Also support older MacOS X, which has no posix_spawn.

@ballapete when you have time, could you also test https://dev.gnupg.org/T5268#142155 on Tiger?

To support old macOS (< 10.12), I think that code should be something like this:

I created T5268, please continue discussion there.

Just for the information, this library of Rust checks if the symbol definition is available (not NULL), and use getentropy in that case.
fall back to /dev/u?random

https://www.unix.com/man-page/mojave/2/getentropy/ says getentropy is available in 10.12 or later.

I realized that it's a bit difficult for macOS to use getentropy.

Please note that we also have a commit rC477355047e5c: mpi/longlong: make use of compiler provided __builtin_ctz/__builtin_clz.

• For Ed25519 private key segfault: see T5267
• For macOS getentropy: see T5268
• For invm failure: see T5269

For a bug which requires more tests (like this one with GnuPG and pinentry), I had a practice to put "Testing" tag.

Note that even after rCce1cbe16992a: Disable non-allowed algorithms in FIPS mode, gcry_md_open won't return an error with disabled algo.

The changelog in https://src.fedoraproject.org/rpms/libgcrypt/c/402a3b5f2eed746bea996c5743c99bec9bbc3487?branch=master

For printing SEXP, it would be good to have this change:

rG47c1c329ed82: agent,ecc: Use of opaque MPI for ECC, fixup 'd'. does the fixup when reading keys.

I describe about rC6f8b1d4cb798: ecc: Consistently handle parameters as unsigned value..

Reading compressed point (in keys) is supported (except for NIST P-224). When curve point is represented in compressed format, it is correctly interpreted now. So, for example, I think that with 1.9.0, gpgsm can handle certificate which uses compressed format in its curve point representation.

D520 is accepted by me.
If you will have another fixes, please go ahead.
Or else, I'll commit the change to master of GnuPG.

rG6850f21d08b2: po: Fix Simplified Chinese Translation. is a fix for adjusting columns; The number means the number of columns.
rGf4a8be0950ea: po: Fix Simplified Chinese Translation. is a fix for:

• SETERROR is a command name of pinentry which should not be translated.
• The message is expected to be displayed in four lines.

Please check following translations:

"do not detach from the console"
"do not use the internal CCID driver"
"do not use a reader's pinpad"

Those are explanation for the options to instruct gpg-agent or scdaemon, not do something.
It's not a text to users.

Sorry, I didn't read your message above, and it's applied and pushed to master, due to exactly same reason (it's so big).
It's easier (at least for me), when it's in git repo.

For D515, I think that there is similar issue, and I received another patch from Debian.

Reviewed D517 and pushed it as rE621446d3c859: po: Update Traditional Chinese Translation..

I did editorial change for meta data.
Also, I fixed the translation of "out of core", even if it's unused (it's comment).

Pushed the change for libgpg-error zh_CN.po.

I think that you don't use PO editor. I'm going to remove mark like ", fuzzy", which should be removed when entering good entry.

Thank you for your effort. I'll review.

Please note that many error messages are defined in: https://dev.gnupg.org/source/libgpg-error/browse/master/po/zh_CN.po
and https://dev.gnupg.org/source/gnupg/browse/master/po/zh_CN.po

For D515, I will also apply it to master.