Adding metadata

9 files changed, 267 insertions, 449 deletions

diff --git a/app-crypt/certbot/Manifest b/app-crypt/certbot/Manifest
index 6e0ef31003d7..ba3d86270750 100644
--- a/app-crypt/certbot/Manifest
+++ b/app-crypt/certbot/Manifest
@@ -1,4 +1,2 @@
-DIST certbot-4.0.0.gh.tar.gz 2309431 BLAKE2B ddf38b29fe0db9a0434291b85c11f40b89411ae2261951390d542a694996ce89e11100b4a37832271737be55d8c114150bfc56782dc0be673a5d23ada8d91933 SHA512 a34c65c603a5e07ac95143168d651b7d76c3d9403b39b12201d74a23ddbd42019062cb2c0819faae82f2691462324538f1d4db6cdb44c82eddeb4782c0bd86f9
-DIST certbot-5.3.1.gh.tar.gz 2333227 BLAKE2B 43a10de248432da214963c0561301e726815a36227634a323439153bcb5ecac77ae03c601f27b597cf68d3ff031e64db34ab1354547856a29617222873e36f63 SHA512 a68d5bec688f7de7f6de3497f336e74c2d573a2902a8fb2c561127792e460f625ea2e840ea058f68dc568f64c9492d0e896479b48ba1cb61d2fa5c3d8d4ee747
-DIST certbot-5.4.0.gh.tar.gz 2334507 BLAKE2B d4c2ad540856a4bd16fd3da0707f0deb35a22fcb745df8492742e104e7b1767c2bf5d96e34c5a85d9f9b179f27e772fc881786f066a61583357db7c9b2464fe9 SHA512 9e7b25fa8bc1f36e8ba4cc5818200f366d581707a0a36c599b862659a6b992804bd8d5fc6aae013f8e06e850be7d5abecde395cf2900457d2330385a20950498
 DIST certbot-5.5.0.gh.tar.gz 2339278 BLAKE2B 0b0a7402540db95180f1b04497958f2a368fe28fbf31cfb7bcdc8f6960dc6cc1e06b8c2ad5f5e72d221c5d2eba7fe16a4ed0ed9c55bbb0097d5a465a8f460d25 SHA512 5e9bbbdc35fa1a13b777d4323b56a8aaa813faeee42718bf2ba964ae77f2448f48af57545658350fe7a4e48ae36ed33e9e4945c49b5040ef8177fc82667c3870
+DIST certbot-5.6.0.gh.tar.gz 2345701 BLAKE2B 3c726dc351294e93aeecd1b9dfe449ff765d2b2a1bf5d27572ea37311923b1b60c10d80b4f1d845f7b846eb2ae0467d75de7ce1577902fc941a639c28e508db3 SHA512 ee047f8b4c1ca461995b1d5df935316ca11e424dd77223ce49713c550d0e2c8bf8945f774aaa896e9fe7b90b0970997b50fd603113f17bb31f03e2e3d3bc6427
diff --git a/app-crypt/certbot/certbot-4.0.0-r2.ebuild b/app-crypt/certbot/certbot-4.0.0-r2.ebuild
deleted file mode 100644
index 5f5292843480..000000000000
--- a/app-crypt/certbot/certbot-4.0.0-r2.ebuild
+++ /dev/null
@@ -1,223 +0,0 @@
-# Copyright 1999-2026 Gentoo Authors
-# Distributed under the terms of the GNU General Public License v2
-
-EAPI=8
-
-DISTUTILS_USE_PEP517=setuptools
-PYTHON_COMPAT=( python3_{13..14} )
-
-inherit distutils-r1 toolchain-funcs
-
-if [[ "${PV}" == *9999 ]]; then
-	inherit git-r3
-
-	EGIT_REPO_URI="https://github.com/certbot/certbot.git"
-	EGIT_SUBMODULES=()
-	EGIT_CHECKOUT_DIR="${WORKDIR}/${P}"
-else
-	SRC_URI="
-		https://github.com/certbot/certbot/archive/v${PV}.tar.gz
-			-> ${P}.gh.tar.gz
-	"
-	KEYWORDS="amd64 arm arm64 ~ppc64 ~riscv x86"
-fi
-
-DESCRIPTION="Let's Encrypt client to automate deployment of X.509 certificates"
-HOMEPAGE="
-	https://github.com/certbot/certbot
-	https://pypi.org/project/certbot/
-	https://letsencrypt.org/
-"
-
-LICENSE="Apache-2.0"
-SLOT="0"
-
-# acme required for certbot, and then required for modules
-CERTBOT_BASE=(acme certbot)
-# List of "subpackages" from tools/_release.sh (without acme which is already above)
-CERTBOT_MODULES_EXTRA=(
-	apache
-	#dns-cloudflare # Requires missing packages, already in GURU
-	#dns-digitalocean # Requires missing packages, already in GURU
-	dns-dnsimple
-	dns-dnsmadeeasy
-	dns-gehirn
-	dns-google
-	dns-linode
-	dns-luadns
-	dns-nsone
-	dns-ovh
-	dns-rfc2136
-	dns-route53
-	dns-sakuracloud
-	nginx
-)
-
-IUSE="selinux"
-for module in "${CERTBOT_MODULES_EXTRA[@]}"; do
-	IUSE+=" certbot-${module}"
-done
-
-BDEPEND="
-	test? (
-		dev-python/pytest[${PYTHON_USEDEP}]
-		dev-python/typing-extensions[${PYTHON_USEDEP}]
-	)
-"
-
-# See each setup.py for dependencies
-# Also discard the previous related packages
-# except their transition step
-RDEPEND="
-	dev-python/chardet[${PYTHON_USEDEP}]
-	>=dev-python/configargparse-1.5.3[${PYTHON_USEDEP}]
-	>=dev-python/configobj-5.0.6[${PYTHON_USEDEP}]
-	>=dev-python/cryptography-43.0.0[${PYTHON_USEDEP}]
-	>=dev-python/distro-1.0.1[${PYTHON_USEDEP}]
-	>=dev-python/josepy-2.0.0[${PYTHON_USEDEP}]
-	>=dev-python/parsedatetime-2.4[${PYTHON_USEDEP}]
-	>=dev-python/pyopenssl-25.0.0[${PYTHON_USEDEP}]
-	dev-python/pyrfc3339[${PYTHON_USEDEP}]
-	>=dev-python/pytz-2019.3[${PYTHON_USEDEP}]
-	>=dev-python/requests-2.20.0[${PYTHON_USEDEP}]
-	certbot-apache? (
-		dev-python/python-augeas[${PYTHON_USEDEP}]
-	)
-	certbot-dns-dnsimple? (
-		>=dev-python/dns-lexicon-3.14.1[${PYTHON_USEDEP}]
-	)
-	certbot-dns-dnsmadeeasy? (
-		>=dev-python/dns-lexicon-3.14.1[${PYTHON_USEDEP}]
-	)
-	certbot-dns-gehirn? (
-		>=dev-python/dns-lexicon-3.14.1[${PYTHON_USEDEP}]
-	)
-	certbot-dns-google? (
-		>=dev-python/google-api-python-client-1.6.5[${PYTHON_USEDEP}]
-		>=dev-python/google-auth-2.16.0[${PYTHON_USEDEP}]
-	)
-	certbot-dns-linode? (
-		>=dev-python/dns-lexicon-3.14.1[${PYTHON_USEDEP}]
-	)
-	certbot-dns-luadns? (
-		>=dev-python/dns-lexicon-3.14.1[${PYTHON_USEDEP}]
-	)
-	certbot-dns-nsone? (
-		>=dev-python/dns-lexicon-3.14.1[${PYTHON_USEDEP}]
-	)
-	certbot-dns-ovh? (
-		>=dev-python/dns-lexicon-3.15.1[${PYTHON_USEDEP}]
-	)
-	certbot-dns-rfc2136? (
-		>=dev-python/dnspython-2.6.1[${PYTHON_USEDEP}]
-	)
-	certbot-dns-route53? (
-		>=dev-python/boto3-1.15.15[${PYTHON_USEDEP}]
-	)
-	certbot-dns-sakuracloud? (
-		>=dev-python/dns-lexicon-3.14.1[${PYTHON_USEDEP}]
-	)
-	certbot-nginx? (
-		>=dev-python/pyopenssl-25.0.0[${PYTHON_USEDEP}]
-		>=dev-python/pyparsing-2.4.7[${PYTHON_USEDEP}]
-	)
-	selinux? ( sec-policy/selinux-certbot )
-"
-# RDEPEND+="
-#	!<app-crypt/certbot-dns-cloudflare-3.2.0-r100
-#
-# 	>=dev-python/requests-toolbelt-0.3.0[${PYTHON_USEDEP}] # @TODO is still necessary?
-# 	certbot-dns-cloudflare? (
-# 		# Available in GURU
-# 		>=dev-python/cloudflare-2.19[${PYTHON_USEDEP}]
-# 		<dev-python/cloudflare-2.20[${PYTHON_USEDEP}]
-# 	)
-# 	certbot-dns-digitalocean? (
-# 		# Available in GURU
-# 		>=dev-python/digitalocean-1.11[${PYTHON_USEDEP}]
-# 	)
-# "
-
-# Note: "docs" is not an actual directory under "S", they are actually
-# under each modules, see python_compile_all redefinition, but keep
-# this instruction enabled for dependency configuration.
-distutils_enable_sphinx docs \
-	dev-python/sphinx-rtd-theme
-distutils_enable_tests pytest
-
-CERTBOT_DIRS=()
-# Stores temporary modules docs in each subdirectories,
-# will be used for HTML_DOCS
-CERTBOT_DOCS="${T}/docs"
-
-src_prepare() {
-	default
-
-	# set CERTBOT_DIRS
-	local base module
-	for base in "${CERTBOT_BASE[@]}"; do
-		CERTBOT_DIRS+=("${base}")
-	done
-	for module in "${CERTBOT_MODULES_EXTRA[@]}"; do
-		use "certbot-${module}" &&
-			CERTBOT_DIRS+=("certbot-${module}")
-	done
-
-	# Used to build documentation
-	mkdir "${CERTBOT_DOCS}" || die
-
-	# Remove "broken" symbolic link used as documentation.
-	# Copy actual file, removing source breaks wheel building.
-	rm -f "${S}/README.rst"
-	cp "${S}/certbot/README.rst" "${S}/README.rst" || die
-}
-
-python_compile() {
-	local dir
-	for dir in "${CERTBOT_DIRS[@]}"; do
-		pushd "${dir}" > /dev/null || die
-
-		distutils-r1_python_compile
-
-		popd > /dev/null || die
-	done
-}
-
-# Used to build documentation
-python_compile_all() {
-	use doc || return
-
-	local dir
-	for dir in "${CERTBOT_DIRS[@]}"; do
-		# There is no documentation in certbot-apache or certbot-nginx.
-		if has "${dir}" "certbot-apache" "certbot-nginx"; then
-			continue
-		fi
-
-		pushd "${dir}" > /dev/null || die
-
-		sphinx_compile_all
-
-		# Note: discard the `/.` in last entry suffix to avoid error
-		# with `mv` command.
-		mv "${HTML_DOCS[-1]%/.}" "${CERTBOT_DOCS}/${dir}" || die
-
-		popd > /dev/null || die
-	done
-
-	# And finally give the result.
-	# Note: the suffix `/.` here is to discard the holding directory.
-	HTML_DOCS=( "${CERTBOT_DOCS}/." )
-}
-
-python_test() {
-	local -x PYTEST_DISABLE_PLUGIN_AUTOLOAD=1
-
-	tc-has-64bit-time_t || EPYTEST_DESELECT+=(
-		'certbot/_internal/tests/storage_test.py::RenewableCertTests::test_time_interval_judgments'
-	)
-
-	# Change for pytest rootdir is required.
-	cd "${BUILD_DIR}/install$(python_get_sitedir)" || die
-	epytest
-}
diff --git a/app-crypt/certbot/certbot-5.3.1.ebuild b/app-crypt/certbot/certbot-5.3.1.ebuild
deleted file mode 100644
index 9873f078bc78..000000000000
--- a/app-crypt/certbot/certbot-5.3.1.ebuild
+++ /dev/null
@@ -1,221 +0,0 @@
-# Copyright 1999-2026 Gentoo Authors
-# Distributed under the terms of the GNU General Public License v2
-
-EAPI=8
-
-DISTUTILS_USE_PEP517=setuptools
-PYTHON_COMPAT=( python3_{13..14} )
-
-inherit distutils-r1 toolchain-funcs
-
-if [[ "${PV}" == *9999 ]]; then
-	inherit git-r3
-
-	EGIT_REPO_URI="https://github.com/certbot/certbot.git"
-	EGIT_SUBMODULES=()
-	EGIT_CHECKOUT_DIR="${WORKDIR}/${P}"
-else
-	SRC_URI="
-		https://github.com/certbot/certbot/archive/v${PV}.tar.gz
-			-> ${P}.gh.tar.gz
-	"
-	KEYWORDS="~amd64 ~arm ~arm64 ~ppc64 ~riscv ~x86"
-fi
-
-DESCRIPTION="Let's Encrypt client to automate deployment of X.509 certificates"
-HOMEPAGE="
-	https://github.com/certbot/certbot
-	https://pypi.org/project/certbot/
-	https://letsencrypt.org/
-"
-
-LICENSE="Apache-2.0"
-SLOT="0"
-
-# acme required for certbot, and then required for modules
-CERTBOT_BASE=(acme certbot)
-# List of "subpackages" from tools/_release.sh (without acme which is already above)
-CERTBOT_MODULES_EXTRA=(
-	apache
-	#dns-cloudflare # Requires missing packages, already in GURU
-	#dns-digitalocean # Requires missing packages, already in GURU
-	dns-dnsimple
-	dns-dnsmadeeasy
-	dns-gehirn
-	dns-google
-	dns-linode
-	dns-luadns
-	dns-nsone
-	dns-ovh
-	dns-rfc2136
-	dns-route53
-	dns-sakuracloud
-	nginx
-)
-
-IUSE="selinux"
-for module in "${CERTBOT_MODULES_EXTRA[@]}"; do
-	IUSE+=" certbot-${module}"
-done
-
-BDEPEND="
-	test? (
-		dev-python/pytest[${PYTHON_USEDEP}]
-		dev-python/typing-extensions[${PYTHON_USEDEP}]
-	)
-"
-
-# See each setup.py for dependencies
-# Also discard the previous related packages
-# except their transition step
-RDEPEND="
-	>=dev-python/configargparse-1.5.3[${PYTHON_USEDEP}]
-	>=dev-python/configobj-5.0.6[${PYTHON_USEDEP}]
-	>=dev-python/cryptography-43.0.0[${PYTHON_USEDEP}]
-	>=dev-python/distro-1.0.1[${PYTHON_USEDEP}]
-	>=dev-python/josepy-2.0.0[${PYTHON_USEDEP}]
-	>=dev-python/parsedatetime-2.6[${PYTHON_USEDEP}]
-	>=dev-python/pyopenssl-25.0.0[${PYTHON_USEDEP}]
-	dev-python/pyrfc3339[${PYTHON_USEDEP}]
-	>=dev-python/requests-2.20.0[${PYTHON_USEDEP}]
-	certbot-apache? (
-		dev-python/python-augeas[${PYTHON_USEDEP}]
-	)
-	certbot-dns-dnsimple? (
-		>=dev-python/dns-lexicon-3.14.1[${PYTHON_USEDEP}]
-	)
-	certbot-dns-dnsmadeeasy? (
-		>=dev-python/dns-lexicon-3.14.1[${PYTHON_USEDEP}]
-	)
-	certbot-dns-gehirn? (
-		>=dev-python/dns-lexicon-3.14.1[${PYTHON_USEDEP}]
-	)
-	certbot-dns-google? (
-		>=dev-python/google-api-python-client-1.6.5[${PYTHON_USEDEP}]
-		>=dev-python/google-auth-2.16.0[${PYTHON_USEDEP}]
-	)
-	certbot-dns-linode? (
-		>=dev-python/dns-lexicon-3.14.1[${PYTHON_USEDEP}]
-	)
-	certbot-dns-luadns? (
-		>=dev-python/dns-lexicon-3.14.1[${PYTHON_USEDEP}]
-	)
-	certbot-dns-nsone? (
-		>=dev-python/dns-lexicon-3.14.1[${PYTHON_USEDEP}]
-	)
-	certbot-dns-ovh? (
-		>=dev-python/dns-lexicon-3.15.1[${PYTHON_USEDEP}]
-	)
-	certbot-dns-rfc2136? (
-		>=dev-python/dnspython-2.6.1[${PYTHON_USEDEP}]
-	)
-	certbot-dns-route53? (
-		>=dev-python/boto3-1.15.15[${PYTHON_USEDEP}]
-	)
-	certbot-dns-sakuracloud? (
-		>=dev-python/dns-lexicon-3.14.1[${PYTHON_USEDEP}]
-	)
-	certbot-nginx? (
-		>=dev-python/pyopenssl-25.0.0[${PYTHON_USEDEP}]
-		>=dev-python/pyparsing-2.4.7[${PYTHON_USEDEP}]
-	)
-	selinux? ( sec-policy/selinux-certbot )
-"
-# RDEPEND+="
-#	!<app-crypt/certbot-dns-cloudflare-3.2.0-r100
-#
-# 	>=dev-python/requests-toolbelt-0.3.0[${PYTHON_USEDEP}] # @TODO is still necessary?
-# 	certbot-dns-cloudflare? (
-# 		# Available in GURU
-# 		>=dev-python/cloudflare-2.19[${PYTHON_USEDEP}]
-# 		<dev-python/cloudflare-2.20[${PYTHON_USEDEP}]
-# 	)
-# 	certbot-dns-digitalocean? (
-# 		# Available in GURU
-# 		>=dev-python/digitalocean-1.15.0[${PYTHON_USEDEP}]
-# 	)
-# "
-
-# Note: "docs" is not an actual directory under "S", they are actually
-# under each modules, see python_compile_all redefinition, but keep
-# this instruction enabled for dependency configuration.
-distutils_enable_sphinx docs \
-	dev-python/sphinx-rtd-theme
-distutils_enable_tests pytest
-
-CERTBOT_DIRS=()
-# Stores temporary modules docs in each subdirectories,
-# will be used for HTML_DOCS
-CERTBOT_DOCS="${T}/docs"
-
-src_prepare() {
-	default
-
-	# set CERTBOT_DIRS
-	local base module
-	for base in "${CERTBOT_BASE[@]}"; do
-		CERTBOT_DIRS+=("${base}")
-	done
-	for module in "${CERTBOT_MODULES_EXTRA[@]}"; do
-		use "certbot-${module}" &&
-			CERTBOT_DIRS+=("certbot-${module}")
-	done
-
-	# Used to build documentation
-	mkdir "${CERTBOT_DOCS}" || die
-
-	# Remove "broken" symbolic link used as documentation.
-	# Copy actual file, removing source breaks wheel building.
-	rm -f "${S}/README.rst"
-	cp "${S}/certbot/README.rst" "${S}/README.rst" || die
-}
-
-python_compile() {
-	local dir
-	for dir in "${CERTBOT_DIRS[@]}"; do
-		pushd "${dir}" > /dev/null || die
-
-		distutils-r1_python_compile
-
-		popd > /dev/null || die
-	done
-}
-
-# Used to build documentation
-python_compile_all() {
-	use doc || return
-
-	local dir
-	for dir in "${CERTBOT_DIRS[@]}"; do
-		# There is no documentation in certbot-apache or certbot-nginx.
-		if has "${dir}" "certbot-apache" "certbot-nginx"; then
-			continue
-		fi
-
-		pushd "${dir}" > /dev/null || die
-
-		sphinx_compile_all
-
-		# Note: discard the `/.` in last entry suffix to avoid error
-		# with `mv` command.
-		mv "${HTML_DOCS[-1]%/.}" "${CERTBOT_DOCS}/${dir}" || die
-
-		popd > /dev/null || die
-	done
-
-	# And finally give the result.
-	# Note: the suffix `/.` here is to discard the holding directory.
-	HTML_DOCS=( "${CERTBOT_DOCS}/." )
-}
-
-python_test() {
-	local -x PYTEST_DISABLE_PLUGIN_AUTOLOAD=1
-
-	tc-has-64bit-time_t || EPYTEST_DESELECT+=(
-		'certbot/_internal/tests/storage_test.py::RenewableCertTests::test_time_interval_judgments'
-	)
-
-	# Change for pytest rootdir is required.
-	cd "${BUILD_DIR}/install$(python_get_sitedir)" || die
-	epytest
-}
diff --git a/app-crypt/certbot/certbot-5.4.0.ebuild b/app-crypt/certbot/certbot-5.6.0.ebuild
index e5246910f841..49b5d171c970 100644
--- a/app-crypt/certbot/certbot-5.4.0.ebuild
+++ b/app-crypt/certbot/certbot-5.6.0.ebuild
@@ -72,7 +72,7 @@ RDEPEND="
 	>=dev-python/configargparse-1.5.3[${PYTHON_USEDEP}]
 	>=dev-python/configobj-5.0.6[${PYTHON_USEDEP}]
 	>=dev-python/cryptography-43.0.0[${PYTHON_USEDEP}]
-	>=dev-python/distro-1.0.1[${PYTHON_USEDEP}]
+	>=dev-python/distro-1.7.0[${PYTHON_USEDEP}]
 	>=dev-python/josepy-2.0.0[${PYTHON_USEDEP}]
 	>=dev-python/parsedatetime-2.6[${PYTHON_USEDEP}]
 	>=dev-python/pyopenssl-25.0.0[${PYTHON_USEDEP}]
diff --git a/app-crypt/certbot/certbot-9999.ebuild b/app-crypt/certbot/certbot-9999.ebuild
index e5246910f841..49b5d171c970 100644
--- a/app-crypt/certbot/certbot-9999.ebuild
+++ b/app-crypt/certbot/certbot-9999.ebuild
@@ -72,7 +72,7 @@ RDEPEND="
 	>=dev-python/configargparse-1.5.3[${PYTHON_USEDEP}]
 	>=dev-python/configobj-5.0.6[${PYTHON_USEDEP}]
 	>=dev-python/cryptography-43.0.0[${PYTHON_USEDEP}]
-	>=dev-python/distro-1.0.1[${PYTHON_USEDEP}]
+	>=dev-python/distro-1.7.0[${PYTHON_USEDEP}]
 	>=dev-python/josepy-2.0.0[${PYTHON_USEDEP}]
 	>=dev-python/parsedatetime-2.6[${PYTHON_USEDEP}]
 	>=dev-python/pyopenssl-25.0.0[${PYTHON_USEDEP}]
diff --git a/app-crypt/gnupg/Manifest b/app-crypt/gnupg/Manifest
index 3e86c6c68b28..99a7f747f13f 100644
--- a/app-crypt/gnupg/Manifest
+++ b/app-crypt/gnupg/Manifest
@@ -8,3 +8,5 @@ DIST gnupg-2.5.19.tar.bz2 8322515 BLAKE2B 2497ecc9345d7b38d3fd9e5685a1ba047713e9
 DIST gnupg-2.5.19.tar.bz2.sig 119 BLAKE2B 0236943996ae324553f7554efac400e8f540be14b42bebe17c6338d0d3e045cdf62fe8533f4a84c1053a29ee475cd69e40045797857db1d213527134e616d642 SHA512 679163b60d0dd91741b1f6ea39203f919ba19b44784709ae6ea95f546f1c2a2b0e5e59b5cac9b3150b66aba0d5be82648244a2aa80bf7b0f2dba3756b164b68a
 DIST gnupg-2.5.20.tar.bz2 8327674 BLAKE2B 5a2890203cf4ac52d86897ffb104896c5cbc8ab6f088336f423cb539ae0d917e6df0dcb99b8d51d2d6cdc4068e5570e63982e78c14631a332b4fa87ba0ae16bb SHA512 73e5f3020271069421c220871caffcb6ec05c52a8e12d8dcbd214ce2b14a2b22ce0030d9e1fedf25c60ec1077a33630b0a6bd1cc1043fbbaf7083b998113f90f
 DIST gnupg-2.5.20.tar.bz2.sig 119 BLAKE2B fc54197b59aad9cb26cfcef062a25f882cf26e5cf8ca0c9d3672d4501cbe453b3334225291b3d4fbc4a49c7bb52102963a5386e9b59b4ec10a0385fe8be004b6 SHA512 0a54e9df9f1d6aa6d2f5fb841a3ae36d7530d3ab34bc7635892f58020e73e950a420120430206860e5eb4a7dc7b668f03e31eb42e381b25c4bca07f3e5f2f95b
+DIST gnupg-2.5.21.tar.bz2 8351785 BLAKE2B 3d00cb6e7779358886a8bb8710f5e00e43dfed6e4f495c8ae93b653ac7a688f4c622e721f64a657fd48ed2135c378d456e88828a1e0f5745ccf701cfd0b77d47 SHA512 dcc4e976e56411c0dd7309c0cb7e790b409709af55bb93883d257890abe72b17442d6c8fd682fef0e019d70e46a6a5cf860f1ae355a99024ed2aea230de8c0ea
+DIST gnupg-2.5.21.tar.bz2.sig 119 BLAKE2B e5ba3cebef212c5a1ec9f9af11c89898a6bf7076ecbf9fd1a5eca738c721b4225ee3995666b9c2b8b5683f6169ea3a1a7987d537e65d26eaf0d01f7dea79fd3f SHA512 f5364d02d3df2b2d611bbeb22fc66879426fa4e8addb0881410263873165ee31b5f3a20fb9b496d353a62cf1ac6fb4ef3e0ebbc609c246150e7019069f1419e9
diff --git a/app-crypt/gnupg/gnupg-2.5.21.ebuild b/app-crypt/gnupg/gnupg-2.5.21.ebuild
new file mode 100644
index 000000000000..e52a6cf4fa44
--- /dev/null
+++ b/app-crypt/gnupg/gnupg-2.5.21.ebuild
@@ -0,0 +1,221 @@
+# Copyright 1999-2026 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI=8
+
+# Maintainers should:
+# 1. Join the "Gentoo" project at https://dev.gnupg.org/project/view/27/
+# 2. Subscribe to release tasks like https://dev.gnupg.org/T6159
+# (find the one for the current release then subscribe to it +
+# any subsequent ones linked within so you're covered for a while.)
+
+VERIFY_SIG_OPENPGP_KEY_PATH=/usr/share/openpgp-keys/gnupg.asc
+# in-source builds are not supported: https://dev.gnupg.org/T6313#166339
+inherit flag-o-matic out-of-source multiprocessing systemd toolchain-funcs verify-sig
+
+MY_P="${P/_/-}"
+
+DESCRIPTION="The GNU Privacy Guard, a GPL OpenPGP implementation"
+HOMEPAGE="https://gnupg.org/"
+SRC_URI="mirror://gnupg/gnupg/${MY_P}.tar.bz2"
+SRC_URI+=" verify-sig? ( mirror://gnupg/gnupg/${P}.tar.bz2.sig )"
+S="${WORKDIR}/${MY_P}"
+
+LICENSE="GPL-3+"
+SLOT="0"
+KEYWORDS="~alpha ~amd64 ~arm ~arm64 ~hppa ~loong ~m68k ~mips ~ppc ~ppc64 ~riscv ~s390 ~sparc ~x86 ~arm64-macos ~x64-macos ~x64-solaris"
+IUSE="+alternatives bzip2 doc ldap nls readline selinux +smartcard ssl test +tofu tpm tools usb user-socket wks-server"
+RESTRICT="!test? ( test )"
+REQUIRED_USE="test? ( tofu )"
+
+# Existence of executables is checked during configuration
+DEPEND="
+	>=dev-libs/libassuan-3.0.0-r1:=
+	>=dev-libs/libgcrypt-1.11.0:=
+	>=dev-libs/libgpg-error-1.56
+	>=dev-libs/libksba-1.6.3
+	>=dev-libs/npth-1.2
+	virtual/zlib:=
+	bzip2? ( app-arch/bzip2 )
+	ldap? ( net-nds/openldap:= )
+	readline? ( sys-libs/readline:0= )
+	smartcard? ( usb? ( virtual/libusb:1 ) )
+	tofu? ( >=dev-db/sqlite-3.27 )
+	tpm? ( >=app-crypt/tpm2-tss-2.4.0:= )
+	ssl? ( >=net-libs/gnutls-3.2:0= )
+"
+RDEPEND="
+	${DEPEND}
+	nls? ( virtual/libintl )
+	selinux? ( sec-policy/selinux-gpg )
+	wks-server? ( virtual/mta )
+"
+PDEPEND="
+	app-crypt/pinentry
+	alternatives? (
+		app-alternatives/gpg[-freepg(-)]
+	)
+"
+BDEPEND="
+	virtual/pkgconfig
+	doc? ( sys-apps/texinfo )
+	nls? ( sys-devel/gettext )
+	verify-sig? ( sec-keys/openpgp-keys-gnupg )
+"
+
+DOCS=(
+	ChangeLog NEWS README THANKS TODO VERSION
+	doc/FAQ doc/DETAILS doc/HACKING doc/TRANSLATE doc/OpenPGP doc/KEYSERVER
+)
+
+PATCHES=(
+	"${FILESDIR}"/${PN}-2.1.20-gpgscm-Use-shorter-socket-path-lengts-to-improve-tes.patch
+	"${FILESDIR}"/0002-Fix-stub-functions-to-avoid-LTO-linking-bugs-followup.patch
+)
+
+src_prepare() {
+	default
+
+	GNUPG_SYSTEMD_UNITS=(
+		dirmngr.service
+		dirmngr.socket
+		gpg-agent-browser.socket
+		gpg-agent-extra.socket
+		gpg-agent.service
+		gpg-agent.socket
+		gpg-agent-ssh.socket
+	)
+
+	cp "${GNUPG_SYSTEMD_UNITS[@]/#/${FILESDIR}/}" "${T}" || die
+
+	# Inject SSH_AUTH_SOCK into user's sessions after enabling gpg-agent-ssh.socket in systemctl --user mode,
+	# idea borrowed from libdbus, see
+	#   https://gitlab.freedesktop.org/dbus/dbus/-/blob/master/bus/systemd-user/dbus.socket.in#L6
+	#
+	# This cannot be upstreamed, as it requires determining the exact prefix of 'systemctl',
+	# which in turn requires discovery in Autoconf, something that upstream deeply resents.
+	sed -e "/DirectoryMode=/a ExecStartPost=-${EPREFIX}/bin/systemctl --user set-environment SSH_AUTH_SOCK=%t/gnupg/S.gpg-agent.ssh" \
+		-i "${T}"/gpg-agent-ssh.socket || die
+
+	# Since 2.5.3, --supervised is called --deprecated-supervised.  See
+	# https://dev.gnupg.org/rGa019a0fcd8dfb9d1eae5bc991fdd54b7cf55641e
+	sed -i "s/--supervised/--deprecated-supervised/g" "${T}"/*.service || die
+}
+
+my_src_configure() {
+	local myconf=(
+		# --enable-selinux controls ENABLE_SELINUX_HACKS which
+		# prohibits import of secret keys, so doesn't seem desirable
+		# to have that forced on with USE=selinux.
+		$(use_enable bzip2)
+		$(use_enable nls)
+		$(use_enable smartcard scdaemon)
+		$(use_enable ssl gnutls)
+		$(use_enable test all-tests)
+		$(use_enable test tests)
+		$(use_enable tofu)
+		$(use_enable tofu keyboxd)
+		$(use_enable tofu sqlite)
+		$(usex tpm '--with-tss=intel' '--disable-tpm2d')
+		$(use smartcard && use_enable usb ccid-driver || echo '--disable-ccid-driver')
+		$(use_enable wks-server wks-tools)
+		$(use_with ldap)
+		$(use_with readline)
+
+		# Hardcode mailprog to /usr/libexec/sendmail even if it does not exist.
+		# As of GnuPG 2.3, the mailprog substitution is used for the binary called
+		# by wks-client & wks-server; and if it's autodetected but not not exist at
+		# build time, then then 'gpg-wks-client --send' functionality will not
+		# work. This has an unwanted side-effect in stage3 builds: there was a
+		# [R]DEPEND on virtual/mta, which also brought in virtual/logger, bloating
+		# the build where the install guide previously make the user chose the
+		# logger & mta early in the install.
+		--with-mailprog=/usr/libexec/sendmail
+
+		--disable-ntbtls
+		--enable-gpgsm
+		--enable-large-secmem
+
+		CC_FOR_BUILD="$(tc-getBUILD_CC)"
+		GPGRT_CONFIG="${ESYSROOT}/usr/bin/${CHOST}-gpgrt-config"
+
+		$("${S}/configure" --help | grep -o -- '--without-.*-prefix')
+	)
+
+	if use prefix && use usb; then
+		# bug #649598
+		append-cppflags -I"${ESYSROOT}/usr/include/libusb-1.0"
+	fi
+
+	if [[ ${CHOST} == *-solaris* ]] ; then
+		# these somehow are treated as fatal, but Solaris has different
+		# types for getpeername with socket_t
+		append-flags -Wno-incompatible-pointer-types
+		append-flags -Wno-unused-label
+	fi
+
+	# bug #663142
+	if use user-socket; then
+		myconf+=( --enable-run-gnupg-user-socket )
+	fi
+
+	# glib fails and picks up clang's internal stdint.h causing weird errors
+	tc-is-clang && export gl_cv_absolute_stdint_h="${ESYSROOT}"/usr/include/stdint.h
+
+	econf "${myconf[@]}"
+}
+
+my_src_compile() {
+	default
+
+	use doc && emake -C doc html
+}
+
+my_src_test() {
+	export TESTFLAGS="--parallel=$(get_makeopts_jobs)"
+
+	default
+}
+
+my_src_install() {
+	emake DESTDIR="${D}" install
+
+	use tools && dobin tools/{gpgconf,gpgsplit,gpg-check-pattern} tools/make-dns-cert
+
+	if use alternatives; then
+		# rename for app-alternatives/gpg
+		mv "${ED}"/usr/bin/gpg{,-reference} || die
+		mv "${ED}"/usr/bin/gpgv{,-reference} || die
+		mv "${ED}"/usr/share/man/man1/gpg{,-reference}.1 || die
+		mv "${ED}"/usr/share/man/man1/gpgv{,-reference}.1 || die
+	else
+		dosym gpg /usr/bin/gpg2
+		dosym gpgv /usr/bin/gpgv2
+		echo ".so man1/gpg.1" > "${ED}"/usr/share/man/man1/gpg2.1 || die
+		echo ".so man1/gpgv.1" > "${ED}"/usr/share/man/man1/gpgv2.1 || die
+	fi
+
+	use doc && dodoc doc/gnupg.html/*
+}
+
+my_src_install_all() {
+	einstalldocs
+
+	use tools && dobin tools/{convert-from-106,mail-signed-keys,lspgpot}
+	use doc && dodoc doc/*.png
+
+	# Dropped upstream in https://git.gnupg.org/cgi-bin/gitweb.cgi?p=gnupg.git;a=commitdiff;h=eae28f1bd4a5632e8f8e85b7248d1c4d4a10a5ed.
+	dodoc "${FILESDIR}"/README-systemd
+	systemd_douserunit "${GNUPG_SYSTEMD_UNITS[@]/#/${T}/}"
+}
+
+pkg_postinst() {
+	# If /usr/bin/gpg and /usr/bin/gpgv do not exist, provide them.
+	if [[ ! -e ${EROOT}/usr/bin/gpg ]]; then
+		ln -sf -- gpg-reference "${EROOT}"/usr/bin/gpg || die
+	fi
+
+	if [[ ! -e ${EROOT}/usr/bin/gpgv ]]; then
+		ln -sf -- gpgv-reference "${EROOT}"/usr/bin/gpgv || die
+	fi
+}
diff --git a/app-crypt/keysmith/Manifest b/app-crypt/keysmith/Manifest
index 3cb04e6c4c21..e451488c194f 100644
--- a/app-crypt/keysmith/Manifest
+++ b/app-crypt/keysmith/Manifest
@@ -1,2 +1,3 @@
 DIST keysmith-26.04.1.tar.xz 250032 BLAKE2B 9869d6885a28615b3be034470f8e6655338550eea9948dbd2b62e21418344258cbebf5af2ba81076444625c8980e6f611a51ea08060bb6a22b3147116987d4ce SHA512 6c29d1d224a617578a424a4052f5638aaa1d1185467cb269c458f8f1bea4ea824f181f89eff212f1af10750b94b37fd83da15c19cfb8daa3b28162896846dbc7
 DIST keysmith-26.04.2.tar.xz 250376 BLAKE2B a326fe40faa8a6e1d4e5a3ce2f153056c520be3ef7c734f7ea223d4560ae2573c0e92f89c6b9302c3a5b585abf80ea1dc7bc3ede86657dfb1c88149ffd9566de SHA512 e83f9251335ca1ff37b1c929ef4e3359e47ec387b26669aa33e7caef5cb9a8c22a81f61bef72e9c1b0cd75f7ff7c77b80ecb24157ff5e100a646e7f36aeed0be
+DIST keysmith-26.04.3.tar.xz 251188 BLAKE2B 8ac0cc95265863e09ef915d365f1ab105896f54ddfecf4fd7f287330cf645d3191fa032f0dbd372785edbb6a05dd2eaeb83258de93d8a15a24703ec5d8455f22 SHA512 0937e02bfcfd17be15ec65ac88e6228db618061013b1639c73e42bc4142d2d3fdbd972f502af3b540695463bbd44a30f8615d59fdb95beaec9091b0926745e8d
diff --git a/app-crypt/keysmith/keysmith-26.04.3.ebuild b/app-crypt/keysmith/keysmith-26.04.3.ebuild
new file mode 100644
index 000000000000..f89f9de38b67
--- /dev/null
+++ b/app-crypt/keysmith/keysmith-26.04.3.ebuild
@@ -0,0 +1,40 @@
+# Copyright 1999-2026 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI=8
+
+KDE_ORG_CATEGORY="utilities"
+ECM_TEST="true"
+KFMIN=6.22.0
+QTMIN=6.10.1
+inherit ecm gear.kde.org xdg
+
+DESCRIPTION="OTP client for Plasma Mobile and Desktop"
+HOMEPAGE="https://apps.kde.org/keysmith/"
+
+LICENSE="GPL-3+"
+SLOT="0"
+KEYWORDS="~amd64 ~arm64 ~loong ~ppc64 ~x86"
+IUSE=""
+
+COMMON_DEPEND="
+	>=dev-libs/kirigami-addons-1.7.0:6
+	dev-libs/libsodium:=
+	dev-libs/openssl:=
+	>=dev-qt/qtbase-${QTMIN}:6[gui,widgets]
+	>=dev-qt/qtdeclarative-${QTMIN}:6
+	>=dev-qt/qtsvg-${QTMIN}:6
+	>=kde-frameworks/kconfig-${KFMIN}:6
+	>=kde-frameworks/kcoreaddons-${KFMIN}:6
+	>=kde-frameworks/kdbusaddons-${KFMIN}:6
+	>=kde-frameworks/ki18n-${KFMIN}:6
+	>=kde-frameworks/kirigami-${KFMIN}:6
+	>=kde-frameworks/kwindowsystem-${KFMIN}:6
+"
+DEPEND="${COMMON_DEPEND}
+	>=dev-qt/qtbase-${QTMIN}:6[concurrent]
+"
+RDEPEND="${COMMON_DEPEND}
+	>=kde-frameworks/qqc2-desktop-style-${KFMIN}:6
+"
+BDEPEND=">=dev-qt/qttools-${QTMIN}:6[linguist]"