v3.6.0

Added

• API: The DSSE Envelope class now performs automatic validation
  (#1211)

• API: Added signature property to Envelope class for accessing raw
  signature bytes (#1211)

• Signed timestamps embedded in bundles are now automatically verified
  against Timestamp Authorities provided within the Trusted Root ([#1206]
  (#1206))

• Bundles are now generated with signed timestamps when signing if the
  Trusted Root contains one or more Timestamp Authorities
  (#1216)

Removed

• Support for "detached" SCTs has been fully removed, aligning
  sigstore-python with other sigstore clients
  (#1236)

Fixed

• Fixed a CLI parsing bug introduced in 3.5.1 where a warning about
  verifying legacy bundles was never shown
  (#1198)

• Strengthened the requirement that an inclusion promise is present
  if no other source of signed time is present
  (#1247)