https://github.com/Talinx/jp2a/releases/tag/v1.3.2

https://github.com/Talinx/jp2a/releases/tag/v1.3.1

Opted to remove commit pinning and with it unfortunately also signature
verification, as upstream only signs commits, not tags. I think the
improved maintainability is worth loosing the signature verification
for, but I'm open to alternative views.

https://github.com/Talinx/jp2a/tree/v1.3.0

https://archlinux.org/todo/stop-relying-on-virtual-libjpeg-lib32-libjpeg-package/

Signed-off-by: Morten Linderud <foxboron@archlinux.org>

archlinux/devtools!109 (comment 74475)

See https://github.com/cslarsen/jp2a/issues/3