I am not familiar with the OBS build process but if the code builds against botan 3 as here https://build.opensuse.org/package/live_build_log/home:AndreasStieger:branches:security:keepassxc/keepassxc/openSUSE_Tumbleweed/x86_64 then any explicit botan 2 requirement in the spec file should be obsolete. Correct?