gpg 2.5.x returns one fewer signature result than 2.4.x for expired/revoked keys (ostree test regression)

[NIIBE Yutaka]

Hello,

Pritam Srichandan Sahoo wrote:
> Reproduction
> ------------
> - Build ostree (v2026.3) and run tests/test-gpg-verify-result.
> - Note: GPGME resolves which gpg to use via gpgconf, not $PATH.  I made
>   sure "gpgconf --list-components | grep '^gpg:'" pointed at the gpg under
>   test before each run (otherwise the system gpg is silently used and the
>   test falsely passes).

Please run gpg by command line.

    $ cd ostree/tests/gpg-verify-data
    $ YOUR-GPG-1 --status-fd=1 --homedir=. --verify lgpl2.sig lgpl2
    $ YOUR-GPG-2 --status-fd=1 --homedir=. --verify lgpl2.sig lgpl2

And show us the differences.
--