Expired key 890C08DB8579162FEE0DF9DB8BEAB4DFCF555EF4 Rafael Gonzaga 2026-07-08

[MikeMcC399]

The key 890C08DB8579162FEE0DF9DB8BEAB4DFCF555EF4 used to sign the Node.js 26.5.1 security update from 2026-07-29 expired already on 2026-07-08

sig cert 8beab4dfcf555ef4 2024-07-08T15:48:49Z 2026-07-08T15:48:49Z

Logs

From docker-node build test for Node.js 26.5.1

#8 7.675 + curl -fsSLO --compressed https://nodejs.org/dist/v26.5.1/node-v26.5.1-linux-x64.tar.xz
#8 7.807 + curl -fsSLO --compressed https://nodejs.org/dist/v26.5.1/SHASUMS256.txt.asc
#8 7.843 + gpg --batch --decrypt --output SHASUMS256.txt SHASUMS256.txt.asc
#8 7.846 gpg: Signature made Wed Jul 29 14:02:46 2026 UTC
#8 7.846 gpg:                using RSA key 890C08DB8579162FEE0DF9DB8BEAB4DFCF555EF4
#8 7.846 gpg: Good signature from "RafaelGSS <rafael.nunu@hotmail.com>" [expired]
#8 7.846 gpg: Note: This key has expired!
#8 7.846 Primary key fingerprint: 890C 08DB 8579 162F EE0D  F9DB 8BEA B4DF CF55 5EF4
#8 7.847 + gpgconf --kill all
#8 7.855 + rm -rf /tmp/tmp.Gl5wihUNIO
#8 7.857 + grep  node-v26.5.1-linux-x64.tar.xz$ SHASUMS256.txt
#8 7.857 + sha256sum -c -
#8 7.883 node-v26.5.1-linux-x64.tar.xz: OK

cc: @RafaelGSS