GitLab extends Omnibus package signing key expiration to 2028

This post details the extension of the Omnibus package signing key's expiration from February 14, 2026, to February 16, 2028. This is a security measure to comply with policies and limit exposure if the key is compromised. The extension is preferred over rotation to minimize disruption for users. Users who validate package signatures need to update their copy of the key. Instructions and links to the public key are provided.