[rpms/nss] f43: Update NSS to 3.129.0

A new commit has been pushed.

Repo   : rpms/nss
Branch : f43
Commit : 4b635e9a55c9a2b61459316ec05829f8c29064b1
Author : Krenželok František <fkrenzel@redhat.com>
Date   : 2026-09-14T15:32:09+02:00
Stats  : +22/-10 in 2 file(s)
URL    : https://src.fedoraproject.org/rpms/nss/c/4b635e9a55c9a2b61459316ec05829f8c29064b1?branch=f43

Log:
Update NSS to 3.129.0

---
diff --git a/nss.spec b/nss.spec
index 6f44c2d..14277b0 100644
--- a/nss.spec
+++ b/nss.spec
@@ -1,5 +1,5 @@
 %global nspr_version 4.39.0
-%global nss_version 3.127.0
+%global nss_version 3.129.0
 # NOTE: To avoid NVR clashes of nspr* packages:
 # - reset %%{nspr_release} to 1, when updating %%{nspr_version}
 # - increment %%{nspr_version}, when updating the NSS part only
@@ -7,7 +7,7 @@
 %global nss_release %baserelease
 # use "%%global nspr_release %%[%%baserelease+n]" to handle offsets when
 # release number between nss and nspr are different.
-%global nspr_release %[%baserelease+3]
+%global nspr_release %[%baserelease+4]
 # only need to update this as we added new
 # algorithms under nss policy control
 %global crypto_policies_version 20240521
@@ -128,7 +128,7 @@ Source101:        nspr-config.xml
 # Once the buildroot has been bootstrapped the patch may be removed
 # but it doesn't hurt to keep it.
 Patch4:           iquote.patch
-Patch12:          nss-signtool-format.patch
+
 Patch13:          nss-dso-ldflags.patch
 # fedora disabled dbm by default
 Patch40:          nss-no-dbm-man-page.patch
@@ -137,14 +137,13 @@ Patch40:          nss-no-dbm-man-page.patch
 Patch50:          nss-3.110-dissable_test-ssl_policy_pkix_oscp.patch
 
 # ML-DSA support patches that haven't made it to the 3.118.1 release
-Patch60:          nss-3.118-ml-dsa-leancrypto.patch
-Patch61:          nss-3.118-ml-dsa-tls.patch
+
+
 #Patch62:          nss-3.118-prefer-all-hybrid.patch
 
-Patch65:          nss-3.118-ml-dsa-test-for-sign-verify-pkcs12.patch
-Patch66:          nss-3.118-ml-dsa-tls-test.patch
-Patch67:          nss-3.118-ml-dsa-unittests.patch
-Patch68:          nss-3.123-fix-mldsa-import-regeneration.patch
+
+
+
 
 # Reseed the freebl DRBG in the child after fork(), so forked children do not
 # replay the parent's random stream (mozbz#2056509)
@@ -1098,6 +1097,19 @@ fi
 
 
 %changelog
+* Mon Sep 14 2026 Krenželok František <fkrenzel@redhat.com> - 3.129.0-1
+- Update NSS to 3.129.0
+- Removed patch nss-3.118-ml-dsa-leancrypto.patch
+- Removed patch nss-3.118-ml-dsa-test-for-sign-verify-pkcs12.patch
+- Removed patch nss-3.118-ml-dsa-tls-test.patch
+- Removed patch nss-3.118-ml-dsa-tls.patch
+- Removed patch nss-3.118-ml-dsa-unittests.patch
+- Removed patch nss-3.118-prefer-all-hybrid.patch
+- Removed patch nss-3.123-fix-mldsa-import-regeneration.patch
+- Removed patch nss-3.79-dbtool.patch
+- Removed patch nss-3.89-dangling.patch
+- Removed patch nss-signtool-format.patch
+
 * Fri Aug 28 2026 Frantisek Krenzelok <fkrenzel@redhat.com> - 3.127.0-1
 - Update NSS to 3.127.0
 - DisableTlsConnectDatagram13.ClientCertCallbackBeforeServerFinished

diff --git a/sources b/sources
index 2eec8fb..90f6095 100644
--- a/sources
+++ b/sources
@@ -1,4 +1,4 @@
 SHA512 (blank-cert9.db) = 2f8eab4c0612210ee47db8a3a80c1b58a0b43849551af78c7da403fda3e3d4e7757838061ae56ccf5aac335cb54f254f0a9e6e9c0dd5920b4155a39264525b06
 SHA512 (blank-key4.db) = 8fedae93af7163da23fe9492ea8e785a44c291604fa98e58438448efb69c85d3253fc22b926d5c3209c62e58a86038fd4d78a1c4c068bc00600a7f3e5382ebe7
 SHA512 (nss-3.118-ml-dsa-test-for-sign-verify-pkcs12_files.tar.xz) = c6440f332703ca9a3351be5a35eac42f24b9c114f54137b95691aa353cc329f0fb7016b689b2f976bc6cff66aa62760067f3226efad665a5252f37294a3d12a6
-SHA512 (nss-3.127-with-nspr-4.39.tar.gz) = 97bf752f6dd8dacdfde239112aada46e08baa95134bbc93deb0663d8dcd06cff9fa6cbfbd9c2344c7b7c99d78067797e8c07ada35aff8aefd2091223066df47e
+SHA512 (nss-3.129-with-nspr-4.39.tar.gz) = 0752d2a9f2612035481884ea1928f27e487a1da01a455eeaa161c6532f327c2de9a5246a161d0ea7fec36d89e6710611578f86387c386dbb46718c4743e7ca7c