gnupg 2.5 is a production release now

[abh]

https://lists.gnupg.org/pipermail/gnupg-announce/2025q4/000499.html

https://www.gnupg.org says

We are pleased to announce the availability of a new GnuPG release: Version 2.5.14. This release adds new features and fixes a couple of bugs. New Debian packages are also also availabe; see repos.gnupg.org.

Note that this 2.5 series is fully supported and thus ready for production use. This means we won't break anything but may add some more features before 2.6."

• Have you followed the guidelines for contributing?
• Have you ensured that your commits follow the commit style guide?
• Have you checked that there aren't other open pull requests for the same formula update/change?
• Have you built your formula locally with HOMEBREW_NO_INSTALL_FROM_API=1 brew install --build-from-source <formula>, where <formula> is the name of the formula you're submitting?
• Is your test running fine brew test <formula>, where <formula> is the name of the formula you're submitting?
• Does your build pass brew audit --strict <formula> (after doing HOMEBREW_NO_INSTALL_FROM_API=1 brew install --build-from-source <formula>)? If this is a new formula, does it pass brew audit --new <formula>?

---

[Copilot]

Pull request overview

This PR updates the GnuPG formula to recognize version 2.5.x as a stable production release, following the official announcement that the 2.5 series is now fully supported. The change modifies the livecheck regex pattern to include minor versions ending in 5.

Key Changes

• Modified the livecheck regex to include version 2.5.x by adding "5" to the character class of acceptable minor version endings

[Copilot]

Copilot encountered an error and was unable to review this pull request. You can try again by re-requesting a review.

[samford]

Despite the linked comment and the quotation in the PR description, 2.4 is still referenced as the stable version and the announcement contains indications that 2.5.14 is still a development version. To support that, the download page lists 2.5.14 as the "devel" version, as expected.

This doesn't seem to indicate that upstream has changed their even/odd minor stable/devel versioning approach. The announcement commentary reads to me as, "This is a development release but it's pretty stable even though it isn't a stable release, so don't be afraid to use it in production if you would like."

Unless upstream has explicitly altered their version scheme such that minor versions ending in 5 (e.g., 5, 15, 25, etc.) are stable, changing the livecheck block regex in this way doesn't seem correct to me.

[fxcoudert]

I agree with @samford. Also, the wording of the 2.5.14 release announcement is the same as previous 2.5.x versions, so no reason to change.

Thanks @abh for raising the question and proposing the PR.