Removal of debsuryorg-archive-keyring

[todeveni]

Frequently asked questions

• I have read Frequently Asked Questions
• I have looked at the list of the existing issues (including closed issues) and searched if my issue has been already reported
• I have tried to resolve the issue myself and will describe what I did in clear and concise manner

Describe the bug
After yesterdays nginx 1.28.0 bump, nothing seems to depend on debsuryorg-archive-keyring package anymore and Debian suggests that is should be removed. And if removed, packages.sury.org repo stops working due to missing GPG key.

The following package was automatically installed and is no longer required:
  debsuryorg-archive-keyring

To Reproduce
Steps to reproduce the behavior:

1. apt update
2. apt upgrade

Expected behavior
Some package (-common?) from nginx and php family should depend on debsuryorg-archive-keyring

Distribution (please complete the following information):

• OS: Debian 12
• Architecture: amd64
• Repository: packages.sury.org

Package(s) (please complete the following information):

debsuryorg-archive-keyring:
  Installed: 2025.03.13
  Candidate: 2025.03.13
  Version table:
 *** 2025.03.13 500
        500 https://mirror.local/repos/nginx bookworm/main amd64 Packages
        500 https://mirror.local/repos/php bookworm/main amd64 Packages
        100 /var/lib/dpkg/status

Package: nginx-common
Version: 1.28.0-1+0~20250426.42+debian12~1.gbpdffa8b
Depends: debconf (>= 0.5) | debconf-2.0, nginx (>= 1.28.0-1+0~20250426.42+debian12~1.gbpdffa8b), nginx (<< 1.28.0-1+0~20250426.42+debian12~1.gbpdffa8b.1~)

Package: php8.3-common
Version: 8.3.20-4+0~20250414.61+debian12~1.gbp1029c4
Depends: php-common (>= 1:81~), ucf, libc6 (>= 2.34), libffi8 (>= 3.4), libssl3 (>= 3.0.0)

[oerdnj]

Yes, that was a plan via #2268

Marking the package as manually installed or not running apt autoremove unattended works.