diff --git a/pkgs/development/python-modules/sigstore/default.nix b/pkgs/development/python-modules/sigstore/default.nix
index f4983e93590c5c..2925a534bb5b77 100644
--- a/pkgs/development/python-modules/sigstore/default.nix
+++ b/pkgs/development/python-modules/sigstore/default.nix
@@ -19,6 +19,7 @@
   securesystemslib,
   sigstore-protobuf-specs,
   sigstore-rekor-types,
+  rfc3161-client,
   tuf,
   rfc8785,
   pyasn1,
@@ -27,7 +28,7 @@
 
 buildPythonPackage rec {
   pname = "sigstore-python";
-  version = "3.5.3";
+  version = "3.6.1";
   pyproject = true;
 
   disabled = pythonOlder "3.8";
@@ -36,10 +37,14 @@ buildPythonPackage rec {
     owner = "sigstore";
     repo = "sigstore-python";
     tag = "v${version}";
-    hash = "sha256-pAzS/LU5me3qoJo6EmuSFPDO/lqRDKIl5hjFiysWTdM=";
+    hash = "sha256-BdVX2LWCsMx9r0bDTJjMdrvy4Hqn6hrw9wAcub0nRMk=";
   };
 
-  pythonRelaxDeps = [ "sigstore-rekor-types" ];
+  pythonRelaxDeps = [
+    "sigstore-rekor-types"
+    "rfc3161-client"
+    "sigstore-protobuf-specs"
+  ];
 
   build-system = [ flit-core ];
 
@@ -53,6 +58,7 @@ buildPythonPackage rec {
     pyopenssl
     pyasn1
     rfc8785
+    rfc3161-client
     platformdirs
     requests
     rich
@@ -88,6 +94,7 @@ buildPythonPackage rec {
     "test_trust_root_bundled_get"
     "test_fix_bundle_upgrades_bundle"
     "test_trust_root_tuf_caches_and_requests"
+    "test_regression_verify_legacy_bundle"
   ];
 
   passthru.updateScript = nix-update-script { };