The GitHub CLI Linux package signing key expires September 5, and stale APT/RPM installs will break on the next release

GitHub Changelog·high signalXBlueskyLinkedInCopy link

GitHub published a changelog entry on 2026-09-03 warning that the current PGP key for the gh Linux package repositories expires Saturday 2026-09-05. Beginning with the first release after that date, APT and RPM repository metadata and newly published RPM packages are signed only with the replacement key. A keyring containing both keys was published in April, so machines that installed gh before 2026-04-08 and never refreshed the keyring are the ones that will fail; remediation details are in cli/cli issue #13118.