GitLab

GPG key used to sign GitLab package repositories' metadata has been extended

Feb 24, 2026Denis Afonso
GPG key used to sign GitLab package repositories' metadata has been extended
SummaryAI, from the source post

This post details the extension of the GPG key used to sign the metadata for GitLab's apt and yum repositories. The key's expiration date has been extended from February 27, 2026, to February 6, 2028. This is a proactive measure to maintain security policies and minimize disruption to users by avoiding a key rotation, which would require all users to update their trusted keys. Users who configured repositories before the extension date are advised to update their key according to documentation.

More from the GitLab Installation and Updates trail