Please create a bug report instead of pointing to a specific commit. Sure the commit is helpful but w/o a bug report we can't track a bug. I'll do it for you this time ;-)

It is trivial append a bogus signature and would thuns inhibit to check the expected signature.

Note that the origin stored for the key is for example required if a key is updated by fingerprint. In that case we don't known from which user ID to take the origin.

Done for all branches,

Not much QA can do here.

Can't find a mail - closing the ticket. Feel free to reopen or send me a mail to werner dot koch at gnupg.org but replace the org by com.

Now also with support for --quick-add-adsk in 2.6. This will work also for gpgme without further changes.

Let us drop the option to select the ADSK and instead take them from the gpg.conf configured ADSK for new keys. Thus a simple dialog with a confirmation will be sufficient. We add some magic to gpgme to allow this with the adsk API. This solves the use-case to add ADSK to alread-existsing keys in the same way as they are added to new keys.