Upgrade GnuPG related software

* Updating multiple components to the latest available version

changelogs/unreleased/3821-investigate-why-commit-verification-doesn-t-work-with-gpgme-versions-1-11-0.yml

+---
+title: Upgrade GnuPG related software
+merge_request: 4525
+author:
+type: changed

config/software/gnupg.rb

@@ -15,13 +15,14 @@
 #
 name 'gnupg'
-default_version '2.2.10'
+default_version '2.2.22'
 dependency 'libassuan'
 dependency 'npth'
 dependency 'libgcrypt'
 dependency 'libksba'
 dependency 'zlib'
+dependency 'bzip2'
 license 'LGPL-2.1'
 license_file 'COPYING.LGPL3'
@@ -29,7 +30,7 @@ license_file 'COPYING.LGPL3'
 skip_transitive_dependency_licensing true
 source url: "https://www.gnupg.org/ftp/gcrypt/gnupg/gnupg-#{version}.tar.bz2",
-       sha256: '799dd37a86a1448732e339bd20440f4f5ee6e69755f6fd7a73ee8af30840c915'
+       sha256: '7c1370565e1910b9d8c4e0fb57b9de34aa062ec7bb91abad5803d791f38d855b'
 relative_path "gnupg-#{version}"

config/software/gpgme.rb

@@ -16,13 +16,11 @@
 name 'gpgme'
-# Note: gpgme versions greater than 1.11.0 were causing some issues when tried
-# to use. Check the comments in https://gitlab.com/gitlab-org/omnibus-gitlab/merge_requests/2747
-# if you are upgrading to 1.11.0 or higher.
-default_version '1.10.0'
+default_version '1.14.0'
 dependency 'libassuan'
 dependency 'gnupg'
+dependency 'zlib'
 license 'LGPL-2.1'
 license_file 'COPYING.LESSER'
@@ -30,12 +28,13 @@ license_file 'COPYING.LESSER'
 skip_transitive_dependency_licensing true
 source url: "https://www.gnupg.org/ftp/gcrypt/gpgme/gpgme-#{version}.tar.bz2",
-       sha256: '1a8fed1197c3b99c35f403066bb344a26224d292afc048cfdfc4ccd5690a0693'
+       sha256: 'cef1f710a6b0d28f5b44242713ad373702d1466dcbe512eb4e754d7f35cd4307'
 relative_path "gpgme-#{version}"
 build do
   env = with_standard_compiler_flags(with_embedded_path)
+  env['CFLAGS'] << ' -std=c99'
   command './configure ' \
     "--prefix=#{install_dir}/embedded --disable-doc --disable-languages", env: env

config/software/libassuan.rb

@@ -15,7 +15,7 @@
 #
 name 'libassuan'
-default_version '2.5.1'
+default_version '2.5.3'
 license 'LGPL-2.1'
 license_file 'COPYING.LIB'
@@ -23,7 +23,7 @@ license_file 'COPYING.LIB'
 skip_transitive_dependency_licensing true
 source url: "https://www.gnupg.org/ftp/gcrypt/libassuan/libassuan-#{version}.tar.bz2",
-       sha256: '47f96c37b4f2aac289f0bc1bacfa8bd8b4b209a488d3d15e2229cb6cc9b26449'
+       sha256: '91bcb0403866b4e7c4bc1cc52ed4c364a9b5414b3994f718c70303f7f765e702'
 dependency 'libgpg-error'

config/software/libgcrypt.rb

@@ -15,7 +15,7 @@
 #
 name 'libgcrypt'
-default_version '1.8.3'
+default_version '1.8.6'
 dependency 'libgpg-error'
@@ -25,7 +25,7 @@ license_file 'COPYING.LIB'
 skip_transitive_dependency_licensing true
 source url: "https://www.gnupg.org/ftp/gcrypt/libgcrypt/libgcrypt-#{version}.tar.bz2",
-       sha256: '66ec90be036747602f2b48f98312361a9180c97c68a690a5f376fa0f67d0af7c'
+       sha256: '0cba2700617b99fc33864a0c16b1fa7fdf9781d9ed3509f5d767178e5fd7b975'
 relative_path "libgcrypt-#{version}"

config/software/libgpg-error.rb

@@ -15,7 +15,7 @@
 #
 name 'libgpg-error'
-default_version '1.32'
+default_version '1.39'
 license 'LGPL-2.1'
 license_file 'COPYING.LIB'
@@ -23,7 +23,7 @@ license_file 'COPYING.LIB'
 skip_transitive_dependency_licensing true
 source url: "https://www.gnupg.org/ftp/gcrypt/libgpg-error/libgpg-error-#{version}.tar.bz2",
-       sha256: 'c345c5e73cc2332f8d50db84a2280abfb1d8f6d4f1858b9daa30404db44540ca'
+       sha256: '4a836edcae592094ef1c5a4834908f44986ab2b82e0824a0344b49df8cdb298f'
 relative_path "libgpg-error-#{version}"

config/software/libksba.rb

@@ -15,7 +15,7 @@
 #
 name 'libksba'
-default_version '1.3.5'
+default_version '1.4.0'
 dependency 'libgpg-error'
@@ -25,7 +25,7 @@ license_file 'COPYING.LGPLv3'
 skip_transitive_dependency_licensing true
 source url: "https://www.gnupg.org/ftp/gcrypt/libksba/libksba-#{version}.tar.bz2",
-       sha256: '41444fd7a6ff73a79ad9728f985e71c9ba8cd3e5e53358e70d5f066d35c1a340'
+       sha256: 'bfe6a8e91ff0f54d8a329514db406667000cb207238eded49b599761bfca41b6'
 relative_path "libksba-#{version}"