chore: release v0.4.0

[wolfv]

🤖 New release

• sigstore-types: 0.3.0 -> 0.4.0 (✓ API compatible changes)
• sigstore-crypto: 0.3.0 -> 0.4.0 (✓ API compatible changes)
• sigstore-merkle: 0.3.0 -> 0.4.0
• sigstore-tsa: 0.3.0 -> 0.4.0
• sigstore-trust-root: 0.3.0 -> 0.4.0
• sigstore-cache: 0.3.0 -> 0.4.0
• sigstore-rekor: 0.3.0 -> 0.4.0
• sigstore-bundle: 0.3.0 -> 0.4.0
• sigstore-oidc: 0.3.0 -> 0.4.0
• sigstore-fulcio: 0.3.0 -> 0.4.0
• sigstore-verify: 0.3.0 -> 0.4.0 (⚠ API breaking changes)
• sigstore-sign: 0.3.0 -> 0.4.0 (✓ API compatible changes)

⚠ sigstore-verify breaking changes

--- failure inherent_method_missing: pub method removed or renamed ---

Description:
A publicly-visible method or associated fn is no longer available under its prior name. It may have been renamed or removed entirely.
        ref: https://doc.rust-lang.org/cargo/reference/semver.html#item-remove
       impl: https://github.com/obi1kenobi/cargo-semver-checks/tree/v0.45.0/src/lints/inherent_method_missing.ron

Failed in:
  VerificationPolicy::skip_artifact_hash, previously in file /tmp/.tmpYT80KZ/sigstore-verify/src/verify.rs:103

--- failure struct_pub_field_missing: pub struct's pub field removed or renamed ---

Description:
A publicly-visible struct has at least one public field that is no longer available under its prior name. It may have been renamed or removed entirely.
        ref: https://doc.rust-lang.org/cargo/reference/semver.html#item-remove
       impl: https://github.com/obi1kenobi/cargo-semver-checks/tree/v0.45.0/src/lints/struct_pub_field_missing.ron

Failed in:
  field skip_artifact_hash of struct VerificationPolicy, previously in file /tmp/.tmpYT80KZ/sigstore-verify/src/verify.rs:30

Changelog

sigstore-types

0.4.0 - 2025-11-28

Other

• add missing file
• introduce new artifact api

sigstore-crypto

0.4.0 - 2025-11-28

Other

• introduce new artifact api

sigstore-merkle

0.3.0 - 2025-11-28

Other

• more cleanup of functions

sigstore-tsa

0.3.0 - 2025-11-28

Other

• remove more types
• remove certifactePem
• improve sign / verify flow, add conda specific test
• more cleanup of functions

sigstore-trust-root

0.3.0 - 2025-11-28

Other

• add staging trust root
• make all interfaces more type safe
• improve sign / verify flow, add conda specific test
• more cleanup of functions

sigstore-cache

0.3.0 - 2025-11-28

Fixed

• fix clippy warnings

Other

• add simple separation for cache domains
• add sigstore-cache

sigstore-rekor

0.3.0 - 2025-11-28

Other

• add sigstore-cache
• make all interfaces more type safe
• remove more types
• remove certifactePem
• improve sign / verify flow, add conda specific test

sigstore-bundle

0.3.0 - 2025-11-28

Other

• remove more types
• remove certifactePem
• unify certificate encoding
• simplifications by only supporting v03 bundle creation
• improve sign / verify flow, add conda specific test

sigstore-oidc

0.2.0 - 2025-11-27

Other

• remove duplicated types, add license and readme files

sigstore-fulcio

0.3.0 - 2025-11-28

Fixed

• fix clippy warnings

Other

• add sigstore-cache
• remove more types
• encode more certificates properly

sigstore-verify

0.4.0 - 2025-11-28

Other

• introduce new artifact api

sigstore-sign

0.4.0 - 2025-11-28

Other

• introduce new artifact api

---

This PR was generated with release-plz.