https://gnupg.org/ftp/gcrypt/gnupg/
"GnuPG 2.4.x is the current stable branch of GnuPG"
This could be problematic for Homebrew's gnupg 2.5 release, because a Hombrew maintainer suggests keeping a "livecheck" in the 2.5 package for even-numbered versions.
| Status | Assigned | Task | ||
|---|---|---|---|---|
| Open | None | T8006 2.4 » 2.5 stable mentions | ||
| Resolved | • werner | T8007 FTP website displays 2.4 stable |
Please use the the swdb.lst which has all the version info. The website is actually build using this info. Well, except for the README file in the FTP section. I will update that too.
There is tool in the gnupg tree build-aux/getswdb.sh which does the download and verification of swdb.lst. The version numbers are based on tags. The stable version has the tag gnupg26 and currently these entries:
gnupg26_ver 2.5.16 gnupg26_date 2025-12-30 gnupg26_size 8109k gnupg26_sha1 3acefeef08c82a4d4a8ba36f95c2986fb925d359 gnupg26_sha2 05144040fedb828ced2a6bafa2c4a0479ee4cceacf3b6d68ccc75b175ac13b7e gnupg26_branch master gnupg26_w32_ver 2.5.16_20251230 gnupg26_w32_date 2025-12-30 gnupg26_w32_size 5571k gnupg26_w32_sha1 250e1d3c3b4924188e6457a4c1f0d33ff2b2fe9e gnupg26_w32_sha2 f685641aff82bab5c5218867b63b97f90f6e88c66a77b40aa38cf4d0ce8f7cdc gnupg26_w32_ssiz 14712k
You do not need to use this tool but you can download it with outher tools. Just make sure that the swdb.lst.sig show a valid signature from one of our keys.
Thanks, I'll use even-numbered minor checks against the tags "gnupgXX_ver" in https://versions.gnupg.org/swdb.lst
Thanks. Could you please clarify if the even-numbered minor version (2.2.x, 2.4.x, 2.6.x, etc) rule is still required to identify stable releaases? I'd like to provide clarity to the Homebrew team and avoid any potential ambiguity