Require a newer version of pysequoia to fix signature validation

dralley · dralley · commit ab9f2041e64f · 2026-04-24T11:24:39.000-04:00
skopeo standalone-verify creates slightly atypical (but legal) PGP
signatures which pysequoia &lt;= 0.1.32 was rejecting (via gpg_verify()
from pulpcore).

We need to declare compatibility with the new version
diff --git a/pyproject.toml b/pyproject.toml
@@ -26,7 +26,7 @@ dependencies = [
   "jsonschema>=4.4,<4.27",
   "pulpcore>=3.73.2,<3.115",
   "pyjwt[crypto]>=2.4,<2.13",
-  "pysequoia==0.1.32"
+  "pysequoia>=0.1.33,<0.2.0"
 ]
 
 [project.urls]

Original file line number	Diff line number	Diff line change
`@@ -26,7 +26,7 @@ dependencies = [`
`26`	`26`	`"jsonschema>=4.4,<4.27",`
`27`	`27`	`"pulpcore>=3.73.2,<3.115",`
`28`	`28`	`"pyjwt[crypto]>=2.4,<2.13",`
`29`		`- "pysequoia==0.1.32"`
	`29`	`+ "pysequoia>=0.1.33,<0.2.0"`
`30`	`30`	`]`
`31`	`31`
`32`	`32`	`[project.urls]`