minisign-0.12-bp160.1.1

- Bugfix:
  * bugfix: duplicate command-line arguments [7dfdb3c]
  * Add minisign-dup-command-line-args.patch

- Security fix: [gpg.fail/trustcomment]
  * Trusted comment injection (minisign) [6c59875]
  * trim(): only trim trailing \r\n, reject straight \r characters
  * Add minisign-gpg.fail-trustcomment.patch

- Security fix: [gpg.fail/minisign]
  * Trusted comment injection (minisign) [a10dc92]
  * Bail out if the signature file contains unprintable characters
  * Add minisign-gpg.fail-minisign.patch

- Update to version 0.12
  * Libsodium is now an optional dependency. When using the Zig
    toolchain to compile Minisign, you can specify the
  - Dwithout-libsodium flag to build and run without libsodium.
  * Key identifiers are now zero-padded when printed.

- Cleanup spec file
  * Add missing %license to packaging
  * Remove %debug_package

- Switch from deprecated %setup to %autosetup
- Use %cmake_build
- Update to version 0.11
  * For non-interactive usage (CI/CD, etc), encryption of private
    keys can be disabled with the -W switch.
  * A new command, -C was added to change passwords, or remove them
    (when combined with -W).
- Updates from version 0.10
  * Prehashing is now enabled by default, regardless of the input
    size. Support for non-prehashed signatures will eventually be
    removed
  * Legacy signatures can be rejected with the addition of the -H
    flag

- Fix debuginfo generation (set CMAKE_STRIP to false)
- Update to version 0.9
  * New option: -R to recover the public key from a secret key.
  * Error messages have been improved.
  * Key derivation is now possible on devices with limited memory.

- clean up spec file

- added upstream.patch
  * Add the "-R" option (re-create pubkey from secret key)

- updated to 0.8
  * Multiple files can now be signed at once
  * Support for HaikuOS was added
  * The command-line switch to use custom file names when generating
    key pairs didn't work properly; this has been fixed

- initial package, version 0.7