The GPG key used to sign GitLab package repositories' metadata is changing

What this post added

This post details the rotation of the GPG key used to sign GitLab package repository metadata. The existing key is expiring, and a new key with fingerprint `F640 3F65 44A3 8863 DAA0 B6E0 3F01 618A 5131 2F3F` will be active for two years starting April 6, 2020. Existing users who have configured these repositories will need to add the new public key to avoid package fetching failures. New users configuring repositories for the first time after the change will automatically receive the new key.