Update gnupg packages

[krnowak]

Built locally.

Closes flatcar/Flatcar#1988

--

• app-alternatives/gpg: [PROD] [DEV]

  • from 0-r2 to 1-r3
  • added IUSE flag 'sequoia'
    • for picking up Sequioa PGP as a GPG implementation
  • added IUSE flag 'freepg'
    • for picking up FreePG as a GPG implementation
  • runtime dependencies:
    • added a weak blocker '!=app-crypt/freepg-2.5.12_p1-r0'
    • added a weak blocker '!=app-crypt/gnupg-2.4.8-r1'
    • added a weak blocker '!=app-crypt/gnupg-2.5.13-r1'
    • added a dependency '>=app-crypt/freepg-2.5.12_p1-r1[nls?,ssl?]' for USE 'freepg?'
    • changes for app-crypt/gnupg with USE conditionals 'reference?':
      • changed version constraint from >=2.4.8-r1 to >=2.4.8-r2
    • added a dependency '>=app-crypt/sequoia-chameleon-gnupg-0.13.1-r3' for USE 'sequoia?'

• app-crypt/gnupg: [PROD] [DEV]

  • from 2.4.8-r2 to 2.5.16
  • fixes CVE-2025-68972, CVE-2025-68973, gnupg-20251228-notdash
    • update: gnupg Flatcar#1988
  • dependencies:
    • changes for dev-libs/libassuan:
      • changed version constraint from >=2.5.0 to >=3.0.0-r1
    • changes for dev-libs/libgcrypt:
      • changed version constraint from >=1.9.1 to >=1.11.0
    • changes for dev-libs/libgpg-error:
      • changed version constraint from >=1.46 to >=1.56
  • runtime dependencies:
    • changes for dev-libs/libassuan:
      • changed version constraint from >=2.5.0 to >=3.0.0-r1
    • changes for dev-libs/libgcrypt:
      • changed version constraint from >=1.9.1 to >=1.11.0
    • changes for dev-libs/libgpg-error:
      • changed version constraint from >=1.46 to >=1.56
  • release notes: https://lists.gnupg.org/pipermail/gnupg-announce/2025q4/000500.html https://lists.gnupg.org/pipermail/gnupg-announce/2024q3/000484.html

• app-crypt/gpgme: [SYSEXT-PODMAN]

  • from 2.0.0 to 2.0.1-r1
  • dependencies:
    • dropped a dependency '>=app-crypt/gnupg-2'
    • added a dependency 'app-alternatives/gpg[reference]' for USE '||'
    • added a dependency 'app-alternatives/gpg[freepg(-)]' for USE '||'
  • runtime dependencies:
    • dropped a dependency '>=app-crypt/gnupg-2'
    • added a dependency 'app-alternatives/gpg[reference]' for USE '||'
    • added a dependency 'app-alternatives/gpg[freepg(-)]' for USE '||'
  • release notes: https://git.gnupg.org/cgi-bin/gitweb.cgi?p=gpgme.git;a=blob_plain;f=NEWS;h=1fd34dbd9143829e9163d402ab0191a9fc6adab2;hb=e4adebe020b07bc47e583817576ce98ca93e9711

• app-crypt/pinentry: [PROD] [DEV]

  • still at 1.3.2-r1
  • no changes

• dev-libs/libassuan: [PROD] [DEV]

  • still at 3.0.0-r1
  • no changes

• dev-libs/libgcrypt: [PROD] [DEV]

  • still at 1.11.2
  • no changes

• dev-libs/libgpg-error: [PROD] [DEV]

  • from 1.56 to 1.57
  • release notes: https://git.gnupg.org/cgi-bin/gitweb.cgi?p=libgpg-error.git;a=blob_plain;f=NEWS;h=52ac1464a0c0af091a3d69e8c5f2f3afa2cc3c9f;hb=39d7b85a7d69975f1dfec5a0add10b4d57dcfc9e

• dev-libs/libksba: [PROD] [DEV]

  • still at 1.6.7
  • no changes

• dev-libs/npth: [PROD] [DEV]

  • still at 1.8
  • added IUSE flag 'verify-sig'
    • support for verifying signatures of downloaded source tarball
  • build dependencies:
    • added a dependency '>=app-portage/gemato-20' for USE 'verify-sig?'
    • added a dependency 'sec-keys/openpgp-keys-gnupg' for USE 'verify-sig?'
    • added a dependency 'app-alternatives/gpg' for USE 'verify-sig?' -> '||'
    • added a dependency 'app-crypt/gnupg[-alternatives(-)]' for USE 'verify-sig?' -> '||'

--

• Changelog entries added in the respective changelog/ directory (user-facing change, bug fix, security fix, update)
• Inspected CI output for image differences: /boot and /usr size, packages, list files for any missing binaries, kernel modules, config files, kernel modules, etc.

[tormath1]

Thanks, it's a regular ::portage-stable update, so if it's build, it's good for me.