GPG key used to sign GitLab package repositories' metadata has been extended
Feb 24, 2026Denis Afonso

Summary
This post details the extension of the GPG key used to sign the metadata for GitLab's apt and yum repositories. The key's expiration date has been extended from February 27, 2026, to February 6, 2028. This is a proactive measure to maintain security policies and minimize disruption to users by avoiding a key rotation, which would require all users to update their trusted keys. Users who configured repositories before the extension date are advised to update their key according to documentation.