v3.4.0

Changed

• CLI: When verifying, the --offline flag now fully disables all online
  operations, including routine local TUF repository refreshes
  (#1143)

• sigstore-python's minimum supported Python version is now 3.9

Fixed

• CLI: The sigstore verify subcommands now always check for a matching
  input file, rather than unconditionally falling back to matching on a
  valid sha256:... digest pattern
  (#1152)