Log message:
gnupg2: updated to 2.4.4

Noteworthy changes in version 2.4.4 (2024-01-25)
------------------------------------------------
* gpg: Do not keep an unprotected smartcard backup key on disk.  See
  https://gnupg.org/blog/20240125-smartcard-backup-key.html for a
  security advisory.
* gpg: Allow to specify seconds since Epoch beyond 2038 on 32-bit
  platforms.
* gpg: Fix expiration time when Creation-Date is specified.
* gpg: Add support for Subkey-Expire-Date.
* gpg: Add option --with-v5-fingerprint.
* gpg: Add sub-option ignore-attributes to --import-options.
* gpg: Add --list-filter properties sig_expires/sig_expires_d.
* gpg: Fix validity of re-imported keys.
* gpg: Report BEGIN_ status before examining the input.
* gpg: Don't try to compress a read-only keybox.
* gpg: Choose key from inserted card over a non-inserted
  card.
* gpg: Allow to create revocations even with non-compliant algos.
* gpg: Fix regression in the Revoker keyword of the parameter file.
* gpg: Improve error message for expired default keys.
* gpgsm: Add --always-trust feature.
* gpgsm: Support ECC certificates in de-vs mode.
* gpgsm: Major rewrite of the PKCS#12 parser.
* gpgsm: No not show the pkcs#12 passphrase in debug output.
* keyboxd: Timeout on failure to get the database lock.
* agent: Update the key stubs only if really modified.
* scd: Add support for certain Starcos 3.2 cards.
* scd: Add support for CardOS 5.4 cards.
* scd: Add support for D-Trust 4.1/4.4 cards.
* scd: Add support for Smartcafe Expert 7.0 cards.
* scd: Add a length check for a new PIN.
* tpm: Fix keytotpm handling in the agent.
* tpm: Fixes for the TPM test suite.
* dirmngr: Avoid starting a second instance on Windows via GPGME
  based launching.
* dirmngr: New option --ignore-crl-extensions.
* dirmngr: Support config value "none" to disable the default
  keyserver.
* dirmngr: Implement automatic proxy detection on Windows.
* dirmngr: Fix handling of the HTTP Content-Length.
* dirmngr: Add code to support proxy authentication using the
  Negotiation method on Windows.
* gpgconf: Add commands --lock and --unlock.
* gpgconf: Add keyword socketdir to gpgconf.ctl.
* gpgconf: Adjust the -X command for the new VERSION file format.
* wkd: Use export-clean for gpg-wks-client's --mirror and --create
  commands.
* wkd: Make --add-revocs the default in gpg-wks-client.  New option
  --no-add-revocs.
* Remove duplicated backslashes when setting the homedir.
* Ignore attempts to remove the /dev/null device.
* Improve advisory file lock retry strategy.
* Improve the speedo build system for Unix.

Log message:
*: recursive bump for icu 74.1

Log message:
*: bump for openssl 3

Log message:
gnupg2: fix build w/o ldap. From upstream.

Log message:
gnupg2: updated to 2.4.3

Noteworthy changes in version 2.4.3 (2023-07-04)
------------------------------------------------

* gpg: Set default expiration date to 3 years.  [T2701]

* gpg: Add --list-filter properties "key_expires" and
   "key_expires_d".  [T6529]

* gpg: Emit status line and proper diagnostics for write errors.
  [T6528]

* gpg: Make progress work for large files on Windows.  [T6534]

* gpg: New option --no-compress as alias for -z0.

* gpgsm: Print PROGRESS status lines.  Add new --input-size-hint.
  [T6534]

* gpgsm: Support SENDCERT_SKI for --call-dirmngr.  [rG701a8b30f0]

* gpgsm: Major rewrite of the PKCS#12 parser.  [T6536]

* gpgtar: New option --no-compress.

* dirmngr: Extend the AD_QUERY command.  [rG207c99567c]

* dirmngr: Disable the HTTP redirect rewriting.  [T6477]

* dirmngr: New option --compatibility-flags.  [rGbf04b07327]

* dirmngr: New option --ignore-crl-extensions.  [T6545]

* wkd: Use export-clean for gpg-wks-client's --mirror and --create
  commands.  [rG2c7f7a5a27]

* wkd: Make --add-revocs the default in gpg-wks-client.  New option
  --no-add-revocs.  [rG10c937ee68]

* scd: Make signing work for Nexus cards.  [rGb83d86b988]

* scd: Fix authentication with Administration Key for PIV.
  [rG25b59cf6ce]

Log message:
gnupg2: updated to 2.4.2

Noteworthy changes in version 2.4.2 (2023-05-30)
------------------------------------------------

* gpg: Print a warning if no more encryption subkeys are left over
  after changing the expiration date.  [rGef2c3d50fa]

* gpg: Fix searching for the ADSK key when adding an ADSK.  [T6504]

* gpgsm: Speed up key listings on Windows.  [rG08ff55bd44]

* gpgsm: Reduce the number of "failed to open policy file"
  diagnostics.  [rG68613a6a9d]

* agent: Make updating of private key files more robust and track
  display S/N.  [T6135]

* keyboxd: Avoid longish delays on Windows when listing keys.
  [rG6944aefa3c]

* gpgtar: Emit extra status lines to help GPGME.  [T6497]

* w32: Avoid using the VirtualStore.  [T6403]

Log message:
gnupg2: explicitly --disable-tpm2d to avoid accidental PLIST mismatch.

Log message:
gnupg2: update to version 2.4.1

Changelog:

Noteworthy changes in version 2.4.1
===================================

  * If the ~/.gnupg directory does not exist, the keyboxd is now
    automagically enabled.  [rGd9e7488b17]

  * gpg: New option --add-desig-revoker.  [rG3d094e2bcf]

  * gpg: New option --assert-signer.  [rGc9e95b8dee]

  * gpg: New command --quick-add-adsk and other ADSK features.
    [T6395, https://gnupg.org/blog/20230321-adsk.html]

  * gpg: New list-option "show-unusable-sigs".  Also show
    "[self-signature]" instead of the user-id in key signature
    listings.  [rG103acfe9ca]

  * gpg: For symmetric encryption the default S2K hash is now SHA256.
    [T6367]

  * gpg: Detect already compressed data also when using a pipe.  Also
    detect JPEG and PNG file formats.  [T6332]

  * gpg: New subcommand "openpgp" for --card-edit.  [T6462]

  * gpgsm: Verification of detached signatures does now strip trailing
    zeroes from the input if --assume-binary is used.  [rG2a13f7f9dc]

  * gpgsm: Non-armored detached signature are now created without
    using indefinite form length octets.  This improves compatibility
    with some PDF signature verification software.  [rG8996b0b655]

  * gpgtar: Emit progress status lines in create mode.  [T6363]

  * dirmngr: The LDAP modifyTimestamp is now returned by some
    keyserver commands.  [rG56d309133f]

  * ssh: Allow specification of the order keys are presented to ssh.
    See the man page entry for --enable-ssh-support.  [T5996, T6212]

  * gpg: Make list-options "show-sig-subpackets" work again.
    Fixes regression in 2.4.0.  [rG5a223303d7]

  * gpg: Fix the keytocard command for Yubikeys.  [T6378]

  * gpg: Do not continue an export after a cancel for the primary key.
    [T6093]

  * gpg: Replace the --override-compliance-check hack by a real fix.
    [T5655]

  * gpgtar: Fix decryption with input taken from stdin.  [T6355]

  Release-info: https://dev.gnupg.org/T6454

Log message:
revbump after textproc/icu update

Log message:
Fix PLIST with PKG_OPTIONS=-gnutls.