github GitHub Changelog ·

GitHub CLI Linux package signing key expires September 5, 2026

securityengineer
breaking patch

The PGP signing key for GitHub CLI's Linux APT and RPM package repositories will expire on September 5, 2026. After this date, new packages and repository metadata will be signed exclusively with a replacement key. Users who installed `gh` from official repositories before April 8, 2026, or manage installations via custom images, must verify their system trusts the replacement key to avoid update interruptions. A keyring containing both the old and new keys was published in April to facilitate this transition.

Maintenance (1)
  • Build from source
Read the original announcement →

https://github.blog/changelog/2026-09-03-github-cli-linux-package-signing-key-expires-september-5

Related releases