Re: [PR PATCH] [Merged]: gnupg: adopt, update to 2.3.7.

[leahneukirchen <leahneukirchen@users.noreply.github.com>]

[-- Attachment #1: Type: text/plain, Size: 2715 bytes --]

There's a merged pull request on the void-packages repository

gnupg: adopt, update to 2.3.7.
https://github.com/void-linux/void-packages/pull/38021

Description:
## Test/Stable/LTS/Legacy?!

GnuPG has a few different development branches, and they do change their mind sometimes about what those are. They used to say this:

> We are pleased to announce the availability of a new GnuPG release:
> version 2.3.0.  This release marks the start of public testing releases
> eventually leading to a new stable version 2.4.

Source: https://lists.gnupg.org/pipermail/gnupg-announce/2021q2/000458.html

But with 2.3.3, they changed their mind:

> Three different series of GnuPG are actively maintained:
> 
> - Version 2.3 is the current stable version with a lot of new features
>   compared to 2.2.  This announcement is about the latest release of
>   this series.
> 
> - Version 2.2 is our LTS (long term support) version and guaranteed to
>   be maintained at least until the end of 2024.
>   See https://gnupg.org/download/index.html#end-of-life
> 
> - Version 1.4 is only maintained to allow decryption of very old data
>   which is, for security reasons, not anymore possible with other GnuPG
>   versions.

Source: https://lists.gnupg.org/pipermail/gnupg-announce/2021q4/000466.html

I'd say packaging stable instead of LTS is fine, and if someone really needs LTS then we should have a separate LTS package instead.

<!-- Uncomment relevant sections and delete options which are not applicable -->

#### Testing the changes
- I tested the changes in this PR: **briefly**

So, considering this is a bit of a bigger change I selected `briefly` here, but I did do quite a bit of testing on my machine, and I've not noticed any breakage yet. Encryption/decryption still works, I can still authenticate to servers via ssh, with the key residing on a yubikey being accessed through gnupg-agent, everything good.

<!--
#### New package
- This new package conforms to the [quality requirements](https://github.com/void-linux/void-packages/blob/master/Manual.md#quality-requirements): **YES**|**NO**
-->

<!-- Note: If the build is likely to take more than 2 hours, please add ci skip tag as described in
https://github.com/void-linux/void-packages/blob/master/CONTRIBUTING.md#continuous-integration
and test at least one native build and, if supported, at least one cross build.
Ignore this section if this PR is not skipping CI.
-->
<!--
#### Local build testing
- I built this PR locally for my native architecture, (ARCH-LIBC)
- I built this PR locally for these architectures (if supported. mark crossbuilds):
  - aarch64-musl
  - armv7l
  - armv6l-musl
-->