diff --git a/python-MarkupSafe.changes b/python-MarkupSafe.changes
index e1967ae..3b4dbdc 100644
--- a/python-MarkupSafe.changes
+++ b/python-MarkupSafe.changes
@@ -1,3 +1,16 @@
+-------------------------------------------------------------------
+Wed Dec  4 23:21:41 UTC 2024 - Matej Cepl <mcepl@cepl.eu>
+
+- The test suite survives without
+  ca-certificates-mozilla-prebuilt now, so we can remove BR (and
+  avoid deadly cycles).
+
+-------------------------------------------------------------------
+Thu Jul 11 14:26:38 UTC 2024 - Dirk Müller <dmueller@suse.com>
+
+- add buildignores to break buildcycle over
+  p11-kit/dbus-1/systemd:mini/python-MarkupSafe
+
 -------------------------------------------------------------------
 Sun Feb  4 10:45:37 UTC 2024 - Dirk Müller <dmueller@suse.com>
 
diff --git a/python-MarkupSafe.spec b/python-MarkupSafe.spec
index c2f0d5a..8f31778 100644
--- a/python-MarkupSafe.spec
+++ b/python-MarkupSafe.spec
@@ -42,7 +42,10 @@ Implements a unicode subclass that supports HTML strings. This can be used to
 safely encode strings for dynamically generated web pages.
 
 %prep
-%setup -q -n MarkupSafe-%{version}
+%autosetup -p1 -n MarkupSafe-%{version}
+
+# Upstream changed the Python package metadata to require Python 3.7, but the tests pass on Python 3.6.
+sed -i -e '/^python_requires =/s/3\.7/3\.6/' setup.cfg
 
 %build
 export CFLAGS="%{optflags}"
@@ -52,10 +55,6 @@ export CFLAGS="%{optflags}"
 %pyproject_install
 %python_expand %fdupes %{buildroot}%{$python_sitearch}
 %python_expand rm %{buildroot}%{$python_sitearch}/markupsafe/_speedups.c
-# Upstream changed the Python package metadata to require Python 3.7, but the tests pass on Python 3.6.
-%if %python_version_nodots == 36
-%python_expand sed 's/Requires-Python: >=3.7/Requires-Python: >=3.6/' -i %{buildroot}%{python_sitearch}/MarkupSafe-%{version}-py3.6.egg-info/PKG-INFO
-%endif
 
 %if %{with test}
 %check