gpg key used to sign releases has expired

fenrus75 commented 2 months ago

gpg --homedir .gnupg --status-fd 1 --verify /builddir/build/SOURCES/bemenu-0.6.21.tar.gz.asc /builddir/build/SOURCES/bemenu-0.6.21.tar.gz gpg: Signature made Wed 13 Mar 2024 02:28:36 AM UTC gpg: using RSA key 16B6B7CACAF339DECE9F154729317348D687B86B gpg: Good signature from "Bemenu Upstream" [expired] gpg: Note: This key has expired! Primary key fingerprint: 16B6 B7CA CAF3 39DE CE9F 1547 2931 7348 D687 B86B

our distro buildsystem doesn't like us to build packages with "bad" keys for obvious reasons, and in light of all the recent paranoia it might be a good idea to refresh the key/etc

Cloudef commented 2 months ago

Thanks for notifying, I'll try to get it renewed soon.

fenrus75 commented 2 months ago

(oh and thank you for signing your releases, it's appreciated)

Cloudef commented 2 months ago

Should be updated now, might take time to populate

Cloudef / bemenu

gpg key used to sign releases has expired #397