protobuf specs

Signed-off-by: William Woodruff <william@trailofbits.com>

* pyproject: loosen constraint

Signed-off-by: William Woodruff <william@trailofbits.com>

* CHANGELOG: record change

Signed-off-by: William Woodruff <william@trailofbits.com>

* CHANGELOG: prep 2.1.3

Signed-off-by: William Woodruff <william@trailofbits.com>

* sigstore: 2.1.3

Signed-off-by: William Woodruff <william@trailofbits.com>

---------

Signed-off-by: William Woodruff <william@trailofbits.com>

CHANGELOG.md

@@ -8,6 +8,14 @@ All versions prior to 0.9.0 are untracked.
 
 ## [Unreleased]
 
+## [2.1.3]
+
+## Fixed
+
+* Loosened a version constraint on the `sigstore-protobuf-specs` dependency,
+ to ease use in testing environments
+ ([#943](https://github.com/sigstore/sigstore-python/pull/943))
+
 ## [2.1.2]
 
 This is a corrective release for [2.1.1].
@@ -308,7 +316,8 @@ This is a corrective release for [2.1.1].
  ([#351](https://github.com/sigstore/sigstore-python/pull/351))
 
 <!--Release URLs -->
-[Unreleased]: https://github.com/sigstore/sigstore-python/compare/v2.1.2...HEAD
+[Unreleased]: https://github.com/sigstore/sigstore-python/compare/v2.1.3...HEAD
+[2.1.3]: https://github.com/sigstore/sigstore-python/compare/v2.1.2...v2.1.3
 [2.1.2]: https://github.com/sigstore/sigstore-python/compare/v2.1.1...v2.1.2
 [2.1.1]: https://github.com/sigstore/sigstore-python/compare/v2.1.0...v2.1.1
 [2.1.0]: https://github.com/sigstore/sigstore-python/compare/v2.0.1...v2.1.0

pyproject.toml

@@ -35,7 +35,7 @@ dependencies = [
  "requests",
  "rich ~= 13.0",
  "securesystemslib",
- "sigstore-protobuf-specs ~= 0.2.2",
+ "sigstore-protobuf-specs >= 0.2.2, < 0.4",
  # NOTE(ww): Under active development, so strictly pinned.
  "sigstore-rekor-types == 0.0.11",
  "tuf >= 2.1,< 4.0",

sigstore/__init__.py

@@ -25,4 +25,4 @@
 * `sigstore.sign`: creation of Sigstore signatures
 """
 
-__version__ = "2.1.2"
+__version__ = "2.1.3"