gpg: Note: This key has expired!

[sbor23]

Bug Report

What did you do?

Follow the Installation section to install from Github release.

What did you expect to see?

No warnings or errors in the output.

What did you see instead? Under which circumstances?

gpg -u "Operator SDK (release) cncf-operator-sdk@cncf.io" --verify checksums.txt.asc
gpg: assuming signed data in 'checksums.txt'
gpg: Signature made Fri Jun 26 20:52:35 2026 CEST
gpg: using RSA key 8613DB87A5BA825EF3FD0EBE2A859D08BF9886DB
gpg: Good signature from "Operator SDK (release) cncf-operator-sdk@cncf.io" [unknown]
gpg: Note: This key has expired!
Primary key fingerprint: 3B2F 1481 D146 2380 80B3 46BB 0529 96E2 A20B 5C7E
Subkey fingerprint: 8613 DB87 A5BA 825E F3FD 0EBE 2A85 9D08 BF98 86DB

Environment

Ubuntu 24.04

Possible Solution

Additional context

[acornett21]

The key that was updated in the below has been pushed to the keystore.

• GPG signing key expired - blocking releases #7012