v0.4.0

What's Changed

In addition to various improvements in functionality, documentation, and testing, v0.4.0 includes signing support as well as the verification and signing API moving from unstable to beta. There may be minor interface changes between now a v1.0.0.

• Add mediatype string builder to bundle package by @puerco in #154
• chore: fix undefined media type error in OCI verification example by @vishal-chdhry in #163
• Use observer timestamp for comparison against certificate chain validity period by @codysoyland in #180
• Add clarifying comments around TUF caching options by @haydentherapper in #173
• Fix verification example by @cmurphy in #194
• Update README and documentation for signing support by @steiza in #203
• Add unit tests for SCT verification by @cmurphy in #204

New Contributors

• @puerco made their first contribution in #154
• @vishal-chdhry made their first contribution in #163
• @cmurphy made their first contribution in #194

Full Changelog: v0.3.0...v0.4.0