The GPG key used to sign GitLab package repositories' metadata is changing

This post announces the rotation of the GPG key used to sign the metadata for GitLab omnibus and gitlab-runner package repositories. The existing key (fingerprint 1A4C 919D B987 D435 9396 38B9 1421 9A96 E15E 78F) expires on April 15, 2020. A new key (fingerprint F640 3F65 44A3 8863 DAA0 B6E0 3F01 618A 5131 2F3F) will be active for two years. The change will occur on April 6, 2020. Existing users who have configured these repositories will need to install the new public key to continue fetching packages. New users will automatically receive the new key through the installation scripts. Instructions for updating the key are provided in the official documentation.