Pull in pygobject as a Debian package dependency

Necessary for GTK print dialog

debian/control

@@ -13,10 +13,10 @@ Depends: ${shlibs:Depends}, ${misc:Depends}, python3, python3-pyqt5, python3-pyq
 Description: securedrop client for qubes workstation
 
 Package: securedrop-export
-Architecture: all
+Architecture: amd64
 Depends: ${misc:Depends}, python3, udisks2, cups, cups-ipp-utils, printer-driver-brlaser, printer-driver-hpcups,
- avahi-daemon, system-config-printer, xpp, libcups2, gnome-disk-utility, libreoffice,
- desktop-file-utils, shared-mime-info, libfile-mimeinfo-perl
+ avahi-daemon, system-config-printer, libcups2, gnome-disk-utility, libreoffice,
+ desktop-file-utils, shared-mime-info, libfile-mimeinfo-perl, gir1.2-gtk-4.0
 Description: Submission export scripts for SecureDrop Workstation
  This package provides scripts used by the SecureDrop Qubes Workstation to
  export submissions from the client to external storage, via the sd-export

debian/setup-venv.sh

@@ -3,7 +3,7 @@
 set -euxo pipefail
 
 NAME=$1
-if [[ $NAME == "client" ]]; then
+if [[ $NAME == "client" || $NAME == "export" ]]; then
     VENV_ARGS="--system-site-packages"
 else
     VENV_ARGS=""

export/pyproject.toml

@@ -11,6 +11,15 @@ python = "^3.11"
 pexpect = "^4.9.0"
 
 [tool.poetry.group.dev.dependencies]
+# In production these two are installed using a system package
+# so match those versions exactly
+pygobject = [
+    {version = "=3.42.2", python = ">=3.11"}, # bookworm
+]
+pycairo = [
+    {version = "=1.20.1", python = ">=3.11"}, # bookworm
+]
+
 mypy = "^1.13.0"
 types-setuptools = "^75.2.0"
 pytest = "^8.3.3"

pyproject.toml

@@ -10,6 +10,7 @@ license = "AGPLv3+"
 
 [tool.poetry.dependencies]
 python = "^3.11"
+pygobject = "^3.50.0"
 
 [tool.poetry.group.dev.dependencies]
 ruff = "^0.6.4"